1627 Commits

Author SHA1 Message Date
Yanase Yuki
2f29fccbd1 webui-aria2: remove package
It seems this software is no longer maintained.
- The latest upstream commit is 4 years ago.
- Author didn't respond security issue report. (CVE-2023-39141)

No packages depend on this.

Signed-off-by: Yanase Yuki <dev@zpc.st>
(cherry picked from commit 9d6d44487f)
2025-12-03 08:42:49 +01:00
Noah Meyerhans
a2d5613880 bind: bump to 9.18.41
Addresses the following security issues:
- CVE-2025-8677: DNSSEC validation fails if matching but invalid
  DNSKEY is found.
- CVE-2025-40778: Address various spoofing attacks.
- CVE-2025-40780: Cache-poisoning due to weak pseudo-random number
  generator.

Full upstream changelog at
https://ftp.isc.org/isc/bind9/9.18.41/doc/arm/html/changelog.html

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2025-10-23 11:39:21 -04:00
Felix Fietkau
ac9eddc49f python3-host.mk: disable pip --no-binary on macOS
For some reason, pip builds a broken Cython, which segfaults on attempting
to install wheel. Work around this by allowing to use precompiled wheels.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit d798ccce9a)
2025-10-22 01:11:15 +02:00
Ralph Siemsen
57e5580dc4 znc: do not watch znc.conf for changes
ZNC can modify its own config file (znc.conf) during runtime, for
example using controlpanel or webadmin modules. Manually editing the
znc.conf file while znc is running is strongly discouraged.

Thus prodc should not watch this file, it would just lead to znc being
restarted unnecessarily.

As it happens, no restarts were done, because the watched path was
specified incorrectly. It used ZNC_CONFIG instead of ZNC_CONFIG_DIR,
and so it watched /tmp/etc/znc/configs/znc.conf/configs/znc.conf which
does not exist.

Remove the watch of znc.conf as it is not needed.

Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org>
(cherry picked from commit 00feb12444)
Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
2025-10-19 16:06:41 +02:00
Florian Maurer
658fee29b3 tunneldigger: add broker_selection option to expose load balancing capabilities
Using the broker_selection param makes it possible to decide by use (default),
always use the first available broker to connect or select a random broker

See also: 51a5e46ad1/client/l2tp_client.c (L1331-L1333)

Signed-off-by: Florian Maurer <f.maurer@outlook.de>
(cherry picked from commit 296c15c1f2)
2025-10-01 21:21:19 +02:00
Glenn Strauss
bbdfe7a050 lighttpd: update to lighttpd 1.4.82 release hash
Ref: https://www.lighttpd.net/2025/9/12/1.4.82/

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit c8e1b9af99)
2025-09-17 19:12:13 +08:00
Glenn Strauss
1ac5534034 lighttpd: update to lighttpd 1.4.81 release hash
https://www.lighttpd.net/2025/8/17/1.4.81/

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 62dbf8c87f)
2025-09-17 19:12:13 +08:00
Michael Heimpold
1a22fff6a1 php8: update to 8.2.29
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.2.29

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-09-17 07:27:10 +02:00
Aleksey Vasilenko
aa9f3abc14 bottom: update to 0.9.7
Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
(cherry picked from commit dc418e1255)
2025-08-24 16:01:57 +08:00
Rosen Penev
2d18df2810 ola: update to 0.10.9
Use local tarballs instead of codeload. Smaller size.

Patch ola.m4 to support statically linked protobuf. Avoids rpath hacks.

Remove upstream backport.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7be4cc6411)
[keep using codeload as pkg maintainer requested]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-08-23 20:46:12 +08:00
Wei-Ting Yang
b4a1b88473 python-urllib3: update to 2.0.7
Fix CVE-2023-45803 and CVE-2023-43804.

Full changelogs:
- https://github.com/urllib3/urllib3/releases/tag/v2.0.5
- https://github.com/urllib3/urllib3/releases/tag/2.0.6
- https://github.com/urllib3/urllib3/releases/tag/2.0.7

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit 23646be59e)
2025-08-23 15:29:42 +03:00
Wei-Ting Yang
074e63a653 glib2: address CVE-2024-52533
More information can be found in
- https://www.openwall.com/lists/oss-security/2024/11/12/11
- https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4281

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
2025-08-23 15:10:07 +08:00
Oliver Chang
c95ce92989 django: bump to 4.2.20
Update django version to 4.2.20 to solve CVE-2024-53907 and CVE-2024-53908

Signed-off-by: Oliver Chang <oliverchang@nexcom.com.tw>
2025-08-22 17:24:43 +08:00
Tianling Shen
a831fb94c8 rust: read build path from {HOST_}MAKE_PATH
Allow set build path by `{HOST_}MAKE_PATH`.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 84cb850b7f)
2025-08-22 17:19:18 +08:00
Tianling Shen
194c0742e8 rust: introduce RUST_{HOST,PKG}_LOCKED flag
Introduce `RUST_{HOST,PKG}_LOCKED` flag (enabled by default) to respect
upstream lockfile. This can be disabled by setting it to 0 if you want
to have up-to-date dependencies.

This change also adds new `CARGO_{HOST,PKG}_ARGS` variable to pass extra
build arguments to cargo.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1000e99185)
2025-08-22 17:19:14 +08:00
Tianling Shen
e59d9ef823 lttng-tools: fix build with libxml 2.14
Backport a pending patch to fix build with libxml 2.14.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0ec95bd1f4)
2025-08-14 21:15:09 +08:00
Tianling Shen
f3a45fc265 strongswan: fix build with wolfssl 5.7.6
Backport an upstream patch to fix build with wolfssl 5.7.6.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-08-14 21:11:56 +08:00
Tianling Shen
153d1eda11 mariadb: fix build with libxml 2.14
Backport an upstream patch to fix build with libxml 2.14.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-08-13 14:16:45 +08:00
Thibaut VARÈNE
7135dd3cbd uspot: update to Git HEAD (2025-08-07)
e2e3c649ab80 README update
18e6bcc14cc2 uspot/portal: urldecode FORM POST data
bf6051dba822 uspot/handler-uam: accept /login endpoint
32273591d8d5 uspotfilter: provide peer_lookup answers only for known clients
b0aeef9973a9 README: clarify uam vs radius mode features
b7b0d0efb0e2 uspot: improve config documentation
bce68a97fad8 captive: rename to 'uspot'
da6ca713e15d uspot: client_remove(): pass device to ratelimit client_delete()
3ebfe262bfb1 uspot: remove unused radius_call() args
691d73aa00dc uspot: let radius_init() set all required payload members
be50a66b777f uspot: allow setting global bandwidth limits
4851ada4b0c0 uspot: send Called-Station-Id in Acct-On/Off requests
0974fc8d47ac Implement uspot-bpf, an eBPF traffic counter
e99809f97e34 introduce uspotbpf.uc
7f6f43883568 uspotbpf: work around ucode-mod-bpf bug
319e0c285afb uspot: hook traffic accounting
ccf3fa9b8e83 uspot: client_interim(): remove dead code
0e92cc9f6e75 uspotbpf: fix priority conflict with ratelimit
55d40a8794b6 uspot: implement traffic limiting
b05257e862cb uspot: implement swapio
e83f95081c21 uspot: radius_acct(): don't needlessly call uspotfilter
442cff773220 uspotfilter: cleanup unused API
7878d512cd21 handler-api: include 'seconds-remaining' only if not captive
cca6d218a6a7 handler-api: implement 'bytes-remaining'
e8cf3d08ac64 uspot: start(): ratelimit clearing is independent from RADIUS accounting
6d12a2da5b20 README update
bf6364cb61ea config: clarify units for acct_interval
8133b8cd215e uspot: implement state_get()/state_set()
094825fdfe68 radius-client: lowercase non-attribute JSON members
de70c588c2e3 radius-client: add error reporting
ebe9eac34f5b radius: add option for udp or tcp connection
d6b338d5d194 uspot: support RadSec with PSK authentication
53de77512159 uspot: validate config
d0578f740111 uspot: don't store debug data through uspotfilter
fe4fa5e8a25f uspot.init: rename DAS instance
bd1fbe481da3 README update
76a03155db44 uspot: add support for secondary RADIUS servers
694ff75f4fcc uspot: remove 'final_redirect_url' config option
a347454db08c handler: redirect UAM connected clients to the 'res=already' UAM url
0ea8f9bec545 handlers: simplify auth check
f69e1df8db0f Improve RADIUS error handling and reporting
34216b56b9ed src/CMakeLists: disable -Werror
8599a968877b Makefile: sync with OpenWrt repo

Update Makefile to reflect addition of the eBPF module and other changes
in the package

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
(cherry picked from commit 3d76208)
2025-08-09 15:30:05 +08:00
Fabrice Fontaine
d92569e1a8 admin/syslog-ng: fix PKG_CPE_ID
oneidentity:syslog-ng is a better CPE ID than balabit:syslog-ng as
this CPE ID has the latest CVEs (whereas balabit:syslog-ng only
has a CVE from 2000):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:oneidentity:syslog-ng

Fixes: 5f07bb1094 (syslog-ng: update to version 3.19.1)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 3d32c62444)
2025-08-07 09:25:01 +08:00
Wei-Ting Yang
946c364b19 treewide: assign some PKG_CPE_IDs
Assign some PKG_CPE_IDs to enhance CVE coverage.

https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=aardvark-dns
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=alpine_project
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=boringssl
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=ecdsautils
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=file_project
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=knot_resolver
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=libwrap
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=lsof_project
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=nfdump
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=nlnetlabs%20name_server_daemon
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=rclone
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=setserial
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=tang_project
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=tesseract_project
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=tmate-ssh-server
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=ttyd
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=uw-imap
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=v2ray-core
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=zstandard

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit ae56deff2c)
Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>
2025-08-07 09:25:01 +08:00
Fabrice Fontaine
ae130f0352 libs/libuv: fix PKG_CPE_ID
libuv:libuv is a better CPE ID than libuv_project:libuv as this CPE ID
has the latest CVEs (whereas libuv_project:libuv only has a CVE from
2015):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libuv:libuv

Fixes: f8ecbf529b (libuv: update to 1.32.0)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 1774871476)
2025-08-07 09:25:01 +08:00
Fabrice Fontaine
e5ac996904 lang/tcl: fix PKG_CPE_ID
tcl:tcl is a better CPE ID than tcl_tk:tcl_tk as this CPE ID has the
latest CVE (whereas tcl_tk:tcl_tk only has CVEs up to 2008):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:tcl:tcl

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 6de9eebf51)
2025-08-07 09:25:01 +08:00
Fabrice Fontaine
c5def550f9 utils/logrotate: fix PKG_CPE_ID
logrotate_project:logrotate is a better CPE ID than gentoo:logrotate as
this CPE ID has the latest CVE (whereas gentoo:logrotate only has CVEs
up to 2011):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:logrotate_project:logrotate

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 996f0b81c6)
2025-08-07 09:25:01 +08:00
Fabrice Fontaine
cb6b4a53f2 libs/libupnp: fix PKG_CPE_ID
pupnp_project:pupnp is a better CPE ID than libupnp_project:libupnp as
this CPE ID has the latest CVEs from 2021 (whereas
libupnp_project:libupnp only has CVEs up to 2020):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:pupnp_project:pupnp

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 911d890b11)
2025-08-07 09:25:01 +08:00
Fabrice Fontaine
9f3582340c net/aria2: fix PKG_CPE_ID
aria2_project:aria2 is a better CPE ID than tatsuhiro_tsujikawa:aria2 as
this CPE ID has the latest CVE (whereas tatsuhiro_tsujikawa:aria2 only
has CVEs up to 2010):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:aria2_project:aria2

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit c1c47695a8)
2025-08-07 09:25:01 +08:00
Fabrice Fontaine
ee71f6bfdb net/openssh: fix PKG_CPE_ID
openbsd:openssh is a better CPE ID than openssh:openssh as this CPE ID
has the latest CVEs (whereas openssh:openssh has no CVEs):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:openbsd:openssh

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 4faf09cfb5)
2025-08-07 09:25:01 +08:00
George Sapkin
8c5b6dc996 yt-dlp: assign PKG_CPE_ID
Link: https://nvd.nist.gov/products/cpe/detail/2739DE26-F16B-478E-A270-32C659C7F2C6?namingFormat=2.2&orderBy=CPEURI&keyword=yt-dlp&status=FINAL
Link: https://github.com/openwrt/packages/issues/8534
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 303f7973f7)
2025-08-07 09:25:01 +08:00
George Sapkin
dc4dee5d30 tailscale: assign PKG_CPE_ID
Link: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.2&orderBy=2.2&keyword=cpe%3A2.3%3Aa%3Atailscale%3Atailscale&status=FINAL
Link: https://github.com/openwrt/packages/issues/8534
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit f6c7871464)
2025-08-07 09:25:01 +08:00
George Sapkin
c5c0c201ee adguardhome: assign PKG_CPE_ID
Link: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&orderBy=2.3&keyword=cpe%3A2.3%3Aa%3Aadguard%3Aadguardhome
Link: https://github.com/openwrt/packages/issues/8534
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit fd52fb6e3c)
2025-08-07 09:25:01 +08:00
Tianling Shen
72eba96f43 microsocks: Update to 1.0.5
Release note: https://github.com/rofl0r/microsocks/releases/tag/v1.0.5

Removed upstreamed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ab4b299591)
2025-07-29 17:09:50 +08:00
Tianling Shen
f0c296aadc v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 083f4ce617)
2025-07-25 13:48:28 +08:00
Gregory Gullin
8f71668a83 sing-box: Update to 1.11.15
changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.11.15

Signed-off-by: Gregory Gullin <garuwex@gmail.com>
(cherry picked from commit b9ac3c5e7d)
2025-07-25 13:46:13 +08:00
Anton P.
43df63ce78 sing-box: Update to 1.11.13
changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.11.13

Signed-off-by: Anton P. <dragunap@gmail.com>
(cherry picked from commit 24e3f2a4c8)
2025-07-25 13:46:10 +08:00
Anton P.
e5665a3a9c sing-box: Update to 1.11.9
changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.11.9

Signed-off-by: Anton P. <dragunap@gmail.com>
[line break added after commit title, accidental line removal fixed]
(cherry picked from commit c0a996ddd9)
2025-07-25 13:46:07 +08:00
Mosney Strange
577564371e sing-box: Update to 1.11.3
Signed-off-by: Mosney Strange <Mosney@users.noreply.github.com>
(cherry picked from commit 2d51880e48)
2025-07-25 13:46:04 +08:00
Tianling Shen
acaae481ac btop: Update to 1.4.4
Removed upstreamed patch.

Release note: https://github.com/aristocratos/btop/releases/tag/v1.4.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 062287375c)
2025-07-25 13:44:56 +08:00
Nate Robinson
b0285689a0 btop: add patch to fix download/upload display
Uses https://github.com/aristocratos/btop/pull/1156

Signed-off-by: Nate Robinson <nrobinson2000@me.com>
(cherry picked from commit 99bc4798ed)
2025-07-25 13:44:52 +08:00
Austin Lane
a89664e701 python-click: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit 117a3a2b1b)
2025-07-24 18:10:15 +03:00
Jan Kardell
2b15fcabbf sudo: Fix license file
Signed-off-by: Jan Kardell <jan.kardell@telliq.com>
(cherry picked from commit 7841c67092)
2025-07-21 14:45:10 +08:00
Jan Kardell
c5ad64892d sudo: bump to version 1.9.17p1
Fixes: CVE-2025-32462
Fixes: CVE-2025-32463

Signed-off-by: Jan Kardell <jan.kardell@telliq.com>
(cherry picked from commit b153b6a034)
[rebase upon 23.05 branch]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-07-21 14:45:10 +08:00
Alexandru Ardelean
1b90a4c5e8 sudo: bump to version 1.9.16p2
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 190b99b1bc)
[rebase upon 23.05 branch]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-07-21 14:45:10 +08:00
Alexandru Ardelean
aae4f69f17 sudo: bump to verison 1.9.15p5
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit f2a6449b6f)
2025-07-21 14:45:10 +08:00
Alexandru Ardelean
43e7dde6e4 sudo: bump to verison 1.9.15p4
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 62f4f97bdb)
2025-07-21 14:45:10 +08:00
Josef Schlehofer
bdcdc0e364 python-uci: update to version 0.10.3 + two patches
Release notes:
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.0
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.1
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.2
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.3

Upstream (pyuci developers) removed setup.py,
I bring it back to be able to compile it despite
that we do support building packages, which are
using pyproject.toml, but the thing here is
that their pyproject.toml requires setuptools 74.1.0
[1] [2], but Python 3.11 is using bundled setuptools
and pip [3] [4]. In current version 3.11.13,
there is still outdated version of setuptools, but
it looks like that in the newer version, there will be
new one [5].

Once, there is released Python 3.11.14 and updated
in OpenWrt, these patches can be dropped.

[1] 240180b294/pyproject.toml (L29)
[2] https://setuptools.pypa.io/en/stable/history.html#v74-1-0
[3] c94ab433ca/lang/python/python3-version.mk (L18)
[4] https://github.com/python/cpython/commits/3.11/Lib/ensurepip/_bundled
[5] c96ab19ae4

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d457c26c0d)
2025-07-18 11:35:55 +02:00
Austin Lane
c75de96989 python-urllib3: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit d6c644c5f5)
2025-07-15 15:06:49 +02:00
Rosen Penev
02f00ef91b protobuf: don't use shared libraries for host
Avoids needing to handle rpath.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d24229e441)
2025-07-04 14:05:20 +02:00
Jan Hák
3fcb698a6c knot-resolver: update to version 5.7.4
Knot Resolver 5.7.4 (2024-07-23)
================================

Security
--------
- reduce buffering of transmitted data, especially TCP-based in userspace
  Also expose some of the new tweaks in lua:
   (require 'ffi').C.the_worker.engine.net.tcp.user_timeout = 1000
   (require 'ffi').C.the_worker.engine.net.listen_{tcp,udp}_buflens.{snd,rcv}

Improvements
------------
- add the fresh DNSSEC root key KSK-2024 already, Key ID 38696

Incompatible changes
--------------------
- libknot 3.0.x support is dropped
  Upstream last maintained 3.0.x in spring 2022.

Knot Resolver 5.7.3 (2024-05-30)
================================

Improvements
------------
- stats: add separate metrics for IPv6 and IPv4

Bugfixes
--------
- fix NSEC3 records missing in answer for positive wildcard expansion
  with the NSEC3 having over-limit iteration count

Knot Resolver 5.7.2 (2024-03-27)
================================

Bugfixes
--------
- fix on 32-bit systems with 64-bit time_t

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 6e208887e3)
2025-07-04 14:03:21 +02:00
Philip Prindeville
f88b618fe2 named: /var/run/named isn't being created with correct permissions
It needs to be group writable or session.key can't be written once
named drops privileges.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit b82574b31c)
2025-07-03 10:27:02 -04:00
Andreas Gnau
9afcbfa747 tang: Refresh patches
Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>
2025-07-02 12:03:12 +02:00
Austin Lane
2de2fc8dee libulfius: Install library on target
Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit 6c62e0fcfe)
2025-06-18 00:41:46 +02:00
Austin Lane
d8fb5aec90 liborcania: Install library on target
Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit 768b995f98)
2025-06-17 22:28:02 +02:00
Hannu Nyman
b6f37bc584 nano: update to 8.5
Update nano editor to version 8.5.

Upstream has fixed the gnulib related cross-compilation problem,
so remove the config hack that was added at the 8.4 update.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit cfdf5fffec)
2025-06-16 19:45:33 +03:00
Tianling Shen
3c65c1752a btop: add migration for alias command
Files in `/etc/profile.d/` are marked as user configs and won't be
replaced to new version when update the package, so add a migration
script for this.

Fixes: #26709
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ae33358c4f)
2025-06-16 18:31:13 +08:00
Tianling Shen
75e3e5d327 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 7d6535737c)
2025-06-16 18:31:13 +08:00
Tianling Shen
daba53947d v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ed12bfe13c)
2025-06-16 18:31:13 +08:00
Tianling Shen
4b2429557d v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a91d278804)
2025-06-16 18:31:13 +08:00
Liangbin Lian
2855313b1f transmission: add syscalls to seccomp filter
Add missing syscalls found with `/etc/init.d/transmission trace`.

fix crash on boot on x86_64 platform

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit d827297546)
2025-06-07 15:08:43 +02:00
Serhii Ivanov
c6576f049e transmissision: remove build dependency on nodejs
Have no idea why such dependency was added.
No documentation from transmission that they need
such dependency on build time. On the other hand
saves vast of time during build

Signed-off-by: Serhii Ivanov <icegood1980@gmail.com>
(cherry picked from commit a06829b0a2)
2025-06-07 15:08:37 +02:00
Peter van Dijk
d6c912fc8e dnsdist: update to 1.9.10
fixes CVE-2025-30193

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit ec30d1e4f6)
2025-06-03 19:07:55 +02:00
Tianling Shen
840f3ac55a netavark: revert lock cargo dependencies
Now we have rust 1.85.0.

This reverts commit aba78031f5.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-05-29 17:51:52 +08:00
Jonathan McCrohan
66b5dfadcb rust: update to 1.85.0
Fixes podman build breakage which was caused by podman depending on
netavark, which in turn depends on rust-iptables.

rust-iptables requires rust 1.85.0 since commit 75825cd
75825cd9c1

Signed-off-by: Jonathan McCrohan <jmccrohan@gmail.com>
(cherry picked from commit c675028528)
[refresh patches]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-05-29 17:51:12 +08:00
hingbong lo
8af896d25c rust: update to 1.84.0
Signed-off-by: hingbong lo <hingbonglo@gmail.com>
(cherry picked from commit aff8367c7a)
2025-05-29 17:22:01 +08:00
Noah Meyerhans
f1673cee7e bind: bump to 9.18.37
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2025-05-21 21:00:04 -04:00
Noah Meyerhans
72561be263 bind: bump to 9.18.36
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2025-05-20 08:01:53 +02:00
Michael Heimpold
afcbfee140 php8: update to 8.2.28
This fixes:
    - CVE-2025-1217
    - CVE-2025-1219
    - CVE-2025-1734
    - CVE-2025-1736
    - CVE-2025-1861

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.2.28

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-05-18 18:00:04 +02:00
Tianling Shen
c010fa5dd1 btop: Update to 1.4.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5082f94791)
2025-05-13 14:27:03 +08:00
Tianling Shen
b2f0bbe07c yq: Update to 4.45.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 35eb372aa5)
2025-05-13 14:26:57 +08:00
Tianling Shen
6d9afba45b yq: Update to 4.44.6
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 649ff95b1e)
2025-05-13 14:24:35 +08:00
Tianling Shen
6c2cca222f yq: Update to 4.44.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 6945c7bb65)
2025-05-13 14:24:33 +08:00
Peter van Dijk
be13825169 dnsdist: update to 1.9.9
fixes CVE-2025-30194

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2025-05-08 22:06:31 +03:00
Tianling Shen
24ef56349f perl-ack: Update to 3.8.2
ack would always set a return code of 1 if -c was used. Now it properly
returns 1 if no files match, and 0 if any files match.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b6b9cd38fa)
2025-05-04 20:39:19 +08:00
Tianling Shen
bfcd45bcb4 ack: Update to 3.8.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0c0d897b47)
2025-05-04 20:39:14 +08:00
Tianling Shen
30cb4250d8 btop: Update to 1.4.2
Update alias command.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8df8700a13)
2025-05-04 20:38:55 +08:00
Tianling Shen
1fcd857ca5 btop: Update to 1.4.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0e5cc7de57)
2025-05-04 20:38:34 +08:00
Tianling Shen
c4add161e3 v2raya: Update to 2.2.6.7
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit aad793b6f4)
2025-04-22 22:18:33 +08:00
Tianling Shen
b40127d88b librespeed-go: add missing conffiles
Add missing uci configuration to conffiles.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit df9ba18578)
2025-04-22 22:18:03 +08:00
Tianling Shen
d31e306e47 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1d73b25ed8)
2025-04-22 22:17:57 +08:00
Yanase Yuki
e0627afcb9 expat: update to 2.6.3
- This release contains fixes for CVE-2024-45490,
CVE-2024-45491, CVE-2024-45492.
- Since official place for expat development moved from SourceForge
to GitHub, SourceForge was removed from PKG_SOURCE_URL.
- Use gzip archive to avoid xz usage.
- Remove DOCBOOK_TO_MAN=OFF from CMAKE_OPTIONS because
we already have EXPAT_BUILD_DOCS=OFF, which has same effect.

Signed-off-by: Yanase Yuki <dev@zpc.st>
(cherry picked from commit b0b5b8bf67)
2025-04-13 16:50:15 +08:00
krant
b06f986801 expat: update to 2.6.2
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit 8db49729c3)
2025-04-13 16:50:15 +08:00
krant
c6e2540707 expat: update to 2.6.0
- Don't set default CMake options

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit c40da57d7b)
2025-04-13 16:50:15 +08:00
Glenn Strauss
eeeba7846c lighttpd: backport revert changed TLS defaults
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2025-04-13 16:46:35 +08:00
Glenn Strauss
da7333559b lighttpd: update to lighttpd 1.4.79 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit e800fc7e8c)
2025-04-13 16:46:35 +08:00
Hannu Nyman
a50e859c98 nano: Update to 8.4
Update nano edit to version 8.4.

Add configure flags to overcome upstream bug 66978, where the newly added
gnulib module for strcasecmp always fails in the configure step when
cross-compiling.
https://savannah.gnu.org/bugs/?66978
b2927d1b1f

The added flags disable the strcasecmp function from gnulib.
If upstream (gnulib?) fixes things later, the flags should be removed.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 3d055f8dfb)
2025-04-06 20:05:53 +03:00
Petr Štetiar
8a8fe34432 libxslt: fix build breakage after libxml2 CVE fix updates
libxml2 was updated in OpenWrt Git tree with commit dec59db8fb1f
("libxml2: update to 2.13.6"), which fixed several CVEs.

Unfortunately this version bump included removal of some features, which
leads to build issues of libxslt:

  libxslt-1.1.37/xsltproc/xsltproc.c:733:39: error: assignment of read-only variable 'xmlParserMaxDepth'
   733 |                     xmlParserMaxDepth = value;

So lets fix it by backporting an upstream "fix", which removes that
deprecated functionality.

Fixes: dec59db8fb1f ("libxml2: update to 2.13.6")
References: https://github.com/openwrt/openwrt/pull/18280
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2025-04-04 10:22:03 +02:00
Vladimir Ulrich
f89b8a3eac zoneinfo: Updated to 2025b release.
Signed-off-by: Vladimir Ulrich <admin@evl.su>

(cherry picked from commit df9015f9da)
2025-03-29 13:46:34 +02:00
Vladimir Ulrich
0b8e0181f9 zoneinfo: Updated to 2025a release.
Signed-off-by: Vladimir Ulrich <admin@evl.su>

(cherry picked from commit 59db147031)
2025-03-29 13:46:23 +02:00
Vladimir Ulrich
5493402b35 zoneinfo: Updated to 2024b release.
Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit 54162a8254)
2025-03-29 13:46:12 +02:00
Vladimir Ulrich
4b8f4e863c zoneinfo: Updated to 2024a release
Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit 5a06f63390)
2025-03-29 13:45:55 +02:00
Vladimir Ulrich
e66af12581 zoneinfo: Updated to the latest (2023d) release.
Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit 69953f9fd3)
2025-03-29 13:45:37 +02:00
Tianling Shen
aba78031f5 netavark: lock cargo dependencies
rust-iptables 0.5.3+ requires rust 1.85.0 to build, use the version
defined in Cargo.toml instead.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-03-28 14:23:10 +08:00
Thiago Pereira Ricciardi
47ea48c09d pptpd: Fix secrets update
Clear pptp-server existing logins from CHAP_SECRETS file before adding new login data.

Signed-off-by: Thiago Pereira Ricciardi <thiago.ricciardi@gmail.com>
2025-03-20 16:19:40 +01:00
Tianling Shen
b49fb10610 rust: disable download ci llvm
Upstream removed CI builds for this (outdated) version.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-03-13 19:45:27 +08:00
Tianling Shen
01338963f9 rsync: backport bug fixes
Including CVE fixes for:
CVE-2024-12084
CVE-2024-12085
CVE-2024-12086
CVE-2024-12087
CVE-2024-12088
CVE-2024-12747

The patch list is based on rsync_3.2.7-1+deb12u2 from Debian.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-03-11 02:58:02 +08:00
Ray Wang
d812d91706 natmap: update to 20250221
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit 2db5fca2d8)
2025-02-26 16:46:53 +08:00
Tianling Shen
58aa6bddea v2raya: Update to 2.2.6.6
Remove unneeded reload_service func while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 39c5d7f851)
2025-02-20 16:25:39 +08:00
Tianling Shen
a9fc87fd96 v2raya: Update to 2.2.6.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a5a9140870)
2025-02-20 16:25:36 +08:00
Tianling Shen
6f31ce4d40 v2raya: Update to 2.2.6.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a08614a047)
2025-02-20 16:25:33 +08:00
Tianling Shen
3e52392b27 v2raya: Update to 2.2.6
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit fd5546fc1f)
2025-02-20 16:25:29 +08:00
Tianling Shen
96e049c9f7 rclone: Update to 1.69.1
Remove unneeded reload_service func while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 944d48241c)
2025-02-20 16:24:22 +08:00
Olivier Poitrey
bf07cf79ef nextdns: Update to version 1.45.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2025-02-18 16:38:30 +02:00
Olivier Poitrey
e82e68cc05 nextdns: Update to version 1.44.6
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2025-02-15 10:34:33 +02:00
Milinda Brantini
b3cde11f68 sing-box: Update to 1.11.1
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 8eecd2e5a0)
2025-02-06 16:51:12 +08:00
Milinda Brantini
86b0feae6c sing-box: Update to 1.11.0
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 2c7b8ef5a2)
2025-02-06 16:51:12 +08:00
Tianling Shen
0db4466a0f Revert "xray-core: Update to 25.1.30"
xray-core v24.12.31 is the last version that supports Go 1.21.

This reverts commit 0eb7153990.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-02-05 16:01:13 +08:00
Tianling Shen
acf92e4ab4 rclone: Update to 1.69.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 35b614c437)
2025-02-05 15:57:49 +08:00
Liangbin Lian
2c55293f2a rclone: fix configuration saving
The following error occurs when creating storage configuration in WEBUI:
```
Failed to save config after 10 tries: failed to create temp file for new config: open /etc/rclone/rclone.conf4258227003: permission denied
```

we should set the owner of the parent directory of the configuration
file to rclone.

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
[split chown command, wrap commit message]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit bcd87dd8b6)
2025-02-05 15:57:46 +08:00
Ryan Keane
610ebcbb98 rclone: Bump to 1.68.2
Release notes in links below.

Link: https://rclone.org/changelog/#v1-68-2-2024-11-15

Signed-off-by: Ryan Keane <the.ra2.ifv@gmail.com>
(cherry picked from commit c342279eb6)
2025-02-05 15:57:41 +08:00
Tianling Shen
01ea206ea4 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit cec4103bbc)
2025-02-05 15:55:56 +08:00
Tianling Shen
581de9db6a v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d750bb3182)
2025-02-05 15:55:53 +08:00
Tianling Shen
0eb7153990 xray-core: Update to 25.1.30
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e9a86e1809)
2025-02-05 15:55:31 +08:00
Tianling Shen
2e114a7a63 xray-core: Update to 24.12.31
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1166a25311)
2025-02-05 15:55:30 +08:00
Lucian CRISTIAN
928799f853 frr: 10.2.1 fixes
add mgmtd and pim6d

Signed-off-by: Lucian CRISTIAN <lucian.cristian@gmail.com>
2025-02-03 20:20:57 +08:00
Noah Meyerhans
91b9dd598d bind: bump to 9.18.33
Fixes CVEs:
- CVE-2024-12705: DNS-over-HTTPS flooding
- CVE-2024-11187: Limit additional section processing for large RDATA sets

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2025-01-31 14:15:54 -05:00
Matthias Schiffer
fdde39f878 fastd: update to v23
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit 2434806621)
2025-01-26 15:15:03 +01:00
Federico Capoano
03ad77cf4d coova-chilli: Fix WolfSSL support
Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
(cherry picked from commit bf3333594a)

# Conflicts:
#	net/coova-chilli/Makefile
2025-01-26 12:33:29 +02:00
Lucian CRISTIAN
666db48f73 frr: update to 10.2.1
Signed-off-by: Lucian CRISTIAN <lucian.cristian@gmail.com>
2025-01-26 17:12:32 +08:00
Lucian CRISTIAN
60060cc046 libyang: update to 2.1.128
needed for frr update to 10+

Signed-off-by: Lucian CRISTIAN <lucian.cristian@gmail.com>
2025-01-26 17:12:32 +08:00
Ray Wang
6208e3f3f0 hev-socks5-server: update to 2.7.0
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit d0d67ded93)
2025-01-26 00:22:54 +08:00
Ray Wang
830c0a161d hev-socks5-server: update to 2.6.9
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit 30db86cc9c)
2025-01-25 17:31:00 +08:00
Thibaut VARÈNE
4498fee5d4 uspot: update to Git HEAD (2025-01-20)
57b737a49497 uspot/uspotfilter: s/discon_since/lost_since/
1c2f58000519 uspot/uspotfilter: use native MAC case
70934203a0b7 captive: cleanup
7566c2716eb9 uspot: correctly handle "debug=0"
f5cc70459233 portal: remove unused bits
54cdcf463c36 uspot: remove unused ssid parameter
f13440bd80ff Update issue templates
644fd6f52a8e uspotfilter: apply disconnect delay to active clients only

(cherry picked from commit 2466aaccc1)
Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
2025-01-24 17:22:15 +08:00
Hirokazu MORIKAWA
4a0f436644 node: January 21, 2025 Security Releases
Notable Changes

    CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
    CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)

Dependency update:

    CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2025-01-24 15:53:20 +08:00
Toke Høiland-Jørgensen
211fbad701 net/acme-common: Bump package release
Commit 66894032d4 ("acme: standardize key_type") failed to bump the
package release, so the update won't be automatically installed. Bump
PKG_RELEASE to make sure users get the updated version.

Opt for adding a PKG_RELEASE instead of bumping the version to avoid
having different packages (from different branches) with the same
PKG_VERSION.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2025-01-19 21:22:43 +01:00
Olivier Poitrey
5b3f7a1b65 nextdns: Update to version 1.44.4
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2025-01-18 19:41:43 +08:00
Milinda Brantini
93cf1bf595 sing-box: Update to 1.10.7
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 996c1819e3)
2025-01-18 19:41:14 +08:00
Dirk Brenken
6a9d46f6f6 adblock: update 4.2.3-3
Summary of three PRs regarding new adblock sources with minor changes/additions:

- add new source reg_lithuania, PR provided by @Myginas
- add new source certpl, PR provided by @jkostorz
- add new source oisd_nsfw_small, PR provided by @Turjoy9

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit cd89956c13)
2025-01-17 16:52:44 +01:00
Noah Meyerhans
c529c66b73 bind: bump to 9.18.32
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2025-01-08 15:42:06 -05:00
Ray Wang
75846af0bf natmap: update to 20250101
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit 806b524a28)
2025-01-06 19:12:06 +08:00
Stan Grishin
ab187b01e8 adblock-fast: Makefile bugfixes and hijack rework
* remove indentation in postinst/prerm/postrm scripts to fix issues with APK
* rework hijack logic to redirect port 53 to the port of active/selected dnsmasq instances

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-01-04 12:12:45 -08:00
Olivier Poitrey
c33c6cf062 nextdns: Update to version 1.44.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2024-12-31 14:35:28 +08:00
Aleksey Kolosov
00af8dfee8 delve: update to 1.24.0
Signed-off-by: Aleksey Kolosov <softovick@gmail.com>

(cherry picked from commit db853b5d58)
2024-12-27 21:11:03 +08:00
Tianling Shen
0bf80b22b9 xray-core: Update to 24.12.18
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit bd0fb6d3ed)
2024-12-27 13:36:27 +08:00
Tianling Shen
e80975731a xray-core: Update to 24.11.30
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9e7026dedb)
2024-12-27 13:36:24 +08:00
Tianling Shen
2f680751ec v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0c97b1a427)
2024-12-27 13:36:07 +08:00
Hannu Nyman
68eac4a39d nano: Update to 8.3
Update nano editor to version 8.3.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit b6176b6687)
2024-12-22 21:54:24 +02:00
Olivier Poitrey
af2d45d65a nextdns: Update to version 1.44.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2024-12-21 13:31:37 +02:00
Petr Štetiar
49ebe6a057 lrzsz: fix random build failures by really disabling autofoo
Currently we're seeing random build failures, caused by autofoo being
called on very ancient bundled autofoo:

  cd . && aclocal
  aclocal.real: warning: autoconf input should be named 'configure.ac', not 'configure.in'
  acinclude.m4:2: warning: underquoted definition of AC_REPLACE_GNU_GETOPT
  acinclude.m4:2:   run info Automake 'Extending aclocal'
  acinclude.m4:2:   or see https://www.gnu.org/software/automake/manual/automake.html#Extending-aclocal
  configure.in:106: error: automatic de-ANSI-fication support has been removed

For some reason that `touch` based neutralization introduced in commit
6d6c4b21b5 ("lrzsz: update to v0.12.21rc and fix a CVE") doesn't
always work.

So lets fix it by removing the autofoo bits from the bundled Makefile.in
and while at it remove processing of man and testsuite subdirs to save
some computing cycles.

Fixes: #25543
Fixes: 6d6c4b21b5 ("lrzsz: update to v0.12.21rc and fix a CVE")
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 3e61258604)
2024-12-18 23:20:56 +08:00
Dirk Brenken
8bf3f985dc travelmate: update to 2.1.3-3
* properly escape double quotes in travelmate option values
* minor procd tweaks

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 128875aa67)
2024-12-17 21:14:56 +01:00
Antonio Pastor
2da11f9cb4 netatalk: Update to 4.0.7
Maintainer: Antonio Pastor / @APCCV
Compile tested: ipq806x (24.10-rc2, snapshot)
Run tested: ipq806x - C2600 (snapshot): install apk, start/stop sfpd service & review logs

Description:
Bump to version 4.0.7

Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
2024-12-15 11:31:07 +02:00
Antonio Pastor
12e59e2bba netatalk: Remove apfstats feature to solve dependency issues
afpstats requires several libraries that would increase significantly final install size.

Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
2024-12-15 11:31:07 +02:00
Antonio Pastor
eb65df7171 netatalk: Enable AppleTalk feature
Starting v4.0.0, netatalk brings back AppleTalk features lost in v3.
Updated description.

Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
2024-12-15 11:31:07 +02:00
Antonio Pastor
2a61b7d2b9 netatalk: Clean up Makefile
Updated title.
Updated description.
Reordered to match most common layout

Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
2024-12-15 11:31:07 +02:00
Antonio Pastor
8fee849de6 netatalk: Update to 4.0.4
Maintainer: Antonio Pastor / @APCCV
Compile tested: ipq806x (23.05.3, snapshot)
Run tested: ipq806x - C2600: start server, connect from MacOS, read/write files to home share, create/update TimeMachine backups

Description:
No changes to package other than using latest available upstream code base. Starting Netatalk 4.x build uses meson instead of autotools.

Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
2024-12-15 11:31:07 +02:00
Antonio Pastor
ec3650b549 netatalk: Update to 3.2.5
Compile tested/run: ipq806x

No changes to package other than using latest available codebase.

Signed-off-by: Antonio Pastor <apccv@outlook.com>
2024-12-15 11:31:07 +02:00
Antonio Pastor
032b806dae netatalk: update to 3.2.0.
Commit restores package after it was removed from OpenWrt 21.02.
Signed-off-by: Antonio Pastor <apccv@outlook.com>
2024-12-15 11:31:07 +02:00
Rosen Penev
65587765de yajl: backport CVE-2023-33460 fix
Removed old uclibc patches. Not relevant with modern musl or glibc.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c9ff829fdb)
2024-12-14 11:33:19 -08:00
Tianling Shen
030d96422a v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d76d51a4b8)
2024-12-11 14:36:35 +08:00
Tianling Shen
346e9f420a v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5fb541f00f)
2024-12-11 14:36:31 +08:00
Tianling Shen
f3907d211a xray-core: Update to 24.11.21
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3d05b2c1a9)
2024-12-11 14:36:24 +08:00
Tianling Shen
2411efad37 xray-core: Update to 24.11.11
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 41457908b8)
2024-12-11 14:36:21 +08:00
Tianling Shen
571510a149 microsocks: backport upstream fixes
Fix segmentation fault with newer musl and improve throughput.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 77a7324de5)
2024-12-11 14:28:06 +08:00
Ozan Göktan
93b41c74e0 microsocks: update to 1.0.4
Signed-off-by: Ozan Göktan <ozan@goktan.site>
(cherry picked from commit 544e4a9061)
2024-12-11 14:28:03 +08:00
Andrea Pesaresi
1627d875b1 ksmbd-tools: update to version 3.5.3
- manually refresh patch 030-glib.patch

Major changes are:
    fix adduser / addshare prompting on musl libc
    fix use of veto files as global share parameter
    lookup primary group and don't recurse in ksmbd.conf @group handling
    fix a leak and an intermittent auth failure in Kerberos 5
    add global parameter kerberos support

detailed changelog here: https://github.com/cifsd-team/ksmbd-tools/releases/tag/3.5.3

Signed-off-by: Andrea Pesaresi <andreapesaresi82@gmail.com>
(cherry picked from commit 5b058c9949)
2024-12-09 14:25:12 -08:00
Andrea Pesaresi
98a3c211fe ksmbd-tools: update to version 3.5.2
Major changes are:
 - Add durable handles parameter to ksmbd.conf.
 - Add payload_sz in ksmbd_share_config_response to validate ipc
   response.
 - Fix UAF and cleanups.

Signed-off-by: Andrea Pesaresi <andreapesaresi82@gmail.com>
(cherry picked from commit 9cf0eae9bc)
2024-12-09 14:25:12 -08:00
Gábor Deé
940d45f414 libdeflate: update to 1.22
Release note:
https://github.com/ebiggers/libdeflate/blob/master/NEWS.md#version-122

Signed-off-by: Gábor Deé <dee.gabor@gmail.com>
2024-12-09 15:44:51 +02:00
Moritz Warning
04b4e6af66 zerotier: update to 1.14.1
Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit 660b10f0dc)
2024-12-08 11:55:56 +02:00
Óscar García Amor
3ab18e4225 zerotier: split configuration
Split configuration in global and per-network sections.
This change breaks existing configurations.

The following per-network settings are available:

* allow_managed
* allow_global
* allow_default
* allow_dns

See  https://docs.zerotier.com/config/#network-specific-configuration

Signed-off-by: Óscar García Amor <contact@ogarcia.me>
Reviewed-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit 5af8163878)
2024-12-08 11:55:56 +02:00
Moritz Warning
1c0336d4cc zerotier: update to 1.14.0
Includes refreshed patches.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit cf6fef36b4)
2024-12-08 11:55:56 +02:00
Stan Grishin
1850b3aac3 adblock-fast: bugfix: dnsmasq instances confdir hack
* temporary hack until https://github.com/openwrt/openwrt/pull/16806 is merged

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-12-06 17:50:59 -08:00
Rosen Penev
baf67aa3e0 iperf3: fix crashing with musl
Upstream backport.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 9c9f4dd088)
2024-12-04 17:01:48 -08:00
Aleksey Vasilenko
309372ed41 iperf3: explicitly disable SCTP
Since 3fa5ee0b28
OpenWrt no longer disables SCTP support by default.
It caused the leak of libsctp dependency to iperf3.
Here we disable it explicitly to fix the build.

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
(cherry picked from commit 6c1ce8ccc7)
2024-12-04 17:01:48 -08:00
Luiz Angelo Daros de Luca
548b4d2417 ruby: update to 3.2.6
Ruby 3.2.6 is a minor bug fix release.

Link: https://github.com/ruby/ruby/releases/tag/v3_2_6
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2024-12-03 19:49:31 +02:00
Michael Heimpold
c2f90268e0 php8: update to 8.2.26
This fixes:
    - CVE-2024-8929
    - CVE-2024-8932
    - CVE-2024-11233
    - CVE-2024-11234
    - CVE-2024-11236

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.2.26

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-12-02 17:42:02 +01:00
George Iv
c03910982b yggdrasil: bump to 0.5.10
Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
(cherry picked from commit 4ee4b22e43)
2024-12-02 17:18:16 +02:00
Dirk Brenken
713af8f00b adblock: update 4.2.3-2
* correctly parse json objects with hyphens in the autodetection functions

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 823633c0e6)
2024-11-27 23:02:08 +01:00
Dirk Brenken
bbd98303fe adblock: release 4.2.3-1
* optimized procd settings for better performance
* reworked autodetection functions (still broken in master due to apk migration)
* made the tld function optional, set 'adb_tld' accordingly (enabled by default)
* reworked count function
* various code improvements

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 8afc26fafb)
2024-11-27 23:01:47 +01:00
Dirk Brenken
e1bfb89d4f banIP: update 1.0.1-2
* correctly parse json objects with hyphens in the autodetection function

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 3140259fc6)
2024-11-27 23:00:39 +01:00
Dirk Brenken
6f1e4580f5 banIP: release 1.0.1-1
* optimized procd settings for better performance
* made the log monitor working again (even on master with apk migration issues)
* reworked the fetch autodetection function (still broken in master due to apk migration)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 8609a5bbe5)
2024-11-27 23:00:18 +01:00
Dirk Brenken
9a4c3e955d banIP: update to 1.0.0-10
* minimal fix to support all download utilities in currently broken apk snapshots
  (see https://github.com/openwrt/openwrt/issues/16907 for details)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 4f00d8f0ee)
2024-11-27 22:59:37 +01:00
Alexandru Ardelean
f931a1c973 django: bump to 4.2.16
Fixes a bunch of CVEs.
CVE-2024-45230
  https://nvd.nist.gov/vuln/detail/CVE-2024-45230

CVE-2024-45231
  https://nvd.nist.gov/vuln/detail/CVE-2024-45231

(And maybe a few more).

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2024-11-27 06:31:57 +02:00
Hirokazu MORIKAWA
39de0783ff node: bump to v18.20.5
Notable Changes
  esm: mark import attributes and JSON module as stable (Nicolò Ribaudo)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-11-26 19:51:03 +08:00
Gagan Deep
714aeeb611 openwisp-monitoring: align PKG_SOURCE_VERSION with PKG_VERSION
Previously, `PKG_SOURCE_VERSION` in the Makefile was incorrectly
set to `0.1.1` instead of tracking `PKG_VERSION`. This mismatch
caused compilation issues for the package.

This fix ensures `PKG_SOURCE_VERSION` dynamically aligns with
`PKG_VERSION` to prevent future discrepancies.

Signed-off-by: Gagan Deep <pandafy.dev@gmail.com>
2024-11-22 22:08:19 +08:00
Christian Marangi
7ee4fe7705 CI: multi-arch-test-build: move to shared workflow
Move multi-arch-test-build to shared workflow.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 2a35a9cab2)
2024-11-22 12:35:19 +08:00
Gagan Deep
a94b703f8d openwisp-monitoring: allow not depending on rpcd-mod-iwinfo
Add option to exclude rpcd-mod-iwinfo from dependency.

Signed-off-by: Gagan Deep <pandafy.dev@gmail.com>
(cherry picked from commit ca503cc405)
2024-11-18 15:07:50 +08:00
Gagan Deep
452e1bfd6b openwisp-monitoring: fix Makefile for 0.2.0 update
Commit 5e69da4ccb upgraded openwisp-monitoring
to version 0.2.0 but missed necessary Makefile adjustments, causing the
package to break in OpenWrt feeds.

This patch updates the Makefile to ensure proper functionality of
openwisp-monitoring with the 0.2.0 release.

Signed-off-by: Gagan Deep <pandafy.dev@gmail.com>
(cherry picked from commit 886b3fa36d)
2024-11-18 15:07:50 +08:00
Gagan Deep
e7c336c185 openwisp-config: fix Makefile for 1.1.0
Update configuration in Makefile to fix #25168.
Add "/etc/openwisp/" to conf files.

Signed-off-by: Gagan Deep <pandafy.dev@gmail.com>
(cherry picked from commit 67d4fa3b05)
2024-11-16 17:46:42 +08:00
Aleksey Vasilenko
4689289706 rust: update to 1.81.0
- Automatically refresh one patch
- Other patch is unchanged

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
(cherry picked from commit 541060ee56)
2024-11-12 22:50:15 +08:00
Yanase Yuki
bf25c08728 zabbix: zabbix-agentd: depend on libevent2-pthreads
zabbix-agentd requires libevent2-pthreads to build
correctly, so add it to DEPENDS.

Signed-off-by: Yanase Yuki <dev@zpc.st>
(cherry picked from commit e61c3ea01c)
2024-10-29 11:32:36 +01:00
Florian Eckert
18c3e8d6c2 mwan3: close flock fd when starting mwan3.user scripts
Fixes deadlock with multiple init script calls

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 619629ce85)
2024-10-29 11:25:54 +01:00
Dirk Brenken
1ba818db65 adblock: update to 4.2.2-8
* get rid of remaining opkg calls and static adblock versioning
* fixed bind autodetection

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e3217b54ed)
2024-10-27 15:24:44 +01:00
Dirk Brenken
52c97221fb travelmate: update to 2.1.3-2
* fixed gathering/printing of system information in travelmate status
* make use of a central command selector function

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 5af7612c51)
2024-10-26 23:22:07 +02:00
Dirk Brenken
5cc7c99756 adblock: update to 4.2.2-7
* fixed gathering/printing of system information in adblock status
* added missing hagezi category (samsung tracker)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit bbaa72d739)
2024-10-26 21:55:04 +02:00
Dirk Brenken
1076ea030a banIP: update to 1.0.0-9
* fixed gathering/printing of system information in banIP status
* removed broken iblocklist.com feeds
* updated readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit fb19c14696)
2024-10-26 21:26:02 +02:00
R4SAS I2P
c87999ea2e i2pd: Update to 2.54.0
* Updating package to 2.54.0
* Changed Makefile to install binary to /usr/bin (as in upstream)
* Updated init.rc script with new path

Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
(cherry picked from commit f28940dded)
2024-10-25 19:46:49 +03:00
Peter van Dijk
b6d3f65f02 pdns-recursor: update to 4.9.9
fixes CVE-2024-25590

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2024-10-16 20:03:05 +08:00
Gagan Deep
bef3a7dc86 openwisp-monitoring: update to 0.2.0
Signed-off-by: Gagan Deep <pandafy.dev@gmail.com>
(cherry picked from commit 4540a0abf8)
2024-10-15 19:56:36 +08:00
Gagan Deep
655ab5983d openwisp-config: update to 1.1.0
Signed-off-by: Gagan Deep <pandafy.dev@gmail.com>
(cherry picked from commit af4a89482c)
2024-10-15 19:56:13 +08:00
Milinda Brantini
53a5589674 sing-box: Update to 1.9.7
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 91639e2e5d)
2024-10-12 18:30:36 +08:00
Milinda Brantini
05444466b7 xray-core: update to 24.9.30
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit caa09e5377)
2024-10-12 18:30:25 +08:00
Dirk Brenken
710b2cdca2 banIP: update to 1.0.0-8
* supports comments (introduced with a #), for MAC addresses
  in the allow and block list, e.g. 26:5e:a0:6a:9c:da # Test
* added hagezi threat ip feed
* added an adguard logterm to the readme
* removed the broken talos feed

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 270e6f1264)
2024-10-11 19:46:54 +02:00
Dirk Brenken
22732dd50d adblock: update to 4.2.2-6
* fixed adblock status reporting
* optimized the mail template
* removed unanswered DNS requests from reporting
* various small fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1294b54471)
2024-10-10 19:06:27 +02:00
Milinda Brantini
2248b3b8b2 dockerd: Update to 27.3.1
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit ade1868986)
2024-10-10 22:15:06 +08:00
Joe Zheng
81f69327d7 dockerd: fix typo in config for no_proxy
the "http_proxy" here should be "no_proxy"

Signed-off-by: Joe Zheng <joe.zheng@intel.com>
(cherry picked from commit dcea616c61)
2024-10-10 22:15:06 +08:00
Tianling Shen
224dfa862e dockerd: increase PKG_RELEASE for http proxy update
Fixes: e795bab253 ("dockerd: add config options for http proxy")
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9ec663013b)
2024-10-10 22:15:06 +08:00
Joe Zheng
54530ea3d3 dockerd: add config options for http proxy
add config options to set http porxy for dockerd, refer to
https://docs.docker.com/engine/daemon/proxy/ for details

use the *_proxy environment variable as the default value, so in most
cases, dockerd can use the system proxy settings just like opkg.

Signed-off-by: Joe Zheng <joe.zheng@intel.com>
(cherry picked from commit e795bab253)
2024-10-10 22:15:06 +08:00
Milinda Brantini
ed5a9937d8 runc: Update to 1.1.14
This is the fourteenth patch release in the 1.1.z release branch of
runc. It includes a fix for a low severity security issue
(CVE-2024-45310) as well as some minor build-related fixes (including Go
1.23 support).
Fix CVE-2024-45310, a low-severity attack that allowed
maliciously configured containers to create empty files and directories on
the host.
Add support for Go 1.23.
Revert "allow overriding VERSION value in Makefile" and add EXTRA_VERSION.
rootfs: consolidate mountpoint creation logic.

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit c1e6edfa86)
2024-10-10 22:15:06 +08:00
Milinda Brantini
819c4bc0ff containerd: Update to 1.7.22
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit f49b8252e6)
2024-10-10 22:15:06 +08:00
Milinda Brantini
441844b6f2 docker: Update to 27.3.1
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 605fb1af62)
2024-10-10 22:15:06 +08:00
Milinda Brantini
a4cf84bb12 dockerd: Update to 27.1.2
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit a58474e838)
2024-10-10 22:15:06 +08:00
Milinda Brantini
ca66a13193 docker: Update to 27.1.2
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit e0258ed7ea)
2024-10-10 22:15:06 +08:00
Michael Heimpold
ef1858951b php8: update to 8.2.24
This fixes:
    - CVE-2024-8925
    - CVE-2024-8926
    - CVE-2024-8927
    - CVE-2024-9026

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.2.24

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-10-09 21:27:13 +02:00
Matthias Schiffer
c691e6f4c7 ecdsautils: update to 0.4.2
1b53b726f3dc ecdsautils 0.4.2
554e2585efd9 sha256: fix misaligned buffer read in ecdsa_sha256_update()
8c17b073647f sha256: remove burnStack function

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit d57306298e)
2024-10-09 18:37:49 +02:00
Ray Wang
df37b4e764 hev-socks5-server: update to 2.6.8
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit c99669e088)
2024-10-08 00:06:00 +08:00
Stan Grishin
5facb6cbcc pbr: bugfix for dns & tor policies
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-10-06 16:45:43 +00:00
Tianling Shen
340e856987 rclone: Update to 1.68.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 86179f138a)
2024-10-05 14:02:19 +08:00
Tianling Shen
0e4b82965e v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5fc567d198)
2024-10-05 14:02:15 +08:00
Tianling Shen
f98508023f btop: Update to 1.4.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 7e9ef57819)
2024-10-05 14:01:03 +08:00
Milinda Brantini
e38a6889f4 sing-box: Update to 1.9.6
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 06eb251067)
2024-09-29 10:57:37 +08:00
Milinda Brantini
707c578436 sing-box: Update to 1.9.5
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 500a8ab995)
2024-09-29 10:57:37 +08:00
Aleksey Kolosov
33858483a0 delve: update to 1.23.1
Signed-off-by: Aleksey Kolosov <softovick@gmail.com>
2024-09-26 22:15:51 +08:00
Stan Grishin
b5ed85f6e9 adblock-fast: bugfixes and shellcheck update
* BUGFIX: correctly identify available RAM
* BUGFIX: properly store remote list filesize in config
* shellcheck updates

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 4bdaea90d6)
2024-09-20 13:22:18 -07:00
Dirk Brenken
18d578cb30 banIP: update to 1.0.0-7
* fixed auto allow-/blocklist-issue with IPv6 addresses in CIDR notation
* removed edrop feed from readme (had been removed from feeds for a while)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit aeda25086e)
2024-09-20 10:05:45 +02:00
Rafal Macyszyn
168a1eca57 softflowd: add '-b' option to config
- add '-b' option to enable bidirectional flow probing

Signed-off-by: Rafal Macyszyn <rafal@v92.pl>
(cherry picked from commit 80b15f0b9e)
2024-09-20 09:16:47 +02:00
Stijn Tintel
11c95fc18b softflowd: bump to 1.1.0
The tag is now prefixed with v; update PKG_SOURCE_URL and PKG_BUILD_DIR
to reflect this.
Drop upstreamed patches. Refresh leftover patch.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 4bdf55d352)
2024-09-20 09:16:42 +02:00
Dirk Brenken
716cd1c5f9 adblock: update to 4.2.2-5
* filter out unrelated multicast traffic from reporting

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 3474adc309)
2024-09-20 05:58:21 +02:00
Dirk Brenken
187414e113 adblock: update to 4.2.2-4
* fixed wrongly detected NX domains in adblock reporting
* remove existing pcap files when restarting/stopping adblock
   to prevent problems when changing tcpdump parameters

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 180ee13219)
2024-09-20 05:58:08 +02:00
Tianling Shen
67dccdd41a v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit fecdb92b3f)
2024-09-19 14:24:45 +08:00
Tianling Shen
7616ee3eba v2ray-core: Update to 5.18.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 7eef7e36e9)
2024-09-19 14:24:38 +08:00
Tianling Shen
c6318aa1b6 v2ray-core: Update to 5.17.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a2d87d2658)
2024-09-19 14:24:34 +08:00
Tianling Shen
172b2cd74a v2ray-core: update to 5.16.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0c645cb6a6)
2024-09-19 14:24:30 +08:00
Tianling Shen
ad3b4be54d rclone: Update to 1.68.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 59986cf970)
2024-09-15 16:45:14 +08:00
Dirk Brenken
48f320a2c4 travelmate: update to 2.1.3-1
* fixed STA connection issues / restart the travelmate interface on new connections via ubus
* fixed NTP hotplug issues / trigger the NTP hotplug event via ubus
* fixed minor log issues (mail/hotplug)
* readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7f976e1602)
2024-09-14 13:48:58 +02:00
Michael Heimpold
d5db80daf5 php8: update to 8.2.23
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.2.23

A minor adaption to a single patch is required.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-09-12 07:29:33 +02:00
Dirk Brenken
b05da09054 banip: update 1.0.0-6
* automatic blocking of IP ranges via RDAP request now supports multiple CIDRs
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit b157e03e80)
2024-09-09 21:09:57 +02:00
Tianling Shen
e89b1ac5eb gg: Update to 0.2.19
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 7ba22665d7)
2024-09-08 23:58:09 +08:00
Tianling Shen
c3fdd943cb cloudflared: reload service if wan inferface has (re)connected
Sometimes the wan connection needs time to be established (e.g. cold
boot after power loss) and the service may crash as the internet is
yet available. Add a trigger to reload the service once the wan
interface is up.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 52037eb625)
[based upon 23.05 branch]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-09-06 22:49:28 +08:00
Hannu Nyman
f778f04a92 nano: update to 8.2
Update nano editor to version 8.2

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 14a80bff16)
2024-09-05 20:17:23 +03:00
Petr Štetiar
3932357ffb glib2: update to 2.74.7 to fix several CVEs
Bump glib2 to 2.74.7 which fixes CVE-2023-29499, CVE-2023-32611,
CVE-2023-32636, CVE-2023-32643, CVE-2023-32665 and on top of that
backport CVE-2024-34397 fix from Debian Bookworm glib2 package
2.74.6-2+deb12u2. While at it refresh the patches so they apply cleanly.

References: https://security-tracker.debian.org/tracker/source-package/glib2.0
Fixes: CVE-2023-29499, CVE-2023-32611, CVE-2023-32636, CVE-2023-32643, CVE-2023-32665, CVE-2024-34397
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2024-09-05 13:27:51 +02:00
Luca Barbato
024272ff84 rust: update to 1.80.1
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
(cherry picked from commit d4416c2e63)
2024-09-02 16:55:41 +08:00
Aleksey Vasilenko
c2c0f55143 rust: update to 1.80.0
- Remove two upstreamed patches
- Manually refresh one patch
- Automatically refresh another patch

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
(cherry picked from commit 8d68f0b0db)
2024-09-02 16:55:33 +08:00
Tianling Shen
7d560dbbce yq: Update to 4.44.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-08-31 22:09:22 +08:00
Tianling Shen
7e5b8c7352 yq: Update to 4.44.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 78d0e16629)
2024-08-31 22:09:20 +08:00
Tianling Shen
8a37978c6d yq: Update to 4.43.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ab21adbbff)
2024-08-31 22:09:16 +08:00
Tianling Shen
3b364025df v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b9de33f106)
2024-08-31 22:08:52 +08:00
Milinda Brantini
d34c3f449e xray-core: update to 1.8.24
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 1c7bd8ba1d)
2024-08-31 21:31:03 +08:00
Dengfeng Liu
37d3e2f921 apfree-wifidog: update to 7.08.2035
https://github.com/liudf0716/apfree-wifidog/releases/tag/7.08.2035

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 632d4ea93d)
2024-08-31 11:03:15 +08:00
Dengfeng Liu
a34dbede2c apfree-wifidog: modify wifidogx.init
1. to address the isssue of incomplement firwall rules
2. added support for gateway settings

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit d552c5733a)
2024-08-31 11:03:15 +08:00
Moritz Warning
e0399913db dhtd: udpate to 1.0.2
Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit 3934cfdbdc)
2024-08-27 16:14:38 +08:00
Moritz Warning
cf2e9b4c21 dhtd: update to 1.0.1
Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit ed5e79644d)
2024-08-27 16:14:38 +08:00
S. Brusch
05dd97469c crowdsec-firewall-bouncer: new upstream release version 0.0.29
Signed-off-by: S. Brusch <ne20002@gmx.ch>

Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: mediatek/filogic, BPI-R3, Openwrt 23.05.4

Description:
 - updated to new upstream release version 0.0.29
 - added retry_initial_commit option to init script (by Quba1)
 - aligned namings in script with crowdsec-firewall-bouncer

Co-authored-by:  Quba1 <22771850+Quba1@users.noreply.github.com>
(cherry picked from commit 5988abae10)
2024-08-24 18:30:47 +08:00
Milinda Brantini
ccd7ce9ba7 sing-box: update to 1.9.4
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit b788651e27)
2024-08-24 18:29:13 +08:00
Petr Štetiar
eb6939fdeb lxc: fix huge binary sizes by backporting upstream Meson dynlink fixes
LXC after the switch to the Meson build system increased the binary sizes
significantly as each binary is basically static so shipping complete
liblxc which should be linked dynamically.

Upstream later fixed it with series of 10 commits and this fixes are
available in LXC release v6.0.0. Since we can't upstep to that release,
lets fix it by backporting those fixes only, basically making libxlc a
shared library again.

Package sizes before:

 384K lxc-user-nic_5.0.3-1_aarch64_cortex-a53.ipk
 383K lxc-ls_5.0.3-1_aarch64_cortex-a53.ipk
 382K lxc-top_5.0.3-1_aarch64_cortex-a53.ipk
 382K lxc-copy_5.0.3-1_aarch64_cortex-a53.ipk
 381K lxc-unshare_5.0.3-1_aarch64_cortex-a53.ipk
 380K lxc-start_5.0.3-1_aarch64_cortex-a53.ipk
 380K lxc-monitor_5.0.3-1_aarch64_cortex-a53.ipk
 380K lxc-info_5.0.3-1_aarch64_cortex-a53.ipk
 380K lxc-create_5.0.3-1_aarch64_cortex-a53.ipk
 380K lxc-autostart_5.0.3-1_aarch64_cortex-a53.ipk
 380K lxc-attach_5.0.3-1_aarch64_cortex-a53.ipk
 379K lxc-execute_5.0.3-1_aarch64_cortex-a53.ipk
 378K lxc-wait_5.0.3-1_aarch64_cortex-a53.ipk
 378K lxc-usernsexec_5.0.3-1_aarch64_cortex-a53.ipk
 378K lxc-unfreeze_5.0.3-1_aarch64_cortex-a53.ipk
 378K lxc-stop_5.0.3-1_aarch64_cortex-a53.ipk
 378K lxc-freeze_5.0.3-1_aarch64_cortex-a53.ipk
 378K lxc-device_5.0.3-1_aarch64_cortex-a53.ipk
 378K lxc-destroy_5.0.3-1_aarch64_cortex-a53.ipk
 378K lxc-console_5.0.3-1_aarch64_cortex-a53.ipk
 378K lxc-cgroup_5.0.3-1_aarch64_cortex-a53.ipk
 376K liblxc_5.0.3-1_aarch64_cortex-a53.ipk
 375K lxc-config_5.0.3-1_aarch64_cortex-a53.ipk
 12K lxc-hooks_5.0.3-1_aarch64_cortex-a53.ipk
 11K lxc-templates_5.0.3-1_aarch64_cortex-a53.ipk
 3.7K lxc-checkconfig_5.0.3-1_aarch64_cortex-a53.ipk
 2.4K lxc-configs_5.0.3-1_aarch64_cortex-a53.ipk
 1.9K lxc-auto_5.0.3-1_aarch64_cortex-a53.ipk
 1.6K lxc-common_5.0.3-1_aarch64_cortex-a53.ipk
 1.2K lxc-unprivileged_5.0.3-1_aarch64_cortex-a53.ipk
 978 lxc_5.0.3-1_aarch64_cortex-a53.ipk

Sizes after:

 378K liblxc_5.0.3-2_aarch64_cortex-a53.ipk
 27K lxc-user-nic_5.0.3-2_aarch64_cortex-a53.ipk
 24K lxc-ls_5.0.3-2_aarch64_cortex-a53.ipk
 21K lxc-usernsexec_5.0.3-2_aarch64_cortex-a53.ipk
 21K lxc-top_5.0.3-2_aarch64_cortex-a53.ipk
 20K lxc-unshare_5.0.3-2_aarch64_cortex-a53.ipk
 20K lxc-copy_5.0.3-2_aarch64_cortex-a53.ipk
 20K lxc-attach_5.0.3-2_aarch64_cortex-a53.ipk
 18K lxc-start_5.0.3-2_aarch64_cortex-a53.ipk
 18K lxc-info_5.0.3-2_aarch64_cortex-a53.ipk
 18K lxc-execute_5.0.3-2_aarch64_cortex-a53.ipk
 18K lxc-device_5.0.3-2_aarch64_cortex-a53.ipk
 18K lxc-create_5.0.3-2_aarch64_cortex-a53.ipk
 18K lxc-autostart_5.0.3-2_aarch64_cortex-a53.ipk
 17K lxc-destroy_5.0.3-2_aarch64_cortex-a53.ipk
 16K lxc-wait_5.0.3-2_aarch64_cortex-a53.ipk
 16K lxc-unfreeze_5.0.3-2_aarch64_cortex-a53.ipk
 16K lxc-stop_5.0.3-2_aarch64_cortex-a53.ipk
 16K lxc-freeze_5.0.3-2_aarch64_cortex-a53.ipk
 16K lxc-console_5.0.3-2_aarch64_cortex-a53.ipk
 16K lxc-cgroup_5.0.3-2_aarch64_cortex-a53.ipk
 15K lxc-monitor_5.0.3-2_aarch64_cortex-a53.ipk
 13K lxc-config_5.0.3-2_aarch64_cortex-a53.ipk
 12K lxc-hooks_5.0.3-2_aarch64_cortex-a53.ipk
 11K lxc-templates_5.0.3-2_aarch64_cortex-a53.ipk
 3.7K lxc-checkconfig_5.0.3-2_aarch64_cortex-a53.ipk
 2.4K lxc-configs_5.0.3-2_aarch64_cortex-a53.ipk
 1.9K lxc-auto_5.0.3-2_aarch64_cortex-a53.ipk
 1.6K lxc-common_5.0.3-2_aarch64_cortex-a53.ipk
 1.1K lxc-unprivileged_5.0.3-2_aarch64_cortex-a53.ipk
 944 lxc_5.0.3-2_aarch64_cortex-a53.ipk

Sum of Package Sizes:

 Before: 8758.78K
 After:   814.64K

The total package size has decreased by approximately 90% after the fix.

References: https://github.com/lxc/lxc/pull/4401
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2024-08-21 16:14:41 +02:00
Dirk Brenken
a486e2ddb9 adblock: update to 4.2.2-3
* bugfix: users reported unexpected side effects with  the newly introduced rpc-sys ubus service, reverted that part
*bugfix: made "tcpdump" optional

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 4803143a91)
2024-08-20 23:08:47 +02:00
Dirk Brenken
24fadad602 adblock: update to 4.2.2-2
* removal of a superfluous opkg code block (missed in the last commit)
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 9428ef4320)
2024-08-20 16:02:58 +02:00
Dirk Brenken
57e3029667 adblock: update to 4.2.2
* get rid of the opkg dependency
* fixed remaining hagezi category issues
* adblock still depends on 'gawk', but also accepts busybox awk. The readme describes two officially unsupported installation variants.

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 34db79bcd5)
2024-08-18 11:03:19 +02:00
Noah Meyerhans
f62f2ecca8 bind: bump to 9.18.28
Fixes CVEs:
- CVE-2024-1975: remove sig 0 support
- CVE-2024-4076: qctx-zversion was not being cleared when it should have been
  leading to an assertion failure if it needed to be reused.
- CVE-2024-1737: An excessively large number of rrtypes per owner can slow
  down database query processing, so a limit has been placed on the number of
  rrtypes that can be stored per owner (node) in a cache or zone database. This
  is configured with the new "max-rrtypes-per-name" option, and defaults to 100.
- CVE-2024-1737: Excessively large rdatasets can slow down database query
  processing, so a limit has been placed on the number of records that can be
  stored per rdataset in a cache or zone database. This is configured with the
  new "max-records-per-type" option, and defaults to 100.
- CVE-2024-0760: Malicious DNS client that sends many queries over TCP but
  never reads responses can cause server to respond slowly or not respond at
  all for other clients.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2024-08-16 13:36:10 -07:00
Ray Wang
b3f9730ae8 natmap: allow binding to a port or port range
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit 5a33fe0524)
2024-08-16 23:23:09 +08:00
Ray Wang
c7db0151f8 hev-socks5-server: update to 2.6.7
This commit follows the upstream project's change of license from GPLv3
to MIT.

Link: 3175713e77
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit 003b4e3696)
2024-08-16 14:42:18 +08:00
Ray Wang
555fd4395a natmap: update to 20240813
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit 7e52cafc16)
2024-08-16 14:42:09 +08:00
Luiz Angelo Daros de Luca
a00aa8dabf mjpg-streamer: fix option enabled check in init.d
[ "$enabled" ] returns true whatever non-empty value enabled has,
including 0.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit 20ea1d9812)
2024-08-15 22:27:14 -03:00
Stan Grishin
f76be42416 Merge pull request #24789 from stangri/openwrt-23.05-pbr
[23.05] pbr: cherry-pick commits from snapshots to update to 1.1.6-20
2024-08-15 06:31:36 -07:00
Stan Grishin
77c9e3cbf1 pbr: update to 1.1.6-20
This version is the final version supporting iptables and:

* it separates the old iptables/nft-capable init script from the new nft-only init script
* the new nft-script is a significant rewrite of the old recursive calls/policy parsing
  and tries to create inline nft sets which offers performance improvements

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 920d64734a)
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-08-14 07:36:24 +00:00
Stan Grishin
3bcd13f9cb pbr: bugfix: fix IPv6 interface errors
* update license to AGPL-3.0-or-later
* rename pbr_get_gateway to pbr_get_gateway4 for better readability
* improve IPv6 "gateway" detection/display on start
* prevent IPv6 interface errors on start
* revert release format

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 717a800ec5)
2024-08-14 07:34:37 +00:00
Stan Grishin
174ba37b8e pbr: update to 1.1.4-r15
* delete obsolete files/etc/init.d/pbr.init
* add files/etc/uci-defaults/91-pbr-iptables to help update from older OpenWrt
* add files/etc/uci-defaults/91-pbr-nft to help update from older OpenWrt
* update files/etc/uci-defaults/91-pbr-netifd to only add tables to supported ifaces
* re-organize variants in the Makefile so that they hopefull work this time
* update prerm for all variants for better user experience
* update the -netifd prerm to remove leftofver entries from network and rt_tables file

In the init script:
* add decorations for netifd-interfaces related operations (blue ticks)
* add rtTablesFile variables instead of hard-coding the rt_tables file
* add function to check if the table is netifd-derived
* add error messages/hints for failed interface setup and failed WAN discovery
* make cleanup_rt_tables the netifd-compatible
* streamline interface_process function with a clearer case statement
* rename the interface_process `pre-init` option to `pre_init` to conform to the other
  functions options naming style

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit bb5de23743)
2024-08-14 07:34:37 +00:00
Stan Grishin
2be4997509 pbr: prepare migration to APK
* remove dependencies/references to opkg
* simplify wan/wan6 discovery

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 44f1f1184a)
2024-08-14 07:34:37 +00:00
Stan Grishin
7627788615 pbr: update to 1.1.4-5
This update includes the following changes:
1. Makefile
  * update copyright
  * attempt to implement the proper variants to avoid luci-app dependency on both variants
  * quietly stop service on uninstall

2. Config-file
  * add the list of dnsmasq instances to target in supported dnsmasq modes
  * for default pbr variant, set the `resolver_set` to `dnsmasq.nftset`
  * for iptables pbr variant, set the `resolver_set` to `dnsmasq.ipset`
  * add the `nft_file_support` (disabled by default)
  * introduce `procd_boot_delay` to delay service start on boot
  * introduce the following nft set creation options:
    * nft_set_auto_merge
    * nft_set_counter
    * nft_set_flags_interval
    * nft_set_flags_timeout
    * nft_set_gc_interval
    * nft_set_policy
    * nft_set_timeout
  * add the pbr.user.wg_server_and_client custom user script to allow running wg server and
    client at the same time
  * add the "Ignore Local Requests" sample policy

3. Hotplug firewall/interface scripts
  * better logged messages

4. The pbr and pbr-iptables uci defaults script
  * use functions from the init script
  * improve vpn-policy-routing migration

5. The pbr-netifd uci defaults script
  * use functions from the init script
  * improve uci operations

6. Introduce the firewall.include file

7. Improve pbr.user.aws custom user script

8. Improve pbr.user.netflix custom user script

9. Introduce pbr.user.wg_server_and_client custom user script

10. Update the init file:
  * refactor some code to allow the init script file to be sourced by the uci defaults scripts
    and the luci rpcd script for shared functions
  * add support for `nft_file_mode` in which service prepares the fw4-compatible atomic nft/include
    file for faster operations on service reload
  * improve Tor support (nft mode only)
  * implement support for nft set options
  * update validation functions for new options/parameters

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 790753f6a6)
2024-08-14 07:34:37 +00:00
Stan Grishin
cf2c82f91a Merge pull request #24737 from stangri/openwrt-23.05-https-dns-proxy
[23.05] https-dns-proxy: update to 2023.12.26-1
2024-08-14 00:24:25 -07:00
Richard Muzik
1dfc6db2d5 boost: update GCC options in Makefile
Update the options to match the master branch. This drops options of no
longer supported GCC versions.

Signed-off-by: Richard Muzik <richard.muzik@nic.cz>
2024-08-12 10:10:25 -07:00
Dirk Brenken
e7459e61f0 adblock: update to 4.2.1
* added full 1Hosts feed support (4 categories)
* changed the OISD list sources to alternate wildcard domains syntax
* used only the adguard source in default config
* fixed a needless reload delay plus a few cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 875fcf3f12)
2024-08-11 09:39:47 +02:00
Dirk Brenken
f8cb76aaa5 adblock: update to 4.2.0
* new gawk dependency
* full hagezi support (all 32 categories)
* refine Stevenblack support
* refine whitelist handling
* fixed tcpdump command line for ports other than 53 (see #24685)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7b18f22e73)
2024-08-11 09:39:35 +02:00
Stan Grishin
1ca1570154 Merge pull request #24745 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: update to 1.1.2-3
2024-08-10 13:25:37 -07:00
Milinda Brantini
f5527cd0d3 golang: Update to 1.21.13
go1.21.13 (released 2024-08-06) includes fixes to the go command, 
the covdata command, and the bytes package.

