aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
| * | | | | | apache: add gettid supportSebastian Kemper2020-02-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | gettid happens to be supported by all glibc, musl and uclibc, but configure cannot detect it when cross-compiling. This adds a configure variable for it. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * | | | | | apr-util: add configure varsSebastian Kemper2020-02-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adds configure variables for features that the compiler or the libc supports and which cannot be detected by apr-util's configure script when cross-compiling. Also removes one call to INSTALL_DIR (no functional change here). Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * | | | | | apr: add configure vars and cachesSebastian Kemper2020-02-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | apr's configure script uses lots of AC_TRY_RUNs and when cross-compiling needs a leg-up. This commit adds more configure variables (and removes one, too). Notable changes: - apr_cv_use_lfs64=yes is removed (again) after having a discussion about it with the musl developers. The conclusion was that _LARGEFILE64_SOURCE is a horrible thing that we don't want and should avoid (hence the removal of the variable, because defining _LARGEFILE64_SOURCE is all it does). - ap_cv_atomic_builtins is set to "yes" for 64-bit platforms. If anybody is interested in enabling this for other targets feel free to send a patch after testing it. - configure doesn't add -lpthread to LIBS when cross-compiling. This is not a problem for musl but might be for other libcs. This commit adds to related variable. - configure caches are added (via patches) for strerror and /dev/zero mmap tests. The former fixes a warning on musl (where strerror returns int instead of a pointer) and the latter is required for pthread pshared mutex apr_lock implementation and cannot be detected during cross-compile either. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * | | | | | apr: bump to 1.7.0Sebastian Kemper2020-02-04
| | |/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | Version bump + patches refresh. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | | | | | Merge pull request #11238 from peter-stadler/ariangRosen Penev2020-02-04
|\ \ \ \ \ \ | | | | | | | | | | | | | | ariang: use new configuration of Nginx
| * | | | | | ariang: use new configuration of NginxPeter Stadler2020-02-04
| |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove the superfluous parts of the uci-defaults file. Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* | | | | | Merge pull request #11248 from ejurgensen/forked-daapd_update_271Rosen Penev2020-02-04
|\ \ \ \ \ \ | | | | | | | | | | | | | | forked-daapd: update to 27.1
| * | | | | | forked-daapd: update to 27.1Espen Jürgensen2020-02-02
| | |_|_|_|/ | |/| | | | | | | | | | | | | | | | Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>
* | | | | | Merge pull request #11247 from micmac1/maria104-CVE-2020-7221Rosen Penev2020-02-04
|\ \ \ \ \ \ | | | | | | | | | | | | | | mariadb: follow up on CVE-2020-7221
| * | | | | | mariadb: follow up on CVE-2020-7221Sebastian Kemper2020-02-04
| | |/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Today CVE-2020-7221 was publicly discussed on oss-sec [1]. MariaDB upstream had not mentioned this CVE in their last release notes. The CVE is related to auth-pam and the possibility of a local mariadb to root user exploit in the mysql_install_db script. Upstream has made amendments to the script, but according to the oss-sec posts the folder permissions were not updated as they should have been. In OpenWrt the script mysql_install_db is actually patched to never run the commands in question. This has been this way since MariaDB 10.4 was made available. Still, the directory permissions set by the postinstall script are too lax. To quote the discoverer of the issue, Matthias Gerstner from Suse, they exhibit "the dangerous situation of a setuid-root binary residing in a directory owned by an unprivileged user". This commit fixes this by changing the permissions to the following: root:mariadb 0750 /usr/lib/mariadb/plugin/auth_pam_tool_dir This way the setuid-root binary is only available to root and the mariadb user, while at the same time the mariadb user has no ownership of the directory. [1] https://seclists.org/oss-sec/2020/q1/55 Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | | | | | Merge pull request #11232 from neheb/lswanRosen Penev2020-02-04
|\ \ \ \ \ \ | | | | | | | | | | | | | | libreswan: fix compilation with musl
| * | | | | | libreswan: fix compilation with muslRosen Penev2020-02-03
| | |_|/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Added missing limits header. This is normally included in fortify-headers, which I have disabled locally. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | Merge pull request #11246 from ja-pa/tor-update-0.4.2.6tripolar2020-02-04
