aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* | | | | | | c-ares: update to 1.16.1Karl Palsson2020-05-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Various fixes, nothing particularly standout as of particular interest to OpenWrt. Full changelog at https://c-ares.haxx.se/changelog.html Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | | | Merge pull request #12208 from jefferyto/python-enable-optimizationsRosen Penev2020-05-18
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | python3: Enable compile-time optimizations
| * | | | | | | python3: Enable compile-time optimizationsJeffery To2020-05-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds the --enable-optimizations configure option (for profile-guided optimization) for both host and target Python, and the --with-lto configure option (for link-time optimization) for target Python (for non-MIPS platforms). Currently, compiling Python with LTO leads to link errors on mips and mipsel. (Compiling with LTO appears to succeed on mips64 but there is only one mips64 target available for convenient testing.) This also cleans up the host and target configure options: * Sort options/variables - Alphabetically - Flags/options before child-process environment variables - Group options by type (enable/disable/with/without) - Static options/variables before conditional ones * Remove the prefix/dir options, as they are the same as the defaults set by the build system * Remove --with-threads, as it is no longer a valid option (threads are always enabled) Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | | | | libmicrohttpd: build with PICRosen Penev2020-05-18
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes compilation when linking statically. Made URL HTTPS. Moved description section for consistency between packages. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | Merge pull request #12192 from lucize/libreswipv6Rosen Penev2020-05-17
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | libreswan: various fixes
| * | | | | | | libreswan: various fixesLucian Cristian2020-05-17
| | |_|/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | start if kernel has missing ipv6 support add libcap-ng support fix some errors displayed on syslog Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | | Merge pull request #12205 from micmac1/mar-master-10413Hannu Nyman2020-05-18
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | mariadb: minor verison bump with CVE fixes
| * | | | | | | mariadb: bump to 10.4.13Sebastian Kemper2020-05-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upstream added define INSTALL_PAMDATADIR, so hardcoded path is gone. Fixes: CVE-2020-2752 CVE-2020-2812 CVE-2020-2814 CVE-2020-2760 Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * | | | | | | libmariadb: bump to 3.1.8Sebastian Kemper2020-05-17
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | | | | | | collectd: Improve sqm_collectd error reportingKevin Darbyshire-Bryant2020-05-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* | | | | | | Merge pull request #12091 from pprindeville/syslog-ng-restore-reloadJosef Schlehofer2020-05-17
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | syslog-ng: restore service "reload" to actually working
| * | | | | | | syslog-ng: restore service "reload" to actually workingPhilip Prindeville2020-05-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commit 44a16ca broke syslog-ng such that it no longer works with logrotate, for example. Yes, you can manually stop and start the service, but (1) you shouldn't have to and (2) it creates a window where you potentially lose messages if the syslog UDP socket overruns. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | | | | | Merge pull request #12193 from lnslbrty/masterHannu Nyman2020-05-17
|\ \ \ \ \ \ \ \ | | |_|/ / / / / | |/| | | | | | netatop: update to version 3.1
| * | | | | | | netatop: update to version 3.1Toni Uhlig2020-05-17
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* | | | | | | Merge pull request #12191 from neheb/libwebpRosen Penev2020-05-17
|\ \ \ \ \ \ \ | |_|/ / / / / |/| | | | | | libwebp: fix compilation under ARM without NEON
| * | | | | | libwebp: fix compilation under ARM without NEONRosen Penev2020-05-16
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The CMake logic seems broken. Luckily it's easy to work around. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | Merge pull request #12180 from lucize/libcapngRosen Penev2020-05-16
|\ \ \ \ \ \ | | | | | | | | | | | | | | libcap-ng: add package libcap-ng
| * | | | | | libcap-ng: add package libcap-ngLucian Cristian2020-05-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | | Merge pull request #12188 from jefferyto/golang-1.14.3Hannu Nyman2020-05-16
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | golang: Update to 1.14.3
| * | | | | | | golang: Update to 1.14.3Jeffery To2020-05-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This also removes a (useless) test for PKG_GO_ZBOOTSTRAP_MODS (it is always non-empty). Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | | | | Merge pull request #12181 from micmac1/apa-suidRosen Penev2020-05-16
|\ \ \ \ \ \ \ \ | |/ / / / / / / |/| | | | | | | apache: tighten log dir + suEXEC