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2024-08-10 16:59:43 +08:00
Michael Heimpold
9a50a89b26 Merge pull request #24754 from mhei/23.05-php8-update-to-8.2.22
[23.05] php8: update to 8.2.22
2024-08-08 07:20:52 +02:00
Stan Grishin
1e97da910c adblock-fast: update to 1.1.2-3
This version brings two significant updates:
* support for text labels/names for the external lists
* better processing of the config update files, which cleans up
  entries with missing URLs

Also:
* new config file contains names for all lists
* it tries to match existing URLs with the names from the new config file
  and update user config as part of uci-defaults script
* contains minor updates to copyright/license/upstream URL/README
* updates the config update script to remove sysctl.org list as it's outdated
* adds two new remote lists: Hagezi and 1Hosts

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 50e85ed27f)
2024-08-06 09:38:05 +00:00
Stan Grishin
4f4258074b https-dns-proxy: update to 2023.12.26-1
Cherry-pick commit has been updated to reflect a different hash required for 23.05

Makefile:
* update to latest upstream version
* remove PKG_SOURCE_DATE/PKG_SOURCE_RELEASE as they are no longer needed
* set TARGET_CFLAGS/TARGET_LDFLAGS
* update CMAKE_OPTIONS
* add CONFIGURE_ARGS to prepare for building with HTTP/3
* update package URL to upstream repo instead of documentation
* update package/description
* add README.md with link to documentation

init-script:
* do not run within image builder
* add a line which can be uncommented to remove outdated doh_server entries

020-src-options.c-add-version.patch:
* remove it, as it's no longer needed with version set in CMAKE_OPTIONS

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 9e600ac071)
2024-08-06 09:04:48 +00:00
Michael Heimpold
3e526a782f php8: update to 8.2.22
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-08-04 21:40:15 +02:00
Luiz Angelo Daros de Luca
693d3554a3 ruby: update to 3.2.5
Ruby 3.2.5 includes many bug-fixes and a security fix in bundled gem
rexml.

- CVE-2024-39908: DoS in REXML.

See: https://www.ruby-lang.org/en/news/2024/07/26/ruby-3-2-5-released/

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2024-08-02 15:51:07 +08:00
Milinda Brantini
2fc7dc8ac2 dockerd: Update to 27.1.1
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 84f2027911)
2024-07-30 23:12:59 +08:00
Milinda Brantini
fbd7d6fe40 docker: Update to 27.1.1
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit a14185ce28)
2024-07-30 23:12:59 +08:00
Milinda Brantini
ef3f699aab containerd: Update to 1.7.20
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 79fac95444)
2024-07-30 23:12:59 +08:00
Milinda Brantini
07f2aa3eaa dockerd: Update to 27.1.0
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 7e4cabe225)
2024-07-30 23:12:59 +08:00
Milinda Brantini
6cf0eb6008 docker: Update to 27.1.0
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit c8d63383ad)
2024-07-30 23:12:59 +08:00
Milinda Brantini
7db3965ca6 xray-core: update to 1.8.23
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit b82deed3de)
2024-07-30 23:12:42 +08:00
Hannu Nyman
df53a0b1ea sqm-scripts-extra: remove the ancient package
Remove the ancient package with experimental cake options,
from time when cake was not yet officially here.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 217e4ecb35)
2024-07-28 20:46:40 +03:00
Hannu Nyman
5ae298212f nano: update to 8.1
Update nano editor to version 8.1.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 98f642226f)
2024-07-28 20:45:09 +03:00
Aleksey Kolosov
3db4314e2e delve: update to 1.23.0
Support Golang 1.21 and 1.22

Signed-off-by: Aleksey Kolosov <softovick@gmail.com>
2024-07-26 12:38:34 +08:00
Milinda Brantini
6e2e3240d5 xray-core: update to 1.8.21
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit ebeeafb996)
2024-07-24 14:11:26 +08:00
Paul Donald
c2422e7404 p910nd: set bidi only if not already set
Closes #23774

Signed-off-by: Paul Donald <newtwen+github@gmail.com>
(cherry picked from commit 4628b6bd43)
2024-07-22 18:50:55 -07:00
krant
a8c75f1032 make: update to 4.4.1
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit 532f6e0782)
2024-07-21 16:17:53 +08:00
krant
3016416c56 autoconf: update to 2.72
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit 90d316b428)
2024-07-21 16:17:44 +08:00
krant
bf11148e5c automake: update to 1.16.5
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit 2bcd9a4cd7)
2024-07-21 16:17:35 +08:00
Milinda Brantini
2d98802b13 xray-core: update to 1.8.20
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit c4a7068982)
2024-07-21 12:46:50 +08:00
Ryan Keane
66e793f9c3 unbound: Update to 1.20.0
Updated 010-configure-uname.patch as source changed.
Removed 100-example-conf-in.patch as not needed any more.

Release message:

This release has a fix for the DNSBomb issue CVE-2024-33655. This has a
low severity for Unbound, since it makes Unbound complicit in targeting
others, but does not affect Unbound so much.

To mitigate the issue new configuration options are introduced.
The options discard-timeout: 1900, wait-limit: 1000
and wait-limit-cookie: 10000 are enabled by default. They limit the
number of outstanding queries that a querier can have. This limits
the reply pulse, and make Unbound less favorable for the issue.
With the config wait-limit-netblock and wait-limit-cookie-netblock
the parameters can be fine tuned for specific destinations.
More information on the attack and Unbound's mitigations are
presented further down.

Other fixes in this release are that Unbound no longer follows symlinks
when truncating the pidfile. Unbound also does not chown the pidfile,
this is for safety reasons. There are also a number of fixes for RPZ, in
handling CNAMEs. There is a memory leak fix for the edns client subnet
cache. For DNSSEC validation a case is fixed when the query is of type
DNAME. The unbound-anchor program is fixed to first write to a temporary
file, before replacing the original. This handles disk full situations,
and because of it unbound-anchor needs permission to create that file,
in the same directory as the original file. There is also a fix for
IP_DONTFRAG, to disable fragmentation instead of the opposite.

The option cache-min-negative-ttl can be used to set the minimum TTL
for negative responses in the cache. It complements existing options to
set the maximum ttl for negative responses and to set the minimum and
maximum ttl but not specifically for negative responses.

The option cachedb-check-when-serve-expired option makes Unbound use
cachedb to check for expired responses, when serve-expired is enabled,
and cachedb is used. It is enabled by default.

The -q option for unbound-checkconf can be added to silence it when
there are no errors.

Signed-off-by: Ryan Keane <the.ra2.ifv@gmail.com>
(cherry picked from commit d421db0527)
2024-07-20 14:52:20 +02:00
Karol Kolacinski
7ebcd8c81b transmission: update to version 4.0.6
Release notes:
https://github.com/transmission/transmission/releases/tag/4.0.6

Remove temporary patch included in 4.0.6 release.

Signed-off-by: Karol Kolacinski <kolacinskikarol@live.com>
(cherry picked from commit c32139757c)
2024-07-20 14:50:52 +02:00
Seo Suchan
733e6808f1 transmission: fix compile with MbedTLS 3.X
Backport pending patch, which was submitted to upstream via GitHub
to use renamed function to compile it against MbedTLS 3.x.

Signed-off-by: Seo Suchan <tjtncks@gmail.com>
(cherry picked from commit 42140c67e0)
2024-07-20 14:50:46 +02:00
Philip Prindeville
16446a3b21 bind: bump to 9.18.27
Fixes: https://gitlab.isc.org/isc-projects/bind9/-/issues/4586

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 56c0f16e8b)
2024-07-20 14:48:18 +02:00
Denis Shulyaka
dbac39060b ddns-scripts: Update knot resolver regexp
The output format of `khost` has changed. This commit fixes the regexp
for IPv4. It fixes the issue of using a custom DNS to resolve current
address.

```bash
root@localhost:~# khost ns2.afraid.org
ns2.afraid.org. has IPv4 address 69.65.50.223
ns2.afraid.org. has IPv6 address 2001:1850:1:5:800::6b
Host ns2.afraid.org. has no MX record
root@localhost:~# khost --version
khost (Knot DNS), version 3.3.5
```

Signed-off-by: Denis Shulyaka <Shulyaka@gmail.com>
(cherry picked from commit ebeae334d9)
2024-07-20 14:39:15 +02:00
Daniel Golle
f2044c19c0 exim: update to 4.98
Remove upstreamed patch 300-avoid-time-printf.patch
Exim/exim@9ae8613607

Exim version 4.98
-----------------

JH/01 Support list of dkim results in the dkim_status ACL condition, making
      it more usable in the data ACL.

JH/02 Bug 3040: Handle error on close of the spool data file during reception.
      Previously This was only logged, on the assumption that errors would be
      seen for a previous fflush().  However, a fuse filesystem has been
      reported as showing this an error for the fclose().  The spool is now in
      an uncertain state, and we have logged and responded acceptance.  Change
      this to respond with a temp-reject, wipe spoolfiles, and log the error
      detail.

JH/03 Bug 3030: Fix handling of DNS servfail respons for DANE TLSA.  When hit
      during a recipient verify callout, a QUIT command was attempted on the
      now-closed callout channel, causing a paniclog entry.

JH/04 Bug 3039: Fix handling of of an empty log_reject_target, with
      a connection_reject log_selector, under tls_on_connect.  Previously
      with this combination, when the connect ACL rejected, a spurious
      paniclog entry was made.

JH/05 Fix TLS resumption for TLS-on-connect.  This was broken by the advent
      of loadbalancer-detection for resumption, in 4.96 - which tries to
      use the EHLO response. SMTPS does not have one at the time it is starting
      TLS.  Change the default for the smtp transport host_name_extract option
      to be a static string, for TLS-on-connect cases; meaning that resumption
      will always be attempted (unless deliberately overriden).

JH/06 Bug 3054: Fix dnsdb lookup for a TXT record with multiple chunks, with a
      chunk-separator specification.  This was broken by hardening introduced
      for Bug 3031.

JH/07 Bug 3050: Fix -bp for old message_id format spoolfiles.  Previously it
      included the -H with the id; this also messed up exiqgrep.

JH/08 Bug 3056: Tighten up parsing of DKIM DNS records.  Previously, whitespace
      was not properly skipped and empty elements would cause mis-parsing.
      Tighten parsing of DKIM header records.  Previously, all but lowercase
      alpha chars would be ignored in potential tag names.

JH/09 Bug 3057: Add heuristic for spotting mistyped IPv6 addresses in lists
      being searched.  Previously we only had one for IPv4 addresses. Per the
      documentation, the error results by default in a no-match result for the
      list.  It is logged if the unknown_in_list log_selector is used.

JH/10 Bug 3058: Ensure that a failing expansion in a router "set" option defers
      the routing operation.  Previously it would silently stop routing the
      message.

JH/11 Bug 3046: Fix queue-runs.  Previously, the arrivel of a notification or
      info-request event close in time to a scheduled run timer could result in
      the latter being missed, and no further queue scheduled runs being
      initiated.  This ouwld be more likely on high-load systems.

JH/12 Refuse to accept a line "dot, LF" as end-of-DATA unless operating in
      LF-only mode (as detected from the first header line).  Previously we did
      accept that in (normal) CRLF mode; this has been raised as a possible
      attack scenario (under the name "smtp smuggling").

JH/13 Add an fdatasync call for the received message data file in spool, before
      loggging reception and sending the SMTP ack.  Previously we only flushed
      the stdio buffer so there was still the possibility of a disk error.

JH/14 Bug 3061: Avoid a split log line when trying to rewrite a malformed
      address.  Previously, for the last address in a header line (commonly
      there is only one) the terminating newline was part of the logged
      information.

JH/15 Bug 3061: Ensure a log line is written for a malformed address in a
      header, when parsing for address-qualification.  Previously one was only
      written if there were rewrite rules.

JH/16 Two-phase queue runs are now reported in the daemon startup log line and
      in exiwhat output.

JH/17 Bug 3064: Fix combination of "-q<period> -R <recipients>". Introduction of
      the multiple-queue-runners facility for 4.97 broke this, giving only a
      one-time run of the queue.

JH/18 Bug 3068: Log a warning for use of deprecated syntax in query-style
      lookups.

JH/19 Fix TLS startup. When the last expansion done before the initiation of a
      TLS session resulted in a forced-fail, a misleading error was logged for
      the expansino of tls_certificates.  This would affect the common case of
      that option being set (main-section options) but not having any variable
      parts.  It could also potentially affect tls_privatekeys.  The underlyding
      coding errors go back to 4.90 but were only exposed in 4.97.

JH/20 Bug 3047: A recent (somewhere between 10.34 and 10.42) version of the
      pcre2 library starting allocating 20kB rather than 112 bytes per match
      call, which broke the 2GB total limitation on Exim's memory management
      when a user had over 104207 messages stored and the appendfile
      maildir_quota_directory_regex option is in use.  Release the allocated
      memory every thosand files to avoid this.
      The same issue arises with the ACL regex condition, which is applied
      to every line of a received message.

JH/21 Bug 3059: Fix crash in smtp transport. When running for a message for
      which all recipients had been handled (itself an issue) a null-pointer
      deref was done on trying to write a retry record. Fix that by counting
      the outstanding recipients before trying to transmit the message.
      The situation arose for a second MX try within a transport run, when the
      first had perm-rejected a recipient (the only one for the connection, in
      the case seen) during pipelining, and then closed the TCP connection.
      The transport classified that as an I/O error, leaving the message
      outstanding but having marked up the recipient as dealt-with. It then
      tried another MX because of the I/O error. Fix this by converting the
      message-level status to ok if there was a close but all recipients were
      dealt with.  Thanks to Wolfgand Breyha for debug runs.

JH/22 The ESMTP_LIMITS facility (RFC 9422) is promoted from experimental status
      and is now controlled by the build-time option DISABLE_ESMTP_LIMITS.

JH/23 Bug 3066: Avoid leaking lookup database credentials to log.

JH/24 Bug 3081: Fix a delivery process crash.  When the router "errors_to"
      option specified a fixed address, later rewriting on that address would
      trip on the configuration data being readonly.  Instead of modifying
      in-place, copy data.  Found and fixed by Peter Benie.

JH/25 Bug 3079: Fix crash in dbmnz.  When a key was present for zero-length
      data a null pointer was followed.  Find and testcase by Sebastian Bugge.

JH/26 Fix encoding for an AUTH parameter on a MAIL FROM command.  Previously
      decimal 127 chars were not encoded, and lowercase hex was used for
      encoded values.  Outstanding since at least 1999.

JH/27 Fix crash in logging.  When a message with a large number of recipients
      had been received, and logging of recipients is enabled, the buffer used
      for logging could reach limit.  A read using a null pointer would then
      be done, resulting in a crash of the receiving process before an SMTP
      ACK for the message was returned to the sending system.  Duplicate
      messages were created as a result.
      Find and debug help by Mateusz Krawczyk

JH/28 Bug 3086: Fix exinext for ipv6.  Change the format of keys in the retry
      DB, wrapping transport record bare-ip "host names" and ipv6
      "host addresses" in square-brackets.  This makes the parsing that
      exinext does more reliable.

JH/29 Bug 3087: Fix SRS encode.  A zero-length quoted element in the local-part
      would cause a crash.

JH/30 Bug 3029: Avoid feeding Resent-From: to DMARC.

JH/31 Bug 3027: For -bh / -bhc tests change to using the compressed form of
      ipv6 addresses for the sender.  Previously the uncompressed form was used,
      and if used in textual form this would result in behavior difference
      versus non-bh.

JH/32 Bug 3096: MAIL before HELO/EHLO, where required by hosts_require_helo, is
      now classed as a protocol error and subject to smtp_max_synprot_errors.

JH/33 Bug 2994: A subdir dsearch lookup should permit a directory name that starts
      ".." and has following characters.

JH/34 Fix delivery ordering for 2-phase queue run combined with
      queue_run_in_order.

JH/35 Bug 3099: fix parsing of MIME filename= split over multiple paramemters.
      Previously the $mime_filename variable would have an incorrect value.
      While in the code, extend coverage to name= which previously was only
      supported for single parameters, despite also filling in $mime_filename.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 00c4a7f9c3)
2024-07-18 14:26:55 +01:00
Milinda Brantini
1b51b17c77 xray-core: update to 1.8.19
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit b85b8e869d)
2024-07-18 15:22:20 +08:00
Michael Heimpold
89955ee711 Merge pull request #24572 from mhei/23.05-php8-update-to-8.2.21
[23.05] php8: update to 8.2.21
2024-07-16 21:20:34 +02:00
Milinda Brantini
d14e460b5b dockerd: fix breaks IPv6 routing
Add option to support ip6tables configuration(default false).

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 55e689176e)
2024-07-16 21:33:21 +08:00
Tianling Shen
8403d14662 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1016f8f1ba)
2024-07-16 16:10:54 +08:00
Tianling Shen
7e77e583f4 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 309687f01a)
2024-07-16 16:10:49 +08:00
Tianling Shen
2ac9aba4e4 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ef9be4a53c)
2024-07-16 16:10:45 +08:00
Milinda Brantini
c7cebd6ca3 v2raya: update to 2.2.5.7
ci: Fix up Docker images' tag from version number
chore(deps): bump github.com/gin-contrib/cors from 1.3.1 to 1.6.0

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit ccccd5c92d)
2024-07-16 16:07:51 +08:00
Milinda Brantini
08e4990440 xray-core: update to 1.8.18
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 88ba5210fb)
[Removed obsolete patch as upstream has fixed.]
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2024-07-16 16:07:39 +08:00
Dirk Brenken
dc6172ecc0 banip: update 1.0.0-5
* filter crappy IP entries from urlhaus feed

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 9968fe6bf7)
2024-07-14 22:28:08 +02:00
W. Michael Petullo
46c43fc4ba krb5: update to 1.21.3
Fixes the following CVEs when compared to the last-packaged version,
1.20.1:

	CVE-2024-37370
	CVE-2024-37371
	CVE-2023-36054

Signed-off-by: W. Michael Petullo <mike@flyn.org>
2024-07-14 11:53:44 -07:00
Milinda Brantini
62fffe1a46 xray-core: update to 1.8.17
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 48ea7d33e1)
2024-07-14 11:05:34 +08:00
Milinda Brantini
658aeee101 dnsproxy: Update to 0.67.0
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2024-07-14 11:05:23 +08:00
Michael Heimpold
05a0fbe21e php8: update to 8.2.21
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.2.21

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-07-13 23:21:05 +02:00
Milinda Brantini
37a65f2175 adguardhome: Update to 0.107.46
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2024-07-13 17:58:21 +08:00
Zuev Aleksandr
9042b657d7 adguardhome: Update to 0.107.42
Signed-off-by: Zuev Aleksandr <A.Zuev@stdev.su>
(cherry picked from commit 050f13c2c7)
2024-07-13 17:58:21 +08:00
Hiếu Lê
6908bf51ab adguardhome: wait for interfaces to be up at boot
This should allow the service to be activated even earlier during
the boot process and also avoids race condition against network.

Signed-off-by: Hiếu Lê <leorize+oss@disroot.org>
(cherry picked from commit d00131e2a0)
2024-07-13 17:58:21 +08:00
Tianling Shen
62febf2164 Merge pull request #24546 from ynezz/ynezz/openwrt-23.05/license-fixes-backports
[23.05] backport package license fixes
2024-07-12 11:20:14 +08:00
Milinda Brantini
b7665f4f66 v2raya: update to 2.2.5.6
chore(deps): bump golang.org/x/net from 0.18.0 to 0.23.0 in /service

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 5a05a3a2b9)
2024-07-12 11:17:51 +08:00
Milinda Brantini
f19d10782d v2raya: update to 2.2.5.5
Fix: docker dev environment build.
Remove is-text in button style.
Add tun mode with sing-tun.
Publish docker images on Github Container Registry.
Ci: add separated singtun workflow.

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit edb50c24fc)
2024-07-12 11:17:51 +08:00
Dengfeng Liu
b092cb779c apfree-wifidog: Update to 7.07.2018
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit b643112740)
2024-07-11 20:36:28 +08:00
Dengfeng Liu
da130e8bbb apfree-wifidog: support wildcard domain
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit ca8fe51fd8)
2024-07-11 20:36:28 +08:00
Fabrice Fontaine
f24f165765 lang/python/python-paho-mqtt: fix license
python-paho-mqtt is licensed under EPL-2.0, not EPL-1.0, since version
1.6.0 and
fabe7500fb

While at it, add LICENSE.txt to PKG_LICENSE_FILES

Fixes: 784f2a519b (python-paho-mqtt: bump to version 1.6.1)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 3380427f29)
2024-07-10 10:39:27 +00:00
Fabrice Fontaine
8b613973be net/ntpd: fix license
Replace "Unique" by the standard SPDX identifier for NTP license:
https://spdx.org/licenses/NTP.html

Fixes: 1aff45c6dd (ntpd: add SPDX license information)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit f7ad88678d)
2024-07-10 10:39:26 +00:00
Fabrice Fontaine
e6e5f761b5 utils/lsof: fix license
Replace "Unique" by the standard SPDX identifier for lsof license:
https://spdx.org/licenses/lsof.html

Fixes: 59adfc86b9 (lsof: add license information)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz> [backport]
(cherry picked from commit 9111b290d1)
2024-07-10 10:39:03 +00:00
Fabrice Fontaine
e24386b3ef libs/libgd: fix license
libgd is licensed under its own "GD" license and not MIT

Fixes: 60feea09c9 (libgd: import from oldpackages, add myself as maintainer, add license...)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 41c998224d)
2024-07-10 10:37:38 +00:00
Fabrice Fontaine
f0780bb913 libs/tiff: fix license
tiff is licensed under its own "libtiff" license and not BSD-3-Clause

Fixes: 364de5bc3f (tiff: add licensing information)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit ae165deaf5)
2024-07-10 10:37:37 +00:00
Fabrice Fontaine
92a4808a21 libs/libev: fix license
libev is licensed under BSD-2-Clause or GPL-2.0-or-later since its
addition to openwrt

While at it, assign PKG_LICENSE_FILES

Fixes: 67b39f8f9b

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 070fc8021c)
2024-07-10 10:37:36 +00:00
Fabrice Fontaine
e2e4631712 net/tor: add license
tor is licensed under BSD-3-Clause

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 63c942cedb)
2024-07-10 10:37:35 +00:00
Fabrice Fontaine
652cce0edc devel/automake: fix license
automake is licensed under GPL-2.0-or-later, not GPL-3.0-or-later:
https://git.savannah.gnu.org/cgit/automake.git/tree/COPYING
indeed switch to GPL-3.0-or-later was reverted a long time ago (i.e.
before its addition to openwrt) by
https://git.savannah.gnu.org/cgit/automake.git/commit/?id=fcf2f56062e384455ec8b1aed943af33f20c27c7

While at it, add the license file

Fixes: c6ac1e3f76

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit f3e54bda31)
2024-07-10 10:37:34 +00:00
Fabrice Fontaine
a4d7058fe8 utils/vim: add license info
vim is licensed under its own Vim license:
https://spdx.org/licenses/Vim.html

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 584f4e7198)
2024-07-10 10:37:09 +00:00
Fabrice Fontaine
0d4d322e67 libassuan: Fix license
libassuan license is wrong since the addition of the package in commit
https://git.openwrt.org/?p=feed/packages.git;a=commit;h=e24e8fa98c813911419271d64433deb2b453fa02

Indeed, libassuan has been licensed under LGPL-2.1+ since version 1.0.3
back in 2007 [1]:

Noteworthy changes in version 1.0.3 (2007-08-24)
------------------------------------------------

 * Changed the license of the library code back to LGPLv2.1 to support
   a bunch of GPLv2(only) software which does not allow the use of
   LGPLv3.  Note that this is only a temporary change and authors of
   GPLv2(only) software are asked to switch to GPLv3 or to add an
   exception which allow the use of LPGLv3 software.

[1]: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libassuan.git;a=blob;f=NEWS;h=3a86eca4175fbcb12bb00722c2047062df67a46d;hb=HEAD

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit cb9b994a53)
2024-07-10 10:36:03 +00:00
Fabrice Fontaine
10babb22c8 gpgme: Fix license
gpgme license is wrong since the addition of the package in commit
https://git.openwrt.org/?p=feed/packages.git;a=commit;h=3e39633b75e7d26f3666bce9c2e97d268f0fd068

Indeed, gpgme has been licensed under LPGL-2.1+ since version 1.0.2 back
in 2004 [1]:

Noteworthy changes in version 1.0.2 (2004-12-28)
------------------------------------------------

 * Changed the license of the library to the GNU Lesser General Public
   License (LGPL), version 2.1 or later.

[1]: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gpgme.git;a=blob;f=NEWS;h=2475a877a40817f575accd22a386bfd5f0a66aad;hb=HEAD

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit e8bbeb05b9)
2024-07-10 10:36:02 +00:00
Hirokazu MORIKAWA
cf2ef83378 node: July 8, 2024 Security Releases
This is a security release.

Notable Changes

    CVE-2024-36138 - Bypass incomplete fix of CVE-2024-27980 (High)
    CVE-2024-22020 - Bypass network import restriction via data URL (Medium)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-07-10 13:12:50 +08:00
Milinda Brantini
e1b996e98f golang: Update to 1.21.12
go1.21.12 (2024-07-02) includes security fixes to the net/http package, 
as well as bug fixes to the compiler, the go command, the runtime, 
and the crypto/x509, net/http, net/netip, and os packages.

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2024-07-10 10:37:22 +08:00
Andrey Butirsky
e56f8ebefe sms-tool: version bump to 2023-09-21
Fixes:
"no SMS Messages if some of them contain From: field with special symbols":
https://github.com/4IceG/luci-app-sms-tool-js/issues/9

Signed-off-by: Andrey Butirsky <butirsky@gmail.com>
2024-07-08 16:49:44 -07:00
Lu jicong
6d08bdf372 rust: select correct architecture for armv5
Currently, armv5 and armv6 targets are both using armv6 rustc.
Without this patch, rust programs in armv5 targets throw illegal instruction
error.

Signed-off-by: Lu jicong <jiconglu58@gmail.com>
(cherry picked from commit 84464a656c)
2024-07-07 20:58:21 +08:00
Florian Eckert
a0bf47605f rust: add patch to fix remote filesystem issue
If the download directory is on another filesystem (NFS), then the
current implementation of bootstrapping rust fails. Because the 'syscall'
(rename) does not work on crossing filesystem boundary.

This chnage was already merged upstream to the github main rust repository.
rust-lang/rust#124975

The patch has been rebased so that it can be applied correctly.
No functional change.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 6b6c74dca8)
2024-07-07 20:58:21 +08:00
Tianling Shen
e081cb182a rust: Update to 1.78.0
- Switch back to .gz tarball
- Replace local bootstrap cache hack with upstreamed option

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c1b3e0440f)
2024-07-07 20:58:21 +08:00
Andreas Gnau
35b740e4e3 jq: Add PKG_CPE_ID
Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>
(cherry picked from commit 7e5332e3cd)
2024-07-06 10:28:19 -07:00
Andreas Gnau
32c5137a13 uwsgi: Add PKG_CPE_ID
Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>
(cherry picked from commit 9477f71f99)
2024-07-06 10:28:19 -07:00
Andreas Gnau
4fe6b2c67c mxml: Add PKG_CPE_ID
Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>
(cherry picked from commit fc043c0039)
2024-07-06 10:28:19 -07:00
Alexander Couzens
8746e3a3dd net/iperf: assign PKG_CPE_ID
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
(cherry picked from commit 85a9ea33ec)
2024-07-06 10:28:19 -07:00
Alexander Couzens
367b778848 net/iperf3: assign PKG_CPE_ID
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
(cherry picked from commit e97f763a72)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
b493b3e5b2 net/i2pd: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Ai2pd%3Ai2pd

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 4ea63a66d0)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
557fc52d6b libs/libvpx: fix PKG_CPE_ID
There is not a single CVEs under cpe:/a:john_koleszar:libvpx
so use cpe:/a:webmproject:libvpx:
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Awebmproject%3Alibvpx

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 37a60ca934)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
d31e6b044b libs/apr: fix PKG_CPE_ID
There is not a single CVE under cpe:/a:apache:apr
so use cpe:/a:apache:portable_runtime:
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aapache%3Aportable_runtime

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit a9ddc8e373)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
73c3c2bacf libs/libestr: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aadiscon%3Alibestr

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 2d0649c1c9)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
f0195d89d0 net/tcpreplay: fix PKG_CPE_ID
There is not a single CVE under cpe:/a:appneta:tcpreplay
so use cpe:/a:broadcom:tcpreplay:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:broadcom:tcpreplay

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 52282b2ed9)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
22d6d71320 utils/cryptsetup: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:cryptsetup_project:cryptsetup

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit cf0d28bf8c)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
3b9d7313b3 libs/fmtlib: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:fmt:fmt

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 903d010020)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
a490b70637 net/atftp: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:atftp_project:atftp

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 154fda5933)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
9904407055 libs/libyang: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:cesnet:libyang

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 3c82335658)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
ff916f3d3f multimedia/gst1-plugins-bad: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:freedesktop:gst-plugins-bad

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 480aaec2ca)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
b1fd4362f8 lang/vala: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:gnome:vala

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 72e92747a7)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
6d8a44764e libs/freetype: fix PKG_CPE_ID
There is not a single CVE under cpe:/a:freetype:freetype2
so use cpe:/a:freetype:freetype:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:freetype:freetype

Fixes: 456ae2f541

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit eb2c47d493)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
1535d8ca82 utils/domoticz: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:domoticz:domoticz

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 1ebffab763)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
8c72417782 libs/libinput: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:freedesktop:libinput

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 17d25745ba)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
2af503f311 net/fail2ban: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:fail2ban:fail2ban

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 4d18c15388)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
9131151ef6 utils/crun: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:crun_project:crun

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit a22a7b92c8)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
9f3b98ae0d utils/pax-utils: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:gentoo:pax-utils

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 37223bbca6)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
5934d69086 lang/python/python-docker: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:docker:docker-py

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit dd52b70c4c)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
3521fa98f6 admin/atop: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:atop_project:atop

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 07de80e8b4)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
2e12f6109b libs/libmbim: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:freedesktop:libmbim

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit c24fb4a2f7)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
f878002e98 net/fastd: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:fastd_project:fastd

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 9404f17af1)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
5e947756d9 utils/augeas: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:augeas:augeas

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 229fccfc25)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
b56db1542a utils/cgroupfs-mount: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:cgroupfs-mount_project:cgroupfs-mount

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit f91be9a87f)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
cd78db5173 utils/acl: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aacl_project%3Aacl

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 0d4d554624)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
029aede366 net/bwm-ng: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:bwm-ng_project:bwm-ng

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit ff56f87733)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
0d8817c582 libs/libgee: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:gnome:libgee

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 4bdc29ece4)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
72f0ab05ee libs/libpam: fix PKG_CPE_ID
linux-pam:linux-pam is a better CPE ID than kernel:linux-pam as this CPE
ID has the latest CVEs (whereas kernel:linux-pam only has a
SUSE-specific CVE):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:linux-pam:linux-pam

Fix: 6f74b0c4f1

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 2269848bff)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
dc88a59233 net/krb5: fix PKG_CPE_ID
mit:kerberos_5 is a better CPE ID than mit:kerberos as this CPE ID has
the latest CVEs (whereas mit:kerberos only has CVEs until 2018):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:mit:kerberos_5

Fix: 299e5b0a9b

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 302761f0e8)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
4fc01ae350 libs/vips: fix PKG_CPE_ID
libvips:libvips is a better CPE ID than vips:vips as this CPE ID has the
latest CVEs (whereas vips only has an old CVE from 2010):

  https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libvips:libvips

Fix: 299e5b0a9b

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit a220c04b50)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
4fcfa3e9ba admin/sudo: fix PKG_CPE_ID
sudo_project:sudo is a better CPE ID than todd_miller:sudo as this CPE
ID has the latest CVEs (whereas todd_miller:sudo only has CVEs up to
2016):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:sudo_project:sudo

Fixes: 8ce9f30c42 (sudo: Update to 1.8.24)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 253944fc62)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
a8345ffad2 utils/squashfs-tools: fix PKG_CPE_ID
There is not a single CVE linked to phillip_lougher:squashfs so use
squashfs-tools_project:squashfs-tools instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:squashfs-tools_project:squashfs-tools

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 9e770d6c1d)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
8bb8ac555c lang/python/python-aiohttp: fix PKG_CPE_ID
aiohttp:aiohttp is a better CPE ID than aio-libs_projet:aiohttp as this
CPE ID has the latest CVEs (whereas aio-libs_project:aiohttp only has
one CVE from 2018):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:aiohttp:aiohttp

Fixes: 2edf5034f1 (python-aiohttp: add a new package)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 8b9965fcb3)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
2f02119888 lang/python/python-urllib3: fix PKG_CPE_ID
There is not a single CVE linked to urllib3_project:urllib3 so use
python:urllib3 instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:python:urllib3

Fixes: 6dcaa769d8 (python-urllib3: update to version 1.25)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit d369edb571)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
9c14028de9 lang/python/python-requests: fix PKG_CPE_ID
There is not a single CVE linked to python-requests:requests so use
python:requests instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:python:requests

Fixes: ceadbcbb64 (treewide: add PKG_CPE_ID for cvescanner)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit c0aec8bc08)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
e32911eafc libs/redis: fix PKG_CPE_ID
There is not a single CVE linked to pivotal_software:redis so use
redis:redis instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:redis:redis

Fixes: ceadbcbb64 (treewide: add PKG_CPE_ID for cvescanner)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 5c089b16ba)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
c899116930 net/vsftpd: fix PKG_CPE_ID
vsftpd_project:vsftpd is a better CPE ID than beasts:vsftpd as this CPE
ID has the latest CVEs (whereas beasts:vsftpd only has CVEs up to 2015):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:vsftpd_project:vsftpd

Fixes: 1371b7be87 (vsftpd: Fix compilation without ECC or deprecated APIs)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 803c7b0571)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
50f8f6aeac net/tinc: fix PKG_CPE_ID
tinc-vpn:tinc is a better CPE ID than tinc:tinc as this CPE ID has the
latest CVEs (whereas tinc:tinc only has CVEs up to 2002):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:tinc-vpn:tinc

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit b52f465c7b)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
cd311ffe14 net/tinyproxy: fix PKG_CPE_ID
tinyproxy_project:tinyproxy is a better CPE ID than banu:tinyproxy as
this CPE ID has the latest CVEs (whereas banu:tinyproxy only has CVEs up
to 2012):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:tinyproxy_project:tinyproxy

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit d6d157f644)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
e7714d6925 utils/tmux: fix PKG_CPE_ID
tmux_project:tmux is a better CPE ID than nicholas_marriott:tmux as this
CPE ID has the latest CVE (whereas nicholas_marriott:tmux only has a CVE
from 2011):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:tmux_project:tmux

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit c42dcc5fd6)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
f04d71055d utils/zsh: fix PKG_CPE_ID
zsh:zsh is a better CPE ID than zsh_project:zsh as this CPE ID has the
latest CVEs (whereas zsh_project:zsh only has CVEs up to 2017):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:zsh:zsh

Fixes: ff056fcffc (zsh: Update to 5.6.2)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 00e038942a)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
504faf4baa net/boinc: fix PKG_CPE_ID
boinc_project:boinc has never been a valid CPE ID so use
rom_walton:boinc instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:rom_walton:boinc

Fixes: 9c2bd865c7 (boinc: new package for distributed computing/data acquisition)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 013a2f2dfa)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
5c1e4ca0ef utils/lrzsz: fix PKG_CPE_ID
PKG_CPE_ID was missing ":lrzsz"

Fixes: 6d6c4b21b5 (lrzsz: update to v0.12.21rc and fix a CVE)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit da56ee5bed)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
df3b0d47eb libs/expat: fix PKG_CPE_ID
There is not a single CVE linked to libexpat:expat so use
libexpat_project:libexpat instead:

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libexpat_project:libexpat

Fixes: 70c62ef2d7 (expat: update to version 2.2.7 (security fix))

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 77a02f1efc)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
ca577d40e9 libs/libidn2: fix PKG_CPE_ID
There is not a single CVE linked to libidn2_project:libidn2 so use
gnu:libidn2 instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:gnu:libidn2

Fixes: ceadbcbb64 (treewide: add PKG_CPE_ID for cvescanner)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit b5b4545b24)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
19c07a2efe net/miniupnpc: fix PKG_CPE_ID
cpe:/a:miniupnp_project:miniupnpc is the correct CPE ID for miniupnpc:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:miniupnp_project:miniupnpc

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 0d96d38c6c)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
eea8ccef97 multimedia/motion: fix PKG_CPE_ID
motion_project:motion is a better CPE ID than lavrsen:motion as this CPE
ID has the latest CVE (whereas lavrsen:motion only a CVE from 2008):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:motion_project:motion

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 1a50def305)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
8884185312 net/nbd: fix PKG_CPE_ID
There is not a single CVE linked to network_block_device:nbd so use
network_block_device_project:network_block_device instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:network_block_device_project:network_block_device

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 222df5ed5d)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
866f4dabc3 lang/python/python-pip: fix PKG_CPE_ID
There is not a single CVE linked to python:pip so use pypa:pip instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:pypa:pip

Moreover, CPE_ID missed PKG_ prefix

Fixes: eee273507b (python3: Split pip into separate source package)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit acad8ffb5f)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
af3ae451d6 utils/gpsd: fix PKG_CPE_ID
gpsd_project:gpsd is a better CPE ID than berlios:gps_daemon as this CPE
ID has the latest CVEs (whereas berlios:gps_daemon only has one CVE from
2004):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:gpsd_project:gpsd

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 1b1c28c9a0)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
8a13733a2f utils/ntfs-3g: fix PKG_CPE_ID
tuxera:ntfs-3g is a better CPE ID than ntfs-3g:ntfs-3g as this CPE ID
has the latest CVEs (whereas ntfs-3g:ntfs-3g only has one CVE from 2007):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:tuxera:ntfs-3g

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 52a5e71b49)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
84d7eb7af2 treewide: assign PKG_CPE_ID
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
[davici: not present in 23.05]
(cherry picked from commit 5afe5c9031)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
19dd98e9f7 lang/python/python-yaml: fix PKG_CPE_ID
There is not a single CVE linked to pyyaml_project:pyyaml so use
pyyaml:pyyaml instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:pyyaml:pyyaml

Fixes: c06a04c754 (python-yaml: update to version 5.1)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 94734c4bf9)
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
bbb20bd572 treewide: fix licence typos
- PKG_LICENCE -> PKG_LICENSE
- PKC_LICENSE_FILES -> PKG_LICENSE_FILES
- BSD 3-Clause -> BSD-3-Clause
- BSD-3-clause -> BSD-3-Clause
- BSD-2-clause -> BSD-2-Clause
- Public Domain -> Public-Domain
- PublicDomain -> Public-Domain
- Drop unneeded ',' in PKG_LICENSE or PKG_LICENSE_FILES

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 820fcc5fb9)
2024-07-06 10:28:19 -07:00
John Audia
a9ee98f9ef openssh: bump to 9.8p1
Release notes: https://www.openssh.com/txt/release-9.8

* 9.8p1 fixes CVE-2024-6387
* Adjusted Makefile to provide /usr/lib/sshd-session
* Given the troubles with -fzero-call-used-regs and all the
  broken checks, makes sense to skip it

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 75674f0439)
2024-07-04 13:35:52 -07:00
Milinda Brantini
8d8f0b4616 dockerd: Update to 27.0.3
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit e7ef6ae485)
2024-07-04 02:27:29 +08:00
Milinda Brantini
5a013e8d12 docker: Update to 27.0.3
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit d9925c4813)
2024-07-04 02:27:29 +08:00
Milinda Brantini
07003b75d3 docker: Update to 27.0.2
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit ec1320310a)
2024-07-04 02:27:29 +08:00
Milinda Brantini
532f64e5b5 runc: Update to 1.1.13
This is the thirteenth patch release in the 1.1.z release branch of runc.
Itbrings in Go 1.22.x compatibility and fixes a few issues,
including anoccasional wrong nofile rlimit in runc exec,
and a race between runc list and runc delete.

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit c49a117238)
2024-07-04 02:27:29 +08:00
Milinda Brantini
d393401404 dockerd: Update to 27.0.2
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 24d29581e2)
2024-07-04 02:27:29 +08:00
Milinda Brantini
e610956617 dockerd: Update to 26.1.4
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 001e7138dd)
2024-07-04 02:27:29 +08:00
Milinda Brantini
1660023b9d containerd: Update to 1.7.18
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 8f3a94645d)
2024-07-04 02:27:29 +08:00
Milinda Brantini
c8c946ef1c docker: Update to 26.1.4
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit ab5b9ea2f0)
2024-07-04 02:27:29 +08:00
Dirk Brenken
da532f52c9 adblock: update 4.1.5-11
* removed an accidentally commited flag of the upcoming adblock 5.x, this fixes a startup regression without trigger interface

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit b76f6e1c16)
2024-06-30 19:30:52 +02:00
Goetz Goerisch
cac8cba090 jool: update to 4.1.12
Update jool to 4.1.12
Changelog: https://github.com/NICMx/Jool/releases/tag/v4.1.12

Signed-off-by: Goetz Goerisch <ggoerisch@gmail.com>
(cherry picked from commit 28256b2710)
2024-06-29 11:57:25 -07:00
Goetz Goerisch
86cd13e818 jool: update documentation
* corrected the documentation links for upstream
* fixed style to be correctly rendered
* add reference to OpenWrt tutorial

Signed-off-by: Goetz Goerisch <ggoerisch@gmail.com>
(cherry picked from commit 8b08b29271)
2024-06-29 11:57:25 -07:00
Tiago Gaspar
1de4596df2 jool: update to 4.1.11
Update jool to 4.1.11 and remove unneeded patch.
Changelog: https://github.com/NICMx/Jool/releases/tag/v4.1.11

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 643e3bf73a)
2024-06-29 11:57:25 -07:00
Tiago Gaspar
286a830c32 jool: update package to version 4.1.10
Update jool to version 4.1.10 and remove a no longer needed patch.
There was also a need to backport a patch to fix compile in some archs.

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 26bf35bb43)
2024-06-29 11:57:25 -07:00
Tianling Shen
55ef99398c cloudflared: Update to 2024.4.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 462bfd84e4)
[rebased upon 23.05 branch]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-06-29 17:28:40 +08:00
Ryan Keane
341665c750 cloudflared: Fix incorrect uci config syntax
Fix incorrect uci config syntax, caused by a careless newbie contributer.
Modify function append_param_arg() in init script, to support hyphenated
arguments.
Add more command parameters as uci options, no value is set to keep it default.

Signed-off-by: Ryan Keane <the.ra2.ifv@gmail.com>
(cherry picked from commit 2d711c8fbd)
[rebased upon 23.05 branch]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-06-29 17:23:32 +08:00
Ryan Keane
f01fbf8919 cloudflared: Add more run parameters in UCI
https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/configure-tunnels/tunnel-run-parameters/

Close #24122

Signed-off-by: Ryan Keane <the.ra2.ifv@gmail.com>
(cherry picked from commit 31c91837f9)
[rebased upon 23.05 branch]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-06-29 17:22:57 +08:00
Dirk Brenken
39b307f1d0 adblock: update 4.1.5-10
* made the DNS Reporting / tcpdump parsing code more capable
* small init fixes
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit a029f01d81)
2024-06-27 07:48:24 +02:00
Milinda Brantini
5747af1a58 aardvark-dns: update to 1.11.0
changelogs:
https://github.com/containers/aardvark-dns/compare/v1.10.0...v1.11.0

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 39f75472f5)
2024-06-24 15:29:51 -07:00
Oskari Rauta
c2f35ddc2d aardvark-dns: update to 1.10.0
changelogs: https://github.com/containers/aardvark-dns/releases

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit f03ac48d30)
2024-06-24 15:29:51 -07:00
Daniel Golle
f47158a63d libjwt: add package
Add package for JWT C Library built against OpenSSL.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 57fdc5d2b9)
2024-06-24 15:29:40 -07:00
Milinda Brantini
153984a8fb powertop: update to 2.15
Release mainly focuses on bug fixes and patching compatibility issues.
Also, adds support to multiple platforms.
Removed obsolete patch as upstream has fixed.

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2024-06-23 23:08:42 -07:00
Milinda Brantini
6502d4ca24 xray-core: update to 1.8.16
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit f84ed39a61)
2024-06-22 22:38:37 +08:00
Milinda Brantini
7bd5f1dc29 xray-core: update to 1.8.15
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 4cbfd4709e)
2024-06-22 22:38:37 +08:00
Milinda Brantini
62f50a26d9 natmap: reset PKG_RELEASE to 1
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 1d542b8919)
2024-06-22 16:38:00 +08:00
Milinda Brantini
3a0073c4d7 natmap: update to 20240603
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit b0a4fd300f)
2024-06-22 16:38:00 +08:00
Dirk Brenken
15c2051eac banip: update 1.0.0-4
* relax the firewall pre-check if fw4 is not running
* replace former stale tor feed source with 'https://www.dan.me.uk/torlist/?exit'
* add openvpn log term/search pattern example to the readme
* the default config now includes only log terms for dropbear and LuCI, all others are optional
* readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit d17f661aee)
2024-06-22 10:13:57 +02:00
Milinda Brantini
44231285db golang: Update to 1.21.11
go1.21.11 (released 2024-06-04) includes 
security fixes to the archive/zip and net/netip packages, 
as well as bug fixes to the compiler, 
the go command, the runtime, and the os package.

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2024-06-21 03:32:24 +08:00
Glenn Strauss
4eb73df5ef lighttpd: fix missing dependency for OpenSSL crypto library
This change will provide the necessary dependency resolution, fixing:

  Package lighttpd is missing dependencies for the following libraries:
  libcrypto.so.3

Fixes: #23794
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit a300185d49)
2024-06-20 15:21:38 +08:00
Petr Štetiar
0302f8cf63 lighttpd: add option to use OpenSSL crypto library
Currently, it is not feasible to configure lighttpd to use OpenSSL as
its internal crypto library. Instead, one must rely on alternative
crypto libraries such as Nettle or mbedTLS. This setup is not ideal in
scenarios where a single crypto library is preferred. To address this
issue, lets propose introducing OpenSSL as an additional configuration
option.  Similarly, propose GnuTLS as additional configuration option.

Closes: #24004
Co-developed-by: Glenn Strauss <gstrauss@gluelogic.com>
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 8c9597f1dc)
2024-06-20 15:21:38 +08:00
Rosen Penev
8e683037f0 schroot: fix compilation with GCC14
GCC now does not allow assigning an std::locale to an std::string. No
idea why it worked originally.

Also fixed compilation with full NLS.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c3e2dcc128)
2024-06-19 22:27:54 +02:00
Rosen Penev
2cfcb0893c stlink: fix compilation with GCC 14
Switch to local git tarballs. Smaller.

Upstream backport and a local patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 41a5880f01)
2024-06-19 18:51:30 +02:00
Ryan Doyle
d25180284d prometheus-node-exporter-lua: Add optional mwan3 collector
Supports interface metrics exposed by mwan3. The performance is a
little slow compared to other collectors (~300ms) as the ubus call is
where most of the time is spent. Any future speedups are likely better
put into mwan3's rpcd binary.

Signed-off-by: Ryan Doyle <ryan@doylenet.net>
[rename metrics,bump version]
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit c279efb760)
2024-06-18 18:28:11 -04:00
Rob Hoelz
87a831fa8e prometheus-node-exporter-lua: Add "node_textfile_mtime_seconds" metric
…for textfile collector, to make it more consistent with the upstream
Prometheus node-exporter

Signed-off-by: Rob Hoelz <rob@hoelz.ro>
[bump version]
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 4edae84499)
2024-06-18 18:28:11 -04:00
Antoine C
611b372442 prometheus-node-exporter-lua: remove duplicated nat samples
Merge duplicate src/dest samples by suming their value (bytes count)

Fixes #24166

Signed-off-by: Antoine C <hi@acolombier.dev>
[bump version number]
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit cd8f67298c)
2024-06-18 18:28:11 -04:00
René Treffer
2fbca34c77 prometheus-node-exporter-lua: fix netclass duplicate TYPE lines
Fixes a315c40b72

[initial fix]
Signed-off-by: René Treffer <treffer@measite.de>
[fixup René version]
Signed-off-by: PichetGoulu <pichet@nosuid.be>
[actual commit]
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit aa7ea7938f)
2024-06-18 18:28:11 -04:00
Balázs Urbán
49ff5da747 prometheus-node-exporter-lua-hostapd_stations: fix not reporting metrics
- fix incorrect interface name mapping in hostapd_stations exporter

Signed-off-by: Balázs Urbán <szalab9@gmail.com>
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 1930d39a15)
2024-06-18 18:28:11 -04:00
Etienne Champetier
8cb0a16d1b prometheus-node-exporter-lua: add missing libubus-lua dependency
Fixes a315c40b72

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit fe489585c2)
2024-06-18 18:28:11 -04:00
Ivan Mironov
d1db488d93 prometheus-node-exporter-lua: bump package version
Signed-off-by: Ivan Mironov <mironov.ivan@gmail.com>
(cherry picked from commit 41975220c0)
2024-06-18 18:28:11 -04:00
Ivan Mironov
fc1b9071a4 prometheus-node-exporter-lua: add basic hwmon exporter
This collector supports following metrics:

 * node_hwmon_temp_celsius
 * node_hwmon_pwm

and following auxiliary mappings:

 * node_hwmon_chip_names
 * node_hwmon_sensor_label

Tested on:

 * Banana Pi BPI-r3 / OpenWrt 23.05.0-rc2
 * TP-Link Archer C7 v5 / OpenWrt 22.03.5

Signed-off-by: Ivan Mironov <mironov.ivan@gmail.com>
(cherry picked from commit 431fefbdea)
2024-06-18 18:28:11 -04:00
Joel Pettersson
7b683fd657 prometheus-node-exporter-lua: Add thermal collector
Signed-off-by: Joel Pettersson <me@joelpet.se>
(cherry picked from commit 1eeb1dc2de)
2024-06-18 18:28:11 -04:00
Dirk Brenken
464ca5325e banip: update 1.0.0-3
* fixed a regression in the split Set function (reported in the forum)
* fixed regex for urlhaus feed

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 2cc7cf3ca0)
2024-06-18 17:05:22 +02:00
Dengfeng Liu
6d81b33c88 apfree-wifidog: update to 7.06.2008
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit a1b1bd87bf)
2024-06-17 16:23:48 +08:00
Dengfeng Liu
0e098b8fef apfree-wifidog: support rule group and websocket&dns proxy flag
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit a34f47e7bb)
2024-06-17 16:23:48 +08:00
Luiz Angelo Daros de Luca
287d5b8653 ruby: update to 3.2.4
The 3.2.3 release includes many bug-fixes. This release also includes
the update of uri.gem to 0.12.2 which contains the security fix.

- CVE-2023-36617: ReDoS vulnerability in URI

See: https://www.ruby-lang.org/en/news/2024/01/18/ruby-3-2-3-released/

The 3.2.4 release includes security fixes. Please check the topics below
for details.

- CVE-2024-27282: Arbitrary memory address read vulnerability with Regex search
- CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc
- CVE-2024-27280: Buffer overread vulnerability in StringIO

See: https://www.ruby-lang.org/en/news/2024/04/23/ruby-3-2-4-released/

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2024-06-17 16:23:24 +08:00
Dirk Brenken
2919fae481 banip: update 1.0.0-2
* fixed a possible "Argument list too long" error in the f_log function
* fixed multiple, incomplete digit character classes
* fixed/optimized split file handling
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 059a530329)
2024-06-16 21:53:33 +02:00
Milinda Brantini
76bb48944f sing-box: update to 1.9.3
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 128c0f03ef)
2024-06-16 16:05:21 +08:00
Milinda Brantini
6da721a4cc sing-box: update to 1.9.2
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit b82a70dd19)
2024-06-16 16:05:21 +08:00
Milinda Brantini
5648661109 sing-box: update to 1.9.1
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 909ec005b6)
2024-06-16 16:05:21 +08:00
Stan Grishin
e0d7863519 unbound: pull in adblock-fast generated adb_list
* adblock-fast can generate the compatible adb_list-file, but it's
  only pulled if net/adblock installed, this patch also pulls in the
  adb_list file if net/adblock-fast is installed.
* also bump PKG_RELEASE

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit d7d1743c83)
2024-06-11 18:06:39 +08:00
Michael Heimpold
36cf3cfb39 Merge pull request #24340 from mhei/23.05-php8-update-to-8.2.20
[23.05] php8: update to 8.2.20
2024-06-10 06:52:18 +02:00
Rosen Penev
6be3892dc1 iperf3: fix usage with big endian
Upstream submissions.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 37ade7efab)
2024-06-08 19:43:53 -07:00
John Audia
98811c336b iperf3: update to 3.17.1
Changelogs since last release:
	https://github.com/esnet/iperf/releases/tag/3.17
	https://github.com/esnet/iperf/releases/tag/3.17.1

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit b450fbc5ea)
2024-06-08 19:43:53 -07:00
Dirk Brenken
c9829c92e1 banip: release 1.0
* made sure, that the domain lookup always add the found IPs to the underlying allow-/blocklist-Set
* major readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit cc709768b5)
2024-06-08 10:35:19 +02:00
Michael Heimpold
03e0dd76c8 php8: update to 8.2.20
This fixes:
    - CVE-2024-4577
    - CVE-2024-5458
    - CVE-2024-5585

Changelog: https://www.php.net/ChangeLog-8.php#8.2.20

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-06-08 07:18:40 +02:00
Christian Marangi
a183849549 libpfring: backport patch fixing compilation error for sa_data
Backport patch fixing compilation error for sa_data not well defined.
This is triggered only on platform that makes use of fortify string and
cause compilation error due to the fact that sa_data is not well defined
and his size is arbitrary.

Patch has been accepted in the PF_RING project and this is just a
backport.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit c3a50a9fac)
2024-06-07 03:21:46 +08:00
John Thomson
29b1b8301a libpfring: update to 8.4.0
Release notes:
https://github.com/ntop/PF_RING/releases/tag/8.4.0

Signed-off-by: John Thomson <git@johnthomson.fastmail.com.au>
(cherry picked from commit 534bd518f3)
2024-06-07 03:21:46 +08:00
Ray Wang
0f0c24a81f hev-socks5-server: update to 2.6.6
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit c6777c6ecc)
2024-06-04 16:47:26 +08:00
Tianling Shen
d362682416 Merge pull request #24317 from p-w-p/xray-core_update
[23.05] xray-core: update to 1.8.13
2024-06-04 16:46:10 +08:00
Tianling Shen
d81d04aafe xray-core: update to 1.8.13
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 6a9b65119d)
2024-06-03 19:17:17 +08:00
Hirokazu MORIKAWA
5ad306413e node: bump to v18.20.3
Notable changes
This release fixes a regression introduced in Node.js 18.19.0 where http.server.close() was incorrectly closing idle connections.
A fix has also been included for compiling Node.js from source with newer versions of Clang.
The list of keys used to sign releases has been synchronized with the current list from the main branch.

Updated dependencies
* acorn updated to 8.11.3.
* acorn-walk updated to 8.3.2.
* ada updated to 2.7.8.
* c-ares updated to 1.28.1.
* corepack updated to 0.28.0.
* nghttp2 updated to 1.61.0.
* ngtcp2 updated to 1.3.0.
* npm updated to 10.7.0. Includes a fix from npm@10.5.1 to limit the number of open connections npm/cli#7324.
* simdutf updated to 5.2.4.
* zlib updated to 1.3.0.1-motley-7d77fb7.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-06-03 16:35:13 +08:00
Anya Lin
b131f8ef85 sing-box: update to 1.9.0
Signed-off-by: Anya Lin <hukk1996@gmail.com>
(cherry picked from commit 087fe17bf7)
2024-06-02 02:14:30 +08:00
Dirk Brenken
37dc804031 banip: update 0.9.6-3
* fixed concurrent, too high nft loads during feed processing (seen in LuCI frontend)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 3584187f69)
2024-06-01 16:07:31 +02:00
Michael Heimpold
93b43c2b9c apache: add compile fix for libxml-2.12.x
libxml2 restructured includes, thus another include is now required
otherwise build fails.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 7009c6be73)
2024-06-01 04:36:53 +08:00
Dirk Brenken
e621c8f672 banip: update 0.9.6-2
* fix regex for nixspam and sslbl feed
* list the pre-routing limits in the banIP status
* small fixes and log improvements

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 27e86ef42e)
2024-05-31 06:42:52 +02:00
Dengfeng Liu
e5a9ac21ef xfrpc: update to 3.05.661
This version is compatible with FRPS 0.58.0

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit d5c22612a9)
2024-05-28 23:04:12 +08:00
Dengfeng Liu
123ee52222 xfrpc: Revised the config file and adjusted the corresponding init file
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit e39af31753)
2024-05-28 23:04:12 +08:00
Nikos Mavrogiannopoulos
57d3da5096 ocserv: use a more neutral character for sed
This resolves a startup issue.

Resolves: #24203

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-05-27 15:46:36 +02:00
Olivier Poitrey
221949b6c7 nextdns: Update to version 1.43.5
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2024-05-25 17:55:50 +03:00
Van Waholtz
dbcbbb27ea sing-box: update to 1.8.14
Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 2b7369c323)
2024-05-21 17:59:01 -07:00
Peter van Dijk
64d2e702f5 dnsdist: update to 1.9.4
fixes CVE-2024-25581

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2024-05-21 17:58:08 -07:00
Christian Lachner
20f58e4654 haproxy: update to v2.8.9
- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2024-05-21 17:40:51 +08:00
Dirk Brenken
d8cb9f1af3 banip: release 0.9.6-1
* refine IPv4 parsing, skip rough feed entries like loopback addresses
* better error logging during banIP nftables initialization and Set loading
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit ccca9c8325)
2024-05-20 16:27:41 +02:00
Nikos Mavrogiannopoulos
a14bb12dff openconnect: introduced URI parameter
This allows specifying a camouflage string in ocserv.

Fixes: #23364

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-05-18 20:34:14 +02:00
Nikos Mavrogiannopoulos
233405f68d openconnect: backport fix for anyconnect compatibility
Fixes: #21135

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-05-18 20:34:14 +02:00
krant
913cda459f gptfdisk: update to 1.0.10
- Delete upstreamed patch

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit ad6344d045)
2024-05-17 17:08:00 -07:00
Tianling Shen
2da338d5c7 golang: Update to 1.21.10
go1.21.10 (released 2024-05-07) includes security fixes to the go
command, as well as bug fixes to the net/http package.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-05-15 22:54:31 +08:00
Stan Grishin
00cf7e87a6 Merge pull request #24139 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: update to 1.1.2-1
2024-05-13 16:03:32 -07:00
Peter van Dijk
4369aa026d pdns-recursor: update to 4.8.8
fixes CVE-2024-25583; also includes changes from 4.8.7 that
fix regressions introduced with the security fixes in 4.8.6

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2024-05-13 10:42:49 -07:00
Stan Grishin
c230bf75a0 adblock-fast: update to 1.1.2-1
* move extra_command and EXTRA_HELP to the top of the init file
* add packageCompat variable for compatibility check with WebUI
* add OutputFilter variables for supported resolvers
* simplify adb_check with the use of OutputFilter variables
* add show_blocklist command to display currently blocked domains

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit fb151d5b82)
2024-05-13 04:34:46 +00:00
Nikos Mavrogiannopoulos
ade006dc9f ocserv: updated to 1.3.0
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-05-06 22:27:09 +02:00
Dirk Brenken
e983686bf6 banip: update 0.9.5-5
* fix a processing race condition
* it's now possible to disable the icmp/syn/udp safeguards in pre-routing - set the threshold to '0'.

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 083554094b)
2024-05-06 21:31:55 +02:00
Gerard Ryan
9527d8f025 docker: Update to 26.1.0
* Removed unnecessary GO lang variables

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2024-05-05 16:26:02 +08:00
Gerard Ryan
484cd2a93f dockerd: Update to 26.1.0
* Removed unnecessary GO lang variables

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2024-05-05 16:26:02 +08:00
Gerard Ryan
fad630db7d containerd: Update to 1.7.15
* Explicitly list GO_PKG_INSTALL_EXTRA
* Removed unnecessary GO lang variables

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2024-05-05 16:26:02 +08:00
Thibaut VARÈNE
16b5d1072f uspot: update to Git HEAD (2024-05-03)
5e2d15a110bb treewide: remove tip_mode
e2dbdef4cf1e treewide: rename spotfilter -> uspotfilter
ef0f5291365b uspot/uspotfilter: implement disconnect_delay
92d3356d3fb3 update README

Update the package Makefile to reflect the changes from the following
above-listed commit:

e2dbdef4cf1e treewide: rename spotfilter -> uspotfilter

(cherry picked from commit 5181ce4a48)
Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
2024-05-04 21:36:25 +08:00
Tianling Shen
4702db2865 xray-core: Update to 1.8.11
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0db33e866b)
[added a patch to fix build with go 1.21]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-05-04 19:22:01 +08:00
Tianling Shen
f47b6403cc xray-core: Update to 1.8.10
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1b59556d06)
2024-05-04 19:20:53 +08:00
Tianling Shen
525643f83d xray-core: Update to 1.8.9
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 09c4a4b1ba)
2024-05-04 19:20:50 +08:00
Tianling Shen
f61012a010 v2ray-core: Update to 5.16.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c0608d93be)
2024-05-04 19:20:41 +08:00
Tianling Shen
4bc1165609 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3f7a3e4edf)
2024-05-04 19:20:32 +08:00
Sergey Ponomarev
798738c9b7 acme-acmesh: use validation_method option instead of guessing
The new validation_method option can be: dns, webroot or standalone.
Previously we guessed the challenge type:
1. if the DNS provider is specified then it's dns
2. if standalone=1
3. fallback to webroot

The logic is preserved and if the validation_method wasn't set explicitly we'll guess it in old manner.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2024-05-03 23:26:00 +02:00
Ray Wang
ff8429b3c5 hev-socks5-server: add new package
HevSocks5Server is a high-performance socks5 server for Unix.

More details: https://github.com/heiher/hev-socks5-server

Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit 8d36908aea)
2024-05-04 02:26:54 +08:00
Hannu Nyman
e525a3f0f5 nano: update to 8.0
Update nano editor to version 8.0

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 69166dbbb7)
2024-05-03 16:25:09 +03:00
Dirk Brenken
9aa2479caf banip: update 0.9.5-4
* optimized adding suspicious IPs to Sets in the log monitor
* re-added ipblackhole feed

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 4d7c38c770)
2024-05-02 23:09:26 +02:00
Olivier Poitrey
27488be214 nextdns: Update to version 1.43.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2024-05-01 19:30:14 +03:00
Emily H.
2955c2db8a dnsproxy: add three new features
This commit adds the following features:
1. UCI support for local DNS over HTTPS/TLS/QUIC server.
2. UCI support for using private reverse DNS.
3. procd jail with CAP_NET_BIND_SERVICE, allowing
   dnsproxy to serve on standard ports directly.

Signed-off-by: Emily H. <battery_tag708@simplelogin.com>
(cherry picked from commit 5df794e343)
2024-05-01 16:07:27 +08:00
Josef Schlehofer
7aec92689d msmtp: update to version 1.8.25
Release notes:
https://marlam.de/msmtp/news/msmtp-1-8-25/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 490866d752)
2024-04-30 14:46:05 +02:00
Josef Schlehofer
7492e8cc9d transmission: update to version 4.0.5
Release notes:
https://github.com/transmission/transmission/releases/tag/4.0.5

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 19a424aede)
2024-04-30 14:45:55 +02:00
Van Waholtz
94fca3f1f3 sing-box: update to 1.8.12
Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 3fefdbf34b)
2024-04-30 18:16:51 +08:00
Stan Grishin
f00ce8a586 Merge pull request #24023 from rs/nextdns-1.43.0-openwrt-23.05
[23.05] nextdns: Update to version 1.43.0
2024-04-28 17:33:38 -07:00
Olivier Poitrey
f9e15a7b03 nextdns: Update to version 1.43.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2024-04-28 00:47:37 +00:00
Christian Marangi
24e2a32bd6 libndpi: backport patch for PCRE2 support
Backport patch for PCRE2 support as PCRE is EOL and won't receive any
support updates anymore.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit baa0d51270)
2024-04-27 12:35:54 +02:00
John Audia
988181e6a2 openssh: bump to 9.7p1
Release notes: https://www.openssh.com/txt/release-9.7

Removed upstreamed patch: 010-better_fzero-call-detection.patch

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 6be0617c00)
2024-04-27 10:05:09 +02:00
Nathan Friedly
4854a59834 librespeed-go: improve the description
This swaps the order of the lines in the description so that when LuCI displays only the first line, it still offers some helpful information.

Signed-off-by: Nathan Friedly <nathan@nfriedly.com>
(cherry picked from commit 06ea66c558)
2024-04-27 13:22:27 +08:00
Anya Lin
cbb2e66cc9 librespeed-go: Reload the daemon after modifying the tls certificate
Make the daemon reload after the tls certificate is updated

Signed-off-by: Anya Lin <hukk1996@gmail.com>
(cherry picked from commit fd1d506fff)
2024-04-27 13:22:22 +08:00
Tianling Shen
ca4569eadd v2ray-core: Update to 5.15.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ebed42fcb0)
2024-04-27 13:21:49 +08:00
Dirk Brenken
4979ade990 banip: update 0.9.5-3
* allow multiple protocol/port definitions per feed, e.g. 'tcp udp 80 443 50000'
* removed the default protocol/port limitation from asn feed

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 2c6d5adac0)
2024-04-26 21:28:32 +02:00
Dirk Brenken
a08e087dc1 banip: update 0.9.5-2
* fixed possible Set search race condition (initiated from LuCI frontend)
* fixed the "no result" Set search problem in LuCI
* removed abandoned feeds: spamhaus edrop (was merged with spamhaus drop)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit ad755e0c4d)
2024-04-26 21:28:07 +02:00
Dirk Brenken
a4732b76be banip: release 0.9.5-1
* added a DDoS protection rules in a new pre-routing chain to prevent common ICMP, UDP and SYN flood attacks and drop spoofed tcp flags & invalid conntrack packets, flood tresholds are configured via 'ban_icmplimit' (default 10/s), 'ban_synlimit' (default 10/s) and 'ban_udplimit' (default 100/s)
* the new pre-routing rules are tracked via named nft counters and are part of the standard reporting, set 'ban_logprerouting' accordingly
* block countries dynamically by Regional Internet Registry (RIR)/regions, e.g. all countries related to ARIN. Supported service regions are: AFRINIC, ARIN, APNIC, LACNIC and RIPE, set 'ban_region' accordingly
* it's now possible to always allow certain protocols/destination ports in wan-input and wan-forward chains, set 'ban_allowflag' accordingly - e.g. ' tcp 80 443-445'
* filter/convert possible windows line endings of external feeds during processing
* the cpu core autodetection is now limited to max. 16 cores in parallel, set 'ban_cores' manually to overrule this limitation
* set the default nft priority to -100 for banIP input/forward chains (pre-routing is set to -150)
* update readme
* a couple of bugfixes & performance improvements
* removed abandoned feeds: darklist, ipblackhole
* added new feeds: becyber, ipsum, pallebone, debl (changed URL)
* requires a LuCI frontend update as well (separate PR/commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit fa80fefe22)
2024-04-26 21:27:49 +02:00
Josef Schlehofer
34a650bbad syslog-ng: update to version 4.7.1
Release notes:
- https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.7.0
- https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.7.1

Also bump version in the config file to avoid warning

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 9d49df0dab)
2024-04-26 13:42:24 +02:00
Paul Spooren
12adb901dd CI: remove CircleCI for now
The GitHub CI offers currenlty more architecture and the Signed-of-by
test is covered via the DOC CI test. In case GitHub ever changes
policies, we can simply switch back.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 26c101edc3)
2024-04-26 11:35:02 +02:00
Stan Grishin
ea65457f1f Merge pull request #24014 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: bugfix: unbound-related fixes
2024-04-25 15:09:43 -07:00
Stan Grishin
21efddca3c adblock-fast: bugfix: unbound-related fixes
* include `server:` directive at the top of unbound file
* update unbound-related outputGzip variable to include full path
* return always_nxdomain for blocked domains
* also update copyright stamp/license

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 474587a1f4)
2024-04-25 21:34:22 +00:00
Stan Grishin
3d63a10cb4 Merge pull request #24006 from stangri/openwrt-23.05-nebula
[23.05] nebula: Use APK style release number
2024-04-25 14:33:12 -07:00
Sean Khan
4e6eb8f5b1 nebula: Use APK style release number
Maintainer: Stan Grishin <stangri@melmac.ca>

Run tested: aarch64, Dynalink DL-WRX36, Master Branch

Signed-off-by: Sean Khan <datapronix@protonmail.com>
(cherry picked from commit 3cbb7474c3)
2024-04-25 00:05:57 +00:00
Ray Wang
d51ad546b9 natmap: add log_std{out,err} options
Introduce `log_stdout` and `log_stderr` options for managing logging output.

Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit 5abbd3bcb2)
2024-04-25 00:27:07 +08:00
Hirokazu MORIKAWA
fd4899e7b9 node: bump to v18.20.2
This is a security release.

Notable Changes
* CVE-2024-27980 - Command injection via args parameter of child_process.spawn without shell option enabled on Windows

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-04-24 17:56:35 +08:00
Paul Donald
4fac0d5324 ntpd: update to version 4.2.8p17
Also some spell fixes for README.md

Drop patch-0001 - ntpd >= 4.2.8p16 patched this behaviour. See:

https://bugs.ntp.org/show_bug.cgi?id=3741 (and the linked diff there)
d2a7faef2f

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit b2742ed05d)
2024-04-23 16:46:23 +02:00
Christian Marangi
0f82c9b852 uwsgi: bump to latest 2.0.25.1 release
Bump to latest 2.0.25.1 release

Drop upstream PCRE2 patch and alarm memory leak fix.
Rework and refresh patch due to release bump.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit a9371952c9)
2024-04-23 16:45:07 +02:00
Christian Marangi
86b9791db8 uwsgi: add experimental pcre2 patch and drop pcre
Add experimental pcre2 patch and drop pcre in favor of pcre2 library.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 4374c3250f)
2024-04-23 16:45:02 +02:00
Christian Marangi
d5b7ea5453 uwsgi: bump to release 2.0.22
Bump to release 2.0.22 to make it easier to apply patch for pcre2
support.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 94ded8ff31)
2024-04-23 16:44:57 +02:00
Tianling Shen
7414685bf5 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c1e6fbbcb0)
2024-04-22 15:28:42 +08:00
Tianling Shen
9967432bd4 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 06332b0229)
2024-04-22 15:28:39 +08:00
Tianling Shen
7286ea81b2 cloudflared: Update to 2024.4.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d9419aeabd)
2024-04-22 15:27:58 +08:00
Rui Salvaterra
9caf90f754 tor: update to 0.4.8.10 stable
Bugfix release, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.10/ChangeLog

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit ee8b29de2c)
2024-04-18 19:05:37 +02:00
Michael Heimpold
e1ae68ee3f Merge pull request #23947 from mhei/23.05-php8-update-to-8.2.18
[23.05] php8: update to 8.2.18
2024-04-17 20:22:55 +02:00
Josef Schlehofer
b301e8c28c Merge pull request #23871 from graysky2/snort-backport-fix
snort3 and libdaq3: sync with master and remove symbol @HAS_LUAJIT_ARCH
2024-04-17 13:27:41 +02:00
Daniel Golle
8940a6256b exim: update to 4.97.1
IPv6 has accidentally been disabled in all Exim builds since the
package was introduced in OpenWrt due to a faulty `sed` script. This
has now been fixed, so beware that IPv6 is now enabled when updating
from previous releases.

Upstream changes since version 4.96.2 (bottom up):

JH/s1 Refuse to accept a line "dot, LF" as end-of-DATA unless operating in
      LF-only mode (as detected from the first header line).  Previously we did
      accept that in (normal) CRLF mode; this has been raised as a possible
      attack scenario (under the name "smtp smuggling", CVE-2023-51766).

JH/01 The hosts_connection_nolog main option now also controls "no MAIL in
      SMTP connection" log lines.

JH/02 Option default value updates:
        - queue_fast_ramp (main)        true (was false)
        - remote_max_parallel (main)    4 (was 2)

JH/03 Cache static regex pattern compilations, for use by ACLs.

JH/04 Bug 2903: avoid exit on an attempt to rewrite a malformed address.
      Make the rewrite never match and keep the logging.  Trust the
      admin to be using verify=header-syntax (to actually reject the message).

JH/05 Follow symlinks for placing a watch on TLS creds files.  This means
      (under Linux) we watch the dir containing the final file; previously
      it would be the dir with the first symlink.  We still do not monitor
      the entire path.

JH/06 Check for bad chars in rDNS for sender_host_name.  The OpenBSD (at least)
      dn_expand() is happy to pass them through.

JH/07 OpenSSL Fix auto-reload of changed server OCSP proof.  Previously, if
      the file with the proof had an unchanged name, the new proof(s) were
      loaded on top of the old ones (and nover used; the old ones were stapled).

JH/08 Bug 2915: Fix use-after-free for $regex<n> variables. Previously when
      more than one message arrived in a single connection a reference from
      the earlier message could be re-used.  Often a sigsegv resulted.
      These variables were introduced in Exim 4.87.
      Debug help from Graeme Fowler.

JH/09 Fix ${filter } for conditions that modify $value.  Previously the
      modified version would be used in construction the result, and a memory
      error would occur.

JH/10 GnuTLS: fix for (IOT?) clients offering no TLS extensions at all.
      Find and fix by Jasen Betts.

JH/11 OpenSSL: fix for ancient clients needing TLS support for versions earlier
      than TLSv1,2,  Previously, more-recent versions of OpenSSL were permitting
      the systemwide configuration to override the Exim config.

HS/01 Bug 2728: Introduce EDITME option "DMARC_API" to work around incompatible
      API changes in libopendmarc.

JH/12 Bug 2930: Fix daemon startup.  When started from any process apart from
      pid 1, in the normal "background daemon" mode, having to drop process-
      group leadership also lost track of needing to create listener sockets.

JH/13 Bug 2929: Fix using $recipients after ${run...}.  A change made for 4.96
      resulted in the variable appearing empty.  Find and fix by Ruben Jenster.

JH/14 Bug 2933: Fix regex substring match variables for null matches. Since 4.96
      a capture group which obtained no text (eg. "(abc)*" matching zero
      occurrences) could cause a segfault if the corresponding $<n> was
      expanded.

JH/15 Fix argument parsing for ${run } expansion. Previously, when an argument
      included a close-brace character (eg. it itself used an expansion) an
      error occurred.

JH/16 Move running the smtp connect ACL to before, for TLS-on-connect ports,
      starting TLS.  Previously it was after, meaning that attackers on such
      ports had to be screened using the host_reject_connection main config
      option. The new sequence aligns better with the STARTTLS behaviour, and
      permits defences against crypto-processing load attacks, even though it
      is strictly an incompatible change.
      Also, avoid sending any SMTP fail response for either the connect ACL
      or host_reject_connection, for TLS-on-connect ports.

JH/17 Permit the ACL "encrypted" condition to be used in a HELO/EHLO ACL,
      Previously this was not permitted, but it makes reasonable sense.
      While there, restore a restriction on using it from a connect ACL; given
      the change JH/16 it could only return false (and before 4.91 was not
      permitted).

JH/18 Fix a fencepost error in logging.  Previously (since 4.92) when a log line
      was exactly sized compared to the log buffer, a crash occurred with the
      misleading message "bad memory reference; pool not found".
      Found and traced by Jasen Betts.

JH/19 Bug 2911: Fix a recursion in DNS lookups.  Previously, if the main option
      dns_again_means_nonexist included an element causing a DNS lookup which
      itself returned DNS_AGAIN, unbounded recursion occurred.  Possible results
      included (though probably not limited to) a process crash from stack
      memory limit, or from excessive open files.  Replace this with a paniclog
      whine (as this is likely a configuration error), and returning
      DNS_NOMATCH.

JH/20 Bug 2954: (OpenSSL) Fix setting of explicit EC curve/group.  Previously
      this always failed, probably leading to the usual downgrade to in-clear
      connections.

JH/21 Fix TLSA lookups.  Previously dns_again_means_nonexist would affect
      SERVFAIL results, which breaks the downgrade resistance of DANE.  Change
      to not checking that list for these lookups.

JH/22 Bug 2434: Add connection-elapsed "D=" element to more connection
      closure log lines.

JH/23 Fix crash in string expansions. Previously, if an empty variable was
      immediately followed by an expansion operator, a null-indirection read
      was done, killing the process.

