Commit Graph

33347 Commits

Author SHA1 Message Date
Anirudh Srinivasan
d4a4de8309 prometheus-node-exporter-ucode: fix missing .so mounts in jail
Signed-off-by: Anirudh Srinivasan <anirudhsriniv@gmail.com>
2025-02-09 17:53:37 +08:00
Peter van Dijk
39002e38a5 pdns: update to 4.9.4
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2025-02-08 21:02:40 +08:00
Wesley Gimenes
ff34616414 netbird: update to 0.36.5
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.36.5

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
2025-02-08 01:55:59 +08:00
ACI0419
1c1125a47e ddns-scripts: add ydns.io provider 2025-02-06 18:03:44 +01:00
Francesco Benini
7c58cd667b keepalived: add support for directory sync
This commit adds support for folder synchronization.
An example is in the 810-files file where it is explained how to
synchronize all hotplug files of keepalived.

Signed-off-by: Francesco Benini <francy.benini@gmail.com>
2025-02-05 08:14:04 +01:00
Milinda Brantini
8eecd2e5a0 sing-box: Update to 1.11.1
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2025-02-05 14:13:04 +08:00
Jianhui Zhao
92953c1d7d lua-cjson: add build VARIANT for Lua5.3
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2025-02-04 20:25:53 -08:00
Adam Beck
1302e503a3 ddns-scripts: add type field for digitalocean API
DigitalOcean API requires a "type" JSON field to update a DNS
record. This adds that while checking for IPv6 to change which
record type to use. Without it, the API call fails, making
the script unable to update the DNS records for DigitalOcean.

Signed-off-by: Adam Beck <subcursion@gmail.com>
2025-02-04 16:27:16 +01:00
Florian Eckert
25b156a71b keepalived: add ubus status
The hotplug scripts are called with every state change. When called, the
scripts are processed under '/etc/hotplug.d/keepalived'. This change adds
the functionality that the last state change of the keepalived can be
queried via the ubus.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-02-04 13:48:09 +01:00
Tianling Shen
35b614c437 rclone: Update to 1.69.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-02-04 15:25:08 +08:00
Matt Eaton
1cc7069c64 strongswan: fix compilation against wolfssl
Backports upstream patch fix compilation error against recent versions of wolfssl.

Closes https://github.com/openwrt/packages/issues/25877

Signed-off-by: Matt Eaton <git@divinehawk.com>
2025-02-03 16:36:25 +01:00
Milinda Brantini
2c7b8ef5a2 sing-box: Update to 1.11.0
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2025-02-03 23:32:13 +08:00
Tianling Shen
155fe01112 alist: Update to 3.42.0
Fix the value of conf.WebVersion.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-02-03 20:38:17 +08:00
Tianling Shen
2d83d187a0 cloudflared: Update to 2025.1.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-02-03 20:22:18 +08:00
Tianling Shen
cec4103bbc v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-02-03 20:22:01 +08:00
Tianling Shen
c1b0143a79 v2ray-core: Update to 5.26.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-02-03 20:21:53 +08:00
Tianling Shen
e9a86e1809 xray-core: Update to 25.1.30
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-02-03 20:21:37 +08:00
Dirk Brenken
bf2fb994fa banIP: update 1.5.0-6
* fixed  the incomplete rule maintainance during banIP reloads
* fixed the Set query function (if the Set counters are disabled)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2025-02-02 22:15:41 +01:00
Antonio Pastor
900e71b607 netatalk: add uci support
Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
2025-02-02 19:12:30 +08:00
Antonio Pastor
0bd99d1cbb netatalk: create small and full variants
Small version includes only AFP file sharing to minimize size.
Base version adds AppleTalk. This matches the contents of the
existing package.
Full version includes everything that OpenWrt can support and
configuration option for build system (menuconfig).

Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
2025-02-02 19:12:30 +08:00
Antonio Pastor
960fde3ace netatalk: update to 4.1.1
Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
2025-02-02 19:12:30 +08:00
Sandro Jäckel
7c8295dc2b tailscale: update to 1.80.0
Signed-off-by: Sandro Jäckel <sandro.jaeckel@gmail.com>
2025-02-02 15:58:00 +08:00
Daniel Golle
befdf8a5b2 cryptsetup: update to version 2.7.5
Enable building cryptsetup-reencrypt, integritysetup and veritysetup,
add new binary packages for integritysetup and veritysetup.

