1658 Commits

Author SHA1 Message Date
Michael Heimpold
6ad2be0e4d php8: update to 8.1.32
This fixes:
    - CVE-2025-1217
    - CVE-2025-1219
    - CVE-2025-1734
    - CVE-2025-1736
    - CVE-2025-1861

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.1.32

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-05-18 17:57:13 +02:00
Michael Heimpold
542930a919 php8: update to 8.1.31
This fixes:
    - CVE-2024-8929
    - CVE-2024-8932
    - CVE-2024-11233
    - CVE-2024-11234
    - CVE-2024-11236

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.1.31

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-12-02 17:41:33 +01:00
Florian Eckert
971634b26c mwan3: close flock fd when starting mwan3.user scripts
Fixes deadlock with multiple init script calls

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 619629ce85)
2024-10-29 11:26:55 +01:00
Peter van Dijk
f0f6d9b3f7 pdns-recursor: update to 4.9.9
fixes CVE-2024-25590

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2024-10-16 20:03:14 +08:00
Michael Heimpold
97edf786d5 php8: update to 8.1.30
This fixes:
    - CVE-2024-8925
    - CVE-2024-8926
    - CVE-2024-8927
    - CVE-2024-9026

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.1.30

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-10-09 21:28:14 +02:00
Paul Donald
028474f0c9 p910nd: set bidi only if not already set
Closes #23774

Signed-off-by: Paul Donald <newtwen+github@gmail.com>
(cherry picked from commit 4628b6bd43)
2024-07-22 18:51:10 -07:00
Karol Kolacinski
3b79b05673 transmission: update to version 4.0.6
Release notes:
https://github.com/transmission/transmission/releases/tag/4.0.6

Remove temporary patch included in 4.0.6 release.

Signed-off-by: Karol Kolacinski <kolacinskikarol@live.com>
(cherry picked from commit c32139757c)
2024-07-20 14:51:05 +02:00
Seo Suchan
f88fc60ddb transmission: fix compile with MbedTLS 3.X
Backport pending patch, which was submitted to upstream via GitHub
to use renamed function to compile it against MbedTLS 3.x.

Signed-off-by: Seo Suchan <tjtncks@gmail.com>
(cherry picked from commit 42140c67e0)
2024-07-20 14:51:02 +02:00
Denis Shulyaka
0f0bce1674 ddns-scripts: Update knot resolver regexp
The output format of `khost` has changed. This commit fixes the regexp
for IPv4. It fixes the issue of using a custom DNS to resolve current
address.

```bash
root@localhost:~# khost ns2.afraid.org
ns2.afraid.org. has IPv4 address 69.65.50.223
ns2.afraid.org. has IPv6 address 2001:1850:1:5:800::6b
Host ns2.afraid.org. has no MX record
root@localhost:~# khost --version
khost (Knot DNS), version 3.3.5
```

Signed-off-by: Denis Shulyaka <Shulyaka@gmail.com>
(cherry picked from commit ebeae334d9)
2024-07-20 14:41:00 +02:00
Dengfeng Liu
36f8652303 apfree-wifidog: Update to 7.07.2018
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit b643112740)
2024-07-11 20:36:35 +08:00
Dengfeng Liu
1380ddb92c apfree-wifidog: support wildcard domain
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit ca8fe51fd8)
2024-07-11 20:36:35 +08:00
John Audia
c75356facd openssh: bump to 9.8p1
Release notes: https://www.openssh.com/txt/release-9.8

* 9.8p1 fixes CVE-2024-6387
* Adjusted Makefile to provide /usr/lib/sshd-session
* Given the troubles with -fzero-call-used-regs and all the
  broken checks, makes sense to skip it

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 75674f0439)
2024-07-04 13:36:39 -07:00
Milinda Brantini
5eb63df322 powertop: update to 2.15
Release mainly focuses on bug fixes and patching compatibility issues.
Also, adds support to multiple platforms.
Removed obsolete patch as upstream has fixed.

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 153984a8fb)
[Remove $(AUTORELEASE) to avoid
frequent conflicts during cherry-pick updates.]
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2024-06-24 15:29:28 -07:00
Philip Prindeville
6a9dda4e70 strongswan: Add missing declarations in swanctl
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit d95f6625e3)
Signed-off-by: Richard Muzik <richard.muzik@nic.cz>
2024-06-24 12:48:04 +02:00
Philip Prindeville
898819c470 strongswan: Fix indent for hw_offload, interface, priority
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 03eab9b63b)
Signed-off-by: Richard Muzik <richard.muzik@nic.cz>
2024-06-24 12:48:04 +02:00
Philip Prindeville
b6c76633c2 strongswan: Fix PSK's when using multiple connections
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 796443267f)
Signed-off-by: Richard Muzik <richard.muzik@nic.cz>
2024-06-24 12:48:04 +02:00
Robert Marko
a418ee972f mhz: respect CC and CFLAGS passed by buildsystem
It seems that the Makefile has both CC and CFLAGS hardcoded and does not
allow overriding them by ones being passed by the buildsystem.

This works fine until CONFIG_PKG_ASLR_PIE_ALL is selected, then building
will fail with:
arm-openwrt-linux-muslgnueabi/bin/ld.bfd: mhz.o: relocation R_ARM_MOVW_ABS_NC against `a local symbol' can not be used when making a shared object; recompile with -fPIC
arm-openwrt-linux-muslgnueabi/bin/ld.bfd: mhz.o(.text+0x75c): unresolvable R_ARM_CALL relocation against symbol `__aeabi_l2d@@GCC_3.5

So, lets add a patch pending upstream that allows both CC and CFLAGS to be
overriden so that ones passed by the buildsystem are actually respected.

