summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #21348 from jefferyto/python-3.7.17-openwrt-19.07openwrt-19.07Tianling Shen2023-06-134-23/+23
|\ | | | | [openwrt-19.07] python3: Update to 3.7.17
| * python3: Update to 3.7.17Jeffery To2023-06-124-23/+23
|/ | | | | | | This includes an updated patch for pip, as the bundled pip was also updated with this release. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* Merge pull request #20676 from jefferyto/python-3.7.16-openwrt-19.07Jeffery To2023-03-306-9/+9
|\ | | | | [openwrt-19.07] python3: Update to 3.7.16, refresh patches
| * python3: Update to 3.7.16, refresh patchesJeffery To2023-03-166-9/+9
|/ | | | | | | | | | | | | | | Includes fixes: * 3.7.14: * CVE-2020-10735: Prevent DoS by large int<->str conversions * CVE-2021-28861: http.server: Open Redirection if the URL path starts with // * 3.7.16: * CVE-2022-45061: Slow IDNA decoding with large strings * CVE-2022-37454: Buffer overflow in the _sha3 module * CVE-2015-20107: mailcap.findmatch: document shell command Injection danger in filename parameter Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* bind: bump to 9.16.37Noah Meyerhans2023-01-291-2/+2
| | | | | | | | | | | | | | | | | | | | | | | Fixes multiple CVEs. Upstream changelog is https://ftp.isc.org/isc/bind9/9.16.37/CHANGES CVEs fixed: CVE-2022-3924: Fix serve-stale crash when recursive clients soft quota is reached. CVE-2022-3736: Handle RRSIG lookups when serve-stale is active. CVE-2022-3094: An UPDATE message flood could cause named to exhaust all available memory. This flaw was addressed by adding a new "update-quota" statement that controls the number of simultaneous UPDATE messages that can be processed or forwarded. The default is 100. A stats counter has been added to record events when the update quota is exceeded, and the XML and JSON statistics version numbers have been updated. Signed-off-by: Noah Meyerhans <frodo@morgul.net>
* libwebsockets: fix recursive dependencyJosef Schlehofer2022-10-271-2/+2
| | | | | | | | | | | | | | | | | | | While running `make menuconfig`, it was discovered then there is a recursive dependency like this: tmp/.config-package.in:59138:error: recursive dependency detected! tmp/.config-package.in:59138: symbol PACKAGE_libwebsockets-openssl is selected by PACKAGE_libwebsockets-mbedtls tmp/.config-package.in:59122: symbol PACKAGE_libwebsockets-mbedtls depends on PACKAGE_libwebsockets-openssl It is not possible with the recently added conflicts that two packages (OpenSSL and full variant, which uses OpenSSL as well), which are almost the same provides the same named package libwebsockets as their conflict - Mbed TLS. Fixes: 676c5c72b5eeb583da2603e399fac085fa442c59 ("libwebsockets: OpenSSL and mbedTLS variants should conflict") Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit a4e8cbb89a48729b3c3ad615765549628d495b0f)
* libwebsockets: OpenSSL and mbedTLS variants should conflictJosef Schlehofer2022-10-251-0/+1
| | | | | | | | They provide the same files, but they don't conflict to each other, this means that users can install them side by side. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit 676c5c72b5eeb583da2603e399fac085fa442c59)
* libwebsockets: full variant provides OpenSSLJosef Schlehofer2022-10-251-0/+2
| | | | | | | | | | | | | | For some time, it is not possible to install ttyd and mosquitto-ssl at the same time, so let's solve it that libwebsockets-full provides libwebsockets-openssl. This allows to install ttyd and mosquitto at the same time. Also, we need to add conflict, because we should not have installed libwebsockets-openssl and libwebsockets-full at the same time as they provides the same files. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit 77e682a11c53f4dcd0e76bdea5ee82de77eaacfe)
* nss: disable PKG_BUILD_PARALLELJosef Schlehofer2022-09-261-1/+1
| | | | | | | | | This is similar to commit f303e87a1e0cb384ed7c3ef66752479a4c43afd2 ("nss: update to 3.67") as there is something wrong with NSS build system and otherwise this package fails to compile. Let's compile it single threaded. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* bind: update to version 9.16.33Josef Schlehofer2022-09-251-2/+2