Changes since version 2.7.4
~~~~~~~~~~~~~~~~~~~~~~~~~~~
* Fix possible online reencryption data corruption (only in 2.7.x).

  In some situations (initializing a suspended device-mapper device),
  cryptsetup disabled direct-io device access. This caused unsafe
  online reencryption operations that could lead to data corruption.
  The code now adds strict checks (and aborts the operation) and
  changes direct-io detection code to prevent data corruption.

* Fix a clang compilation error in SSH token plugin.

  As clang linker treats missing symbols as errors, the linker phase
  for the SSH token failed as the optional cryptsetup_token_buffer_free
  was not defined.

* Fix crypto backend initialization in crypt_format_luks2_opal API call.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2025-02-02 00:00:26 +00:00
Lucian CRISTIAN
6623eadfa0 frr: 10.2.1 fixes
add packing mgmtd, pim6d and update helper scripts

Signed-off-by: Lucian CRISTIAN <lucian.cristian@gmail.com>
2025-02-01 10:54:15 +02:00
Noah Meyerhans
55c559347f bind: bump to 9.20.5
Fixes CVEs:
- CVE-2024-12705: DNS-over-HTTPS flooding
- CVE-2024-11187: Limit additional section processing for large RDATA sets

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2025-01-31 11:56:38 -05:00
Jan Hák
089f77e615 knot: update to version 3.4.4
Signed-off-by: Jan Hák <jan.hak@nic.cz>
2025-01-30 19:21:10 +02:00
John Audia
21c63a67e3 snort3: update to 3.6.2.0
Changelog: https://github.com/snort3/snort3/releases/tag/3.6.2.0

% snort --version

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.6.2.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2024 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.18
           Using Hyperscan version 5.4.2 2025-01-28
           Using libpcap version 1.10.5 (with TPACKET_V3)
           Using LuaJIT version 2.1.0-beta3
           Using LZMA version 5.6.2
           Using OpenSSL 3.0.15 3 Sep 2024
           Using PCRE2 version 10.42 2022-12-11
           Using ZLIB version 1.3.1

Signed-off-by: John Audia <therealgraysky@proton.me>
2025-01-30 19:19:00 +02:00
John Audia
3e42bc8bc2 libdaq3: update to 3.0.18
Update to latest version.

Changelog: https://github.com/snort3/libdaq/releases/tag/v3.0.18

Signed-off-by: John Audia <therealgraysky@proton.me>
2025-01-30 19:16:42 +02:00
Eric Fahlgren
445e40c3c8 owut: update to 2025.01.29
Bug fixes:
    efahl/owut@bced54a owut: prefer use of packages_changes when generating build request
    efahl/owut@b469547 owut: revert rootfs restrictions

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
2025-01-30 17:00:54 +08:00
Stan Grishin
bee7227871 https-dns-proxy: bugfixes and improvements
* improvement: Makefile: prepend `r` to PKG_RELEASE in binary and init script versions to match package version
* bugfix: init script: more reliable/robust start on boot
* improvement: init script: more compact output()
* improvement: init script: better DNS Hijack login
* improvement: init script: fold some dnsmasq-related functions into dhcp_backup()

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-01-29 11:07:40 -08:00
Stan Grishin
2e764368cc adblock-fast: bugfixes: boot-up, StevenBlack list, new CERT.pl source
* bugfix: more robust boot-up start
* bugfix: processing of StevenBlack lists
* new remote block-list: CERT.pl

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-01-29 11:07:14 -08:00
Dirk Brenken
f9effa495e adblock: update 4.2.4-1
* support smartdns as dns backend
* support top level domains in local white- and blackklist,
  e.g. a 'de' in the blacklist blocks all domains with a german tld
  and the tld compression removes all subdomains from the final blocklist

Signed-off-by: Dirk Brenken <dev@brenken.org>
2025-01-27 23:29:22 +01:00
Stan Grishin
