Michael Heimpold [Fri, 11 Jan 2019 22:47:30 +0000 (23:47 +0100)]
php7: update to 7.2.14
While at, add --with-pic to configure arguments. This prevents the following
build errors spotted by the build bots for i386 targets:
-snip-
...
ext/openssl/.libs/openssl.o: direct GOT relocation R_386_GOT32X against
`X509_REQ_free' without base register can not be used when making a shared object
...
-snap-
This parameter seems to make no difference on other targets, nor
improve or make worse the package size.
Run tested for i386 in VirtualBox VM and on Duckbill for mxs platform.
Rosen Penev [Sun, 6 Jan 2019 06:45:32 +0000 (22:45 -0800)]
wget: Fix compilation without deprecated OpenSSL 1.1 APIs
The configure script uses a deprecated function to check for libssl. I tried patching configure.ac
and adding PKG_FIXUP:=autoreconf but that causes a different error. This is the simplest fix.
Val Kulkov [Wed, 9 Jan 2019 19:31:47 +0000 (14:31 -0500)]
samba4: add mandatory option per CVE-2018-16853
Since 4.9.3, Samba AD-DC with MIT Kerberos will refuse to build unless
--with-experimental-mit-ad-dc is provided to the configure command.
The mandatory requirement was introduced in response to a report that
a user in a Samba AD domain can crash the KDC when Samba is built in
the non-default MIT Kerberos configuration:
https://www.samba.org/samba/security/CVE-2018-16853.html
Nj Hsiong [Wed, 9 Jan 2019 11:43:22 +0000 (19:43 +0800)]
python3: enable lib2to3 to also search and fix .pyc files.
python3's lib2to3 would fail in silence if python3 and its packages are installed as compiled .pyc files. Root cause is, in Lib/lib2to3/refactor.py, the function get_all_fix_names only searches '.py' fix names.
Dirk Brenken [Wed, 9 Jan 2019 10:52:19 +0000 (11:52 +0100)]
adblock: update 3.6.2
* enhance the query function to search in adblock backups as well,
to get back the set of blocking lists sources for a certain domain
* add "Latest DNS Queries" report to commandline version as well
(already in LuCI)
* made the tld compression (the error handling) more robust,
remove the needless 'adb_forcesrt' option
* removed abandoned 'feodo' list source
* updated readme
lang/python/README.md: add doc describing the lang/python subtree
It was a semi-popular request a while back that I put off for a while.
Here's a quick doc.
I'll update it later as things change and I don't forget.
It also lets other people update if something is wrong.
acme: Support selecting ECC certificates from Luci
As pointed out by @andersk, acme.sh already supports ECC certificates, and
they can be set manually in the uci file, just not in Luci. Fix this by
changing the key size selector into a listbox, and adding ECC certs as
options.
Deng Qingfang [Thu, 3 Jan 2019 16:01:35 +0000 (00:01 +0800)]
shadowsocks-client: remove
It hasn't been maintained for years and doesn't have recent features such as AEAD crypto and IPv6.
(The "recent" update is fix compilation without deprecated OpenSSL APIs, which is made by Rosen Penev)
It has been superseded by shadowsocks-libev, which is recently maintained by community and has LuCI frontend.
Despite its smaller size, it depends on OpenSSL, which is way larger than MbedTLS, the one shadowsocks-libev used. Thus, it doesn't really fit in space-constrained devices.
Rosen Penev [Sun, 6 Jan 2019 07:31:25 +0000 (23:31 -0800)]
tinc: Fix to actually build without deprecated APIs
The configure script checks for the existence of OpenSSL by checking a
deprecated function. This works around it. The other changes have been done
previously
Dirk Brenken [Sat, 5 Jan 2019 15:28:44 +0000 (16:28 +0100)]
banIP: release 0.1.0
* add automatic blocklist backup & restore, they will be used
in case of download errors or during startup in backup mode
* add a 'backup mode' to re-use blocklist backups during startup,
get fresh lists via reload or restart action
* procd interface trigger now supports multiple WAN interfaces
* change URL for abuse.ch/feodo list source in default config
* small fixes
* update readme
Ansuel Smith [Fri, 4 Jan 2019 18:26:29 +0000 (19:26 +0100)]
softethervpn: update to latest release and rework makefile
This package install both server client and bridge app... This is useless if someone needs to run only the server on the device. Split the package in 3 subpackage and a base package that contains file needed by all 3. This also upgrade the package to latest release to fix some bug and memory leak.
Deng Qingfang [Tue, 1 Jan 2019 13:52:14 +0000 (21:52 +0800)]
nginx: update to 1.15.8 and remove PKG_VERSION from modules tarball filename
Update to 1.15.8. Also use HTTPS
PKG_VERSION (nginx version) in 3rd-party modules tarball filename is dispensable and can be dropped to avoid unnecessary downloading
Andre Heider [Thu, 3 Jan 2019 07:18:04 +0000 (08:18 +0100)]
prometheus-statsd-exporter: fix compilation with go 1.11.4
This fixes the exact same build error reported at [0].
Upstream fixed it too, see [1], but I decided to use the minimal patch
until a new version is released instead.
Use the new ALTERNATIVES mechanism to fix installation conflict
against busybox find and xargs. Also add myself back as maintainer
since folks seem to be asking me anyway.
python,python3: use setuptools & pip versions from python{3}-version.mk
`setuptools` & `pip` whl files were selected via wildcards, because it was
easier in the beginning.
Also, initially there weren't any PYTHON{3}_{SETUTPTOOLS/PIP}_VERSION
variables. But now since these vars exist, it makes sense to use them,
because we can catch easier (at build) time if Python/Python3 bump these
versions.
git.99rst.org / openwrt-packages.git / log