Commit Graph

29550 Commits

Author SHA1 Message Date
Gerard Ryan
fdc95615da dockerd: Update to 24.0.2
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 17589190e5)
2023-06-20 23:51:18 +08:00
Gerard Ryan
4d17ca9351 docker: Update to 24.0.2
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit b089ccb083)
2023-06-20 23:51:18 +08:00
Gerard Ryan
1777de8171 containerd: Update to 1.7.1 for docker 24.0.2
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit e1e05fef02)
2023-06-20 23:51:18 +08:00
Gerard Ryan
c925a04341 runc: Update to 1.1.7 for docker 24.0.2
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 754db89160)
2023-06-20 23:51:18 +08:00
Stan Grishin
a53a4236e3 Merge pull request #21284 from stangri/openwrt-23.05-curl
[23.05] curl: update to 8.1.2
2023-06-19 21:00:03 -06:00
Eneas U de Queiroz
771e7385ea gost_engine: disable tests, reset patches dir
Tests are breaking compilation for mipsel targets because of the removal
of the sysmips call.  Let's just not build them.

While at it, remove patches from 1.1 version and move the current ones
to the default 'patches' directory.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 085dc8d965)
2023-06-19 16:59:26 +08:00
Hirokazu MORIKAWA
13fe4f122b libuv: bump to 1.45.0
1.45.0
* linux: introduce io_uring support
* src: add new metrics APIs
* unix,win: give thread pool threads an 8 MB stack
* win,unix: change execution order of timers

1.44.2
* loop: better align order-of-events behavior between platforms
* zos: fix fs event not fired if the watched file is moved/removed/recreated
* win: Fix pipe resource leak if closed during connect (and other bugs)
* zos: don't error when killing a zombie process
* macos: avoid posix_spawnp() cwd bug
* kqueue: skip EVFILT_PROC events when invalidating events for an fd.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit cf7e9a77c9)
2023-06-19 14:45:32 +08:00
Tianling Shen
921dd5085b CI: update build architectures
- armvirt target has been renamed to armsr (Arm SystemReady) [1].
- armsr-armv8 has been switched to aarch64_generic architecture [2].

1. 40b02a2301
2. e0f06ddc23

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit bf88b371c5)
2023-06-19 14:40:57 +08:00
Tianling Shen
351a9fa13e qemu: change references from armvirt to armsr
armvirt target has been renamed to armsr (Arm SystemReady) [1],
so the dependency need to be changed as well.

40b02a2301

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e007556915)
2023-06-19 14:40:57 +08:00
Tianling Shen
a376663cb3 collectd: change references from armvirt to armsr
armvirt target has been renamed to armsr (Arm SystemReady) [1],
so the dependency need to be changed as well.

1. 40b02a2301

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 21538459c2)
2023-06-19 14:40:57 +08:00
Jeffery To
b724fc9801 Merge pull request #21396 from 1715173329/of/packr
[openwrt-23.05] packr: remove package
2023-06-19 10:19:44 +08:00
Robert Marko
2b17f65ec6 mhz: add new package
mhz is a tool for mathematically calculating the current CPU frequency, it
has proven to be a really good help while developing CPU frequency scaling
solutions as it allows to independently prove that scaling actually works.

Now that the author has added a license we can package it for the all to
use.

Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit 89123b308f)
2023-06-18 08:43:25 +02:00
Hirokazu MORIKAWA
3bd3ae1489 icu: bump to 73.2
ICU 73.2 updates to CLDR 43.1 locale data. These are maintenance releases for ICU 73 and CLDR 43, with limited sets of bug fixes and no API or structural changes.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit a5e21caa82)
2023-06-17 16:33:50 +08:00
Tianling Shen
7d07fac8bc packr: remove package
In Go 1.18+ embedded files is natively supported, so this package
is useless now. It has been archived on Jun 2022 and failed to build
on the riscv64 target.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 92059f19b0)
2023-06-17 13:56:20 +08:00
Michael Heimpold
c027cb3e81 Merge pull request #21381 from mhei/23.05-php8-update-to-8.2.7
[23.05] php8: update to 8.2.7
2023-06-16 08:08:19 +02:00
Quintin Hill
e562fd7569 python-ble2mqtt: update to 0.1.7
(cherry picked from commit b5ae4fc15c)
Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
2023-06-16 12:31:31 +08:00
Quintin Hill
3d15816248 python-bleak: upgrade to 0.20.2
(cherry picked from commit e948029331)
Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
2023-06-16 12:31:31 +08:00
Quintin Hill
e299e944bc python-dbus-fast: update to 1.86.0
(cherry picked from commit c5988895b4)
Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
2023-06-16 12:31:31 +08:00
Michael Heimpold
48103fdaff php8: update to 8.2.7
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 1db2070f00)
2023-06-15 21:20:27 +02:00
Hirokazu MORIKAWA
e04d159909 libmraa: riscv64 not supported
Addresses buildbot errors

> CMake Error at CMakeLists.txt:193 (message):
>  Only x86, arm, mips, PERIPHERALMAN and mock platforms currently supported

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 8b777d2ec6)
2023-06-15 21:01:11 +08:00
Tianling Shen
312889a2bb rust: enable riscv64 support
rust natively supports riscv64 so let's enable it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 7ace3bb7d6)
2023-06-15 21:01:11 +08:00
Jeffery To
33b4c76397 golang: Enable riscv64 for Go compiler and packages
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 3906e54c08)
2023-06-15 21:01:11 +08:00
Jeffery To
2d49d82008 CI: Add build test for riscv64_riscv64
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 3b59118c4f)
2023-06-15 21:01:11 +08:00
Jeffery To
7dbb3b96de CI: Sort build architectures in alphabetical order
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 1651f7f16d)
2023-06-15 21:01:11 +08:00
Christian Marangi
891612663c CI: add concurrency rules to skip redundant build
Add concurrency rules to skip redundant build to skip extra build test
on force push on pull request.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit d26e21ef40)
2023-06-15 21:01:11 +08:00
Oskari Rauta
95e769fabd mtools: update to version 4.0.43
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit f142b1e002)
2023-06-15 02:17:16 +08:00
Oskari Rauta
63d584a892 netavark: update to v1.6.0
netavark v1.6.0 was released, so instead of using
git version, use release. Does not contain very
much of changes, but list is available from netavark's
commit log.

Software now comes with additional tool named
netavark-dhcp-proxy-client which is now included
in package.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit da8c4ee3b8)
2023-06-15 02:17:04 +08:00
Oskari Rauta
6d9305b4e8 podman: update to v4.5.1
Contains several bug fixes.
Package now contains additional tool quadlet.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 4f8c885fb1)
2023-06-15 02:17:00 +08:00
Oskari Rauta
642e738575 aardvark-dns: update to v1.6.0
aardvark-dns v1.6.0 was released,
so instead of using git version, use release -
similarly like netavark.
Very much hasn't changed but list of changes
is in git commit log of aardvark-dns.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit b6c2ed0b8d)
2023-06-15 02:16:52 +08:00
Oskari Rauta
f62c779bc9 parted: update to v3.6.0
Lot's of changes, but no online release notes
available, check ChangeLog file once extracted
if necessary

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 6117fb98cc)
2023-06-15 02:16:48 +08:00
Oskari Rauta
40d8c6a9ab crun: update v1.8.5
Moved to from git to release version,
but release version does not have submodule
libocispec included, so additional download added.