cfd35b6bf8 pbr: bugfixes: boot-up and negative dest_addr
* bugfix: more robust boot-up behaviour, obsoleting following config
  options: procd_boot_delay, procd_boot_timeout, procd_wan_ignore_status
* bugfix: fix typo in processing negations on dest_addr

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-01-27 10:46:48 -08:00
Dirk Brenken
737c0601cb banip: update 1.5.0-5
* fix a reporting issue with multiple ports/protocols

Signed-off-by: Dirk Brenken <dev@brenken.org>
2025-01-26 19:58:53 +01:00
Matthias Schiffer
2434806621 fastd: update to v23
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2025-01-26 15:13:19 +01:00
Eric Fahlgren
73fb1c4b38 owut: update to 2025.01.25
Bug fixes:
    efahl/owut@2bf45d5 owut: exit immediately on ctrl-c
    efahl/owut@a95d383 owut: fix processing of device defaults
    efahl/owut@cd63564 owut: disallow --rootfs-size changes on some platforms
Enhancements:
    efahl/owut@eaca182 owut: minor code cleanup in sha256 calculator
    efahl/owut@2b65aa7 owut: improve messaging
    efahl/owut@d687824 git: define file attributes

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
2025-01-26 21:44:26 +08:00
Michael Heimpold
9ef2d15c29 openssh: fix recursive key file removal
The -r option is not required here but should also not hurt,
since it was already tested, that $key is a file.
However, to express the intent of the command more clearly,
let's drop it.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-01-26 14:36:15 +01:00
Tianling Shen
359a615d6f v2ray-core: Update to 5.25.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-01-26 13:01:26 +08:00
Juan Orti Alcaine
f80fbec40f banip: Block UDP ports for HTTP/3
Block HTTP/3 by including UDP in the feeds that have the 80 443 ports in
their flag.

Signed-off-by: Juan Orti Alcaine <jorti@pm.me>
2025-01-25 19:36:40 +01:00
Christian Marangi
533b1b987e net-mtools: bump to release 3.2
Fix regression with detecting multicast ipv6 packet.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-01-25 12:31:35 +02:00
Ivan Chashkin
d1614ac07d yggdrasil: update to 0.5.12
Signed-off-by: Ivan Chashkin <mail@cupivan.ru>
2025-01-25 12:31:16 +02:00
Markus Gothe
69c29a5b26 openssh: Validate keys and regenerate if needed.
Imitate dropbear init.d-script and make sure we
don't end up with corrupt keys.

This can happen if we use a caching filesystem,
like 'ubifs', and the DUT is powered off during
boot-up.

Signed-off-by: Markus Gothe <markus.gothe@genexis.eu>
2025-01-25 11:09:48 +01:00
Erik Karlsson
3ac8092a39 openssh: fix killing of active sessions on shutdown
Starting with OpenSSH 9.8 sessions are handled by a separate binary
called sshd-session

Signed-off-by: Erik Karlsson <erik.karlsson@iopsys.eu>
2025-01-25 10:53:24 +01:00
Michael Heimpold
19e9dde02d php8-pecl-dio: update to 0.3.0
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-01-25 10:43:37 +01:00
Michael Heimpold
aadb3bccbc php8-pecl-http: update to 4.2.6
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-01-25 10:43:32 +01:00
Michael Heimpold
30dc14de63 php8-pecl-xdebug: update to 3.4.1
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-01-25 10:43:03 +01:00
Michael Heimpold
fa0328232e php8-pecl-redis: update to 6.1.0
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-01-25 10:42:51 +01:00
Michael Heimpold
8214c20028 php8-pecl-krb5: update to 1.2.2
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-01-25 10:42:42 +01:00
Federico Capoano
bf3333594a coova-chilli: Fix WolfSSL support
Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
2025-01-24 15:27:31 -08:00
Jan Klos
eaf00f62da nut: add --without-nut_monitor to configure args
nut_monitor is not used anyway and is needlessly built & does not work with python 3.13

Signed-off-by: Jan Klos <jan@klos.xyz>
2025-01-24 10:22:28 -08:00