Rosen Penev
7c93d5544d
Merge pull request #12192 from lucize/libreswipv6
libreswan: various fixes
5 years ago
Hannu Nyman
24129419d0
Merge pull request #12205 from micmac1/mar-master-10413
mariadb: minor verison bump with CVE fixes
5 years ago
Sebastian Kemper
0e1a289613
mariadb: bump to 10.4.13
Upstream added define INSTALL_PAMDATADIR, so hardcoded path is gone.
Fixes:
CVE-2020-2752
CVE-2020-2812
CVE-2020-2814
CVE-2020-2760
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
5 years ago
Sebastian Kemper
980291575e
libmariadb: bump to 3.1.8
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
5 years ago
Josef Schlehofer
d4db36ea09
syslog-ng: update to version 3.27.1
snmp-dest was moved to afsnmp
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
5 years ago
Kevin Darbyshire-Bryant
a809dc6f3b
collectd: Improve sqm_collectd error reporting
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
5 years ago
Josef Schlehofer
cb7d8210d3
Merge pull request #12091 from pprindeville/syslog-ng-restore-reload
syslog-ng: restore service "reload" to actually working
5 years ago
Hannu Nyman
a5af595a55
Merge pull request #12193 from lnslbrty/master
netatop: update to version 3.1
5 years ago
Toni Uhlig
c25b61ac02
netatop: update to version 3.1
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
5 years ago
Rosen Penev
498527fa50
Merge pull request #12191 from neheb/libwebp
libwebp: fix compilation under ARM without NEON
5 years ago
Lucian Cristian
a659c58f29
libreswan: various fixes
start if kernel has missing ipv6 support
add libcap-ng support
fix some errors displayed on syslog
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
5 years ago
Rosen Penev
a80658beeb
libwebp: fix compilation under ARM without NEON
The CMake logic seems broken. Luckily it's easy to work around.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
5 years ago
Rosen Penev
541769ddf4
fuse3: add
libfuse3 is used by newer versions of sshfs.
utils require udev, which is not present in OpenWrt.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
5 years ago
Rosen Penev
45c37a235a
fuse: update to 2.9.9
Refreshed patches.
Fixed license information.
Minor adjustments.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
5 years ago
Rosen Penev
348358bd50
fuse: import from base
This belongs here. All dependent packages are located here.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
5 years ago
Rosen Penev
dad8672037
Merge pull request #12180 from lucize/libcapng
libcap-ng: add package libcap-ng
5 years ago
Hannu Nyman
479e438400
Merge pull request #12188 from jefferyto/golang-1.14.3
golang: Update to 1.14.3
5 years ago
Jeffery To
2b8f9b7349
golang: Update to 1.14.3
This also removes a (useless) test for PKG_GO_ZBOOTSTRAP_MODS (it is
always non-empty).
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
5 years ago
Rosen Penev
7235ec41c3
Merge pull request #12181 from micmac1/apa-suid
apache: tighten log dir + suEXEC
5 years ago
Hannu Nyman
ca408508d5
Merge pull request #12186 from lucize/nsslto
nss: revert -flto change
5 years ago
Lucian Cristian
630c19f648
nss: revert -flto change
it seems that it can lead to segfault in libfreebl3.so
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
5 years ago
Sebastian Kemper
07db6b4a39
apache: revisit suEXEC setup
When adding suEXEC to the apache package, Alpine's package [1] served as
a template. Not enough attention was paid to the details.
Alpine uses a different layout. So for OpenWrt to use /var/www as
DocumentRoot does not make sense. /var is also volatile on OpenWrt. This
commit removes the configure argument. The default is htdocsdir.
This also does away with uidmin/gidmin 99. The default is 100, which is
fine.
Finally, the suexec binary is moved from /usr/sbin to
/usr/lib/apache2/suexec_dir. Upstream recommends installing suexec with
"4750" (see [2]) and the group set to the user's group. While that would
be possible, it would cause a few headaches on OpenWrt. The group would
need to be changed first in a post-install script and a call to chmod
would need to be made afterward, to make the binary SUID again.
It's easier to hide the SUID binary away from others in a directory.
This way we don't need to use chmod in the post-install script.