JH/24 Bug 2997: When built with EXPERIMENTAL_DSN_INFO, bounce messages can
      include an SMTP response string which is longer than that supported
      by the delivering transport.  Alleviate by wrapping such lines before
      column 80.

JH/25 Bug 2827: Restrict size of References: header in bounce messages to 998
      chars (RFC limit).  Previously a limit of 12 items was made, which with
      a not-impossible References: in the message being bounced could still
      be over-large and get stopped in the transport.

JH/26 For a ${readsocket } in TLS mode, send a TLS Close Alert before the TCP
      close.  Previously a bare socket close was done.

JH/27 Fix ${srs_encode ..}.  Previously it would give a bad result for one day
      every 1024 days.

JH/28 Bug 2996: Fix a crash in the smtp transport.  When finding that the
      message being considered for delivery was already being handled by
      another process, and having an SMTP connection already open, the function
      to close it tried to use an uninitialized variable.  This would afftect
      high-volume sites more, especially when running mailing-list-style loads.
      Pollution of logs was the major effect, as the other process delivered
      the message.  Found and partly investigated by Graeme Fowler.

JH/29 Change format of the internal ID used for message identification. The old
      version only supported 31 bits for a PID element; the new 64 (on systems
      which can use Base-62 encoding, which is all currently supported ones
      but not Darwin (MacOS) or Cygwin, which have case-insensitive filesystems
      and must use Base-36).  The new ID is 23 characters rather than 16, and is
      visible in various places - notably logs, message headers, and spool file
      names.  Various of the ancillary utilities also have to know the format.
        As well as the expanded PID portion, the sub-second part of the time
      recorded in the ID is expanded to support finer precision.  Theoretically
      this permits a receive rate from a single comms channel of better than the
      previous 2000/sec.
        The major timestamp part of the ID is not changed; at 6 characters it is
      usable until about year 3700.
        Updating from previously releases is fully supported: old-format spool
      files are still usable, and the utilities support both formats.  New
      message will use the new format.  The one hints-DB file type which uses
      message-IDs (the transport wait- DB) will be discarded if an old-format ID
      is seen; new ones will be built with only new-format IDs.
      Optionally, a utility can be used to convert spool files from old to new,
      but this is only an efficiency measure not a requirement for operation
        Downgrading from new to old requires running a provided utility, having
      first stopped all operations.  This will convert any spool files from new
      back to old (losing time-precision and PID information) and remove any
      wait- hints databases.

JH/30 Bug 3006: Fix handling of JSON strings having embedded commas. Previously
      we treated them as item separators when parsing for a list item, but they
      need to be protected by the doublequotes.  While there, add handling for
      backslashes.

JH/31 Bug 2998: Fix ${utf8clean:...} to disallow UTF-16 surrogate codepoints.
      Found and fixed by Jasen Betts. No testcase for this as my usual text
      editor insists on emitting only valid UTF-8.

JH/32 Fix "tls_dhparam = none" under GnuTLS.  At least with 3.7.9 this gave
      a null-indirection SIGSEGV for the receive process.

JH/33 Fix free for live variable $value created by a ${run ...} expansion during
      -bh use.  Internal checking would spot this and take a panic.

JH/34 Bug 3013: Fix use of $recipients within arguments for ${run...}.
      In 4.96 this would expand to empty.

JH/35 Bug 3014: GnuTLS: fix expiry date for an auto-generated server
      certificate.  Find and fix by Andreas Metzler.

JH/36 Add ARC info to DMARC hostory records.

JH/37 Bug 3016: Avoid sending DSN when message was accepted under fakereject
      or fakedefer.  Previously the sender could discover that the message
      had in fact been accepted.

JH/38 Taint-track intermediate values from the peer in multi-stage authentation
      sequences.  Previously the input was not noted as being tainted; notably
      this resulted in behaviour of LOGIN vs. PLAIN being inconsistent under
      bad coding of authenticators.

JH/39 Bug 3023: Fix crash induced by some combinations of zero-length strings
      and ${tr...}.  Found and diagnosed by Heiko Schlichting.

JH/40 Bug 2999: Fix a possible OOB write in the external authenticator, which
      CVE-2023-42115

JH/41 Bug 3000: Fix a possible OOB write in the SPA authenticator, which could
      be triggered by externally-controlled input.  Found by Trend Micro.
      CVE-2023-42116

JH/42 Bug 3001: Fix a possible OOB read in the SPA authenticator, which could
      be triggered by externally-controlled input.  Found by Trend Micro.
      CVE-2023-42114

JH/43 Bug 2903: avoid exit on an attempt to rewrite a malformed address.
      Make the rewrite never match and keep the logging.  Trust the
      admin to be using verify=header-syntax (to actually reject the message).

JH/44 Bug 3033: Harden dnsdb lookups against crafted DNS responses.
      CVE-2023-42219
      could be triggered by externally-supplied input.  Found by Trend Micro.
      CVE-2023-42115

JH/41 Bug 3000: Fix a possible OOB write in the SPA authenticator, which could
      be triggered by externally-controlled input.  Found by Trend Micro.
      CVE-2023-42116

JH/42 Bug 3001: Fix a possible OOB read in the SPA authenticator, which could
      be triggered by externally-controlled input.  Found by Trend Micro.
      CVE-2023-42114

JH/43 Bug 2903: avoid exit on an attempt to rewrite a malformed address.
      Make the rewrite never match and keep the logging.  Trust the
      admin to be using verify=header-syntax (to actually reject the message).

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e8600462c7)
2024-04-17 00:12:48 +01:00
Daniel Golle
51ce5a553e cryptsetup: update to version 2.7.1
The most notable change is the introduction of (optional) support for
hardware OPAL disk encryption. However, as this requires Linux 6.4 or
later, support for OPAL is implicitely disabled until targets used for
the package build have been updated to Linux 6.6.

See release notes for 2.7.0 and 2.7.1 for more details:

https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.7/v2.7.0-ReleaseNotes
https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.7/v2.7.1-ReleaseNotes

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 54a2534cb2)
2024-04-17 00:12:48 +01:00
Daniel Golle
ac9096d329 lvm2: update to LVM2 2.03.17 and libdm Version 1.02.187
LVM2 Version 2.03.17 - 10th November 2022
=========================================
  Add new options (--fs, --fsmode) for FS handling when resizing LVs.
  Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
  Fix lv_active field type to binary so --select and --binary applies properly.
  Switch to use mallinfo2 and use it only with glibc.
  Error out in lvm shell if using a cmd argument not supported in the shell.
  Fix lvm shell's lastlog command to report previous pre-command failures.
  Extend VDO and VDOPOOL without flushing and locking fs.
  Add --valuesonly option to lvmconfig to print only values without keys.
  Updates configure with recent autoconf tooling.
  Fix lvconvert --test --type vdo-pool execution.
  Add json_std output format for more JSON standard compliant version of output.
  Fix vdo_slab_size_mb value for converted VDO volume.
  Fix many corner cases in device_id, including handling of S/N duplicates.
  Fix various issues in lvmdbusd.

DM Version 1.02.187 - 10th November 2022
========================================
  Add DM_REPORT_GROUP_JSON_STD for more JSON standard compliant output format.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 20cc530004)
2024-04-17 00:12:48 +01:00
Daniel Golle
17cac25f92 gnunet: update to version v0.21.0
This release marks a noteworthy milestone in that it includes a
completely new transport layer. It lays the groundwork for fixing some
major design issues and may also already alleviate a variety of issues
seen in previous releases related to connectivity. This change also
deprecates our testbed and ATS subsystem.

This is a new major release. It breaks protocol compatibility with the
0.20.x versions. Please be aware that Git master is thus henceforth
(and has been for a while) INCOMPATIBLE with the 0.20.x GNUnet
network, and interactions between old and new peers will result in
issues. In terms of usability, users should be aware that there are
still a number of known open issues in particular with respect to ease
of use, but also some critical privacy issues especially for mobile
users. Also, the nascent network is tiny and thus unlikely to provide
good anonymity or extensive amounts of interesting information. As a
result, the 0.21.0 release is still only suitable for early adopters
with some reasonable pain tolerance.

v0.21.0:

- Reworked PEERSTORE API

- Added record flag for maintenance records

- ensure traits can be generated with subsystem-specific prefixes for
  the symbols

- libgnunettesting first major testing NG refactor towards getting
  dependency structure streamlined

- Remove single-use API macro GNUNET_VA_ARG_ENUM

- major revision of blind signature API

- Introduced closure to hold store context when caling function to add
  hello in peerstore.

- Added DDLs for handling GNUNET_PEERSTORE_StoreHelloContext

- Removed old hello functionality.

- Refactoring components under src/ into lib/, plugin/, cli/ and
  service/

- add support for encoding/decoding double values as part of JSON to
  libgnunetjson

- Changed method GNUNET_HELLO_builder_get_expiration_time to not need
  parameter GNUNET_HELLO_Builder.

- Code moved to the core package to get rid of circular dependencies.

- Moved code to testing to have more generic test setup, which can be
  used not only from within transport.

- The old hello design replaced by the new hello design.

- Added api to get notified when hellos are stored with peerstore
  service.

- Added api to store hellos with peerstore service.

- Changed new hello uri api to allow to change the expiration time

- Moved start peer command to testing subsystem.

- Removed all usage of old transport api, beside peerinfo tool,
  gnunet-transport cli and usage in transport layer itself.

- Added __attribute__((deprecated)) to the old transport API

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 31e9aea1b6)
2024-04-17 00:12:48 +01:00
Daniel Golle
f0368a2498 gnunet: update to version 0.20.0
v0.20.0:
  - GNUNET_TESTING_get_testname_from_underscore renamed to GNUNET_STRINGS_get_suffix_from_binary_name and moved from libgnunettesting to libgnuneutil
  - Move GNUNET_s into libgnunetutil.
  - re-introduce compiler annotation for array size in signature
  - function-signature adjustment due to compiler error
  - GNUNET_PQ_get_oid removed, GNUNET_PQ_get_oid_by_name improved
  - Added GNUNET_PQ_get_oid_by_name
  - added GNUNET_PQ_get_oid()
  - Added new CCA-secure KEM and use in IDENTITY encryption
  - Add KEM API to avoid ephemeral private key management
  - Add new GNUNET_PQ_event_do_poll() API to gnunet_pq_lib.h
  - Added API to support arrays in query results
  - Improve PQ API documentation.
  - API for array types extended for times
  - API extended for array query types
  - relevant array-types in queries (not results) in postgresql added
  - just style fixes, int to enum
  - initial steps towards support of array-types in posgresql
  - adds GNUNET_JSON_spec_object_const() and GNUNET_JSON_spec_array_const()

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit dbae7f9493)
2024-04-17 00:12:48 +01:00
Daniel Golle
181e09b7db gnunet: update to version 0.19.4
v0.19.4:
  - No changes

v0.19.3:
  - We now detect MySQL's strange, version-dependent my_bool type on configure.
  - Add pkg-config definitions for gnunet messenger.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit bef5da553f)
2024-04-17 00:12:48 +01:00
Daniel Golle
2f1f27d47c libcurl-gnutls: update to verison 8.7.1
See https://curl.se/changes.html#8_7_1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 428e9da9df)
2024-04-17 00:12:48 +01:00
Aleksey Vasilenko
d5ae95aa19 libcurl-gnutls: fix build
- Missing --without-nghttp3 was leaking host includes and breaking the build
- Remove or rename deprecated configure options
- Add --disable-libcurl-option to reduce package size
- Use .xz instead of .bz2 for PKG_SOURCE

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 30fe2d99ab)
2024-04-17 00:12:48 +01:00
Konstantin Demin
d291474db0 libcurl-gnutls: update to version 8.6.0
https://curl.se/changes.html#8_6_0

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
(cherry picked from commit af748ea691)
2024-04-17 00:12:48 +01:00
Daniel Golle
2f4aa53766 libcurl-gnutls: update to version 8.5.0
https://curl.se/changes.html#8_5_0

Pick upstream patch to fix build with gnuTLS and verbose strings removed.
The patch should be removed with the next version bump.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit cbdd619c23)
2024-04-17 00:12:48 +01:00
Daniel Golle
7c3d2ef630 libcurl-gnutls: update to version 8.2.1
See cURL changes for details:
https://curl.se/changes.html

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7eaa2cd284)
2024-04-17 00:12:48 +01:00
Michael Heimpold
f1e6365bc4 php8: update to 8.2.18
This fixes:
      - CVE-2024-1874
      - CVE-2024-2756
      - CVE-2024-3096

While at, switch to https download URL.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-04-16 20:01:42 +02:00
Tianling Shen
6dfe66fd85 golang: Update to 1.21.9
go1.21.9 (released 2024-04-03) includes a security fix to the net/http
package, as well as bug fixes to the linker, and the go/types and
net/http packages.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-04-13 14:06:08 -07:00
Glenn Strauss
8fb4719f2f lighttpd: update to lighttpd 1.4.76 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit a5557a2a47)
2024-04-13 14:00:54 -07:00
Stan Grishin
802b4c3af0 Merge pull request #23874 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: improve Makefile's prerm
2024-04-12 13:39:55 -07:00
Stan Grishin
d742be2072 Merge pull request #23815 from stangri/openwrt-23.05-curl
[23.05] curl: update to 8.7.1
2024-04-12 13:39:22 -07:00
Josef Schlehofer
e6fde07dd0 lualanes: update to version 3.16.3 and use tarball
1. Update it to version 3.16.3
Release notes: https://github.com/LuaLanes/lanes/releases/tag/v3.16.3

2. Change to download tarball instead of checking out Git sources
In the previous commit (in the Fixes tag), it was changed to Git sources without any reason. Let's revert it back. Let's use again tagged release.

Fixes: b93e5b45b1 ("lualanes: Version bump to v3.16.2")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 8b7040b6de)
2024-04-12 09:56:10 +02:00
Mark Baker
1a9c3d093f lualanes: Version bump to v3.16.2
Update the PKG_VERSION and PKG_SOURCE_VERSION to pull version 3.16.2
from upstream. The upstream version includes fixes for the
`pthread_yield: symbol not found` issue.

Removed patches 100-musl-compat.patch and 200-fix-redef-error.patch
as fixes were implemented upstream.

Build tested on aarch64, arm_cortex_a15/a9, i386, mips[el]_24kc,
powerpc_464fp/8548, riscv64, x86_64. Confirmed on x86_64.

Signed-off-by: Mark Baker <mark@vpost.net>
(cherry picked from commit 08e51ab50a)
2024-04-12 09:56:05 +02:00
krant
68421b9a21 hwdata: update to 0.379
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit 9f45bfd3d5)
2024-04-12 09:53:32 +02:00
Fabrice Fontaine
f7251c4f82 libs/libdaq3: assign PKG_LICENSE_FILES
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit b2c548975d)
2024-04-11 14:14:16 -04:00
John Audia
e1f0df9517 libdaq3: update to 3.0.14
Update to latest version.

Changelog: https://github.com/snort3/libdaq/releases/tag/v3.0.14

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 651b7e1f92)
2024-04-11 14:14:10 -04:00
John Audia
4acf815ddf libdaq3: update to 3.0.13
Upstream bump

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 4c05ae5f6c)
2024-04-11 14:14:03 -04:00
John Audia
19c641a266 libdaq3: update to 3.0.11
Upstream bump

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 9f2d3c5bf8)
2024-04-11 14:13:53 -04:00
John Audia
5596fa277f snort3: remove symbol @HAS_LUAJIT_ARCH
Remove symbol introduced in master to allow building.
Closes #23861

Signed-off-by: John Audia <therealgraysky@proton.me>
2024-04-11 14:10:31 -04:00
John Audia
4bbd270656 snort3: update to 3.1.82.0
Changelog: https://github.com/snort3/snort3/releases/tag/3.1.82.0

Removed patches/010-gcc13.patch

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.1.82.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2024 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.14
           Using LuaJIT version 2.1.0-beta3
           Using OpenSSL 3.0.13 30 Jan 2024
           Using libpcap version 1.10.4 (with TPACKET_V3)
           Using PCRE version 8.45 2021-06-15
           Using ZLIB version 1.3.1
           Using Hyperscan version 5.4.2 2024-03-06
           Using LZMA version 5.4.6

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit fdebb16619)
2024-04-11 14:09:39 -04:00
Stan Grishin
aef7a4a8ee adblock-fast: improve Makefile's prerm
* improve output of Makefile's prerm routines

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 9eb61fe02d)
2024-04-10 23:59:46 +00:00
Hirokazu MORIKAWA
8602f63b8d node: April 3, 2024 Security Releases
Notable Changes
* CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crash- (High)
* CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
* llhttp version 9.2.1
* undici version 5.28.4

Changed to use gz according to main-snapshot

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-04-07 18:01:33 +08:00
Hannu Nyman
76bc13be7a irqbalance: update to version 1.9.4
Update irqbalance to version 1.9.4.

* refresh version in meson patch
* remove EINVAL handling patch as upstream seems to have silenced
  the log spam for unmanageable IRQs

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit b8d0049e7c)
2024-04-05 17:35:42 +03:00
krant
39b8d5c7ac irqbalance Update init script to remove duplicate spaces
I have some strange issues with irqbalance sometimes overwritin
smp_affinity values for banned/ignored IRQs. The issue is reproduceable
and is mitigated when I change theway how the irqbalance command line is
built. The only difference between the resulting command is that there
is only one space between the -t parameter and the first -i parameter
value.

Also see https://github.com/Irqbalance/irqbalance/issues/297

Signed-off-by: Carsten Schuette <schuettecarsten@googlemail.com>
(cherry picked from commit 41e5b979f5)
2024-04-05 17:35:26 +03:00
Jo-Philipp Wich
d9d6eb1d8d nano: fix syntax highlighting for raw ucode scripts
Text between interpreter line and start of first directive should only
highlighted as uninterpreted when running in template mode, so adjust
the match rule accordingly.

Fixes: #23761
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 8f9564387d)
2024-04-05 17:30:19 +03:00
Jo-Philipp Wich
a3a26de005 nano: add syntax highlighting for ucode scripts
Introduce local syntax highlighting support for ucode scripts, like
it is done already for uci configuration files.

Ref: https://github.com/jow-/ucode/issues/178
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit d8a574f7f0)
2024-04-05 17:30:11 +03:00
Stan Grishin
84bfbcb6ce curl: update to 8.7.1
* update to 8.7.1: https://curl.se/changes.html#8_7_1
* use the new --disable-docs flag for configure
* update 200-no_docs_tests.patch
* switch to APK-compatible revision

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 227c8daa15)
2024-04-04 15:13:10 +00:00
Andrea Pesaresi
35773ec8ca kmsbd-tools: switch to use tagged release
Instead of checking Git sources, we will use now tagged releases.

This solve the strange version 0~3.5.1-r1, now will be 3.5.2-r2

Signed-off-by: Andrea Pesaresi <andreapesaresi82@gmail.com>
(cherry picked from commit f8a7ee7f47)
2024-04-02 16:57:08 -07:00
Rosen Penev
c14e0805ff ksmbd-tools: update to 3.5.1
Various fixes for ksmbd, most notably a visibility fix for the latest
ksmbd code.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e9e1ae2386)
2024-04-02 16:57:08 -07:00
Javier Marcet
876b0bc194 docker-compose: add PKG_NAME to PKG_SOURCE
Before this change, the tarball was downloaded as vVERSION.tar.gz.
For example, it was v2.26.1.tar.gz and that file was put into the dl folder
within the OpenWrt build system.

After this change, the tarball is properly downloaded as NAME-vVERSION.tar.gz.
In this case, it will look like this: docker-compose-v.2.26.1.tar.gz

The advantages of using this:
- Users, developers will know that what they downloaded (it has name and version)
- The tarball will not be overwritten by another package with the same version.

Signed-off-by: Javier Marcet <javier@marcet.info>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[added commit message]
(cherry picked from commit 261b38c14b)
2024-03-31 15:27:05 +02:00
Glen Huang
66894032d4 acme: standardize key_type
keylength, being an acme.sh value type, uses pure numbers for rsa keys.
This can be disorienting for other acme clients. This change introduces
a new option "key_type" that aims to remove this ambiguity, and makes
all key type names follow the same pattern, making acme-common more
client agnostic.

Signed-off-by: Glen Huang <me@glenhuang.com>
(cherry picked from commit 6d61014e51)
2024-03-31 15:27:05 +02:00
Van Waholtz
015e212add sing-box: update to 1.8.10
Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 1ca47e0ed4)
2024-03-29 08:07:49 +01:00
Van Waholtz
b1363fa062 sing-box: restart if the specified interfaces start up
Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit da03a29cda)
2024-03-29 08:07:49 +01:00
Van Waholtz
6c75a9dae0 sing-box: update to 1.8.7
Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 3917a0af58)
2024-03-29 08:07:49 +01:00
Toke Høiland-Jørgensen
73bee1f9b0 acme-common: backport config fixes from master
Backport config changes from commit 04ac8c177d ("acme-common: simplify config
example") from master, and apply the subsequent fixup. This should fix the issue
with ACME not working in Luci (resolving #23756).

Keep the version number bump as a bugfix (1.0.4) since we have not backported
all the ACME changes to 23.05.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2024-03-27 21:52:12 +01:00
krant
a0ad76b2da rust: update to 1.77.0
- Restore patch hunk mis-deleted in dccb910
- Refresh patches
- Remove --enable-missing-tools configure option deleted in the upstream

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit 7f01006f96)
2024-03-28 00:20:55 +08:00
krant
6578b79b08 rust: update to 1.76.0
- Use .xz for source archive
- Refresh patches

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit dccb910ae0)
2024-03-28 00:20:55 +08:00
Thibaut VARÈNE
cbf8542187 uspot: update to Git HEAD (2024-03-25)
56eebdad085e uspot: wrap spotfilter device under tip_mode
1a96d57e5fe0 uspot: client_enable() wrap spotfilter data in tip_mode
fe12f9a7abde uspot: clear ratelimit state on startup/shutdown
976badc4d0b6 update README
53b8cb88a94a Makefile: require minimum ucode version
ff6163190d5a uspot/portal: report client_enable() failure
8601d9199233 include sample radcli dictionaries
c670f6c4b48f update README
094f0df88150 uspot: work around ucode#191 missing in 23.05

Update the package Makefile to reflect the changes from the following
above-listed commit:

53b8cb88a94a Makefile: require minimum ucode version

Fixes: https://github.com/f00b4r0/uspot/issues/4
Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
(cherry picked from commit bc33522715)
2024-03-27 17:33:27 +08:00
Tianling Shen
7ffb90e938 dnsproxy: Update to 0.66.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4448d9f4a1)
2024-03-27 17:33:27 +08:00
Tianling Shen
096ef93f53 cloudflared: Update to 2024.3.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit bcb7553385)
2024-03-27 17:33:27 +08:00
Tianling Shen
c781bc0d94 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 7cb8ac0966)
2024-03-27 17:33:26 +08:00
Tianling Shen
f282cdf597 v2ray-core: Update to 5.15.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b627928682)
2024-03-27 17:33:26 +08:00
Tianling Shen
d51c6bb7ac rclone: Update to 1.66.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 7ce54fa912)
2024-03-27 17:33:26 +08:00
Peca Nesovanovic
2d5f789ccf p910nd: fix running multiple instances
Compile tested: (ramips, rb760igs, 23.05 snapshot)
Run tested: (ramips, rb760igs, 23.05 snapshot, tests done)

Description:
In case we have multiple device defined in /etc/config/p910nd then init script will try to start multiple instance with same instance name
drop instance name as resolution

tested on 23.05 snapshot with 2 USB printers

Signed-off-by: Peca Nesovanovic <peca.nesovanovic@sattrakt.com>
(cherry picked from commit 152d80ce13)
2024-03-27 14:33:10 +08:00
Tianling Shen
a49c7d20f2 golang: Update to 1.21.8
go1.21.8 (released 2024-03-05) includes security fixes to the crypto/x509,
html/template, net/http, net/http/cookiejar, and net/mail packages,
as well as bug fixes to the go command and the runtime.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-03-26 18:13:30 +08:00
Josef Schlehofer
91628e80b4 syslog-ng: enable http module based on zlib support in curl
Since version 4.4.0, syslog-ng added compression to http() destination
using zlib from curl. [1] However, zlib is currently disabled in curl [2]
and it prevented syslog-ng to start.

This commit changes the configuration opinion to enable http module only if
zlib support is enabled for curl and as well it adds dependency for zlib (in that case).
If the zlib is disabled, then it disables http module, so syslog-ng can start
and thus zlib dependency is not required.

[1] https://gitlab.nic.cz/turris/os/packages/-/issues/932
[2] 93cbaacbfb/net/curl/Config.in (L134)
Fixes: 4dd49d7c3c ("syslog-ng: update to version 4.4.0")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1e14d95d78)
2024-03-26 08:27:02 +01:00
Paul Spooren
69870fc941 ci: set correct arch for rootfs tests
With the commit 01e5cfc "CI: Add target/arch tags (no suffix) for
snapshot images"[1] the os/platform is set for all images, which is usually
different from what the GitHub action runner uses (x86). The Docker
deamon still tries to fetch the x86 version and fails.

This commit explicitly sets the fitting arch.

[1]: 01e5cfccd7

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit d359fa04ed)
2024-03-25 12:56:25 +01:00
Stan Grishin
53896bd1a7 Merge pull request #23736 from stangri/openwrt-23.05-https-dns-proxy
[23.05] https-dns-proxy: prepare migration to APK
2024-03-24 08:04:59 -06:00
Stan Grishin
2423a6e938 https-dns-proxy: prepare migration to APK
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit b8a8c480fc)
2024-03-24 13:57:11 +00:00
Stan Grishin
283f7a06fe Merge pull request #23719 from stangri/openwrt-23.05-https-dns-proxy
[23.05] https-dns-proxy: prepare migration to APK
2024-03-24 07:55:09 -06:00
Stan Grishin
69910d2f41 Merge pull request #23720 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: prepare migration to APK
2024-03-24 07:09:02 -06:00
Stan Grishin
e8cf63f094 Merge pull request #23718 from stangri/openwrt-23.05-nebula
[23.05] nebula: prepare migration to APK
2024-03-24 07:07:30 -06:00
Michal Hrusecky
95a40179f2 knot-resolver: Update to version 5.7.1
- Fixes CVE-2023-50868 and CVE-2023-50387
- Also, the resolver has not been called 'Knot DNS Resolver' for quite
some time, so fix that, too.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit 1131acf57f)
2024-03-24 11:38:04 +01:00
Šimon Bořek
92bb77af47 knot-resolver: enable dnstap module build by default
'dnstap' module will be built but not loaded by default at runtime
(configuration must be provided for it to be loaded). It is still possible to
disable dnstap build manually using menuconfig.

"The dnstap module supports logging DNS requests and responses to a unix socket
in dnstap format using fstrm framing library. This logging is useful if you need
effectively log all DNS traffic."[^1]

Adds dependency on 'protobuf', 'protobuf-c', 'libfstrm'. Listed packages are
available from OpenWrt packages, have uncomplicated manifests and
while 'protobuf-c' doesn't have a maintainer since spring 2020, all the
packages (including 'protobuf-c') seem to be maintained - the last
updates of all of them in autumn 2021.

As stated by Vladimír Čunát from Knot Resolver team they build dnstap
while packaging for majority of standard Linux distributions.
Therefore this change brings us closer to expected default.

[^1]: https://knot-resolver.readthedocs.io/en/stable/modules-dnstap.html

Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
(cherry picked from commit a68397ff77)
2024-03-24 11:37:59 +01:00
Šimon Bořek
fd10fa17a9 knot-resolver: do not overwrite -Ddnstap=enabled configuration
It was possible to enable dnstap in menuconfig, but the configuration
only added dependencies while leaving dnstap module build disabled.

Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
(cherry picked from commit af521478f8)
2024-03-24 11:37:54 +01:00
Glenn Strauss
ed3cba66e1 lighttpd: update to lighttpd 1.4.75 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit a60a0d0730)
2024-03-23 15:12:48 +01:00
Stan Grishin
bc08d6e0e4 nebula: prepare migration to APK
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 9cb2dbd23c)
2024-03-23 01:11:21 +00:00
Stan Grishin
bdc9d4a5cb https-dns-proxy: prepare migration to APK
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit dae56fd2a5d4ac579dff5d151cefe45b8d873bd6)
2024-03-23 01:10:57 +00:00
Stan Grishin
fcfac651c7 adblock-fast: prepare migration to APK
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 706592edcc)
2024-03-23 01:10:27 +00:00
Alexandru Ardelean
063b2393cb django: bump to version 4.2.11
Addresses a bunch of CVEs.
A more recent one: https://nvd.nist.gov/vuln/detail/CVE-2024-24680

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2024-03-19 13:40:40 +01:00
Tianling Shen
5782faa662 Merge pull request #23691 from EricLuehrsen/unbound_1193_wrt23
[23.05] Backport Unbound 1.19.3 and script fixes to stable
2024-03-19 17:11:10 +08:00
Jan Klos
ce8fb7aa9b unbound: update to 1.19.3
Signed-off-by: Jan Klos <jan@klos.xyz>
2024-03-18 23:13:29 -04:00
Paul Donald
d76cb891f7 unbound: spell fix
Closes openwrt/luci#6993

Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-03-18 23:12:24 -04:00
Jan Klos
6d2657fc89 unbound: add file parameter to service instance
that way, procd does not needlessly restart unbound on triggers when
everything remains the same - changes in non-default included
configuration files will not be registered, however

Signed-off-by: Jan Klos <jan@klos.xyz>
2024-03-18 23:10:51 -04:00
Jan Klos
e65ce6218a unbound: remove date/time from config headers
so that procd can decide whether to restart unbound based on config
file changes

Signed-off-by: Jan Klos <jan@klos.xyz>
2024-03-18 23:10:51 -04:00
Dirk Brenken
b713fe7d27 travelmate: update 2.1.2-6
* fix vpn semaphore handling (#23643), thanks to @brianjmurrell
* disable vpn processing by default

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit b8c47eae98)
2024-03-18 22:10:29 +01:00
Paul Donald
266846a362 p910nd: restart daemon even if no driver file is needed
Not all USB printers need a blob loading; restart the daemon
independently of driver loading.

Closes openwrt/packages#23588

Signed-off-by: Paul Donald <newtwen@gmail.com>
Tested-by: minicx <minicx@disroot.org>
(cherry picked from commit 685ef7d97b)
2024-03-14 14:28:25 +01:00
W. Michael Petullo
bc2c2cc290 shared-mime-info: update to 2.4
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 09bfc9483d)
2024-03-12 18:59:12 +01:00
W. Michael Petullo
46595ddc09 shared-mime-info: update to 2.2
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 4f608bb998)
2024-03-12 18:59:12 +01:00
Yousong Zhou
60ab783414 shadowsocks-libev: add remote server ips to dst bypass ipset
To align with old iptables-based ss-rules implementation.

Supersedes openwrt/packages#20239

Link: https://github.com/openwrt/packages/pull/20239
Signed-off-by: Luis Liou <liouluis@gmail.com>
[minor fixup on commit title, version bump, etc.]
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 85b634f0b4)
2024-03-12 16:17:12 +00:00
Peter van Dijk
229175a0bb libwslay: remove, nothing depends on it since h2o is gone
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit e1b6bac484)
2024-03-11 10:55:22 +01:00
krant
b1b33235b2 dnsdist: disable XSK to fix the build
XSK support is set to auto by default and on some hosts it is detected as
on and leads to:

```
In file included from dnsdist-backend.cc:32:
xsk.hh:28:10: fatal error: bits/types/struct_timespec.h: No such file or
directory
   28 | #include <bits/types/struct_timespec.h>
```

Here we disable XSK so configure will behave more deterministically and
hopefully fix the builders.

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit f8dcc36af4)
2024-03-06 20:55:04 +01:00
Peter van Dijk
15ab42c479 dnsdist: update to 1.9.0
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit aa4fb5151a)
2024-03-06 20:54:56 +01:00
Remi Gacogne
14c9d61722 dnsdist: Enable custom load-balancing policies in the light version
Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
(cherry picked from commit 738937a9c6)
2024-03-06 20:54:49 +01:00
Peter van Dijk
c55605659b dnsdist: update to 1.8.3
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit b6b9519975)
2024-03-06 20:54:44 +01:00
Peter van Dijk
218769f991 h2o: remove, nothing depends on it anymore
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit d30a34bac1)
2024-03-06 20:54:04 +01:00
Rosen Penev
1504a153b0 nghttp3: fix pkgconfig file
CMake build is passing host paths in pkgconfig.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit fa79aaad5f)
2024-03-06 20:53:25 +01:00
krant
c2350acb6e clamav: update to 1.3.0
- Add build-time Rust dependency
- Don't set default and rename changed CMake options

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit a9a1e7c3a6)
2024-03-06 20:50:37 +01:00
Jan Hák
fe210e7cba knot: update to version 3.3.5
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit d660dc6e7c)
2024-03-06 20:31:09 +01:00
Sergey Ponomarev
eaa6026dd4 acme-common: use validation_method option instead of guessing
The new validation_method option can be: dns, webroot or standalone.
Previously we guessed the challenge type:
1. if the DNS provider is specified then it's dns
2. if standalone=1
3. fallback to webroot

The logic is preserved and if the validation_method wasn't set explicitly we'll guess it in old manner.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
(cherry picked from commit 7d07c75154)
2024-03-05 22:20:48 +01:00
Paul Donald
6c7b6bf20b ntpclient: remove
ntp sources are dead and gone. The most important functionality is now
provided by ntpd.

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 2cd10d8113)
2024-03-05 22:19:27 +01:00
Josef Schlehofer
06fb98b27a syslog-ng: update to version 4.6.0
1. Bump version config to 4.6
2. Updated to 4.6.0 version
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.6.0
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.5.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit cf4df28d06)
2024-03-05 22:18:31 +01:00
Sergey Ponomarev
002297b47c syslog-ng: conf: fix deprecated stats_freq
The deprecated stats_freq() replaced with stats(freq(0)).

Also make comments shorter.
Fix tabs.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
(cherry picked from commit 37d2d69595)
2024-03-05 22:18:26 +01:00
Tianling Shen
fd9ccec73a v2ray-core: Update to 5.14.1
Including security fixes, see release note:
https://github.com/v2fly/v2ray-core/releases/tag/v5.14.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9834d79ea1)
2024-03-05 13:30:17 +08:00
krant
210468d0c5 c-ares: update to 1.27.0
- Update package URL
- Don't set default CMake options

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit 0858accfda)
2024-03-05 11:43:05 +08:00
Dengfeng Liu
af4d84746f apfree-wifidog: update to 7.02.1977
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
2024-03-05 11:41:02 +08:00
Dengfeng Liu
f629091e85 apfree-wifidog: fix some bugs in the wifidogx.init file
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
2024-03-05 11:41:02 +08:00
Stan Grishin
817246f59f Merge pull request #23573 from stangri/openwrt-23.05-https-dns-proxy
[23.05] https-dns-proxy: update to upstream 2023-11-19
2024-03-04 13:59:51 -07:00
Dirk Brenken
667ac9d8e1 banip: update 0.9.4-3
* fix another logical glitch in the logfile monitor

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 4356180197)
2024-03-04 21:28:17 +01:00
Ray Wang
30cd11d039 natmap: update to 20240303
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit 7bbd9156cc)
2024-03-04 23:40:05 +08:00
Tianling Shen
81c1d4449e v2raya: Update to 2.2.5.1
Hot fix for a frontend failure bug.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ab2f10233e)
2024-03-04 14:35:32 +08:00
Tianling Shen
4778acec8f dnsproxy: Update to 0.65.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b5290ace07)
2024-03-04 14:35:30 +08:00
Tianling Shen
2443208261 golang: Update to 1.21.7
go1.21.6 (released 2024-01-09) includes fixes to the compiler,
the runtime, and the crypto/tls, maps, and runtime/pprof packages.

go1.21.7 (released 2024-02-06) includes fixes to the compiler,
the go command, the runtime, and the crypto/x509 package.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 34867e83ca)
2024-03-04 14:35:27 +08:00
Tianling Shen
8d38305fa7 v2raya: Update to 2.2.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 381d1af347)
2024-03-04 14:35:18 +08:00
Dirk Brenken
ac96098e3a banip: update 0.9.4-2
* fix a long standing problem in the logfile-parser with dropbear and compressed IPv6 addresses

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7b06b1d312)
2024-03-03 17:37:33 +01:00
Dirk Brenken
2e4d1635d0 banip: release 0.9.4-1
* add support for destination port & protocol limitations for external feeds (see readme for details),
  useful for lan-forward ad- or DoH-blocking, e.g. only tcp ports 80 and 443
* add turris sentinel blocklist feed
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 730ad59cb9)
2024-03-03 17:37:19 +01:00
Tianling Shen
4442726ba6 rclone: add fuse3-utils as dependency
rclone has switched to use fuse3 since v1.62.0.

Reported-by: qiuzi <gxfclql@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit df9d076d60)
2024-03-02 17:00:12 +08:00
Tianling Shen
e3521f16c4 yq: Update to 4.42.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit fa54dbc72a)
2024-03-02 17:00:09 +08:00
Tianling Shen
cadd900f00 v2fly-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 120fc57d55)
2024-03-02 17:00:06 +08:00
Tianling Shen
44febef1cb cloudflared: Update to 2024.2.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 18aef55126)
2024-03-02 16:59:57 +08:00
Tianling Shen
9e20e91de0 btop: Update to 1.3.2
Synced LDFLAGS from upstream Makefile.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 187b52c95a)
2024-03-02 16:59:51 +08:00
Tianling Shen
751c3a580b v2raya: Update to 2.2.4.7
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 870d09c5dd)
2024-03-02 16:59:47 +08:00
Tianling Shen
00f32a022c yq: Update to 4.41.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 69d963df9e)
2024-03-02 16:59:44 +08:00
Tianling Shen
5e5e0592dd yq: Update to 4.40.7
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit aec4766913)
2024-03-02 16:59:41 +08:00
Tianling Shen
9b57a8a68d cloudflared: Update to 2024.2.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 87bd747652)
2024-03-02 16:59:38 +08:00
Tianling Shen
0d013a38b3 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 21a8b968d1)
2024-03-02 16:59:29 +08:00
Stan Grishin
7bc7eb58fe https-dns-proxy: update to upstream 2023-11-19
* update to upstream 2023-11-19
  (changes: 489c57efd4)
* bugfix: include resolveip dependency in Makefile
  (fixes https://github.com/openwrt/packages/issues/23567)
* minor update for failed healthcheck logging

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit bd501dd89c)
2024-03-02 00:21:41 +00:00
Edmunt Pienkowsky
3c34772678 rtl-sdr: update to v2.0.1
Signed-off-by: Edmunt Pienkowsky <roed@onet.eu>
(cherry picked from commit c623291b38)
Signed-off-by: Edmunt Pienkowsky <roed@onet.eu>
2024-02-29 23:34:51 +01:00
Edmunt Pienkowsky
b6f2bef08b rtl_433: update to 23.11
Signed-off-by: Edmunt Pienkowsky <roed@onet.eu>
(cherry picked from commit 0bb9240f6b)
Signed-off-by: Edmunt Pienkowsky <roed@onet.eu>
2024-02-29 23:34:36 +01:00
Dirk Brenken
5ecbe07978 travelmate: update 2.1.2-5
* final vpn tweaks

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit bec5f35dea)
2024-02-29 21:02:46 +01:00
Dirk Brenken
166e8d2d36 adblock: update 4.1.5-9
* minimal fix with reporting interface 'any'

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0af6e8d158)
2024-02-28 21:13:28 +01:00
John Audia
ab651824e9 ragel: new package to build vectorscan
This is a new package for ragel which is a dependency for another
new package vectorscan

Co-authored-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit fa76c4df5c)
2024-02-28 12:02:58 +08:00
John Audia
cd5f6637f2 snort3: build against gperftools-runtime
Should provide increases in snort3 performance thanks to thread-
caching malloc provided by gperftools.  Avg CPU usage is down.
Another user reported higher throughput achieved with snort3
compiled with this on samba transfers on system with CPU-limited
snort3 performance.[1]

1. https://forum.openwrt.org/t/some-help-with-a-makefile-gperftools/165656/22

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 4295bd7f45)
2024-02-27 13:26:13 +08:00
John Audia
5253216677 snort3: update to 3.1.81.0
Changelog: https://github.com/snort3/snort3/releases/tag/3.1.81.0

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.1.81.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2024 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.14
           Using LuaJIT version 2.1.0-beta3
           Using OpenSSL 3.0.13 30 Jan 2024
           Using libpcap version 1.10.4 (with TPACKET_V3)
           Using PCRE version 8.45 2021-06-15
           Using ZLIB version 1.3.1
           Using Hyperscan version 5.4.2 2024-02-16
           Using LZMA version 5.4.6

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit a7b5bfbfb7)
2024-02-27 13:26:13 +08:00
John Audia
28aeff87b3 gperftools: add new package
Thread-caching malloc provided by this package improves snort3
performance.  I have been running with this for over seven months
without issues.  Avg CPU usage is down.  Another user reported
higher throughput achieved with snort3 compiled with this on
samba transfers on system with CPU-limited snort performance.[1]

1. https://forum.openwrt.org/t/some-help-with-a-makefile-gperftools/165656/22

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit c1b4e80825)
2024-02-27 13:25:54 +08:00
John Audia
f589b58808 hyperscan: new package for speeding up regex ops
Hyperscan is a high performance regular expression matching
library from Intel that runs on x86 platforms and offers
support for Perl Compatible Regular Expressions (PCRE) syntax,
simultaneous matching of groups of regular expressions, and
streaming operations.

This has utility in speeding up snort3.

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 1db5c54617)
2024-02-27 13:25:43 +08:00
Gerard Ryan
c9dff69de2 dockerd: Update to 25.0.3
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2024-02-26 19:12:54 +08:00
Gerard Ryan
755e6f7832 docker: Update to 25.0.3
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2024-02-26 19:12:54 +08:00
Gerard Ryan
984b65bf72 containerd: Update to 1.7.13
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2024-02-26 19:12:54 +08:00
Gerard Ryan
a697eea62b runc: Update to 1.1.12
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2024-02-26 19:12:54 +08:00
Zephyr Lykos
b3270866f8 tailscale: Update to 1.58.2
https://github.com/tailscale/tailscale/releases/tag/v1.58.2

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
(cherry picked from commit a37a6e1703)
2024-02-26 16:36:31 +08:00
Zephyr Lykos
bd5a36867d tailscale: Update to 1.58.0
https://github.com/tailscale/tailscale/releases/tag/v1.58.0

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
(cherry picked from commit 0b0a13ed33)
2024-02-26 16:36:27 +08:00
Dirk Brenken
1ff74e6442 travelmate: update 2.1.2-4
* more re-connections tweaks
* made travelmate generated emails responsive

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit bd8829b341)
2024-02-24 22:40:34 +01:00
Michael Heimpold
fa68279e32 Merge pull request #23485 from mhei/23.05-php8-update-to-8.2.16
[23.05] php8: update to 8.2.16
2024-02-24 10:53:07 +01:00
Dirk Brenken
e5c557be00 travelmate: update 2.1.2-3
* various vpn optimizations
* remove obsololete trm_maxscan option
* small fixes for net status and captive portal handling
* add an additional login variant to the h-hotels login script
* fix the wifibahn login script work again with wifionice hotspots again
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 6e4ea63b7e)
2024-02-24 07:02:01 +01:00
krant
309ee2c264 git: update to 2.43.2
- Refresh a patch

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit f9e16375f6)
2024-02-23 08:23:18 +01:00
krant
53fa23900a git: update to 2.43.0
- Refresh patches

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit 158b761193)
2024-02-23 08:23:12 +01:00
Glenn Strauss
f628aaa30f lighttpd: update to lighttpd 1.4.74 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 4d8bb07b73)
2024-02-23 08:19:53 +01:00
Yousong Zhou
06b0d0cce7 ovn: bump to 22.03.5
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 4d1c7a144a)
2024-02-22 10:23:23 +08:00
Yousong Zhou
0000f307cc openvswitch: bump to 2.17.9
Refresh and backport patches so that

 - ./python path in the source code takes precedence over the same dir in hostpkg
 - OVN LTS version 22.03.5 which depends on Open vSwitch 3.0 can compile
   with Open vSwitch 2.17

Fixes: https://github.com/openwrt/packages/issues/22744
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 7ccbb9a66c)
2024-02-22 10:23:23 +08:00
krant
65883df9af squid: fix configure options
- Remove non-existing 'dlmalloc' option
- Use 'with-cap' instead of 'with-libcap'
- Use 'with-xml2' instead of 'with-libxml2'
- Patch configure.ac to properly handle 'with-nettle'

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit f58be51721)
2024-02-21 17:14:42 +01:00
S. Brusch
57acafa661 unbound: update to latest upstream release version 1.19.1
Maintainer: @EricLuehrsen
Fixes: CVE-2023-50387, CVE-2023-50868
Release notes: https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/
Run tested: BPi-R3, mediatek/filogic, OpenWrt 23.05.2 with updated packages from snapshot
Signed-off-by: S. Brusch <ne20002@gmx.ch>
(cherry picked from commit 35ba14e50c)
2024-02-21 08:13:52 +01:00
Hirokazu MORIKAWA
76aaa3059e libuv: fix CVE-2024-24806
Update to 1.48.0
CVE-2024-24806 : Improper Domain Lookup that potentially leads to SSRF attacks

Vulnerabilities fixed
* CVE-2024-24806 / GHSA-f74f-cvh7-c6q6 0f2d7e7, 3530bcc and e0327e1
Notable Changes
* linux: disable io_uring on ppc64 and ppc64le #4285
* linux: disable io_uring on hppa below kernel 6.1.51 #4224
* win/spawn: optionally run executable paths with no file extension #4292 (We recommend that most users consider setting this by default)
Important Bugs Fixed
* unix,win: fix busy loop with zero timeout timers #4250, #4304.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 02a982bc10)
2024-02-20 09:16:12 +01:00
Christian Lachner
1a4c42d698 haproxy: update to v2.8.6
- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2024-02-20 13:50:39 +08:00
Nikos Mavrogiannopoulos
b23808a543 ocserv: updated config
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-02-19 16:39:52 +01:00
Nikos Mavrogiannopoulos
8e9ad0e3cb ocserv: use better separator for sed
This prevents clashes with network addresses that
contain '/'.

Resolves: #18589

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-02-19 16:39:42 +01:00
Nikos Mavrogiannopoulos
a19f8a1f12 openconnect: make host dependency more resilient
Retry when resolveip fails as it seems to be causing issues
on startup depending on various unpredictable parameters.

Resolves: #23185

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-02-19 13:27:06 +01:00
Rosen Penev
22e304ecf7 openconnect: update to 9.12
Remove upstream backport and fix libxml 1.12 compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-19 13:26:59 +01:00
Vladislav Grigoryev
679b9cf558 openconnect: add support for option --pfs
Add support for the OpenConnect option `--pfs`.
Designed to require perfect forward secrecy.

Signed-off-by: Vladislav Grigoryev <vg.aetera@gmail.com>
2024-02-19 13:26:50 +01:00
Michael Heimpold
3d7193cdeb php8: update to 8.2.16
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-02-19 08:10:19 +01:00
John Audia
9164fa255c lxc: update to 5.0.3
Bump to latest upstream release.

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 1b5ee689f3)
2024-02-18 17:07:20 +01:00
Florian Eckert
c5ad47372b zabbix: update to version 6.4.7
Switch to current stable version 6.4.7.
See release notes:
https://www.zabbix.com/rn/rn6.4.7

So that the new version builds cleanly. The 'libevent2-pthreads' must be
added as dependency.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 4f9ced5cf9)
2024-02-17 15:02:03 +01:00
Alexander Egorenkov
583af12489 yt-dlp: bump to version 2023.12.30
Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>
(cherry picked from commit 5d3424f992)
2024-02-17 14:49:18 +01:00
Alexander Egorenkov
abba8cff8f yt-dlp: bump to version 2023.11.16
Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>
(cherry picked from commit 707e87884d)
2024-02-17 14:49:18 +01:00
Rani Hod
a696cd44bc yt-dlp: add missing dependencies
Added missing python3-{logging,uuid} dependencies.

Signed-off-by: Rani Hod <rani.hod@gmail.com>
(cherry picked from commit 40a680ffd7)
2024-02-17 14:49:18 +01:00
Hirokazu MORIKAWA
f12547cf1f node: February 14 2024 Security Releases
Update to v18.19.1
This is a security release.

Notable changes
* CVE-2024-21892 - Code injection and privilege escalation through Linux capabilities- (High)
* CVE-2024-22019 - http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks- (High)
* CVE-2023-46809 - Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding) - (Medium)
* CVE-2024-22025 - Denial of Service by resource exhaustion in fetch() brotli decoding - (Medium)
* undici version 5.28.3
* npm version 10.2.4

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-02-17 13:27:56 +08:00
Stan Grishin
9d8882fe49 Merge pull request #23407 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: add force_dns_interface setting
2024-02-16 16:12:44 -07:00
Noah Meyerhans
95f45c24b3 bind: bump to 9.18.24
Fixes CVEs:

- CVE-2023-50387: Validating DNS messages containing a lot of DNSSEC signatures
  could cause excessive CPU load, leading to a denial-of-service condition.
- CVE-2023-50868: Preparing an NSEC3 closest encloser proof could cause
  excessive CPU load, leading to a denial-of-service condition.
- CVE-2023-4408: Parsing DNS messages with many different names could cause
  excessive CPU load.
- CVE-2023-5517: Specific queries could cause named to crash with an assertion
  failure when nxdomain-redirect was enabled.
- CVE-2023-5679: A bad interaction between DNS64 and serve-stale could cause
  named to crash with an assertion failure, when both of these features were
  enabled.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit d277e41e78)
2024-02-16 19:24:28 +01:00
Noah Meyerhans
1159b8ec32 bind: bump to 9.18.19
Fixes CVEs:

CVE-2023-3341 - Previously, sending a specially crafted message over the
control channel could cause the packet-parsing code to run out of available
stack memory, causing named to terminate unexpectedly.

CVE-2023-4236 - A flaw in the networking code handling DNS-over-TLS queries
could cause named to terminate unexpectedly due to an assertion failure under
significant DNS-over-TLS query load.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 835b105151)
2024-02-16 19:24:22 +01:00
Josef Schlehofer
74cd5e0956 bind: update to version 9.18.18
Release notes:
https://downloads.isc.org/isc/bind9/9.18.18/doc/arm/html/notes.html#notes-for-bind-9-18-18
https://downloads.isc.org/isc/bind9/9.18.17/doc/arm/html/notes.html#notes-for-bind-9-18-17

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 6a8d3565f0)
2024-02-16 19:24:16 +01:00
Noah Meyerhans
dc3fec89af bind: bump to 9.18.16
Fixes CVEs:

- CVE-2023-2828: The overmem cleaning process has been improved, to
  prevent the cache from significantly exceeding the configured
  max-cache-size limit.
- CVE-2023-2911: A query that prioritizes stale data over lookup
  triggers a fetch to refresh the stale data in cache. If the fetch is
  aborted for exceeding the recursion quota, it was possible for named
  to enter an infinite callback loop and crash due to stack overflow.

The complete list of changes is available in the upstream release
notes at
https://ftp.isc.org/isc/bind9/cur/9.18/doc/arm/html/notes.html#notes-for-bind-9-18-16

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 9ac79ad469)
2024-02-16 19:24:08 +01:00
Peter van Dijk
2451d5a692 pdns-recursor: update to 4.8.6 (fixes CVE-2023-50387, CVE-2023-50868)
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2024-02-16 14:05:17 +08:00
Tianling Shen
ae10fd6db7 Merge pull request #23415 from systemcrash/p910nd_picks
P910nd v23.05 picks
2024-02-16 14:02:12 +08:00
krant
836047068c squid: update to 6.7
- Switch URL to HTTPS
- Remove default/obsolete configure options
- Fix and refresh the patch

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit 4007a08529)
2024-02-15 07:49:16 +01:00
Paul Donald
f711c7e24e p910nd: bump release
Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 9dad4285d3)
2024-02-15 02:42:12 +01:00
Paul Donald
0f0962ee1f p910nd: hotplug shellcheck fixes
Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 58e7bfc41f)
2024-02-14 23:55:01 +01:00
Paul Donald
1e8c78fcca p910nd: init: check device (/dev/usb/lpX) existence
this prevents the daemon exiting when a configured device
is not plugged in.

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit dabeaa7643)
2024-02-14 23:55:01 +01:00
Paul Donald
1112286758 p910nd: init: partial fix for openwrt/packages#10496
Harmless to carry this fix until procd.sh adds the param

This parameter will mean umdns advertises not just "OpenWrt" but a more
appropriate string:

"Apple LaserWriter Pro 630"

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit ac501c908d)
2024-02-14 23:55:01 +01:00
Paul Donald
238e16f978 p910nd: hotplug+init: include extra ieee1284 properties
Apple and macOS GUI co-opts the mDNS note= param as "Location"

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 4591a79fa2)
2024-02-14 23:55:01 +01:00
Paul Donald
00d14e9bb7 p910nd: hotplug: minor bug fixes
Commit driver_home defaults before continuing

Fix missing path for serial number acquisition

Store current device if no previously configured device had one.
Also set CHAR_DEV so the printer can get its driver sent on first run.

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 5bc581e698)
2024-02-14 23:55:01 +01:00
Paul Donald
b7a11d6110 p910nd: hotplug: small refactor
replace -a with &&

shorten uci commands via variables

add optional ieee1284_id parameters

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 6e886cd434)
2024-02-14 23:55:01 +01:00
Paul Donald
92d1d4a77e p910nd: init: add txtvers=1 to mDNS properties
The spec https://developer.apple.com/bonjour/printing-specification/bonjourprinting-1.2.1.pdf
notes:

... if the meaning of any of the TXT record keys is changed, the txtvers value
will be incremented. The current value of this key is “1”, and if this key does not exist in
the TXT record, the default value of “1” is assumed. The txtvers SHOULD be the first
key/value pair in the TXT record.

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 069cc8dc81)
2024-02-14 23:55:01 +01:00
Paul Donald
c847cac8fb p910nd: init: line-break and conditionalize mDNS properties
Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit ffa1bbbe78)
2024-02-14 23:55:01 +01:00
Paul Donald
9ea1d672bf p910nd: init: only run mDNS changes if mdns is set to on
i.e. don't do the extra work unless mdns setting is enabled

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit b8890c69e4)
2024-02-14 23:55:01 +01:00
Paul Donald
7eeb756a21 p910nd: init script
Don't run procd with a name of p9100d or p9101d etc.
Use the original binary name: p910nd.

This way, all supplied parameters should be visible via e.g.:

ps
xargs -0 < /proc/{procid}/cmdline

Revise all p910nd strings to the variable DAEMON_NAME or CONFIG where
appropriate.

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 34a35c93ce)
2024-02-14 23:55:01 +01:00
Paul Donald
3cac4412d6 p910nd: hotplug script
Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 825b22a4db)
2024-02-14 23:55:01 +01:00
Stan Grishin
abe1125669 adblock-fast: add force_dns_interface setting
* allow users to specify list of interfaces/networks to force the
  DNS Hijacking on

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit eafdd63d67)
2024-02-14 04:43:04 +00:00
Daniel Golle
280b81c7aa stlink: add packages
stlink is an open source toolset to program and debug STM32 devices
and boards manufactured by STMicroelectronics.

Resulting binary packages:
 * stlink - library and shared chip info data
 * st-info - a programmer and chip information tool
 * st-flash - a flash manipulation tool
 * st-trace - a logging tool to record information on execution
 * st-util - a GDB server

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e609f6acdf)
2024-02-13 05:28:00 +00:00
S. Brusch
d844df9a40 crowdsec: new upstream release version 1.6.0
Update crowdsec to latest upstream release version 1.6.0

Signed-off-by: S. Brusch <ne20002@gmx.ch>

Maintainer: Kerma Gérald <gandalf@gk2.net>
Package tested: not able to test run due to limited space (package is big)

Description: update to latest version of upstream
(cherry picked from commit c08dac5ec5)
2024-02-08 13:45:16 +08:00
Sibren Vasse
91c5ca7bab openssh: fix build failure on powerpc_8548
1036d77b34

Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>
(cherry picked from commit a79c49578c)
2024-02-07 23:35:12 +01:00
Rucke Teg
89fcc9e277 openssh: bump to 9.6p1
Release notes: https://www.openssh.com/txt/release-9.6

Signed-off-by: Rucke Teg <rucketeg@protonmail.com>
(cherry picked from commit e8dfc6abbe)
2024-02-07 23:35:05 +01:00
Thomas Kupper
fad7e0ae11 tailscale: create combined tailscale/tailscaled
Modify Makefile to combine tailscale and tailscaled according to
Tailscale documentatio (https://tailscale.com/kb/1207/small-tailscale)

This resulted for x86_64 in an exec of 31MB + the symlink. Before it
was 29MB (tailscaled) and 10MB (tailscale).

Signed-off-by: Thomas Kupper <thomas.kupper@gmail.com>
(cherry picked from commit 7bef195bba)
2024-02-07 23:34:21 +01:00
Jan Hák
cf0b1e0ed5 knot: update to version 3.3.4
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 66c1065b45)
2024-02-07 23:32:48 +01:00
Jan Hák
de34798bef knot: update to version 3.3.3
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit a693dd5821)
2024-02-07 23:32:40 +01:00
Carsten Schuette
f83e01a4be dawn: Add PKG_BUILD_FLAGS:=no-lto because lto causes strange SegFaults
Signed-off-by: Carsten Schuette <schuettecarsten@googlemail.com>
(cherry picked from commit d9acb54dc4)
2024-02-07 23:31:28 +01:00
Carsten Schuette
a062c2a510 dawn: Update to 2023-05-14
Signed-off-by: Carsten Schuette <schuettecarsten@googlemail.com>
(cherry picked from commit 6c5c99d206)
2024-02-07 23:31:22 +01:00
Nick Hainke
dbb40a890c snowflake: update to 2.8.1
Changelog:
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/blob/v2.8.1/ChangeLog

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 4173327904)
2024-02-07 14:01:31 -08:00
Rosen Penev
26c24e5796 mosquitto: reenable options wrongly turned off
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 69dc285ac9)
2024-02-04 16:36:26 -08:00
Quintin Hill
db28d99be9 python-ble2mqtt: update to 0.2.2
b3b0cc8 version 0.2.2
85515cd roidmi: initial support for NEX2 Pro
62addc2 isort imports
8695649 README: update other govee to govee_ht
33f6ade ruuvitag: remove device class for counter
2099607 Rename key govee->govee_ht
12acacd codestyle updates
dbba43d ruuvitag: drop redundant import
84878e0 base: add and use HumidityTemperatureSensor
e9f0046 xiaomi_lywsd03_atc: make send_custom a class variable
2f4809a base: use lowercase for instance variable
5b1af17 govee: add manufacturer
7891691 ruuvitag: add manufacturer
cfd799b ruuvitag: remove inheritance from SubscribeAndSetDataMixin
7be28a1 codestyle updates
bffcf5e Add Govee H5074 temperature/humidity sensor support (#77)

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
(cherry picked from commit 268ed6d347)
2024-02-04 16:10:23 -08:00
Quintin Hill
c2ae7b95df python-dbus-fast: upgrade to 2.21.1
fix: avoid expensive runtime inspection of known callables (https://github.com/Bluetooth-Devices/dbus-fast/pull/277)
Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
(cherry picked from commit 8db974d8eb)
2024-02-04 16:10:23 -08:00
Olivier Poitrey
63f6af4bc3 nextdns: Update to version 1.42.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2024-02-04 16:08:58 -08:00
Erik Conijn
6d6e398c77 Openvpn: add missing script-security
Maintainer:  @neheb

Compile tested: armv7, cortexA15, OpenWRT 23.05
Run tested: Linksys EA8500

Compile tested: armv8, cortexA53, OpenWRT main
Run tested: Dynalink DL-WRX36

Description:
Script-security is always 2 and cannot be changed from the openvpn config file due to a missing rule in openvpn.init.

This is discussed in issue #23014

This patch adds the missing rule in openvpn.init to parse script-security from the openvpn config file.

Signed-off-by: Erik Conijn <egc112@msn.com>

(cherry picked from commit 7b40d179bc)
2024-02-04 16:08:36 -08:00
Sergey Ponomarev
bce14a016b cloudflared: refine config.yml
The config.yml is an example of a tunnel local configuration.
But the cloudlfared treat it as a real config and fails to start.
So to avoid problems let's comment all the statements.

The `url: http://localhost:8000` is not a valid config option.

Additionally add a smale of configuring ingres rules.

The cloudflared.config has missing option token.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
(cherry picked from commit b3580a76d8)
2024-02-04 14:55:28 +08:00
Tianling Shen
892ce0645d dnsproxy: Update to 0.64.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f6714eb01e)
2024-02-04 14:55:21 +08:00
Tianling Shen
3ffac159c5 inih: Update to r58
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2c6453adb6)
2024-02-04 14:55:18 +08:00
Tianling Shen
a3c2cd8fb4 rclone: Update to 1.65.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4437234dc4)
2024-02-04 14:55:16 +08:00
Tianling Shen
8c8ec81067 cloudflared: Update to 2024.1.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 17dfbd8613)
2024-02-04 14:55:13 +08:00
Tianling Shen
6cb714722b dos2unix: Update to 7.5.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 38fc2d2e9f)
2024-02-04 14:55:10 +08:00
Stan Grishin
05c602c8cc Merge pull request #23253 from stangri/openwrt-23.05-curl
[23.05] curl: update to 8.6.0
2024-02-03 16:15:44 -07:00
Rafał Miłecki
ff387bd304 Merge remote-tracking branch 'yggdrasil-openwrt/yggdrasil-for-23.05' into openwrt-23.05
[23.05] yggdrasil: overhaul package with netifd support

Compile tested: none, see below
Run tested: all package compiling and qa testing done in snapshots
Description: we must backport v0.5 into 23.05 because the breaking protocol situation with v.0.4. the counterpart package, luci-proto-yggdrasil is already in 23.05 feeds.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2024-02-03 17:12:51 +01:00
Konstantin Demin
8d02881d40 curl: update to 8.6.0
* https://curl.se/changes.html#8_6_0

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
(cherry picked from commit 0f2c98d53f)
2024-02-02 13:48:58 +00:00
Stan Grishin
b2bf8f26b4 Merge pull request #23227 from stangri/openwrt-23.05-nebula
[23.05] nebula: update to 1.8.2-2
2024-02-02 05:57:47 -07:00
Stan Grishin
dcff607ba3 nebula: update to 1.8.2-2
The following fixes have been applied to Makefile:
* fix the nebula license type
* add PKG_CPE_ID
* remove unneeded call to Build/Compile
* add leading spaces to descriptions
* add Package/nebula/conffiles definition
* remove unneeded /lib/upgrade/keep.d files
* no longer install actual license file
* add the README file

Kudos to @BKPepe and @1715173329 for feedback which lead to these fixes

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit ae22bea8dd)
2024-02-01 12:38:11 +00:00
Michael Heimpold
810bd106d1 Merge pull request #23201 from mhei/23.05-php8-update-to-8.2.15
[23.05] php8: update to 8.2.15
2024-01-31 23:21:37 +01:00
Hannu Nyman
905afb0ed1 xz: Update to 5.4.6
Update xz to the version 5.4.6

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit a297c70c16)
2024-01-31 18:59:10 +02:00
Michael Heimpold
92a07db7dc php8: update to 8.2.15
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-01-30 21:56:26 +01:00
Andy Syam
1167ef72ea python-dbus-fast: update version 2.21.0
Signed-off-by: Andy Syam <privasisource@gmail.com>
(cherry picked from commit 81a5b89c96)
Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
2024-01-28 16:29:36 +08:00
Quintin Hill
e6d3a7892f python3-bleak: add missing python3-typing-extensions dependency
Dependency introduced by 21094e67cf
and
3c1fac9773

(And only for python versions below 3.12.)

Fixes: 64fa106 (python3-bleak: bump version to 0.21.1)

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
(cherry picked from commit fcb02c264b)
2024-01-28 16:29:36 +08:00
Ray Wang
0da0a501e2 natmap: update to 20240126
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit 42c6e10ada)
2024-01-28 16:26:37 +08:00
Van Waholtz
67dcaa5d78 sing-box: update to 1.8.4
Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 49ab3e0018)
2024-01-28 16:26:23 +08:00
Dirk Brenken
f87af49857 banip: update 0.9.3-5
* fix the nft Set survey function

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 79ae76806b)
2024-01-26 19:51:45 +01:00
Tianling Shen
b61930ad74 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1aaa5c045d)
2024-01-26 12:22:18 +08:00
Tianling Shen
9a26ff67e8 v2raya: do not allow changing config/log directory
We need stable path to persist configurations and read log from LuCI.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 272cff0d1c)
2024-01-26 12:22:16 +08:00
Tianling Shen
4267c8776b dnsproxy: Update to 0.63.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3711f7f6d2)
2024-01-26 12:22:13 +08:00
Tianling Shen
63a022a871 rclone: Update to 1.65.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 05b61b3b6d)
2024-01-26 12:22:07 +08:00
Tianling Shen
d07aa2f0fa xray-core: Update to 1.8.7
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ea4bbc46e1)
2024-01-26 12:22:05 +08:00
Tianling Shen
d9d4acfd99 cloudflared: Update to 2024.1.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 48b55bde67)
2024-01-26 12:21:42 +08:00
Tianling Shen
ebddc07c18 cloudflared: Update to 2024.1.2
Finally fixed build with Go 1.21.

Fixes: #22383
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d16377d23f)
2024-01-26 12:21:39 +08:00
Nikos Mavrogiannopoulos
ef606d4b20 Merge pull request #23137 from nmav/tmp-new-ocserv-23.05
23.05: update ocserv to 1.2.4
2024-01-24 11:37:37 +01:00
Nikos Mavrogiannopoulos
4da835d3eb gnutls: updated to 3.8.3
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-01-24 10:55:43 +01:00
Nikos Mavrogiannopoulos
5aabddf759 ocserv: updated to 1.2.4
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-01-24 10:37:49 +01:00
Erik Conijn
564e6e08d7 Openvpn: add missing script event options
Maintainer: @mkrkn  @neheb
Compile tested: aarch64, cortex-a53, OpenWRT Master
Run tested: Dynalink DL-WRX36

Description:
[A previous commit](f8a8b71e26) has added more script event options.
However it looked like that commit was not complete as it stops the use of the script events route-up, route-pre-down, and ipchange when those are placed in the openvpn config file.

This PR fixes a regression that makes it problematic to specify certain event options in the OpenVPN configuration file.

Discussion in [this thread](https://forum.openwrt.org/t/openvpn-custom-route-up-script-in-23-05-rc2/167105/13) and [here](https://forum.openwrt.org/t/openvpn-route-up-and-route-pre-down-broken-in-23-05/176568)

Please have a look and consider implementing or make it possible to use all script event options in the openvpn config file in another way.

Pull request has been discussed and improved with the help of @AuthorReflex, see: https://github.com/openwrt/packages/pull/21732

Signed-off-by: Erik Conijn <egc112@msn.com>

(cherry picked from commit 7735cdfe60)
2024-01-21 13:29:17 +01:00
John Audia
0707d98c1b htop: update to 3.3.0
Changelog: https://github.com/htop-dev/htop/compare/3.2.2...3.3.0

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 3ee7b46610)
2024-01-19 20:23:42 +02:00
Stan Grishin
d877e44935 Merge pull request #23127 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: update to 1.1.1-3
2024-01-18 23:22:51 -07:00
Stan Grishin
ac2736542b adblock-fast: update to 1.1.1-3
* allow top-level domains in the blocked-domains options fixes
  https://github.com/openwrt/packages/issues/23125

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 0f059b6523)
2024-01-19 00:06:14 +00:00
Stan Grishin
2c2bc17093 Merge pull request #23117 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: sync with main branch
2024-01-17 10:45:21 -07:00
Stan Grishin
58a7c28aaf adblock-fast: sync with main branch
* somehow parts of the code of the init script got different between the
  main branch and release branch, this PR fixes that.

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-01-17 17:38:10 +00:00
Stan Grishin
144cacc120 Merge pull request #23101 from stangri/openwrt-23.05-nebula
[23.05] nebula: update to 1.8.2
2024-01-17 10:14:23 -07:00
Stan Grishin
ee11377b7a nebula: update to 1.8.2
* update to 1.8.2: https://github.com/slackhq/nebula/releases/tag/v1.8.2

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 91afa9f641)
2024-01-14 19:17:38 +00:00
Tianling Shen
d26bbd7926 Merge pull request #23085 from muink/openwrt-23.05
[23.05] sing-box: Update to 1.8.0
2024-01-13 14:22:26 +08:00
Anya Lin
7750c869b2 sing-box: update to 1.8.0
New features for v1.8.0:
1. Migrate cache file from Clash API to independent options
2. Introducing Rule Set
3. Add `sing-box geoip`, `sing-box geosite` and `sing-box rule-set` commands
4. Allow nested logical rules
5. Independent `source_ip_is_private` and `ip_is_private` rules
6. Add context to JSON decode error message
7. Reject internal fake-ip queries
8. Add GSO support for TUN and WireGuard system interface
9. The legacy LWIP stack has been deprecated and removed
10. Add `idle_timeout` for URLTest outbound
11. Added some new uTLS fingerprints
...
Release notes: https://github.com/SagerNet/sing-box/releases/tag/v1.8.0

The new version has some breaking changes and may stop working after upgrading if use the original config.
Please see the migration manual to migrate the config: https://sing-box.sagernet.org/migration/

Signed-off-by: Anya Lin <hukk1996@gmail.com>
(cherry picked from commit 8fe2f68485)
2024-01-11 22:21:04 +08:00
Tianling Shen
1b172d0dad rust: Update to 1.75.0
Changelog: https://blog.rust-lang.org/2023/12/28/Rust-1.75.0.html

Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 546e6eba4f)
2024-01-10 19:53:09 +08:00
Tianling Shen
cbc8d7bc58 rust: unexport host sccache env variable
Users might configure their own env variables on the host, and sometimes
it can lead build failure or unexpected behavior.

Fixes: #22889

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9f01010958)
2024-01-10 19:53:06 +08:00
Tianling Shen
0142ff1edb dnsproxy: Update to 0.61.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 37a77ffaf5)
2024-01-10 19:52:49 +08:00
Tianling Shen
9d2fe1355f v2ray-geodata: Update to latest versin
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 6316772b3d)
2024-01-10 19:52:44 +08:00
Tianling Shen
97f921ca74 v2raya: Update to 2.2.4.6
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ce684797e6)
2024-01-10 19:52:33 +08:00
Tianling Shen
0a34c85713 btop: Update to 1.3.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 37ce0e6803)
2024-01-10 19:52:19 +08:00
Javier Marcet
b110df7cb5 btop: opt out of lto usage
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 107312a73f)
2024-01-10 19:52:15 +08:00
Thibaut VARÈNE
1e9d24dcaf uspot: update to Git HEAD (2024-01-09)
0cffba9458d3 treewide: add support for RADIUS Reply-Message
c9fb744fdee8 treewide: add support for 'lang=' & ChilliSpot-Lang
584a162cb19a handler-uam: ensure that 'seconds_remaining' is always set
bd1f7c5de1ae Makefile: align with packages feed one
0ea6ad3c4e54 Makefile: mark uspot-www and uspotfilter "PKGARCH:=all"
e6a286ccfdbf uspot/uspotfilter: use 'logger -t'
427ed16cfde5 uspot: expose ratelimits in client data
4ba1dd9c5135 uspot: don't send NAS-Port-Type
78a37ef49b85 templates: add id="replymsg" to reply msg header
e3f4e179fd17 templates: show remaining time in "connected"
398762dff711 radius-client: correctly use str_to_hex()
730ef800d9da templates: simplify HTML
6bb39282fd8f Documentation update
b6c802adac19 portal: handle_request() logic refactoring
1aa1a5eb28d7 uspotfilter: implement peer_lookup()
ba5547ec61f1 portal: speedup peer lookup by leveraging spotfilter
d551376c29bb templates: added html5 time tag to timeleft output
154c98e0b77b uspotfilter: mark client as active when set()
8dcb03a37a77 uspotfilter: rework neigh management
cfb2ce7909da uspotfilter: use client_remove() where applicable
8411314dbf90 Documentation update
8dacf3df9935 uspot: use a single operation for client removal
297b7857c1e0 uspotfilter: fix DELNEIGH processing
76003917c205 uspotfilter: client_set() only clear idle when allowing
f46a855c5085 uspotfilter: remove botched IPv6 "support"
4ff31cbf0e2b uspot: client_remove(): stay in sync with spotfilter
edc9ad7e60a3 uspot/uspotfilter: use ucode-mod-log for logging
52e24aecf2db uspotfilter: use ucode '??=' syntax
c4b6f2f0bb1e Update README

Update the package Makefile to reflect the changes from the following
above-listed commits:

0ea6ad3c4e54 Makefile: mark uspot-www and uspotfilter "PKGARCH:=all"
edc9ad7e60a3 uspot/uspotfilter: use ucode-mod-log for logging

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
(cherry picked from commit ab20c1bd90)
2024-01-10 19:51:09 +08:00
Dirk Brenken
ab6d368b73 travelmate: update 2.1.2-2
* fix a possible re-connection issue/cornercase seen on single radio units

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 4518ecf60b)
2024-01-09 22:54:16 +01:00
Stan Grishin
08a312b416 Merge pull request #23077 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: bugfix: pause command
2024-01-08 19:47:34 -07:00
Stan Grishin
b37dec1de1 adblock-fast: bugfix: pause command
* the pause command used to incorrectly cause block-lists reload, this
  has been fixed in this version

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit dfeeabbebf)
2024-01-07 23:08:58 +00:00
Dirk Brenken
421e2c75a8 banip: update 0.9.3-4
* made the default mail template "responsive" to get a better view esp. on mobile devices

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 6c9cd77596)
2024-01-07 18:11:52 +01:00
Dirk Brenken
a4d0bb91c4 travelmate: release 2.1.2-1
* fix a station scanning issue on single radio units (mainly a LuCI/JS issue) reported in the forum by multiple users

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit ce20f8d88b)
2024-01-06 21:02:01 +01:00
Marc Ole Bulling
389a100bbc travelmate: Added H-Rewards hotel login
Signed-off-by: Marc Ole Bulling <Marc-Ole@gmx.de>

(cherry picked from commit f12c63b9b9)
2024-01-06 21:01:46 +01:00
William Fleurant
eb7db48b6d yggdrasil: bump to 0.5.4
Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry picked from commit 6820b2b318)
2024-01-06 15:22:29 +01:00
William Fleurant
315f5c41bd yggdrasil: bump to 0.5.3
Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry picked from commit 1b4455cbe1)
2024-01-06 15:22:23 +01:00
William Fleurant
be2b054360 yggdrasil: support public key in config generation
Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry picked from commit f0c4517d2e)
2024-01-06 15:22:17 +01:00
William Fleurant
4b5d833e6e yggdrasil: overhaul package with netifd support
- package is bumped to 0.5.2
- new protocol changes prevent peering with 0.4.x peers
- @turretkeeper revamps package with netifd support
- do not use with luci-app-yggdrasil please install luci-proto-yggdrasil

Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry picked from commit 99c7c36ce1)
2024-01-06 15:22:10 +01:00
Stan Grishin
766a5af5d9 Merge pull request #22986 from stangri/openwrt-23.05-nebula
[23.05] nebula: update to 1.8.1
2024-01-04 16:09:47 -07:00
Joel Low
4e1c175d48 strongswan: trigger reload when interfaces are specified
Fixes #20848

Add interface triggers if interfaces to listen to are specified in
`/etc/config/ipsec`. This fixes the "running with no instances" scenario
after rebooting a router.