| | | | | | | | | | | Changelog: https://downloads.isc.org/isc/bind9/9.16.33/RELEASE-NOTES-bind-9.16.33.html Fixes: - multiple CVEs (CVE-2022-2795, CVE-2022-3080, CVE-2022-38177, CVE-2022-38178) Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* syslog-ng: update to version 3.38.1Josef Schlehofer2022-09-082-3/+3
| | | | | | | | | | | | | - Release notes: https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.38.1 - Update the configuration file to use version 4.0 as mentioned in the release notes to try the latest changes Fixes: CVE-2022-38725 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit 34b7af9e0859418bb85e7d3ca131101dd912ae53)
* libedit: update to version 20210522-3.1Jan Hak2022-09-071-2/+2
| | | | | Signed-off-by: Jan Hak <jan.hak@nic.cz> (cherry picked from commit 0b8f3ea81a3186f1189def218a3553dea2b572f8)
* libedit: update to version 20210419-3.1Jan Hak2022-09-071-2/+2
| | | | | Signed-off-by: Jan Hak <jan.hak@nic.cz> (cherry picked from commit b0870d792b3fd013137d2071c150248e85262d66)
* knot: update to 3.1.7Jan Hák2022-09-071-2/+2
| | | | | Signed-off-by: Jan Hák <jan.hak@nic.cz> (cherry picked from commit f30da8c572c7f1acf34d60c468a3a1cceafbf426)
* knot: update to 3.1.6Jan Hák2022-09-071-2/+2
| | | | | Signed-off-by: Jan Hák <jan.hak@nic.cz> (cherry picked from commit 4de863e418f80cd52293e1ae0de153dcc2cb7141)
* knot: update to 3.1.5Jan Hák2022-09-071-2/+2
| | | | | Signed-off-by: Jan Hák <jan.hak@nic.cz> (cherry picked from commit 2a56e478f57faad7a4346f5aef843bae517027e7)
* knot: update to 3.1.4Jan Hák2022-09-071-2/+2
| | | | | Signed-off-by: Jan Hák <jan.hak@nic.cz> (cherry picked from commit 60a80b31fbf3585d52b64ab0b9bf5a4aa844a032)
* knot: update to version 3.1.3Jan Hák2022-09-071-2/+2
| | | | | Signed-off-by: Jan Hák <jan.hak@nic.cz> (cherry picked from commit 175087bf250d1e1043ecad1ee352297398816d51)
* knot: update to version 3.1.2Jan Hák2022-09-071-2/+2
| | | | | Signed-off-by: Jan Hák <jan.hak@nic.cz> (cherry picked from commit 2d2f1e56445a4a7fe06aa6ed073964ca607040f9)
* knot: update to version 3.1.1Jan Hak2022-09-071-2/+2
| | | | | Signed-off-by: Jan Hak <jan.hak@nic.cz> (cherry picked from commit 7aee9d130818ab2b21d28b3c2615d678f0417102)
* knot: update to version 3.1.0Michal Vasilek2022-09-072-4/+4
| | | | | | | * refresh patches Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz> (cherry picked from commit 81e0fcb76fd886dd0188d5da341e6fb7c38677c5)
* vim: variants conflict with each otherKarel Kočí2022-08-241-0/+4
| | | | | | | | | | | | | | | | | This adds conflicts between the variants, because they provide the same files, and it should not be possible to install them side by side. Otherwise, it might happen that half files would be from one variant and the other half from the other. Also, adds provides as if you request to install ``vim`` and ``vim-full``, then the request could be satisfied even they collide, because ``vim-full`` provides ``vim`` package. Signed-off-by: Karel Kočí <cynerd@email.cz> Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> [add commit message] (cherry picked from commit 46c058468aeaf7747c2e94e579020aa7f595c649)
* cgi-io: update to latest Git HEADJo-Philipp Wich2022-08-101-4/+4
| | | | | | | 901b0f0 main: fix two one-byte overreads in header_value() Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit 443c6c1c17e29466cc81f44504602d66d993bf86)
* luajit: patch: PPC/e500 SPE: use soft float instead of failingŠimon Bořek2022-08-062-1/+59
| | | | | | | | | | | | | | | | | | | | | | | | | makes LuaJit builds for mpc85xx targets with SPE ISA extension enabled possible Quoting inner commit message: This allows building LuaJit for systems with Power ISA SPE extension[^1] support by using soft float on LuaJit side. While e500 CPU cores support SPE instruction set extension allowing them to perform floating point arithmetic natively, this isn't required. They can function with software floating point to integer arithmetic translation as well, just like FPU-less PowerPC CPUs without SPE support. Therefore I see no need to prevent them from running LuaJit explicitly. [^1]: https://www.nxp.com/docs/en/reference-manual/SPEPEM.pdf Signed-off-by: Pali Rohár <pali@kernel.org> Signed-off-by: Šimon Bořek <simon.borek@nic.cz> (cherry picked from commit a4a484fbca5c185456cf5ac26e6f47c03ca426e9)
* bind: update to version 9.16.31Josef Schlehofer2022-08-021-2/+2
| | | | | | | Release notes: https://downloads.isc.org/isc/bind9/9.16.31/doc/arm/html/notes.html Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* cyrus-sasl: install pkg-config file and fine-tune installed filesMichael Heimpold2022-07-181-3/+5