Release notes: https://github.com/containers/crun/releases

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 6b75cb2860)
2023-06-15 02:16:44 +08:00
Oskari Rauta
6b87b20785 gnu-efi: update to version 3.0.17
update library + add new package containing efi programs
provided by gnu-efi library.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 232b73ed9a)
2023-06-15 02:16:24 +08:00
Oskari Rauta
f4daf46d64 netbird: update to 0.21.1
Release notes: https://github.com/netbirdio/netbird/releases

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 9bc2733f31)
2023-06-15 02:16:17 +08:00
Nick Hainke
1ee1f6a1c6 gpsd: update to 3.25
Release Information:
https://gitlab.com/gpsd/gpsd/-/blob/release-3.25/NEWS?ref_type=tags

Remove the backport that is now contained in the release:
- 003_sconscript-cross-platform-build-support.patch

Latest olsrd version needs this bump.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 234b435725)
2023-06-14 07:52:20 +02:00
Tianling Shen
23dec767fa cloudreve: Update to 3.8.0
- Fixed packing web frontend assets
- Enabled build for riscv64

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 27e6796a83)
2023-06-14 13:48:02 +08:00
Kuan-Yi Li
7d5fc0878e treewide: remove COMMITCOUNT
Automatically compute and substitute current values for all
$(COMMITCOUNT) instances as this feature is deprecated and shouldn't be
used.

Based on commit 0c10c224be:

Change COMMITCOUNT in rules.mk to:
```
COMMITCOUNT = $(if $(DUMP),0,$(shell sed -i "s/\$$(COMMITCOUNT)/$(call commitcount)/" $(CURDIR)/Makefile))
```

then update all affected packages by:
```
for i in $(git -C feeds/packages grep -l COMMITCOUNT | sed 's^.*/\([^/]*\)/Makefile^\1^';);
do
	make package/$i/clean
done
```

Signed-off-by: Kuan-Yi Li <kyli@abysm.org>
(cherry picked from commit ba75322534)
2023-06-14 13:47:52 +08:00
Tianling Shen
84a7e3e6d8 dnsproxy: Update to 0.50.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit eda669c819)
2023-06-14 13:47:46 +08:00
Josef Schlehofer
064cb6ab18 Merge pull request #21360 from jefferyto/python-3.11.4-openwrt-23.05
[openwrt-23.05] python3: Update to 3.11.4, refresh patches
2023-06-13 07:21:21 +02:00
Jeffery To
a3e3e41e56 python3: Update to 3.11.4, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4627ed7c43)
2023-06-13 11:58:21 +08:00
Tianling Shen
c9b614b628 Merge pull request #21351 from jefferyto/golang-1.20.5-openwrt-23.05
[openwrt-23.05] golang: Update to 1.20.5
2023-06-13 04:12:33 +08:00
Christian Marangi
bf30d7d7ec nginx: create empty directory for module.d include
Fix a bug on installation of nginx-mod-luci where module.d directory
is not found and luci.module creation fails.
Correctly create empty directory for module.d include for dynamic module
loading by placing file in this directory.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 9365622f27)
2023-06-12 17:11:10 +02:00
Christian Marangi
5d36f84100 nginx: bump to new 1.25.0 release
Bump nginx to new 1.25.0 release.
Changes:

 *) Feature: experimental HTTP/3 support.

Every patch automatically refreshed.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 3f080e484e)
2023-06-12 17:11:08 +02:00
Nick Hainke
d184fd27fe tunneldigger: add package for establishing L2TPv3 tunnels over UDP
In the previous commit we already added tunneldigger-broker. Add the
corresponding client.

This PR is just a refactoring of the already existing opkg package from
wlanslovenija [0].

[0] - https://github.com/wlanslovenija/firmware-packages-opkg/tree/master/net/tunneldigger

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit bd2b4f311a)
2023-06-12 16:50:46 +02:00
Nick Hainke
7340474c8b tunneldigger-broker: add broker for tunneldigger
In mesh communities, tunneldigger is widely used to create L2TPv3 tunnels
and mesh via them. Since the broker is typically installed on other
distributions, the openwrt broker package has not received any
maintenance in recent years [0]. I  take now care of the further maintaince
of this package. Furthermore, I consulted with the maintainers to ensure
that they were comfortable with the change [1].

This PR is just a refactoring of the already existing opkg package from
wlanslovenija. It fixes config parsing and in general the config, adapts
to the new python syntax and fixes dependency handling.