Signed-off-by: Joel Low <joel@joelsplace.sg>
(cherry picked from commit f2d209e4ff)
2024-01-02 15:28:26 -08:00
Anya Lin
0f499ec4b8 sing-box: Update to 1.7.7
Signed-off-by: Anya Lin <hukk1996@gmail.com>
(cherry picked from commit 2cf219c837)
2024-01-01 15:31:20 +01:00
Michael Heimpold
879c7e1b52 Merge pull request #23000 from mhei/23.05-php8-update-to-8.2.14
[23.05] php8: update to 8.2.14
2023-12-29 10:03:43 +01:00
Alexandru Ardelean
f971d88d5d django: bump to version 4.2.8
To address
   https://nvd.nist.gov/vuln/detail/CVE-2023-43665

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2023-12-28 13:40:17 -08:00
Dirk Brenken
e96b6f6484 banip: update 0.9.3-3
* more init fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 8c8a335eaf)
2023-12-28 21:13:49 +01:00
Dirk Brenken
26373f8454 banip: update 0.9.3-2
* rework the device/interface auto-detection (only layer-3 network devices will be detetcted correctly), disable the auto-detection e.g. for special tunnel interfaces
* supports now full gawk (preferred, if installed) and busybox awk
* raise the default boot timeout to 20 seconds (if 'ban_triggerdelay' is not set)
* various small fixes and improvements
* readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 5af101564a)
2023-12-28 18:02:18 +01:00
Dirk Brenken
6435e15a21 banip: bump to release 0.9.3-1
* provides an option to transfer log events on remote servers via cgi interface (disabled by default), see readme for details
* refine the allowlist check to support IP intervals as well before adding an IP to the blocklist

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit df81585cea)
2023-12-28 18:02:17 +01:00
Michael Heimpold
06d1feb78d php8: update to 8.2.14
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2023-12-27 13:44:23 +01:00
Tianling Shen
1e9d9f2b49 dnsproxy: Update to 0.61.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit df24c8d097)
2023-12-26 19:46:11 +08:00
Tianling Shen
75d9f3af95 yq: Update to 4.40.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 708b69f86f)
2023-12-26 19:46:05 +08:00
Tianling Shen
1b500425d5 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 7114155a91)
2023-12-26 19:46:02 +08:00
Tianling Shen
ea1f30b6ff v2ray-core: Update to 5.13.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5ca3b2ed44)
2023-12-26 19:45:58 +08:00
Tianling Shen
e60975e71c dnsproxy: Update to 0.60.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3900f2aab4)
2023-12-26 19:45:55 +08:00
Shi JiaYang
e95f8c8dec tailscale: Update to 1.56.1
Signed-off-by: Shi JiaYang <shi05275@163.com>
(cherry picked from commit a2b72f13ff)
2023-12-26 19:45:47 +08:00
Alan Luck
5b9ae50b29 wsdd2: update to 2023-12-21
Signed-off-by: Alan Luck <luckyhome2008@gmail.com>
(cherry picked from commit 25ded48f9f)
2023-12-26 11:08:15 +08:00
Rosen Penev
73062e6242 mosquitto: update to 2.0.18
Switch to CMake. Allows faster compilation.

Small Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit aa89f847c6)
2023-12-24 15:50:29 -08:00
Stan Grishin
515b0f92eb nebula: update to 1.8.1
* https://github.com/slackhq/nebula/releases/tag/v1.8.1

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 731d594ee3)
2023-12-24 22:36:26 +00:00
John Audia
5b4067ccb6 libxcrypt: update to 4.4.36
Upstream bump required to fix build issues reported here:
https://forum.openwrt.org/t/i-cannot-build-my-image-due-to-failure-in-libxcrypt/168114

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit b1d28936cb)
2023-12-20 11:26:15 +01:00
Tianling Shen
9e7371ed55 libtorrent-rasterbar: Update to 2.0.9
Switch to use release tarball to avoid try_signal hack.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9b0608547b)
2023-12-20 10:57:31 +08:00
Nick Hainke
4e9c89801b snowflake: update to 2.8.0
Release Notes:
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/blob/v2.8.0/ChangeLog

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 12defee0ce)
2023-12-18 17:48:10 +01:00
Michael Heimpold
e648135759 Merge pull request #22906 from mhei/23.05-php8-update-to-8.2.13
[23.05] php8: update to 8.2.13
2023-12-17 20:31:40 +01:00
Christian Marangi
b38eb34ad3 wifidog: make it compile again with recent version of WolfSSL
Recent version of WolfSSL dropped CyaSSL shims and made the package not
compilable. Converting it to the WolfSSL library is simple enough as the
API used are very basic and can be converted directly. Add patch that
fully convert the package to WolfSSL and doesn't use the compat shim
anymore.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit b38e3cd257)
2023-12-17 19:14:27 +01:00
Michael Heimpold
b6e00e30e8 php8: update to 8.2.13
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2023-12-16 16:55:47 +01:00
Nikos Mavrogiannopoulos
1ee27592c6 tang: silence errors on first installation
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2023-12-16 15:46:59 +01:00
Christian Lachner
5741b33749 haproxy: update to v2.8.5
- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2023-12-16 17:20:31 +08:00
Tianling Shen
77583c7dbf Merge pull request #22888 from jefferyto/python-3.11.7-openwrt-23.05
[openwrt-23.05] python3: Update to 3.11.7, refresh patches
2023-12-16 17:20:21 +08:00
Jeffery To
4d4567265e Merge pull request #22880 from QuintinHill/ble2mqtt-0.2.1-for-23.05
[23.05] Python3-Ble2mqtt: update to 0.2.1 and bump dependencies
2023-12-16 12:13:40 +08:00
Stan Grishin
d9c04df8ae Merge pull request #22897 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: update to 1.1.1-1
2023-12-14 23:04:09 -07:00
Stan Grishin
8ebf99b7ef adblock-fast: update to 1.1.1-1
* move reload/restart logic from json() to config_cache()
* improve fw4 restart decision logic
* no longer store reload/restart info in ubus/status json file
* rename variables pointing to run-time information
* create dns_set_output_values to reuse code in principal all and luci app
* improve append_url to store collected URLs in an alternative variable

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit bab17f480c)
2023-12-15 02:46:26 +00:00
Stan Grishin
50832476d9 Merge pull request #22859 from stangri/openwrt-23.05-nebula
[23.05] nebula: update to 1.8.0
2023-12-14 15:01:54 -07:00
Stan Grishin
efa874583f Merge pull request #22857 from stangri/openwrt-23.05-curl
[23.05] curl: update to 8.5.0
2023-12-14 15:01:43 -07:00
Jeffery To
40a730516c python3: Update to 3.11.7, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d4f5759190)
2023-12-14 01:36:41 +08:00
Julien Cassette
755ad8d13f unbound: fix create_host_record_from_host error when dns is not set
The function `create_host_record_from_host` fails if the `dns` option
is not set in the host entry.
This sets a default to the `dns` variable in order to fix this error.

Fixes: #22691

Signed-off-by: Julien Cassette <julien.cassette@gmail.com>
(cherry picked from commit 8d60419251)
2023-12-13 14:19:56 +08:00
Julien Cassette
26afa741eb unbound: create extra host records from DHCP static leases
The "Extra DNS" option allows to create records from the DHCP
"Hostnames" configuration entries.
This allows to create such records from the DHCP "Static leases"
configuration entries too.

Fixes: #22593

Signed-off-by: Julien Cassette <julien.cassette@gmail.com>
(cherry picked from commit b4a31f92de)
2023-12-13 14:19:56 +08:00
Jeffery To
07e8278e57 golang: Update to 1.21.5
Includes fix for CVE-2023-39326 (net/http: limit chunked data overhead).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b8254cdac4)
2023-12-13 14:18:24 +08:00
Jeffery To
fe363b28ff Merge pull request #22878 from efahl/openwrt-23.05
[23.05] syncthing: fix duplicate command line parameters on service
2023-12-13 11:58:48 +08:00
Quintin Hill
c82697da69 python3-ble2mqtt: bump version to 0.2.1
Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
(cherry picked from commit 0937af539d)
2023-12-11 23:26:57 +00:00
Quintin Hill
bb3a340200 python3-bleak: bump version to 0.21.1
Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
(cherry picked from commit 64fa106b07)
2023-12-11 23:26:54 +00:00
Quintin Hill
5c9de3c0a2 python3-dbus-fast: bump version to 2.20.0
Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
(cherry picked from commit ca2171c005)
2023-12-11 23:26:46 +00:00
Stan Grishin
ca20924b6f Merge pull request #22875 from stangri/openwrt-23.05-https-dns-proxy
[23.05] https-dns-proxy: only restart firewall when needed
2023-12-11 15:46:04 -07:00
Eric Fahlgren
4bc836e484 syncthing: fix duplicate command line parameters on service
- This patch fixes 9d17ba1 and #22760

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
(cherry picked from commit 6849a9df90)
2023-12-11 12:07:24 -08:00
Stan Grishin
e3148ef0fc https-dns-proxy: only restart firewall when needed
* only restart firewall when needed

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 8b6635bae9)
2023-12-11 13:19:38 +00:00
Stan Grishin
d3136095f8 Merge pull request #22864 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: better allow-listing
2023-12-11 03:40:49 -07:00
Stan Grishin
73b689f96e adblock-fast: better allow-listing
* improve allow-listing reliability by running sed from the script-file
  instead of the command-line
* fix user for smartdns files ownership

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 693287e961)
2023-12-11 00:58:27 +00:00
Stan Grishin
b1f6d75628 Merge pull request #22854 from stangri/openwrt-23.05-adblock-fast
adblock-fast: bugfix: block domains from config when not using block-lists
2023-12-10 13:54:50 -07:00
Stan Grishin
7abcfbccf4 nebula: update to 1.8.0
* https://github.com/slackhq/nebula/releases/tag/v1.8.0

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit e9b04f32a4)
2023-12-10 17:53:58 +00:00
Stan Grishin
213d2df70b curl: update to 8.5.0
* https://curl.se/changes.html#8_5_0

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 6501290c17)
2023-12-10 17:44:43 +00:00
Tianling Shen
3cc9f0f754 upmpdcli: Update to 1.8.6
Removed upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c438a16052)
2023-12-10 20:18:52 +08:00
Tianling Shen
7697be576b libupnpp: Update to 0.24.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8facff466b)
2023-12-10 20:18:52 +08:00
Tianling Shen
c95ff2e260 libnpupnp: Update to 5.1.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 24b4173030)
2023-12-10 20:18:52 +08:00
Rosen Penev
6d5cd9ad17 upmpdcli: update to 1.8.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 303b7b665c)
2023-12-10 20:18:52 +08:00
Rosen Penev
24eb6278d0 libupnpp: update to 0.24.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f53100b69e)
2023-12-10 20:18:52 +08:00
Rosen Penev
10b5d353af libnpupnp: update to 5.1.1
Build with meson. Faster.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 36360b7406)
2023-12-10 20:18:52 +08:00
Stan Grishin
341d817e2d adblock-fast: bugfix: block domains from config when not using block-lists
* remove empty lines from the combined list to allo optimization code
  to work properly

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 1914114ed3)
2023-12-10 02:51:57 +00:00
Hannu Nyman
0e789a6ab0 Merge pull request #22851 from hnyman/irqfix
[23.05] irqbalance: Fix log spam and correct meson version
2023-12-09 11:27:20 +02:00
Hannu Nyman
8b1531158b irqbalance: Fix log spam and correct meson version
Irqbalance 1.9.3 changed the handling of certain errors.
Specifically EINVAL, trying to set an invalid CPU core,
was changed to be a temporary error, causing log spam from
repeated balancing runs in some devices. See log and strace below.
Mark EINVAL as permanent.

Also correct the version in our own meson.build patch.

Log and strace:

Sat Dec  9 10:17:27 2023 daemon.warn irqbalance: Cannot change IRQ 48 affinity: Invalid argument

open("/proc/irq/48/smp_affinity", O_WRONLY|O_CREAT|O_TRUNC|O_LARGEFILE, 0666) = 6
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6ed9000
ioctl(6, TIOCGWINSZ, 0xbeb134e8)        = -1 ENOTTY (Not a tty)
writev(6, [{iov_base="00000001", iov_len=8}, {iov_base=NULL, iov_len=0}], 2) = -1 EINVAL (Invalid argument)
close(6)                                = 0
munmap(0xb6ed9000, 4096)                = 0
clock_gettime64(CLOCK_REALTIME, {tv_sec=1702109847, tv_nsec=340549081}) = 0
sendto(5, "<28>Dec  9 08:17:27 irqbalance: "..., 80, 0, NULL, 0) = 80
writev(1, [{iov_base="Cannot change IRQ 48 affinity: I"..., iov_len=47}, {iov_base="\n", iov_len=1}], 2Cannot change IRQ 48 affinity: Invalid argument
) = 48

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2023-12-09 11:00:33 +02:00
Tianling Shen
ac9f4c118c dnsproxy: Update to 0.60.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3a708afd04)
2023-12-09 00:58:52 +08:00
Tianling Shen
c4e2a69191 yq: Update to 4.40.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a18841e459)
2023-12-09 00:58:48 +08:00
Tianling Shen
711511144f rclone: Update to 1.65.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ac17302410)
2023-12-09 00:58:45 +08:00
Tianling Shen
7d768e321e v2raya: update to 2.2.4.3
Switched back to tar.gz archive to avoid potential permission issue.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 255e244980)
2023-12-09 00:58:41 +08:00
Jeffery To
4fa89ac516 python-cryptography: Update to 41.0.7
41.0.6 included a fix for CVE-2023-49083 (loading certificates from a
PKCS#7 bundle could lead to a null-pointer-dereference and segfault).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5f829ad162)
2023-12-08 22:44:26 +08:00
Jeffery To
672a209367 python-cryptography: Update to 41.0.5
This also adds a CPE ID for the package and updates the test.sh script
to use an assert.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit c4a223ed87)
2023-12-08 22:44:26 +08:00
Stan Grishin
49bc08ec1d Merge pull request #22840 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: bugfixes: getsize/resolver
2023-12-07 23:08:40 -07:00
Stan Grishin
af57f8dbfb adblock-fast: bugfixes: getsize/resolver
* do not use standalone grep-package dependent syntax to get the remote
  file size
* various bugfixes to prevent attempts to change/commit if dnsmasq/smartdns
  are not installed

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 496d9b71ab)
2023-12-08 02:43:27 +00:00
Tianling Shen
d87550e02e Merge pull request #22808 from jefferyto/ci-fix-helper-openwrt-23.05
[openwrt-23.05] CI: Fix CI_HELPER
2023-12-08 02:58:27 +08:00
Jonas Jelonek
f93e3ce71e iperf3-mt: remove package
This package was intended to provide the experimental multithreading
support for iperf3. With the update to 3.16, multithreading is available
in mainline iperf3. Thus, remove this package.

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
(cherry picked from 4fb1bdc86c)
2023-12-08 02:26:10 +08:00
Jonas Jelonek
48f35252cf iperf3: update to 3.16
notable changes:
- multithreading support

changelog: https://github.com/esnet/iperf/releases/tag/3.16

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
(cherry picked from bdb6d2a37f)
2023-12-08 02:25:55 +08:00
Jeffery To
b6b105abe6 fail2ban: Fix compatibility with Python 3.11
This backports 2 commits from upstream[1]; the other 3 are not strictly
necessary. One of the patches has been updated to remove a change to a
regex that does not exist in 0.11.2.

[1]: https://github.com/fail2ban/fail2ban/pull/3267

Fixes: https://github.com/openwrt/packages/issues/22736

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0d9cc4aed2)
2023-12-07 15:06:39 +08:00
Moritz Warning
c1a8eb0981 dhtd: udpate to 0.2.6
Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit 75d5ffd167)
2023-12-07 15:06:20 +08:00
Stan Grishin
a6fce67316 Merge pull request #22825 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: add smartdns ipset/nftset support
2023-12-06 08:40:42 -07:00
Stan Grishin
473b173ffa adblock-fast: add smartdns ipset/nftset support
* bugfix: correct URL to config-update file
* bugfix: check if uci configs exist before chacking for changes
* add support for smartdns ipset-based blocking
* add support for smartfns nftset-based blocking
* disallow non-ascii symbols for smartdns blocking
* add check wherever fw4 restart is needed before calling
  procd_set_config_changed firewall
* improve clean-up code in resolver()
* improve case code for different resolver settings
* modify load_validate_config to allow smartdns.ipset and smartdns.nftset

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 28cd5ecf6e)
2023-12-06 10:24:30 +00:00
Thibaut VARÈNE
d83ed18f8d uspot: add package
uspot is an OpenWrt-native captive portal system.

It leverages existing OpenWrt tools such as uhttpd, dnsmasq, firewall4,
ucode, without needing any external kernel module.

It can achieve the maximum performance allowed by nftables (flow
offloading works).

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
(cherry picked from commit e6e8e58ae0)
2023-12-05 19:05:27 +08:00
Ariel Xiong
d3ee258616 AriaNg: bump 1.3.2 to 1.3.6
Fix the problem that cannot create new task after clearing checksum option
    Other bug fix and user interface optimization

    Support overriding aria2 global settings with empty content when create new download task (#712)
    Other bug fix and user interface optimization

    Update Traditional Chinese translation (#705, thx @ChiaYen-Kan)
    Other bug fix and user interface optimization

    Add check-integrity to task settings tab (#693, thx @raytrap)
    Fix a spelling mistake (#696, thx @rusq)

     fix due to the index.html (1.3.6) cite these 2 png files. To keep the page looks fine without 404, added these 2 png files.

Signed-off-by: Ariel Xiong <ArielHeleneto@outlook.com>
(cherry picked from commit 904438be39)
2023-12-05 19:05:21 +08:00
Oskari Rauta
ec8fdad70e netbird: update to version 0.24.3
Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.24.3

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 2dd3b1b177)
2023-12-05 19:04:39 +08:00
Oskari Rauta
b4a70180b9 aardvark-dns: update to version 1.9.0
Changelog:
 - update trust-dns to hickory
 - never report an error when the syslog init fails
 - dependency updates

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 88ed83a55b)
2023-12-05 19:04:33 +08:00
Oskari Rauta
d5f206830c netavark: update to version 1.9.0
Changes:
 - add firewalld-reload subcommand
 - bridge: force static mac on bridge interface
 - dependency updates
 - numerous fixes to test suite

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit aa3abde67e)
2023-12-05 19:04:30 +08:00
Oskari Rauta
d88bf3d530 podman: update to version 4.8.0
Changelog: https://github.com/containers/podman/releases

I also updated containers.conf - it has gotten quite a many new
options. I added crun to depends, every other distribution
seems to ship it with podman, and after all it is a default
OCI Container Runtime for podman anyway and has a super low
footprint, so shouldn't be a problem for anyone running
containers, after all you need some storage for that anyway.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 9ab2b8a04d)
2023-12-05 19:04:26 +08:00
Oskari Rauta
21a5a426aa crun: update to version 1.12
Changelog: https://github.com/containers/crun/releases

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit ff51a0b495)
2023-12-05 19:04:14 +08:00
Jeffery To
ee67963716 CI: Fix CI_HELPER
Commit 18d3c529fa caused CI_HELPER to be
set to "''" (two single quotes), leading to an error when test.sh tries
to source $CI_HELPER.

CI_HELPER is not set anywhere else and not passed into the container
environment, so there is no need to test if it has a value.

This fixes the value of CI_HELPER.

Fixes: 18d3c529fa ("github-ci: error on any shell errors")

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 562f5df67f)
2023-12-03 22:37:53 +08:00
Hirokazu MORIKAWA
fc4a85721e node: bump to v18.19.0
Notable Changes
* npm updated to v10
* ESM and customization hook changes
* New node:module API register for module customization hooks; new initialize hook
* import.meta.resolve unflagged
* --experimental-default-type flag to flip module defaults

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2023-12-03 14:59:49 +08:00
Felix Matouschek
78d47e2a58 postfix: Fix enabling PCRE support
After the change from PCRE to PCRE2 when enabling POSTFIX_PCRE the
resulting postfix build no longer reports pcre as an available module.
(postfconf -m). This is caused by using the wrong syntax for the
HAS_PCRE build flag (HAS_PCRE2 vs HAS_PCRE=2). This fixes the build flag
to use the correct syntax.

Signed-off-by: Felix Matouschek <felix@matouschek.org>
2023-12-03 08:56:33 +02:00
Stan Grishin
641d7f4398 Merge pull request #22773 from stangri/openwrt-23.05-ngtcp2
[23.05] ngtcp2: update to 1.1.0
2023-12-01 12:56:05 -07:00
Stan Grishin
12f34a8bdd Merge pull request #22771 from stangri/openwrt-23.05-nghttp3
[23.05] nghttp3: update to 1.1.0
2023-12-01 12:55:54 -07:00
Moritz Warning
2fd96090af dhtd: update to 0.2.5
Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit fd1892ef06)
2023-12-01 11:20:12 -08:00
Tianling Shen
78305d7bcf xray-core: Update to 1.8.6
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c0704be027)
2023-11-30 13:07:04 +08:00
Darryl Sokoloski
eee27741d2 netifyd: Updated to v4.4.7
Release notes: https://gitlab.com/netify.ai/public/netify-agent/-/releases/v4.4.7

Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
(cherry picked from commit 41c9155a80)
2023-11-30 13:04:17 +08:00
Oskari Rauta
03d07dc77d external-protocol: rename and update cni-protocol
cni-protocol can be used for both cni and netavark
and also for many other things, such as vpn's that
lack customized protocol supports for openwrt as a
general externally managed protocol, so it was due
to rename it.

I also added one extra option, search domain, which
is optional and updated scripts retrieving ip address
and routing information.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit a0d7e40494)
2023-11-30 00:04:12 +08:00
Tianling Shen
dba4aa8e0b v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e766690d13)
2023-11-30 00:04:05 +08:00
Tianling Shen
133b0774d1 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 03a69f84bc)
2023-11-30 00:04:02 +08:00
Tianling Shen
5645e18801 v2ray-core: Update to 5.12.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 11913a72cc)
2023-11-30 00:03:45 +08:00
Tianling Shen
a537029596 yq: Update to 4.40.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5fc95dce02)
2023-11-30 00:03:42 +08:00
Tianling Shen
c2ba6ea6f7 dnsproxy: Update to 0.59.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a678f58912)
2023-11-30 00:03:39 +08:00
Stan Grishin
8dffb5132a ngtcp2: update to 1.1.0
* Changelog: https://github.com/ngtcp2/ngtcp2/releases/tag/v1.1.0

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 05cf7cff10)
2023-11-27 17:47:06 +00:00
Stan Grishin
dc358fb4e1 nghttp3: update to 1.1.0
* Changelog: https://github.com/ngtcp2/nghttp3/releases/tag/v1.1.0

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 353bdb9cf0)
2023-11-27 17:44:54 +00:00
Hannu Nyman
df580180d0 irqbalance: update to 1.9.3
Update irqbalance to version 1.9.3.
* remove upstreamed patch.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit b8298a9b91)
2023-11-26 21:22:08 +02:00
Hentioe Cl
023d6831a7 irqbalance: add banned_cpulist option
Configure CPUs to ignore with `IRQBALANCE_BANNED_CPULIST` environment variable

Signed-off-by: Hentioe Cl <meow.i5.br@gmail.com>
[added PKG_RELEASE bump]
(cherry picked from commit e1ff9619a3)
2023-11-26 21:21:52 +02:00
Stan Grishin
4a5ca122e4 Merge pull request #22748 from stangri/openwrt-23.05-https-dns-proxy
[23.05] https-dns-proxy: fix unintentional call of service_stopped in boot()
2023-11-25 17:12:44 -07:00
Stan Grishin
b79fda0484 Merge pull request #22754 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: bugfix: call to missing function
2023-11-25 17:12:12 -07:00
Stan Grishin
61ae8719fb adblock-fast: bugfix: call to missing function
* fix call to is_number to is_integer
* improve boot()

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit ffb396bca9)
2023-11-25 20:55:44 +00:00
Max Berger
4f99ac6454 ddns-scripts: Fix Route53 provider
This fixes the Invalid Resource Record: FATAL problem: ARRDATAIllegalIPv4Address error message described in https://forum.openwrt.org/t/route53v1-script-error/160068

Maintainer: @chris5560, @maxberger, @dibdot
Tested: Checked on local system
Signed-off-by: Max Berger <max@berger.name>
(cherry picked from commit 86a620f644)
2023-11-25 16:36:40 +01:00
Igor Baidasov
f7d0beb26e ddns-scripts: add new DDNS provider ipnodns.ru
Signed-off-by: Igor Baidasov <igorbay@bk.ru>
(cherry picked from commit a80fec4850)
2023-11-25 16:36:17 +01:00
Dirk Brenken
bf76672ac4 banip: update 0.9.2-4
* fix: accidently upload a faulty urlhaus feed regex in the former commit

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e7979d6b04)
2023-11-25 08:59:19 +01:00
Dirk Brenken
e010d9d9fc banip: update 0.9.2-3
* fix the urlhaus regex
* fix a possible init race condition

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1557ddfe83)
2023-11-25 08:25:54 +01:00
Stan Grishin
01fca9e8b6 https-dns-proxy: fix unintentional call of service_stopped in boot()
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 2e9f6c4446)
2023-11-24 16:13:56 +00:00
Van Waholtz
183f008a44 sing-box: update to 1.6.6
Changes: https://github.com/SagerNet/sing-box/compare/v1.6.0...v1.6.6

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
2023-11-24 20:40:42 +08:00
Tianling Shen
a241e53ace rust: Update to 1.74.0
- Bumped libc to 0.2.147 to align deps.
- Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 11279e54ed)
2023-11-24 20:40:07 +08:00
Stan Grishin
78bf991297 Merge pull request #22741 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: bufgix: fix boot()
2023-11-24 00:13:40 -07:00
Stan Grishin
77533669d8 Merge pull request #22739 from stangri/openwrt-23.05-https-dns-proxy
[23.05] https-dns-proxy: bugfix: prevent erros from boot()
2023-11-24 00:13:28 -07:00
Stan Grishin
709456d062 adblock-fast: bufgix: fix boot()
* fix boot()
* reintroduce procd_boot_delay variable to control delay of service
  start on boot
* introduce `check_lists` command to check enabled block-lists for
  domain(s)
* use config_get_bool instead of config_get for boolean options

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 96ad0ab6fd)
2023-11-23 22:55:09 +00:00
Stan Grishin
22a1e22b23 https-dns-proxy: bugfix: prevent erros from boot()
* fixes https://github.com/openwrt/packages/issues/22674
* rename resolver_health_check to is_resolver_running for readability
* reorder functions in the init file by name

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit f519b68401)
2023-11-23 22:41:21 +00:00
Christian Lachner
c4315fc5e8 haproxy: update to v2.8.4
- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2023-11-22 12:25:44 +08:00
Moritz Warning
4e152bc411 dhtd: update to 0.2.4
* add option to execute a script for each result

Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit 0f3a2070dc)
2023-11-22 12:25:30 +08:00
Kevin White
f8918644cf acme-acmesh: Update to 3.0.7
Signed-off-by: Kevin White <kwhite@kevbo.org>
2023-11-20 23:40:39 +01:00
Tianling Shen
0bcd6bbc80 dnsproxy: Update to 0.59.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1ce0e4c14b)
2023-11-19 14:41:08 +08:00
Zephyr Lykos
f8cd88d0d1 tailscale: Update to 1.54.0
Signed-off-by: Zephyr Lykos <git@mochaa.ws>
(cherry picked from commit facf954779)
2023-11-19 14:40:27 +08:00
Zephyr Lykos
01bfe4f6b7 tailscale: Update to 1.52.1
Signed-off-by: Zephyr Lykos <git@mochaa.ws>
(cherry picked from commit 7e9ed3b117)
2023-11-19 14:40:22 +08:00
Zephyr Lykos
906e4703f9 tailscale: Update to 1.50.1
https://github.com/tailscale/tailscale/releases/tag/v1.50.1

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
(cherry picked from commit 5cd966ca4f)
2023-11-19 14:40:18 +08:00
Oskari Rauta
625efd9671 gummiboot: release bump
Changes:
 - fixes conflicts with EFI headers mentioned in issue #22433

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 3393600453)
2023-11-19 14:40:01 +08:00
Oskari Rauta
f9fa735ed7 netbird: update to version 0.24.2
Release notes: https://github.com/netbirdio/netbird/releases/tag/v0.24.2

Also fixes issue of not being able to build with musl (>1.2.4)

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 7b3d033ab6)
2023-11-19 14:39:50 +08:00
Oskari Rauta
481902f4e2 netbird: update to 0.23.9
Changelog:
 - Add Pagination for IdP Users Fetch by @bcmmbaga in #1210
 - Rework peer connection status based on the update channel existence by @surik in #1213
 - Fix nil pointer exception in group delete by @pappz in #1211
 - Fix/key backup in config script by @pappz in #1206

Full changelog: https://github.com/netbirdio/netbird/compare/v0.23.8...v0.23.9

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 53dc7146f4)
2023-11-19 14:39:45 +08:00
Oskari Rauta
91238177fa netbird: update to 0.23.6
A lot of changes since previous packaged openwrt version of netbird,
changes available at: https://github.com/netbirdio/netbird/releases

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 1efe76cee4)
2023-11-19 14:39:41 +08:00
Moritz Warning
8d5ab4ca0e dhtd: update to 0.2.1
Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit 0e863b3f1f)
2023-11-19 13:30:02 +08:00
Moritz Warning
5ec47c5f14 dhtd: new package
Co-authored-by: Tianling Shen <cnsztl@gmail.com>
Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit 6dc262aa41)
2023-11-19 13:30:02 +08:00
S. Brusch
cad16d24fd crowdsec: new upstream release version 1.5.5
Update crowdsec to latest upstream release version 1.5.5

Signed-off-by: S. Brusch <ne20002@gmx.ch>

Maintainer: Kerma Gérald <gandalf@gk2.net>
Package tested. not able to test run due to limited space (package is big)

Description: update to latest version of upstream
(cherry picked from commit 6ff496d113)
2023-11-19 13:29:42 +08:00
Tianling Shen
7fd3364f02 Merge pull request #22670 from jefferyto/freeradius3-fix-pcre-openwrt-23.05
[openwrt-23.05] freeradius3: Fix build when pcre is present
2023-11-17 11:59:01 +08:00
Jeffery To
021ebcd0be Merge pull request #22668 from commodo/pymysql_sha256_23_05
[23.05] pymysql: add meta-package for sha256 support
2023-11-16 15:44:37 +08:00
Eneas U de Queiroz
f9b6c2c5de pymysql: add meta-package for sha256 support
Replace the PYTHON3_PYMYSQL_SHA_PASSWORD_SUPPORT option, which is
causing circular dependencies, with a meta-package that installs both
python3-pymysql and python3-cryptography.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 79b173a0c5)
2023-11-16 08:44:13 +02:00
Jeffery To
5453ca57c7 freeradius3: Fix build when pcre is present
If pcre is built before freeradius, then freeradius' configure will
detect pcre and freeradius will be built with pcre functionality
enabled. This causes a "missing dependencies" error at the end of
package build.

This passes --without-pcre to configure to disable this autodetection.

This also removes the dependency on libpcre2 as freeradius v3 does not
have support for pcre2.

Fixes: 19ec30255f ("freeradius3: switch to pcre2")
Fixes: https://github.com/openwrt/packages/issues/22574

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 92aadf7e4a)
2023-11-16 12:53:41 +08:00
Jeffery To
413260559e golang: Update to 1.21.4
Includes fixes for CVE-2023-45283 and CVE-2023-45284 (path/filepath:
insecure parsing of Windows paths).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0ebc715981)
2023-11-16 02:22:42 +08:00
Stan Grishin
8e3a182464 Merge pull request #22656 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: bugfix: ensure downloaded block-lists end with newline
2023-11-13 14:44:38 -07:00
Stan Grishin
b2e8a5bdd2 adblock-fast: bugfix: ensure downloaded block-lists end with newline
* ensure downloaded block-lists end with newline
* turn free/total RAM checks into functions calls

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 3787b41355)
2023-11-13 10:11:14 +00:00
Philip Prindeville
9671ba6eb0 Merge pull request #22547 from wigyori/openwrt-23.05-riscv
[23.05] perl: add support for riscv64
2023-11-12 11:21:04 -07:00
Stan Grishin
bc614e0136 Merge pull request #22620 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: update to 1.0.1-1
2023-11-10 12:48:32 -07:00
Dirk Brenken
11252ef643 banip: update 0.9.2-2
* support backup/restore for remote allowlists
* report the used log variant in status message

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 2411bcffaf)
2023-11-10 19:05:46 +01:00
Dirk Brenken
4c197c1a2d banip: release 0.9.2-1
* the log file monitor now supports standard log files used by other log daemons like syslog-ng
  Set 'ban_logreadfile' accordingly, by default it points to /var/log/messages
* removed logd dependency, closes #21932

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c4e8140740)
2023-11-10 19:05:32 +01:00
Nikos Mavrogiannopoulos
8cf81bccd5 tang: set the right permissions to keys
Resolves: #22632

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2023-11-10 10:39:05 +01:00
Tianling Shen
660c30cc27 v2raya: Update to 2.2.4.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit eabb6b8a74)
2023-11-10 12:50:20 +08:00
Tianling Shen
98c281532c v2ray-core: Update to 5.11.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 56e29ed7da)
2023-11-10 12:49:26 +08:00
Stan Grishin
4df5572bbd adblock-fast: update to 1.0.1-1
* update Makefile copyright info
* organize functions shared between the init script, uci-defaults and
  luci app in alphabetical order
* update error, warning and status messaging
* use single quotes instead double quotes for static text labels
* better warning for missing recommended packages
* rename dns function to resolver to better reflect its purpose
* improve resolver cleanup code
* move _resolver_config function inside resolver function to improve code readlibity
* rename _process_file_url to process_file_url_wrapper to better reflect its purpose
* add preflight check for available RAM vs total size of block lists
* move _config_add_url_size function inside adb_sizes function to improve code readlibity
* remove uci validation from status_service function to improve performance
* source init script from uci-defaults to include shared functions

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 11df396a18)
2023-11-08 09:59:47 +00:00
Michael Heimpold
4a21e9e72d Merge pull request #22611 from mhei/23.05-php8-update-to-8.2.12
[23.05] php8: update to 8.2.12
2023-11-08 07:38:31 +01:00
Michael Heimpold
6439078a93 php8: update to 8.2.12
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 8d6a63df8a)
2023-11-06 06:49:33 +01:00
Michael Heimpold
b2cdb8f45c php8: fix linking on riscv64 platform (again)
The initial fix was done in a2e76e497.
Later we could revert it with 5779ae4c5 since a global fix
in gcc was deployed.

But now, PHP itself applied a workaround/fix in 8.2.8,
so that we now require the initial fix again.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 43b10ad9c1)
2023-11-06 06:49:33 +01:00
S. Brusch
7519f1ff14 crowdsec-firewall-bouncer: add ujail
* added ujail for crowdsec-firewall-bouncer
* set nice to reduce priority for process

Signed-off-by: S. Brusch <ne20002@gmx.ch>

Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: mediatek/filogic, BPI-R3, Openwrt 23.05.0

(cherry picked from commit a8df73ce72)
2023-11-06 09:57:49 +08:00
Zoltan HERPAI
d42ced507a perl: add support for riscv64
Required by sifiveu and upcoming riscv targets.

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
(cherry picked from commit cf59047d3c)
2023-11-06 00:21:08 +01:00
Josef Schlehofer
55aef54b75 nmap: backport fix to be able to compile it with OpenSSL 1.1
The latest nmap version 7.9.3 currently fails to compile with OpenSSL 1.1 [1],
it required to backport upstream patch to fix the compilation. [2]

[1] https://github.com/nmap/nmap/issues/2516
[2] d6bea8dcde

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2c87004346)
2023-11-05 16:40:45 +01:00
Jonas Jelonek
ea020233cb iperf3-mt: new package
This adds a multithreaded variant of iperf3 as a package. This variant
is still experimental, developed in the mt branch of the iperf
repository and expected to be merged when it is considered stable.

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
(cherry picked from commit f369a2aaa9)
2023-11-05 16:40:23 +01:00
Tianling Shen
dd0a3db429 Merge pull request #22597 from muink/dnsproxy-23.05
[23.05] dnsproxy: add more options
2023-11-05 16:30:48 +08:00
Anya Lin
9d611efed9 dnsproxy: new features
1. Add new options:
  --http3    Enable HTTP/3 support (H3 first)
  --timeout  Timeout for outbound DNS queries to remote upstream servers in a human-readable form (default: 10s)

2. Allows listen on multiple interfaces and ports

Signed-off-by: Anya Lin <hukk1996@gmail.com>
(cherry picked from commit 47b4ebc5cb)
2023-11-05 14:59:47 +08:00
Christian Marangi
542e8dae9e aircrack-ng: backport patch and move package to pcre2
Backport patch merged upstream for PCRE2 support and move package to
pcre2.

Also add an additional patch pending to fix linking both pcre and pcre2
if autotools detect both library. (aircrack-ng prefer pcre2 in presence
of both)

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit cb1f7c7ee4)
2023-11-05 07:56:34 +01:00
Christian Marangi
3754fbdd38 aircrack-ng: bump to release 1.7
Bump aircrack-ng to release 1.7

Changelog from [1]

Airdecap-ng: Endianness fixes
Airdecap-ng: Output PCAP as little endian
Airodump-ng: Fixed blank encryption field when APs have TKIP (and/or CCMP) with WPA2
Airodump-ng: Updated encryption filter (-t/--encrypt) for WPA3 and OWE
Airodump-ng: Fixed out-of-order timestamp captures
Airodump-ng: Ignore NULL PMKID
Airodump-ng: Fixed dropping management frames with zeroed timestamp
Airodump-ng: Fixed sorting where sometimes it started with a different field
Airodump-ng: Allow setting colors only in AP selection mode
Airodump-ng: Fix crash on 4K Linux console
Airodump-ng: Fixed issue where existing clients not linked to an AP become hidden when hitting 'o'
Airodump-ng: Allow use of WiFi 6E 6GHz frequencies
Airodump-ng: Look for oui.txt in /usr/share/hwdata
Airgraph-ng: Fixed graphviz package conflict
Airgraph-ng: Fixed downloading OUI with python3
Airgraph-ng: Ensure support/ directory is created when installing
Aircrack-ng: Fixed static compilation
Aircrack-ng: Fix handshake replay counter logic
Aircrack-ng: Handle timeout when parsing EAPOL
Aircrack-ng: Fixed WEP display
Aircrack-ng: Fixed spurious EXIT messages
Aircrack-ng: Improved handshake selection by fixing EAPOL timing and clearing state
Aircrack-ng: Ignore NULL PMKID
Aircrack-ng: Added Apple M1 detection
Aireplay-ng: In test mode, detect tampering of sequence number by firmware/driver
Aireplay-ng: Fixed incorrectly rewritten loops affecting fragmentation attack, and in some cases, SKA fake auth
Aireplay-ng: Fixed a bunch of instances where packets had their duration updated instead of the sequence number
Airmon-ng: Fix avahi killing
Airmon-ng: rewrite service stopping entirely
Airmon-ng: Codestyle fixes and code cleanup
Airmon-ng: Added a few Raspberry Pi hardware revisions
Airmon-ng: Fixes for 8812au driver
Airmon-ng: Fix iwlwifi firmware formatting
Airmon-ng: Remove broken KVM detection
Airmon-ng: Show regdomain in verbose mode
Airmon-ng: Updated Raspberry Pi hardware revisions
Airmon-ng: Document frequency usage
Airmon-ng: Add a sleep to help predictable names due to udev sometimes renaming interface
Airmon-ng: Added warning for broken radiotap headers in kernel 5.15 to 5.15.4
Airmon-ng: shellcheck fixes
Airmon-ng: support systemctl as some systems don't support 'service' anymore
Airmon-ng: Fixes for pciutils 3.8, backward compatible
Airbase-ng: use enum for frame type/subtype
Airbase-ng: remove a few IE in association responses
Besside-ng: Support and detect all channels in 5GHz in Auto-Channel mode
OSdep: Search additional IE for channel information
OSdep: Android macro fixes
Patches: Add missing patches that were on https://patches.aircrack-ng.org but not in repo
Patches: Updated freeradius-wpe patch for v3.2.0
Patches: Updated hostapd-wpe patch for v2.10
Patches: Added docker containers to test WPE patches
Autotools: make dist now creates VERSION file
Autotools: Added maintainer mode
Autotools: Initial support for Link Time Optimization (LTO) builds
Integration tests: Added a new test, and improved some existing ones
Airgraph-ng: switch airodump-join to Python 3
Manpages: Fixes (typos, tools name, etc.) and improvements
README: Updated dependencies and their installation on various distros in README.md and INSTALLING
README: Fixed typos and spelling in README.md and INSTALLING
Packages: Packages on PackageCloud now support any distro using .deb and .rpm, however, it requires reinstalling repo (BREAKING CHANGE)
General: Fix compilation with LibreSSL 3.5
General: Fix issues reported by Infer
General: Updated buildbots
General: Add Linux uclibc support
General: Compilation fixes on macOS with the Apple M1 CPU
General: Removed TravisCI and AppVeyor
General: Use Github Actions for CI (Linux, Win, macOS, code style, and PVS-Studio)
General: Added vscode devcontainer and documentation
General: Fix warnings from PVS-Studio and build with pedantic (See PR2174)
General: Shell script fixes thanks to shellcheck
General: Fixes for GCC 10 and 11
General: Fixed cross-compilation
General: Code refactoring, deduplication, cleanup, and misc code improvements
General: Coverity Scan fixes, which includes memory leaks, race conditions, division by 0, and other issues
General: PVS Studio improvements,fixes and updates
General: Code formatting/style fixes
General: Various fixes and improvements (code, CI, integration tests, coverity)
General: Update bug reporting template and update the process

[1] https://aircrack-ng.blogspot.com/2022/05/aircrack-ng-17.html
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 41922f33b5)
2023-11-05 07:56:34 +01:00
Philip Prindeville
0d50af11a1 Merge pull request #22578 from lowjoel/backport-strongswan-5.9.11
strongswan: Update to 5.9.11
2023-11-04 12:28:40 -06:00
Jeffery To
66774c3b30 pyodbc: Fix segmentation fault
4.0.36 included a change to decimal parsing[1] that requires the decimal
module. Trying to load the pyodbc module without python3-decimal
installed would lead to a segmentation fault.

This adds python3-decimal as a dependency.

This also adds python3-uuid as a dependency as the module can accept and
return uuid objects[2].

[1]: 6b107a2bca
[2]: 2ad7a9ced7

Fixes: f02f3ee8c7 ("pyodbc: Update to 4.0.39")

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 668a0f9dd8)
2023-11-02 11:23:38 +01:00
Oskari Rauta
9068bc76cf speedtestcpp: update to 1.20.3
changes:
 - fixes a bug where science notations (exponentials) are displayed during tests during high speed bursts

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 58d8f92721)
2023-11-02 01:57:55 +01:00
Koen Vandeputte
3b240b06f4 wavemon: bump to 9.5.0
The current version is broken, as it refuses to work properly
with the current nl80211 state.
Bumping this fixes full wavemon support

Changelog: 9.5.0:
https://github.com/uoaerg/wavemon/releases/tag/v0.9.5

Changelog 9.4.0:
https://github.com/uoaerg/wavemon/releases/tag/v0.9.4

Note that since 0.9.4, wavemon has a dependency on libnl-cli

Signed-off-by: Koen Vandeputte <koen.vandeputte@citymesh.com>
(cherry picked from commit d10b26525c)
2023-11-02 01:57:34 +01:00
Christian Marangi
4ae7384089 libndpi: bump to release 4.8
Bump to release 4.8 to make it easier to backport PCRE2 support patch.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 97a7165e72)
2023-11-02 01:57:24 +01:00
Christian Marangi
a1f665fc9c haproxy: move to PCRE2
Move to PCRE2 as PCRE is EOL and won't receive any more security update
anymore.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit f25f4d395d)
2023-11-02 01:57:15 +01:00
Philip Prindeville
5a27d7d8be strongswan: Update to 5.9.11
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 08158d2718)
Signed-off-by: Joel Low <joel@joelsplace.sg>
2023-11-02 07:52:59 +08:00
Jeffery To
f218d96e14 python3: Fix building C extensions with setuptools
setuptools provides a local copy of distutils and when building a C
extension, this distutils will add the target LIBDIR (/usr/lib) to the
list of library paths.

If the build system has a libpython3.11.so in /usr/lib, then the linker
will try to link to this shared library and fail.

This adapts 008-distutils-use-python-sysroot.patch for host setuptools
to add the correct library directory.

Fixes: https://github.com/openwrt/packages/issues/22330

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 624fb95561)
2023-11-02 00:40:44 +08:00
Tianling Shen
9668b0dc21 Merge pull request #22559 from jefferyto/rust-fixes-openwrt-23.05
[openwrt-23.05] rust: Fix compile error if build dir and DL_DIR on separate filesystems, compile error for mipsel_24kc+24kf
2023-11-02 00:26:03 +08:00
Tianling Shen
c0e290f2ce Merge pull request #22567 from douglarek/openwrt-23.05
[openwrt-23.05] sing-box: update to v1.6.0
2023-11-02 00:25:37 +08:00
Anton Antonov
4aaa4844fb efibootmgr: Add armsr target support
Signed-off-by: Anton Antonov <Anton.Antonov@arm.com>

(cherry picked from commit 3be58aa1d3)
2023-11-01 12:11:10 +08:00
Anton Antonov
41f5c318d7 efivar: Add armsr target support
Backport up-stream patch:
ca48d3964d

Signed-off-by: Anton Antonov <Anton.Antonov@arm.com>

(cherry picked from commit c618100c82)
2023-11-01 12:11:10 +08:00
Anton Antonov
78b009fbd2 dmidecode: Add armsr target support
Signed-off-by: Anton Antonov <Anton.Antonov@arm.com>
(cherry picked from commit ee47bf4a52)
2023-11-01 12:11:10 +08:00
Moritz Warning
18061b655c zerotier: fix typo
Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit 9e38e78000)
2023-10-31 23:19:10 +01:00
Christian Marangi
6ab71e2894 aircrack-ng: fix wrong inclusion of libbsd if detected
Currently aircrack-ng try to link with libbsd if it does detect the
library in staging_dir. This is the case with buildbot where every
package is selected and compiled.

Fix this by adding a pending patch that permits to disable libbsd
inclusion even if detected and set the related config flag.

aircrack-ng use 2 function of libbsd and it's not worth to include the
entire library for 2 simple function for string manipulation.

Also add an additional patch that permits to use musl or glibc version
of these string functions.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit bd21652b79)
2023-10-31 23:18:39 +01:00
Glenn Strauss
96e1b50f1f lighttpd: update to lighttpd 1.4.73 release hash
* update to lighttpd 1.4.73 release hash
* update maintainer

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit f3e26bef52)
2023-10-31 23:17:59 +01:00
Leo Douglas
ec22559030 sing-box: update to v1.6.0
see changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.6.0

Signed-off-by: Leo Douglas <douglarek@gmail.com>
(cherry picked from commit 84c431702e)
2023-10-31 23:07:35 +08:00
Rui Salvaterra
be1804da83 tor: update to 0.4.8.7 stable
Bugfix release, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.7/ChangeLog

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 5cb304e2b3)
2023-10-31 13:48:29 +01:00
Christian Marangi
c214bc1111 zabbix: move to PCRE2 library
Move to PCRE2 library as PCRE is not EOL and won't receive any security
updates anymore.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 3dfb00c6c6)
2023-10-31 13:48:08 +01:00
Christian Marangi
876f3fa5b5 postfix: move to PCRE2 library
Move to PCRE2 library as PCRE is EOL and won't receive any security
updates anymore.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit f585559690)
2023-10-31 13:47:50 +01:00
Christian Marangi
f2fb6c561e postfix: bump to 3.8.2 release
Bump postfix to 3.8.2 release.

Refresh patches and drop patch 502-detect-glibc.patch as it got merged
upstream.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 4b7d365b86)
2023-10-31 13:47:42 +01:00
Jan Hák
08670d65ca knot: patch enabling PKCS11 related code only if PKCS11 is available
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 3efee178f2)
2023-10-31 13:47:20 +01:00
Jan Hák
89f92abc32 knot: update to version 3.3.2
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit fbfa63a03b)
2023-10-31 13:47:14 +01:00
Christian Marangi
2cc3f40b6f fdm: update to 2.2 release and switch to PCRE2
Update to release 2.2 and switch to PCRE2. New release switched from
PCRE to PCRE2 and is now required.

Drop patch merged upstream and backport 2 additional patch that fix a
user-after-free and a PCRE2 bug.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 13982c13d0)
2023-10-31 13:47:06 +01:00
Christian Marangi
69d10e78eb tvheadend: drop support for PCRE
Drop support for PCRE as it's now EOL and won't receive any security
updates anymore.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 9ea2ec7cd1)
2023-10-31 13:46:54 +01:00
Marius Dinu
8e4d2a7a61 tvheadend: add dependency on gettext (host)
Gettext is a prerequisite to build OpenWrt according to:
https://openwrt.org/docs/guide-developer/toolchain/install-buildsystem
but github automated tests fail without this explicit dependency:

2023-06-19T08:02:45.1940511Z   checking for py module gzip ...                   ok
2023-06-19T08:02:45.1968662Z   checking for /builder/staging_dir/host/bin/pkg-config ...ok
2023-06-19T08:02:45.1998491Z ERROR: no gettext binaries found
2023-06-19T08:02:45.1999746Z   checking for xgettext ...                         fail
2023-06-19T08:02:45.2008403Z make[2]: *** [Makefile:263: /builder/build_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/tvheadend-2023-06-05/.configured_a17fb5ef857664f03cd0ce37cc5ea591] Error 1

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit fb68d07bfa)
2023-10-31 13:46:48 +01:00
Marius Dinu
ba3a2c1987 tvheadend: update to 2023-06-05
Update to git master 2023-06-05 and removed unneeded compatibility patch.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit dedf51702e)
2023-10-31 13:46:43 +01:00
Martin Strobel
ae7e40514f freeradius3: switch to pcre2
use libpcre2 as dependency for freeradius3-common
because PCRE is EOL with no further updates

Compile & run tested on mediatek mt76 ubnt-ui6-lr-v1 with musl

Signed-off-by: Martin Strobel <arctus@crza.de>
(cherry picked from commit 19ec30255f)
2023-10-31 13:46:18 +01:00
Jianhui Zhao
7226eb4faf freeradius3: Update to 3.0.26
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit dda8ba0ca7)
2023-10-31 13:46:12 +01:00
Jeffery To
69db0bd91e rust: Fix compile error for mipsel_24kc+24kf
Currently, rust fails to build for mipsel_24kc+24kf with "opcode not
supported on this processor: mips1 (mips1)" errors when building
libunwind.

Because mipsel_24kc+24kf is hard-float, a certain section of
src/llvm-project/libunwind/src/UnwindRegistersRestore.S is selected to
be compiled; the instructions in this section require MIPS II.

mipsel_24kc+24kf is compiled for MIPS32 Release 2 (MIPS32 is based on
MIPS II), but the C flags used to select this architecture were not
passed to the rust bootstrap (to be passed back to gcc).

This passes the C flags to rust bootstrap to fix this compile error.

This also adds PKG_BUILD_FLAGS:=no-mips16 as attempting to generate
MIPS16 code leads to a different compile error.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 54616e7049)
2023-10-31 12:16:34 +08:00
Jeffery To
ca8eb766aa rust: Fix compile error if build dir and DL_DIR on separate filesystems
The rust bootstrap downloads files into a "tmp" directory then moves the
files into the "cache" directory using std::fs::rename. There are no
issues in the original/unpatched case as "tmp" and "cache" are
subdirectories in the build directory ($(HOST_BUILD_DIR)/build) and so
are nearly guaranteed to be on the same filesystem.

35768bf31e changed where files are
saved/cached (in $(DL_DIR)/rustc). If HOST_BUILD_DIR and DL_DIR are on
separate filesystems, then using std::fs::rename to move the files will
fail.[1]

This updates 0002-rustc-bootstrap-cache.patch to account for this case,
i.e. if std::fs::rename fails, fall back to copying the file then
removing the original.

[1]: https://github.com/openwrt/packages/pull/22457

Fixes: 35768bf31e ("rust: Cache bootstrap downloads to $(DL_DIR)/rustc")

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit f9f1e0220f)
2023-10-31 12:16:04 +08:00
Stan Grishin
e85363a5a5 Merge pull request #22543 from stangri/openwrt-23.05-ngtcp2
[23.05] ngtcp2: update to 1.0.1
2023-10-30 14:28:14 -06:00
Dirk Brenken
f304110d0d travelmate: release 2.1.1-2
* more small fixes & enhancements
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit efe0cbcb75)
2023-10-30 19:38:09 +01:00
Dirk Brenken
6db87db0a6 travelmate: release 2.1.1
* various vpn/wireguard improvements & fixes
* improved compatibility with new netifd
* added open STA improvements by @brianjmurrell
* closes #22227 #22288 #22357

Signed-off-by: Dirk Brenken dev@brenken.org
Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 81658c5823)
2023-10-30 19:37:47 +01:00
Stan Grishin
2ff4bbaa59 ngtcp2: update to 1.0.1
* https://github.com/ngtcp2/ngtcp2/compare/v1.0.0...v1.0.1

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 9d194e8348)
2023-10-29 19:34:59 +00:00
Tianling Shen
235df4a225 dnsproxy: Update to 0.56.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ad8f2b5e8e)
2023-10-28 12:34:50 +08:00
Tianling Shen
9af082dbc9 rclone: Update to 1.64.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0d6bbc3bdd)
2023-10-28 12:34:43 +08:00
Tianling Shen
c37c2c5e06 rclone: Update to 1.64.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0449b530ba)
2023-10-28 12:34:39 +08:00
Stan Grishin
d93be03475 Merge pull request #22513 from stangri/openwrt-23.05-https-dns-proxy
[23.05] https-dns-proxy: bugfix: crashes on logging from upstream
2023-10-26 16:09:37 -06:00
Stan Grishin
82e2111121 Merge pull request #22510 from stangri/openwrt-23.05-curl
[23.05] curl: prepare for HTTP/3 support
2023-10-26 16:08:08 -06:00
Stan Grishin
8112b92f94 Merge pull request #22509 from stangri/openwrt-23.05-ngtcp2
[23.05] ngtcp2: add new package
2023-10-26 16:08:01 -06:00
Stan Grishin
62e383e995 Merge pull request #22508 from stangri/openwrt-23.05-nghttp3
[23.05] nghttp3: add new package
2023-10-26 16:07:53 -06:00
Stan Grishin
f804ce20d0 https-dns-proxy: bugfix: crashes on logging from upstream
* update to 2023-10-25 upstream version which fixes the crashes on logging on ath79
* remove no longer needed 030-src-logging.c-fix-crash.patch
* update 010-cmakelists-remove-cflags.patch to work with a new version
* update 020-src-options.c-add-version.patch to work with a new version

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 6b92b6c6d2)
2023-10-26 14:44:12 +00:00
Stan Grishin
2f40f153b6 curl: prepare for HTTP/3 support
* these changes along with 2 PRs below and using non-standard
  openssl library allow for building curl with HTTP/3 support
* https://github.com/openwrt/packages/pull/22443
* https://github.com/openwrt/packages/pull/22444

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 6bd2b89d83)
2023-10-26 14:37:07 +00:00
Stan Grishin
101ef86eef ngtcp2: add new package
* add new package to allow building of curl with HTTP/3 support
* switch to using cmake

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit f6e5797640)
2023-10-26 14:36:01 +00:00
Stan Grishin
e9bc3a70d5 nghttp3: add new package
* add new package to allow building of curl with HTTP/3 support
* switch to using cmake

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit b1d4241cdf)
2023-10-26 14:34:35 +00:00
Nick Hainke
273132baaf snowflake: update to 2.7.0
Release Notes:
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/tags/v2.7.0

Proxy churn is removed and because of that also distinctcounter:
6393af6bab

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 2496d74340)
2023-10-25 23:17:12 +02:00
Leo Douglas
b441feedf3 sing-box: update to v1.5.4
changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.5.4

Signed-off-by: Leo Douglas <douglarek@gmail.com>
(cherry picked from commit 4be4a791b5)
2023-10-25 19:33:44 +08:00
Andrew Sim
2dd9b92c16 transmission: update to 4.0.4
Update Transamission to 4.0.4 stable release
Changelog: https://github.com/transmission/transmission/releases/tag/4.0.4

Signed-off-by: Andrew Sim <andrewsimz@gmail.com>
(cherry picked from commit 45170d9b67)
2023-10-25 09:25:48 +02:00
Liangbin Lian
30fdc34b9e transmission: fix depends on libmbedtls
If a firmware build with curl without mbedtls, install transmission from openwrt official repo will fail to start

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit 2311e79218)
2023-10-25 09:25:48 +02:00
Daniel Golle
e458d26dfa exim: update to version 4.96.2
Fixes vulnerabilities:
 - Improper Neutralization of Special Elements (CVE-2023-42117)
 - dnsdb Out-Of-Bounds Read (CVE-2023-42119)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 86ec7b19bc)
2023-10-25 09:25:48 +02:00
Daniel Golle
f4406635ca cryptsetup: update to version 2.6.1
Cryptsetup 2.6.1 Release Notes
==============================
Stable bug-fix release with minor extensions.

All users of cryptsetup 2.6.0 should upgrade to this version.