| | | | | | | | | | | Installing the .pc files helps other programs to detect the presence of libsasl2. While at, reduce the glob pattern a little bit to not include unneeded symlinks. Signed-off-by: Michael Heimpold <mhei@heimpold.de> (cherry picked from commit c9ce769b1aab4abbacaf54fd4074e1ab8fbfd93a)
* postfix: fix download failureMichal Vasilek2022-07-171-1/+1
| | | | | | | | cdn.postfix.johnriley.me serves a certificate for a different domain name. Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz> (cherry picked from commit d4feef97e6ee7b6477d53c28c9b151ae0c8974d8)
* libarchive: fix ext2fs build race error conditionPetr Štetiar2022-07-131-0/+8
| | | | | | | | | | | | | | | | | libarchive looks for ext2fs headers during configure, and if it finds them it will expect to find them during compile, or on the rare occasion when they aren't it will fail: libarchive/archive_entry.c:59:55: fatal error: ext2fs/ext2_fs.h: No such file or directory As we just need headers for some type constants, let's re-use headers from tools/e2fsprogs package which are always available. Reported-by: Adam Dov <adov@maxlinear.com> Suggested-by: Paul Eggleton <paul.eggleton@linux.intel.com> References: https://git.yoctoproject.org/poky/commit/?id=f0b9a7cf9f80be1917e45266fa201f464a28c1e5 Signed-off-by: Petr Štetiar <ynezz@true.cz> (cherry picked from commit 797945dfaa0e7de8d6b0ada472bda63bb27f0cdc)
* Merge pull request #18846 from nemesisdesign/monitoring-openwrt-19Florian Eckert2022-07-040-0/+0
|\ | | | | [19.07] openwisp-monitoring: added 0.1.1
| * openwisp-monitoring: added 0.1.1Federico Capoano2022-07-011-0/+116
| | | | | | | | | | Signed-off-by: Federico Capoano <f.capoano@openwisp.io> (cherry picked from commit 0419a797ae7442dff8a1536de404a2fc38337f2f)
* | haveged: update to 1.9.18Hannu Nyman2022-07-011-2/+2
| | | | | | | | | | | | | | Update haveged to version 1.9.18 Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi> (cherry picked from commit 8579494bbbfaf5c47049e9365ccfb7b553621d15)
* | Merge pull request #18829 from nemesisdesign/openwrt-19.07Florian Eckert2022-07-011-0/+116
|\ \ | |/ |/| [19.07] openwisp-config: update to 1.0.1
| * openwisp-monitoring: added 0.1.1Federico Capoano2022-06-301-0/+116
|/ | | | | Signed-off-by: Federico Capoano <f.capoano@openwisp.io> (cherry picked from commit 0419a797ae7442dff8a1536de404a2fc38337f2f)
* syslog-ng: update to version 3.37.1Josef Schlehofer2022-06-252-3/+3
| | | | | | | | | | - Changelog: https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.37.1 - Bump config version Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit ae7aefe111382630c7046cfb4539b3f1a72ff402)
* Revert "lxc: export systemd cgroups after install"Stijn Tintel2022-06-241-4/+0
| | | | | | | | | | | | | | | | | | The postinst script is sourced during image build, which causes the follow failure: /home/stijn/Development/OpenWrt/openwrt/build_dir/target-x86_64_musl/root-x86/etc/init.d/lxc-auto: line 3: /lib/functions.sh: No such file or directory postinst script ./usr/lib/opkg/info/lxc-auto.postinst has failed with exit code 1 Sourcing /lib/functions.sh is not needed, as /etc/rc.common does so already. Unfortunately removing that line from the init script is not enough to fix the problem. The postinst script should also check IPKG_INSTROOT. As these two changes are unrelated, they should go in separate commits, and the solution to the image build problem is to revert the commit that introduced the breakage. This reverts commit 2cde10b95053bf958a4001fb0a82c4563bf345e2. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* lxc: export systemd cgroups after installMichal Vasilek2022-06-241-0/+4
| | | | | | | | | | | otherwise, a user would have to either manually run /etc/init.d/lxc-auto boot or reboot the system to start using lxc. originally committed in 2cde10b95053bf958a4001fb0a82c4563bf345e2 reverted in 039912dec5d3ba2b0f6f53ab8330ab9fea2f7adf Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz> (cherry picked from commit 7da73565399f915f516c6cdd74a58f984d519e4b)
* bind: update to version 9.16.30Josef Schlehofer2022-06-241-2/+2
| | | | Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* libgd: install pkgconfig fileMichal Vasilek2022-06-231-1/+3
| | | | Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