[1] https://github.com/alpinelinux/aports/tree/master/main/apache2
[2] https://httpd.apache.org/docs/2.4/suexec.html
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
5 years ago
Lucian Cristian
16ecc549f1
libcap-ng: add package libcap-ng
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
5 years ago
Sebastian Kemper
dbaad2fa44
apache: create log directory o=
Hides away the contents of the log directory from others.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
5 years ago
Michael Heimpold
04575c258e
php7-pecl-redis: update to 5.2.2
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
5 years ago
Michael Heimpold
ceb660cc61
php7: update to 7.4.6
This fixes:
- CVE-2019-11048
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
5 years ago
Hannu Nyman
909f4c6638
Merge pull request #12179 from wvdakker/master
Shorewall: Bump to 5.2.4.5
5 years ago
W. van den Akker
fbed8ff1e7
Shorewall6: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
5 years ago
W. van den Akker
49a930dae6
Shorewall: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
5 years ago
W. van den Akker
10afa55dfb
Shorewall6-lite: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
5 years ago
W. van den Akker
3a61f1244d
Shorewall-lite: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
5 years ago
W. van den Akker
fba9ad6c3b
Shorewall-core: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
5 years ago
Rosen Penev
9f4cde559c
Merge pull request #12167 from lucize/nsslto
nss: add -flto and makefile cleanup
5 years ago
Rosen Penev
a85753f2e4
Merge pull request #12166 from lucize/nsprlto
nspr: nspr add -flto to compile
5 years ago
Rosen Penev
1efe4cf4a1
Merge pull request #12170 from kagurazakakotori/open-vm-tools
open-vm-tools: bump to version 11.1.0
5 years ago
Lucian Cristian
47570b4cf5
nss: add -flto and makefile cleanup
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
5 years ago
Lucian Cristian
df7392149c
nspr: nspr add -flto to compile
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
5 years ago
Rosen Penev
66c94cd4e9
Merge pull request #12168 from lucize/libreswup
libreswan: update to 3.32
5 years ago
Rosen Penev
c732b9358c
Merge pull request #12172 from rs/nextdns-1.5.8-master
nextdns: Update to version 1.5.8
5 years ago
Rosen Penev
fbc719b3f3
Merge pull request #12162 from neheb/upnp23
npupnp updates
5 years ago
Olivier Poitrey
5d6e75743a
nextdns: Update to version 1.5.8
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
5 years ago
Rosen Penev
8302890162
Merge pull request #12149 from ja-pa/python-atomicwrites-udate
python-atomicwrites: update to version 1.4.0
5 years ago
Rosen Penev
2ad0aab050
Merge pull request #12161 from neheb/faad22
faad2: update to 2.9.2
5 years ago
Rosen Penev
aee7061658
Merge pull request #12165 from jefferyto/golang-tweaks
golang: Various improvements/tweaks
5 years ago
Kagurazaka Kotori
24a12c8f28
open-vm-tools: bump to version 11.1.0
Signed-off-by: Kagurazaka Kotori <kagurazakakotori@gmail.com>
5 years ago
Rosen Penev
d9328d42bd
Merge pull request #12130 from jefferyto/python3-find-stdlib-depends
python3: Add script to help find standard library dependencies
5 years ago
Jeffery To
d4d78c2511
python3: Add script to help find standard library dependencies
This adds a script that searches a Python package's source code to find
imports for separately-packaged standard library modules.
The script can be run by calling make with the configure target and
"PY3=stdlib V=s" arguments, e.g.
make package/python3-lxml/configure PY3=stdlib V=s
This also updates the readme on how to call this script, as well as more
information on Python package dependencies in general.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
5 years ago
Lucian Cristian
7d969ca3e1
libreswan: update to 3.32
also add -flto to compiler flags
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
5 years ago
Jeffery To
da3fb97b9c
golang: Set/reset default platform options for target Go compiler
Because the first stage for building target Go is actually a host build,
the default platform options (GO386, GOARM, etc.) are detected from the
host. These values are written to a source file and kept when building
the second stage.
This modifies this source file to set the appropriate values for the
target platform, and reset values for other platforms to their
cross-compiling / most compatible defaults.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
5 years ago
Rosen Penev
a22fff844d
Merge pull request #9865 from peter-stadler/etesync
etesync-server: add package and configuration for running with uwsgi on nginx [RFC]
5 years ago