Changes since version 2.6.0
~~~~~~~~~~~~~~~~~~~~~~~~~~~

* bitlk: Fixes for BitLocker-compatible on-disk metadata parser
  (found by new cryptsetup OSS-Fuzz fuzzers).
  - Fix a possible memory leak if the metadata contains more than
    one description field.
  - Harden parsing of metadata entries for key and description entries.
  - Fix broken metadata parsing that can cause a crash or out of memory.

* Fix possible iteration overflow in OpenSSL2 PBKDF2 crypto backend.
  OpenSSL2 uses a signed integer for PBKDF2 iteration count.
  As cryptsetup uses an unsigned value, this can lead to overflow and
  a decrease in the actual iteration count.
  This situation can happen only if the user specifies
  --pbkdf-force-iterations option.
  OpenSSL3 (and other supported crypto backends) are not affected.

* Fix compilation for new ISO C standards (gcc with -std=c11 and higher).

* fvault2: Fix compilation with very old uuid.h.

* verity: Fix possible hash offset setting overflow.

* bitlk: Fix use of startup BEK key on big-endian platforms.

* Fix compilation with latest musl library.
  Recent musl no longer implements lseek64() in some configurations.
  Use lseek() as 64-bit offset is mandatory for cryptsetup.

* Do not initiate encryption (reencryption command) when the header and
  data devices are the same.
  If data device reduction is not requsted, this leads to data corruption
  since LUKS metadata was written over the data device.

* Fix possible memory leak if crypt_load() fails.

* Always use passphrases with a minimal 8 chars length for benchmarking.
  Some enterprise distributions decided to set an unconditional check
  for PBKDF2 password length when running in FIPS mode.
  This questionable change led to unexpected failures during LUKS format
  and keyslot operations, where short passwords were used for
  benchmarking PBKDF2 speed.
  PBKDF2 benchmark calculations should not be affected by this change.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 5c21b26a93)
2023-10-25 09:25:48 +02:00
Daniel Golle
a5aa83ea20 lvm2: update LVM2 to 2.03.22 and DM to 1.02.196
Remove downstream patch 004-missing-includes.patch which was merged
upstream in version 2.03.19

LVM2 changelog since version 2.03.17
version 2.03.22 - 02nd August 2023
==================================
  Fix pv_major/pv_minor report field types so they are integers, not strings.
  Add lvmdevices --delnotfound to delete entries for missing devices.
  Always use cachepool name for metadata backup LV for lvconvert --repair.
  Make metadata backup LVs read-only after pool's lvconvert --repair.
  Improve VDO and Thin support with lvmlockd.
  Handle 'lvextend --usepolicies' for pools for all activation variants.
  Fix memleak in vgchange autoactivation setup.
  Update py-compile building script.
  Support conversion from thick to fully provisioned thin LV.
  Cache/Thin-pool can use error and zero volumes for testing.
  Individual thin volume can be cached, but cannot take snapshot.
  Better internal support for handling error and zero target (for testing).
  Resize COW above trimmed maximal size is does not return error.
  Support parsing of vdo geometry format version 4.
  Add lvm.conf thin_restore and cache_restore settings.
  Handle multiple mounts while resizing volume with a FS.
  Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
  Enhance lvm_import_vdo and use snapshot when converting VDO volume.
  Fix parsing of VDO metadata.
  Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
  Allow snapshots of raid+integrity LV.
  Fix multisegment RAID1 allocator to prevent using single disk for more legs.

version 2.03.21 - 21st April 2023
=================================
  Fix activation of vdo-pool for with 0 length headers (converted pools).
  Avoid printing internal init messages when creation integration devices.
  Allow (write)cache over raid+integrity LV.

version 2.03.20 - 21st March 2023
=================================
  Fix segfault if using -S|--select with log/report_command_log=1 setting.
  Configure now fails when requested lvmlockd dependencies are missing.
  Add some configure Gentoo enhancements for static builds.

version 2.03.19 - 21st February 2023
====================================
  Configure supports --with-systemd-run executed from udev rules.
  Enhancement for build with MuslC systemd and non-bash system shells (dash).
  Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
  Ensure udev is processing origin LV before its thick snapshots LVs.
  Fix and improve runtime memory size detection for VDO volumes.

version 2.03.18 - 22nd December 2022
====================================
  Fix issues reported by coverity scan.
  Fix warning for thin pool overprovisioning on lvextend (2.03.17).
  Add support for writecache metadata_only and pause_writeback settings.
  Fix missing error messages in lvmdbusd.

DM changelog since version 1.02.187:

Version 1.02.196 - 02nd August 2023
===================================

Version 1.02.195 - 21st April 2023
==================================

Version 1.02.193 - 21st March 2023
==================================

Version 1.02.191 - 21st February 2023
=====================================
  Improve parallel creation of /dev/mapper/control device node.
  Import previous ID_FS_* udev records in 13-dm-disk.rules for suspended DM dev.
  Remove NAME="mapper/control" rule from 10-dm.rules to avoid udev warnings.

Version 1.02.189 - 22nd December 2022
=====================================
  Improve 'dmsetup create' without given table line with new kernels.

(Version 1.02.188 is missing)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 4db53132ba)
2023-10-25 09:25:48 +02:00
Stan Grishin
e7f8bb0773 Merge pull request #22491 from stangri/openwrt-23.05-https-dns-proxy
[23.05] https-dns-proxy: bugfix: prevent crashes on IPv6 systems
2023-10-23 22:56:14 -06:00
Stan Grishin
8ef1ea8824 https-dns-proxy: bugfix: prevent crashes on IPv6 systems
* update service triggers so that procd_add_raw_trigger is only
  executed on boot and not on other service actions
* remove outdated iface hotplug script

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 5dd08fe23f)
2023-10-24 02:17:06 +00:00
ValdikSS ValdikSS
8ca88fc777 tor: fix daemon reloading
procd requires init script name, not the path to executable

Signed-off-by: ValdikSS ValdikSS <iam@valdikss.org.ru>
(cherry picked from commit af58942738)
2023-10-23 10:02:15 +02:00
Rui Salvaterra
29837902dc tor: update to 0.4.8.4 stable
First release of the 0.4.8.x series, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.4/ChangeLog

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 1b2c1ddbb2)
2023-10-23 10:02:09 +02:00
Alexandru Ardelean
1350b323b5 stress-ng: backport immintrin.h header detection for GCC 13
Backport patch from:
   cd84c46ce7

With GCC 12 there is no issue.
With GCC 13, there is a compilation issue on x86_64.
Fixes https://github.com/openwrt/packages/issues/22373

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 98bcb56eb3)
2023-10-23 10:01:20 +02:00
Alexandru Ardelean
6d52a24760 stress-ng: bump to version 0.17.00
Refreshed 001-disable-extra-stressors.patch
Dropped 002-disable-compiler-test.patch
  - no longer needed since commit a24c7f2048

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit f4df9c1786)
2023-10-23 10:01:15 +02:00
Alexandru Ardelean
2b6d8fff19 stress-ng: bump to version 0.15.10
Merged patches into a single one.
Disabling libmpfr (which got added recently).
To avoid potentially new build failures.

And disabling test-compiler check.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 8168fc84df)
2023-10-23 10:01:11 +02:00
Christian Marangi
94be9cc190 shadowsocks-libev: convert to PCRE2
Convert package to PCRE2 by porting a pending patch from a closed PR.

The PR is old but the code never changed and is simple enough to check
the changes. The patch apply directly with no changes (aside from
commenting out the travis CI file)

The PR was never merged as PCRE2 at times was too new and they were
trying to find a better regex lib.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit db305165c9)
2023-10-23 10:00:06 +02:00
Josef Schlehofer
f14a03638b ooniprobe: remove unused package
This package is not maintained anymore in the OpenWrt packages feed
and since we updated Go to 1.21 version, it is not compiled either.

Let's hope that with removing this package from our feed,
someone will step it and become a maintainer to take care of this package.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5a917a2a1c)
2023-10-23 09:59:58 +02:00
Christian Marangi
a566154dff micropython-lib: move to PCRE2
Add pending patch converting the package to PCRE2.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit d191c3d0c4)
2023-10-23 09:59:50 +02:00
Nick Hainke
9f43291531 conntrack-tools: update to 1.4.8
Release Notes:
https://marc.info/?l=netfilter&m=169598613909790&w=2

Furthermore, switch to "tar.xz".

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit af666be21f)
2023-10-22 16:58:13 +02:00
Stan Grishin
eab5202858 Merge pull request #22465 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: bugfix: allow command
2023-10-21 07:35:50 -06:00
Stan Grishin
2d5990822c adblock-fast: bugfix: allow command
* fix sed to properly purge allowed domains from block-lists
* ensure resolver is restarted on allow command
* reduce pause default/max in attempt to make it work with luci

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 42cc50eec8)
2023-10-21 02:29:27 +00:00
Drew Young
985d0af6eb rust: fix build with glibc, ARM and hard floats
Patch the target triple for Rust with glibc to include hard floating
point support.

The GNU target triple used elsewhere does not include hard float support,
instead `-mfloat-abi=hard` is passed separately. For Rust it must be
included in the target triple. This was already being done for musl,
this commit adds the same patching for glibc.

Without this patch Rust compilation fails with an error like this
(abbreviated to fit the line length):

    ld: error: libstd.so uses VFP register arguments, ... does not
    ld: failed to merge target specific data of file ...

Signed-off-by: Drew Young <dyoung@viridiparente.com>
(cherry picked from commit 3d799c3eee)
2023-10-20 16:30:33 +08:00
Liangbin Lian
e9d12e3799 shairport-sync: fix init script
'name' may contains '%h' or '%v', printf will fail on that

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit 97ec5d2a68)
2023-10-19 18:01:56 -07:00
Christian Marangi
fb0c43164c net-snmp: backport patch fixing memory leak for PCRE2
Backport patch fixing memory leak for PCRE2 present upstream.

Fixes: #22428
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 9f50361691)
2023-10-19 01:46:42 +02:00
Hirokazu MORIKAWA
3658011d9d node: Friday October 13 2023 Security Releases
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
* CVE-2023-44487: nghttp2 Security Release (High) (Depends on shared library provided by OpenWrt)
* CVE-2023-45143: undici Security Release (High)
* CVE-2023-38552: Integrity checks according to policies can be circumvented (Medium)
* CVE-2023-39333: Code injection via WebAssembly export names (Low)
More detailed information on each of the vulnerabilities can be found in October 2023 Security Releases blog post.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 9101a21e53)
2023-10-18 10:34:12 +02:00
Julian Grinblat
f8753b9705 ddns-scripts: add ddns-scripts-utils package
The samples in the repo are useful for configuring cenrtain aspects of
ddns, and their inclusion is hinted at within their source code

Signed-off-by: Julian Grinblat <julian@dotcore.co.il>
(cherry picked from commit 565fda4105)
2023-10-18 09:46:41 +02:00
danielpinto8zz6
c34885d8bc ddns-scripts: desec.io - update url to https
Signed-off-by: Daniel Pinto <danielpinto8zz6@gmail.com>

desec.io ddns update is not working, after testing the endpoint I got a 301, after a bit of search I found out we are
supposed to use https instead of http
more info here: https://talk.desec.io/t/301-from-update-dedyn-io/644/2

bump PKG_RELEASE

(cherry picked from commit f425e37fb0)
2023-10-18 09:46:31 +02:00
Baptiste Fouques
a56540e738 ddns: Prevent clearing of desec.io entries
When using both ipv4 and ipv6 entries on the same host, ddns is clearing A
(or AAAA) record depending on the connection (ipv4 or ipv6).

see https://desec.readthedocs.io/en/latest/dyndns/update-api.html#determine-ip-addresses

Signed-off-by: Baptiste Fouques <bateast@duck.com>
Update comment and bump PKG_RELEASE number.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 1ea13ed8a1)
2023-10-18 09:46:23 +02:00
Stan Grishin
02ad5c30b0 Merge pull request #22424 from stangri/openwrt-23.05-https-dns-proxy 2023-10-17 18:30:43 -06:00
Stan Grishin
8a5dd06720 https-dns-proxy: bugfix: logging crashing instances on ath79
* finally fixes https://github.com/openwrt/packages/issues/19366
* simplify service_triggers
* improve output for dnsmasq restart
* improve grep/sed dependencies
* remove interface hotplug

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 38c026250f)
2023-10-17 09:48:59 +00:00
Peter van Dijk
156c8ab3b8 dnsdist: update to 1.8.2
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit b19f8a822b)
2023-10-16 15:03:03 +02:00
Peter van Dijk
f9b72c115c dnsdist: update to 1.8.1
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit e25bb510de)
2023-10-16 15:02:57 +02:00
Remi Gacogne
d2599b8f2c dnsdist: Move the configuration to Config.in
Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
(cherry picked from commit 2b19da613f)
2023-10-16 15:02:52 +02:00
Remi Gacogne
c0ce509c45 dnsdist: Split in two packages dnsdist and dnsdist-full
`dnsdist-full` has all optional features enabled, but is a big package
in term of both flash and memory footprint.
`dnsdist` only keeps the features that make the most sense
on embeded devices, but can also be customised to match the
user's needs, up to the point where it matches `dnsdist-full`.

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
(cherry picked from commit ca01c1bf59)
2023-10-16 15:02:47 +02:00
Peter van Dijk
bad9399061 h2o: ABI-breaking patch for CVE-2023-44487
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

bump soname

refreh

(cherry picked from commit 5b9239a95b)
2023-10-16 15:01:23 +02:00
Remi Gacogne
cadf429a47 h2o: Build libh2o-evloop without yaml support
The only package using this library, dnsdist, does not require it
so let's save space and PSS memory.

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
(cherry picked from commit 23a9cd519c)
2023-10-16 15:01:21 +02:00
Hirokazu MORIKAWA
d1c12e0827 nghttp2: fix CVE-2023-44487
update to v1.57.0
CVE-2023-44487 : HTTP/2 Rapid Reset

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit afecaa71c2)
2023-10-16 14:58:56 +02:00
Glenn Strauss
e67bba3684 lighttpd: update to lighttpd 1.4.72 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 3e9b2d85f0)
2023-10-16 14:53:06 +02:00
Oskari Rauta
c42f1261f0 zsh: use autoreconf PKG_FIXUP to configure
In preparation to PCRE2 fixup, use autoreconf PKG_FIXUP as a better
configure system instead of configure script. This is needed to reduce
upcoming patch to migrate to PCRE2 library.

To correctly use autoreconf it's needed to declare empty
PKG_REMOVE_FILES.

zsh include custom macro in the default aclocal.m4
When autoreconf PKG_FIXUP is used, if PKG_REMOVE_FILES is not defined,
it's set to remove the file aclocal.m4 by default resulting in problem
with the custom macro AC_PROG_LN.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
[ split to 2 commit, add PKG_REMOVE_FILES, reword commit description ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit a7f837c98b)
2023-10-16 14:52:14 +02:00
Christian Marangi
45498f4b8c zsh: backport PCRE2 patches and move to it
Backport PCRE2 patches from upstream and move package to PCRE2 library
as PCRE is EOL and won't receive any security update anymore.

Patch are backported with minimal change, only the Changelog change is
commented out as it would conflict and makes no sense to adapt for the
purpose of backport patches.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 5b929fde5f)
2023-10-16 14:51:06 +02:00
Jeffery To
b8fe33cd2d golang: Update to 1.21.3
Includes fix for CVE-2023-39325 (net/http, x/net/http2: rapid stream
resets can cause excessive work).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit f151ab8c0e)
2023-10-16 14:51:06 +02:00
Tianling Shen
e1e01d0255 Merge pull request #22350 from miska/samba4-23.05
[23.05] samba4: Update to version 4.18.7
2023-10-16 16:46:25 +08:00
Michal Hrusecky
2fa541608b samba4: Update to version 4.18.8
Mainly security release, fixing CVE-2023-3961, CVE-2023-4091,
CVE-2023-4154, CVE-2023-42669 and CVE-2023-42670. For more details see:
https://www.samba.org/samba/history/samba-4.18.8.html

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit c9c5f62e30)
2023-10-16 09:36:32 +02:00
Tianling Shen
416a1b6cdd Merge pull request #22375 from jefferyto/python-zope-interface-6.1-openwrt-23.05
[openwrt-23.05] python-zope-interface: Update to 6.1, refresh patch
2023-10-16 09:01:32 +08:00
Tianling Shen
1465e81a4b dnsproxy: Update to 0.56.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit da5ac5da83)
2023-10-15 11:49:57 +08:00
Oskari Rauta
54c8035cfc rust: update to 1.73.0
patches refreshed.
changelog at https://github.com/rust-lang/rust/releases/tag/1.73.0

Also added a configuration ardument and patch
from https://gitweb.gentoo.org/repo/gentoo.git/tree/dev-lang/rust/files/1.72.0-bump-libc-deps-to-0.2.146.patch?id=515b5920046117355d88b3494c74da269ce9b30a
to provide support for building rust on musl hosts.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

rust: add support for musl build hosts

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit d3b1b0d34e)
2023-10-15 11:49:19 +08:00
Tianling Shen
cea77ca4c5 Merge pull request #22376 from jefferyto/rust-build-performance-openwrt-23.05
[openwrt-23.05] rust: Improve build performance
2023-10-15 11:48:46 +08:00
Nick Hainke
58ade934e7 kmod: update to 31
Release Notes:
aff617ea87/NEWS (L1)

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit ca057f3e4e)
2023-10-14 14:19:05 +02:00
Nick Hainke
8d06c50d52 snowflake: update to 2.6.1
Release Notes:
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/tags/v2.6.1

Remove upstreamed patches:
- 0001-Bump-minimum-required-version-of-go.patch
- 0002-Update-dependencies.patch

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 9bd39a33b1)
2023-10-14 14:19:05 +02:00
Hirokazu MORIKAWA
c09ba4e6ed node: bump to v18.18.1
Notable Changes

 This release addresses some regressions that appeared in Node.js 18.18.0:

    (Windows) FS can not handle certain characters in file name #48673
    18 and 20 node images give error - Text file busy (after re-build images) nodejs/docker-node#1968
    libuv update in 18.18.0 breaks webpack's thread-loader #49911

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit b2079b87d1)
2023-10-14 13:07:24 +02:00
Oskari Rauta
0e6ceb80fa cni-protocol: update protocol
Changes to protocol file and it's description.
Works better now and restarts firewall automaticly
when tunnel comes available. More informative/guiding
description.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit ff93e4a19d)
2023-10-14 14:33:07 +08:00
Oskari Rauta
7fe0677d0e podman: update to 4.7.1
Bugfixes

 - Fixed a bug involving non-English locales of Windows where machine installs using user-mode networking were rejected due to erroneous version detection (#20209).
 - Fixed a regression in --env-file handling (#19565).
 - Fixed a bug where podman inspect would fail when stat'ing a device failed.

API
 - The network list compat API endpoint is now much faster (#20035).

Openwrt updates: added patch to allow building with musl-1.2.4
Patch source is from gentoo c4c349f11a/app-containers/podman/files/podman-4.5.0-fix-build-with-musl-1.2.4.patch

Issue was discussed by @jefferyto at mattn/go-sqlite3#1177

remarks:
removed musl-1.2.4 patch from commit, since that version of musl
is not available with openwrt-23.05

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit e25d417f1a)
2023-10-14 14:32:57 +08:00
Oskari Rauta
c01ce827d9 aardvark-dns: update to 1.8.0
changes:
 - dependency updates

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 4371aa8f93)
2023-10-14 14:32:47 +08:00
Oskari Rauta
e07515df05 netavark: update to 1.8.0
changelog:
 - iptables: improve error when ip6?tables commands are missing
 - docs: Convert markdown with go-md2man instead of mandown
 - iptables: drop invalid packages
 - bump rust edition to 2021
 - Add ACCEPT rules in firewall for bridge network with internal dns
 - Add vrf support for bridges

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit b788f77db4)
2023-10-14 14:32:31 +08:00
Oskari Rauta
a38348e645 slirp4netns: update to 1.2.2
v1.2.2 changes:
 - Enabled reproducible builds

v1.2.1 changes:
 - sandbox: Add support for escaping resolv.conf symlinks. This fixes usage in WSL environments which symlinks /etc/resolv.conf under a shared location under /mnt.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 8b3bf5bb88)
2023-10-14 14:32:20 +08:00
Oskari Rauta
35f99480cc crun: update to 1.9.2
changelog 1.9.2:
 - cgroup: reset the inherited cpu affinity after moving to cgroup. Old kernels do that automatically, but new kernels remember the affinity that was set before the cgroup move, so we need to reset it in order to honor the cpuset configuration.

changelog 1.9.1:
 - utils: ignore ENOTSUP when chmod a symlink. It fixes a problem on Linux 6.6 that always refuses chmod on a symlink.
 - build: fix build on CentOS 7
 - linux: add new fallback when mount fails with EBUSY, so that there is not an additional tmpfs mount if not needed.
 - utils: improve error message when a directory cannot be created as a component of the path is already existing as a non directory.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit bb3af8acb9)
2023-10-14 14:32:06 +08:00
Oskari Rauta
3fd6e9e057 conmon: update to 2.1.8
Bug fixes:
 - stdio: ignore EIO for terminals
 - ensure console socket buffers are properly sized
 - conmon: drop return after pexit()
 - ctrl: make accept4 failures fatal
 - logging: avoid opening /dev/null for each write
 - oom: restore old OOM score
 - Use default umask 0022

Misc changes:
 - cli: log parsing errors to stderr
 - Changes to build conmon for riscv64
 - Changes to build conmon for ppc64le
 - Fix close_other_fds on FreeBSD

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 3d88d18ee2)
2023-10-14 14:31:43 +08:00
Jeffery To
6544ab791e python-setuptools-rust: Set cargo profile from environment variable
This adds a patch (submitted upstream in
https://github.com/PyO3/setuptools-rust/pull/364), to read the profile
to pass to cargo from an environment variable.

This also updates the Python include files to set the environment
variable based on values from rust-values.mk.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 29ca9797a6)
2023-10-12 14:04:00 +08:00
Jeffery To
6bded4a1fe rust: Set release profile settings
* codegen-units, lto, opt-level - Set to values to optimize binary
  size[1].

* overflow-checks - Enabled because in release mode, integer overflows
  are defined as two's complement wrap[2]. It is highly unlikely that
  any program is intentionally relying on this behaviour; it would be
  better to panic instead of continue execution in this case.

* debug, debug-assertions, panic, rpath - Set to their default (release)
  values, to override any settings made by packages, e.g. ripgrep sets
  debug = 1[3].

[1]: https://github.com/johnthagen/min-sized-rust
[2]: https://huonw.github.io/blog/2016/04/myths-and-legends-about-integer-overflow-in-rust/
[3]: https://github.com/BurntSushi/ripgrep/blob/13.0.0/Cargo.toml#L79-L80

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8bf2725f9b)
2023-10-12 14:03:36 +08:00
Jeffery To
74b970fbce rust: Add option to use sccache
Using sccache makes recompilation of rustc and Rust packages faster.

This also makes the rust package visible in menuconfig, in order for the
sccache options to be accessible.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b4ec017398)
2023-10-12 14:03:24 +08:00
Jeffery To
236da17e6a rust: Use make's jobserver when building packages
This allows cargo to use make's jobserver when building packages, by
marking the cargo command as recursive (with the + prefix[1]) and
setting MAKEFLAGS.

This also:

* Give cargo/x.py the build directory instead of having to change the
  current directory (and opening subshells)

* Set PKG_BUILD_PARALLEL/HOST_BUILD_PARALLEL for Rust packages to enable
  the use of make's jobserver

[1]: https://www.gnu.org/software/make/manual/html_node/POSIX-Jobserver.html

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0dfc1b508d)
[omit changes to arp-whisper and procs]
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-10-12 14:02:35 +08:00
Jeffery To
185f27789c rust: Consolidate cargo environment variables
This consolidates all environment variables for cargo into:

* CARGO_HOST_CONFIG_VARS / CARGO_PKG_CONFIG_VARS

  These contain all cargo-specific environment variables, i.e. without
  "common" variables like CC.

* CARGO_HOST_VARS / CARGO_PKG_VARS (renamed from CARGO_VARS)

  These contain all environment variables to be passed to cargo.

This also:

* Set the CARGO_BUILD_TARGET environment variable instead of using the
  --target command-line option

* Update Python include files to use CARGO_HOST_CONFIG_VARS /
  CARGO_PKG_CONFIG_VARS

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9db7284d58)
2023-10-12 14:00:30 +08:00
Jeffery To
9762480e09 rust: Move CARGO_HOME to $(DL_DIR)/cargo
As CARGO_HOME mainly functions as a download and source cache[1], moving
it into $(DL_DIR) allows it to persist and be reused between different
buildroots/sdks (when DL_DIR is set to a custom/external location).

[1]: https://doc.rust-lang.org/cargo/guide/cargo-home.html

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 853c9c9e86)
2023-10-12 14:00:17 +08:00
Jeffery To
a9e98ed2df rust: Move cargo config options into environment variables
This also:

* Modify the "release" profile in place of adding the "stripped" profile

  Only the profile for target is modified; there are no file size
  constraints for host.

* For host, build with the "release" profile

* For target, build with either the "dev" or "release" profile based on
  CONFIG_DEBUG

There is no environment variable to specify the "strip" option, but
enabling this option is not necessary as the build system will already
strip binaries based on CONFIG_NO_STRIP / CONFIG_USE_STRIP /
CONFIG_USE_SSTRIP.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5c5123f0f6)
2023-10-12 14:00:05 +08:00
Jeffery To
c3247d59e8 rust: Install to $(STAGING_DIR)/host
This allows rustc/cargo/etc to be called without having to set PATH, as
$(STAGING_DIR)/host/bin is already in PATH.

This also fixes CARGO_HOME not being set during Host/Configure and
Host/Compile.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 49aaf19c65)
2023-10-12 13:59:53 +08:00
Jeffery To
b7a65dba31 rust: Improve Host/Install speed
* Compress dist archives with gzip instead of xz; gzip is faster to
  compress and decompress

* Use a for loop instead of calling find to extract archives

* Use libdeflate's gzip to decompress instead of gzip

* Limit search for install scripts to top level of extracted archives

This also runs the install scripts with bash instead of sh, in
accordance with the shebang lines inside the scripts.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 855623d8cc)
2023-10-12 13:59:44 +08:00
Jeffery To
a803002107 rust: Cache bootstrap downloads to $(DL_DIR)/rustc
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 35768bf31e)
2023-10-12 13:59:32 +08:00
Jeffery To
7a947aa227 rust: Add RUST_HOST_FEATURES for host builds
Features to be enabled for host may not be the same as those for target.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d24095b8fc)
2023-10-12 13:59:22 +08:00
Jeffery To
6f2cba3eff rust: Use build host Python
The build system already requires Python to be installed.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a00dae9ed0)
2023-10-12 13:59:09 +08:00
Jeffery To
12be20d0c8 python-zope-interface: Update to 6.1, refresh patch
This also updates the list of dependencies and adds a test.sh script for
the packages feed CI.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 7e8f7b28d7)
2023-10-12 13:53:32 +08:00
Kaveh Dadgar
0da9f62297 v2ray-geodata: add package v2ray-geosite-ir
"Iran Hosted Domains" is a comprehensive list of Iranian domains and services that are hosted within the country.

Signed-off-by: Kaveh Dadgar <Kavehdadgar666@protonmail.com>
(cherry picked from commit b1fc3754b3)
2023-10-11 22:39:35 +08:00
Tianling Shen
277c4cb210 cloudreve: Update to 3.8.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 503825ef41)
2023-10-11 22:38:55 +08:00
Tianling Shen
7eb9fe8a8f dnsproxy: Update to 0.56.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 303f0ad5ed)
2023-10-11 22:38:51 +08:00
Tianling Shen
0525b9b84c dnsproxy: Update to 0.55.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 830552b624)
2023-10-11 22:38:48 +08:00
Tianling Shen
e3c3b6c099 v2ray-core: Update to 5.8.0
Removed upstreamed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 02b723bec3)
2023-10-11 22:38:13 +08:00
Michal Hrusecky
ff0be7c4bb curl: Update to version 8.4.0
For detailed changes, see https://curl.se/changes.html#8_4_0
Switching to tar.bz2 for the time being as tar.xz is not yet available.
Fixes CVE-2023-38546 and CVE-2023-38545.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from d353218c32)
2023-10-11 11:19:17 +02:00
Jeffery To
bec2e7fc81 python3: Update to 3.11.6, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 2aba43afe9)
2023-10-11 09:10:19 +02:00
Tianling Shen
30cf551e1d Merge pull request #22346 from douglarek/sb
[openwrt-23.05] sing-box: update to v1.5.2
2023-10-11 09:48:38 +08:00
Josef Schlehofer
fb9265747b Merge pull request #22293 from jefferyto/python-charset-normalizer-3.3.0-openwrt-23.05
[openwrt-23.05] python-charset-normalizer: Update to 3.3.0
2023-10-10 10:08:19 +02:00
Leo Douglas
0929d16d3f sing-box: update to v1.5.2
* Enable `with_ech` and `with_dhcp`, just like upstream
* See changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.5.2

Signed-off-by: Leo Douglas <douglarek@gmail.com>

sing-box: ShadowsocksR is marked as deprecated since v1.5.0

Signed-off-by: Leo Douglas <douglarek@gmail.com>

sing-box: remove dhcp by default

Signed-off-by: Leo Douglas <douglarek@gmail.com>
(cherry picked from commit bf7ce353b8)
2023-10-09 10:18:35 +08:00
Olivier Poitrey
9b812d9c03 nextdns: Update to version 1.41.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2023-10-08 14:07:08 +03:00
Christian Marangi
292551163d net-snmp: move to PCRE2 library
Add upstream patch adding support for pcre2 and update dependency to
require libpcre2 instead of libpcre.

--with-pcre2-8 is now needed to exclude support for pcre and only
require pcre2 as net-snmp still use and try to use pcre by default.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit daf29ecbb2)
2023-10-08 11:53:33 +02:00
Josef Schlehofer
c6d5e3e96f Merge pull request #22326 from jefferyto/python-twisted-23.8.0-openwrt-23.05
[openwrt-23.05] python-twisted: Update to 23.8.0, rework patches
2023-10-08 09:00:20 +02:00
Luiz Angelo Daros de Luca
caf47b7552 libvpx: update to 1.13.1
v1.13.0

This release includes more Neon and AVX2 optimizations, adds a new codec
control to set per frame QP, upgrades GoogleTest to v1.12.1, and includes
numerous bug fixes.

v1.13.1

This release contains two security related fixes. One each for VP8 and VP9.

- https://crbug.com/1486441 (CVE-2023-5217)
- Fix bug with smaller width bigger size (CVE-2023-44488)

Fixes #22318

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit 36566a99af)
2023-10-08 08:33:02 +02:00
Daniel Golle
f6ae836225 exim: update to version 4.96.1
This is a security release.

JH/01 Bug 2999: Fix a possible OOB write in the external authenticator, which
      could be triggered by externally-supplied input.  Found by Trend Micro.
      CVE-2023-42115

JH/02 Bug 3000: Fix a possible OOB write in the SPA authenticator, which could
      be triggered by externally-controlled input.  Found by Trend Micro.
      CVE-2023-42116

JH/03 Bug 3001: Fix a possible OOB read in the SPA authenticator, which could
      be triggered by externally-controlled input.  Found by Trend Micro.
      CVE-2023-42114

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7c8f4a2a1c)
2023-10-08 04:31:37 +02:00
Jeffery To
da0a243e0f golang: Update to 1.21.2
Includes fix for CVE-2023-39323 (cmd/go: line directives allows
arbitrary execution during build).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a8374204bb)
2023-10-07 19:34:48 +02:00
Eneas U de Queiroz
15cfd52f14 python3: avoid unnecessary rebuilds
Move the order in which BuildPackage is called, so that the libpython
package is built ahead of the module packages, to avoid forcing a
clean-build of the package when 'make package/python3/compile' is called
a second time without changes.

The library must be built first, so that when the buildsystem checks for
ABI version changes using libpython3.version, its timestamp should be
older than the dependent package's STAMP_PREPARED file.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit c230d7bd7f)
2023-10-07 19:33:08 +02:00
John Audia
0d1b08013f openssh: bump to 9.5p1
Changelog: https://www.openssh.com/txt/release-9.5

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 6dc86d46da)
2023-10-07 19:32:59 +02:00
Josef Schlehofer
2c06572057 tor-fw-helper: remove it
This package does not receive any update since 2015. [1]
It seems unmaintained and most likely not used at all.

[1] https://gitweb.torproject.org/tor-fw-helper.git/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c980086b1e)
2023-10-07 19:32:53 +02:00
Jeffery To
9f6eb89ea0 python-twisted: Update to 23.8.0, rework patches
The package changed to the hatchling build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 00841f9873)
2023-10-07 19:52:32 +08:00
S. Brusch
4bcfa675fc crowdsec-firewall-bouncer: new upstream release version 0.0.28
Signed-off-by: S. Brusch <ne20002@gmx.ch>

Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: mediatek/filogic, BPI-R3, Openwrt 23.05.0-rc3

Description: Update crowdsec-firewall-bouncer to latest upstream release version 0.0.28
(cherry picked from commit 401d2428ac)
2023-10-07 12:54:54 +08:00
Stan Grishin
444dec37dc Merge pull request #22312 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: bugfix: properly identify hosts-files
2023-10-06 16:42:38 -06:00
Dirk Brenken
f611ae00d6 banip: release 0.9.1-1
* drop packets silently on input and forwardwan chains or actively reject the traffic, set 'ban_blocktype' accordingly
* optimized banIP boot/reload handling
* removed pppoe quirk in device detection
* small fixes and optimizations

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 00cad2980c)
2023-10-06 16:14:38 +02:00
Tianling Shen
40899bca79 yq: Update to 4.35.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b46ff1fd8a)
2023-10-06 11:55:22 +08:00
Stan Grishin
80bc44cb7b adblock-fast: bugfix: properly identify hosts-files
* escape dots in grep command to properly identify hosts files

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 13a88d0b79)
2023-10-05 14:53:58 +00:00
Christian Marangi
1458dc5589 atftp: move to PCRE2
Move atftp to PCRE2 as PCRE is flagged as EOL and won't receive security
updates anymore.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit f81a1a1212)
2023-10-04 18:35:53 +02:00
Christian Marangi
1013bdd5b5 atftp: bump to release 0.8.0
Bump to release 0.8.0. Autorecong is now needed to correctly compile the
package.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 364fe00b17)
2023-10-04 18:35:47 +02:00
Jan Kratochvil
41e64f8a79 ffmpeg: Add avi muxer
Otherwise one cannot produce *.avi containers needed for some H.264
camera codecs.

Signed-off-by: Jan Kratochvil <jan@jankratochvil.net>
(cherry picked from commit 62f01d7b36)
2023-10-04 18:33:39 +02:00
Tianling Shen
0d95becbc8 wget: Update to 1.21.4
Removed upstreamed patches and unneeded autoreconf.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 54593c0ba9)
2023-10-04 18:07:03 +02:00
Josef Schlehofer
ba11cad3a8 syslog-ng: update to version 4.4.0
- Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.4.0

- Bump version in config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 4dd49d7c3c)
2023-10-04 18:03:21 +02:00
Jeffery To
c5f6b62fdf python-cffi: Update to 1.16.0
This includes a patch to unpin the version of setuptools required for
build; the required version is newer than the version bundled with
Python 3.11. This patch should not be necessary when Python 3.12 is
available.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit dd5af62695)
2023-10-04 17:05:27 +02:00
Jeffery To
4c4fa3cd21 python-packaging: Update to 23.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 78bcdd0fd1)
2023-10-04 17:05:01 +02:00
Jeffery To
8620abe6ad python-bcrypt: Update to 4.0.1, add myself as maintainer
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6b3da46777)
2023-10-03 21:28:46 -07:00
Jeffery To
36a473bf52 python-pyopenssl: Update to 23.2.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit bb278a015c)
2023-10-03 21:28:36 -07:00
Jeffery To
71f226e032 python-charset-normalizer: Update to 3.3.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 85540346fe)
2023-10-04 11:13:44 +08:00
Stan Grishin
24e52a75bb Merge pull request #22287 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: update to 1.0.0-5
2023-10-03 13:13:45 -06:00
Stan Grishin
35fbb73853 adblock-fast: update to 1.0.0-5
* improve processing of dnsmasq config files
* do not run sed/show error if allow_filter is empty

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit f3b8e569a5)
2023-10-03 19:01:00 +00:00
Alexandru Ardelean
9948e4a11c Merge pull request #22269 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: update to 1.0.0-5
2023-10-03 20:18:21 +03:00
Alexandru Ardelean
3360cce9f8 libwebp: bump to version 1.3.2
From https://github.com/webmproject/libwebp/releases/tag/v1.3.2

- 9/13/2023: version 1.3.2
  This is a binary compatible release.
  * security fix for lossless decoder (chromium: #1479274, CVE-2023-4863)

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 90c6cb2390)
2023-10-03 14:51:23 +02:00
Josef Schlehofer
4c79fddacf prometheus-node-exporter-lua: drop bmx6 package
In the OpenWrt routing feed, package bmx6 and luci-app-bmx6 were removed because the LuCI app was vulnerable to several CVEs, as found by dependabot. It has been reporting it for a few months and has even created an issue. These two packages are not maintained in OpenWrt as well in upstream.

Users should switch to the bmx7 package.

Fixes: 9fb9d9343ea27d6dbb5008ece10c0c843dd2c781 ("bmx6: drop package") in the routing feed

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 9c2bf85900)
2023-10-03 14:48:34 +02:00
Tianling Shen
24fdd4ae16 cloudflared: Update to 2023.7.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 08f3dccccd)
2023-10-03 14:47:15 +02:00
Dobroslaw Kijowski
cf33901064 adguardhome: update quic-go to v0.37.6
* quic-go v0.36.x cannot be compiled with Go 1.21. Update that
  AdGuardHome dependency to latest one from v0.37 series.
* It fixes following compilation error:
  go-mod-cache/github.com/quic-go/quic-go@v0.36.2/internal/qtls/go121.go:5:13: cannot use "The version of quic-go you're using can't be built on Go 1.21 yet. For more details, please see https://github.
  com/quic-go/quic-go/wiki/quic-go-and-Go-versions." (untyped string constant "The version of quic-go you're using can't be built on Go 1.21 yet.

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit 11230bb580)
2023-10-03 14:46:28 +02:00
Jeffery To
88ef5d0ba4 python-typing-extensions: Update to 4.8.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit cb8648679b)
2023-10-02 19:15:29 +08:00
Jeffery To
66958cef9f python-trove-classifiers: Update to 2023.9.19
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 423235b40a)
2023-10-02 19:15:23 +08:00
Jeffery To
191d367d1b python-setuptools: Update to 68.2.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit c12e4e873d)
2023-10-02 19:15:14 +08:00
Jeffery To
4ed41a0cbe python-cryptography: Update to 41.0.4
This includes a patch to update the version of ouroboros (Rust crate)
used, to fix RUSTSEC-2023-0042[1]. Upstream has switch from ouroboros to
self_cell so this patch should only be necessary for cryptography 41.

[1]: https://rustsec.org/advisories/RUSTSEC-2023-0042.html

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9fdff3ea94)
2023-10-02 19:15:02 +08:00
Jeffery To
402ebe84f8 python: Add environment variables to build Rust extensions
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4d43be8549)
2023-10-02 19:15:02 +08:00
Jeffery To
f78e60fa8d python-setuptools-rust: Add new host-only package
From the README:

setuptools-rust is a plugin for setuptools to build Rust Python
extensions implemented with PyO3 or rust-cpython.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit f467f47f0c)
2023-10-02 19:15:02 +08:00
Jeffery To
882ce5ddf9 python-semantic-version: Add new host-only package
From the README:

This small python library provides a few tools to handle SemVer in
Python. It follows strictly the 2.0.0 version of the SemVer scheme.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b078e01f0c)
2023-10-02 19:15:02 +08:00
Daniel Golle
dc38ce57b9 exim: apply hotfix for some ZDI reported vulnerabilities
Apply preliminary hotfix for some (three?) of the 0-day
vulnerabilities reported by ZDI.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit db85d9ead6)
2023-10-02 11:35:35 +01:00
Stan Grishin
e805d653dc adblock-fast: update to 1.0.0-5
* improve processing of dnsmasq config files
* do not run sed/show error if allow_filter is empty

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 0dc2aa2e7d67b6b4bce3d3bae9b14e67b90ff0c1)
2023-10-01 23:56:28 +00:00
Tianling Shen
7d35ac5c1d v2raya: remove go version hack
This hack was added for Go 1.20 as it did not take minor version.
Now we have Go 1.21, this hack can go away.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-09-30 19:05:11 +08:00
Stan Grishin
5f3879f714 Merge pull request #22242 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: better error reporting when nothing to do
2023-09-29 12:00:16 -06:00
Tianling Shen
c38a05741c v2ray-core: backport upstream Go 1.21 updates
Fix build for Go 1.21.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a8ac5861f6)
2023-09-29 12:33:01 +02:00
Van Waholtz
0aad4266f9 frp: update to 0.51.3
Includes some bug fixes and adds support for GO 1.21.

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 14dd31ef27)
2023-09-29 12:31:01 +02:00
Van Waholtz
70960d4e83 frp: update to 0.51.0
XTCP is incompatible with previous versions since 0.49.0.

Changelog:
https://github.com/fatedier/frp/releases/tag/v0.49.0
https://github.com/fatedier/frp/releases/tag/v0.50.0
https://github.com/fatedier/frp/releases/tag/v0.51.0

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 62901b7895)
2023-09-29 12:30:55 +02:00
Josef Schlehofer
77f62ddb67 kismet: drop the package
This package is no longer maintained in OpenWrt even though it is maintained by upstream.
The last update was done in August 2016 and because we have 2023, drop this package
without replacement.

If anyone from the community wants to step in and retake the maintainership together with the update,
feel free to do it.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 52def58084)
2023-09-29 12:29:10 +02:00
Stan Grishin
55ca07c788 adblock-fast: better error reporting when nothing to do
* also nicer file type output in high verbosity

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit ed6729c251)
2023-09-28 21:33:47 +00:00
Hannu Nyman
1542103dd3 adguardhome: update to v0.107.36
* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.34
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.35
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.36

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

[ Reword commit message ]
Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit d4fa3d0a1a)
2023-09-28 10:54:17 +02:00
Van Waholtz
13bd464288 syncthing: update to 1.24.0
This package can be built with Go 1.21 and QUIC can be enabled.

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 86522d77f1)
2023-09-28 10:53:38 +02:00
Van Waholtz
5f79076fb6 syncthing: disable quic to support GO 1.21
Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 23113ceb97)
2023-09-28 10:53:32 +02:00
Van Waholtz
133bddb2a9 syncthing: update to 1.23.7
Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 0449b0f394)
2023-09-28 10:53:20 +02:00
Zephyr Lykos
131a043201 tailscale: Update to 1.50.0
Signed-off-by: Zephyr Lykos <git@mochaa.ws>
(cherry picked from commit eeb1e0f057)
2023-09-28 10:51:58 +02:00
Tyler Young
a75e1150f1 tailscale: update to version 1.48.2
Release notes:
https://github.com/tailscale/tailscale/releases/tag/v1.48.2

Signed-off-by: Tyler Young <git@yfh.addy.io>
(cherry picked from commit 992807ca35)
2023-09-28 10:51:51 +02:00
Tyler Young
eced946bd2 tailscale: enable autodect of fw type
Signed-off-by: Tyler Young <git@yfh.addy.io>
(cherry picked from commit 40d5ba9378)
2023-09-28 10:51:38 +02:00
Zephyr Lykos
e7ca549d6e tailscale: Update to 1.48.1
Signed-off-by: Zephyr Lykos <git@mochaa.ws>
(cherry picked from commit a9373d6dd1)
2023-09-28 10:51:30 +02:00
Zephyr Lykos
42e796f8a1 tailscale: Update to 1.48.0
Everything is working on pure upstream code.
Patching is not longer needed.

Added entire /etc/tailscale/ directory to conffiles for persistent ssh
host key & https certificate across sysupgrades.

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
(cherry picked from commit 750faf5942)
2023-09-28 10:51:24 +02:00
Josef Schlehofer
8d1cf768a7 dnscrypt-proxy2: update to version 2.1.5
Fixes compilation with Go 1.21+.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 536569ca62)
2023-09-28 10:50:29 +02:00
Christian Marangi
45b2d3ecd5 apache: move to PCRE2
Move apache to PCRE2 now that PCRE is flagged EOL and won't receive any
security update.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit d14fe0c51c)
2023-09-28 10:42:44 +02:00
Christian Marangi
5abeef2c38 apache: bump to release 2.4.57
Bump apache to release 2.4.57 and refresh patch automatically.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 86f9af41c1)
2023-09-28 10:42:39 +02:00
Stan Grishin
ebfa76314c Merge pull request #22222 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: bugfix: better detect ABP lists
2023-09-27 21:35:51 -06:00
Jeffery To
032b5506c7 python3-networkx: Update to 3.1, rename source package
This renames the source package to python-networkx to match other Python
packages.

This also updates the list of dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 77cebb0d03)
2023-09-27 16:40:32 -07:00
Jeffery To
76e87af99d python-bidict: Update to 0.22.1
The package no longer has a build dependency on setuptools-scm.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0434413108)
2023-09-27 16:37:43 -07:00
Jeffery To
41c5a695dd golang: Update to 1.21.1
Includes fixes for:

* CVE-2023-39318: html/template: improper handling of HTML-like comments
  within script contexts

* CVE-2023-39319: html/template: improper handling of special tags
  within script contexts

* CVE-2023-39320: cmd/go: go.mod toolchain directive allows arbitrary
  execution

* CVE-2023-39321 and CVE-2023-39322: crypto/tls: panic when processing
  partial post-handshake message in QUICConn.HandleData

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d9a999521e)
2023-09-27 19:54:25 +02:00
Jeffery To
29ae219a23 golang: Update to 1.21.0, remove patch
Upstream has updated the Go compiler to not use gold when building for
arm, and is waiting for a fix to binutils (released in 2.41) before
doing the same for aarch64.[1]

Based on the above, it does not appear that
https://github.com/golang/go/pull/49748 will be merged. This removes the
patch from that pull request.

[1]: https://github.com/golang/go/issues/22040

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a80af7e443)
2023-09-27 19:54:25 +02:00
Josef Schlehofer
c6656a6289 btrfs-progs: update to version 6.5.1
Release notes:
https://github.com/kdave/btrfs-progs/releases/tag/v6.5.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 16e484cad1)
2023-09-27 19:03:44 +02:00
Matthias Schiffer
a7e0076acd openvswitch: disable groff manpage check
The openvswitch build trips over a number of warnings during the
manpage-check step if groff 1.23 is installed on the build host,
resulting in a failed build.

As this check is optional, and we don't even install the manpages, simply
override the groff configure check to never detect groff.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit db34f33cc7)
2023-09-27 18:15:23 +02:00
Matthias Schiffer
d5fb69c024 tunneldigger: set PKG_SOURCE_DATE
opkg requires monotonically increasing version numbers to know which
version of a package is newer. As git commit IDs do not satisfy this
condition, PKG_SOURCE_DATE must be set to the date of the referenced
commit, resulting in the complete version number '2021-03-08-4f72b305-1'.

As the source date also becomes part of the paths inside the download
archive, the source hash must be updated as well.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit 0a3e5dd122)
2023-09-27 18:15:16 +02:00
Matthias Schiffer
3ceb8b3660 tunneldigger: add group option to UCI config
The group can be used for policy routing and similar purposes.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit 21dd77f6c4)
2023-09-27 18:15:08 +02:00
Stan Grishin
6d3ff6df7f adblock-fast: bugfix: better detect ABP lists
* bugfix: better detect ABP lists
* update Makefile with BUSYBOX features dependencies
* update the type of dnsmasq_instance setting
* add error message when file type can't be detected
* add reporting when file type can't be detected
* bugfix: include URL on errors related to URL processing/parsing
* rename resolver function to resolver_config to better reflect its use

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit cfe85fbde3)
2023-09-26 22:52:38 +00:00
Alexandru Ardelean
fdfb50ae13 Merge pull request #22207 from commodo/django-update-23.05
[23.05] django: bump to version 4.2.5
2023-09-26 16:25:35 +03:00
Leo Douglas
6526d607db iperf3: update to 3.15
see changelog: https://github.com/esnet/iperf/releases/tag/3.15.

Signed-off-by: Leo Douglas <douglarek@gmail.com>
(cherry picked from commit 8a223d4724)
2023-09-26 11:37:11 +02:00
Leo Douglas
ce194e20dc zerotier: update to 1.12.2
see changelog: https://github.com/zerotier/ZeroTierOne/releases/tag/1.12.2.

Signed-off-by: Leo Douglas <douglarek@gmail.com>
(cherry picked from commit 0343dffefa)
2023-09-25 22:32:17 +08:00
S. Brusch
862e2fa22b crowdsec: new upstream release version 1.5.4
Update crowdsec to latest upstream release version 1.5.4

Signed-off-by: S. Brusch <ne20002@gmx.ch>

Maintainer: Kerma Gérald <gandalf@gk2.net>
Build tested: package build checked, no run test due to limited space

Description: update to latest version of upstream
(cherry picked from commit 7528bf7682)
2023-09-25 22:31:51 +08:00
Dengfeng Liu
5760c525a6 apfree-wifidog: Update to v6.08.1950
Fixed some memory leak bug

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 5b3e517be4)
2023-09-25 22:30:53 +08:00
Alexandru Ardelean
5f8895386e django: bump to version 4.2.5
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 331b5f75f4)
2023-09-25 09:40:10 +03:00
Volker Christian
634e8f1271 libmariadb: Fix async api by linking to libucontext
The asynchronous API of libmariadb uses cooperative multi threading
by using the system calls
  * makecontext
  * swapcontext
  * getcontext
  * setcontext
of the ucontext.h C-API.

Thus additionally link libmariadb to libucontext which is a library
providing these system calls on platforms not supporting them out of
the box - like musl based platforms.

Signed-off-by: Volker Christian <me@vchrist.at>
(cherry picked from commit 6748f95168)
2023-09-24 20:33:56 -07:00
Dengfeng Liu
7972badcfd xfrpc: update to version 2.9.644
Release notes:
https://github.com/liudf0716/xfrpc/releases/tag/2.9.644

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
2023-09-25 00:52:33 +08:00
Michal Hrusecky
8a940b9a55 samba4: update to 4.18.6
Fixes various security issues. For detailed history see:

* https://www.samba.org/samba/history/samba-4.18.6.html
* https://www.samba.org/samba/history/samba-4.18.5.html
* https://www.samba.org/samba/history/samba-4.18.4.html
* https://www.samba.org/samba/history/samba-4.18.3.html
* https://www.samba.org/samba/history/samba-4.18.2.html
* https://www.samba.org/samba/history/samba-4.18.1.html

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2023-09-23 19:15:01 -07:00
Josef Schlehofer
e55b418473 czmq: drop libpcre dependency
It seems like the libpcre dependency was added by mistake.
While checking in the source code of czmq (Makefile.am, CMakeLists.txt),
I see there are several dependencies, but there isn't PCRE.

Fixes: 936a48a ("czmq: add new package")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e3ab95185c)
2023-09-22 09:26:28 +02:00
Hirokazu MORIKAWA
244bc7e8a2 mg: switch pcre to pcre2
Switch pcre to pcre2
https://github.com/openwrt/packages/issues/22006

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 3d11e5c197)
2023-09-22 09:26:21 +02:00
Josef Schlehofer
e731fe9808 msmtp: update to version 1.8.24
Release notes:
ef62463e4dX

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 29a9a6a4a7)
2023-09-22 00:28:10 +02:00
Jeffery To
598e079a25 setools: Update to 4.4.3
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0ea5e63b15)
2023-09-22 00:24:40 +02:00
Tianling Shen
c324d9dbe0 Merge pull request #22168 from jefferyto/rust-cargo-rustflags-openwrt-23.05
[openwrt-23.05] rust: Set rustflags by environment variable
2023-09-21 23:14:33 +08:00
Jeffery To
edc323ba63 rust: Set rustflags by environment variable
In order to use $(RUSTC_TARGET_ARCH) in HOST_BUILD_DIR, the line to
include rust-values.mk in the Rust makefile was moved in
f489e019ac, causing it to be included
before package.mk is included.

This had the side effect of preventing "-lssp_nonshared" from being
added to RUSTC_LDFLAGS, because PKG_SSP is indirectly set by package.mk
(package.mk includes hardening.mk, hardening.mk sets PKG_SSP).

There is a deeper issue; it is the Rust package's PKG_SSP value that
causes RUSTC_LDFLAGS to be set and written to the Cargo config file. For
packages that use Rust to build, their PKG_SSP value does not affect the
linker flag.

This sets rustflags with the RUSTFLAGS environment variable, instead of
writing the value to the Cargo config file, allowing PKG_SSP from the
package being built to be used and for the package being built to modify
the rustflags used.

This also:

* Fix "-lssp_nonshared" being added to TARGET_CFLAGS instead of
  RUSTC_LDFLAGS, when CONFIG_PKG_CC_STACKPROTECTOR_STRONG is set.

* Remove the use of $(RUSTC_TARGET_ARCH) in HOST_BUILD_DIR and move the
  include line for rust-values.mk back to after package.mk.

  Since the host build directory was moved under the target build
  directory in efdbac38dc, it is no longer
  necessary to separate build directories with RUSTC_TARGET_ARCH;
  $(BUILD_DIR) already separates build directories by target.

* Add BUILDONLY:=1, as the Rust package does not build a target package.

* Install the Cargo config file as "config.toml" instead of "config", as
  this is the preferred form[1].

* Rename RUST_CFLAGS to RUSTC_CFLAGS and CONFIG_HOST_SUFFIX to
  RUSTC_HOST_SUFFIX, for consistency.

* Allow CARGO_VARS to be set before rust-values.mk is included.

[1]: https://doc.rust-lang.org/cargo/reference/config.html#hierarchical-structure

Fixes: f489e019ac ("rust: compile host package per target")
Fixes: 83785a7ce0 ("rust-lang: Add the rust language support")
Fixes: https://github.com/openwrt/packages/issues/22133

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 37762abcb4)
2023-09-21 16:24:15 +08:00
Hirokazu MORIKAWA
e32e59baf5 node: bump to v18.18.0
Update to v18.18.0

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 8635545409)
2023-09-21 07:55:04 +02:00
Tianling Shen
67ddab34ae rust: Update to 1.72.0
Version 1.72.0 (2023-08-24)
==========================

Language
--------
- [Replace const eval limit by a lint and add an exponential backoff warning](https://github.com/rust-lang/rust/pull/103877/)
- [expand: Change how `#![cfg(FALSE)]` behaves on crate root](https://github.com/rust-lang/rust/pull/110141/)
- [Stabilize inline asm for LoongArch64](https://github.com/rust-lang/rust/pull/111235/)
- [Uplift `clippy::undropped_manually_drops` lint](https://github.com/rust-lang/rust/pull/111530/)
- [Uplift `clippy::invalid_utf8_in_unchecked` lint](https://github.com/rust-lang/rust/pull/111543/)
- [Uplift `clippy::cast_ref_to_mut` lint](https://github.com/rust-lang/rust/pull/111567/)
- [Uplift `clippy::cmp_nan` lint](https://github.com/rust-lang/rust/pull/111818/)
- [resolve: Remove artificial import ambiguity errors](https://github.com/rust-lang/rust/pull/112086/)
- [Don't require associated types with Self: Sized bounds in `dyn Trait` objects](https://github.com/rust-lang/rust/pull/112319/)

Compiler
--------
- [Remember names of `cfg`-ed out items to mention them in diagnostics](https://github.com/rust-lang/rust/pull/109005/)
- [Support for native WASM exceptions](https://github.com/rust-lang/rust/pull/111322/)
- [Add support for NetBSD/aarch64-be (big-endian arm64).](https://github.com/rust-lang/rust/pull/111326/)
- [Write to stdout if `-` is given as output file](https://github.com/rust-lang/rust/pull/111626/)
- [Force all native libraries to be statically linked when linking a static binary](https://github.com/rust-lang/rust/pull/111698/)
- [Add Tier 3 support for `loongarch64-unknown-none*`](https://github.com/rust-lang/rust/pull/112310/)
- [Prevent `.eh_frame` from being emitted for `-C panic=abort`](https://github.com/rust-lang/rust/pull/112403/)
- [Support 128-bit enum variant in debuginfo codegen](https://github.com/rust-lang/rust/pull/112474/)
- [compiler: update solaris/illumos to enable tsan support.](https://github.com/rust-lang/rust/pull/112039/)

Refer to Rust's [platform support page][platform-support-doc]
for more information on Rust's tiered platform support.

Libraries
---------
- [Document memory orderings of `thread::{park, unpark}`](https://github.com/rust-lang/rust/pull/99587/)
- [io: soften ‘at most one write attempt’ requirement in io::Write::write](https://github.com/rust-lang/rust/pull/107200/)
- [Specify behavior of HashSet::insert](https://github.com/rust-lang/rust/pull/107619/)
- [Relax implicit `T: Sized` bounds on `BufReader<T>`, `BufWriter<T>` and `LineWriter<T>`](https://github.com/rust-lang/rust/pull/111074/)
- [Update runtime guarantee for `select_nth_unstable`](https://github.com/rust-lang/rust/pull/111974/)
- [Return `Ok` on kill if process has already exited](https://github.com/rust-lang/rust/pull/112594/)
- [Implement PartialOrd for `Vec`s over different allocators](https://github.com/rust-lang/rust/pull/112632/)
- [Use 128 bits for TypeId hash](https://github.com/rust-lang/rust/pull/109953/)
- [Don't drain-on-drop in DrainFilter impls of various collections.](https://github.com/rust-lang/rust/pull/104455/)
- [Make `{Arc,Rc,Weak}::ptr_eq` ignore pointer metadata](https://github.com/rust-lang/rust/pull/106450/)

Rustdoc
-------
- [Allow whitespace as path separator like double colon](https://github.com/rust-lang/rust/pull/108537/)
- [Add search result item types after their name](https://github.com/rust-lang/rust/pull/110688/)
- [Search for slices and arrays by type with `[]`](https://github.com/rust-lang/rust/pull/111958/)
- [Clean up type unification and "unboxing"](https://github.com/rust-lang/rust/pull/112233/)

Stabilized APIs
---------------
- [`impl<T: Send> Sync for mpsc::Sender<T>`](https://doc.rust-lang.org/nightly/std/sync/mpsc/struct.Sender.html#impl-Sync-for-Sender%3CT%3E)
- [`impl TryFrom<&OsStr> for &str`](https://doc.rust-lang.org/nightly/std/primitive.str.html#impl-TryFrom%3C%26'a+OsStr%3E-for-%26'a+str)
- [`String::leak`](https://doc.rust-lang.org/nightly/alloc/string/struct.String.html#method.leak)

These APIs are now stable in const contexts:

- [`CStr::from_bytes_with_nul`](https://doc.rust-lang.org/nightly/std/ffi/struct.CStr.html#method.from_bytes_with_nul)
- [`CStr::to_bytes`](https://doc.rust-lang.org/nightly/std/ffi/struct.CStr.html#method.from_bytes_with_nul)
- [`CStr::to_bytes_with_nul`](https://doc.rust-lang.org/nightly/std/ffi/struct.CStr.html#method.from_bytes_with_nul)
- [`CStr::to_str`](https://doc.rust-lang.org/nightly/std/ffi/struct.CStr.html#method.from_bytes_with_nul)

Cargo
-----
- Enable `-Zdoctest-in-workspace` by default. When running each documentation
  test, the working directory is set to the root directory of the package the
  test belongs to.
  [docs](https://doc.rust-lang.org/nightly/cargo/commands/cargo-test.html#working-directory-of-tests)
  [#12221](https://github.com/rust-lang/cargo/pull/12221)
  [#12288](https://github.com/rust-lang/cargo/pull/12288)
- Add support of the "default" keyword to reset previously set `build.jobs`
  parallelism back to the default.
  [#12222](https://github.com/rust-lang/cargo/pull/12222)

Compatibility Notes
-------------------
- [Alter `Display` for `Ipv6Addr` for IPv4-compatible addresses](https://github.com/rust-lang/rust/pull/112606/)
- Cargo changed feature name validation check to a hard error. The warning was
  added in Rust 1.49. These extended characters aren't allowed on crates.io, so
  this should only impact users of other registries, or people who don't publish
  to a registry.
  [#12291](https://github.com/rust-lang/cargo/pull/12291)

Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 846ee0b9d0)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-09-21 07:54:52 +02:00
Matthias Schiffer
9e7f093dbb fastd: update repository URL
I've changed my username to neocturne.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit ac897e05dd)
2023-09-20 21:57:00 +02:00
Matthias Schiffer
22f22601dd libuecc: update repository URL
I've changed my username to neocturne.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit 1df594bc01)
2023-09-20 21:56:59 +02:00
Olivier Poitrey
596d983e08 nextdns: Update to version 1.40.1
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
(cherry picked from commit 66b72b6db3)
2023-09-20 10:47:06 +08:00
Tianling Shen
d2ede154d2 rclone: Update to 1.64.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1b75de7e5c)
2023-09-20 10:43:02 +08:00
Eneas U de Queiroz
a7769bf313 alpine: disable parallel build
Parallel build does not work because it may reach a point where OSTYPE
might be needed before it is actually built.  They appear to run
parallel to each other:

echo slx > OSTYPE
[...]
cat: OSTYPE: No such file or directory
sh: line 1: test: too many arguments
cat: OSTYPE: No such file or directory
Already built for -- you must do "make clean" first
make[6]: *** [Makefile:706: rebuild] Error 1
make[6]: *** Waiting for unfinished jobs....

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 0e652e2449)
2023-09-20 02:16:19 +02:00
Alexandru Ardelean
332e5eaa47 sudo: bump to verison 1.9.14p3
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit a1edb56083)
2023-09-20 02:08:53 +02:00
Alexandru Ardelean
e22448e182 sudo: bump to verison 1.9.14p1
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 7953466d7f)
2023-09-20 02:08:40 +02:00
Jan Hák
065d953ad6 knot: update to version 3.3.1
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 2a6dc24882)
2023-09-20 00:25:41 +02:00
Lucian Cristian
d2f2d7f556 libreswan: update to 4.12
fix CVE-2023-38710, CVE-2023-38711, CVE-2023-38712

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 5a1b878010)
2023-09-20 00:20:01 +02:00
Hannu Nyman
b507c937da collectd: remove target dependency from cpufreq plugin
We currently have more package architectures supporting
CPU frequency scaling than earlier, and the package architecture
vs. CPU target SDK matching does not fully reflect that.
(E.g. aarch64_cortex-a53 is currently using bcm27xx/bcm2710)

Simplify things by removing the target dependency and let the plugin
be built for all architectures.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 87a9305ddd)
2023-09-18 22:23:41 +03:00
Marius Dinu
7ed0b22bbe transmission: add copy_file_range syscall to seccomp
Fixes this crash:

root@RPi3OpenWrt:/# grep -i seccomp /var/log/audit/audit.log
type=SECCOMP msg=audit(1689503903.597:16): auid=4294967295 uid=224 gid=1012 ses=4294967295 pid=1752 comm="transmission-da" exe="/usr/bin/transmission-daemon" sig=31 arch=c00000b7 syscall=285 compat=0 ip=0x7fa3b0eefc code=0x80000000
root@RPi3OpenWrt:/# ausyscall 285
copy_file_range
root@RPi3OpenWrt:/#

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit f0926b44f4)
2023-09-17 17:38:40 +01:00
Marius Dinu
4a94edb066 transmission: add ftruncate syscall to seccomp
Fixes many crashes.

Fixes #22071.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit a037254588)
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2023-09-17 17:38:40 +01:00
Leonid Bogdanov
29bf6ffe38 transmission: Fix env variables passing
It's not possible to configure custom Transmission web home as corresponding
env var gets overwritten by the command that sets CA bundle env var.

Signed-off-by: Leonid Bogdanov <leonidbogdanov86@gmail.com>
(cherry picked from commit c662aefd9a)
2023-09-17 17:38:40 +01:00
Josef Schlehofer
3202834c27 ffmpeg: update to version 5.1.3
Fixes CVEs:
CVE-2022-3964 [1]
CVE-2022-3965 [2]

[1] https://nvd.nist.gov/vuln/detail/CVE-2022-3964
[2] https://nvd.nist.gov/vuln/detail/CVE-2022-3965

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 87b2a2bb57)
2023-09-17 13:45:55 +02:00
Jeffery To
7512e421d2 python-build: Update to 1.0.3
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 21eb9b7456)
2023-09-17 07:38:31 +02:00
Jeffery To
f0bb5ce09a python-build: Update to 1.0.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit ba17298db5)
2023-09-17 07:38:31 +02:00
Jeffery To
f33c8977a0 python-setuptools: Update to 68.2.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit e309346104)
2023-09-17 07:38:22 +02:00
Stan Grishin
07fc64e10c Merge pull request #22124 from stangri/openwrt-23.05-https-dns-proxy
[23.05] https-dns-proxy: improve boot up startup
2023-09-16 18:59:31 -07:00
Stan Grishin
93ebbfed0a https-dns-proxy: improve boot up startup
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 22d21e28a7)
2023-09-16 23:52:40 +00:00
Stan Grishin
4c203973a6 Merge pull request #22119 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: bugfix: remove domains on allow
2023-09-16 16:43:37 -07:00
Stan Grishin
aa0b130fe2 Merge pull request #22117 from stangri/openwrt-23.05-curl
[23.05] curl: update to version 8.3.0
2023-09-16 16:43:22 -07:00
Stan Grishin
0d6f18a7d8 adblock-fast: bugfix: remove domains on allow
* fix sed command to properly remove allowed domains from block-file

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit bce310bfcd)
2023-09-16 13:15:14 +00:00
Eric Luehrsen
a49722f43b unbound: update to 1.18.0
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit 03f70dcfd5)
2023-09-16 12:59:33 +02:00
Ted Hess
78434151e1 Unbound: Silence SSL unexpected eof messages
Refs: https://github.com/NLnetLabs/unbound/issues/812
      https://github.com/NLnetLabs/unbound/issues/846

This is a backport of: https://github.com/NLnetLabs/unbound/commit/d7e7761
and can be removed with the next release/update of the Unbound package

Signed-off-by: Ted Hess <thess@kitschensync.net>
(cherry picked from commit 2a71e17ca1)
2023-09-16 12:59:16 +02:00
Josef Schlehofer
853109dd65 curl: update to version 8.3.0
Release notes:
https://curl.se/changes.html#8_3_0

Fixes:
CVE-2023-38039 [1]

[1] https://curl.se/docs/CVE-2023-38039.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 07c0a5eab8)
2023-09-16 10:26:07 +00:00
Josef Schlehofer
51acc2633b treewide: change my no longer used email
Since February 2023, I decided to no longer work with Turris, I mean CZ.NIC company
due to some reasons how the development goes and since that day my work address is not
available and not sure if there is some redirect to someone else, but if anyone wants to
reach me, use my email address, where they can find me.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1e1b2051db)
2023-09-16 12:24:30 +02:00
Josef Schlehofer
02159e6a50 bandwidthd: drop this package
This package is not maintained by upstream anymore as they replace it by Ntopng 3. [1]
Upstream repository is archived and read only since February 2022 [2]

[1] https://community.nethserver.org/t/bandwidthd-for-nethserver-7/4071/18
[2] https://github.com/NethServer/bandwidthd

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit bb4c3b5a20)
2023-09-16 12:18:28 +02:00
Tianling Shen
2db6358bb0 Merge pull request #22108 from jefferyto/rust-arch-depends-openwrt-23.05
[openwrt-23.05] rust: Move RUST_ARCH_DEPENDS into rust-values.mk
2023-09-16 17:08:09 +08:00
Volker Christian
d8776fd36e libucontext: Add package
Description (from libucontext github page):
libucontext (https://https://github.com/kaniini/libucontext) is a
library which provides the ucontext.h C API. Unlike other
implementations, it faithfully follows the kernel process ABI when
doing context swaps. libucontext is used on almost all musl
distributions to provide the legacy ucontext.h API.

This package is meant as a development package. There is no need
to install a package on the router if an application or library
is linked against the static libraries. Though, shared libraries
are provided also.

It is used to link libraries/applications against it which need the
system calls

* makecontext
* swapcontext
* getcontext
* setcontext

E.g. the asynchronous API of libmariadb (c-connector) uses this
system calls. Because libmusl didn't provide that system calls this
synchronous API is currently (without libucontexe) not working - it
segfaults.

Co-developed-by: Tianling Shen <cnsztl@immortalwrt.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Signed-off-by: Volker Christian <me@vchrist.at>
(cherry picked from commit 635a702255)
2023-09-16 17:07:43 +08:00
Sibren Vasse
016424fc11 openssh: update to 9.4p1
Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>
(cherry picked from commit 7fb8e823b9)
2023-09-15 15:52:25 +02:00
Philip Prindeville
bb3247d1b2 openssh: add server config subdirectory
Most distros allow dropping site configuration files into
/etc/sshd_config.d/ so that you don't have to tweak the main
server configuration file.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit ead95a26b6)
2023-09-15 15:52:15 +02:00
Sibren Vasse
45b07c0b47 openssh: update to 9.3p2
Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>
(cherry picked from commit 731f0d70a8)
2023-09-15 15:52:06 +02:00
Josef Schlehofer
07b04f9d9f syslog-ng: update to version 4.3.1
Makefile changes:
- Since version 4.3.0, there is required to use pcre2 instead of pcre
Reference: https://github.com/syslog-ng/syslog-ng/pull/4537

- Disable c++ support by default to avoid picking libstdcpp dependency
Reference: https://github.com/syslog-ng/syslog-ng/pull/4484

Config changes:
- Bump version in config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c43599b0c8)
2023-09-15 09:29:08 +02:00
Jeffery To
c5a254c8de rust: Move RUST_ARCH_DEPENDS into rust-values.mk
This allows other packages access to RUST_ARCH_DEPENDS by including
rust-values.mk, instead of rust-package.mk which also sets
Build/Compile.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 985738b399)
2023-09-15 11:00:57 +08:00
Jeffery To
e05cf558ff python3: Update to 3.11.5, refresh patches
Includes fix for CVE-2023-40217 (Bypass TLS handshake on closed
sockets).

This also:

* Remove 027-install-python3-symlink-after-stdlib.patch

  This was merged upstream in
  https://github.com/python/cpython/pull/104693.

* Remove fix for unnecessary linking with libbsd
  (60bf01cb60)

  This was fixed upstream in
  https://github.com/python/cpython/pull/105236.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit e42c845039)
2023-09-14 15:45:05 +02:00
Jeffery To
f22b83f670 python-crcmod: Fix package section
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8e5ca3fc3e)
2023-09-14 21:37:15 +08:00
Jeffery To
f2a59c9163 python-pyserial: Update to 3.5, update list of dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4f3a0fe623)
2023-09-14 21:37:09 +08:00
Jeffery To
1d3737dfc7 python-cryptodomex: Update to 3.18.0, refresh patches
This also updates the list of dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a1b3595550)
2023-09-14 21:37:01 +08:00
Jeffery To
1e5785e169 python-cryptodome: Update to 3.18.0, refresh patches
This also updates the list of dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 03f1f4b9bb)
2023-09-14 21:36:55 +08:00
Jeffery To
1c0e4fc274 ruamel-yaml: Update to 0.17.32, rename source package
This renames the source package to python-ruamel-yaml to match other
Python packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit fdff92f085)
2023-09-14 21:36:49 +08:00
Jeffery To
cedbb68a0b python-zipp: Update to 3.16.2, update list of dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 202140aeff)
2023-09-14 21:36:42 +08:00
Jeffery To
eb4ab356cb python-yaml: Update to 6.0.1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 60315a6638)
2023-09-14 21:36:34 +08:00
Florian Eckert
09f044f981 mwan3: fix mwan3_connected ubus output
During the renameing of mwan3_connected_v4 to mwan3_connected_ipv4 and
mwan3_connected_v6 to mwan3_connected_ipv6 the adjustment in the ubus
call was forgotten. This commit fixes this.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a56e111c49)
2023-09-12 16:07:14 +02:00
Tianling Shen
12d65dece1 Merge pull request #22048 from jefferyto/python-platform-triplet-openwrt-23.05
[openwrt-23.05] python3: Restore platform triplet to paths
2023-09-12 10:52:17 +08:00
Jeffery To
b4aaffc0ec python-zeroconf: Update to 0.97.0, update list of dependencies
The package changed to the poetry-core build backend (and also requiring
python-cython/host).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8957d34d09)
2023-09-11 12:45:30 +02:00
Jeffery To
c876fc96be xmltodict: Update to 0.13.0, rename source package
This renames the source package to python-xmltodict to match other
Python packages.

This also updates the list of dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4872c32580)
2023-09-11 12:45:12 +02:00
Alexandru Ardelean
fe043c069d Merge pull request #22068 from jefferyto/slang2-modules-openwrt-23.05
[openwrt-23.05] slang2: Avoid building dependencies unless necessary, remove pcre module
2023-09-10 20:03:26 +03:00
Alexandru Ardelean
3bd2dc9ef2 Merge pull request #22065 from gladiac/haproxy-2.8.3-openwrt-23.05
[openwrt-23.05] haproxy: update to v2.8.3
2023-09-10 16:10:34 +03:00
Jeffery To
ff68c364d6 slang2: Remove pcre module
pcre is obsolete and upstream has not yet migrated to pcre2.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 106304c988)
2023-09-09 13:15:02 +08:00
Jeffery To
7758a2da40 slang2: Avoid building dependencies unless necessary
This also hides the module packages in menuconfig unless the libslang2
package is selected.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 03ef02f0f4)
2023-09-09 13:14:33 +08:00
Jeffery To
359a6d5117 python-websockets: Update to 11.0.3, update list of dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 98453732e2)
2023-09-08 19:01:04 +08:00
Jeffery To
e47c399cb4 python-wcwidth: Update to 0.2.6
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 3684df0dc3)
2023-09-08 19:00:23 +08:00
Jeffery To
ef04b76dc0 python-voluptuous-serialize: Update to 2.6.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 92d49899e4)
2023-09-08 19:00:11 +08:00
Quintin Hill
9da8115e8f python-ble2mqtt: update to 0.2.0
Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
(cherry picked from commit bfe98f95b6)
2023-09-08 18:59:55 +08:00
Quintin Hill
fe702c9f11 python-dbus-fast: update to 1.94.1
Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
(cherry picked from commit 689f0e0105)
2023-09-08 18:59:55 +08:00
Jeffery To
6bb9bdd5db python-voluptuous: Update to 0.13.1, update list of dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6c7a53bd7d)
2023-09-08 18:59:38 +08:00
Jeffery To
646800830b python-urllib3: Update to 2.0.4
The package changed to the hatchling build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 1b2811920a)
2023-09-08 18:59:28 +08:00
Jeffery To
08b5fe210e python-ubus: Update to 0.1.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 99d8554bcd)
2023-09-08 18:59:15 +08:00
Christian Lachner
0daa650931 haproxy: update to v2.8.3
- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2023-09-07 16:41:52 +02:00
Tianling Shen
c92b5ece16 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a0c6ba40d9)
2023-09-06 11:11:58 +08:00
Tianling Shen
c088a64511 v2raya: Update to 2.2.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 058413daa4)
2023-09-06 11:11:53 +08:00
Tianling Shen
19a2d9abd0 xray-core: Update to 1.8.4
Removed upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3b8921d1ae)
2023-09-06 11:11:26 +08:00
Jianhui Zhao
3edbf6c280 lua-eco: update to 2.5.1
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit 4af428ec71)
2023-09-05 22:39:56 +08:00
Jeffery To
ec9d61450e python3: Restore platform triplet to paths
This removes 014-remove-platform-so-suffix.patch and
016-adjust-config-paths.patch, restoring the platform triplet to paths
for:

* C extensions (*.cpython-311-*.so)

* Build config data directory (/usr/lib/python3.11/config-3.11-*/)

* sysconfig data file (/usr/lib/python3.11/_sysconfigdata_*.py)

Setting `_PYTHON_SYSCONFIGDATA_NAME` during package builds ensures that
sysconfig data for target Python is loaded, in particular so that C
extensions built will have the correct extension / platform triplet.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0fe1011420)
2023-09-05 12:42:50 +08:00
Jeffery To
2438d49f10 python3: Fix/expand platform triplet detection
Currently, configure does not find the correct platform triplet for musl
as the default build/host values passed by OpenWrt buildroot does not
contain the text "linux-musl".

This backports
c163d7f0b6
to add detection for mips soft float and musl.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5a0055df06)
2023-09-05 12:42:32 +08:00
Jeffery To
b8d9ad62e0 python3: Centralize config file adjustments in Build/Install
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b595362b85)
2023-09-05 12:42:09 +08:00
Jeffery To
ae845a260c python: Rework filespec install script
* Support wildcards in install (`+`) paths

* Add fourth parameter to set directory permissions

  If file permissions are given (third parameter), these will now apply
  to files only.

* Add non-recursive set permissions command (`==`)

* Be more strict about filespec format

  Blank lines and lines starting with `#` will be ignored. Other errors
  (unknown command, missing path parameter, etc.) will cause the script
  to exit.

* Be more strict about ensuring paths exist for all commands

* Avoid spawning subshells

This also removes outdated filespec paths in the python3 package; these
paths delete files that are no longer present.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 2ffb87726b)
2023-09-05 12:41:56 +08:00
Jeffery To
1479200790 python3: Fix package descriptions
* Fix default Python package description not included in individual
  package descriptions

* Update default Python package description text (from General Python
  FAQ, "What is Python?")

* Add package descriptions for Python module packages

* Reduce duplication in package titles

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 329f9a1391)
2023-09-05 12:41:29 +08:00
Jeffery To
dc08776ef3 python3: Use regular package recipes for python3 package
There is no need to use Py3Package for python3 as it does not package
any Python files; it is an empty package with dependencies to install
the full Python installation.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 87631ecdd4)
2023-09-05 12:41:10 +08:00
Jan Hoffmann
1ed72c9115 vnstat2: update to version 2.11
This release breaks the noexit patch, because the code for removing old
now returns an error when no interfaces are configured. As it is run on
startup, the daemon exits in this case. To avoid this, add an additional
check so an error is only returned in an actual error case.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>
(cherry picked from commit 9871979707)
2023-09-04 14:29:56 +08:00
Moritz Warning
dc5f8276e5 zerotier: update to 1.12.1
* split up "fix makefile" patch logical distinct parts
* add libatomic dependency needed for prometheus-cpp-lite-1.0
* refresh patch series
* improve warning message in init script

Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit 6cf39ba626)
2023-09-04 14:29:26 +08:00
Jianhui Zhao
8111eaaac7 lua-eco: update to 2.5.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit 1cd4324a0f)
2023-09-04 13:04:51 +08:00
Stan Grishin
e589b76996 Merge pull request #22017 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: initial commit
2023-09-03 18:04:19 -07:00
Stan Grishin
2f416b83c1 Merge pull request #22016 from stangri/openwrt-23.05-https-dns-proxy
[23.05] https-dns-proxy: fix dns resolution not working on boot
2023-09-03 18:03:01 -07:00
Stan Grishin
7a670e1805 adblock-fast: initial commit
* this package replaces simple-adblock package
* it was impossible to keep existing config structure and continue
  improving the simple-adblock the way I wanted, hence the new
  package name
* the migration script for existing simple-adblock config is included in
  the uci-defaults file

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit be69e34ce3)
2023-09-03 20:40:39 +00:00
Stan Grishin
c30599f55d https-dns-proxy: fix dns resolution not working on boot
* fix dns resolution not working on boot
* add hotplug-online script
* reorganizes files/ and Makefile to reflect files destinations

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 9a2c5ae18c)
2023-09-03 20:37:57 +00:00
Mathew McBride
ae8a98055b qemu: enable host support for armsr/armv8
As of OpenWrt main branch commit e505873e65f72 ("armsr: armv8:
enable KVM host") [merged 2023-08-15], armsr/armv8 has
KVM host support. We can now enable QEMU host for this
target.

For example, you can run OpenWrt armsr/armv8 as a guest
like so:
qemu-system-aarch64 -nographic -M virt -cpu host --enable-kvm \
	-bios u-boot.bin -smp 1 -m 1024 \
	-drive file=openwrt-armsr-armv8-generic-ext4-combined.img,format=raw,index=0,media=disk

A compatible u-boot.bin can be obtained from u-boot-qemu_armv8/u-boot.bin
that is built with the armsr target and available from
downloads.openwrt.org.

Signed-off-by: Mathew McBride <matt@traverse.com.au>
(cherry picked from commit 821bbcdf8b)
2023-09-03 22:59:52 +08:00
Jeffery To
8067a8e389 python-wheel: Update to 0.41.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0b99bec49b)
2023-09-03 22:58:11 +08:00
Jeffery To
e7cbf1218c python-pluggy: Update to 1.3.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 88632b7b64)
2023-09-03 22:58:02 +08:00
Jeffery To
8b7cb3b300 mpfr: Update to 4.2.1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5c11c3717a)
2023-09-03 22:57:53 +08:00
Jeffery To
ad909595a5 python-trio: Update to 0.22.2, update list of dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6b6ea7efe1)
2023-09-03 22:57:39 +08:00
Jeffery To
e298edaa84 python-tornado: Update to 6.3.3, update list of dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit e7a8d18385)
2023-09-03 22:57:22 +08:00
Jeffery To
ec47038bc8 python-sqlalchemy: Update to 2.0.20, update list of dependencies
This also adds a build dependency on python-cython/host.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8b6a817af2)
2023-09-03 22:57:11 +08:00
Jeffery To
0df1114500 python-slugify: Update to 8.0.1, update list of dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 1ec68a6e98)
2023-09-03 22:57:01 +08:00
Jeffery To
09ac1b403f python-sentry-sdk: Update to 1.29.2, update list of dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit f279ae9418)
2023-09-03 22:56:45 +08:00
Jeffery To
765c405d91 python-schema: Update to 0.7.5
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8c7709b911)
2023-09-03 22:56:33 +08:00
Jeffery To
c36b0b77b1 python-schedule: Update to 1.2.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 53dadf2c50)
2023-09-03 22:56:24 +08:00
Jeffery To
ce0c8573ed python-rsa: Update to 4.9, update list of dependencies
The package changed to the poetry-core build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a694ed7b0c)
2023-09-03 22:56:16 +08:00
Tianling Shen
18b774218a v2raya: Update to 2.2.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f8082bebbe)
2023-09-03 18:27:48 +08:00
Tianling Shen
8f0f2c9ba2 mpd: Update to 0.23.13
ver 0.23.13 (2023/05/22)
* input
  - curl: fix busy loop after connection failed
  - curl: hide "404" log messages for non-existent ".mpdignore" files
* archive
  - zzip: fix crash bug
* database
  - simple: reveal hidden songs after deleting containing CUE
* decoder
  - ffmpeg: reorder to a lower priority than "gme"
  - gme: require GME 0.6 or later
* output
  - pipewire: fix corruption bug due to missing lock
* Linux
  - shut down if parent process dies in --no-daemon mode
  - determine systemd unit directories via pkg-config
* support libfmt 10

ver 0.23.12 (2023/01/17)
* input
  - curl: require CURL 7.55.0 or later
* decoder
  - mad: fix integer underflow with very small files
* tags
  - fix crash bug due to race condition
* output
  - pipewire: adjust to PipeWire 0.3.64 API change
* fix build failures with GCC 13

Removed upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f43e7a5067)
2023-09-03 18:27:48 +08:00
Luca Barbato
f99d728916 nvme-cli: Fix categorization
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
(cherry picked from commit b5463d16f1)
2023-09-03 18:27:45 +08:00
Robert Marko
a412d35777 mhz: respect CC and CFLAGS passed by buildsystem
It seems that the Makefile has both CC and CFLAGS hardcoded and does not
allow overriding them by ones being passed by the buildsystem.

This works fine until CONFIG_PKG_ASLR_PIE_ALL is selected, then building
will fail with:
arm-openwrt-linux-muslgnueabi/bin/ld.bfd: mhz.o: relocation R_ARM_MOVW_ABS_NC against `a local symbol' can not be used when making a shared object; recompile with -fPIC
arm-openwrt-linux-muslgnueabi/bin/ld.bfd: mhz.o(.text+0x75c): unresolvable R_ARM_CALL relocation against symbol `__aeabi_l2d@@GCC_3.5

So, lets add a patch pending upstream that allows both CC and CFLAGS to be
overriden so that ones passed by the buildsystem are actually respected.

Fixes: 89123b308f ("mhz: add new package")
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit 6c28f46f37)
2023-09-03 10:44:35 +02:00
Josef Schlehofer
2c3ba010cd knot-resolver: update to version 5.7.0
Changelog:
https://www.knot-resolver.cz/2023-01-26-knot-resolver-5.6.0.html
https://www.knot-resolver.cz/2023-08-22-knot-resolver-5.7.0.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a531468114)
2023-09-03 10:03:41 +02:00
Alex Shumsky
f724ad5349 collectd-mod-ipstatistics: fix handling of long /proc lines
`/proc/net/netstat` `TcpExt:` line is 2064 chars long on linux 6.1

Signed-off-by: Alex Shumsky <alexthreed@gmail.com>
[PKG_RELEASE bump added]
(cherry picked from commit b5bf5927f7)
2023-09-02 20:01:09 +03:00
Luca Barbato
4c7a6d751f bottom: New package
Bottom is a top/htop workalike with few additional features, written in
rust.

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
(cherry picked from commit f3a6491674)
2023-09-02 16:22:30 +02:00
Jeffery To
369511a297 CI: Fix finding test script
Currently, the run-test code tries to find the package source directory
based on the directory name only. This fails for the Go compiler package
because there is more than one directory named "golang".

This uses the full path listed in the "Source:" line of the control file
to find the package source directory.

This also:

* Checks for the test script earlier, to avoid installing and removing
  ipk files when there is no test script to be run

* Makes PKG_VERSION parsing more lenient, as the package may not have a
  PKG_RELEASE, e.g. attendedsysupgrade-common

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5422bd6218)
2023-09-02 16:21:28 +02:00