|\ \ \ \ \ \ | |_|/ / / / |/| | | | | tor: update to version 0.4.2.6
| * | | | | tor: update to version 0.4.2.6Jan Pavlinec2020-02-04
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | | | Merge pull request #11233 from neheb/hhgRosen Penev2020-02-04
|\ \ \ \ \ \ | | | | | | | | | | | | | | zerotier: fix compilation with libcxx
| * | | | | | zerotier: fix compilation with libcxxRosen Penev2020-02-03
| | |/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | Missing header. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | nmap: fix compilation with libcxxRosen Penev2020-02-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Missing headers and confusion between std::bind and bind. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | mpd: fix ffmpeg AIFF and AMR supportRosen Penev2020-02-03
|/ / / / / | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | Merge pull request #11145 from jefferyto/aircrack-ng-1.6Rosen Penev2020-02-03
|\ \ \ \ \ | | | | | | | | | | | | aircrack-ng: Update to 1.6
| * | | | | aircrack-ng: Update to 1.6Jeffery To2020-01-28
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | | Merge pull request #11188 from neheb/mpdRosen Penev2020-02-03
|\ \ \ \ \ \ | | | | | | | | | | | | | | mpd changes
| * | | | | | mpd: replace mpg123 with libmadRosen Penev2020-02-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | libmad is almost half the size of libmpg123. The docoding is done with integers instead of floats. Signed-off-by: Rosen Penev <rosenp@gmail.com>
| * | | | | | mpd: fix compilation with uClibc-ngRosen Penev2020-02-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With mpd's build system, it requires either an iconv built into the libc or icu. Since uClibc-ng as configured by OpenWrt currently has no iconv, use icu for it to work around the problem. This is the simplest solution. Added a patch to use boost's rounding functions. They are more appropriate and work with uClibc-ng. Signed-off-by: Rosen Penev <rosenp@gmail.com>
| * | | | | | mpd: update to 0.21.19Rosen Penev2020-02-02
| | |_|/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | Changed URLs to HTTPS. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | Merge pull request #11221 from blocktrron/prom-hostapdEtienne Champetier2020-02-03
|\ \ \ \ \ \ | | | | | | | | | | | | | | prometheus-node-exporter-lua: add hostapd exporter
| * | | | | | prometheus-node-exporter-lua: add hostapd exporterDavid Bauer2020-02-03
| |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This exporter exposes information of the connected stations acquired from hostapd. These contain additional information compared to the existing station exporter, however they require a full build of hostapd / wpad. Signed-off-by: David Bauer <mail@david-bauer.net>
* | | | | | Merge pull request #11212 from adde88/masterRosen Penev2020-02-03
|\ \ \ \ \ \ | | | | | | | | | | | | | | hcxtools: update to latest version
| * | | | | | hcxtools: update to 5.3.0. + Changes to Makefile to include latest binaries ↵Andreas Nilsen2020-02-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | being compiled Signed-off-by: Andreas Nilsen <adde88@gmail.com> hcxdumptool: forgot to add new openssl dependency Signed-off-by: Andreas Nilsen <adde88@gmail.com>
| * | | | | | hcxdumptool: update to 6.0.1Andreas Nilsen2020-02-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Andreas Nilsen <adde88@gmail.com>
* | | | | | | Merge pull request #11189 from neheb/shadRosen Penev2020-02-03
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | shadow: update to 4.8.1
| * | | | | | | shadow: update to 4.8.1Rosen Penev2020-02-02
| | |/ / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixed license information. Removed patch requiring autoreconf and replaced with a configure variable. Removed faulty patch that broke systems without a disabled crypt size hack. Replaced with using a SED command as well as bcrypt, which works in musl. Removed su patch and converted it to a SED command in the Makefile. Added new shadow utilities. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | Merge pull request #11217 from peter-stadler/ariang-nginxRosen Penev2020-02-03
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | ariang: rename nginx configuration file
| * | | | | | | ariang: rename nginx configuration filePeter Stadler2020-02-02
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This makes the ariang-nginx ready for Nginx using the conf.d directory. Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* | | | | | | Merge pull request #11225 from peter-stadler/nginx-utilRosen Penev2020-02-03
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | nginx-util: allow comments in begin of regex
| * | | | | | | nginx-util: allow comments in begin of regexPeter Stadler2020-02-03
| | |_|_|/ / / | |/| | | | | | | | | | | | | | | | | | | Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* | | | | | | Merge pull request #11081 from peter-stadler/nginxRosen Penev2020-02-03
