- This update fixes CVE-2021-40346; see: https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/
- Update haproxy download URL and hash
- Make use of $(AUTORELEASE) for PKG_RELEASE
Following PR #15098, add fixes to build fail2ban package:
- remove use of fail2ban-python (directly use python3 in script)
- remove link to python3 in /usr/bin (break the package build)
- remove python-tests (reduce the package size)
Hannu Nyman [Sat, 4 Sep 2021 07:53:23 +0000 (10:53 +0300)]
collectd: sensors plugin - depend on lm-sensors
Change the sensors plugin's dependency from libsensors
to lm-sensors, so that also the /usr/sbin/sensors executable
gets installed if the plugin is selected.
Although that is not needed for collectd itself,
the LuCI statistics app expects to find the sensors executable
if the plugin has been installed.
This commit updates boost to version 1.77.0
More info about Boost 1.77.0 can be found at the usual place [1].
There are two new libraries in this version:
* Describe [2]: A C++14 reflection library, from Peter Dimov. Provides
macros for describing enumerators and struct/class members, and
primitives for querying this information.
* Lambda2 [3]: A C++14, dependency-free, single header lambda library, from
Peter Dimov. Allows simple function objects to be constructed via
expressions such as:
_1 + 5, _1 % 2 == 0, _1 > _2, or _1 == ' ' || _1 == '\t'.
Jeffery To [Wed, 1 Sep 2021 21:31:15 +0000 (05:31 +0800)]
treewide: Remove GO_PKG_LDFLAGS for stripping binaries
The "-s -w" flags in GO_PKG_LDFLAGS tells the Go compiler to strip the
binaries it produces. Since the default Go package build process will
strip binaries when CONFIG_USE_STRIP or CONFIG_USE_SSTRIP are selected,
these flags are unnecessary.
When CONFIG_NO_STRIP is selected, these flags override the user's
intention of building unstripped packages.
This removes these flags for all relevant packages.
Daniel Golle [Mon, 30 Aug 2021 19:40:21 +0000 (20:40 +0100)]
uvol: move uxc persistent config volume to /var/run/uxc
As /var/state is used for UCI state, move persistent config for uxc
from /var/state/uxc to /var/run/uxc.
uxc itself has already been changed to look for it there.
python3-package.mk: add check for dependencies in host-pip-requirements
It often happens that we update a package to a new version (e.g. cffi) to a
newer version, but we forget to update the version for cffi in the
`lang/python/host-pip-requirements/cffi.txt` file.
This check adds a minimal check, so that when a build occurs for a Python
package, if there is a mention/listing of this package in
`lang/python/host-pip-requirements/` it will check that the versions match.
This way, when we update a package, we get a build failure and update the
host version as well.
This will omit packages (like Cython) that are not packaged for OpenWrt,
but are host-side dependencies only.
But until we find some mechanism to check for those, we will probably only
notice to update them when another build occurs (at the very least).
Dirk Brenken [Sun, 29 Aug 2021 15:16:59 +0000 (17:16 +0200)]
banip: update 0.7.10
* switch to unencrypted http downloads for ipdeny.com due to persistant certificate issues
* compact json generator code (tested with report files > 2MB)
* various code cleanups and optimizations
Paul Spooren [Tue, 24 Aug 2021 23:31:19 +0000 (13:31 -1000)]
memcached: use memcached user
This avoid using `nobody` as user since multiple services fallback to
this user, resulting in a security issue. The UID was taken from Gentoos
`acct-user` repository.
Marius Dinu [Fri, 27 Aug 2021 07:21:53 +0000 (10:21 +0300)]
tvheadend: multiple improvements
- Added menuconfig options:
- TV sources and protocols: SAT>IP, IPTV, HDHomeRun
- SoftCAM (3 options)
- Image cache (default changed to OFF)
- Trace debug option (default changed to OFF)
- Added menuconfig descriptions.
- Removed codecs.
- Made PIE option dependent on global OpenWRT PIE setting.
- Run as regular user, not root.
- Added USB hotplug script to change DVB tuners permissions.
- Fixed a first-start bug(?) that I encountered: admin account created but not saved.
Daniel Golle [Fri, 27 Aug 2021 01:06:57 +0000 (02:06 +0100)]
auc: update to version 0.2.4
A stray ')' made auc skip the check if all mandatory fields of a
branch are present. Fix paranthesis in that if-clause to actually
check for all fields.
Don't even fetch package lists if checking only for release.
Daniel Golle [Wed, 25 Aug 2021 20:20:39 +0000 (21:20 +0100)]
auc: update to version 0.2.3
* use regular verrevcmp for branch names, fixes update indication
* break out usage() from main() function
* require '-f' in case installed package is missing in remote lists
* don't use ENETUNREACH for unlrelated error
Karl Palsson [Mon, 23 Aug 2021 10:33:51 +0000 (10:33 +0000)]
lua: penlight: bump to 1.11.0
Feature updates, and some minor bugfixes.
Changelog for 1.11.0: https://github.com/lunarmodules/Penlight/blob/master/CHANGELOG.md#1110-2021-08-18
Changelog for prior releases rolled up here are in the same changelog.
This also moves to the "final" home, under lunarmodules, instead of the
temporary "tieske" maintainer's private github, see https://github.com/lunarmodules/Penlight/issues/339
Karl Palsson [Wed, 25 Aug 2021 09:54:18 +0000 (09:54 +0000)]
libwebsockets: enable external poll support
This was removed and then re-added, but defaulted off upstream. It's
still listed as "not recommended" but still absolutely essential for
many apps for performance.
Fixes: https://github.com/eclipse/mosquitto/issues/2284 Signed-off-by: Karl Palsson <redacted>
git.99rst.org / openwrt-packages.git / log