- [0] https://github.com/wlanslovenija/firmware-packages-opkg/tree/master/net/tunneldigger-broker
- [1] https://github.com/wlanslovenija/firmware-packages-opkg/issues/24

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 8298ce8234)
2023-06-12 16:50:46 +02:00
Jeffery To
ef41089c4b golang: Update to 1.20.5
Includes fixes for:

* CVE-2023-29402: cmd/go: cgo code injection
* CVE-2023-29403: runtime: unexpected behavior of setuid/setgid binaries
* CVE-2023-29404: cmd/go: improper sanitization of LDFLAGS
* CVE-2023-29405: cmd/go: improper sanitization of LDFLAGS

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 471ef14774)
2023-06-12 19:59:11 +08:00
Jitao Lu
4ed85ea247 glib2: disable gnulib printf
A compiler bug (suspiciously) blocks gnulib compilation for
mipsel_24kc_24kf. While we had this patch to disable gnulib, it was
accidentally removed by 5d27631d9f. Add it
back to fix the long broken build for mipsel_24kc_24kf.

Fixes: #19511
Signed-off-by: Jitao Lu <dianlujitao@gmail.com>
2023-06-11 20:56:12 +03:00
Christian Marangi
259b125f6a nginx: fix problem with migration of uci conf template
Fix some problem with migration of uci conf template and include of
module.d directive.

Fix 2 case:
- uci.conf.template not versioned but with the include module.d
  resulting in double include module.d

- uci.conf.template version 1.1 with the include module.d at the end
  of the config. This is problematic for nginx as modules must be
  included before any http directive.

Handle this 2 case to restore a working uci.conf.template configuration
on migrated config.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit add3cbfcd3)
2023-06-11 05:29:28 +02:00
Christian Marangi
0850879be3 nginx-util: bump uci conf template version
Bump uci conf template version to 1.2 to sync with nginx version
handling some migration problem.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 15271cb467)
2023-06-11 05:29:28 +02:00
Ivan Pavlov
3d802d4294 openvpn: fix ipchange hotplug event
In f8a8b71e26 openvpn introduced new hotplug events.
For server config, ipchange hotplug event produces an error.
So, make ipchange hotplug event for client only

Fixes https://github.com/openwrt/packages/issues/21200

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
(cherry picked from commit 808f67d615)
2023-06-10 15:27:56 +08:00
Hirokazu MORIKAWA
2eabf45e4b avahi: Import patches for security fixes
Imported patches included in debian and other package.

* 200-Fix-NULL-pointer-crashes-from-175.patch
  CVE-2021-3502
   A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this vulnerability is to the service availability.

* 201-Avoid-infinite-loop-in-avahi-daemon-by-handling-HUP-event.patch
  CVE-2021-3468
   A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service, which becomes unresponsive after this flaw is triggered.

* 202-avahi_dns_packet_consume_uint32-fix-potential-undefined-b.patch
   avahi_dns_packet_consume_uint32 left shifts uint8_t values by 8, 16 and 24 bits to combine them into a 32-bit value. This produces an undefined behavior warning with gcc -fsanitize when fed input values of 128 or 255 however in testing no actual unexpected behavior occurs in practice and the 32-bit uint32_t is always correctly produced as the final value is immediately stored into a uint32_t and the compiler appears to handle this "correctly".
Cast the intermediate values to uint32_t to prevent this warning and ensure the intended result is explicit.

* 203-Do-not-disable-timeout-cleanup-on-watch-cleanup.patch
   This was causing timeouts to never be removed from the linked list that tracks them, resulting in both memory and CPU usage to grow larger over time.

* 204-Emit-error-if-requested-service-is-not-found.patch
   It currently just crashes instead of replying with error. Check return
value and emit error instead of passing NULL pointer to reply.

* 205-conf-file-line-lengths.patch
   Allow avahi-daemon.conf file to have lines longer than 256 characters (new limit 1024).

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 779af4d40c)
2023-06-10 15:27:06 +08:00