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | nginx: use /etc/nginx/nginx.conf enabling conf.d/
| * | | | | | | nginx: use /etc/nginx/nginx.conf enabling conf.d/Peter Stadler2020-01-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Instead of the default nginx.conf file this file is a small variant without examples that enables the /etc/nginx/conf.d/ directory. It will pull in all configuration files from the conf.d directory. So, other packages can add their server parts in the conf.d directory without modifying the main nginx.conf file (cf. #9860). Changed also the default logging behavior: error_log stderr; # the init forwards it to logd access_log off; See the updated documentation at: https://openwrt.org/docs/guide-user/services/webserver/nginx Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* | | | | | | | Merge pull request #11228 from jefferyto/golang-env-fixesRosen Penev2020-02-03
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | golang: Improve build isolation from user environment
| * | | | | | | | golang: Improve build isolation from user environmentJeffery To2020-02-04
|/ / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Set GOENV=off when building Go compiler and packages, to ignore user's environment configuration file * Set GOCACHE when building host Go * Unset GOTMPDIR, to use the buildroot temp directory instead of temp directories in build_dir Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | | | | Merge pull request #11224 from sartura/sqlite3-updateJosef Schlehofer2020-02-03
|\ \ \ \ \ \ \ \ | |_|/ / / / / / |/| | | | | | | sqlite3: update to version 3.31.1
| * | | | | | | sqlite3: update to version 3.31.1Josip Kelečić2020-02-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Josip Kelečić <josip.kelecic@sartura.hr>
* | | | | | | | Merge pull request #11179 from peter-stadler/django-rest-frameworkRosen Penev2020-02-03
|\ \ \ \ \ \ \ \ | |/ / / / / / / |/| | | | | | | django-restframework: fix by splitting variants
| * | | | | | | django-restframework: fix by splitting variantsPeter Stadler2020-01-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Split python2 and python3 packages and update to newest versions: * python-django-restframework version 3.9.4 using django1 * python3-django-restframework version 3.11.0 using django3 This fixes the issue that the restframework cannot import name 'python_2_unicode_compatible' from 'django.utils.encoding', when using version 3.9.x together with Django 3.y. Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* | | | | | | | dnscrypt-proxy2: update to version 2.0.39Josef Schlehofer2020-02-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | | | | Merge pull request #11223 from gladiac1337/haproxy-2.1.2Rosen Penev2020-02-02
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | haproxy: Update HAProxy to v2.1.2
| * | | | | | | | haproxy: Update HAProxy to v2.1.2Christian Lachner2020-02-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Major version jump from v2.0 to v2.1 - Update haproxy download URL and hash - Add new patches (see https://www.haproxy.org/bugs/bugs-2.1.2.html) - Stop building LUA 5.3 in the haproxy build-process and use liblua5.3 as a dependency instead Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | | | | | | | sane-backends: update to 1.0.29Luiz Angelo Daros de Luca2020-02-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Migrate libusb dependency back to libsane (virtually all useful backends for OpenWrt would need it anyway) - Disabled new usb-record-replay feature (avoid libxml2 dep) - Disabled new escl backend (network-only backend are not too useful for OpenWrt and it requires libcurl, libnetsnmp, libavahi and libxml2) - Workaround sane-daemon/postinst installation on Imagebuild - Enabled backends kvs40xx and mustek_usb2 (fixed upstream) - Fix bigendian compilation (https://gitlab.com/sane-project/backends/-/merge_requests/329) - Fix missing std::round() for uclibc (https://gitlab.com/sane-project/backends/issues/237) - Fixes FS#2685: coldplug was running before usblp was loaded. Now it grants access do usblp when a device using it is plugged. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* | | | | | | | | Merge pull request #11218 from jefferyto/golang-1.13.7Rosen Penev2020-02-02
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | golang: Update to 1.13.7, add PKG_CPE_ID to Makefile
| * | | | | | | | | golang: Update to 1.13.7, add PKG_CPE_ID to MakefileJeffery To2020-02-03
| | |_|_|/ / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This update includes fixes for[1]: * CVE-2020-7919 - doesn't appear to be published publicly yet * CVE-2020-0601 - a Windows-related issue [1]: https://github.com/golang/go/issues?q=milestone%3AGo1.13.7+label%3ACherryPickApproved Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | | | | | libtasn1: updated to 4.16.0Nikos Mavrogiannopoulos2020-02-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Powered by cgit, Themed by Ted Yin.