Jeffery To [Fri, 16 Aug 2019 20:45:58 +0000 (04:45 +0800)]
python,python3: Fix host Python compilation for macOS
* Remove $$$$(pkg-config --static --libs libcrypto libssl) from
HOST_LDFLAGS
Having this leads to an "unknown type name 'u_int'" error on Mac.
Removing it doesn't appear to affect Python's ability to find
buildroot LibreSSL.
* Change -Wl,-rpath=... to -Wl,-rpath,... in HOST_LDFLAGS
The equals sign version is not supported by the Mac linker (appears to
be an GNU extension). The comma version is supported; -rpath and its
argument will be separated by a space when passed to the linker.
* Add ac_cv_header_libintl_h=no to HOST_CONFIGURE_VARS for Mac
Python on Mac doesn't expect to use libintl, but if gettext-full is
compiled for host, it will try, leading to undefined symbol errors
during compilation. This prevents configure from finding libintl.h.
Dirk Brenken [Thu, 15 Aug 2019 12:02:30 +0000 (14:02 +0200)]
adblock: release 3.8.0
* add support for 'DNS File Reset', where the final DNS blockfile
will be purged after DNS backend loading (save storage space).
A small background service will be started to trace/handle
dns backend reloads/restarts
* add support for the 'null' blocking variant in dnsmasq
(via addn-hosts), which may provide better response times
in dnsmasq
* enhance the report & search engine to support
the new blocking variants. Search now includes
backups & black-/whitelist as well
* compressed source list backups are now mandatory (default to '/tmp')
* speed up TLD compression
* E-Mail notification setup is now integrated in UCI/LuCI
* update the LuCI frontend to reflect all changes (separate PR)
* drop preliminary dnscrypt-proxy-support (use dnsmasq instead)
* drop additional 'dnsjail' blocklist support (not used by anyone)
* procd cleanups in init
* various shellcheck cleanups
* update readme
f5420af phantap: do not capture vlans 5d1bd13 phantap-learn: improve the BPF filter, exclude vlans be6f7d9 Readme.md: we now support talking to the victim. 8789da5 README.md: fix typo
Petr Štetiar [Tue, 13 Aug 2019 13:20:15 +0000 (15:20 +0200)]
circleci: provide prereq output in the build log
Commit 200f2666fb1c ("sdk: fix GCC and Python dangling symlinks") in
master tree has forced prereq build step, which is now failing on the CI
as the Docker CI images are missing Python3 support, so now every build
fails with the following error:
which is not helpful due to the silenced output of `make defconfig >
/dev/null`, so let's add `make prereq` build step in order to get
something usable next time.
Reported-by: Karl Palsson <redacted> Signed-off-by: Petr Štetiar <redacted>
Petr Štetiar [Mon, 5 Aug 2019 08:50:08 +0000 (10:50 +0200)]
circleci: make logs of build failures more readable
Due to concurrent build, it's currently not that easy to find the proper
reason for the package build failure, so let's just build the failing
package with -j1 in order to provide more human readable build log
failures.
Ref: https://github.com/openwrt/packages/pull/9584#issuecomment-518038631 Signed-off-by: Petr Štetiar <redacted>
django: move django* packages under django submenu
This changes the python[3]-django dependencies in packages to be
non-selecting, and adds an MDEPENDS line so that the *-src packages get
placed inside the django menu as well.
Added MENU:= to the src-package definitions in python[3]-package.mk,
so it does not import that setting from the binary package.
Yousong Zhou [Mon, 12 Aug 2019 08:47:47 +0000 (08:47 +0000)]
xl2tpd: bump to version 1.3.14
Changelog prepared by upstream project
* osport.h: replace SUSv3-specific functions by POSIX variants [Fabrice Fontaine]
* avp: Error Code field in Result Code AVP is optional [Pau Espin Pedrol]
* network_thread: Early continue in loop to remove huge indented block [Pau Espin Pedrol]
* network_thread: Simplify while loop using for loop [Pau Espin Pedrol]
* network: connect_pppol2tp: early return to avoid huge indentation block [Pau Espin Pedrol]
* xl2tpd: start_pppd: Fix truncation of last character [Pau Espin Pedrol]
* handle_packet: Remove unneded else clause when handling payload [Pau Espin Pedrol]
* control: Split control message handling into its own function [Pau Espin Pedrol]
* handle_packet: Rearrange code flow to simplify it [Pau Espin Pedrol]
* avp: Early failure if no handler to remove indent block [Pau Espin Pedrol]
* xl2tpd: Mark internal symbols as static [Pau Espin Pedrol]
* Fix indentation and whitespace in code block [Pau Espin Pedrol]
* xl2tpd: Remove unused variable [Pau Espin Pedrol]
* network: Add missing close(kernel_fd) on init network failure [Pau Espin Pedrol]
* network: Add missing close(server_fd) on init network failure [Pau Espin Pedrol]
* Add 'cap backoff' option, limiting exponential backoff retries will
be delayed by exponentially longer time, unless that time is capped
by configuration. [Bart Trojanowski]
* Add program to show status icon in system tray. [Github user: username34]
* Add info on building and installing xl2tpd [Samir Hussain]
* Update formatting of README.md [Samir Hussain]
* Rename README.xl2tpd to README.md [Samir Hussain]
* Update Debian changelog [Samir Hussain]
Russell Senior [Sun, 11 Aug 2019 19:43:41 +0000 (12:43 -0700)]
patch: apply upstream patch for CVE-2019-13638
GNU patch through 2.7.6 is vulnerable to OS shell command injection that
can be exploited by opening a crafted patch file that contains an ed style
diff payload with shell metacharacters. The ed editor does not need to be
present on the vulnerable system. This is different from CVE-2018-1000156.
Yousong Zhou [Fri, 9 Aug 2019 13:32:56 +0000 (13:32 +0000)]
collectd: remove the patch scaling ping_droprate from 0-1 to 0-100
Upstream project's behaviour of reporting this data source in range 0-1
is used by at least CentOS 7 collectd 5.8.1, very likely the same
behaviour is also in widely use by other distributions.
The change is important for providing consistent experience across
collectd deployments on different environments