Nuno Gonçalves
97f29998c2 gl-mifi-mcu: remove package as it is device specific and I can't test it anymore
Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>
(cherry picked from commit e95955f40b)
2023-09-02 16:11:34 +02:00
Nuno Gonçalves
5d8780bf12 gl-mifi-mcu: make compatible with newer kernel (fix #21198)
Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>
(cherry picked from commit 9536d28384)
2023-09-02 16:11:28 +02:00
Luca Barbato
0ae68980d7 nvme-cli: Add new package
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
(cherry picked from commit 06e9fdfe00)
2023-09-02 16:10:03 +02:00
Paul Spooren
0a32a6129c prometheus: drop package
The package is terribly outdated and bundling it with the web UI is a
task I don't find myself willing to take. Dropping it.

FIX: #16008

Signed-off-by: Paul Spooren <paul.spooren@rhebo.com>
2023-09-02 16:09:04 +02:00
John Audia
4c4ee8b8f5 tree: bump to 2.1.1
Build system: x86_64
    Build-tested: bcm2711/RPi4B
    Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 58719c0aa4)
2023-09-02 09:08:51 +03:00
Jan Hák
c80493e327 knot: enable QUIC support
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit dea3e7acb6)
2023-09-01 22:10:37 +02:00
Jan Hák
67ec91ab22 knot: update to version 3.3.0
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit e79e441513)
2023-09-01 22:10:29 +02:00
Jan Hák
dd283a56f3 knot: update to version 3.2.9
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit f6aa1198eb)
2023-09-01 22:10:22 +02:00
Jan Hák
999668ac6e knot: update to version 3.2.8
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 9517ef080a)
2023-09-01 22:10:16 +02:00
Jan Hák
a6bac4e4a3 knot: update to version 3.2.7
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 439694a012)
2023-09-01 22:10:10 +02:00
Florian Eckert
87cad3fa0f modemmanager: copy dbus interfaces file to staging
In order to use the dbus interfaces via the command gdbus-codegen, the
xml files must be copied into the building staging directory, so that other
programmes can use them during compilation.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 161fd74fa2)
2023-09-01 09:59:02 +02:00
Florian Eckert
fe9f525891 modemmanager: add setting for allowed and preferred mode
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 015106346c)
2023-09-01 09:58:55 +02:00
Florian Eckert
6e77755115 modemmanager: remove unneeded teardown error reporting
Teardown error reporting is not needed, bacause it overrides init error
reporting.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 5fa043000f)
2023-09-01 09:58:47 +02:00
Florian Eckert
e2761035bc modemmanager: fix white spaces
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit dbf23705c5)
2023-09-01 09:58:39 +02:00
Alex Shumsky
43022cda78 nginx: bump to 1.25.0-4
Signed-off-by: Alex Shumsky <alexthreed@gmail.com>
2023-08-31 19:17:36 -07:00
Alex Shumsky
9f3e67a52a nginx: fix erroneous new line escape in Makefile
Signed-off-by: Alex Shumsky <alexthreed@gmail.com>
2023-08-31 19:17:36 -07:00
Nikos Mavrogiannopoulos
dab745d8ac tang: tang-show-keys defaults on the default 9090 port
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2023-08-31 18:43:28 +02:00
Nikos Mavrogiannopoulos
eb822fe281 tang: tang-show-keys uses wget instead of curl
Resolves: #15592

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2023-08-31 18:43:28 +02:00
Tianling Shen
ae7743ed19 v2raya: Update to 2.2.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a86c47044d)
[added a patch to fix build with Go 1.20]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-08-31 16:10:07 +08:00
Quintin Hill
123d1c4ea9 python-ble2mqtt: update to 0.1.9
Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
(cherry picked from commit 0c93584975)
2023-08-31 16:09:35 +08:00
Quintin Hill
5148922d8e python-dbus-fast: update to 1.93.0
Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
(cherry picked from commit 0ccd512445)
2023-08-31 16:09:35 +08:00
Van Waholtz
7863478067 sing-box: update to 1.4.0
Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 073aae7f4e)
2023-08-30 20:22:10 +08:00
Van Waholtz
ef466651db sing-box: update to 1.4.0-beta.5
Add support for GO 1.21.

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 115e209a74)
2023-08-30 20:22:10 +08:00
Van Waholtz
b7df2d1ce2 sing-box: update to 1.3.0
Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit ae3629f56a)
2023-08-30 20:22:10 +08:00
Nikos Mavrogiannopoulos
2ab4f79922 tang: do not require bash
It is not used by its included scripts.

Resolves: #21799

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2023-08-30 09:27:08 +02:00
Nikos Mavrogiannopoulos
8b7ab56e2d tang: corrected hash for v14
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2023-08-30 09:26:50 +02:00
Stan Grishin
80ccf56dab Merge pull request #21931 from stangri/openwrt-23.05-minipnpd-nftables
[23.05] miniupnpd: remove uci-defaults and fw4-include files for nftables var…
2023-08-29 10:04:36 -07:00
Nikos Mavrogiannopoulos
5b6d6aa668 tang: updated to v14
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2023-08-29 11:35:51 +02:00
Volker Christian
2cba6cd07b file: Fix FTBFS due to missing dependency
Fixes #21583

zstdlib and lzlib support is currently not neccessary for OpenWRT.
Thus, Explicitly disable zstdlib and lzlib as they would be enabled
automatically in case they are already installed.

Signed-off-by: Volker Christian <me@vchrist.at>
(cherry picked from commit 3ee4f030b5)
2023-08-28 08:53:28 +08:00
Volker Christian
d99e9f66cd File: Fix segfault
Executables depending on binary package libmagic segfault in case
package file is not installed. Libmagic needs file
/usr/share/misc/magic to not segfault. Thus, install
/usr/share/misc/magic along with libmagic and not with file.

Signed-off-by: Volker Christian <me@vchrist.at>
(cherry picked from commit 5362b272cb)
2023-08-28 08:53:28 +08:00
Volker Christian
69764b8558 File: Update to version 5.44
Signed-off-by: Volker Christian <me@vchrist.at>
(cherry picked from commit dae4f184f7)
2023-08-28 08:53:28 +08:00
Jeffery To
1ad56abc84 python-setuptools: Update to 68.1.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 09e06f9594)
2023-08-28 08:53:00 +08:00
Jeffery To
88f47ac9fb python-poetry-core: Update to 1.7.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit bc32e54713)
2023-08-28 08:52:52 +08:00
Jeffery To
9e48c6332b python-click: Update to 8.1.7
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit dd5146b208)
2023-08-28 08:52:43 +08:00
Jeffery To
543cdd3c4c python-pytest-xdist: Update to 3.3.1, update list of dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6facae339e)
2023-08-28 08:52:34 +08:00
Jeffery To
9b6dfcd0b4 python-pytest: Update to 7.4.0, update list of dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b130986e17)
2023-08-28 08:52:26 +08:00
Jeffery To
e968854326 python-pyrsistent: Update to 0.19.3, update list of dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 383b8c1658)
2023-08-28 08:52:16 +08:00
Jeffery To
1ee689cd4a python-pyparsing: Update to 3.1.1
The package has changed to the flit-core build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit dbe5283ed0)
2023-08-28 08:52:05 +08:00
Jeffery To
da088866aa python-pyotp: Update to 2.9.0, update list of dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 001c2cbe0d)
2023-08-28 08:51:56 +08:00
Jeffery To
ca82d56d79 python-pyfuse3: Update to 3.3.0, update list of dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a9b23f4683)
2023-08-28 08:51:47 +08:00
Jeffery To
7be0bbd545 python-py: Update to 1.11.0, update list of dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit f9e3847599)
2023-08-28 08:51:36 +08:00
Volker Christian
7f3764293e Nlohmannjson: Update to version 3.11.2
Compile tested: OpenWRT-23.05-rc2, arm_cortex-a7_neon-vfpv4, mips_24kc
Run tested: arm_cortex-a7_neon-vfpv4 (Linksys MR8300), mips_24kc (tplink_archer-a7), OpenWrt 23.05-rc2)

* Update package nlohmannjson to version 3.11.2.
* Version 3.11.2 is source compatible with 3.10.2 so no package should fail to compile
* From version 3.11.2 on forward template declarations are collected in the file
  json_fwd.hpp. The json.hpp still contains all template definitions.
  Because in most compilation units of a software package only the file json_fwd.hpp
  needs to be included, the compilation process is accelerated a lot.

Signed-off-by: Volker Christian <me@vchrist.at>
(cherry picked from commit 8bd6e23fad)
2023-08-27 15:33:28 +08:00
Stan Grishin
ef526b1df6 miniupnpd: remove uci-defaults and fw4-include files for nftables variant
* remove firewall4.include file as it is not needed and procuces a firewall
  error on service miniupnpd restart
* remove the uci-defaults file as its sole purpose was to install the
  firewall include file
* modify the Makefile to reflect the deleted files

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 4c934aea71)
2023-08-26 10:11:49 +00:00
Volker Christian
05bbbb6b53 easyloggingpp: Update version to 9.97.1
Update to version 9.97.1 of easyloggingpp

Changelog from upstream
* Ensuring the build on ARM64 works
* Update gtest and cmake now requires C++14 because of that

Compile tested: arm_cortex-a7_neon-vfpv4, mips_24kc, aarch64_cortex-a53

Run tested: Linksys MR8300 (arm_cortex-a7_neon-vfpv4)
            GL.iNet GL-A1800 (arm_cortex-a7_neon-vfpv4)
            TP-Link_Archer A7 (mips_24kc),
            GL.iNet GL-MT3000 (aarch64_cortex-a53)

Signed-off-by: Volker Christian <me@vchrist.at>
(cherry picked from commit d8df885ac6)
2023-08-26 10:57:37 +02:00
Volker Christian
c74e72580b easyloggingpp: Add package
Maintainer: me@vchrist.at
Compile tested: OpenWRT-23.05-rc2, arm_cortex-a7_neon-vfpv4, mips_24kc
Run tested: arm_cortex-a7_neon-vfpv4 (Linksys MR8300), mips_24kc (tplink_archer-a7), OpenWrt 23.05-rc2

Description:
Easylogging++ is single header efficient logging library for C++ applications. It is extremely powerful,
highly extendable and configurable to user's requirements.

Signed-off-by: Volker Christian <me@vchrist.at>
(cherry picked from commit 2611e7c798)
2023-08-26 10:57:37 +02:00
Jianhui Zhao
a56b7d46f5 lua-lsqlite3: add build VARIANT for Lua5.3
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2023-08-26 11:01:09 +08:00
Karl Palsson
dfbf87aa17 net/mosquitto: bump to 2.0.17
This is a security and bug fix release.

Security:
- CVE-2023-28366: Fix memory leak in broker when clients send multiple QoS 2
  messages with the same message ID, but then never respond to the PUBREC
  commands.
- CVE-2023-0809: Fix excessive memory being allocated based on malicious
  initial packets that are not CONNECT packets.
- CVE-2023-3592: Fix memory leak when clients send v5 CONNECT packets with a
  will message that contains invalid property types.
- Broker will now reject Will messages that attempt to publish to $CONTROL/.
- Broker now validates usernames provided in a TLS certificate or TLS-PSK
  identity are valid UTF-8.
- Fix potential crash when loading invalid persistence file.
- Library will no longer allow single level wildcard certificates, e.g. *.com

Bugfixes of note or relevance to OpenWrt:
- Fix bridges with non-matching cleansession/local_cleansession being expired
  on start after restoring from persistence. Closes #2634.
Client library:
- Use CLOCK_BOOTTIME when available, to keep track of time. This solves the
  problem of the client OS sleeping and the client hence not being able to
  calculate the actual time for keepalive purposes. Closes #2760.

Full changelog available at: https://github.com/eclipse/mosquitto/blob/v2.0.16/ChangeLog.txt
plus: https://github.com/eclipse/mosquitto/blob/v2.0.17/ChangeLog.txt
(2.0.17 fixes regressions from the 2.0.16 release)

Signed-off-by: Karl Palsson <karlp@tweak.au>
2023-08-23 20:39:30 +00:00
Perry Melange
fe5ab80fbd tunneldigger-broker: update to v0.4.0
Include new hook script to build

Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>
(cherry picked from commit 93a102e21a)
2023-08-23 13:45:26 +02:00
Perry Melange
411e11393c tunneldigger-broker: add rate-limit hook
Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>
(cherry picked from commit 0d1085fe9e)
2023-08-23 13:45:26 +02:00
Perry Melange
00fc9da4ef tunneldigger-broker: add option to isolate bridge ports
Add new option to a config bridge section to indicate
if a bridge port added to the bridge should be isolated
or not.  The default is 0 (no isolation).

example

config bridge
     option interface 'br-mybridge1446'
     option mtu '1446'
     option isolate '1' # default '0'

Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>
(cherry picked from commit 49cdf15da4)
2023-08-23 13:45:26 +02:00
Perry Melange
e597c3e555 tunneldigger-broker: update lib functions
Use config_foreach instead of config_cb

Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>
(cherry picked from commit ab2b1ade27)
2023-08-23 13:45:26 +02:00
Perry Melange
b4f0ce3d16 tunneldigger-broker: update config file and init for v0.4.0
Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>
(cherry picked from commit 99dfea7730)
2023-08-23 13:45:26 +02:00
Tianling Shen
e77a20e5b5 Revert "tailscale: Update to 1.48.0"
Support for Go 1.20 was removed in 1.48.0+, so
revert this update.

Sorry for the mistake.

This reverts commit 0047d0507d.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-08-23 09:34:11 +08:00
Ray Wang
4cce597a29 natmap: update to 20230820
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit d5b99f9e8a)
2023-08-23 09:23:55 +08:00
Zephyr Lykos
0047d0507d tailscale: Update to 1.48.0
Everything is working on pure upstream code.
Patching is not longer needed.

Added entire /etc/tailscale/ directory to conffiles for persistent ssh
host key & https certificate across sysupgrades.

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
(cherry picked from commit 750faf5942)
2023-08-23 08:24:10 +08:00
Tianling Shen
3da7903aba yq: Update to 4.35.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9c63068154)
2023-08-23 08:24:09 +08:00
Toke Høiland-Jørgensen
37412eec4d sqm-scripts: Bump to v1.6.0
Fixes an issue with DSA switch compatibility

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2023-08-22 14:02:24 +02:00
Quintin Hill
9f4707527e python3-ble2mqtt: update to 0.1.8
Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
(cherry picked from commit 6f80b4ba9a)
2023-08-21 14:23:31 +08:00
Quintin Hill
d95b27ebdf python3-dbus-fast: update to 1.91.2
The patch is no longer required as host setuptools is now new enough.

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
(cherry picked from commit d7a4754b75)
2023-08-21 14:23:31 +08:00
Quintin Hill
e589f76968 python3-aio-mqtt-mod: update to 0.3.4
python3-openssl is now optional.

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
(cherry picked from commit 6eba93c316)
2023-08-21 14:23:31 +08:00
Jeffery To
3ff874ac22 python-trove-classifiers: Update to 2023.8.7
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 3d497b2bc4)
2023-08-21 14:21:40 +08:00
Jeffery To
313a15e123 python-psycopg2: Update to 2.9.7, update list of dependencies
This also adds a source package (python-psycopg2-src).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 3a5f9999ca)
2023-08-21 14:21:31 +08:00
Jeffery To
a640fafc4d python-psutil: Update to 5.9.5, replace patch
100_add_cross_platform_build_ability.patch was submitted upstream in
https://github.com/giampaolo/psutil/pull/2068, but that pull request was
closed without being merged.

This replaces that patch with a simpler version that only updates
setup.py, leaving the run-time library code unchanged.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 56bac94a03)
2023-08-21 14:21:22 +08:00
Jeffery To
e0f59ec277 python-msgpack: Update to 1.0.5, add host Cython dependency
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 53d3fc6f44)
2023-08-21 14:21:13 +08:00
Jeffery To
0072b9bc14 python-more-itertools: Update to 10.1.0
The package has changed to the flit-core build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 96880b435b)
2023-08-21 14:20:57 +08:00
Jeffery To
5fcb659fd8 python-distro: Update to 1.8.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0068a50193)
2023-08-21 14:20:49 +08:00
Jianhui Zhao
7f33165dfb lua-eco: update to 2.4.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2023-08-21 14:20:07 +08:00
Tianling Shen
f84124d247 dnslookup: Update to 1.9.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit eb2fe11957)
2023-08-20 21:39:02 +08:00
Tianling Shen
bbad517d8d dnsproxy: Update to 0.54.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f464134262)
2023-08-20 21:39:02 +08:00
Jonas Jelonek
7b531ac66f rust: fix host build on aarch64 darwin
rust/host failed to compile on macOS running on Apple Silicon M1 Pro
because the host target triple is autogenerated to be
'arm64-unknown-linux-'. Rust doesn't have such a target triple, thus the
build fails because there are no pre-built artifacts for bootstrapping.

Fix this by setting RUSTC_HOST_ARCH to 'aarch64-apple-darwin' in case
our host is HOST_ARCH=arm64 and HOST_OS=darwin.

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
(squashed 105fa3920e and c287e98af2)
2023-08-20 21:37:07 +08:00
Hannu Nyman
aeebe35c72 xz: Update to 5.4.4
Update xz

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 0985b4004d)
2023-08-19 14:07:48 +03:00
Leon M. Busch-George
fa8c4eadc5 wget: use pcre2
Pcre (1) is unmaintained and reached its end of life in 2021.
The base system provides pcre2 exclusively since May.

Signed-off-by: Leon M. Busch-George <leon@georgemail.eu>
(cherry picked from commit 379946951c)
2023-08-19 14:05:28 +03:00
Josef Schlehofer
8408cd95eb Merge pull request #21847 from jefferyto/python-markdown-3.4.4-openwrt-23.05
[openwrt-23.05] python-markdown: Update to 3.4.4, update list of dependencies
2023-08-18 12:55:09 +02:00
Jeffery To
0d6197a28b python-markdown: Update to 3.4.4, update list of dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit ec19051980)
2023-08-17 19:29:08 +08:00
Jeffery To
f76f1d38b3 python-netdisco: Update to 3.0.0, update list of dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit da25e99725)
2023-08-17 18:52:03 +08:00
Jeffery To
561a1006c2 python-multidict: Update to 6.0.4, update list of dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d219b6d28f)
2023-08-17 18:51:53 +08:00
Jeffery To
d7eb24c8d6 python-iniconfig: Update to 2.0.0
The package changed to the hatchling build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8a8991dfbf)
2023-08-17 18:51:43 +08:00
Jeffery To
9c6df5fefe python-jsonpath-ng: Update to 1.5.3
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8bf67793bc)
2023-08-17 18:51:33 +08:00
Jeffery To
1ff50ab61a python-jmespath: Update to 1.0.1
This also updates the Python dependency from python3 to python3-light.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit cde28d04e6)
2023-08-17 18:51:23 +08:00
Jeffery To
d78b56ade5 python-intelhex: Update to 2.3.0
This version includes the fix from the removed patch.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0bcbdf129b)
2023-08-17 18:51:14 +08:00
Jeffery To
8bdd85f48e python-influxdb: Update to 5.3.1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit f477ad0ef9)
2023-08-17 18:51:05 +08:00
Stan Grishin
1507d0a509 Merge pull request #21830 from stangri/openwrt-23.05-simple-adblock
[23.05] simple-adblock: bugfixes for uci_load_validate
2023-08-16 13:42:48 -07:00
Tianling Shen
ea0b97c08e reptyr: Update to 0.10.0
* 0.10.0 (Jun 04, 2023)
 - Add arm7 and aarch64 support for FreeBSD

* 0.9.0 (Jun 12, 2022)
 - Add RISCV64 support on Linux
 - Fix tty-stealing on PowerPC

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4792b6405b)
2023-08-16 11:36:36 +02:00
Stan Grishin
0ab519e25c simple-adblock: bugfixes for uci_load_validate
* fix validation for force_dns_port when missing in config
* fix validation for dns_instance when * or - are used

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit ad8aa084c1)
2023-08-15 16:33:58 +00:00
Tianling Shen
8dad7239c5 ruby: fix riscv64 build
Fix build by adding missing macros.

The patch is taken from:
https://lists.openembedded.org/g/openembedded-core/message/161168

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 565e79e736)
2023-08-15 09:42:26 +02:00
Tianling Shen
c53adb1a74 v2raya: Update to 2.1.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 162ca6ad7f)
2023-08-13 17:56:34 +08:00
Georgi Valkov
0878b2e812 gptfdisk: fix incorrect TARGET on non-linux host
Fixed by defining TARGET=linux, as suggested in the README.

By default TARGET is derived from the host using uname -s,
which produces build errors on a non-linux hosts:

TARGET is not set; trying to determine target based on host OS....
Detected OS is Darwin
Build target is macos
...
x86_64-openwrt-linux-musl-g++: error: unrecognized command-line option '-arch'

Helped-by: Tianling Shen <cnsztl@immortalwrt.org>
Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
(cherry picked from commit 94315cfaa8)
2023-08-13 17:56:33 +08:00
Jeffery To
a43594a782 python-ifaddr: Update to 0.2.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit fbc3629eca)
2023-08-13 10:52:56 +08:00
Jeffery To
51c713142d python-click: Update to 8.1.6
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d86deca765)
2023-08-13 10:52:48 +08:00
Jeffery To
547270f50b python-wheel: Update to 0.41.1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit aa6aa15f4b)
2023-08-13 10:52:39 +08:00
Jeffery To
c54755bc6b python-flask-login: Update to 0.6.2, update list of dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d91ddd5d75)
2023-08-13 10:52:31 +08:00
Jeffery To
6bf603ac7a python-flask-httpauth: Update to 4.8.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit f5411f260a)
2023-08-13 10:52:22 +08:00
Jeffery To
547cb29769 python-flask-socketio: Update to 5.3.5
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 58c9de9ede)
2023-08-13 10:52:14 +08:00
Jeffery To
4e5f8146fe python-socketio: Update to 5.8.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 7e931594c7)
2023-08-13 10:52:05 +08:00
Jeffery To
507a56d7cc python-engineio: Update to 4.5.1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 466dfed2f2)
2023-08-13 10:51:56 +08:00
Josef Schlehofer
29692c097f Merge pull request #21775 from jefferyto/python-flask-seasurf-1.1.1-openwrt-23.05
[openwrt-23.05] python-flask-seasurf: Update to 1.1.1
2023-08-12 23:57:55 +02:00
Josef Schlehofer
02a68cbbc4 Merge pull request #21772 from jefferyto/python-flask-babel-3.1.0-openwrt-23.05
[openwrt-23.05] python-flask-babel: Update to 3.1.0
2023-08-12 23:57:31 +02:00
Christian Lachner
f34fa4101b haproxy: update to v2.8.2
- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2023-08-11 17:23:57 +03:00
Florian Eckert
7ceceaec90 collectd: fix implicit dependence for collect-mod-disk to libudev
Fix missing dependencies for 'collectd-mod-disk' to 'libudev' if
collectd-mod-smart is not enabled.

Package collectd-mod-disk is missing dependencies for the following
libraries:
libudev.so.1

The package 'collect-mod-disk' is now build always with 'libudev' support,
independent of the enable/disable build state of 'collectd-mod-smart'.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 79201361b0)
2023-08-11 10:06:06 +02:00
Hirokazu MORIKAWA
4b93f12b43 node: August 2023 Security Releases
Update to v18.17.1
This is a security release.

Notable Changes
The following CVEs are fixed in this release:
* CVE-2023-32002: Policies can be bypassed via Module._load (High)
* CVE-2023-32006: Policies can be bypassed by module.constructor.createRequire (Medium)
* CVE-2023-32559: Policies can be bypassed via process.binding (Medium)
* OpenSSL Security Releases  (Depends on shared library provided by OpenWrt)
    * OpenSSL security advisory 14th July.
    * OpenSSL security advisory 19th July.
    * OpenSSL security advisory 31st July

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 153f0b3d83)
2023-08-10 20:03:26 +03:00
Miroslav Lichvar
774d1a4760 chrony: update to 4.4
Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2023-08-10 20:01:59 +03:00
Jeffery To
cab3965b86 python-flask-seasurf: Update to 1.1.1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 68c434dd6a)
2023-08-10 11:57:21 +08:00
Jeffery To
374a67709c python-flask-babel: Update to 3.1.0
The package changed to the poetry-core build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit c579a4ab0e)
2023-08-10 11:49:02 +08:00
Jeffery To
e1015ca0ec Merge pull request #21765 from fractalclone/openwrt-23.05
micropython: fix stackctrl compilation for GCC 13
2023-08-09 10:54:44 +08:00
Stan Grishin
4928e1362b Merge pull request #21763 from stangri/openwrt-23.05-simple-adblock
[23.05] simple-adblock: force_dns_port validation bugfix
2023-08-08 13:15:44 -07:00
Stan Grishin
5c5fe618df Merge pull request #21695 from stangri/openwrt-23.05-curl
[23.05] curl: update to 8.2.1
2023-08-08 13:15:28 -07:00
Jean-Paul Etienne
5abd8a9fe6 micropython: fix stackctrl compilation for GCC 13
On host PC using GCC 13, stackctrl.c fails to compile
with the following error:

../py/stackctrl.c: In function 'mp_stack_ctrl_init':
../py/stackctrl.c:32:32: error: storing the address of
   local variable 'stack_dummy'
   in 'mp_state_ctx.thread.stack_top' [-Werror=dangling-pointer=]
   32 |     MP_STATE_THREAD(stack_top) = (char *)&stack_dummy;
../py/stackctrl.c:31:18: note: 'stack_dummy' declared here
   31 |     volatile int stack_dummy;
      |                  ^~~~~~~~~~~
In file included from ../py/runtime.h:29,
                 from ../py/stackctrl.c:27:
../py/mpstate.h:296:23: note: 'mp_state_ctx' declared here
  296 | extern mp_state_ctx_t mp_state_ctx;
      |                       ^~~~~~~~~~~~
cc1: all warnings being treated as errors

Fixed accordingly by ignoring -dangling-pointer warning
inside mp_stack_ctrl_init function.

Signed-off-by: Jean-Paul Etienne <fractalclone@gmail.com>
(cherry picked from commit 4c1b74ede3)
2023-08-08 15:38:50 +02:00
Stan Grishin
cf6bbe9511 simple-adblock: force_dns_port validation bugfix
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 173d163f09)
2023-08-08 09:33:29 +00:00
R4SAS I2P
b036e052b4 i2pd: update to version 2.48.0
Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
(cherry picked from commit d7b0d3f83d)
2023-08-07 20:22:40 +08:00
Florian Eckert
5780816266 collectd: unify configure args handling for collectd-mod-smart
If 'collectd-mod-smart' is not enabled, the use of lubudev does not need
to be explicitly disabled. This library could be a dependency for other
modules in the future. If this is explicitly disabled, then the other
module cannot be built.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 1aac8ada87)
2023-08-07 13:48:07 +02:00
Florian Eckert
a9b6b04401 collectd: fix ampq1 vs. amqp1 typo
The name 'ampq1' does not exist.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 730806a51e)
2023-08-07 13:47:52 +02:00
Alexandros Kosiaris
ed5ccb6867 collectd: Support config of mqtt plugin
mqtt plugin is already built and shipped in
collectd-mod-mqtt, however it is not possible to configure it via
uci currently, instead having to rely on populating the config file manually.

Add support by adding 2 functions, process_mqtt() and
process_mqtt_block(). First one just enables/disables the plugin.
The second one, in the spirit of the curl plugin, adds support for
populating multiple <Publish> and <Subscribe> blocks under <Plugin mqtt>
with support for some parameters. Those are:

* blocktype. Publish or Subscribe. Mandatory
* name. The name of the block. Mandatory
* Host. Mandatory
* Port. Optional
* User. Optional
* Password. Optional
* ClientId. Optional
* QoS. Optional
* Prefix. Optional
* Retain. Optional
* StoreRates. Optional
* CleanSession. Optional
* Topic. Optional

Bump PKG_RELEASE per comments in PR

Signed-off-by: Alexandros Kosiaris <akosiaris@gmail.com>
(cherry picked from commit 530ccbc90d)
2023-08-07 13:47:48 +02:00
Tianling Shen
e4c4fdd370 Merge pull request #21746 from jefferyto/golang-1.20.7-openwrt-23.05
[openwrt-23.05] golang: Update to 1.20.7
2023-08-07 16:53:05 +08:00
Jeffery To
b3e4aae821 python-pathspec: Update to 0.11.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 31d02be16a)
2023-08-07 10:05:40 +08:00
Jeffery To
8b7150ee86 python-editables: Update to 0.5
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 360427948e)
2023-08-07 10:05:30 +08:00
Jeffery To
5032193502 python-docutils: Update to 0.20.1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit c2a725ec00)
2023-08-07 10:05:20 +08:00
Jeffery To
dfc81425a2 python-dns: Update to 2.4.1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 03f78eff74)
2023-08-07 10:05:11 +08:00
Jeffery To
af67aacdcc golang: Update to 1.20.7
Includes fix for CVE-2023-29409 (crypto/tls: verifying certificate
chains containing large RSA keys is slow).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit fb9c8f8b89)
2023-08-07 10:05:08 +08:00
Jeffery To
1fe200c370 python-contextlib2: Update to 21.6.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit c0552ae0d4)
2023-08-07 10:05:02 +08:00
Jeffery To
81a90efee4 python-colorama: Update to 0.4.6
The package changed to the hatchling build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 54f9f2777c)
2023-08-07 10:04:52 +08:00
Jeffery To
8e648c52be python-ciso8601: Update to 2.3.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 197c34e62d)
2023-08-07 10:04:44 +08:00
Jeffery To
9e98aaa1f3 python-cachetools: Update to 5.3.1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 2eabda9a1e)
2023-08-07 10:04:35 +08:00
Jeffery To
957b4c9364 python-cachelib: Update to 0.10.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d6d4222e97)
2023-08-07 10:04:27 +08:00
Tianling Shen
864202a142 v2fly-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1003f84ead)
2023-08-07 10:03:17 +08:00
Tianling Shen
fd51f5bc4e v2raya: Update to 2.1.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4faa0e88fe)
2023-08-07 10:03:13 +08:00
Tianling Shen
9242ec9eba cloudreve: Update to 3.8.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d1f4f875fa)
2023-08-07 10:03:06 +08:00
Tianling Shen
d61b48687f rust: Update to 1.71.1
Version 1.71.1 (2023-08-03)
===========================

- Fix CVE-2023-38497: Cargo did not respect the umask when extracting dependencies
- Fix bash completion for users of Rustup
- Do not show `suspicious_double_ref_op` lint when calling `borrow()`
- Fix ICE: substitute types before checking inlining compatibility
- Fix ICE: don't use `can_eq` in `derive(..)` suggestion for missing method
- Fix building Rust 1.71.0 from the source tarball

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a896412813)
2023-08-07 08:41:04 +08:00
Eneas U de Queiroz
8617ce7b3a Merge pull request #21714 from jefferyto/python-certifi-2023.7.22-openwrt-23.05 2023-08-04 06:45:16 -03:00
Gerard Ryan
420aee737e docker: Update to 24.0.5
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit be96e7db6b)
2023-08-04 15:33:14 +08:00
Gerard Ryan
821ba40f1b dockerd: Update to 24.0.5
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 51d6788aed)
2023-08-04 15:33:14 +08:00
Gerard Ryan
6214bd8034 runc: Update to 1.1.8 for docker v24.0.5
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 276e9a7722)
2023-08-04 15:33:14 +08:00
Jeffery To
0fd40d720e python-certifi: Update to 2023.7.22
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 008de77a8a)
2023-08-04 12:10:04 +08:00
Eneas U de Queiroz
56bbcf7acb python-certifi: add github runtime test
This loads the module, which should return the path of the CA bundle
and verifies that the file exists.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 219edcfa31)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-08-04 12:09:41 +08:00
Christian Lachner
4fa7a76eda haproxy: update to v2.8.1
- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2023-08-04 01:47:18 +08:00
Stan Grishin
6167e7a671 curl: update to 8.2.1
* https://curl.se/changes.html#8_2_1

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 82dbc1c4d5)
2023-08-01 05:29:05 +00:00
Stan Grishin
9ebcce0a0f Merge pull request #21640 from stangri/openwrt-23.05-curl
[23.05] curl: update to 8.2.0
2023-07-31 22:28:11 -07:00
Hirokazu MORIKAWA
8c85e647ec mg: bump to 7.3
Description:
Sync to OpenBSD 7.3

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit e25f57b602)
2023-07-29 04:25:01 +08:00
Jeffery To
4d3faad5f8 python3-maxminddb: Update to 2.4.0, rename source package
This renames the source package to python-maxminddb to match other
Python packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit ca7fdf61dc)
2023-07-27 15:41:35 +08:00
Jeffery To
54bf4e423b python-apipkg: Update to 3.0.1
The package changed to the hatchling build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit bbf35edc5f)
2023-07-25 22:09:14 -07:00
Jeffery To
2aefc5ce97 python-atomicwrites: Update to 1.4.1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d5ac6e103e)
2023-07-25 22:09:01 -07:00
Jeffery To
fa0eb0e202 python-awesomeversion: Update to 23.5.0, update dependencies
The package changed to the poetry-core build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 446e52ab26)
2023-07-25 22:08:36 -07:00
Jeffery To
bfc1fae941 python-awscli: Update to 1.29.7, update dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 211724c3fc)
2023-07-25 22:08:22 -07:00
Jeffery To
26aacc8acf python-boto3: Update to 1.28.7, update dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 182eaed42d)
2023-07-25 22:08:22 -07:00
Jeffery To
8a284c2c20 python-s3transfer: Update to 0.6.1, update dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 1ac094d012)
2023-07-25 22:08:22 -07:00
Jeffery To
73c243c1cb python-botocore: Update to 1.31.7, update dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 3d83c5c8d6)
2023-07-25 22:08:22 -07:00
Jeffery To
4f0e7dccbe python-gnupg: Update to 0.5.1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 787e2ba027)
2023-07-25 22:08:07 -07:00
Jeffery To
402ae679bf python-pip: Update to 23.2.1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 87fe943112)
2023-07-25 22:07:36 -07:00
Jeffery To
78ae5ca6e3 python3-pyroute2: Update to 0.7.9, rename source package
This renames the source package to python-pyroute2 to match other Python
packages.

This also updates/simplifies the package dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit c5c02c060b)
2023-07-25 22:05:38 -07:00
Jeffery To
3146b7246d python-execnet: Update to 2.0.2
The package changed to the hatchling build backend and removed the
dependency on apipkg.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0218c9067a)
2023-07-25 22:05:27 -07:00
Jeffery To
0744bf8e42 python-wheel: Update to 0.41.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6e1785d148)
2023-07-25 22:05:08 -07:00
Jeffery To
429388055a python3-sqlparse: Update to 0.4.4, rename source package
This renames the source package to python-sqlparse to match other Python
packages.

This also updates the build dependencies; package now uses the flit-core
build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit aa44ed23ce)
2023-07-25 22:04:57 -07:00
Josef Schlehofer
472265f6eb Merge pull request #21656 from jefferyto/python-async-timeout-4.0.2-openwrt-23.05
[openwrt-23.05] python-async-timeout: Update to 4.0.2
2023-07-25 12:17:33 +02:00
Josef Schlehofer
8865ceaf67 Merge pull request #21657 from jefferyto/python-aiohttp-3.8.5-openwrt-23.05
[openwrt-23.05] python-aiohttp: Update to 3.8.5, add new dependencies
2023-07-25 12:16:26 +02:00
Jeffery To
b1aff5dfbd python-aiohttp: Update 3.8.5, update dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 2c1b66c886)
2023-07-25 15:41:07 +08:00
Jeffery To
2ea9749ae7 python-aiosignal: Add new package
From the README:

A project to manage callbacks in asyncio projects.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0eabbb8ef7)
2023-07-25 15:40:49 +08:00
Jeffery To
29747a377f python-frozenlist: Add new package
From the README:

frozenlist.FrozenList is a list-like structure which implements
collections.abc.MutableSequence. The list is mutable until
FrozenList.freeze is called, after which list modifications raise
RuntimeError.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9c8e4c4aef)
2023-07-25 15:40:32 +08:00
Jeffery To
ca5184e1f3 python-charset-normalizer: Add new package
From the README:

A library that helps you read text from an unknown charset encoding.
Motivated by chardet, I'm trying to resolve the issue by taking a new
approach. All IANA character set names for which the Python core library
provides codecs are supported.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5ef294f64f)
2023-07-25 15:40:19 +08:00
Jeffery To
305de3544a python-async-timeout: Update to 4.0.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit e0c13a145d)
2023-07-25 15:37:08 +08:00
Alexandru Ardelean
fec71a5c6b python-lxml: bump to 4.9.3
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 6c3899e6a4)
2023-07-24 22:46:57 -07:00
Alexandru Ardelean
526f62733c python-django: bump to 4.2.3
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit a5e58afe19)
2023-07-24 22:46:57 -07:00
Hirokazu MORIKAWA
d6936fabd9 node: bump to v18.17.0
Notable Changes:
*Ada 2.0
 Node.js v18.17.0 comes with the latest version of the URL parser, Ada. This update brings significant performance improvements to URL parsing, including enhancements to the url.domainToASCII and url.domainToUnicode functions in node:url.

*Web Crypto API
 Web Crypto API functions' arguments are now coerced and validated as per their WebIDL definitions like in other Web Crypto API implementations. This further improves interoperability with other implementations of Web Crypto API.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 2282d2e664)
2023-07-25 04:31:22 +08:00
Florian Eckert
55665dda24 modemmanager: improve 'simple connection' option handling
The line to generate the argument list for 'simple connect' is quite
long and is not maintainable. To improve the handling a function
'append_param' was added for appending the 'simple connect' options.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 89391d4213)
2023-07-24 13:54:38 +02:00
Francisco Jose Alvarez
05c047c8fe modemmanager: Adding support for 'allow_roaming' option
Signed-off-by: Francisco Jose Alvarez <francisco.alvarez@galgus.net>
* Update commit head
* Rebase patch to the latest changes
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 7ba2c969b2)
2023-07-24 13:21:45 +02:00
Florian Eckert
e37ed24421 modemmanger: add missing proto_init_update in teardown
Inform netifd with missing 'proto_update', that the interface is not
up anymore.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 2f00e4b8d7)
2023-07-24 13:21:45 +02:00
Florian Eckert
4e94113678 modemmanager: do not set proto_notify_error on teardown
If on teardown the 'proto_notify_error' is set to 'MM_TEARDOWN_IN_PROGRESS',
then an error which is set on 'setup' is not visible in the ubus
network.interface.<iface> status output.

{
  "up": false,
  "pending": false,
  "available": true,
  "autostart": false,
  "dynamic": false,
  "proto": "modemmanager",
  "data": {
  },
  "errors": [
    {
      "subsystem": "dualsim",
      "code": "MM_TEARDOWN_IN_PROGRESS"
    }
  ]
}

It alway shows the code 'MM_TEARDWON_IN_PROGRESS'!

By removing the line 'proto_notify_error "${interface}" MM_TEARDOWN_IN_PROGRESS'
in teardown, the last error is show in the proto stack from setup.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 30911865b2)
2023-07-24 13:21:45 +02:00
Josef Schlehofer
5bfc936b39 Merge pull request #21646 from jefferyto/python3-unidecode-1.3.6-openwrt-23.05
[openwrt-23.05] python3-unidecode: Update to 1.3.6, rename source package
2023-07-24 13:20:59 +02:00
Josef Schlehofer
119f507c55 Merge pull request #21645 from jefferyto/python3-netifaces-0.11.0-openwrt-23.05
[openwrt-23.05] python3-netifaces: Update to 0.11.0, rename source package
2023-07-24 13:15:56 +02:00
Mladen Milinkovic
19985d8a18 modemmanager: support setting plmn
Signed-off-by: Mladen Milinkovic <maxrd2@smoothware.net>
(cherry picked from commit f3943dbb2a)
2023-07-24 12:36:37 +02:00
源 文雨
fb4b7a4aaa base16384: bump to version 2.2.4
Signed-off-by: 源 文雨 <fumiama@foxmail.com>
(cherry picked from commit 95a0e51ba4)
2023-07-24 18:08:12 +08:00
Jeffery To
0ec8567344 python3-unidecode: Update to 1.3.6, rename source package
This renames the source package to python-unidecode to match other
Python packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 35d6cdf8bb)
2023-07-24 15:13:39 +08:00
Jeffery To
b6e47231d9 python3-netifaces: Update to 0.11.0, rename source package
This renames the source package to python-netifaces to match other
Python packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 935f791e76)
2023-07-24 15:10:52 +08:00
Stan Grishin
34f262e23f Merge pull request #21633 from stangri/openwrt-23.05-https-dns-proxy
[23.05] https-dns-proxy: improve CLI messaging
2023-07-23 08:53:03 -07:00
Stan Grishin
0a1a4f6cbd Merge pull request #21432 from stangri/openwrt-23.05-nebula
[23.05] nebula: update to 1.7.2 (and cosmetic fixes)
2023-07-23 08:52:44 -07:00
Stan Grishin
068bba07cf curl: update to 8.2.0
* https://curl.se/changes.html#8_2_0

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit a276cebd9e)
2023-07-23 15:50:30 +00:00
Stan Grishin
60c837a2e3 Merge pull request #21630 from stangri/openwrt-23.05-simple-adblock
[23.05] simple-adblock: dnsmasq access bugfix & misc improvements
2023-07-23 08:14:21 -07:00
Stan Grishin
c85af17242 https-dns-proxy: improve CLI messaging
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 649fbcf9fc)
2023-07-23 05:24:12 +00:00
Stan Grishin
13453ef6bd simple-adblock: dnsmasq access bugfix & misc improvements
* fix permission to dnsmasq files for ad-blocking
* add pause function to pause the ad-blocking temporarily
* introduce pause_timeout option to control default pause time
* update default config and config-update file
* use $param instead of $1 in adb_start()

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit dea274cc33)
2023-07-23 05:18:32 +00:00
Tianling Shen
4d6d2bcc08 rust: put host build dir to target build dir
When user runs `make clean` command, everything in `$(STAGING_DIR)`
(where we installed rust) will be removed, but `$(BUILD_DIR_HOST)`
(where we compiled rust and stored build stage) is untouched.

So when user starts a new build after that, OpenWrt buildroot will
still consider `rust` is installed already, resulting the build error
"cargo: command not found".

Fix this by moving to target build dir as well.

Fixes: f489e019ac ("rust: compile host package per target")

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit efdbac38dc)
2023-07-23 00:53:28 +08:00
Tianling Shen
598286e563 rclone: Update to 1.63.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 34d1c310b3)
2023-07-23 00:53:25 +08:00
Tianling Shen
ce8349208f dnsproxy: Update to 0.52.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit dc3af571d7)
2023-07-23 00:53:21 +08:00
Tianling Shen
3b05ec5bae cloudflared: Update to 2023.7.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 498343e2c0)
2023-07-23 00:53:15 +08:00
Josef Schlehofer
e9a1710ad3 Merge pull request #21573 from 1715173329/2305-adg
[openwrt-23.05] adguardhome: bump to 0.107.33
2023-07-21 12:22:29 +02:00
Josef Schlehofer
d9dda3c3ef Merge pull request #21588 from jefferyto/python-babel-2.12.1-openwrt-23.05
[openwrt-23.05] python-babel: Update to 2.12.1, add host build
2023-07-21 08:24:32 +02:00
Josef Schlehofer
866de77526 Merge pull request #21599 from jefferyto/python-pip-23.2-openwrt-23.05
[openwrt-23.05] python-pip: Update to 23.2
2023-07-21 08:24:18 +02:00
Nick Hainke
d946694cd2 snowflake: update to 2.6.0
Tor projects tries to migrate away from git.torproject.org [0,1]. We
need to adjust PKG_SOURCE and GO_PKG name. Further, we need to backport
patches to fix compiling on riscv64, so add:
- 0001-Bump-minimum-required-version-of-go.patch
- 0002-Update-dependencies.patch

Changelog:
2fa8fd9188

[0] - https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/86
[1] - 82cc0f38f7

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 0281f7594b)
2023-07-19 22:00:41 +02:00
Tianling Shen
9f76dc2e22 rust: Update to 1.71.0
Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 971d326768)
2023-07-18 14:19:00 +01:00
Orne Brocaar
26de69a8f0 rust: compile host package per target
While the compiled binaries are intended to run on the host system, the
rust/host package does include the target matching the configured
OpenWrt target.

If using (for example) ./scripts/env to switch between different
OpenWrt configurations, this will cause issues if the different
configuration is for a different target. In such case there will be a
mismatch between the available Rust target and OpenWrt target and the
following error will be printed:

> error[E0463]: can't find crate for `core`
> note: the `XXX` target may not be installed

This fix will add the RUSTC_TARGET_ARCH as HOST_BUILD_DIR and CARGO_HOME
suffix, such that rust/host will be compiled in case an OpenWrt
configuration change causes the RUSTC_TARGET_ARCH to change.

Fixes: #21530

Signed-off-by: Orne Brocaar <info@brocaar.com>
[Applied Jeffery To's suggestion for build and install path]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f489e019ac)
2023-07-18 14:18:50 +01:00
Tianling Shen
16546572f2 Merge pull request #21587 from jefferyto/python-mako-reimport-openwrt-23.05
[openwrt-23.05] python-mako: Re-import host-only package from abandoned packages repo
2023-07-18 19:12:24 +08:00
Tianling Shen
bbc08887be Merge pull request #21596 from jefferyto/golang-1.20.6-openwrt-23.05
[openwrt-23.05] golang: Update to 1.20.6
2023-07-18 19:11:49 +08:00
Jeffery To
162bb087e6 python-pip: Update to 23.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5e66a69433)
2023-07-18 13:23:30 +08:00
Jeffery To
966ffc5f07 golang: Update to 1.20.6
Includes fix for CVE-2023-29406 (net/http: insufficient sanitization of
Host header).

This also updates the copyright information for various Go packaging
files.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8000a7f769)
2023-07-17 22:07:21 +08:00
Jeffery To
0944649b03 python-babel: Update to 2.12.1, add host build
Also updated dependencies for the new version.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0174cea697)
2023-07-17 13:06:16 +08:00
Jeffery To
39192c3fe0 python-mako: Re-import host-only package from abandoned packages repo
Mako was removed in 60ce07b9a1d5c7a53297f177f10af68f3304be9e; at the
time we were using host pip to install host Python packages and so
having this package was not necessary.

With the move away from host pip and toward proper host packages, it
would be better to have a Mako host-only package here to support the
mesa package in the video feed.

This re-imports the package from the abandoned packages feed, updates
the makefile with current Python package conventions, and updates the
package to the latest version.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 666ea93977)
2023-07-17 12:53:41 +08:00
Dirk Brenken
92e4f64557 banip: release 0.9.0-1
* supports allowing / blocking of certain VLAN forwards in segregated network environments,
   set 'ban_vlanallow', ''ban_vlanblock' accordingly
* simplified the code/JSON to generate/parse the banIP status
* enclose nft related devices in quotation marks , e.g. to handle devices which starts with a number '10g-1'
* made the new vlan options available to LuCI (separate commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1c14eb6d8c)
2023-07-16 16:32:59 +02:00
Dobroslaw Kijowski
0d3b5f2e72 adguardhome: bump to 0.107.33
* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.30
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.31
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.32
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.33

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit 46bf47d855)
2023-07-16 03:10:07 +08:00
Dobroslaw Kijowski
eba581dfe1 adguardhome: bump to 0.107.29
* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.26
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.27
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.28
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.29

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit 684010e9cb)
2023-07-16 03:10:03 +08:00
Tianling Shen
493f151887 yq: Update to 4.34.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1cb2590c17)
2023-07-16 03:08:16 +08:00
Tianling Shen
55f3f6e195 cloudflared: Update to 2023.7.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5e0c715a51)
2023-07-16 03:08:13 +08:00
Tianling Shen
5e87866b6a inih: Update to r57
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 195053fba4)
2023-07-16 03:08:07 +08:00
Tianling Shen
5320cb6371 Merge pull request #21562 from jefferyto/python-cython-0.29.36-openwrt-23.05
[openwrt-23.05] python-cython: Update to 0.29.36
2023-07-16 00:42:11 +08:00
Tianling Shen
7a44f4257c Merge pull request #21564 from jefferyto/python-trove-classifiers-2023.7.6-openwrt-23.05
[openwrt-23.05] python-trove-classifiers: Update to 2023.7.6
2023-07-16 00:41:55 +08:00
Tianling Shen
7b2338bafd Merge pull request #21563 from jefferyto/python-editables-0.4-openwrt-23.05
[openwrt-23.05] python-editables: Update to 0.4
2023-07-16 00:41:49 +08:00
Tianling Shen
a0e8ca4bce Merge pull request #21561 from jefferyto/click-8.1.4-openwrt-23.05
[openwrt-23.05] click: Update to 8.1.4, rename source package
2023-07-16 00:41:29 +08:00
Tianling Shen
80129c442b Merge pull request #21567 from mcha-forks/openwrt-23.05
tailscale: update to 1.44.0
2023-07-15 13:52:36 +08:00
Zephyr Lykos
aa5c60f2a6 tailscale: update to 1.44.0
Signed-off-by: Zephyr Lykos <git@mochaa.ws>
(cherry picked from commit 2ee93efe5d)
2023-07-15 12:19:51 +08:00
Zephyr Lykos
eec6788538 tailscale: update to 1.42.0
Signed-off-by: Zephyr Lykos <git@mochaa.ws>
(cherry picked from commit 3d368ddc35)
2023-07-15 12:19:50 +08:00
Tianling Shen
31e5774876 Merge pull request #21565 from jefferyto/ooniprobe-3.18.0-openwrt-23.05
[openwrt-23.05] ooniprobe: Update to 3.18.0
2023-07-14 14:16:31 +08:00
Michael Heimpold
4958bcd793 Merge pull request #21560 from mhei/23.05-php8-update-to-8.2.8
[23.05] php8: update to 8.2.8
2023-07-14 07:57:19 +02:00
Jeffery To
93c3e4e8c5 ooniprobe: Update to 3.18.0
This version includes support for Go 1.20 (specifically 1.20.5).

This also:

* Adds a workaround for musl 1.2.4 compatibility in mattn/go-sqlite3[1]

* Sets GO_PKG_BUILD_PKG to build the main binary (ooniprobe) only

* Updates the package license; the project was relicensed in 3.13.0[2]

[1]: https://github.com/mattn/go-sqlite3/issues/1164
[2]: https://github.com/ooni/probe-cli/pull/446

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit dc7382ec65)
2023-07-14 13:29:39 +08:00
Jeffery To
caf08c9470 python-trove-classifiers: Update to 2023.7.6
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b68832d51e)
2023-07-14 13:24:29 +08:00
Jeffery To
ff9e6d6621 python-editables: Update to 0.4
The build backend was changed from setuptools to flit-core.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9a5f66acc3)
2023-07-14 13:21:25 +08:00
Jeffery To
e886775079 python-cython: Update to 0.29.36
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 96c4a3f0c7)
2023-07-14 13:18:48 +08:00
Jeffery To
2f54fd20d2 click: Update to 8.1.4, rename source package
This renames the source package to python-click to match other Python
packages.

This also updates the package dependencies, licence file, package title
and description.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5710f272db)
2023-07-14 13:15:25 +08:00
Michael Heimpold
f03f443a13 php8: update to 8.2.8
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 75bd8ebde4)
2023-07-13 20:03:49 +02:00
Dirk Brenken
0ef62efff5 banip: update 0.8.9-4
* made the etag id parsing more bulletproof (to catch unverified etags as well)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 5e2a9f082a)
2023-07-09 07:01:56 +02:00
Dirk Brenken
e0be319e33 banip: update 0.8.9-3
* prevent superflous etag function calls during start action (on start backups will be used anyway)
* changed the ipthreat feed download URL (load a compressed file variant to save bandwidth)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 88e64a2ae4)
2023-07-08 22:07:59 +02:00
Dirk Brenken
3c398d94e3 banip: update 0.8.9-2
* fix a corner case backup issue with empty feed downloads

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 137045faa9)
2023-07-08 22:07:47 +02:00
Dirk Brenken
4130dee324 banip: release 0.8.9-1
* added HTTP ETag or entity tag support to download only ressources that have been updated on the server side,
  to save bandwith and speed up banIP reloads
* added 4 new feeds: binarydefense, bruteforceblock, etcompromised, ipblackhole (see readme)
* updated the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 68cdc3952d)
2023-07-08 22:07:37 +02:00
Christian Marangi
42cf7d0ed9 nginx: don't install all module for FULL variant
We currently have a more or less circular dependency with nginx ssl and
full variant.

FULL variant depends on every nginx module. Every nginx module depends
on nginx-ssl.

Since nginx-full depends on an nginx module, nginx-ssl is installed as
module depends on it and then the installation fails as nginx-full
conflicts with nginx-ssl.

nginx-full in it's meaning is nginx built with every config selected and
it should not have module as dependency. In fact an user should always
install them separetly as while other things, local modification to the
nginx config file are required to include the just installed module.

To fix this circular dependency problem, drop the dependency of every
nginx module for FULL variant.

Fixes: #21300
(cherry picked from commit 3d0183e9c5)
[ fix conflict error and bump pkg release ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-07-07 12:54:59 +02:00
Tianling Shen
74b54c63a1 Merge pull request #21494 from jefferyto/python-typing-extensions-4.7.1-openwrt-23.05
[openwrt-23.05] python-typing-extensions: Update to 4.7.1
2023-07-05 17:28:45 +08:00
Tianling Shen
e0c713717d rclone: Update to 1.63.0
While at it fixed a typo error of license files variable.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 952844c976)
2023-07-05 17:23:53 +08:00
Tianling Shen
6093d25659 dnsproxy: Update to 0.51.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9cf533dffe)
2023-07-05 17:23:48 +08:00
W. Michael Petullo
4e9fc396cb vala: add self as maintainer of unmaintained package
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit ae94714081336622afeeec6e46d441fdb9e015eb)
2023-07-04 16:01:58 +08:00
W. Michael Petullo
0be45b334c vala: patch to circumvent apparent pkgconf bug
There is an apparent bug in pkgconf 1.9 that broke building the OpenWrt
Vala package. This adds a patch to circumvent the bug. For the related
discussion, see:

https://github.com/openwrt/packages/issues/21359

The pkgconf bug appears similar to the one discussed here:

https://github.com/pkgconf/pkgconf/issues/268

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit a7e1ba32fdf4b736a44d467b0f79b7f4665ce32d)
2023-07-04 16:01:58 +08:00
Jeffery To
a100549006 python-typing-extensions: Update to 4.7.1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 207d01c3a9)
2023-07-04 15:08:12 +08:00
Jeffery To
e2e5d7e685 python-markupsafe: Update to 2.1.3, add host build
The host build will be used for mako (to be added later).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit ff51716aaa)
2023-07-03 07:29:29 -07:00
Jeffery To
bc5f6715b0 python-libmodbus: Update to 0.6.2
This also adds a source package (python3-libmodbus-src).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 40b9f05a58)
2023-07-03 07:29:17 -07:00
Jeffery To
79f0dffac2 python-gnupg: Update to 0.5.0
This also removes the dependency on gnupg as there are two packages for
gpg, gnupg and gnupg2; this library should work with either one.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 67af34188d)
2023-07-03 07:29:06 -07:00
Jeffery To
6565e14934 python-service-identity: Update to 23.1.0
This adds new build dependencies as the package switched to
pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit e1ef13a30c)
2023-07-03 07:28:55 -07:00
Jeffery To
e3d543215b python-hatchling: Update to 1.18.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 2ec3b9f095)
2023-07-03 07:28:44 -07:00
Jeffery To
9d2bb1adc1 python-pluggy: Update to 1.2.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit f6190a379b)
2023-07-03 07:28:32 -07:00
Jeffery To
1831e79162 python-werkzeug: Update to 2.3.6
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit acc915083d)
2023-07-03 07:28:15 -07:00
Jeffery To
6dd0844591 python-packages: Take over maintainership from Daniel Golle
This was requested in
https://github.com/openwrt/packages/pull/21227#issuecomment-1567676980.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b5dbf77501)
2023-07-01 04:46:31 -07:00
Salem Huang
0b2f74ab1a netbird: update to 0.21.7
1. Release notes:
   https://github.com/netbirdio/netbird/releases/tag/v0.21.2
   https://github.com/netbirdio/netbird/releases/tag/v0.21.3
   https://github.com/netbirdio/netbird/releases/tag/v0.21.4
   https://github.com/netbirdio/netbird/releases/tag/v0.21.5
   https://github.com/netbirdio/netbird/releases/tag/v0.21.6
   https://github.com/netbirdio/netbird/releases/tag/v0.21.7
2. Update GO_PKG_LDFLAGS, because of 292ee260ad
3. Define the configuration file.

Signed-off-by: Salem Huang <solohoh@hotmail.com>
(cherry picked from commit b9b785b00b)
2023-07-01 04:44:39 -07:00
Jeffery To
9102e05c8e python-setuptools: Update to 68.0.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit c698a615f9)
2023-07-01 04:44:24 -07:00
Dirk Brenken
edf0a232a0 adblock: update to 4.1.5-8
* adapt adguard_tracking source changes

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e1fa285f32)
2023-06-30 07:29:45 +02:00
Tianling Shen
03aa90133d Merge pull request #21436 from jefferyto/selinux-update-openwrt-23.05
[openwrt-23.05] selinux: Update selinux packages to 3.5, setools to 4.4.2, reorganize packages
2023-06-29 03:02:04 +08:00
Jeffery To
10b464ce3b semodule-utils: Update to 3.5, reorganize package
* Add separate packages for each tool (semodule-*)

* Update the semodule-utils package as a meta-package that installs all
  tools, keeping it functionally the same as the current semodule-utils
  package

* Remove host build (not used by any other package)

* Update package titles, descriptions, and license files

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit aa4085a13f)
2023-06-26 12:27:05 +08:00
Jeffery To
73616f30e5 selinux-python: Update to 3.5, reorganize package
* Added packages:

  * python3-seobject

    Contains the seobject.py library file which was previously included
    in selinux-semanage

  * selinux-sepolicy

    Contains the sepolicy and sepolgen tools which were previously
    included in python3-sepolicy

  * selinux-sepolgen-ifgen

    Contains the sepolgen-ifgen tool which was previously included in
    selinux-audit2allow

  * selinux-python

    A meta-package to install all tools

* Change the python3-sepolgen data_dir from /usr/share/sepolgen to
  /etc/sepolgen (updated 0001-sepolgen-adjust-data_dir.patch), and add
  the directory to conffiles

  By default, the sepolgen-ifgen tool writes to a file named
  "interface_info" in the data directory, to be read by the audit2allow
  tool. The header comment in the perm_map file also suggests that the
  file is customizable.

  The best place for these files would be in /var/lib, but /etc is more
  appropriate than /usr.

* Remove gui files from python3-sepolicy (0003-sepolicy-no-gui.patch)

* Fix ModuleNotFoundError raised by sepolicy
  (0004-sepolicy-fix-get_os_version-except.patch)

  Patch has been submitted upstream:
  https://lore.kernel.org/selinux/20230619063217.3165462-1-jeffery.to@gmail.com/

* Update package titles, descriptions, and dependencies

* Use Py3Package to build Python bytecode and source packages

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6bd71dac0c)
2023-06-26 12:26:45 +08:00
Jeffery To
58156ad678 selinux-python: Add default sections for Python and util packages
This also moves the python3-selinux dependency from the default section
into each util package.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 61e79aad69)
2023-06-26 12:26:29 +08:00
Jeffery To
6f185f2c58 selinux-python: Order package sections alphabetically
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 03225ca7b0)
2023-06-26 12:26:18 +08:00
Jeffery To
7d7bd65006 python3-libsemanage: Update to 3.5, rename source/target package
* Rename:

  * Source package from python3-libsemanage to python-semanage
  * Target package from python3-libsemanage to python3-semanage

* Update dependents with new target package name

* Update package title, license files, and dependencies

* Remove Build/InstallDev (files not used by any other package)

* Use Py3Package to build Python bytecode and source packages

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 23ff8177f0)
2023-06-26 12:25:49 +08:00
Jeffery To
513e2e3be1 python3-libselinux: Update to 3.5, rename source/target package
* Rename:

  * Source package from python3-libselinux to python-selinux
  * Target package from python3-libselinux to python3-selinux

* Update dependents with new target package name

* Remove patches:

  * 010-setup-py-custom-cc.patch: LDSHARED is already set as part of
    $(PYTHON3_VARS)

  * 020-Make-use-of-variables-when-defining-libdir-and-inclu.patch: This
    package doesn't install the libselinux.pc file

* Update package title and dependencies

* Remove Build/InstallDev (files not used by any other package)

* Use Py3Package to build Python bytecode and source packages

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a205483547)
2023-06-26 12:25:28 +08:00
Jeffery To
14969da55d setools: Update to 4.4.2, reorganize package
* Add separate packages for each tool (setools-*) and a package for the
  Python bindings (python3-setools)

* Update the setools package as a meta-package that installs all tools,
  keeping it functionally the same as the current setools package

* Remove gui tool (apol) and Python binding (setoolsgui)

* Simplify 030-remove-host-paths.patch (libraries installed by
  Build/InstallDev are placed in $(STAGING_DIR)/usr/lib only)

* Update package titles, descriptions, license, and dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6938f58a45)
2023-06-26 12:23:30 +08:00
Huangbin Zhan
8939b43659 haproxy: update to v2.8.0
- New major LTS release (https://www.mail-archive.com/haproxy@formilux.org/msg43600.html)

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
(cherry picked from commit 3e454f418d)
2023-06-26 11:13:20 +08:00
Stan Grishin
e0df82b5c5 nebula: update to 1.7.2 (and cosmetic fixes)
* update binaries to 1.7.2
* move sharedMemoryOutput variable declaration into output function as it doesn't
  need to be global
* rename parse_yaml function to yaml_parse
* add TODOs for future development

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 204e6076d352d5c7232e18de0fcf58503ef6ae9b)
2023-06-25 18:22:19 +00:00
Dirk Brenken
4ccbbab78f banip: update 0.8.8-2
* process local lists in strict sequential order to prevent possible race conditions
* support ranges in the IP search, too
* fix some minor search issues

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c3084be415)
2023-06-24 13:17:42 +02:00
Dirk Brenken
dd3a67536b banip: release 0.8.8-1
* Support MAC-/IPv4/IPv6 ranges in CIDR notation
* Support  concatenation of local MAC addresses with IPv4/IPv6 addresses, e.g. to enforce dhcp assignments (see readme)
* small fixes & cosmetics
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit b9bd6cdb0d)
2023-06-24 13:17:41 +02:00
Dirk Brenken
d4019d3828 banip: release 0.8.7-1
* Optionally auto-add entire subnets to the blocklist Sets based on an additional RDAP request with the
   monitored suspicious IP, set 'ban_autoblocksubnet' accordingly (disabled by default).
   For more information regarding RDAP see
   https://www.ripe.net/manage-ips-and-asns/db/registration-data-access-protocol-rdap for reference.
* small fixes & cosmetics
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 767d1ec663)
2023-06-24 13:17:41 +02:00
Tianling Shen
5c220eaef7 vsftpd: fix compilation with musl 1.2.4
musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a9cda91502)
2023-06-23 14:16:48 +08:00
Tianling Shen
418725b945 gitlab-runner: Update to 16.0.2
* Added test.sh script
* Fixed build with riscv64
* Passed package version via go ldflags
* Refreshed patches
* Removed useless test binaries from package

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 27b4291bd4)
2023-06-23 14:16:42 +08:00
Quintin Hill
39f49ddb23 python-ble2mqtt: fix installation of python program
This was broken when the init script was added in 408502ee0.

(cherry picked from commit 5cf3046055)
Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
2023-06-22 22:26:31 +08:00
Hirokazu MORIKAWA
01ade55f68 c-ares: bump to 1.19.1
This is a security and bugfix release.

Security
o CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
o CVE-2023-31147. Moderate. Insufficient randomness in generation of DNS
query IDs
o CVE-2023-31130. Moderate. Buffer Underwrite in ares_inet_net_pton()
o CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE during cross
compilation

Fixing libcares.pc
 The pkg-config file libcares.pc in version 1.19.1 has been changed to be unsuitable for OpenWrt
 and causes build errors with Openwrt packages that use libcares.
 For this reason, libcares.pc was replaced.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 4c4d3b9001)
2023-06-22 22:25:50 +08:00
Tianling Shen
1d273f9058 cloudflared: Update to 2023.6.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1aa41e92ac)
2023-06-22 01:41:56 +08:00
Tianling Shen
66e9da0119 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e4a22284cb)
2023-06-22 01:41:50 +08:00
Tianling Shen
7be688fb1c xray-core: update to 1.8.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c912e2bced)
2023-06-22 01:41:46 +08:00
Tianling Shen
a3151ba4bd cloudflared: Update to 2023.6.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 194cf52a82)
2023-06-22 01:41:39 +08:00
Hirokazu MORIKAWA
ca2ac06d28 node: June 20 2023 Security Releases
Update to v18.16.1

The following CVEs are fixed in this release:
* CVE-2023-30581: mainModule.__proto__ Bypass Experimental Policy Mechanism (High)
* CVE-2023-30585: Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium)
* CVE-2023-30588: Process interuption due to invalid Public Key information in x509 certificates (Medium)
* CVE-2023-30589: HTTP Request Smuggling via Empty headers separated by CR (Medium)
* CVE-2023-30590: DiffieHellman does not generate keys after setting a private key (Medium)
* OpenSSL Security Releases (Depends on shared library provided by OpenWrt)
    * OpenSSL security advisory 28th March.
    * OpenSSL security advisory 20th April.
    * OpenSSL security advisory 30th May
* c-ares vulnerabilities: (Depends on shared library provided by OpenWrt)
    * GHSA-9g78-jv2r-p7vc
    * GHSA-8r8p-23f3-64c2
    * GHSA-54xr-f67r-4pc4
    * GHSA-x6mf-cxr9-8q6v

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 286d1d11ae)
2023-06-21 20:48:40 +08:00
Florian Eckert
b8e73f3cfb modemmanager: if an alias name is used do not check sysfs path
If an alias name is used for the modem, then a check if the device exists
in sysfs does not work. To fix this remove the check if the sysfs device
exists. The protocoll handler already checks if the modem is responsible
for this device on the next line.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit fd63e400ba)
2023-06-21 13:45:16 +02:00
Florian Eckert
66f68a1d5b modemmanager: do not cache virtual device events
On small systems with many virtual devices, the modem manager sometimes
could not start because it took too long until all devices for the modem
were recognised. This is because all system events that are stored in
the file events.cache have to be processed. To speed up the processing,
all devices under /sys/devices/virtual are now filtered out so that they
do not have to be processed.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit e66fead6d4)
2023-06-21 13:44:33 +02:00
Stan Grishin
8968189deb Merge pull request #21413 from stangri/openwrt-23.05-https-dns-proxy
[23.05] https-dns-proxy: update to 2023-05-25-2
2023-06-20 09:58:14 -06:00
Gerard Ryan
fdc95615da dockerd: Update to 24.0.2
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 17589190e5)
2023-06-20 23:51:18 +08:00
Gerard Ryan
4d17ca9351 docker: Update to 24.0.2
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit b089ccb083)
2023-06-20 23:51:18 +08:00
Gerard Ryan
1777de8171 containerd: Update to 1.7.1 for docker 24.0.2
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit e1e05fef02)
2023-06-20 23:51:18 +08:00
Gerard Ryan
c925a04341 runc: Update to 1.1.7 for docker 24.0.2
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 754db89160)
2023-06-20 23:51:18 +08:00
Stan Grishin
a53a4236e3 Merge pull request #21284 from stangri/openwrt-23.05-curl
[23.05] curl: update to 8.1.2
2023-06-19 21:00:03 -06:00
Stan Grishin
bdec9d1bd4 https-dns-proxy: update to 2023-05-25-2
bugfix: proper mdns object creation
bugfix: prevent fw errors by allowing custom interfaces in config

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit a31640ac7c)
2023-06-20 02:10:26 +00:00
Eneas U de Queiroz
771e7385ea gost_engine: disable tests, reset patches dir
Tests are breaking compilation for mipsel targets because of the removal
of the sysmips call.  Let's just not build them.

While at it, remove patches from 1.1 version and move the current ones
to the default 'patches' directory.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 085dc8d965)
2023-06-19 16:59:26 +08:00
Hirokazu MORIKAWA
13fe4f122b libuv: bump to 1.45.0
1.45.0
* linux: introduce io_uring support
* src: add new metrics APIs
* unix,win: give thread pool threads an 8 MB stack
* win,unix: change execution order of timers

1.44.2
* loop: better align order-of-events behavior between platforms
* zos: fix fs event not fired if the watched file is moved/removed/recreated
* win: Fix pipe resource leak if closed during connect (and other bugs)
* zos: don't error when killing a zombie process
* macos: avoid posix_spawnp() cwd bug
* kqueue: skip EVFILT_PROC events when invalidating events for an fd.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit cf7e9a77c9)
2023-06-19 14:45:32 +08:00
Tianling Shen
921dd5085b CI: update build architectures
- armvirt target has been renamed to armsr (Arm SystemReady) [1].
- armsr-armv8 has been switched to aarch64_generic architecture [2].

1. 40b02a2301
2. e0f06ddc23

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit bf88b371c5)
2023-06-19 14:40:57 +08:00
Tianling Shen
351a9fa13e qemu: change references from armvirt to armsr
armvirt target has been renamed to armsr (Arm SystemReady) [1],
so the dependency need to be changed as well.

40b02a2301

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e007556915)
2023-06-19 14:40:57 +08:00
Tianling Shen
a376663cb3 collectd: change references from armvirt to armsr
armvirt target has been renamed to armsr (Arm SystemReady) [1],
so the dependency need to be changed as well.

1. 40b02a2301

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 21538459c2)
2023-06-19 14:40:57 +08:00
Jeffery To
b724fc9801 Merge pull request #21396 from 1715173329/of/packr
[openwrt-23.05] packr: remove package
2023-06-19 10:19:44 +08:00
Robert Marko
2b17f65ec6 mhz: add new package
mhz is a tool for mathematically calculating the current CPU frequency, it
has proven to be a really good help while developing CPU frequency scaling
solutions as it allows to independently prove that scaling actually works.

Now that the author has added a license we can package it for the all to
use.

Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit 89123b308f)
2023-06-18 08:43:25 +02:00
Hirokazu MORIKAWA
3bd3ae1489 icu: bump to 73.2
ICU 73.2 updates to CLDR 43.1 locale data. These are maintenance releases for ICU 73 and CLDR 43, with limited sets of bug fixes and no API or structural changes.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit a5e21caa82)
2023-06-17 16:33:50 +08:00
Tianling Shen
7d07fac8bc packr: remove package
In Go 1.18+ embedded files is natively supported, so this package
is useless now. It has been archived on Jun 2022 and failed to build
on the riscv64 target.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 92059f19b0)
2023-06-17 13:56:20 +08:00
Michael Heimpold
c027cb3e81 Merge pull request #21381 from mhei/23.05-php8-update-to-8.2.7
[23.05] php8: update to 8.2.7
2023-06-16 08:08:19 +02:00
Quintin Hill
e562fd7569 python-ble2mqtt: update to 0.1.7
(cherry picked from commit b5ae4fc15c)
Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
2023-06-16 12:31:31 +08:00
Quintin Hill
3d15816248 python-bleak: upgrade to 0.20.2
(cherry picked from commit e948029331)
Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
2023-06-16 12:31:31 +08:00
Quintin Hill
e299e944bc python-dbus-fast: update to 1.86.0
(cherry picked from commit c5988895b4)
Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
2023-06-16 12:31:31 +08:00
Michael Heimpold
48103fdaff php8: update to 8.2.7
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 1db2070f00)
2023-06-15 21:20:27 +02:00
Hirokazu MORIKAWA
e04d159909 libmraa: riscv64 not supported
Addresses buildbot errors

> CMake Error at CMakeLists.txt:193 (message):
>  Only x86, arm, mips, PERIPHERALMAN and mock platforms currently supported

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 8b777d2ec6)
2023-06-15 21:01:11 +08:00
Tianling Shen
312889a2bb rust: enable riscv64 support
rust natively supports riscv64 so let's enable it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 7ace3bb7d6)
2023-06-15 21:01:11 +08:00
Jeffery To
33b4c76397 golang: Enable riscv64 for Go compiler and packages
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 3906e54c08)
2023-06-15 21:01:11 +08:00
Jeffery To
2d49d82008 CI: Add build test for riscv64_riscv64
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 3b59118c4f)
2023-06-15 21:01:11 +08:00
Jeffery To
7dbb3b96de CI: Sort build architectures in alphabetical order
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 1651f7f16d)
2023-06-15 21:01:11 +08:00
Christian Marangi
891612663c CI: add concurrency rules to skip redundant build
Add concurrency rules to skip redundant build to skip extra build test
on force push on pull request.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit d26e21ef40)
2023-06-15 21:01:11 +08:00
Oskari Rauta
95e769fabd mtools: update to version 4.0.43
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit f142b1e002)
2023-06-15 02:17:16 +08:00
Oskari Rauta
63d584a892 netavark: update to v1.6.0
netavark v1.6.0 was released, so instead of using
git version, use release. Does not contain very
much of changes, but list is available from netavark's
commit log.

Software now comes with additional tool named
netavark-dhcp-proxy-client which is now included
in package.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit da8c4ee3b8)
2023-06-15 02:17:04 +08:00
Oskari Rauta
6d9305b4e8 podman: update to v4.5.1
Contains several bug fixes.
Package now contains additional tool quadlet.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 4f8c885fb1)
2023-06-15 02:17:00 +08:00
Oskari Rauta
642e738575 aardvark-dns: update to v1.6.0
aardvark-dns v1.6.0 was released,
so instead of using git version, use release -
similarly like netavark.
Very much hasn't changed but list of changes
is in git commit log of aardvark-dns.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit b6c2ed0b8d)
2023-06-15 02:16:52 +08:00
Oskari Rauta
f62c779bc9 parted: update to v3.6.0
Lot's of changes, but no online release notes
available, check ChangeLog file once extracted
if necessary

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 6117fb98cc)
2023-06-15 02:16:48 +08:00
Oskari Rauta
40d8c6a9ab crun: update v1.8.5
Moved to from git to release version,
but release version does not have submodule
libocispec included, so additional download added.

Release notes: https://github.com/containers/crun/releases

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 6b75cb2860)
2023-06-15 02:16:44 +08:00
Oskari Rauta
6b87b20785 gnu-efi: update to version 3.0.17
update library + add new package containing efi programs
provided by gnu-efi library.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 232b73ed9a)
2023-06-15 02:16:24 +08:00
Oskari Rauta
f4daf46d64 netbird: update to 0.21.1
Release notes: https://github.com/netbirdio/netbird/releases

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 9bc2733f31)
2023-06-15 02:16:17 +08:00
Nick Hainke
1ee1f6a1c6 gpsd: update to 3.25
Release Information:
https://gitlab.com/gpsd/gpsd/-/blob/release-3.25/NEWS?ref_type=tags

Remove the backport that is now contained in the release:
- 003_sconscript-cross-platform-build-support.patch

Latest olsrd version needs this bump.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 234b435725)
2023-06-14 07:52:20 +02:00
Tianling Shen
23dec767fa cloudreve: Update to 3.8.0
- Fixed packing web frontend assets
- Enabled build for riscv64

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 27e6796a83)
2023-06-14 13:48:02 +08:00
Kuan-Yi Li
7d5fc0878e treewide: remove COMMITCOUNT
Automatically compute and substitute current values for all
$(COMMITCOUNT) instances as this feature is deprecated and shouldn't be
used.

Based on commit 0c10c224be:

Change COMMITCOUNT in rules.mk to:
```
COMMITCOUNT = $(if $(DUMP),0,$(shell sed -i "s/\$$(COMMITCOUNT)/$(call commitcount)/" $(CURDIR)/Makefile))
```

then update all affected packages by:
```
for i in $(git -C feeds/packages grep -l COMMITCOUNT | sed 's^.*/\([^/]*\)/Makefile^\1^';);
do
	make package/$i/clean
done
```

Signed-off-by: Kuan-Yi Li <kyli@abysm.org>
(cherry picked from commit ba75322534)
2023-06-14 13:47:52 +08:00
Tianling Shen
84a7e3e6d8 dnsproxy: Update to 0.50.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit eda669c819)
2023-06-14 13:47:46 +08:00
Josef Schlehofer
064cb6ab18 Merge pull request #21360 from jefferyto/python-3.11.4-openwrt-23.05
[openwrt-23.05] python3: Update to 3.11.4, refresh patches
2023-06-13 07:21:21 +02:00
Jeffery To
a3e3e41e56 python3: Update to 3.11.4, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4627ed7c43)
2023-06-13 11:58:21 +08:00
Tianling Shen
c9b614b628 Merge pull request #21351 from jefferyto/golang-1.20.5-openwrt-23.05
[openwrt-23.05] golang: Update to 1.20.5
2023-06-13 04:12:33 +08:00
Christian Marangi
bf30d7d7ec nginx: create empty directory for module.d include
Fix a bug on installation of nginx-mod-luci where module.d directory
is not found and luci.module creation fails.
Correctly create empty directory for module.d include for dynamic module
loading by placing file in this directory.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 9365622f27)
2023-06-12 17:11:10 +02:00
Christian Marangi
5d36f84100 nginx: bump to new 1.25.0 release
Bump nginx to new 1.25.0 release.
Changes:

 *) Feature: experimental HTTP/3 support.

Every patch automatically refreshed.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 3f080e484e)
2023-06-12 17:11:08 +02:00
Nick Hainke
d184fd27fe tunneldigger: add package for establishing L2TPv3 tunnels over UDP
In the previous commit we already added tunneldigger-broker. Add the
corresponding client.

This PR is just a refactoring of the already existing opkg package from
wlanslovenija [0].

[0] - https://github.com/wlanslovenija/firmware-packages-opkg/tree/master/net/tunneldigger

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit bd2b4f311a)
2023-06-12 16:50:46 +02:00
Nick Hainke
7340474c8b tunneldigger-broker: add broker for tunneldigger
In mesh communities, tunneldigger is widely used to create L2TPv3 tunnels
and mesh via them. Since the broker is typically installed on other
distributions, the openwrt broker package has not received any
maintenance in recent years [0]. I  take now care of the further maintaince
of this package. Furthermore, I consulted with the maintainers to ensure
that they were comfortable with the change [1].

This PR is just a refactoring of the already existing opkg package from
wlanslovenija. It fixes config parsing and in general the config, adapts
to the new python syntax and fixes dependency handling.

- [0] https://github.com/wlanslovenija/firmware-packages-opkg/tree/master/net/tunneldigger-broker
- [1] https://github.com/wlanslovenija/firmware-packages-opkg/issues/24

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 8298ce8234)
2023-06-12 16:50:46 +02:00
Jeffery To
ef41089c4b golang: Update to 1.20.5
Includes fixes for:

* CVE-2023-29402: cmd/go: cgo code injection
* CVE-2023-29403: runtime: unexpected behavior of setuid/setgid binaries
* CVE-2023-29404: cmd/go: improper sanitization of LDFLAGS
* CVE-2023-29405: cmd/go: improper sanitization of LDFLAGS

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 471ef14774)
2023-06-12 19:59:11 +08:00
Jitao Lu
4ed85ea247 glib2: disable gnulib printf
A compiler bug (suspiciously) blocks gnulib compilation for
mipsel_24kc_24kf. While we had this patch to disable gnulib, it was
accidentally removed by 5d27631d9f. Add it
back to fix the long broken build for mipsel_24kc_24kf.

Fixes: #19511
Signed-off-by: Jitao Lu <dianlujitao@gmail.com>
2023-06-11 20:56:12 +03:00
Christian Marangi
259b125f6a nginx: fix problem with migration of uci conf template
Fix some problem with migration of uci conf template and include of
module.d directive.

Fix 2 case:
- uci.conf.template not versioned but with the include module.d
  resulting in double include module.d

- uci.conf.template version 1.1 with the include module.d at the end
  of the config. This is problematic for nginx as modules must be
  included before any http directive.

Handle this 2 case to restore a working uci.conf.template configuration
on migrated config.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit add3cbfcd3)
2023-06-11 05:29:28 +02:00
Christian Marangi
0850879be3 nginx-util: bump uci conf template version
Bump uci conf template version to 1.2 to sync with nginx version
handling some migration problem.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 15271cb467)
2023-06-11 05:29:28 +02:00
Ivan Pavlov
3d802d4294 openvpn: fix ipchange hotplug event
In f8a8b71e26 openvpn introduced new hotplug events.
For server config, ipchange hotplug event produces an error.
So, make ipchange hotplug event for client only

Fixes https://github.com/openwrt/packages/issues/21200

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
(cherry picked from commit 808f67d615)
2023-06-10 15:27:56 +08:00
Hirokazu MORIKAWA
2eabf45e4b avahi: Import patches for security fixes
Imported patches included in debian and other package.

* 200-Fix-NULL-pointer-crashes-from-175.patch
  CVE-2021-3502
   A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this vulnerability is to the service availability.

* 201-Avoid-infinite-loop-in-avahi-daemon-by-handling-HUP-event.patch
  CVE-2021-3468
   A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service, which becomes unresponsive after this flaw is triggered.

* 202-avahi_dns_packet_consume_uint32-fix-potential-undefined-b.patch
   avahi_dns_packet_consume_uint32 left shifts uint8_t values by 8, 16 and 24 bits to combine them into a 32-bit value. This produces an undefined behavior warning with gcc -fsanitize when fed input values of 128 or 255 however in testing no actual unexpected behavior occurs in practice and the 32-bit uint32_t is always correctly produced as the final value is immediately stored into a uint32_t and the compiler appears to handle this "correctly".
Cast the intermediate values to uint32_t to prevent this warning and ensure the intended result is explicit.

* 203-Do-not-disable-timeout-cleanup-on-watch-cleanup.patch
   This was causing timeouts to never be removed from the linked list that tracks them, resulting in both memory and CPU usage to grow larger over time.

* 204-Emit-error-if-requested-service-is-not-found.patch
   It currently just crashes instead of replying with error. Check return
value and emit error instead of passing NULL pointer to reply.

* 205-conf-file-line-lengths.patch
   Allow avahi-daemon.conf file to have lines longer than 256 characters (new limit 1024).

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 779af4d40c)
2023-06-10 15:27:06 +08:00
Florian Eckert
4e23876d61 lcd4linux: fix build error for custom build
This change fixes the following build error:
hecking that generated files are newer than configure... done
configure: error: conditional "ANSICXX" was never defined.
Usually this means the macro was only invoked conditionally.
make[2]: *** [Makefile:300:
/home/feckert/openwrt/build_dir/target-x86_64_musl/lcd4linux-custom/lcd4linux-2019-07-19-0b83bb3a/.configured_a17fb5ef857664f03cd0ce37cc5ea591]
Error 1
make[2]: Leaving directory
'/home/feckert/feeds/packages/utils/lcd4linux'
time: package/feeds/packages/lcd4linux/custom/compile#15.43#0.79#16.92
	ERROR: package/feeds/packages/lcd4linux failed to build (build
variant: custom).
make[1]: *** [package/Makefile:120:
package/feeds/packages/lcd4linux/compile] Error 1
make[1]: Leaving directory
'/home/feckert/openwrt'
make: ***
[/home/feckert/openwrt/include/toplevel.mk:231:
package/feeds/packages/lcd4linux/compile] Error 2

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Suggested-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 917ea9d214)
2023-06-10 02:58:30 +08:00
Toke Høiland-Jørgensen
5ba2629d58 acme-acmesh: Bump to version 3.0.6
Important security fix.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2023-06-09 19:54:50 +02:00
Tianling Shen
ac7a22d1fa Merge pull request #21306 from jefferyto/python3-asgiref-3.7.2-openwrt-23.05
[openwrt-23.05] python3-asgiref: Update to 3.7.2, rename source package
2023-06-09 21:11:35 +08:00
S. Brusch
eeeb8ee395 crowdsec: new upstream release version 1.5.2
Update crowdsec to latest upstream release version 1.5.2

Signed-off-by: S. Brusch <ne20002@gmx.ch>

Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: ipq40xx/generic, Fritzbox 4040, Openwrt 22.03.5

Description: update to latest version of upstream
(cherry picked from commit 1813bf2c6e)
2023-06-09 09:41:17 +08:00
Jeffery To
6359809fad python3-asgiref: Update to 3.7.2, rename source package
This renames the source package to python-asgiref to match other Python
packages.

This also updates the package title and URL.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b098f2ac40)
2023-06-08 15:46:04 +08:00
Oskari Rauta
7cbe77fb6d speedtestcpp: add new package
speedtestcpp is a fork of Taganaka's speedtest, rewritten.

It has some improvements such as
 - interactive result show
 - use server recommended profiles, which makes it faster (can be disabled)
 - and more..

It also provides it's functions in shared and static libraries
and offers development headers for integrating speedtest to
features to another projects.

This commit replaces speedtestpp since this fork has
all the same features + more.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit c5bf970241)
2023-06-08 14:01:07 +08:00
Tianling Shen
9745a8f925 Merge pull request #21295 from jefferyto/passlib-1.7.4-openwrt-23.05
[openwrt-23.05] passlib: Update to 1.7.4, rename source package
2023-06-07 21:53:23 +08:00
Tianling Shen
dc5f021f36 Merge pull request #21288 from jefferyto/python-typing-extensions-4.6.3-openwrt-23.05
[openwrt-23.05] python-typing-extensions: Update to 4.6.3
2023-06-07 21:53:12 +08:00
Tianling Shen
69b00c1f30 Merge pull request #21287 from jefferyto/python-poetry-core-1.6.1-openwrt-23.05
[openwrt-23.05] python-poetry-core: Update to 1.6.1
2023-06-07 21:52:57 +08:00
Tianling Shen
2ba8a0c4e2 Merge pull request #21286 from jefferyto/python-hatchling-1.17.1-openwrt-23.05
[openwrt-23.05] python-hatchling: Update to 1.17.1
2023-06-07 21:52:49 +08:00
Tianling Shen
e3fbc5a7fd rust: bump libc to 0.2.146
Fixes build with musl 1.2.4.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ba267237e7)
2023-06-07 16:46:02 +08:00
Luca Barbato
3f2856dfa0 rust: update to 1.70.0
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
(cherry picked from commit 81add12294)
2023-06-07 16:45:58 +08:00
Jeffery To
347e07e4a8 passlib: Update to 1.7.4, rename source package
This renames the source package from passlib to python-passlib to match
other Python packages.

This also updates the package URL and list of dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5b965e4d79)
2023-06-07 13:38:59 +08:00
Tianling Shen
112b237f14 gawk: disable mpfr detection
Disable mpfr detection to fix a build error due to (unncessary)
missing dependency:

```
Package gawk is missing dependencies for the following libraries:
libgmp.so.10
libmpfr.so.6
```

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3d9b6df7d8)
2023-06-07 12:04:35 +08:00
Tianling Shen
002cea57c0 python3-bottle: Update to 0.12.25
Fix build with Python 3.11

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a6980eb933)
2023-06-06 13:44:05 +02:00
Tianling Shen
050ed92068 python-yarl: Update to 1.9.2
Fix build with Python 3.11.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0e6fe09a34)
2023-06-06 13:43:43 +02:00
Jeffery To
6e94390c0b python-typing-extensions: Update to 4.6.3
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b638f3f8c0)
2023-06-06 13:26:38 +08:00
Jeffery To
66019fd42f python-poetry-core: Update to 1.6.1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit ac59c69237)
2023-06-06 13:23:29 +08:00
Jeffery To
234049b6e6 python-hatchling: Update to 1.17.1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0aed79d2a7)
2023-06-06 13:21:08 +08:00
Stan Grishin
37b34080bf curl: update to 8.1.2
* https://curl.se/changes.html#8_1_2

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 5afd8e088a)
2023-06-05 19:39:25 +00:00
Alexandru Ardelean
fa33800891 Merge pull request #21278 from 1715173329/2305-n
[openwrt-23.05] numpy: bump version to 1.24.3
2023-06-05 16:50:36 +03:00
Alexandru Ardelean
1abc7665d8 numpy: bump version to 1.24.3
Need to also fix build for GCC 13 + musl.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 8f176e30f3)
2023-06-05 19:38:41 +08:00
Etienne Champetier
72bccf6b5f Merge pull request #21271 from champtar/zabbix-url-23.05
[23.05] zabbix: Add "oldstable" source URL
2023-06-05 05:11:43 -04:00
Jeffery To
03d4cf031f zabbix: Add "oldstable" source URL
Zabbix moved the 6.2 directory from "stable" into "oldstable". This adds
the "oldstable" URL to PKG_SOURCE_URL.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit c196aac4b1)
2023-06-04 21:07:46 -04:00
Dengfeng Liu
cfaf2a8a06 xfrpc: update to 2.6.633
support socks5

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
2023-06-04 13:59:17 +08:00
Tianling Shen
20bc01f63d Merge pull request #21266 from jefferyto/micropython-1.20.0-openwrt-23.05
[openwrt-23.05] micropython: Update to 1.20.0, update/add related packages
2023-06-04 13:58:17 +08:00
Jeffery To
e9dda77cc4 micropython-mpremote: Add new package
From the README:

This CLI tool provides an integrated set of utilities to remotely
interact with and automate a MicroPython device over a serial
connection.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a83dcf0d5c)
2023-06-04 01:00:22 +08:00
Jeffery To
b4ae1c5dd0 python-hatch-requirements-txt: Add new host-only package
From the README:

Hatchling plugin to read project dependencies from requirements.txt

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9071deb1c7)
2023-06-04 01:00:22 +08:00
Jeffery To
761ba28159 micropython-lib: Update to master, split target package
The package has been reworked to install the same files that are
available to be downloaded/installed by mip, the package manager new to
MicroPython 1.20.0.

This also splits the original target package into four:

* micropython-lib
  * Includes packages common to all MicroPython ports (python-stdlib,
    python-ecosys, micropython)
  * Contains mpy bytecode files

* micropython-lib-src
  * Includes packages common to all MicroPython ports (python-stdlib,
    python-ecosys, micropython)
  * Contains py source files

* micropython-lib-unix
  * Includes packages specific to the MicroPython Unix port (unix-ffi)
  * Contains mpy bytecode files
  * Installs a specific launcher (micropython-unix) that adds the Unix
    package directory into MicroPython's library path

* micropython-lib-unix-src
  * Includes packages specific to the MicroPython Unix port (unix-ffi)
  * Contains py source files

This also updates the package license, title, and description.

Patches:

* 001-build-unix-ffi.patch

  This enables the repo build script to also build the Unix-specific
  packages. Not sure if upstream is open to accepting this since the
  Unix-specific packages don't fit well into the existing package
  distribution mechanism.

* 002-add-unix-ffi-os-path.patch and 003-add-unix-ffi-uu.patch

  These fix instances where the unix-ffi version of the os package is
  overridden by the python-stdlib version. These have been submitted to
  upstream: https://github.com/micropython/micropython-lib/pull/672

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9390bd0262)
2023-06-04 01:00:21 +08:00
Jeffery To
ea58dfac60 micropython: Update to 1.20.0, refresh/rework patches
Patches 000-Makefile-no-errors.patch and 020-mpy-cross-fix-flags.patch
are no longer necessary.

This also adds a Build/InstallDev recipe to install files necessary for
micropython-lib.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a4ae38494f)
2023-06-04 01:00:21 +08:00
Dengfeng Liu
6971beac8c apfree-wifidog: Update to 6.02.1939
1. support fw4
2. support openssl3.0

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
2023-06-03 00:10:41 +08:00
Maxim Storchak
d8092a26f3 collectd: enable AllPortsSummary for tcpconns plugin
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
(cherry picked from commit 8270bd173e)
2023-06-02 17:47:39 +03:00
Maxim Storchak
fb42a3a145 nfs-kernel-server: remove libwrap from the dependencies
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
(cherry picked from commit 33e1deadf8)
2023-06-02 21:31:52 +08:00
Ted Hess
1bc4ba94e6 Zile: Remove autoreconf.
It is no longer required since gnulib is now local to host build environment (tools/gnulib).

Signed-off-by: Ted Hess <thess@kitschensync.net>
(cherry picked from commit b7afecad9d)
2023-06-02 21:27:06 +08:00
Tianling Shen
6866f8b134 dnsproxy: Update to 0.49.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d717bace8d)
2023-06-02 21:16:03 +08:00
Tianling Shen
5ada54a51d v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 56de9f91fd)
2023-06-02 21:16:01 +08:00
Tianling Shen
f791df68ea yq: Update to 4.34.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2ecf76e27d)
2023-06-02 21:16:00 +08:00
Tianling Shen
a248346ca9 v2ray-core: Update to 5.7.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b95ec1db56)
2023-06-02 21:16:00 +08:00
Tianling Shen
58d7f0df6d cloudflared: Update to 2023.5.1
Fixed build issue with Go 1.20.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0625f038b3)
2023-06-02 21:16:00 +08:00
Tianling Shen
d1bb684fb3 Merge pull request #21235 from jefferyto/python-gmpy2-2.1.5-openwrt-23.05
[openwrt-23.05] python-gmpy2: Update to 2.1.5; add new dependencies
2023-06-01 16:01:34 +08:00
Nikos Mavrogiannopoulos
7b1a0fe74d tang: create user tang
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2023-06-01 09:21:57 +02:00
Tianling Shen
4bb9f288d2 xfsprogs: Update to 6.2.0
* Added new dependencies introduced in this version
* Disabled mips16 due to build issues
* Fixed the usage of the `CONFIG_USE_MUSL` variable (missing $)
* Refreshed patches

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 284093d85a)
2023-06-01 14:52:12 +08:00
Tianling Shen
ffe0d67b08 inih: add new package
It's required by next xfsprogs update.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit abfe6272cd)
2023-06-01 14:52:08 +08:00
Tianling Shen
96c34d7881 pyodbc: Update to 4.0.39
* Fixed build with Python 3.11
* Removed unnecessary build depends

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f02f3ee8c7)
2023-06-01 14:51:53 +08:00
Tianling Shen
356d32a5ad python-greenlet: Update to 2.0.2
Fix build with Python 3.11.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e399e1ce2c)
2023-06-01 14:51:34 +08:00
Tianling Shen
630785ef35 dos2unix: Update to 7.5.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e90bb8ea9a)
2023-06-01 14:47:06 +08:00
Tianling Shen
aff1ae8b6c Merge pull request #21244 from jefferyto/werkzeug-2.3.4-openwrt-23.05
[openwrt-23.05] Werkzeug: Update to 2.3.4, rename source package
2023-06-01 12:14:17 +08:00
Tianling Shen
c41a508e33 Merge pull request #21243 from jefferyto/markupsafe-2.1.2-openwrt-23.05
[openwrt-23.05] MarkupSafe: Update to 2.1.2, rename source package
2023-06-01 12:14:05 +08:00
Tianling Shen
4616233eda Merge pull request #21242 from jefferyto/jinja2-3.1.2-openwrt-23.05
[openwrt-23.05] Jinja2: Update to 3.1.2, rename source package
2023-06-01 12:13:41 +08:00
Tianling Shen
54f976bea7 Merge pull request #21241 from jefferyto/click-log-0.4.0-openwrt-23.05
[openwrt-23.05] click-log: Update to 0.4.0, rename source package
2023-06-01 12:13:30 +08:00
Tianling Shen
c9b7d29efb Merge pull request #21240 from jefferyto/bcrypt-3.2.2-openwrt-23.05
[openwrt-23.05] bcrypt: Update to 3.2.2, rename source package
2023-06-01 12:12:53 +08:00
Tianling Shen
656ce7c10e Merge pull request #21239 from jefferyto/python-typing-extensions-4.6.2-openwrt-23.05
[openwrt-23.05] python-typing-extensions: Update to 4.6.2
2023-06-01 12:12:34 +08:00
Jeffery To
5f0c4ad0a4 python-trove-classifiers: Update to 2023.5.24
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 17007845bc)
2023-06-01 04:18:19 +03:00
Jeffery To
15d89f3c34 python-hatch-fancy-pypi-readme: Update to 23.1.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9f8a5fb25b)
2023-06-01 04:18:04 +03:00
Jeffery To
fdd6334160 python-cython: Update to 0.29.35
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit f47802949c)
2023-06-01 04:17:47 +03:00
Stan Grishin
6070c1f118 Merge pull request #21205 from stangri/openwrt-23.05-curl-8.1.1
[23.05] curl: update to 8.1.1
2023-05-31 11:38:26 -06:00
Jeffery To
aad1936885 Werkzeug: Update to 2.3.4, rename source package
This renames the source package from Werkzeug to python-werkzeug to
match other Python packages.

This also updates the package title, description, and list of
dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 574d43fca6)
2023-05-31 22:37:22 +08:00
Jeffery To
cb346ffe84 MarkupSafe: Update to 2.1.2, rename source package
This renames the source package from MarkupSafe to python-markupsafe to
match other Python packages.

This also updates the package title and description.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5602cc85d3)
2023-05-31 22:34:44 +08:00
Jeffery To
92b307a302 Jinja2: Update to 3.1.2, rename source package
This renames the source package from Jinja2 to python-jinja2 to match
other Python packages.

This also updates the package license files, title, and list of
dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 572387f0cb)
2023-05-31 22:32:04 +08:00
Jeffery To
2c15e8a290 click-log: Update to 0.4.0, rename source package
This renames the source package from click-log to python-click-log to
match other Python packages.

This also updates the package to download from PyPI, and updates the
package title, URL, and dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 67a854aee2)
2023-05-31 22:29:18 +08:00
Jeffery To
ee5c9e2073 bcrypt: Update to 3.2.2, rename source package
This is the last released version before bcrypt's Rust rewrite; this
package can be further updated after the OpenWrt Rust toolchain has
stablized.

This also renames the source package from bcrypt to python-bcrypt to
match other Python packages, and updates the list of dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 3def783d3c)
2023-05-31 22:26:33 +08:00
Jeffery To
b31dcee0bf python-typing-extensions: Update to 4.6.2
This also updates the SPDX license identifier, title, description and
URL for the package.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit f45f067f3f)
2023-05-31 22:22:49 +08:00
Jeffery To
20d295b993 python-gmpy2: Update to 2.1.5
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a7d33e9e3a)
2023-05-31 22:11:35 +08:00
Jeffery To
a1e8a38410 libmpc: Add package
From the documentation:

GNU MPC is a portable library written in C for arbitrary precision
arithmetic on complex numbers providing correct rounding. It implements
a multiprecision equivalent of the C99 standard. It builds upon the GNU
MP and the GNU MPFR libraries.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4d64d5f80a)
2023-05-31 22:11:01 +08:00
Jeffery To
f743dca6c8 mpfr: Add package
From the documentation:

MPFR is a portable library written in C for arbitrary precision
arithmetic on floating-point numbers. It is based on the GNU MP library.
It aims to provide a class of floating-point numbers with precise
semantics.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 925bd16945)
2023-05-31 22:10:44 +08:00
Jeffery To
1a3df95f7e python-packages: Replace --global-option with --build-option
setuptools 64.0.0 deprecated the use of --global-option to pass build
parameters[1]. This replaces the use of --global-option with
--build-option.

[1]: https://github.com/pypa/setuptools/blob/main/CHANGES.rst#v6400

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b76fa19b26)
2023-05-28 15:47:24 +03:00
Jeffery To
d6cc46e2c2 python3: Split setuptools into separate source package
Packaging setuptools from a separate source package allows it to stay
updated with upstream.

Host setuptools will remain installed as part of python3. Host
setuptools is used in a much more controlled way and so is less critical
for it to track upstream.

setuptools was in a separate source package that was removed in
a53d0c5a403d1669e2cf6c59c2be6a9d3ed633a0; this work is not based on that
earlier package.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b4975f8bbb)
2023-05-28 15:47:08 +03:00
Jeffery To
b997e1bb69 python3: Split pip into separate source package
Packaging pip from a separate source package allows it to stay updated
with upstream.

Host pip will remain installed as part of python3. Host pip is used in a
much more controlled way and so is less critical for it to track
upstream.

This also removes the python-pip-conf package and installs the pip.conf
file as part of python3-pip.

The patch 003-disable-pip-version-check.patch is originally from Debian:
bb079efb8c/debian/patches/disable-pip-version-check.patch

pip was in a separate source package that was removed in
a53d0c5a403d1669e2cf6c59c2be6a9d3ed633a0; this work is not based on that
earlier package.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit eee273507b)
2023-05-28 15:47:08 +03:00
Jeffery To
28b70d4fa9 python3: Split venv module from python3-light into separate package
This adds a new subpackage for the venv module. This also moves the
ensurepip module from python3-pip into python3-venv, as ensurepip is not
necessary for pip but often used for venv.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d53475ac21)
2023-05-28 15:47:08 +03:00
Glenn Strauss
6549b22789 lighttpd: update to lighttpd 1.4.71 release hash
remove patches included upstream

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 19291ee195)
2023-05-28 15:42:41 +03:00
Stan Grishin
6e9508d6d0 curl: update to 8.1.1
* https://curl.se/changes.html#8_1_1

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit b126e765cc)
2023-05-28 04:53:47 +00:00
Tianling Shen
ecc23cedae Merge pull request #21197 from jefferyto/python-tomli-remove-package-openwrt-23.05
[openwrt-23.05] python-tomli: Remove package
2023-05-27 21:53:54 +08:00
Jeffery To
1ca7a53fdb python-tomli: Remove package
Python added tomli to its standard library in 3.11. Now that Python in
the packages feed has been updated to 3.11, the separate tomli package
is no longer necessary.

This removes python-tomli and updates all dependant packages, removing
python-tomli from their lists of dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0509d460c8)
2023-05-27 16:51:02 +08:00
Tianling Shen
d1eef4705b Merge pull request #21183 from jefferyto/python-packages-do-not-set-pyvenv-launcher-openwrt-23.05
[openwrt-23.05] python-packages: Remove __PYVENV_LAUNCHER__ environment variable
2023-05-26 22:28:28 +08:00
Tianling Shen
b54687d91e Merge pull request #21182 from jefferyto/uwsgi-2.0.21-openwrt-23.05
[openwrt-23.05] uwsgi: Update to 2.0.21, refresh patches
2023-05-26 22:28:00 +08:00
Stan Grishin
ded5364fae Merge pull request #21180 from stangri/openwrt-23.05-curl
[23.05] curl: update to 8.1.0
2023-05-26 08:17:45 -06:00
Stan Grishin
c9f8c0b6e4 Merge pull request #21179 from stangri/openwrt-23.05-https-dns-proxy
[23.05] https-dns-proxy: update to 2023-05-25-1
2023-05-26 08:17:38 -06:00
Jeffery To
550f3f07a4 python-packages: Remove __PYVENV_LAUNCHER__ environment variable
Setting __PYVENV_LAUNCHER__ for Python package builds was added in
a91a992abb, but neither the commit message
nor the pull request[1] explain its purpose in detail.

My guess is this was done to set the shebang for installed Python
scripts. We now have a Makefile recipe to set the shebang, so it would
be unnecessary to set this variable for this purpose.

It appears that Python 3.11 has changed the handling of this (internal)
environment variable, and setting it appears to be causing build errors
for all Python packages.

This removes setting __PYVENV_LAUNCHER__ for Python package builds.

[1]: https://github.com/openwrt/packages/pull/525

Fixes: https://github.com/openwrt/packages/issues/21162
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9e95dff9ac)
2023-05-26 17:00:48 +08:00
Jeffery To
ed529f0904 uwsgi: Update to 2.0.21, refresh patches
This version includes support for Python 3.11.

This also:

* Updates Build/Compile to only build selected subpackages.

* Removes the submenu in menuconfig; there are too few subpackages to
  justify the extra complexity.

Fixes: https://github.com/openwrt/packages/issues/21163
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4d8cc440a4)
2023-05-26 16:54:53 +08:00
Stan Grishin
0e429f5129 curl: update to 8.1.0
* https://curl.se/changes.html#8_1_0

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit b9c7aa50f4)
2023-05-26 08:39:34 +00:00
Stan Grishin
25883f715c https-dns-proxy: update to 2023-05-25-1
* update to a new upstream commit, fixes #19366
* update patches/010-cmakelists-remove-cflags.patch as upstream file was update
* remove patches/020-cmakelists-add-version.patch as version is now set elsewhere
* add patches/020-src-options.c-add-version.patch to set the version information
* adjust PROCD START time to 95

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit eb40aa1b5d)
2023-05-26 08:33:37 +00:00
Tianling Shen
dc9a678e9a Merge pull request #21173 from jefferyto/python-poetry-core-1.6.0-openwrt-23.05
[openwrt-23.05] python-poetry-core: Update to 1.6.0
2023-05-26 10:21:51 +08:00
Tianling Shen
93ffc00aea Merge pull request #21172 from jefferyto/python3-do-not-link-libbsd-openwrt-23.05
[openwrt-23.05] python3: Fix unnecessary linking with libbsd
2023-05-26 10:21:38 +08:00
Jeffery To
f55a74a3ca python-poetry-core: Update to 1.6.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 626c7efda9)
2023-05-26 01:40:24 +08:00
Jeffery To
f619e26c13 python3: Fix unnecessary linking with libbsd
configure will try to link with libbsd for the flock function, even when
flock is available without it.

Fixes: https://github.com/openwrt/packages/issues/21161
Fixes: 2445fe9fb2 ("python3: Update to 3.11.3, refresh/redo patches")
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 60bf01cb60)
2023-05-25 23:27:11 +08:00
Tianling Shen
26f502b9f6 Merge pull request #21154 from jefferyto/python-flit-core-3.9.0-openwrt-23.05
[openwrt-23.05] python-flit-core: Update to 3.9.0
2023-05-25 14:55:04 +08:00
Tianling Shen
db89f065fe Merge pull request #21153 from jefferyto/borgbackup-move-section-openwrt-23.05
[openwrt-23.05] borgbackup: Move from lang/python into utils
2023-05-25 14:54:51 +08:00
Tianling Shen
9626223470 Merge pull request #21152 from jefferyto/python-3.11.3-openwrt-23.05
[openwrt-23.05] python3: Update to 3.11.3, refresh/redo patches
2023-05-25 14:54:31 +08:00
Tianling Shen
7cd7833774 ipfs-http-client: remove package
This package lacks proper maintenance in both upstream and here.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 72c8977b3b)
2023-05-24 14:29:49 +08:00
Jeffery To
cd8c13d822 python-flit-core: Update to 3.9.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6b8340d3ca)
2023-05-24 12:44:06 +08:00
Jeffery To
81ecb5f503 borgbackup: Move from lang/python into utils
lang/python is meant for Python libraries and other packages closely
related to the Python language. It makes more sense for borgbackup to be
in utils instead.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5059cfccae)
2023-05-24 12:41:20 +08:00
Jeffery To
24aa47eb2b python3: Update to 3.11.3, refresh/redo patches
* Removed patches:

  * 001-enable-zlib.patch: zlib module should be enabled automatically

  * 007-distutils-do-not-adjust-path.patch: Not necessary since we
    process shebang lines for all scripts (in python3-package.mk)

  * 030-bpo-43112-detect-musl-as-a-separate-SOABI-GH-24502.patch:
    Already merged

* Move configure vars from config.site back into Makefile

  Centralizing all build information into one file makes it easier to
  maintain

* No longer set ac_cv_header_uuid_h=yes as configure should detect
  libuuid

* Order configure args by enable-/disable-/with-/without-, then
  alphabetically

* Set ac_cv_working_openssl_hashlib=yes for host configure to bypass the
  OpenSSL API tests with LibreSSL

* Use the default Host/Compile recipe instead of picking out specific
  targets to make

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 2445fe9fb2)
2023-05-24 12:34:32 +08:00
Jeffery To
cc000a1a2c python3: Fix hashlib module not compiled for host Python
026-openssl-feature-flags.patch and
028-host-python-support-ssl-with-libressl.patch were removed in
4ecd9d67e9 to fix the ssl module after
libressl was upgraded to 3.7.0[1].

However, the cause of the ssl module build failure was only
028-host-python-support-ssl-with-libressl.patch.

Removing 026-openssl-feature-flags.patch caused a build failure for the
hashlib module.

This restores 026-openssl-feature-flags.patch with an updated version of
the patch from OpenBSD[2].

[1]: https://github.com/openwrt/packages/issues/20107
[2]: 26a04435bf/lang/python/3.10/patches/patch-Modules__hashopenssl_c

Fixes: 4ecd9d67e9 ("python3: fix ssl support by removing libressl patches")
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 02eb5c100c)
2023-05-24 12:34:18 +08:00
Jeffery To
0358c18d02 python3: Fix uuid module not compiled for host Python
This adds $(STAGING_DIR_HOST)/include/e2fsprogs to HOST_CFLAGS and
HOST_CPPFLAGS so that configure can find uuid/uuid.h.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 44fb4927f1)
2023-05-24 12:34:07 +08:00
Jeffery To
41a6ec0a11 python3: Fix multiarch/local paths added when building host Python
By default, the Python build process will add /usr/local/{lib,include},
and multiarch paths (e.g. /usr/{lib,include}/x86_64-linux-gnu) if
building on Debian/Ubuntu, to its library and includes paths.

006-remove-multi-arch-and-local-paths.patch was added in
84202f17e1 to stop the Python build
process from adding these paths.

006-remove-multi-arch-and-local-paths.patch was removed in
48277ec915.

006-do-not-add-multiarch-paths-when-cross-compiling.patch was added in
0c8b0b0bf7 to stop the Python build
process from adding these paths for target Python.

These paths are still added by the Python build process when building
host Python.

This replaces the cross-compiling-only patch with the original patch,
renamed slightly and adapted for Python 3.10.

Fixes: 48277ec915 ("python3: bump to version 3.8")
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit f006d0ea23)
2023-05-24 12:33:58 +08:00
Jeffery To
1342fd891a python3: Fix race condition when doing parallel builds
When doing parallel builds, host Python can install the python3 symlink
before the Python standard library is installed completely.

When this occurs, it is possible for other packages to detect the
python3 symlink and try to use host Python before it is fully installed.

This adds a patch to make commoninstall (where the standard library is
installed) a prerequisite of bininstall (where the python3 symlink is
installed), so that commoninstall is fully completed before bininstall
begins.

Patch has been submitted upstream:
https://github.com/python/cpython/pull/104693

Fixes: https://github.com/openwrt/packages/issues/19241

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 67e47f1196)
2023-05-24 12:33:44 +08:00
Jeffery To
c766386f3d python3: Fix readelf program name not replaced in _sysconfigdata.py
The Makefile lines to add READELF to TARGET_CONFIGURE_OPTS was removed
in 4e05541782.

Without setting READELF, configure finds the symlink to
$(TARGET_CROSS)readelf (e.g. arm-openwrt-linux-readelf) instead of
$(TARGET_CROSS)readelf (e.g. arm-openwrt-linux-muslgnueabi-readelf).

This leads to the symlink name being saved to _sysconfigdata.py, and so
the readelf name is not replaced correctly (in
Py3Package/python3-base/install).

This restores the removed Makefile lines.

Fixes: 4e05541782 ("python3: bump to version 3.10.0")
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit e1a9578635)
2023-05-24 12:33:28 +08:00
Jeffery To
3d42803578 python3: Fix __pycache__ files included in python3-light
003-do-not-run-distutils-tests.patch was removed in
4e05541782. This patch stopped "make
install" from, among other things, running compileall.

When this patch was removed, "make install" ran compileall as normal and
created bytecode files in __pycache__ directories. These files were then
packaged in python3-light.

This adds a patch to stop compileall from being run during "make
install".

Fixes: 4e05541782 ("python3: bump to version 3.10.0")
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8a4da01790)
2023-05-24 12:33:00 +08:00
Jeffery To
cc2726f9e5 python3: Remove --without-pymalloc
--without-pymalloc was added in 7bf1ae65a8
because leaving it enabled added an "m" flag/suffix to file names.

This flag/suffix was removed in Python 3.8[1], so disabling pymalloc is
no longer necessary.

[1]: https://docs.python.org/3.8/whatsnew/3.8.html#build-and-c-api-changes

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 3032e7063f)
2023-05-24 12:31:56 +08:00
Nick Hainke
2001484c28 pciutils: update to 3.10.0
Manually refresh:
- 101-no-strip.patch

Remove upstreamed:
- 107-avoid-addng-multiple-version-tags.patch

ChangeLog:
21407521fb/ChangeLog

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 6c34bf90e3)
2023-05-22 07:01:09 +02:00
1228 changed files with 36644 additions and 19995 deletions

View File

@@ -1,93 +0,0 @@
FROM debian:10
# Configuration version history
# v1.0 - Initial version by Etienne Champetier
# v1.0.1 - Run as non-root, add unzip, xz-utils
# v1.0.2 - Add bzr
# v1.0.3 - Verify usign signatures
# v1.0.4 - Add support for Python3
# v1.0.5 - Add 19.07 public keys, verify keys
# v1.0.6 - Add 21.02 public keys, update Debian image to version 10, add rsync
# v1.0.7 - Add 22.03 public keys, 18.06 v2 gpg key, 18.06 usign key
RUN apt update && apt install -y \
build-essential \
bzr \
curl \
jq \
gawk \
gettext \
git \
libncurses5-dev \
libssl-dev \
python \
python3 \
signify-openbsd \
subversion \
rsync \
time \
unzip \
wget \
xz-utils \
zlib1g-dev \
&& rm -rf /var/lib/apt/lists/*
RUN useradd -c "OpenWrt Builder" -m -d /home/build -s /bin/bash build
USER build
ENV HOME /home/build
# OpenWrt Build System (PGP key for unattended snapshot builds)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/626471F1.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<pgpsign-snapshots@openwrt.org>' | grep '^fpr:::::::::54CC74307A2C6DC9CE618269CD84BCED626471F1:$' \
&& echo '54CC74307A2C6DC9CE618269CD84BCED626471F1:6:' | gpg --import-ownertrust
# OpenWrt Build System (PGP key for 17.01 "Reboot" release builds)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/D52BBB6B.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<pgpsign-17.01@openwrt.org>' | grep '^fpr:::::::::B09BE781AE8A0CD4702FDCD3833C6010D52BBB6B:$' \
&& echo 'B09BE781AE8A0CD4702FDCD3833C6010D52BBB6B:6:' | gpg --import-ownertrust
# OpenWrt Release Builder (18.06 Signing Key)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/17E1CE16.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<openwrt-devel@lists.openwrt.org>' | grep '^fpr:::::::::6768C55E79B032D77A28DA5F0F20257417E1CE16:$' \
&& echo '6768C55E79B032D77A28DA5F0F20257417E1CE16:6:' | gpg --import-ownertrust
# OpenWrt Build System (PGP key for 18.06 release builds)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/15807931.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<pgpsign-18.06@openwrt.org>' | grep '^fpr:::::::::AD0507363D2BCE9C9E36CEC4FBCB78F015807931:$' \
&& echo 'AD0507363D2BCE9C9E36CEC4FBCB78F015807931:6:' | gpg --import-ownertrust
# OpenWrt Build System (PGP key for 19.07 release builds)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/2074BE7A.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<pgpsign-19.07@openwrt.org>' | grep '^fpr:::::::::D9C6901F45C9B86858687DFF28A39BC32074BE7A:$' \
&& echo 'D9C6901F45C9B86858687DFF28A39BC32074BE7A:6:' | gpg --import-ownertrust
# OpenWrt Build System (PGP key for 21.02 release builds)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/88CA59E8.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<pgpsign-21.02@openwrt.org>' | grep '^fpr:::::::::667205E379BAF348863A5C6688CA59E88F681580:$' \
&& echo '667205E379BAF348863A5C6688CA59E88F681580:6:' | gpg --import-ownertrust
# OpenWrt Build System (GnuPGP key for 22.03 release builds)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/CD54E82DADB3684D.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<pgpsign-22.03@openwrt.org>' | grep '^fpr:::::::::BF856781A01293C8409ABE72CD54E82DADB3684D:$' \
&& echo 'BF856781A01293C8409ABE72CD54E82DADB3684D:6:' | gpg --import-ownertrust
# untrusted comment: Public usign key for unattended snapshot builds
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/b5043e70f9a75cde' --create-dirs -o /home/build/usign/b5043e70f9a75cde \
&& echo 'd7ac10f9ed1b38033855f3d27c9327d558444fca804c685b17d9dcfb0648228f */home/build/usign/b5043e70f9a75cde' | sha256sum --check
# untrusted comment: Public usign key for 18.06 release builds
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/1035ac73cc4e59e3' --create-dirs -o /home/build/usign/1035ac73cc4e59e3 \
&& echo '8dc2e7f5c4e634437e6641f4df77a18bf59f0c8e9016c8ba4be5d4a0111e68c2 */home/build/usign/1035ac73cc4e59e3' | sha256sum --check
# untrusted comment: Public usign key for 19.07 release builds
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/f94b9dd6febac963' --create-dirs -o /home/build/usign/f94b9dd6febac963 \
&& echo 'b1d09457cfbc36fccfe18382d65c54a2ade3e7fd3902da490a53aa517b512755 */home/build/usign/f94b9dd6febac963' | sha256sum --check
# untrusted comment: Public usign key for 21.02 release builds
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/2f8b0b98e08306bf' --create-dirs -o /home/build/usign/2f8b0b98e08306bf \
&& echo 'd102bdd75421c62490b97f520f9db06aadb44ad408b244755d26e96ea5cd3b7f */home/build/usign/2f8b0b98e08306bf' | sha256sum --check
# untrusted comment: Public usign key for 22.03 release builds
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/4d017e6f1ed5d616' --create-dirs -o /home/build/usign/4d017e6f1ed5d616 \
&& echo 'f3c5fdf447d7c2743442e68077d60acc7c3e91754849e1f4b6be837b4204b7e2 */home/build/usign/4d017e6f1ed5d616' | sha256sum --check

View File

@@ -1,6 +0,0 @@
# Build/update the docker image
docker pull debian:10
docker build --rm -t docker.io/openwrtorg/packages-cci:latest .
docker tag <IMAGE ID> docker.io/openwrtorg/packages-cci:<VERSION-TAG>
docker push docker.io/openwrtorg/packages-cci

View File

@@ -1,182 +0,0 @@
version: 2.0
jobs:
build:
docker:
- image: docker.io/openwrtorg/packages-cci:v1.0.7
environment:
- SDK_HOST: "downloads.openwrt.org"
- SDK_PATH: "snapshots/targets/ath79/generic"
- SDK_FILE: "openwrt-sdk-ath79-generic_*.Linux-x86_64.tar.xz"
- BRANCH: "master"
steps:
- checkout:
path: ~/openwrt_packages
- run:
name: Check changes / verify commits
working_directory: ~/openwrt_packages
command: |
cat >> $BASH_ENV <<EOF
echo_red() { printf "\033[1;31m\$*\033[m\n"; }
echo_green() { printf "\033[1;32m\$*\033[m\n"; }
echo_blue() { printf "\033[1;34m\$*\033[m\n"; }
EOF
source $BASH_ENV
RET=0
for commit in $(git rev-list HEAD ^origin/$BRANCH); do
echo_blue "=== Checking commit '$commit'"
if git show --format='%P' -s $commit | grep -qF ' '; then
echo_red "Pull request should not include merge commits"
RET=1
fi
author="$(git show -s --format=%aN $commit)"
if echo $author | grep -q '\S\+\s\+\S\+'; then
echo_green "Author name ($author) seems ok"
else
echo_red "Author name ($author) need to be your real name 'firstname lastname'"
RET=1
fi
subject="$(git show -s --format=%s $commit)"
if echo "$subject" | grep -q -e '^[0-9A-Za-z,+/_-]\+: ' -e '^Revert '; then
echo_green "Commit subject line seems ok ($subject)"
else
echo_red "Commit subject line MUST start with '<package name>: ' ($subject)"
RET=1
fi
body="$(git show -s --format=%b $commit)"
sob="$(git show -s --format='Signed-off-by: %aN <%aE>' $commit)"
if echo "$body" | grep -qF "$sob"; then
echo_green "Signed-off-by match author"
else
echo_red "Signed-off-by is missing or doesn't match author (should be '$sob')"
RET=1
fi
done
exit $RET
- run:
name: Download the SDK
working_directory: ~/sdk
command: |
curl "https://$SDK_HOST/$SDK_PATH/sha256sums" -sS -o sha256sums
curl "https://$SDK_HOST/$SDK_PATH/sha256sums.asc" -fs -o sha256sums.asc || true
curl "https://$SDK_HOST/$SDK_PATH/sha256sums.sig" -fs -o sha256sums.sig || true
if [ ! -f sha256sums.asc ] && [ ! -f sha256sums.sig ]; then
echo_red "Missing sha256sums signature files"
exit 1
fi
[ ! -f sha256sums.asc ] || gpg --with-fingerprint --verify sha256sums.asc sha256sums
if [ -f sha256sums.sig ]; then
VERIFIED=
for KEY in ~/usign/*; do
echo "Trying $KEY..."
if signify-openbsd -V -q -p "$KEY" -x sha256sums.sig -m sha256sums; then
echo "...verified"
VERIFIED=1
break
fi
done
if [ -z "$VERIFIED" ]; then
echo_red "Could not verify usign signature"
exit 1
fi
fi
rsync -av "$SDK_HOST::downloads/$SDK_PATH/$SDK_FILE" .
sha256sum -c --ignore-missing sha256sums
- run:
name: Prepare build_dir
working_directory: ~/build_dir
command: |
tar Jxf ~/sdk/$SDK_FILE --strip=1
touch .config
make prepare-tmpinfo scripts/config/conf
./scripts/config/conf --defconfig=.config Config.in
make prereq
rm .config
cat > feeds.conf <<EOF
src-git base https://github.com/openwrt/openwrt.git;$BRANCH
src-link packages $HOME/openwrt_packages
src-git luci https://github.com/openwrt/luci.git;$BRANCH
EOF
cat feeds.conf
./scripts/feeds update -a > /dev/null
make defconfig > /dev/null
# enable BUILD_LOG
sed -i 's/# CONFIG_BUILD_LOG is not set/CONFIG_BUILD_LOG=y/' .config
- run:
name: Install & download source, check package, compile
working_directory: ~/build_dir
command: |
set +o pipefail
PKGS=$(cd ~/openwrt_packages; git diff --diff-filter=d --name-only "origin/$BRANCH..." | grep 'Makefile$' | grep -Ev '/files/|/src/' | awk -F/ '{ print $(NF-1) }')
if [ -z "$PKGS" ] ; then
echo_blue "WARNING: No new or modified packages found!"
exit 0
fi
echo_blue "=== Found new/modified packages: $PKGS"
for PKG in $PKGS ; do
echo_blue "===+ Install: $PKG"
./scripts/feeds install "$PKG"
echo_blue "===+ Download: $PKG"
make "package/$PKG/download" V=s
echo_blue "===+ Check package: $PKG"
make "package/$PKG/check" V=s 2>&1 | tee logtmp
RET=${PIPESTATUS[0]}
if [ $RET -ne 0 ]; then
echo_red "=> Package check failed: $RET)"
exit $RET
fi
badhash_msg="HASH does not match "
badhash_msg+="|HASH uses deprecated hash,"
badhash_msg+="|HASH is missing,"
if grep -qE "$badhash_msg" logtmp; then
echo_red "=> Package HASH check failed"
exit 1
fi
echo_green "=> Package check OK"
done
make \
-f .config \
-f tmp/.packagedeps \
-f <(echo '$(info $(sort $(package-y) $(package-m)))'; echo -en 'a:\n\t@:') \
| tr ' ' '\n' >enabled-package-subdirs.txt
for PKG in $PKGS ; do
if ! grep -m1 -qE "(^|/)$PKG$" enabled-package-subdirs.txt; then
echo_red "===+ Building: $PKG skipped. It cannot be enabled with $SDK_FILE"
continue
fi
echo_blue "===+ Building: $PKG"
make "package/$PKG/compile" -j3 V=s || {
RET=$?
echo_red "===+ Building: $PKG failed, rebuilding with -j1 for human readable error log"
make "package/$PKG/compile" -j1 V=s; exit $RET
}
done
- store_artifacts:
path: ~/build_dir/logs
- store_artifacts:
path: ~/build_dir/bin
workflows:
version: 2
buildpr:
jobs:
- build:
filters:
branches:
ignore: master

View File

@@ -1,6 +0,0 @@
ARG ARCH=x86-64
FROM openwrt/rootfs:$ARCH
ADD entrypoint.sh /entrypoint.sh
CMD ["/entrypoint.sh"]

View File

@@ -1,62 +0,0 @@
#!/bin/sh
# not enabling `errtrace` and `pipefail` since those are bash specific
set -o errexit # failing commands causes script to fail
set -o nounset # undefined variables causes script to fail
echo "src/gz packages_ci file:///ci" >> /etc/opkg/distfeeds.conf
FINGERPRINT="$(usign -F -p /ci/packages_ci.pub)"
cp /ci/packages_ci.pub "/etc/opkg/keys/$FINGERPRINT"
mkdir -p /var/lock/
opkg update
[ -n "${CI_HELPER:=''}" ] || CI_HELPER="/ci/.github/workflows/ci_helpers.sh"
for PKG in /ci/*.ipk; do
tar -xzOf "$PKG" ./control.tar.gz | tar xzf - ./control
# package name including variant
PKG_NAME=$(sed -ne 's#^Package: \(.*\)$#\1#p' ./control)
# package version without release
PKG_VERSION=$(sed -ne 's#^Version: \(.*\)-[0-9]*$#\1#p' ./control)
# package source contianing test.sh script
PKG_SOURCE=$(sed -ne 's#^Source: .*/\(.*\)$#\1#p' ./control)
echo "Testing package $PKG_NAME in version $PKG_VERSION from $PKG_SOURCE"
export PKG_NAME PKG_VERSION CI_HELPER
PRE_TEST_SCRIPT=$(find /ci/ -name "$PKG_SOURCE" -type d)/pre-test.sh
if [ -f "$PRE_TEST_SCRIPT" ]; then
echo "Use package specific pre-test.sh"
if sh "$PRE_TEST_SCRIPT" "$PKG_NAME" "$PKG_VERSION"; then
echo "Pre-test successful"
else
echo "Pre-test failed"
exit 1
fi
else
echo "No pre-test.sh script available"
fi
opkg install "$PKG"
TEST_SCRIPT=$(find /ci/ -name "$PKG_SOURCE" -type d)/test.sh
if [ -f "$TEST_SCRIPT" ]; then
echo "Use package specific test.sh"
if sh "$TEST_SCRIPT" "$PKG_NAME" "$PKG_VERSION"; then
echo "Test successful"
else
echo "Test failed"
exit 1
fi
else
echo "No test.sh script available"
fi
opkg remove "$PKG_NAME" --force-removal-of-dependent-packages --force-remove --autoremove || true
done

View File

@@ -1,191 +1,9 @@
name: Test Build
name: Feeds Package Test Build
on:
pull_request:
jobs:
build:
name: Test ${{ matrix.arch }}
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
include:
- arch: arm_cortex-a9_vfpv3-d16
target: mvebu-cortexa9
runtime_test: false
- arch: mips_24kc
target: ath79-generic
runtime_test: true
- arch: mipsel_24kc
target: mt7621
runtime_test: false
- arch: powerpc_464fp
target: apm821xx-nand
runtime_test: false
- arch: powerpc_8548
target: mpc85xx-p1010
runtime_test: false
- arch: aarch64_cortex-a53
target: mvebu-cortexa53
runtime_test: true
- arch: arm_cortex-a15_neon-vfpv4
target: armvirt-32
runtime_test: true
- arch: i386_pentium-mmx
target: x86-geode
runtime_test: true
- arch: x86_64
target: x86-64
runtime_test: true
steps:
- uses: actions/checkout@v3
with:
fetch-depth: 0
- name: Determine branch name
run: |
BRANCH="${GITHUB_BASE_REF#refs/heads/}"
echo "Building for $BRANCH"
echo "BRANCH=$BRANCH" >> $GITHUB_ENV
- name: Determine changed packages
run: |
# only detect packages with changes
PKG_ROOTS=$(find . -name Makefile | \
grep -v ".*/src/Makefile" | \
sed -e 's@./\(.*\)/Makefile@\1/@')
CHANGES=$(git diff --diff-filter=d --name-only origin/$BRANCH...)
for ROOT in $PKG_ROOTS; do
for CHANGE in $CHANGES; do
if [[ "$CHANGE" == "$ROOT"* ]]; then
PACKAGES+=$(echo "$ROOT" | sed -e 's@.*/\(.*\)/@\1 @')
break
fi
done
done
# fallback to test packages if nothing explicitly changes this is
# should run if other mechanics in packages.git changed
PACKAGES="${PACKAGES:-vim attendedsysupgrade-common bmon}"
echo "Building $PACKAGES"
echo "PACKAGES=$PACKAGES" >> $GITHUB_ENV
- name: Generate build keys
run: |
sudo apt-get update
sudo apt-get install -y signify-openbsd
signify-openbsd -G -n -c 'DO NOT USE - OpenWrt packages feed CI' -p packages_ci.pub -s packages_ci.sec
EOF=$(dd if=/dev/urandom bs=15 count=1 status=none | base64)
echo "KEY_BUILD<<$EOF" >> $GITHUB_ENV
cat packages_ci.sec >> $GITHUB_ENV
echo "$EOF" >> $GITHUB_ENV
- name: Build
uses: openwrt/gh-action-sdk@v5
env:
ARCH: ${{ matrix.arch }}-${{ env.BRANCH }}
FEEDNAME: packages_ci
INDEX: 1
KEY_BUILD: ${{ env.KEY_BUILD }}
- name: Move created packages to project dir
run: cp bin/packages/${{ matrix.arch }}/packages_ci/* . || true
- name: Collect metadata
run: |
MERGE_ID=$(git rev-parse --short HEAD)
echo "MERGE_ID=$MERGE_ID" >> $GITHUB_ENV
echo "BASE_ID=$(git rev-parse --short HEAD^1)" >> $GITHUB_ENV
echo "HEAD_ID=$(git rev-parse --short HEAD^2)" >> $GITHUB_ENV
PRNUMBER=${GITHUB_REF_NAME%/merge}
echo "PRNUMBER=$PRNUMBER" >> $GITHUB_ENV
echo "ARCHIVE_NAME=${{matrix.arch}}-PR$PRNUMBER-$MERGE_ID" >> $GITHUB_ENV
- name: Generate metadata
run: |
cat << _EOF_ > PKG-INFO
Metadata-Version: 2.1
Name: ${{env.ARCHIVE_NAME}}
Version: $BRANCH
Author: $GITHUB_ACTOR
Home-page: $GITHUB_SERVER_URL/$GITHUB_REPOSITORY/pull/$PRNUMBER
Download-URL: $GITHUB_SERVER_URL/$GITHUB_REPOSITORY/actions/runs/$GITHUB_RUN_ID
Summary: $PACKAGES
Platform: ${{ matrix.arch }}
Packages for OpenWrt $BRANCH running on ${{matrix.arch}}, built from PR $PRNUMBER
at commit $HEAD_ID, against $BRANCH at commit $BASE_ID, with merge SHA $MERGE_ID.
Modified packages:
_EOF_
for p in $PACKAGES
do
echo " "$p >> PKG-INFO
done
echo >> PKG-INFO
echo Full file listing: >> PKG-INFO
ls -al *.ipk >> PKG-INFO || true
cat PKG-INFO
- name: Store packages
uses: actions/upload-artifact@v3
with:
name: ${{env.ARCHIVE_NAME}}-packages
path: |
Packages
Packages.*
*.ipk
PKG-INFO
- name: Store logs
uses: actions/upload-artifact@v3
with:
name: ${{env.ARCHIVE_NAME}}-logs
path: |
logs/
PKG-INFO
- name: Remove logs
run: sudo rm -rf logs/ || true
- name: Check if any packages were built
run: |
if [ -n "$(find . -maxdepth 1 -type f -name '*.ipk' -print -quit)" ]; then
echo "Found *.ipk files"
HAVE_IPKS=true
else
echo "No *.ipk files found"
HAVE_IPKS=false
fi
echo "HAVE_IPKS=$HAVE_IPKS" >> $GITHUB_ENV
- name: Register QEMU
if: ${{ matrix.runtime_test && fromJSON(env.HAVE_IPKS) }}
run: |
sudo apt-get update
sudo apt-get install -y qemu-user-static binfmt-support
sudo update-binfmts --import
- name: Build Docker container
if: ${{ matrix.runtime_test && fromJSON(env.HAVE_IPKS) }}
run: |
docker build -t test-container --build-arg ARCH .github/workflows/
env:
ARCH: ${{ matrix.arch }}-${{ env.BRANCH }}
- name: Test via Docker container
if: ${{ matrix.runtime_test && fromJSON(env.HAVE_IPKS) }}
run: |
docker run --rm -v $GITHUB_WORKSPACE:/ci test-container
name: Feeds Package Test Build
uses: openwrt/actions-shared-workflows/.github/workflows/multi-arch-test-build.yml@main

View File

@@ -16,6 +16,7 @@ PKG_HASH:=ca48d2f17e071deead5e6e9cc9e388bf6a3270d695e61976b3794d4d927b5c4e
PKG_MAINTAINER:=Toni Uhlig <matzeton@googlemail.com>
PKG_LICENSE:=GPL-2.0-or-later
PKG_LICENSE_FILES:=COPYING
PKG_CPE_ID:=cpe:/a:atop_project:atop
include $(INCLUDE_DIR)/package.mk

39
admin/bottom/Makefile Normal file
View File

@@ -0,0 +1,39 @@
# SPDX-License-Identifier: GPL-2.0-only
#
# Copyright (C) 2023 Luca Barbato
include $(TOPDIR)/rules.mk
PKG_NAME:=bottom
PKG_VERSION:=0.9.7
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://codeload.github.com/ClementTsang/bottom/tar.gz/$(PKG_VERSION)?
PKG_HASH:=29c3f75323ae0245576ea23268bb0956757352bf3b16d05f511357655b9cc71e
PKG_MAINTAINER:=Luca Barbato <lu_zero@luminem.org>
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=LICENSE
PKG_BUILD_DEPENDS:=rust/host
PKG_BUILD_PARALLEL:=1
include $(INCLUDE_DIR)/package.mk
include ../../lang/rust/rust-package.mk
define Package/bottom
SECTION:=admin
CATEGORY:=Administration
TITLE:=Interactive processes viewer
DEPENDS:=$(RUST_ARCH_DEPENDS)
URL:=https://github.com/ClementTsang/bottom
endef
define Package/bottom/description
A customizable cross-platform graphical process/system monitor
for the terminal.
endef
$(eval $(call RustBinPackage,bottom))
$(eval $(call BuildPackage,bottom))

View File

@@ -1,17 +1,18 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=btop
PKG_VERSION:=1.2.13
PKG_RELEASE:=2
PKG_VERSION:=1.4.4
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL=https://codeload.github.com/aristocratos/btop/tar.gz/v$(PKG_VERSION)?
PKG_HASH:=668dc4782432564c35ad0d32748f972248cc5c5448c9009faeb3445282920e02
PKG_HASH:=98d464041015c888c7b48de14ece5ebc6e410bc00ca7bb7c5a8010fe781f1dd8
PKG_MAINTAINER:=Tianling Shen <cnsztl@immortalwrt.org>
PKG_LICENSE:=Apache-2.0
PKG_LICENSE_FILES:=LICENSE
PKG_BUILD_FLAGS:=no-lto
PKG_BUILD_PARALLEL:=1
PKG_INSTALL:=1
@@ -32,14 +33,11 @@ define Package/btop/description
C++ version and continuation of bashtop and bpytop.
endef
BTOP_LDFLAGS:=-pthread -DFMT_HEADER_ONLY -D_FILE_OFFSET_BITS=64
MAKE_FLAGS+= \
PLATFORM=Linux \
OPTFLAGS="$(TARGET_CXXFLAGS)" \
LDCXXFLAGS="$(TARGET_LDFLAGS) -pthread"
ifneq ($(CONFIG_USE_MUSL),)
TARGET_CFLAGS += -D_LARGEFILE64_SOURCE
endif
LDCXXFLAGS="$(TARGET_LDFLAGS) $(BTOP_LDFLAGS)"
define Package/btop/install
$(INSTALL_DIR) $(1)/usr/bin
@@ -49,6 +47,8 @@ define Package/btop/install
$(INSTALL_DIR) $(1)/etc/profile.d
$(CP) $(CURDIR)/files/btop.sh $(1)/etc/profile.d/
$(INSTALL_DIR) $(1)/etc/uci-defaults
$(CP) $(CURDIR)/files/btop.uci $(1)/etc/uci-defaults/90-btop-migrate-alias
endef
$(eval $(call BuildPackage,btop))

View File

@@ -1 +1 @@
alias btop="btop --utf-force"
alias btop="btop --force-utf"

View File

@@ -0,0 +1,5 @@
#!/bin/sh
grep -q "utf-force" "/etc/profile.d/btop.sh" && sed -i "s,utf-force,force-utf,g" "/etc/profile.d/btop.sh"
exit 0

View File

@@ -8,12 +8,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=htop
PKG_VERSION:=3.2.2
PKG_VERSION:=3.3.0
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://codeload.github.com/htop-dev/htop/tar.gz/$(PKG_VERSION)?
PKG_HASH:=3829c742a835a0426db41bb039d1b976420c21ec65e93b35cd9bfd2d57f44ac8
PKG_HASH:=1e5cc328eee2bd1acff89f860e3179ea24b85df3ac483433f92a29977b14b045
PKG_LICENSE:=GPL-2.0-or-later
PKG_LICENSE_FILES:=COPYING

View File

@@ -14,7 +14,7 @@ PKG_RELEASE:=5
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
PKG_SOURCE_URL:=@SF/$(PKG_NAME)
PKG_HASH:=0c1ba3b1555edefb7c32ae8cd6a3e04322056bc087918f07189eeedfc8b81e01
PKG_LICENSE:=BSD-3-clause
PKG_LICENSE:=BSD-3-Clause
PKG_LICENSE_FILES:=COPYING
PKG_CPE_ID:=cpe:/a:ipmitool_project:ipmitool

View File

@@ -5,15 +5,16 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=openwisp-config
PKG_VERSION:=1.1.0
PKG_RELEASE:=2
PKG_MAINTAINER:=Federico Capoano <f.capoano@openwisp.io>
PKG_LICENSE:=GPL-3.0-or-later
PKG_SOURCE_URL:=https://github.com/openwisp/openwisp-config.git
PKG_MIRROR_HASH:=7daa10a9d170e665f33a5555a246b4da2223c2d8d0e8a047edb01701c8886986
PKG_MIRROR_HASH:=18aac13395b2b78d87a50bcc9ab962ff12ab041ec032c214c34d3de3ac67f10a
PKG_SOURCE_PROTO:=git
PKG_SOURCE_VERSION:=1.0.1
PKG_SOURCE_VERSION:=$(PKG_VERSION)
include $(INCLUDE_DIR)/package.mk
@@ -37,6 +38,7 @@ endef
define Package/openwisp-config/conffiles
/etc/config/openwisp
/etc/openwisp/
endef
define Package/openwisp-config/install
@@ -44,16 +46,16 @@ define Package/openwisp-config/install
$(1)/usr/sbin \
$(1)/etc/init.d \
$(1)/etc/config \
$(1)/etc/openwisp \
$(1)/usr/lib/openwisp-config \
$(1)/usr/lib/lua/openwisp
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-config/files/openwisp.agent \
$(1)/usr/sbin/openwisp_config
$(1)/usr/sbin/openwisp-config
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-config/files/openwisp.init \
$(1)/etc/init.d/openwisp_config
$(1)/etc/init.d/openwisp-config
$(INSTALL_CONF) $(PKG_BUILD_DIR)/openwisp-config/files/openwisp.config \
$(1)/etc/config/openwisp
@@ -94,7 +96,11 @@ define Package/openwisp-config/install
$(PKG_BUILD_DIR)/openwisp-config/files/sbin/openwisp-get-address.lua \
$(1)/usr/sbin/openwisp-get-address
$(CP) $(PKG_BUILD_DIR)/VERSION $(1)/etc/openwisp/
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-config/files/sbin/openwisp-get-random-number.lua \
$(1)/usr/sbin/openwisp-get-random-number
$(CP) $(PKG_BUILD_DIR)/VERSION $(1)/usr/lib/openwisp-config/
endef
$(eval $(call BuildPackage,openwisp-config))

View File

@@ -0,0 +1,9 @@
menu "netjson-monitoring Configuration"
config NETJSON_MONITORING_IWINFO
bool "Enable rpcd-mod-iwinfo"
default y
help
Whether to include the rpcd-mod-iwinfo dependency (enabled by default).
endmenu

View File

@@ -5,16 +5,17 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=openwisp-monitoring
PKG_RELEASE:=2
PKG_VERSION:=0.2.0
PKG_RELEASE:=3
PKG_MAINTAINER:=Federico Capoano <support@openwisp.io>
PKG_LICENSE:=GPL-3.0-or-later
PKG_LICENSE_FILES:=LICENSE
PKG_SOURCE_URL:=https://github.com/openwisp/openwrt-openwisp-monitoring.git
PKG_MIRROR_HASH:=ce2ed94d24f68c58320ca700a088471368e1097754be23ad6053842cf0aaa97e
PKG_MIRROR_HASH:=aad91b9a1cd08e23782a4f55e27c6af5502f1dff1e91cf10bcd6d99d939641f0
PKG_SOURCE_PROTO:=git
PKG_SOURCE_VERSION:=0.1.1
PKG_SOURCE_VERSION:=$(PKG_VERSION)
PKGARCH:=all
include $(INCLUDE_DIR)/package.mk
@@ -29,14 +30,19 @@ define Package/openwisp-monitoring
endef
define Package/netjson-monitoring
TITLE:=NetJson Monitoring
TITLE:=NetJSON Monitoring
CATEGORY:=Administration
SECTION:=admin
SUBMENU:=openwisp
DEPENDS:=+libubus-lua +lua-cjson +rpcd +rpcd-mod-iwinfo
DEPENDS:=+libubus-lua +lua-cjson +rpcd
DEPENDS+=+NETJSON_MONITORING_IWINFO:rpcd-mod-iwinfo
URL:=http://openwisp.org
endef
define Package/netjson-monitoring/config
source "$(SOURCE)/Config.in"
endef
define Build/Compile
endef
@@ -49,7 +55,7 @@ define Package/netjson-monitoring/install
$(1)/usr/sbin \
$(1)/usr/libexec \
$(1)/usr/lib/lua/openwisp-monitoring \
$(1)/etc/openwisp-monitoring
$(1)/usr/lib/openwisp-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/sbin/netjson-monitoring.lua \
@@ -87,7 +93,12 @@ define Package/netjson-monitoring/install
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/wifi.lua \
$(1)/usr/lib/lua/openwisp-monitoring/wifi.lua
$(CP) $(PKG_BUILD_DIR)/VERSION $(1)/etc/openwisp-monitoring/
# Iwinfo is enabled by default unless specified otherwise
ifeq ($(CONFIG_NETJSON_MONITORING_IWINFO), y)
$(CP) $(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/iwinfo.lua $(1)/usr/lib/lua/openwisp-monitoring/iwinfo.lua
endif
$(CP) $(PKG_BUILD_DIR)/VERSION $(1)/usr/lib/openwisp-monitoring/
endef
@@ -96,7 +107,8 @@ define Package/openwisp-monitoring/install
$(1)/usr/sbin \
$(1)/etc/init.d \
$(1)/etc/config \
$(1)/etc/openwisp-monitoring
$(1)/usr/lib/openwisp-monitoring \
$(1)/etc/hotplug.d/openwisp
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/monitoring.agent \
@@ -106,6 +118,10 @@ define Package/openwisp-monitoring/install
$(PKG_BUILD_DIR)/openwisp-monitoring/files/monitoring.init \
$(1)/etc/init.d/openwisp-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/openwisp-monitoring.hotplug \
$(1)/etc/hotplug.d/openwisp/openwisp-monitoring
$(INSTALL_CONF) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/monitoring.config \
$(1)/etc/config/openwisp-monitoring

View File

@@ -2,7 +2,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=reschroot
PKG_VERSION:=1.6.13
PKG_RELEASE:=1
PKG_RELEASE:=2
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://codeberg.org/shelter/reschroot/archive/release

View File

@@ -0,0 +1,32 @@
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -310,6 +310,8 @@ include_directories(${PROJECT_BINARY_DIR
${PROJECT_BINARY_DIR}
${PROJECT_SOURCE_DIR})
+find_package(Intl)
+
add_subdirectory(sbuild)
add_subdirectory(bin)
add_subdirectory(etc)
--- a/sbuild/CMakeLists.txt
+++ b/sbuild/CMakeLists.txt
@@ -208,6 +208,7 @@ add_library(sbuild STATIC
${public_chroot_facet_cc_sources})
target_link_libraries(sbuild
PRIVATE
+ Intl::Intl
${CMAKE_THREAD_LIBS_INIT}
${PAM_LIBRARY}
${UUID_LIBRARY}
--- a/sbuild/sbuild-basic-keyfile.tcc
+++ b/sbuild/sbuild-basic-keyfile.tcc
@@ -214,7 +214,7 @@ sbuild::basic_keyfile<K, P>::get_locale_
}
catch (std::runtime_error const& e) // Invalid locale
{
- localename = std::locale::classic();
+ localename = std::locale::classic().name();
}
std::string::size_type pos;
bool status = false;

View File

@@ -8,18 +8,18 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=sudo
PKG_VERSION:=1.9.13p3
PKG_VERSION:=1.9.17p1
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://www.sudo.ws/dist
PKG_HASH:=92334a12bb93e0c056b09f53e255ccb7d6f67c6350e2813cd9593ceeca78560b
PKG_HASH:=ff607ea717072197738a78f778692cd6df9a7e3e404565f51de063ca27455d32
PKG_MAINTAINER:=Alexandru Ardelean <ardeleanalex@gmail.com>
PKG_LICENSE:=ISC
PKG_LICENSE_FILES:=doc/LICENSE
PKG_CPE_ID:=cpe:/a:todd_miller:sudo
PKG_LICENSE_FILES:=LICENSE.md
PKG_CPE_ID:=cpe:/a:sudo_project:sudo
PKG_INSTALL:=1
PKG_BUILD_PARALLEL:=1

View File

@@ -1,6 +1,6 @@
--- a/Makefile.in
+++ b/Makefile.in
@@ -73,7 +73,7 @@ EGREP = @EGREP@
@@ -75,7 +75,7 @@ EGREP = @EGREP@
SED = @SED@
INSTALL = $(SHELL) $(scriptdir)/install-sh -c

7
admin/sudo/test.sh Normal file
View File

@@ -0,0 +1,7 @@
#!/bin/sh
case "$1" in
sudo)
sudo --version | grep "$2"
;;
esac

View File

@@ -1,17 +1,17 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=syslog-ng
PKG_VERSION:=4.2.0
PKG_VERSION:=4.7.1
PKG_RELEASE:=1
PKG_MAINTAINER:=Josef Schlehofer <josef.schlehofer@nic.cz>
PKG_MAINTAINER:=Josef Schlehofer <pepe.schlehofer@gmail.com>
PKG_LICENSE:=LGPL-2.1-or-later GPL-2.0-or-later
PKG_LICENSE_FILES:=COPYING LGPL.txt GPL.txt
PKG_CPE_ID:=cpe:/a:balabit:syslog-ng
PKG_CPE_ID:=cpe:/a:oneidentity:syslog-ng
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://github.com/syslog-ng/syslog-ng/releases/download/$(PKG_NAME)-$(PKG_VERSION)/
PKG_HASH:=092bd17fd47002c988aebdf81d0ed3f3cfd0e82b388d2453bcaa5e67934f4dda
PKG_HASH:=5477189a2d12325aa4faebfcf59f5bdd9084234732f0c3ec16dd253847dacf1c
PKG_BUILD_PARALLEL:=1
PKG_INSTALL:=1
@@ -21,6 +21,7 @@ PKG_BUILD_DEPENDS:= \
PKG_CONFIG_DEPENDS:= \
CONFIG_IPV6 \
CONFIG_LIBCURL_ZLIB
include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/nls.mk
@@ -33,7 +34,7 @@ define Package/syslog-ng
CATEGORY:=Administration
TITLE:=A powerful syslog daemon
URL:=https://www.syslog-ng.com/products/open-source-log-management/
DEPENDS:=+libpcre +glib2 +libopenssl +libpthread +librt +zlib +libdbi +libjson-c +libcurl +libuuid +SYSLOGNG_LOGROTATE:logrotate
DEPENDS:=+libpcre2 +glib2 +libopenssl +libpthread +librt +libdbi +libjson-c +libcurl +libuuid +SYSLOGNG_LOGROTATE:logrotate +LIBCURL_ZLIB:zlib
endef
define Package/syslog-ng/description
@@ -89,8 +90,9 @@ CONFIGURE_ARGS += \
--disable-sql \
--disable-linux-caps \
--with-jsonc=system \
--enable-cpp=no \
--enable-json=yes \
--enable-http=yes \
$(if $(CONFIG_LIBCURL_ZLIB),--enable-http=yes,--enable-http=no) \
--disable-smtp \
--disable-mqtt \
--disable-redis \

View File

@@ -1,10 +1,7 @@
#############################################################################
# OpenWrt syslog-ng.conf specific file
# which collects all local logs into a single file called /var/log/messages.
# More details about these settings can be found here:
# https://www.syslog-ng.com/technical-documents/list/syslog-ng-open-source-edition
# Collect all local logs into a single file /var/log/messages.
# See https://www.syslog-ng.com/technical-documents/list/syslog-ng-open-source-edition
@version: 4.1
@version: 4.7
@include "scl.conf"
options {
@@ -13,7 +10,7 @@ options {
keep_hostname(yes); # Enable or disable hostname rewriting.
log_fifo_size(256); # The number of messages that the output queue can store.
log_msg_size(1024); # Maximum length of a message in bytes.
stats_freq(0); # The period between two STATS messages (sent by syslog-ng, containing statistics about dropped logs) in seconds.
stats(freq(0)); # The period between two STATS messages (sent by syslog-ng, containing statistics about dropped logs) in seconds.
flush_lines(0); # How many lines are flushed to a destination at a time.
use_fqdn(no); # Add Fully Qualified Domain Name instead of short hostname.
};
@@ -43,7 +40,7 @@ source s_network {
};
source kernel {
file("/proc/kmsg" program_override("kernel"));
file("/proc/kmsg" program_override("kernel"));
};
destination messages {
@@ -53,15 +50,13 @@ destination messages {
log {
source(src);
source(net);
source(kernel);
source(kernel);
destination(messages);
# uncomment this line to open port 514 to receive messages
#source(s_network);
};
#
# Finally, include any user settings last so that s/he can override or
# Include any user settings last so that s/he can override or
# supplement all "canned" settings inherited from the distribution.
#
@include "/etc/syslog-ng.d/" # Put any customization files in this directory

View File

@@ -8,12 +8,13 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=zabbix
PKG_VERSION:=6.2.3
PKG_RELEASE:=3
PKG_VERSION:=6.4.7
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://cdn.zabbix.com/zabbix/sources/stable/6.2/
PKG_HASH:=2be7e57fb33a55fee71480598e317ffa6a8ee5a39639a7e1b42b2ea6872107b5
PKG_SOURCE_URL:=https://cdn.zabbix.com/zabbix/sources/stable/$(basename $(PKG_VERSION))/ \
https://cdn.zabbix.com/zabbix/sources/oldstable/$(basename $(PKG_VERSION))/
PKG_HASH:=6b4e81f07de4c82c7994871bea51be4d6427683fa9a7fbe112fd7559b3670e49
PKG_MAINTAINER:=Etienne CHAMPETIER <champetier.etienne@gmail.com>
PKG_LICENSE:=GPL-2.0
@@ -56,12 +57,13 @@ define Package/zabbix/Default
TITLE:=Zabbix
URL:=https://www.zabbix.com/
USERID:=zabbix=53:zabbix=53
DEPENDS+=$(ICONV_DEPENDS) +libpcre +zlib
DEPENDS+=$(ICONV_DEPENDS) +libpcre2 +zlib
endef
define Package/zabbix-agentd
$(call Package/zabbix/Default)
TITLE+= agentd
DEPENDS+= +libevent2-pthreads
PROVIDES:=zabbix-agentd
VARIANT:=nossl
DEFAULT_VARIANT:=1
@@ -70,7 +72,7 @@ endef
define Package/zabbix-agentd-openssl
$(call Package/zabbix/Default)
TITLE+= agentd (with OpenSSL)
DEPENDS+= +libopenssl
DEPENDS+= +libevent2-pthreads +libopenssl
PROVIDES:=zabbix-agentd
VARIANT:=openssl
endef
@@ -78,7 +80,7 @@ endef
define Package/zabbix-agentd-gnutls
$(call Package/zabbix/Default)
TITLE+= agentd (with GnuTLS)
DEPENDS+= +libgnutls
DEPENDS+= +libevent2-pthreads +libgnutls
PROVIDES:=zabbix-agentd
VARIANT:=gnutls
endef
@@ -156,6 +158,7 @@ define Package/zabbix-server/Default
+ZABBIX_MYSQL:libmariadbclient \
@(!ZABBIX_SQLITE) \
+libevent2 \
+libevent2-pthreads \
+fping
endef
@@ -208,6 +211,7 @@ define Package/zabbix-proxy/Default
+ZABBIX_MYSQL:libmariadbclient \
+ZABBIX_SQLITE:libsqlite3 \
+libevent2 \
+libevent2-pthreads \
+fping
endef
@@ -261,8 +265,8 @@ CONFIGURE_ARGS+= \
$(if $(CONFIG_ZABBIX_MYSQL),--with-mysql) \
$(if $(CONFIG_ZABBIX_POSTGRESQL),--with-postgresql) \
$(if $(CONFIG_ZABBIX_SQLITE),--with-sqlite3=$(STAGING_DIR)/usr) \
--with-libevent=$(STAGING_DIR)/usr/include/libevent \
--with-libpcre=$(STAGING_DIR)/usr/include \
--with-libevent=$(STAGING_DIR)/usr/include \
--with-libpcre2=$(STAGING_DIR)/usr/include \
--with-zlib=$(STAGING_DIR)/usr/include
ifeq ($(BUILD_VARIANT),openssl)

View File

@@ -1,6 +1,6 @@
--- a/src/libs/zbxcommon/str.c
+++ b/src/libs/zbxcommon/str.c
@@ -49,7 +49,7 @@ static const char help_message_footer[]
--- a/src/libs/zbxcommon/misc.c
+++ b/src/libs/zbxcommon/misc.c
@@ -329,7 +329,7 @@ void zbx_help(void)
void zbx_version(void)
{
printf("%s (Zabbix) %s\n", title_message, ZABBIX_VERSION);

View File

@@ -8,12 +8,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=autoconf
PKG_VERSION:=2.70
PKG_RELEASE:=2
PKG_VERSION:=2.72
PKG_RELEASE:=1
PKG_SOURCE_URL:=@GNU/autoconf
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
PKG_HASH:=fa9e227860d9d845c0a07f63b88c8d7a2ae1aa2345fb619384bb8accc19fecc6
PKG_HASH:=ba885c1319578d6c94d46e9b0dceb4014caafe2490e437a0dbca3f270a223f5a
PKG_MAINTAINER:=Heinrich Schuchardt <xypron.glpk@gmx.de>
PKG_LICENSE:=GPL-3.0-or-later

View File

@@ -8,15 +8,16 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=automake
PKG_VERSION:=1.16.3
PKG_VERSION:=1.16.5
PKG_RELEASE:=1
PKG_SOURCE_URL:=@GNU/automake
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
PKG_HASH:=ff2bf7656c4d1c6fdda3b8bebb21f09153a736bcba169aaf65eab25fa113bf3a
PKG_HASH:=f01d58cd6d9d77fbdca9eb4bbd5ead1988228fdb73d6f7a201f5f8d6b118b469
PKG_MAINTAINER:=Heinrich Schuchardt <xypron.glpk@gmx.de>
PKG_LICENSE:=GPL-3.0-or-later
PKG_LICENSE:=GPL-2.0-or-later
PKG_LICENSE_FILES:=COPYING
PKG_CPE_ID:=cpe:/a:gnu:automake
PKG_INSTALL:=1

View File

@@ -15,6 +15,7 @@ PKG_HASH:=9bba0214ccf7f1079c5d59210045227bcf619519840ebfa80cd3849cff5a5bf2
PKG_MAINTAINER:=W. Michael Petullo <mike@flyn.org>
PKG_LICENSE:=GPL-3.0-or-later
PKG_LICENSE_FILES:=COPYING
PKG_CPE_ID:=cpe:/a:gnu:bison
PKG_INSTALL:=1

View File

@@ -1,12 +1,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=delve
PKG_VERSION:=1.20.1
PKG_VERSION:=1.24.0
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://codeload.github.com/go-delve/delve/tar.gz/v$(PKG_VERSION)?
PKG_HASH:=a10aa97d3f6b6219877a73dd305d511442ad0caab740de76fc005796a480de93
PKG_HASH:=940fc50d6338dfe515982ac5fcc3247616f23e2652048ac4f2b439ebd51741c1
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=LICENSE

View File

@@ -18,6 +18,7 @@ PKG_HASH:=a6bdd7d1b31266d11c4f4de6c1b748d4607ab0231af5188fc2533d0ae2438fec
PKG_MAINTAINER:=Roger D <rogerdammit@gmail.com>
PKG_LICENSE:=GPL-3.0
PKG_LICENSE_FILES:=COPYING
PKG_CPE_ID:=cpe:/a:gnu:diffutils
PKG_BUILD_PARALLEL:=1
PKG_INSTALL:=1

View File

@@ -8,12 +8,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=gitlab-runner
PKG_VERSION:=14.3.2
PKG_RELEASE:=2
PKG_VERSION:=16.0.2
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-v$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://gitlab.com/gitlab-org/gitlab-runner/-/archive/v$(PKG_VERSION)
PKG_HASH:=f67aeae05349f5c612ea5d8772407237caf4da586c0365e3c7edceec6b853d8c
PKG_HASH:=f874b9babe21ae04007abfc901e9ad4c0c1ec22095d4de3e22e176914683cb5d
PKG_MAINTAINER:=Jan Pavlinec <jan.pavlinec1@gmail.com>
PKG_LICENSE:=MIT
@@ -23,7 +23,9 @@ PKG_BUILD_DIR:=$(BUILD_DIR)/gitlab-runner-v$(PKG_VERSION)
PKG_BUILD_DEPENDS:=golang/host
PKG_BUILD_PARALLEL:=1
PKG_BUILD_FLAGS:=no-mips16
GO_PKG:=gitlab.com/gitlab-org/gitlab-runner