* luajit: backport softfloat ppc supportRosen Penev2022-06-234-2/+3600
| | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry picked from commit 24c0007ea2561611776e50c8876a7b040ffd6fdc)
* luajit: fix build on macos (ldconfig issue)Sergey V. Lobanov2022-06-222-1/+27
| | | | | | | | fix ldconfig build issue. This patch is a backport from upstream: https://github.com/LuaJIT/LuaJIT/commit/18c9cf7d3788a8f7408df45df92fc4ae3bcc0d80 Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in> (cherry picked from commit 42c4d254552c04f41a2b93811147ef56af45bf9c)
* openldap: drop use of HTTP in favor of HTTPSW. Michael Petullo2022-06-101-3/+2
| | | | | Signed-off-by: W. Michael Petullo <mike@flyn.org> (cherry picked from commit bab2f020eec5524984902c382591fc562b6e08aa)
* beep: change git repository to fix CVE-2018-0492 and CVE-2018-1000532Josef Schlehofer2022-06-102-14/+34
| | | | | | | | | | | | | | | | | 1. Changed Git repository, which is used for Fedora packaging https://github.com/johnath/beep/issues/11#issuecomment-450277122 Fixed CVEs: CVE-2018-0492 - https://nvd.nist.gov/vuln/detail/CVE-2018-0492 CVE-2018-1000532 - https://nvd.nist.gov/vuln/detail/CVE-2018-1000532 2. Fixed SPDX License Identifier 3. Add patch to comment out -D_FORTIFY_SOURCE Otherwise, it can not be built by default. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit 6488eaf2502c75ffc8ac11fffd539f5c070f77c3)
* beep: restore a dependency definition to the previous one on x86 targetYanase Yuki2022-06-101-2/+2
| | | | | | | | | | | Commit 9bcea2de2cf552d544786d1e4b82f55cda7015b1 causes a dependency problem with some out-of-tree packages which expect "DEPENDS:=+kmod-pcspkr". To fix this problem, this commit restores a dependency definition to the previous one on x86 target. Signed-off-by: Yanase Yuki <dev@zpc.sakura.ne.jp> (cherry picked from commit 8b1216fb49dbc4f444606d0fb8c32297d66336c0)
* beep: fix dependency to support non-x86 target and kmod-gpio-beeperYanase Yuki2022-06-101-2/+2
| | | | | | | | | | | | | Beep is a target-independent software that can handle buzzers controlled by kmod-gpio-beeper. This change is useful for some non-x86 enterprise APs and development boards that have a buzzer connected to GPIO. Compile-tested: ath79, ELECOM WAB-I1750-PS, 3fab4ac + device support patch Run-tested: ath79, ELECOM WAB-I1750-PS, 3fab4ac + device support patch Signed-off-by: Yanase Yuki <dev@zpc.sakura.ne.jp> (cherry picked from commit 9bcea2de2cf552d544786d1e4b82f55cda7015b1)
* beep: add missing PKG_MIRROR_HASHYanase Yuki2022-06-101-0/+1
| | | | | Signed-off-by: Yanase Yuki <dev@zpc.sakura.ne.jp> (cherry picked from commit ac52356c0bdb11127013e291ad10add6b44784b2)
* Merge pull request #18696 from BKPepe/netatalk-1907Josef Schlehofer2022-06-082-2/+797
|\ | | | | [19.07] netatalk: re-introduce 3.1.13 and backport pending fixes
| * netatalk: backport pending PR to fix segfaultsŠimon Bořek2022-06-062-1/+796
| | | | | | | | | | | | | | | | | | | | | | | | This commit backports pending PR, which solves segfaults: - https://github.com/Netatalk/Netatalk/pull/174 To fix issues with segfaults described here: - https://github.com/openwrt/packages/issues/18571 - https://github.com/Netatalk/Netatalk/issues/175 Signed-off-by: Šimon Bořek <simon.borek@nic.cz> (cherry picked from commit ab768578cd06364cc9327a1718631d16e8aa3e20)
| * Revert "Revert "netatalk: update to version 3.1.13""Josef Schlehofer2022-06-061-3/+3
|/ | | | | | | | | | | This can be finally re-reverted, so we can use version 3.1.13, which fixes multiple security vulnerabilities, but it segfaults almost immediately. There is currently pending pull request, which fixes this, and multiple users confirmed that it works on different GNU/Linux distributions. This reverts commit bfe255064eeed30d06cbd969e4be36a89d76d0eb. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* Merge pull request #18671 from turris-cz/libxml_2.9.14_backportMichael Heimpold2022-06-025-139/+5
|\ | | | | libxml2: backport 2.9.14 version bump
| * libxml2: update to 2.9.14Michael Heimpold2022-06-021-2/+2
| | | | | | | | | | | | | | | | This fixes CVE-2022-29824. Signed-off-by: Michael Heimpold <mhei@heimpold.de> (cherry picked from commit c12e1cfcab318d0a5b48d63d5952af418e62822e) Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
generated by cgit (git 2.46.0) at 2026-10-12 00:20:12 +0000