| * | | | | | | apache: revisit suEXEC setupSebastian Kemper2020-05-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When adding suEXEC to the apache package, Alpine's package [1] served as a template. Not enough attention was paid to the details. Alpine uses a different layout. So for OpenWrt to use /var/www as DocumentRoot does not make sense. /var is also volatile on OpenWrt. This commit removes the configure argument. The default is htdocsdir. This also does away with uidmin/gidmin 99. The default is 100, which is fine. Finally, the suexec binary is moved from /usr/sbin to /usr/lib/apache2/suexec_dir. Upstream recommends installing suexec with "4750" (see [2]) and the group set to the user's group. While that would be possible, it would cause a few headaches on OpenWrt. The group would need to be changed first in a post-install script and a call to chmod would need to be made afterward, to make the binary SUID again. It's easier to hide the SUID binary away from others in a directory. This way we don't need to use chmod in the post-install script. [1] https://github.com/alpinelinux/aports/tree/master/main/apache2 [2] https://httpd.apache.org/docs/2.4/suexec.html Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * | | | | | | apache: create log directory o=Sebastian Kemper2020-05-16
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Hides away the contents of the log directory from others. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | | | | | | Merge pull request #12186 from lucize/nssltoHannu Nyman2020-05-16
|\ \ \ \ \ \ \ | |/ / / / / / |/| | | | | | nss: revert -flto change
| * | | | | | nss: revert -flto changeLucian Cristian2020-05-16
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | it seems that it can lead to segfault in libfreebl3.so Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | php7-pecl-redis: update to 5.2.2Michael Heimpold2020-05-16
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | | | php7: update to 7.4.6Michael Heimpold2020-05-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes: - CVE-2019-11048 Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | | | Merge pull request #12179 from wvdakker/masterHannu Nyman2020-05-16
|\ \ \ \ \ \ | | | | | | | | | | | | | | Shorewall: Bump to 5.2.4.5
| * | | | | | Shorewall6: Bump to 5.2.4.5W. van den Akker2020-05-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
| * | | | | | Shorewall: Bump to 5.2.4.5W. van den Akker2020-05-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
| * | | | | | Shorewall6-lite: Bump to 5.2.4.5W. van den Akker2020-05-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
| * | | | | | Shorewall-lite: Bump to 5.2.4.5W. van den Akker2020-05-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
| * | | | | | Shorewall-core: Bump to 5.2.4.5W. van den Akker2020-05-16
|/ / / / / / | | | | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
* | | | | | Merge pull request #12167 from lucize/nssltoRosen Penev2020-05-15
|\ \ \ \ \ \ | | | | | | | | | | | | | | nss: add -flto and makefile cleanup
| * | | | | | nss: add -flto and makefile cleanupLucian Cristian2020-05-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | | Merge pull request #12166 from lucize/nsprltoRosen Penev2020-05-15
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | nspr: nspr add -flto to compile
| * | | | | | | nspr: nspr add -flto to compileLucian Cristian2020-05-15
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | | Merge pull request #12170 from kagurazakakotori/open-vm-toolsRosen Penev2020-05-15
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | open-vm-tools: bump to version 11.1.0
| * | | | | | | open-vm-tools: bump to version 11.1.0Kagurazaka Kotori2020-05-15
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Kagurazaka Kotori <kagurazakakotori@gmail.com>
* | | | | | | Merge pull request #12168 from lucize/libreswupRosen Penev2020-05-14
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | libreswan: update to 3.32
| * | | | | | | libreswan: update to 3.32Lucian Cristian2020-05-14
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | also add -flto to compiler flags Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | | Merge pull request #12172 from rs/nextdns-1.5.8-masterRosen Penev2020-05-14
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | nextdns: Update to version 1.5.8
| * | | | | | | nextdns: Update to version 1.5.8Olivier Poitrey2020-05-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Olivier Poitrey <rs@nextdns.io>
* | | | | | | | Merge pull request #12162 from neheb/upnp23Rosen Penev2020-05-14
|\ \ \ \ \ \ \ \ | |/ / / / / / / |/| | | | | | | npupnp updates
| * | | | | | | upmpdcli: update to 1.4.9Rosen Penev2020-05-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
| * | | | | | | libupnpp: update to 0.19.1Rosen Penev2020-05-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
| * | | | | | | libnpupnp: update to 4.0.3Rosen Penev2020-05-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | Merge pull request #12149 from ja-pa/python-atomicwrites-udateRosen Penev2020-05-14
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | python-atomicwrites: update to version 1.4.0
| * | | | | | | | python-atomicwrites: update to version 1.4.0Jan Pavlinec2020-05-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | | | | | | Merge pull request #12161 from neheb/faad22Rosen Penev2020-05-14
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | faad2: update to 2.9.2