GO_PKG_LDFLAGS_X:=$(GO_PKG)/common.VERSION=$(PKG_VERSION)
include $(INCLUDE_DIR)/package.mk
include ../../lang/golang/golang-package.mk
@@ -41,5 +43,12 @@ define Package/gitlab-runner/description
GitLab CI/CD to run jobs in a pipeline.
endef
define Package/gitlab-runner/install
$(call GoPackage/Package/Install/Bin,$(PKG_INSTALL_DIR))
$(INSTALL_DIR) $(1)/usr/bin/
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/gitlab-runner $(1)/usr/bin/
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/gitlab-runner-helper $(1)/usr/bin/
endef
$(eval $(call GoBinPackage,gitlab-runner))
$(eval $(call BuildPackage,gitlab-runner))

View File

@@ -1,6 +1,6 @@
--- a/common/buildtest/masking.go
+++ b/common/buildtest/masking.go
@@ -45,7 +45,7 @@ func RunBuildWithMasking(t *testing.T, c
@@ -55,7 +55,7 @@ func RunBuildWithMasking(t *testing.T, c
buf.Finish()

View File

@@ -0,0 +1,3 @@
#!/bin/sh
gitlab-runner --version | grep "$PKG_VERSION"

View File

@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=lttng-tools
PKG_VERSION:=2.13.9
PKG_RELEASE:=1
PKG_RELEASE:=2
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
PKG_SOURCE_URL:=https://lttng.org/files/$(PKG_NAME)/

View File

@@ -0,0 +1,48 @@
From 7d669a90212e105b0f669aa2ab38c987b187baab Mon Sep 17 00:00:00 2001
From: Hongxu Jia <hongxu.jia@windriver.com>
Date: Wed, 21 May 2025 13:09:25 +0800
Subject: [PATCH] fix lttng-tools fails to compile with libxml2 2.14.0+
Description:
| In file included from /srv/pokybuild/yocto-worker/qemux86-alt/build/build/tmp/work/core2-32-poky-linux/lttng-tools/2.13.15/recipe-sysroot/usr/include/libxml2/libxml/parser.h:25,
| from ../../../../lttng-tools-2.13.15/src/common/config/session-config.c:29:
| /srv/pokybuild/yocto-worker/qemux86-alt/build/build/tmp/work/core2-32-poky-linux/lttng-tools/2.13.15/recipe-sysroot/usr/include/libxml2/libxml/encoding.h:173:7: note: declared here
| 173 | } input XML_DEPRECATED_MEMBER;
| | ^~~~~
| ../../../../lttng-tools-2.13.15/src/common/config/session-config.c:432:15: error: called object is not a function or function pointer
| 432 | ret = handler->input(out_str, &out_len, (const xmlChar *) in_str, &in_len);
| | ^~~~~~~
| At top level:
| cc1: note: unrecognized command-line option '-Wno-incomplete-setjmp-declaration' may have been intended to silence earlier diagnostics
According to [1][2], the UTF-8 handler is
```
static xmlCharEncError
UTF8ToUTF8(void *vctxt ATTRIBUTE_UNUSED,
unsigned char* out, int *outlen,
const unsigned char* in, int *inlen,
int flush ATTRIBUTE_UNUSED)
```
Update input.func with setting ATTRIBUTE_UNUSED params with NULL and 0
[1] https://gitlab.gnome.org/GNOME/libxml2/-/commit/38f475072aefe032fff1dc058df3e56c1e7062fa
[2] https://gitlab.gnome.org/GNOME/libxml2/-/commit/69b83bb68e2a8ed0013f80c51b9a358714b00c9a#478024cc18a2cc8dbaed34076e9775f6827f413d_2188_2201
Signed-off-by: Marko, Peter <Peter.Marko@siemens.com>
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
---
src/common/config/session-config.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
--- a/src/common/config/session-config.c
+++ b/src/common/config/session-config.c
@@ -429,7 +429,7 @@ static xmlChar *encode_string(const char
goto end;
}
- ret = handler->input(out_str, &out_len, (const xmlChar *) in_str, &in_len);
+ ret = handler->input.func(NULL, out_str, &out_len, (const xmlChar *) in_str, &in_len, 0);
if (ret < 0) {
xmlFree(out_str);
out_str = NULL;

View File

@@ -8,12 +8,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=make
PKG_VERSION:=4.3
PKG_VERSION:=4.4.1
PKG_RELEASE:=1
PKG_SOURCE_URL:=@GNU/make
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_HASH:=e05fdde47c5f7ca45cb697e973894ff4f5d79e13b750ed57d7b66d8defc78e19
PKG_HASH:=dd16fb1d67bfab79a72f5e8390735c49e3e8e70b4945a15ab1f81ddb78658fb3
PKG_MAINTAINER:=Heinrich Schuchardt <xypron.glpk@gmx.de>
PKG_LICENSE:=GPL-3.0-or-later

View File

@@ -11,6 +11,7 @@ PKG_HASH:=c77745f4802375efeee2ec5c0ad6b7f037ea9c87c92b149a9637ff099f162558
PKG_MAINTAINER:=Oskari Rauta <oskari.rauta@gmail.com>
PKG_LICENSE:=BSD-2-Clause
PKG_LICENSE_FILES:=LICENSE
PKG_CPE_ID:=cpe:/a:nasm:netwide_assembler
PKG_BUILD_PARALLEL:=1
PKG_INSTALL:=1

View File

@@ -1,55 +0,0 @@
#
# Copyright (C) 2020 Jeffery To
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
PKG_NAME:=packr
PKG_VERSION:=1.30.1
PKG_RELEASE:=1
PKG_SOURCE_PROTO:=git
PKG_SOURCE_URL:=https://github.com/gobuffalo/packr.git
PKG_SOURCE_VERSION:=v$(PKG_VERSION)
PKG_MIRROR_HASH:=fe199299e6b7236cf9538c06d27ab1a4efd93cda2b3ea85bab9154be364760c8
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=LICENSE.txt
PKG_MAINTAINER:=Jeffery To <jeffery.to@gmail.com>
HOST_BUILD_DEPENDS:=golang/host
HOST_BUILD_PARALLEL:=1
PKG_BUILD_DEPENDS:=golang/host
PKG_BUILD_PARALLEL:=1
PKG_BUILD_FLAGS:=no-mips16
GO_PKG:=github.com/gobuffalo/packr
GO_PKG_BUILD_PKG:=github.com/gobuffalo/packr/packr
include $(INCLUDE_DIR)/host-build.mk
include $(INCLUDE_DIR)/package.mk
include ../../lang/golang/golang-host-build.mk
include ../../lang/golang/golang-package.mk
define Package/packr
SECTION:=devel
CATEGORY:=Development
TITLE:=Embed static files into Go binaries
URL:=https://github.com/gobuffalo/packr
DEPENDS:=$(GO_ARCH_DEPENDS)
endef
define Package/packr/description
Packr is a simple solution for bundling static assets inside of Go
binaries. Most importantly it does it in a way that is friendly to
developers while they are developing.
endef
$(eval $(call GoBinHostBuild))
$(eval $(call HostBuild))
$(eval $(call GoBinPackage,packr))
$(eval $(call BuildPackage,packr))

View File

@@ -16,6 +16,7 @@ PKG_HASH:=ef9c7e61822b7cb8356e6e9e1dca58d9556f3200d78acab35e4347e9d4c2bbaf
PKG_MAINTAINER:=Rosen Penev <rosenp@gmail.com>
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=COPYING
PKG_CPE_ID:=cpe:/a:pkgconf:pkgconf
include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/meson.mk

37
devel/ragel/Makefile Normal file
View File

@@ -0,0 +1,37 @@
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
PKG_NAME:=ragel
PKG_VERSION:=6.10
PKG_RELEASE:=1
PKG_SOURCE_URL:=https://www.colm.net/files/ragel/
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_HASH:=5f156edb65d20b856d638dd9ee2dfb43285914d9aa2b6ec779dac0270cd56c3f
PKG_MAINTAINER:=John Audia <therealgraysky@proton.me>
PKG_LICENSE:=GPL-2.0-only
PKG_LICENSE_FILES:=COPYING
PKG_HOST_ONLY:=1
HOST_BUILD_PARALLEL:=1
include $(INCLUDE_DIR)/host-build.mk
include $(INCLUDE_DIR)/package.mk
define Package/ragel
SECTION:=devel
CATEGORY:=Development
TITLE:=Compiles finite state machines from regular languages into executable code
URL:=https://www.colm.net/open-source/ragel/
BUILDONLY:=1
endef
HOST_CONFIGURE_VARS += CXXFLAGS="$(HOST_CXXFLAGS) -std=gnu++98"
$(eval $(call HostBuild))
$(eval $(call BuildPackage,ragel))

View File

@@ -14,6 +14,7 @@ PKG_SOURCE_VERSION:=v0.12.7
PKG_MIRROR_HASH:=e5e5d897bdaa7f2fb0b897e503cecaeee234fcdc7f2f138aae501ef742f5b2b2
PKG_MAINTAINER:=Michel Promonet <michel.promonet@free.fr>
PKG_CPE_ID:=cpe:/o:v4l2loopback_project:v4l2loopback
include $(INCLUDE_DIR)/package.mk

View File

@@ -1,4 +1,10 @@
#!/bin/sh
#
# Copyright (C) 2020, 2022 Jeffery To
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
nl="
"

View File

@@ -1,5 +1,5 @@
#
# Copyright (C) 2018, 2020 Jeffery To
# Copyright (C) 2018, 2020-2021, 2023 Jeffery To
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
@@ -60,9 +60,10 @@ define GoCompiler/Default/Install/Bin
$(call GoCompiler/Default/Install/install-share-data,$(1),$(2),$(3),api)
$(INSTALL_DATA) -p "$(1)/go.env" "$(2)/lib/go-$(3)/"
$(INSTALL_DATA) -p "$(1)/VERSION" "$(2)/lib/go-$(3)/"
for file in AUTHORS CONTRIBUTING.md CONTRIBUTORS LICENSE PATENTS README.md SECURITY.md; do \
for file in CONTRIBUTING.md LICENSE PATENTS README.md SECURITY.md; do \
if [ -f "$(1)/$$$$file" ]; then \
$(INSTALL_DATA) -p "$(1)/$$$$file" "$(2)/share/go-$(3)/" ; \
fi ; \

View File

@@ -1,5 +1,5 @@
#
# Copyright (C) 2020 Jeffery To
# Copyright (C) 2020, 2022 Jeffery To
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.

View File

@@ -1,5 +1,5 @@
#
# Copyright (C) 2018-2020 Jeffery To
# Copyright (C) 2018-2022 Jeffery To
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
@@ -215,7 +215,8 @@ GO_PKG_BUILD_VARS= \
GOPATH="$(GO_PKG_BUILD_DIR)" \
GOCACHE="$(GO_BUILD_CACHE_DIR)" \
GOMODCACHE="$(GO_MOD_CACHE_DIR)" \
GOENV=off
GOENV=off \
GOTOOLCHAIN=local
GO_PKG_VARS= \
$(GO_PKG_TARGET_VARS) \

View File

@@ -1,5 +1,5 @@
#
# Copyright (C) 2018, 2020 Jeffery To
# Copyright (C) 2018-2023 Jeffery To
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
@@ -29,6 +29,7 @@ unexport \
GOOS \
GOPATH \
GOROOT \
GOTOOLCHAIN \
GOTMPDIR \
GOWORK
# Unmodified:
@@ -201,7 +202,7 @@ endif
# Target Go
GO_ARCH_DEPENDS:=@(aarch64||arm||i386||i686||mips||mips64||mips64el||mipsel||powerpc64||x86_64)
GO_ARCH_DEPENDS:=@(aarch64||arm||i386||i686||mips||mips64||mips64el||mipsel||powerpc64||riscv64||x86_64)
# ASLR/PIE
@@ -219,7 +220,7 @@ GO_PIE_SUPPORTED_OS_ARCH:= \
\
aix_ppc64 \
\
linux_ppc64le linux_riscv64 linux_s390x
linux_loong64 linux_ppc64le linux_riscv64 linux_s390x
# From https://go.dev/src/cmd/go/internal/work/init.go
go_pie_install_suffix=$(if $(filter $(1),aix_ppc64 windows_386 windows_amd64 windows_arm windows_arm64),,shared)

View File

@@ -1,5 +1,5 @@
#
# Copyright (C) 2018, 2020 Jeffery To
# Copyright (C) 2018-2023 Jeffery To
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
@@ -7,8 +7,8 @@
include $(TOPDIR)/rules.mk
GO_VERSION_MAJOR_MINOR:=1.20
GO_VERSION_PATCH:=4
GO_VERSION_MAJOR_MINOR:=1.21
GO_VERSION_PATCH:=13
PKG_NAME:=golang
PKG_VERSION:=$(GO_VERSION_MAJOR_MINOR)$(if $(GO_VERSION_PATCH),.$(GO_VERSION_PATCH))
@@ -20,7 +20,7 @@ GO_SOURCE_URLS:=https://dl.google.com/go/ \
PKG_SOURCE:=go$(PKG_VERSION).src.tar.gz
PKG_SOURCE_URL:=$(GO_SOURCE_URLS)
PKG_HASH:=9f34ace128764b7a3a4b238b805856cc1b2184304df9e5690825b0710f4202d6
PKG_HASH:=71fb31606a1de48d129d591e8717a63e0c5565ffba09a24ea9f899a13214c34d
PKG_MAINTAINER:=Jeffery To <jeffery.to@gmail.com>
PKG_LICENSE:=BSD-3-Clause
@@ -62,6 +62,7 @@ HOST_GO_VALID_OS_ARCH:= \
\
aix_ppc64 \
js_wasm \
wasip1_wasm \
\
freebsd_riscv64 \
\
@@ -296,7 +297,7 @@ $(eval $(call GoCompiler/AddProfile,Package,$(PKG_BUILD_DIR),$(PKG_GO_PREFIX),$(
PKG_GO_ZBOOTSTRAP_MODS:= \
s/defaultGO386 = `[^`]*`/defaultGO386 = `$(or $(GO_386),sse2)`/; \
s/defaultGOAMD64 = `[^`]*`/defaultGOAMD64 = `$(or $(GO_AMD64),v1)`/; \
s/defaultGOARM = `[^`]*`/defaultGOARM = `$(or $(GO_ARM),5)`/; \
s/defaultGOARM = `[^`]*`/defaultGOARM = `$(or $(GO_ARM),7)`/; \
s/defaultGOMIPS = `[^`]*`/defaultGOMIPS = `$(or $(GO_MIPS),hardfloat)`/; \
s/defaultGOMIPS64 = `[^`]*`/defaultGOMIPS64 = `$(or $(GO_MIPS64),hardfloat)`/; \
s/defaultGOPPC64 = `[^`]*`/defaultGOPPC64 = `$(or $(GO_PPC64),power8)`/;

View File

@@ -1,4 +1,10 @@
#!/bin/sh
#
# Copyright (C) 2018, 2020 Jeffery To
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
me=go-gcc-helper
name="${0##*/}"

View File

@@ -1,48 +0,0 @@
From 5ccf9f47bf4f5ba53e0ab7338a7fd4626714cfb2 Mon Sep 17 00:00:00 2001
From: Jeffery To <jeffery.to@gmail.com>
Date: Tue, 23 Nov 2021 15:05:37 +0800
Subject: [PATCH] cmd/link: use gold on ARM/ARM64 only if gold is available
COPY relocation handling on ARM/ARM64 has been fixed in recent versions
of the GNU linker. This switches to gold only if gold is available.
Fixes #22040.
---
src/cmd/link/internal/ld/lib.go | 19 +++++++------------
1 file changed, 7 insertions(+), 12 deletions(-)
--- a/src/cmd/link/internal/ld/lib.go
+++ b/src/cmd/link/internal/ld/lib.go
@@ -1548,25 +1548,20 @@ func (ctxt *Link) hostlink() {
}
if ctxt.Arch.InFamily(sys.ARM, sys.ARM64) && buildcfg.GOOS == "linux" {
- // On ARM, the GNU linker will generate COPY relocations
- // even with -znocopyreloc set.
+ // On ARM, older versions of the GNU linker will generate
+ // COPY relocations even with -znocopyreloc set.
// https://sourceware.org/bugzilla/show_bug.cgi?id=19962
//
- // On ARM64, the GNU linker will fail instead of
- // generating COPY relocations.
+ // On ARM64, older versions of the GNU linker will fail
+ // instead of generating COPY relocations.
//
- // In both cases, switch to gold.
- altLinker = "gold"
-
- // If gold is not installed, gcc will silently switch
- // back to ld.bfd. So we parse the version information
- // and provide a useful error if gold is missing.
+ // In both cases, switch to gold if gold is available.
name, args := flagExtld[0], flagExtld[1:]
args = append(args, "-fuse-ld=gold", "-Wl,--version")
cmd := exec.Command(name, args...)
if out, err := cmd.CombinedOutput(); err == nil {
- if !bytes.Contains(out, []byte("GNU gold")) {
- log.Fatalf("ARM external linker must be gold (issue #15696), but is not: %s", out)
+ if bytes.Contains(out, []byte("GNU gold")) {
+ altLinker = "gold"
}
}
}

View File

@@ -0,0 +1,5 @@
#!/bin/sh
[ "$1" = golang ] || exit 0
go version | grep -F " go$PKG_VERSION "

View File

@@ -1,12 +1,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=lua-eco
PKG_VERSION:=2.2.0
PKG_VERSION:=2.5.1
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL=https://github.com/zhaojh329/lua-eco/releases/download/v$(PKG_VERSION)
PKG_HASH:=b45073ba93123d93ab7521b1e699c0f8f8f7de513342b16e2115a0f5a26f8014
PKG_HASH:=436c09dd7dbc88ab651ae7696f2102b5635628ab420cc550bc237ecb04cade5d
PKG_MAINTAINER:=Jianhui Zhao <zhaojh329@gmail.com>
PKG_LICENSE:=MIT
@@ -26,7 +26,7 @@ define Package/lua-eco
CATEGORY:=Languages
SUBMENU:=Lua
URL:=https://github.com/zhaojh329/lua-eco
DEPENDS:=+libev +liblua
DEPENDS:=+libev +liblua +luabitop
endef
define Package/lua-eco/description
@@ -49,8 +49,9 @@ Package/lua-eco-sys=$(call Package/lua-eco/Module,system utils)
Package/lua-eco-file=$(call Package/lua-eco/Module,file utils)
Package/lua-eco-base64=$(call Package/lua-eco/Module,base64)
Package/lua-eco-sha1=$(call Package/lua-eco/Module,sha1)
Package/lua-eco-md5=$(call Package/lua-eco/Module,md5)
Package/lua-eco-socket=$(call Package/lua-eco/Module,socket,+lua-eco-file +lua-eco-sys)
Package/lua-eco-dns=$(call Package/lua-eco/Module,dns,+lua-eco-socket +luabitop)
Package/lua-eco-dns=$(call Package/lua-eco/Module,dns,+lua-eco-socket)
Package/lua-eco-ssl=$(call Package/lua-eco/Module,ssl,\
+LUA_ECO_OPENSSL:libopenssl +LUA_ECO_WOLFSSL:libwolfssl \
+LUA_ECO_MBEDTLS:libmbedtls +LUA_ECO_MBEDTLS:zlib +lua-eco-socket)
@@ -59,7 +60,10 @@ Package/lua-eco-http=$(call Package/lua-eco/Module,http/https,+lua-eco-dns +lua-
Package/lua-eco-mqtt=$(call Package/lua-eco/Module,mqtt,+lua-eco-socket +lua-eco-dns +lua-mosquitto)
Package/lua-eco-websocket=$(call Package/lua-eco/Module,websocket,+lua-eco-http +lua-eco-base64 +lua-eco-sha1)
Package/lua-eco-termios=$(call Package/lua-eco/Module,termios)
Package/lua-eco-network=$(call Package/lua-eco/Module,network)
Package/lua-eco-struct=$(call Package/lua-eco/Module,struct pack)
Package/lua-eco-netlink=$(call Package/lua-eco/Module,netlink,+lua-eco-socket)
Package/lua-eco-ip=$(call Package/lua-eco/Module,ip utils,+lua-eco-netlink)
Package/lua-eco-nl80211=$(call Package/lua-eco/Module,nl80211,+lua-eco-netlink)
define Package/lua-eco-ssl/config
choice
@@ -98,6 +102,7 @@ define Package/lua-eco/install
$(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/lib/lua/eco/encoding/hex.lua $(1)/usr/lib/lua/eco/encoding
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/lua/eco/core/{time,bufio}.so $(1)/usr/lib/lua/eco/core
$(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/lib/lua/eco/{time,bufio,bit,sync}.lua $(1)/usr/lib/lua/eco
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/lua/eco/binary.so $(1)/usr/lib/lua/eco
endef
define Package/lua-eco-log/install
@@ -127,6 +132,11 @@ define Package/lua-eco-sha1/install
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/lua/eco/crypto/sha1.so $(1)/usr/lib/lua/eco/crypto
endef
define Package/lua-eco-md5/install
$(INSTALL_DIR) $(1)/usr/lib/lua/eco/crypto
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/lua/eco/crypto/md5.so $(1)/usr/lib/lua/eco/crypto
endef
define Package/lua-eco-socket/install
$(INSTALL_DIR) $(1)/usr/lib/lua/eco/core
$(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/lib/lua/eco/socket.lua $(1)/usr/lib/lua/eco
@@ -170,9 +180,27 @@ define Package/lua-eco-termios/install
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/lua/eco/termios.so $(1)/usr/lib/lua/eco
endef
define Package/lua-eco-network/install
define Package/lua-eco-struct/install
$(INSTALL_DIR) $(1)/usr/lib/lua/eco
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/lua/eco/network.so $(1)/usr/lib/lua/eco
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/lua/eco/struct.so $(1)/usr/lib/lua/eco
endef
define Package/lua-eco-netlink/install
$(INSTALL_DIR) $(1)/usr/lib/lua/eco/core
$(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/lib/lua/eco/{nl,genl}.lua $(1)/usr/lib/lua/eco
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/lua/eco/core/{nl,genl}.so $(1)/usr/lib/lua/eco/core
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/lua/eco/rtnl.so $(1)/usr/lib/lua/eco
endef
define Package/lua-eco-ip/install
$(INSTALL_DIR) $(1)/usr/lib/lua/eco
$(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/lib/lua/eco/ip.lua $(1)/usr/lib/lua/eco
endef
define Package/lua-eco-nl80211/install
$(INSTALL_DIR) $(1)/usr/lib/lua/eco/core
$(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/lib/lua/eco/nl80211.lua $(1)/usr/lib/lua/eco
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/lua/eco/core/nl80211.so $(1)/usr/lib/lua/eco/core
endef
$(eval $(call BuildPackage,lua-eco))
@@ -181,6 +209,7 @@ $(eval $(call BuildPackage,lua-eco-sys))
$(eval $(call BuildPackage,lua-eco-file))
$(eval $(call BuildPackage,lua-eco-base64))
$(eval $(call BuildPackage,lua-eco-sha1))
$(eval $(call BuildPackage,lua-eco-md5))
$(eval $(call BuildPackage,lua-eco-socket))
$(eval $(call BuildPackage,lua-eco-dns))
$(eval $(call BuildPackage,lua-eco-ssl))
@@ -189,4 +218,6 @@ $(eval $(call BuildPackage,lua-eco-http))
$(eval $(call BuildPackage,lua-eco-mqtt))
$(eval $(call BuildPackage,lua-eco-websocket))
$(eval $(call BuildPackage,lua-eco-termios))
$(eval $(call BuildPackage,lua-eco-network))
$(eval $(call BuildPackage,lua-eco-netlink))
$(eval $(call BuildPackage,lua-eco-ip))
$(eval $(call BuildPackage,lua-eco-nl80211))

View File

@@ -18,27 +18,46 @@ PKG_HASH:=d38402aa7640055d260c1246c36e6d6d31b425a25a805431f13695694466b722
PKG_LICENSE:=MIT
PKG_MAINTAINER:=Oskari Rauta <oskari.rauta@gmail.com>
PKG_BUILD_DIR:=$(BUILD_DIR)/$(basename $(PKG_SOURCE))
PKG_BUILD_DIR:=$(BUILD_DIR)/lsqlite3-$(BUILD_VARIANT)/$(basename $(PKG_SOURCE))
include $(INCLUDE_DIR)/package.mk
define Package/lsqlite3
define Package/lsqlite3/default
SUBMENU:=Lua
SECTION:=lang
CATEGORY:=Languages
TITLE:=Lua wrapper for the SQLite3 library
URL:=http://lua.sqlite.org
DEPENDS:= +lua +libsqlite3
DEPENDS:=+libsqlite3
endef
define Package/lsqlite3/description
define Package/lsqlite3
$(Package/lsqlite3/default)
DEPENDS+=+liblua
VARIANT:=lua-51
endef
define Package/lsqlite3-lua5.3
$(Package/lsqlite3/default)
DEPENDS+=+liblua5.3
VARIANT:=lua-53
endef
define Package/lsqlite3/default/description
LuaSQLite3 is a thin wrapper around the public domain SQLite3 database engine.
endef
Package/lsqlite3/description = $(Package/lsqlite3/default/description)
Package/lsqlite3-lua5.3/description = $(Package/lsqlite3/default/description)
TARGET_CFLAGS += $(FPIC) -std=gnu99
TARGET_CPPFLAGS += -DLUA_USE_LINUX
TARGET_LDFLAGS += -lsqlite3 -lpthread
ifeq ($(BUILD_VARIANT),lua-53)
TARGET_CFLAGS += -I$(STAGING_DIR)/usr/include/lua5.3
endif
define Build/Compile
$(TARGET_CC) $(TARGET_CFLAGS) $(TARGET_CPPFLAGS) \
-c $(PKG_BUILD_DIR)/lsqlite3.c \
@@ -54,4 +73,10 @@ define Package/lsqlite3/install
$(CP) $(PKG_BUILD_DIR)/*.so $(1)/usr/lib/lua/
endef
define Package/lsqlite3-lua5.3/install
$(INSTALL_DIR) $(1)/usr/local/lib/lua/5.3
$(CP) $(PKG_BUILD_DIR)/*.so $(1)/usr/local/lib/lua/5.3
endef
$(eval $(call BuildPackage,lsqlite3))
$(eval $(call BuildPackage,lsqlite3-lua5.3))

View File

@@ -12,6 +12,7 @@ PKG_BUILD_DIR:=$(BUILD_DIR)/LuaJIT-$(PKG_VERSION)
PKG_MAINTAINER:=Morteza Milani <milani@pichak.co>
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=COPYRIGHT
PKG_CPE_ID:=cpe:/a:luajit:luajit
PKG_BUILD_FLAGS:=no-mips16

View File

@@ -8,12 +8,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=lualanes
PKG_VERSION:=3.13.0
PKG_RELEASE:=2
PKG_VERSION:=3.16.3
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://codeload.github.com/LuaLanes/lanes/tar.gz/v$(PKG_VERSION)?
PKG_HASH:=53a17d7ee11f17ca0543ae5aa640208dcb62d37862a0d0ea450455fae12c8ff1
PKG_HASH:=22cfa836de4be14fe588b9cd34e936d6f61ec6f4096d8ae30d4ec35855d9608f
PKG_BUILD_DIR:=$(BUILD_DIR)/lanes-$(PKG_VERSION)
PKG_MAINTAINER:=Vladimir Malyutin <first-leon@yandex.ru>
@@ -35,7 +35,7 @@ define Package/lualanes
endef
define Package/lualanes/description
Lua Lanes is a Lua extension library providing the possibility to run
Lua Lanes is a Lua extension library providing the possibility to run
multiple Lua states in parallel. It is intended to be used for optimizing
performance on multicore CPU's and to study ways to make Lua programs
naturally parallel to begin with.

View File

@@ -1,11 +0,0 @@
--- a/src/threading.h
+++ b/src/threading.h
@@ -110,7 +110,7 @@ enum e_status { PENDING, RUNNING, WAITIN
#endif // PLATFORM_WIN32
#include <pthread.h>
- #ifdef PLATFORM_LINUX
+ #if defined(PLATFORM_LINUX) && defined(__GLIBC__)
# define _MUTEX_RECURSIVE PTHREAD_MUTEX_RECURSIVE_NP
#else
/* OS X, ... */

View File

@@ -1,12 +0,0 @@
--- a/src/threading.c
+++ b/src/threading.c
@@ -35,7 +35,9 @@ THE SOFTWARE.
===============================================================================
*/
#if defined(__linux__)
+#ifndef _GNU_SOURCE
# define _GNU_SOURCE /* must be defined before any include */
+#endif
# ifdef __ANDROID__
# include <android/log.h>
# define LOG_TAG "LuaLanes"

View File

@@ -17,6 +17,7 @@ PKG_LICENSE:=Apache-2.0 MIT
PKG_LICENSE_FILES:=license-apache license-mit
HOST_BUILD_DEPENDS:=rust/host
HOST_BUILD_PARALLEL:=1
PKG_HOST_ONLY:=1
include $(INCLUDE_DIR)/host-build.mk

View File

@@ -8,12 +8,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=node
PKG_VERSION:=v18.16.0
PKG_VERSION:=v18.20.6
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://nodejs.org/dist/$(PKG_VERSION)
PKG_HASH:=33d81a233e235a509adda4a4f2209008d04591979de6b3f0f67c1c906093f118
PKG_HASH:=e7ddfeabea3d1f7cc622cc9861d2fb0955b9e60940dbbedbed6f2f821ab3e4c7
PKG_MAINTAINER:=Hirokazu MORIKAWA <morikw2@gmail.com>, Adrian Panella <ianchi74@outlook.com>
PKG_LICENSE:=MIT

View File

@@ -1,6 +1,6 @@
--- a/lib/internal/modules/cjs/loader.js
+++ b/lib/internal/modules/cjs/loader.js
@@ -1389,7 +1389,8 @@ Module._initPaths = function() {
@@ -1524,7 +1524,8 @@ Module._initPaths = function() {
path.resolve(process.execPath, '..') :
path.resolve(process.execPath, '..', '..');

View File

@@ -20,7 +20,7 @@
result = clock_gettime(CLOCK_MONOTONIC, &ts);
--- a/deps/v8/src/base/platform/platform-posix.cc
+++ b/deps/v8/src/base/platform/platform-posix.cc
@@ -1066,7 +1066,7 @@ bool Thread::Start() {
@@ -1072,7 +1072,7 @@ bool Thread::Start() {
#if V8_OS_DARWIN
// Default on Mac OS X is 512kB -- bump up to 1MB
stack_size = 1 * 1024 * 1024;

View File

@@ -1,6 +1,6 @@
--- a/tools/gyp/pylib/gyp/generator/make.py
+++ b/tools/gyp/pylib/gyp/generator/make.py
@@ -206,7 +206,7 @@ cmd_solink_module = $(LINK.$(TOOLSET)) -
@@ -207,7 +207,7 @@ cmd_solink_module = $(LINK.$(TOOLSET)) -
LINK_COMMANDS_MAC = """\
quiet_cmd_alink = LIBTOOL-STATIC $@

View File

@@ -8,7 +8,7 @@
'dependencies': [ 'icutools', 'icu_implementation' ],
'sources': [
'<@(icu_src_genrb)'
@@ -434,6 +435,7 @@
@@ -440,6 +441,7 @@
'target_name': 'iculslocs',
'toolsets': [ 'host' ],
'type': 'executable',
@@ -16,7 +16,7 @@
'dependencies': [ 'icutools' ],
'sources': [
'iculslocs.cc',
@@ -446,6 +448,7 @@
@@ -458,6 +460,7 @@
'target_name': 'icupkg',
'toolsets': [ 'host' ],
'type': 'executable',
@@ -24,7 +24,7 @@
'dependencies': [ 'icutools' ],
'sources': [
'<@(icu_src_icupkg)',
@@ -457,6 +460,7 @@
@@ -475,6 +478,7 @@
'target_name': 'genccode',
'toolsets': [ 'host' ],
'type': 'executable',
@@ -42,7 +42,7 @@
'conditions': [
['want_separate_host_toolset', {
'toolsets': ['host'],
@@ -1421,6 +1422,8 @@
@@ -1425,6 +1426,8 @@
{
'target_name': 'mksnapshot',
'type': 'executable',
@@ -51,7 +51,7 @@
'dependencies': [
'v8_base_without_compiler',
'v8_compiler_for_mksnapshot',
@@ -1450,6 +1453,7 @@
@@ -1458,6 +1461,7 @@
{
'target_name': 'torque',
'type': 'executable',
@@ -59,7 +59,7 @@
'dependencies': [
'torque_base',
# "build/win:default_exe_manifest",
@@ -1488,6 +1492,7 @@
@@ -1500,6 +1504,7 @@
{
'target_name': 'torque-language-server',
'type': 'executable',
@@ -67,7 +67,7 @@
'conditions': [
['want_separate_host_toolset', {
'toolsets': ['host'],
@@ -1515,6 +1520,8 @@
@@ -1531,6 +1536,8 @@
{
'target_name': 'gen-regexp-special-case',
'type': 'executable',

View File

@@ -62,7 +62,7 @@
'include_dirs': [
'<(V8_ROOT)/include',
],
@@ -1737,6 +1744,7 @@
@@ -1761,6 +1768,7 @@
}],
],
'direct_dependent_settings': {
@@ -70,7 +70,7 @@
'include_dirs': [
'<(V8_ROOT)/include',
],
@@ -1917,15 +1925,19 @@
@@ -1941,15 +1949,19 @@
}],
],
'direct_dependent_settings': {

View File

@@ -16,7 +16,7 @@
'conditions': [
['OS=="win"', {
'msvs_precompiled_header': '<(V8_ROOT)/../../tools/msvs/pch/v8_pch.h',
@@ -1431,6 +1433,7 @@
@@ -1435,6 +1437,7 @@
'type': 'executable',
'libraries!':[ '-lcrypto', '-lssl', '-lz', '-lhttp_parser', '-luv', '-lnghttp2', '-lcares' ],
'library_dirs':[ '../../../../staging_dir/hostpkg/share/icu/current/lib' ],

View File

@@ -13,7 +13,7 @@ Forwarded: https://github.com/nodejs/node/issues/33816
//
// Permission is hereby granted, free of charge, to any person obtaining a
// copy of this software and associated documentation files (the
@@ -1265,13 +1266,6 @@ function lookupAndConnect(self, options)
@@ -1321,13 +1322,6 @@ function lookupAndConnect(self, options)
hints: options.hints || 0,
};

View File

@@ -1,6 +1,6 @@
--- a/configure.py
+++ b/configure.py
@@ -1296,7 +1296,6 @@ def configure_node(o):
@@ -1290,7 +1290,6 @@ def configure_node(o):
# Enable branch protection for arm64
if target_arch == 'arm64':

View File

@@ -5,12 +5,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=perl-ack
PKG_VERSION:=3.7.0
PKG_VERSION:=3.8.2
PKG_RELEASE:=1
PKG_SOURCE_URL:=http://www.cpan.org/authors/id/P/PE/PETDANCE/
PKG_SOURCE:=ack-v$(PKG_VERSION).tar.gz
PKG_HASH:=ea7caa14f757de083310ed2cba298661ddcca5dee06ec8f18043ea625a79df20
PKG_HASH:=a5239f5a2c12e0c7b4e432ffd7e936feef945a9621a41591c77d3b0cf458560b
PKG_LICENSE:=Artistic-2.0
PKG_LICENSE_FILE:=LICENSE.md

View File

@@ -11,7 +11,7 @@ include perlver.mk
PKG_NAME:=perl
PKG_VERSION:=$(PERL_VERSION)
PKG_RELEASE:=8
PKG_RELEASE:=9
PKG_SOURCE_URL:=\
https://cpan.metacpan.org/src/5.0 \

File diff suppressed because one or more lines are too long

View File

@@ -20,6 +20,7 @@ PKG_MAINTAINER:=W. Michael Petullo <mike@flyn.org>
PKG_LICENSE:=PHP-3.01
PKG_LICENSE_FILES:=LICENSE
PKG_CPE_ID:=cpe:/a:php:imagick
PKG_BUILD_DEPENDS:=php8
PKG_BUILD_DIR:=$(BUILD_DIR)/pecl-php8/$(PECL_NAME)-$(PKG_VERSION)

View File

@@ -6,7 +6,7 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=php
PKG_VERSION:=8.2.6
PKG_VERSION:=8.2.29
PKG_RELEASE:=1
PKG_MAINTAINER:=Michael Heimpold <mhei@heimpold.de>
@@ -15,8 +15,8 @@ PKG_LICENSE_FILES:=LICENSE
PKG_CPE_ID:=cpe:/a:php:php
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
PKG_SOURCE_URL:=http://www.php.net/distributions/
PKG_HASH:=10b796f0ed45574229851212b30a596a76e70ae365322bcaaaf9c00fa7d58cca
PKG_SOURCE_URL:=https://www.php.net/distributions/
PKG_HASH:=475f991afd2d5b901fb410be407d929bc00c46285d3f439a02c59e8b6fe3589c
PKG_BUILD_PARALLEL:=1
PKG_BUILD_FLAGS:=no-mips16
@@ -94,7 +94,7 @@ endef
define Package/php8-cli
$(call Package/php8/Default)
DEPENDS+= +PACKAGE_php8-mod-intl:libstdcpp
DEPENDS+= +PACKAGE_php8-mod-intl:libstdcpp +riscv64:libatomic
TITLE+= (CLI)
endef
@@ -105,7 +105,7 @@ endef
define Package/php8-cgi
$(call Package/php8/Default)
DEPENDS+= +PACKAGE_php8-mod-intl:libstdcpp
DEPENDS+= +PACKAGE_php8-mod-intl:libstdcpp +riscv64:libatomic
TITLE+= (CGI & FastCGI)
endef
@@ -127,7 +127,7 @@ endef
define Package/php8-fpm
$(call Package/php8/Default)
DEPENDS+= +PACKAGE_php8-mod-intl:libstdcpp
DEPENDS+= +PACKAGE_php8-mod-intl:libstdcpp +riscv64:libatomic
TITLE+= (FPM)
endef
@@ -159,6 +159,7 @@ define Package/apache-mod-php8
CATEGORY:=Network
DEPENDS+=PACKAGE_apache-mod-php8:apache \
+PACKAGE_php8-mod-intl:libstdcpp \
+riscv64:libatomic \
+libpcre2 +zlib
TITLE:=PHP8 module for Apache Web Server
endef
@@ -197,6 +198,9 @@ endif
ifeq ($(CONFIG_USE_MUSL),y)
TARGET_CFLAGS += -D_LARGEFILE64_SOURCE
endif
ifneq ($(findstring riscv64,$(CONFIG_ARCH)),)
TARGET_LDFLAGS += -latomic
endif
ifneq ($(SDK)$(CONFIG_PACKAGE_php8-mod-bcmath),)
CONFIGURE_ARGS+= --enable-bcmath=shared
@@ -603,6 +607,8 @@ define BuildModule
define Package/php8-mod-$(1)
$(call Package/php8/Default)
DEPENDS+=+riscv64:libatomic
ifneq ($(3),)
DEPENDS+=$(3)
endif

View File

@@ -62,9 +62,9 @@ r1: initial revision
+ fi
+fi
+
PHP_DATE_CFLAGS="-Wno-implicit-fallthrough -I@ext_builddir@/lib -DZEND_ENABLE_STATIC_TSRMLS_CACHE=1 -DHAVE_TIMELIB_CONFIG_H=1"
timelib_sources="lib/astro.c lib/dow.c lib/parse_date.c lib/parse_tz.c lib/parse_posix.c
lib/timelib.c lib/tm2unixtime.c lib/unixtime2tm.c lib/parse_iso_intervals.c lib/interval.c"
AX_CHECK_COMPILE_FLAG([-Wno-implicit-fallthrough],
[PHP_DATE_CFLAGS="$PHP_DATE_CFLAGS -Wno-implicit-fallthrough"],,
[-Werror])
--- a/ext/date/lib/parse_tz.c
+++ b/ext/date/lib/parse_tz.c
@@ -26,9 +26,22 @@

View File

@@ -9,7 +9,7 @@ Make generated php_config.h constant across rebuilds.
--- a/configure.ac
+++ b/configure.ac
@@ -1441,7 +1441,7 @@ PHP_REMOVE_USR_LIB(LDFLAGS)
@@ -1462,7 +1462,7 @@ PHP_REMOVE_USR_LIB(LDFLAGS)
EXTRA_LDFLAGS="$EXTRA_LDFLAGS $PHP_LDFLAGS"
EXTRA_LDFLAGS_PROGRAM="$EXTRA_LDFLAGS_PROGRAM $PHP_LDFLAGS"

View File

@@ -11,7 +11,7 @@
--- a/configure.ac
+++ b/configure.ac
@@ -1624,13 +1624,13 @@ CFLAGS_CLEAN="$CFLAGS \$(PROF_FLAGS)"
@@ -1658,13 +1658,13 @@ CFLAGS_CLEAN="$CFLAGS \$(PROF_FLAGS)"
CFLAGS="\$(CFLAGS_CLEAN) $standard_libtool_flag"
CXXFLAGS="$CXXFLAGS $standard_libtool_flag \$(PROF_FLAGS)"

View File

@@ -1,37 +0,0 @@
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
PKG_NAME:=MarkupSafe
PKG_VERSION:=2.1.1
PKG_RELEASE:=1
PYPI_NAME:=$(PKG_NAME)
PKG_HASH:=7f91197cc9e48f989d12e4e6fbc46495c446636dfc81b9ccf50bb0ec74b91d4b
PKG_MAINTAINER:=Daniel Golle <daniel@makrotopia.org>
PKG_LICENSE:=BSD-3-Clause
PKG_LICENSE_FILES:=LICENSE.rst
include ../pypi.mk
include $(INCLUDE_DIR)/package.mk
include ../python3-package.mk
define Package/python3-markupsafe
SECTION:=lang
CATEGORY:=Languages
SUBMENU:=Python
TITLE:=MarkupSafe
URL:=https://palletsprojects.com/p/markupsafe/
DEPENDS:=+python3-light
endef
define Package/python3-markupsafe/description
MarkupSafe implements a text object that escapes characters so it is safe to use in HTML and XML.
endef
$(eval $(call Py3Package,python3-markupsafe))
$(eval $(call BuildPackage,python3-markupsafe))
$(eval $(call BuildPackage,python3-markupsafe-src))

View File

@@ -1,37 +0,0 @@
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
PKG_NAME:=click
PKG_VERSION:=8.1.3
PKG_RELEASE:=1
PYPI_NAME:=click
PKG_HASH:=7682dc8afb30297001674575ea00d1814d808d6a36af415a82bd481d37ba7b8e
PKG_MAINTAINER:=Daniel Golle <daniel@makrotopia.org>
PKG_LICENSE:=BSD-3-Clause
PKG_LICENSE_FILES:=LICENSE
include ../pypi.mk
include $(INCLUDE_DIR)/package.mk
include ../python3-package.mk
define Package/python3-click
SECTION:=lang
CATEGORY:=Languages
SUBMENU:=Python
TITLE:=Click
URL:=https://palletsprojects.com/p/click/
DEPENDS:=+python3-light
endef
define Package/python3-click/description
Composable command line interface toolkit
endef
$(eval $(call Py3Package,python3-click))
$(eval $(call BuildPackage,python3-click))
$(eval $(call BuildPackage,python3-click-src))

View File

@@ -8,11 +8,11 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=django
PKG_VERSION:=4.2.1
PKG_VERSION:=4.2.20
PKG_RELEASE:=1
PYPI_NAME:=Django
PKG_HASH:=7efa6b1f781a6119a10ac94b4794ded90db8accbe7802281cd26f8664ffed59c
PKG_HASH:=92bac5b4432a64532abb73b2ac27203f485e40225d2640a7fbef2b62b876e789
PKG_MAINTAINER:=Alexandru Ardelean <ardeleanalex@gmail.com>, Peter Stadler <peter.stadler@student.uibk.ac.at>
PKG_LICENSE:=BSD-3-Clause

View File

@@ -11,7 +11,7 @@ PKG_RELEASE:=1
PYPI_NAME:=$(PKG_NAME)
PKG_HASH:=5dbbc68b317e5e42f327f9021763545dc3fc3bfe22e6deb96aaf1fc38874156a
PKG_MAINTAINER:=Daniel Golle <daniel@makrotopia.org>
PKG_MAINTAINER:=Jeffery To <jeffery.to@gmail.com>
PKG_LICENSE:=BSD-3-Clause
PKG_LICENSE_FILES:=LICENSE

View File

@@ -8,46 +8,129 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=micropython-lib
PKG_RELEASE:=1
PKG_RELEASE:=2
PKG_SOURCE_PROTO:=git
PKG_SOURCE_URL:=https://github.com/micropython/micropython-lib.git
PKG_SOURCE_VERSION:=db4c739863e49fc874bdaae8aa8c316c7ed4276a
PKG_SOURCE_DATE:=20220506
PKG_MIRROR_HASH:=ec4be91755fcd4d4fa61e1e7eadc748377ba63b82b7bb4254864473fafcd3173
PKG_SOURCE_VERSION:=7128d423c2e7c0309ac17a1e6ba873b909b24fcc
PKG_SOURCE_DATE:=20230522
PKG_MIRROR_HASH:=1f094aac257d2094ee91b457164f845f6461df1cf1d0ed7ee556c98f273f5afb
PKG_MAINTAINER:=Jeffery To <jeffery.to@gmail.com>
PKG_LICENSE:=MIT PSF-2.0
PKG_LICENSE:=MIT Python-2.0.1
PKG_LICENSE_FILES:=LICENSE
PKG_BUILD_DEPENDS:=python3/host
PKG_BUILD_PARALLEL:=1
# keep in sync with micropython
MP_VERSION:=1.20.0
MP_MPY_FILE_VERSION:=6
include $(INCLUDE_DIR)/package.mk
define Package/micropython-lib
define Package/micropython-lib/Default
SUBMENU:=Python
SECTION:=lang
CATEGORY:=Languages
TITLE:=micropython-lib
TITLE:=MicroPython package repository
URL:=https://github.com/micropython/micropython-lib
endef
define Package/micropython-lib
$(call Package/micropython-lib/Default)
DEPENDS:=+micropython
endef
define Package/micropython-lib/description
This is a repository of libraries designed to be useful for writing
MicroPython applications.
define Package/micropython-lib-src
$(call Package/micropython-lib/Default)
TITLE+= (sources)
endef
Build/Compile:=:
define Package/micropython-lib-unix
$(call Package/micropython-lib/Default)
TITLE+= - Unix port packages
DEPENDS:=+micropython +libpcre2 +librt +libsqlite3
endef
define Package/micropython-lib-unix-src
$(call Package/micropython-lib/Default)
TITLE+= - Unix port packages (sources)
endef
define Package/micropython-lib/Default/description
This is a repository of packages designed to be useful for writing
MicroPython applications.
endef
define Package/micropython-lib/description
$(call Package/micropython-lib/Default/description)
This contains packages common to all MicroPython ports.
endef
define Package/micropython-lib-src/description
$(call Package/micropython-lib/Default/description)
This contains source files for packages common to all MicroPython ports.
endef
define Package/micropython-lib-unix/description
$(call Package/micropython-lib/Default/description)
This contains packages specific to the MicroPython Unix port.
endef
define Package/micropython-lib-unix-src/description
$(call Package/micropython-lib/Default/description)
This contains source files for packages specific to the MicroPython Unix
port.
endef
MP_INSTALLDEV_PATH:=$(STAGING_DIR)/host/lib/micropython-$(MP_VERSION)
define MicroPythonLib/Compile
cd "$(PKG_BUILD_DIR)" && python3 tools/build.py \
--hash-prefix 64 \
--micropython "$(MP_INSTALLDEV_PATH)" \
--mpy-cross "$(MP_INSTALLDEV_PATH)/mpy-cross/build/mpy-cross" \
--output "$(PKG_BUILD_DIR)/$(strip $(1))" \
$(2)
endef
define MicroPythonLib/Install
python3 install.py \
--input "$(PKG_BUILD_DIR)/$(strip $(1))" \
--output "$(strip $(3))" \
--version "$(strip $(2))"
endef
define Build/Compile
$(call MicroPythonLib/Compile)
$(call MicroPythonLib/Compile,unix-ffi-index,--unix-ffi)
endef
define Package/micropython-lib/install
for dir in micropython python-ecosys python-stdlib unix-ffi; do \
$(INSTALL_DIR) $(1)/usr/lib/micropython/$$$$dir ; \
$(CP) $(PKG_BUILD_DIR)/$$$$dir/* $(1)/usr/lib/micropython/$$$$dir/ ; \
done
$(FIND) $(1)/usr/lib/micropython \
-not -type d \( -not -name '*.py' -o -name 'test_*' -o -name 'setup.py' \) -delete
$(FIND) $(1)/usr/lib/micropython -mindepth 1 -empty -type d -delete
$(call MicroPythonLib/Install,,$(MP_MPY_FILE_VERSION),$(1)/usr/lib/micropython)
endef
define Package/micropython-lib-src/install
$(call MicroPythonLib/Install,,py,$(1)/usr/lib/micropython)
endef
define Package/micropython-lib-unix/install
$(call MicroPythonLib/Install,unix-ffi-index,$(MP_MPY_FILE_VERSION),$(1)/usr/lib/micropython/unix)
$(INSTALL_DIR) $(1)/usr/bin
$(INSTALL_BIN) ./files/micropython-unix $(1)/usr/bin/
endef
define Package/micropython-lib-unix-src/install
$(call MicroPythonLib/Install,unix-ffi-index,py,$(1)/usr/lib/micropython/unix)
endef
$(eval $(call BuildPackage,micropython-lib))
$(eval $(call BuildPackage,micropython-lib-src))
$(eval $(call BuildPackage,micropython-lib-unix))
$(eval $(call BuildPackage,micropython-lib-unix-src))

View File

@@ -0,0 +1,3 @@
#!/bin/sh
export MICROPYPATH=".frozen:~/.micropython/lib:/usr/lib/micropython/unix:/usr/lib/micropython"
exec micropython "$@"

View File

@@ -0,0 +1,62 @@
#!/usr/bin/env python3
#
# Copyright (C) 2023 Jeffery To
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
import json
import os
import re
import shutil
import sys
def install(input_path, mpy_version, output_path):
index_json_path = os.path.join(input_path, "index.json")
files = {}
with open(index_json_path) as f:
index_json = json.load(f)
for p in index_json["packages"]:
package_name = p["name"]
package_json_path = os.path.join(input_path, "package", mpy_version, package_name, "latest.json")
with open(package_json_path) as f:
package_json = json.load(f)
for file_name, file_hash in package_json["hashes"]:
if file_name in files:
if file_hash != files[file_name]:
print("File name/hash collision:", package_name, file=sys.stderr)
print(" File: ", file_name, file=sys.stderr)
print(" Curent hash: ", file_hash, file=sys.stderr)
print(" Previous hash: ", files[file_name], file=sys.stderr)
sys.exit(1)
else:
files[file_name] = file_hash
for file_name, file_hash in files.items():
in_file_path = os.path.join(input_path, "file", file_hash[:2], file_hash)
out_file_path = os.path.join(output_path, file_name)
os.makedirs(os.path.dirname(out_file_path), exist_ok=True)
shutil.copy2(in_file_path, out_file_path)
def main():
import argparse
cmd_parser = argparse.ArgumentParser(description="Install compiled micropython-lib packages.")
cmd_parser.add_argument("--input", required=True, help="input directory")
cmd_parser.add_argument("--version", required=True, help="mpy version to install")
cmd_parser.add_argument("--output", required=True, help="output directory")
args = cmd_parser.parse_args()
install(args.input, args.version, args.output)
if __name__ == "__main__":
main()

View File

@@ -0,0 +1,37 @@
--- a/tools/build.py
+++ b/tools/build.py
@@ -284,7 +284,7 @@ def _update_index_package_metadata(index
index_package_json["versions"][v].append(metadata.version)
-def build(output_path, hash_prefix_len, mpy_cross_path):
+def build(output_path, unix_ffi, hash_prefix_len, mpy_cross_path):
import manifestfile
import mpy_cross
@@ -310,7 +310,7 @@ def build(output_path, hash_prefix_len,
# For now, don't process unix-ffi. In the future this can be extended to
# allow a way to request unix-ffi packages via mip.
- lib_dirs = ["micropython", "python-stdlib", "python-ecosys"]
+ lib_dirs = ["unix-ffi"] if unix_ffi else ["micropython", "python-stdlib", "python-ecosys"]
mpy_version, _mpy_sub_version = mpy_cross.mpy_version(mpy_cross=mpy_cross_path)
mpy_version = str(mpy_version)
@@ -438,6 +438,7 @@ def main():
cmd_parser = argparse.ArgumentParser(description="Compile micropython-lib for serving to mip.")
cmd_parser.add_argument("--output", required=True, help="output directory")
+ cmd_parser.add_argument("--unix-ffi", action="store_true", help="process unix-ffi packages")
cmd_parser.add_argument("--hash-prefix", default=8, type=int, help="hash prefix length")
cmd_parser.add_argument("--mpy-cross", default=None, help="optional path to mpy-cross binary")
cmd_parser.add_argument("--micropython", default=None, help="path to micropython repo")
@@ -447,7 +448,7 @@ def main():
sys.path.append(os.path.join(args.micropython, "tools")) # for manifestfile
sys.path.append(os.path.join(args.micropython, "mpy-cross")) # for mpy_cross
- build(args.output, hash_prefix_len=max(4, args.hash_prefix), mpy_cross_path=args.mpy_cross)
+ build(args.output, args.unix_ffi, hash_prefix_len=max(4, args.hash_prefix), mpy_cross_path=args.mpy_cross)
if __name__ == "__main__":

View File

@@ -0,0 +1,53 @@
From dcce62dd525cf0f8e572e56a8990aea7ec2f0ade Mon Sep 17 00:00:00 2001
From: Jeffery To <jeffery.to@gmail.com>
Date: Tue, 30 May 2023 23:47:59 +0800
Subject: [PATCH] unix-ffi/os-path: Add unix-ffi version of `os-path` package.
This package reuses the code from the python-stdlib version of `os-path`
but requires the unix-ffi version of `os`.
This also updates `glob` to require this version of `os-path`.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
---
unix-ffi/glob/manifest.py | 2 +-
unix-ffi/os-path/manifest.py | 6 ++++++
unix-ffi/os/os/__init__.py | 6 ++++++
3 files changed, 13 insertions(+), 1 deletion(-)
create mode 100644 unix-ffi/os-path/manifest.py
--- a/unix-ffi/glob/manifest.py
+++ b/unix-ffi/glob/manifest.py
@@ -1,7 +1,7 @@
metadata(version="0.5.2")
require("os", unix_ffi=True)
-require("os-path")
+require("os-path", unix_ffi=True)
require("re", unix_ffi=True)
require("fnmatch")
--- /dev/null
+++ b/unix-ffi/os-path/manifest.py
@@ -0,0 +1,6 @@
+metadata(version="0.1.4")
+
+# Originally written by Paul Sokolovsky.
+
+require("os", unix_ffi=True)
+package("os", base_path="../../python-stdlib/os-path")
--- a/unix-ffi/os/os/__init__.py
+++ b/unix-ffi/os/os/__init__.py
@@ -5,6 +5,12 @@ import stat as stat_
import ffilib
import uos
+# Provide optional dependencies (which may be installed separately).
+try:
+ from . import path
+except ImportError:
+ pass
+
R_OK = const(4)
W_OK = const(2)
X_OK = const(1)

View File

@@ -0,0 +1,37 @@
From 2e7bfd08a306bd9e80b22097ef8fe66e1dd85054 Mon Sep 17 00:00:00 2001
From: Jeffery To <jeffery.to@gmail.com>
Date: Wed, 31 May 2023 00:00:11 +0800
Subject: [PATCH] unix-ffi/uu: Add unix-ffi version of `uu` package.
This package reuses the code from the python-stdlib version of `uu` but
requires the unix-ffi version of `os-path`.
This also updates `email.message` to require this version of `uu`.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
---
unix-ffi/email.message/manifest.py | 2 +-
unix-ffi/uu/manifest.py | 6 ++++++
2 files changed, 7 insertions(+), 1 deletion(-)
create mode 100644 unix-ffi/uu/manifest.py
--- a/unix-ffi/email.message/manifest.py
+++ b/unix-ffi/email.message/manifest.py
@@ -1,7 +1,7 @@
metadata(version="0.5.3")
require("re", unix_ffi=True)
-require("uu")
+require("uu", unix_ffi=True)
require("base64")
require("binascii")
require("email.utils", unix_ffi=True)
--- /dev/null
+++ b/unix-ffi/uu/manifest.py
@@ -0,0 +1,6 @@
+metadata(version="0.5.1")
+
+require("binascii")
+require("os-path", unix_ffi=True)
+
+module("uu.py", base_path="../../python-stdlib/uu")

View File

@@ -0,0 +1,148 @@
From 1cbe8c4dd653336c5766dfd75eb379ad37f04249 Mon Sep 17 00:00:00 2001
From: Christian Marangi <ansuelsmth@gmail.com>
Date: Thu, 28 Sep 2023 20:59:26 +0200
Subject: [PATCH] unix-ffi: re: convert to PCRE2
PCRE is marked as EOL and won't receive any new security update.
Convert the re module to PCRE2 API to enforce security.
Additional dependency is now needed with uctypes due to changes in how
PCRE2 return the match_data in a pointer and require special handling.
The converted module is tested with the test_re.py with no regression.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
---
unix-ffi/re/re.py | 73 +++++++++++++++++++++++++++++++----------------
1 file changed, 48 insertions(+), 25 deletions(-)
--- a/unix-ffi/re/re.py
+++ b/unix-ffi/re/re.py
@@ -1,36 +1,55 @@
import sys
import ffilib
import array
+import uctypes
+pcre2 = ffilib.open("libpcre2-8")
-pcre = ffilib.open("libpcre")
-
-# pcre *pcre_compile(const char *pattern, int options,
-# const char **errptr, int *erroffset,
-# const unsigned char *tableptr);
-pcre_compile = pcre.func("p", "pcre_compile", "sipps")
-
-# int pcre_exec(const pcre *code, const pcre_extra *extra,
-# const char *subject, int length, int startoffset,
-# int options, int *ovector, int ovecsize);
-pcre_exec = pcre.func("i", "pcre_exec", "PPsiiipi")
-
-# int pcre_fullinfo(const pcre *code, const pcre_extra *extra,
-# int what, void *where);
-pcre_fullinfo = pcre.func("i", "pcre_fullinfo", "PPip")
-
-
-IGNORECASE = I = 1
-MULTILINE = M = 2
-DOTALL = S = 4
-VERBOSE = X = 8
-PCRE_ANCHORED = 0x10
+# pcre2_code *pcre2_compile(PCRE2_SPTR pattern, PCRE2_SIZE length,
+# uint32_t options, int *errorcode, PCRE2_SIZE *erroroffset,
+# pcre2_compile_context *ccontext);
+pcre2_compile = pcre2.func("p", "pcre2_compile_8", "siippp")
+
+# int pcre2_match(const pcre2_code *code, PCRE2_SPTR subject,
+# PCRE2_SIZE length, PCRE2_SIZE startoffset, uint32_t options,
+# pcre2_match_data *match_data, pcre2_match_context *mcontext);
+pcre2_match = pcre2.func("i", "pcre2_match_8", "Psiiipp")
+
+# int pcre2_pattern_info(const pcre2_code *code, uint32_t what,
+# void *where);
+pcre2_pattern_info = pcre2.func("i", "pcre2_pattern_info_8", "Pip")
+
+# PCRE2_SIZE *pcre2_get_ovector_pointer(pcre2_match_data *match_data);
+pcre2_get_ovector_pointer = pcre2.func("p", "pcre2_get_ovector_pointer_8", "p")
+
+# pcre2_match_data *pcre2_match_data_create_from_pattern(const pcre2_code *code,
+# pcre2_general_context *gcontext);
+pcre2_match_data_create_from_pattern = pcre2.func(
+ "p", "pcre2_match_data_create_from_pattern_8", "Pp"
+)
+
+# PCRE2_SIZE that is of type size_t.
+# Use ULONG as type to support both 32bit and 64bit.
+PCRE2_SIZE_SIZE = uctypes.sizeof({"field": 0 | uctypes.ULONG})
+PCRE2_SIZE_TYPE = "L"
+
+# Real value in pcre2.h is 0xFFFFFFFF for 32bit and
+# 0x0xFFFFFFFFFFFFFFFF for 64bit that is equivalent
+# to -1
+PCRE2_ZERO_TERMINATED = -1
+
+
+IGNORECASE = I = 0x8
+MULTILINE = M = 0x400
+DOTALL = S = 0x20
+VERBOSE = X = 0x80
+PCRE2_ANCHORED = 0x80000000
# TODO. Note that Python3 has unicode by default
ASCII = A = 0
UNICODE = U = 0
-PCRE_INFO_CAPTURECOUNT = 2
+PCRE2_INFO_CAPTURECOUNT = 0x4
class PCREMatch:
@@ -67,19 +86,23 @@ class PCREPattern:
def search(self, s, pos=0, endpos=-1, _flags=0):
assert endpos == -1, "pos: %d, endpos: %d" % (pos, endpos)
buf = array.array("i", [0])
- pcre_fullinfo(self.obj, None, PCRE_INFO_CAPTURECOUNT, buf)
+ pcre2_pattern_info(self.obj, PCRE2_INFO_CAPTURECOUNT, buf)
cap_count = buf[0]
- ov = array.array("i", [0, 0, 0] * (cap_count + 1))
- num = pcre_exec(self.obj, None, s, len(s), pos, _flags, ov, len(ov))
+ match_data = pcre2_match_data_create_from_pattern(self.obj, None)
+ num = pcre2_match(self.obj, s, len(s), pos, _flags, match_data, None)
if num == -1:
# No match
return None
+ ov_ptr = pcre2_get_ovector_pointer(match_data)
+ # pcre2_get_ovector_pointer return PCRE2_SIZE
+ ov_buf = uctypes.bytearray_at(ov_ptr, PCRE2_SIZE_SIZE * (cap_count + 1) * 2)
+ ov = array.array(PCRE2_SIZE_TYPE, ov_buf)
# We don't care how many matching subexpressions we got, we
# care only about total # of capturing ones (including empty)
return PCREMatch(s, cap_count + 1, ov)
def match(self, s, pos=0, endpos=-1):
- return self.search(s, pos, endpos, PCRE_ANCHORED)
+ return self.search(s, pos, endpos, PCRE2_ANCHORED)
def sub(self, repl, s, count=0):
if not callable(repl):
@@ -141,9 +164,9 @@ class PCREPattern:
def compile(pattern, flags=0):
- errptr = bytes(4)
+ errcode = bytes(4)
erroffset = bytes(4)
- regex = pcre_compile(pattern, flags, errptr, erroffset, None)
+ regex = pcre2_compile(pattern, PCRE2_ZERO_TERMINATED, flags, errcode, erroffset, None)
assert regex
return PCREPattern(regex)
@@ -154,7 +177,7 @@ def search(pattern, string, flags=0):
def match(pattern, string, flags=0):
- r = compile(pattern, flags | PCRE_ANCHORED)
+ r = compile(pattern, flags | PCRE2_ANCHORED)
return r.search(string)

View File

@@ -0,0 +1,44 @@
#
# Copyright (C) 2023 Jeffery To
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
PKG_NAME:=micropython-mpremote
PKG_VERSION:=1.20.0
PKG_RELEASE:=1
PYPI_NAME:=mpremote
PKG_HASH:=5c342762a04791309dd49bce63c70a075aa7c548b1c0076262b96f9ccc398ca2
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=LICENSE
PKG_MAINTAINER:=Jeffery To <jeffery.to@gmail.com>
PKG_BUILD_DEPENDS:=python-hatchling/host python-hatch-requirements-txt/host python-hatch-vcs/host
include ../pypi.mk
include $(INCLUDE_DIR)/package.mk
include ../python3-package.mk
define Package/micropython-mpremote
SECTION:=lang
CATEGORY:=Languages
SUBMENU:=Python
TITLE:=Interacting remotely with MicroPython devices
URL:=https://github.com/micropython/micropython
DEPENDS:=+python3-light +python3-urllib +python3-pyserial
endef
define Package/micropython-mpremote/description
This CLI tool provides an integrated set of utilities to remotely
interact with and automate a MicroPython device over a serial
connection.
endef
$(eval $(call Py3Package,micropython-mpremote))
$(eval $(call BuildPackage,micropython-mpremote))
$(eval $(call BuildPackage,micropython-mpremote-src))

View File

@@ -0,0 +1,5 @@
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,2 +1 @@
pyserial >= 3.3
-importlib_metadata >= 1.4

View File

@@ -8,23 +8,26 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=micropython
PKG_VERSION:=1.18
PKG_VERSION:=1.20.0
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
PKG_SOURCE_URL:=https://github.com/micropython/micropython/releases/download/v$(PKG_VERSION)
PKG_HASH:=96fc71b42ed331c64e1adc5a830ec4f29f2975c23e8751109c03f32b80fa3eb4
PKG_HASH:=098ef8e40abdc62551b5460d0ffe9489074240c0cb5589ca3c3a425551beb9bf
PKG_MAINTAINER:=Jeffery To <jeffery.to@gmail.com>
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=LICENSE
PKG_CPE_ID:=cpe:/a:micropython:micropython
PKG_BUILD_DEPENDS:=python3/host
PKG_BUILD_FLAGS:=no-mips16
PKG_BUILD_PARALLEL:=1
include $(INCLUDE_DIR)/host-build.mk
include $(INCLUDE_DIR)/package.mk
define Package/micropython/default
define Package/micropython/Default
SUBMENU:=Python
SECTION:=lang
CATEGORY:=Languages
@@ -35,36 +38,37 @@ define Package/micropython/default
endef
define Package/micropython-mbedtls
$(call Package/micropython/default)
$(call Package/micropython/Default)
TITLE+= (mbedtls)
DEPENDS+= +libmbedtls
DEPENDS+= +PACKAGE_micropython-mbedtls:libmbedtls
CONFLICTS:=micropython-nossl
VARIANT:=mbedtls
DEFAULT_VARIANT:=1
endef
define Package/micropython-nossl
$(call Package/micropython/default)
$(call Package/micropython/Default)
TITLE+= (nossl)
VARIANT:=nossl
endef
define Package/micropython/default/description
MicroPython is a lean and efficient implementation of the Python 3
programming language that includes a small subset of the Python
standard library and is optimised to run on microcontrollers and in
constrained environments.
define Package/micropython/Default/description
MicroPython is a lean and efficient implementation of the Python 3
programming language that includes a small subset of the Python standard
library and is optimised to run on microcontrollers and in constrained
environments.
endef
define Package/micropython-mbedtls/description
$(call Package/micropython/default/description)
$(call Package/micropython/Default/description)
This version uses the Mbed TLS library.
This version uses the Mbed TLS library.
endef
define Package/micropython-nossl/description
$(call Package/micropython/default/description)
$(call Package/micropython/Default/description)
This version is built without TLS and upip.
This version is built without TLS and mip.
endef
MAKE_FLAGS += BUILD_VERBOSE=1
@@ -73,30 +77,42 @@ ifneq ($(CONFIG_DEBUG),)
MAKE_FLAGS += DEBUG=1
endif
ifeq ($(BUILD_VARIANT),mbedtls)
MAKE_FLAGS += MICROPY_SSL_AXTLS=0 MICROPY_SSL_MBEDTLS=1
endif
ifeq ($(BUILD_VARIANT),nossl)
MAKE_FLAGS += MICROPY_PY_USSL=0 FROZEN_MANIFEST=
MAKE_FLAGS += MICROPY_PY_USSL=0 FROZEN_MANIFEST=variants/standard/manifest-nossl.py
endif
MAKE_PATH = ports/unix
define Build/Compile
define Build/Configure
+$(HOST_MAKE_VARS) \
$(MAKE) $(PKG_JOBS) -C $(PKG_BUILD_DIR)/mpy-cross \
$(HOST_MAKE_FLAGS) BUILD_VERBOSE=1
$(call Build/Compile/Default)
endef
define Package/micropython/default/install
define Build/InstallDev
$(INSTALL_DIR) $(2)/lib/micropython-$(PKG_VERSION)/mpy-cross
$(CP) \
$(PKG_BUILD_DIR)/mpy-cross/mpy_cross \
$(2)/lib/micropython-$(PKG_VERSION)/mpy-cross/
$(INSTALL_DIR) $(2)/lib/micropython-$(PKG_VERSION)/mpy-cross/build
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/mpy-cross/build/mpy-cross \
$(2)/lib/micropython-$(PKG_VERSION)/mpy-cross/build/
$(INSTALL_DIR) $(2)/lib/micropython-$(PKG_VERSION)/tools
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/tools/manifestfile.py \
$(2)/lib/micropython-$(PKG_VERSION)/tools/
endef
define Package/micropython/Default/install
$(INSTALL_DIR) $(1)/usr/bin
$(INSTALL_BIN) $(PKG_BUILD_DIR)/ports/unix/micropython $(1)/usr/bin/
$(INSTALL_BIN) $(PKG_BUILD_DIR)/ports/unix/build-standard/micropython $(1)/usr/bin/
endef
Package/micropython-mbedtls/install = $(Package/micropython/default/install)
Package/micropython-nossl/install = $(Package/micropython/default/install)
Package/micropython-mbedtls/install = $(Package/micropython/Default/install)
Package/micropython-nossl/install = $(Package/micropython/Default/install)
$(eval $(call BuildPackage,micropython-mbedtls))
$(eval $(call BuildPackage,micropython-nossl))

View File

@@ -1,11 +0,0 @@
--- a/ports/unix/Makefile
+++ b/ports/unix/Makefile
@@ -36,7 +36,7 @@ INC += -I$(TOP)
INC += -I$(BUILD)
# compiler settings
-CWARN = -Wall -Werror
+CWARN = -Wall
CWARN += -Wextra -Wno-unused-parameter -Wpointer-arith -Wdouble-promotion -Wfloat-conversion
CFLAGS += $(INC) $(CWARN) -std=gnu99 -DUNIX $(CFLAGS_MOD) $(COPT) -I$(VARIANT_DIR) $(CFLAGS_EXTRA)

View File

@@ -1,20 +0,0 @@
--- a/mpy-cross/Makefile
+++ b/mpy-cross/Makefile
@@ -19,7 +19,7 @@ INC += -I$(TOP)
# compiler settings
CWARN = -Wall -Werror
CWARN += -Wextra -Wno-unused-parameter -Wpointer-arith
-CFLAGS = $(INC) $(CWARN) -std=gnu99 $(CFLAGS_MOD) $(COPT) $(CFLAGS_EXTRA)
+CFLAGS += $(INC) $(CWARN) -std=gnu99 $(CFLAGS_MOD) $(COPT) $(CFLAGS_EXTRA)
CFLAGS += -fdata-sections -ffunction-sections -fno-asynchronous-unwind-tables
# Debugging/Optimization
@@ -42,7 +42,7 @@ else
# Use gcc syntax for map file
LDFLAGS_ARCH = -Wl,-Map=$@.map,--cref -Wl,--gc-sections
endif
-LDFLAGS = $(LDFLAGS_MOD) $(LDFLAGS_ARCH) -lm $(LDFLAGS_EXTRA)
+LDFLAGS += $(LDFLAGS_MOD) $(LDFLAGS_ARCH) -lm $(LDFLAGS_EXTRA)
# source files
SRC_C = \

View File

@@ -1,6 +1,6 @@
--- a/ports/unix/Makefile
+++ b/ports/unix/Makefile
@@ -24,7 +24,7 @@ QSTR_DEFS = qstrdefsport.h
@@ -31,7 +31,7 @@ QSTR_DEFS = qstrdefsport.h
QSTR_GLOBAL_DEPENDENCIES = $(VARIANT_DIR)/mpconfigvariant.h
# OS name, for simple autoconfig

View File

@@ -9,13 +9,17 @@ Subject: [PATCH 06/10] extmod: Use system mbedtls
--- a/extmod/extmod.mk
+++ b/extmod/extmod.mk
@@ -66,81 +66,8 @@ SRC_MOD += $(addprefix $(AXTLS_DIR)/,\
@@ -131,84 +131,8 @@ SRC_THIRDPARTY_C += $(addprefix $(AXTLS_
crypto/sha1.c \
)
else ifeq ($(MICROPY_SSL_MBEDTLS),1)
-MBEDTLS_DIR = lib/mbedtls
-CFLAGS_MOD += -DMICROPY_SSL_MBEDTLS=1 -I$(TOP)/$(MBEDTLS_DIR)/include
-SRC_MOD += $(addprefix $(MBEDTLS_DIR)/library/,\
-MBEDTLS_CONFIG_FILE ?= \"mbedtls/mbedtls_config.h\"
-GIT_SUBMODULES += $(MBEDTLS_DIR)
-CFLAGS_EXTMOD += -DMBEDTLS_CONFIG_FILE=$(MBEDTLS_CONFIG_FILE)
-CFLAGS_EXTMOD += -DMICROPY_SSL_MBEDTLS=1 -I$(TOP)/$(MBEDTLS_DIR)/include
-SRC_THIRDPARTY_C += lib/mbedtls_errors/mp_mbedtls_errors.c
-SRC_THIRDPARTY_C += $(addprefix $(MBEDTLS_DIR)/library/,\
- aes.c \
- aesni.c \
- arc4.c \
@@ -43,7 +47,6 @@ Subject: [PATCH 06/10] extmod: Use system mbedtls
- ecp_curves.c \
- entropy.c \
- entropy_poll.c \
- error.c \
- gcm.c \
- havege.c \
- hmac_drbg.c \
@@ -88,7 +91,7 @@ Subject: [PATCH 06/10] extmod: Use system mbedtls
- x509write_csr.c \
- xtea.c \
- )
+CFLAGS_MOD += -DMICROPY_SSL_MBEDTLS=1
+CFLAGS_EXTMOD += -DMICROPY_SSL_MBEDTLS=1
+LDFLAGS_MOD += -lmbedx509 -lmbedtls -lmbedcrypto
endif
endif

View File

@@ -0,0 +1,31 @@
From f1c6cb7725960487195daa5c5c196fd8d3563811 Mon Sep 17 00:00:00 2001
From: Damien George <damien@micropython.org>
Date: Wed, 3 May 2023 15:23:24 +1000
Subject: [PATCH] py/stackctrl: Add gcc pragmas to ignore dangling-pointer
warning.
This warning became apparent in gcc 13.
Signed-off-by: Damien George <damien@micropython.org>
---
py/stackctrl.c | 7 +++++++
1 file changed, 7 insertions(+)
--- a/py/stackctrl.c
+++ b/py/stackctrl.c
@@ -28,8 +28,15 @@
#include "py/stackctrl.h"
void mp_stack_ctrl_init(void) {
+ #if __GNUC__ >= 13
+ #pragma GCC diagnostic push
+ #pragma GCC diagnostic ignored "-Wdangling-pointer"
+ #endif
volatile int stack_dummy;
MP_STATE_THREAD(stack_top) = (char *)&stack_dummy;
+ #if __GNUC__ >= 13
+ #pragma GCC diagnostic pop
+ #endif
}
void mp_stack_set_top(void *top) {

View File

@@ -0,0 +1 @@
include("$(MPY_DIR)/extmod/uasyncio")

View File

@@ -6,11 +6,11 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=numpy
PKG_VERSION:=1.23.3
PKG_RELEASE:=5
PKG_VERSION:=1.24.3
PKG_RELEASE:=1
PYPI_NAME:=$(PKG_NAME)
PKG_HASH:=51bf49c0cd1d52be0a240aa66f3458afc4b95d8993d2d04f0d91fa60c10af6cd
PKG_HASH:=ab344f1bf21f140adab8e47fdbc7c35a477dc01408791f8ba00d018dd0bc5155
PKG_MAINTAINER:=Alexandru Ardelean <ardeleanalex@gmail.com>
@@ -54,6 +54,12 @@ config NUMPY_OPENBLAS_SUPPORT
endmenu
endef
ifeq ($(ARCH),x86_64)
# FIXME: temporary fix for x86_64 with GCC 13 + musl;
# numpy does not detect this compiler extension, so we just enable it
TARGET_CFLAGS += -mavx512f
endif
define Build/Prepare/numpy-sitecfg
echo "[DEFAULT]" > $(PKG_BUILD_DIR)/site.cfg
echo "library_dirs = $(STAGING_DIR)/usr/lib" >> $(PKG_BUILD_DIR)/site.cfg

View File

@@ -1,9 +1,9 @@
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -2,8 +2,8 @@
@@ -1,8 +1,8 @@
[build-system]
# Minimum requirements for the build system to execute.
requires = [
"packaging==20.5; platform_machine=='arm64'", # macos M1
- "setuptools==59.2.0",
- "wheel==0.37.0",
+ "setuptools>=59.2.0",

View File

@@ -37,17 +37,17 @@ define Package/python3-pillow/description
endef
PYTHON3_PKG_BUILD_CONFIG_SETTINGS += \
--global-option=build_ext \
--global-option=--enable-zlib \
--global-option=--enable-jpeg \
--global-option=--enable-webp \
--global-option=--enable-webpmux \
--global-option=--enable-tiff \
--global-option=--enable-freetype \
--global-option=--disable-lcms \
--global-option=--disable-jpeg2000 \
--global-option=--disable-imagequant \
--global-option=--disable-platform-guessing
--build-option=build_ext \
--build-option=--enable-zlib \
--build-option=--enable-jpeg \
--build-option=--enable-webp \
--build-option=--enable-webpmux \
--build-option=--enable-tiff \
--build-option=--enable-freetype \
--build-option=--disable-lcms \
--build-option=--disable-jpeg2000 \
--build-option=--disable-imagequant \
--build-option=--disable-platform-guessing
$(eval $(call Py3Package,python3-pillow))
$(eval $(call BuildPackage,python3-pillow))

View File

@@ -1,11 +0,0 @@
menu "Configuration"
depends on PACKAGE_python3-pymysql
config PYTHON3_PYMYSQL_SHA_PASSWORD_SUPPORT
bool "Enable support for SHA password authentication"
help
To use “sha256_password” or “caching_sha2_password” for authentication
this symbol needs to be enabled, to also install python3-cryptography.
default n
endmenu

View File

@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=pymysql
PKG_VERSION:=1.0.2
PKG_RELEASE:=1
PKG_RELEASE:=2
PYPI_NAME:=PyMySQL
PKG_HASH:=816927a350f38d56072aeca5dfb10221fe1dc653745853d30a216637f5d7ad36
@@ -24,23 +24,40 @@ include ../pypi.mk
include $(INCLUDE_DIR)/package.mk
include ../python3-package.mk
define Package/python3-pymysql
define Package/python3-pymysql/Default
SUBMENU:=Python
SECTION:=lang
CATEGORY:=Languages
TITLE:=Pure Python MySQL Client
URL:=https://pymysql.readthedocs.io/
DEPENDS:=+python3 +PYTHON3_PYMYSQL_SHA_PASSWORD_SUPPORT:python3-cryptography
endef
define Package/python3-pymysql/config
source "$(SOURCE)/Config.in"
define Package/python3-pymysql
$(call Package/python3-pymysql/Default)
DEPENDS:=+python3
endef
define Package/python3-pymysql/description
This package contains a pure-Python MySQL client library, based on PEP 249.
endef
define Package/python3-pymysql-sha-pwd
$(call Package/python3-pymysql/Default)
TITLE+=w/ SHA256 password auth
DEPENDS:=+python3-pymysql $(RUST_ARCH_DEPENDS) +PACKAGE_python3-pymysql-sha-pwd:python3-cryptography
endef
define Package/python3-pymysql-sha-pwd/description
This is a meta-package installing python3-pymysql and python3-cryptography
packages to be able to use pymysql with sha256_password or
caching_sha2_password for authentication.
endef
define Package/python3-pymysql-sha-pwd/install
true
endef
$(eval $(call Py3Package,python3-pymysql))
$(eval $(call BuildPackage,python3-pymysql))
$(eval $(call BuildPackage,python3-pymysql-src))
$(eval $(call BuildPackage,python3-pymysql-sha-pwd))

View File

@@ -5,15 +5,15 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=pyodbc
PKG_VERSION:=4.0.32
PKG_RELEASE:=1
PKG_VERSION:=4.0.39
PKG_RELEASE:=2
PYPI_NAME:=$(PKG_NAME)
PKG_HASH:=9be5f0c3590655e1968488410fe3528bb8023d527e7ccec1f663d64245071a6b
PKG_BUILD_DEPENDS:=python3 unixodbc
PKG_HASH:=e528bb70dd6d6299ee429868925df0866e3e919c772b9eff79c8e17920d8f116
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=LICENSE.txt
PKG_MAINTAINER:=Daniel Golle <daniel@makrotopia.org>
PKG_MAINTAINER:=Jeffery To <jeffery.to@gmail.com>
PKG_BUILD_DEPENDS:=unixodbc/host
@@ -27,7 +27,7 @@ define Package/python3-pyodbc
SUBMENU:=Python
TITLE:=python3-pyodbc
URL:=https://github.com/mkleehammer/pyodbc
DEPENDS:=+unixodbc +python3-light +libstdcpp
DEPENDS:=+unixodbc +python3-light +python3-decimal +python3-uuid +libstdcpp
endef
define Package/python3-pyodbc/description

Some files were not shown because too many files have changed in this diff Show More