Fixes: 89123b308f ("mhz: add new package")
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit 6c28f46f37)
Signed-off-by: Richard Muzik <richard.muzik@nic.cz>
2024-06-24 09:45:23 +02:00
Milinda Brantini
fe7e0f6538 natmap: reset PKG_RELEASE to 1
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 1d542b8919)
2024-06-23 11:09:24 -07:00
Milinda Brantini
29e55272d9 natmap: update to 20240603
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit b0a4fd300f)
2024-06-23 11:09:24 -07:00
Glenn Strauss
f514663e1f lighttpd: fix missing dependency for OpenSSL crypto library
This change will provide the necessary dependency resolution, fixing:

  Package lighttpd is missing dependencies for the following libraries:
  libcrypto.so.3

Fixes: #23794
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit a300185d49)
2024-06-20 15:21:51 +08:00
Petr Štetiar
f02b695971 lighttpd: add option to use OpenSSL crypto library
Currently, it is not feasible to configure lighttpd to use OpenSSL as
its internal crypto library. Instead, one must rely on alternative
crypto libraries such as Nettle or mbedTLS. This setup is not ideal in
scenarios where a single crypto library is preferred. To address this
issue, lets propose introducing OpenSSL as an additional configuration
option.  Similarly, propose GnuTLS as additional configuration option.

Closes: #24004
Co-developed-by: Glenn Strauss <gstrauss@gluelogic.com>
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 8c9597f1dc)
2024-06-20 15:21:51 +08:00
Dengfeng Liu
28f71f6b7a apfree-wifidog: update to 7.06.2008
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit a1b1bd87bf)
2024-06-17 16:23:56 +08:00
Dengfeng Liu
5145cfbc8c apfree-wifidog: support rule group and websocket&dns proxy flag
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit a34f47e7bb)
2024-06-17 16:23:56 +08:00
Michael Heimpold
74d0de0604 Merge pull request #24342 from mhei/22.03-php8-update-to-8.1.29
[22.03] php8: update to 8.1.29
2024-06-10 06:52:26 +02:00
Christian Marangi
85db8af746 fdm: update to 2.2 release and switch to PCRE2
Update to release 2.2 and switch to PCRE2. New release switched from
PCRE to PCRE2 and is now required.

Drop patch merged upstream and backport 2 additional patch that fix a
user-after-free and a PCRE2 bug.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 13982c13d0)
2024-06-08 17:17:45 -07:00
Christian Marangi
c08deef2b0 wifidog: make it compile again with recent version of WolfSSL
Recent version of WolfSSL dropped CyaSSL shims and made the package not
compilable. Converting it to the WolfSSL library is simple enough as the
API used are very basic and can be converted directly. Add patch that
fully convert the package to WolfSSL and doesn't use the compat shim
anymore.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit b38e3cd257)
2024-06-08 12:57:47 -07:00
Christian Marangi
1e6a030d69 libpfring: backport patch fixing compilation error for sa_data
Backport patch fixing compilation error for sa_data not well defined.
This is triggered only on platform that makes use of fortify string and
cause compilation error due to the fact that sa_data is not well defined
and his size is arbitrary.

Patch has been accepted in the PF_RING project and this is just a
backport.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit c3a50a9fac)
2024-06-08 12:55:47 -07:00
John Thomson
363d848fd8 libpfring: update to 8.4.0
Release notes:
https://github.com/ntop/PF_RING/releases/tag/8.4.0

Signed-off-by: John Thomson <git@johnthomson.fastmail.com.au>
(cherry picked from commit 534bd518f3)
2024-06-08 12:55:46 -07:00
Christian Marangi
af476d0f90 libpfring: fix compilation warning
Fix simple compilation warning with checking statically allocated
variables and missing fallthrough.
Fix compilation warning:
/home/ansuel/openwrt-ansuel/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-ipq807x_generic/PF_RING-8.0.0/kernel/pf_ring.c: In function 'ring_release':
/home/ansuel/openwrt-ansuel/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-ipq807x_generic/PF_RING-8.0.0/kernel/pf_ring.c:5489:6: error: the comparison will always evaluate as 'true' for the address of 'name' will never be NULL [-Werror=address]
 5489 |      && pfr->zc_device_entry->zc_dev.dev->name) {
      |      ^~
In file included from ./include/linux/rtnetlink.h:7,
                 from /home/ansuel/openwrt-ansuel/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-ipq807x_generic/PF_RING-8.0.0/kernel/pf_ring.c:84:
./include/linux/netdevice.h:1986:33: note: 'name' declared here
 1986 |         char                    name[IFNAMSIZ];
      |                                 ^~~~
/home/ansuel/openwrt-ansuel/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-ipq807x_generic/PF_RING-8.0.0/kernel/pf_ring.c: In function 'ring_bind':
/home/ansuel/openwrt-ansuel/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-ipq807x_generic/PF_RING-8.0.0/kernel/pf_ring.c:5620:18: error: the comparison will always evaluate as 'false' for the address of 'sa_data' will never be NULL [-Werror=address]
 5620 |   if(sa->sa_data == NULL)
      |                  ^~
In file included from /home/ansuel/openwrt-ansuel/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-ipq807x_generic/PF_RING-8.0.0/kernel/pf_ring.c:82:
./include/linux/socket.h:34:25: note: 'sa_data' declared here
   34 |         char            sa_data[14];    /* 14 bytes of protocol address */
      |                         ^~~~~~~
/home/ansuel/openwrt-ansuel/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-ipq807x_generic/PF_RING-8.0.0/kernel/pf_ring.c: In function 'hash_pkt_cluster':
/home/ansuel/openwrt-ansuel/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-ipq807x_generic/PF_RING-8.0.0/kernel/pf_ring.c:3937:7: error: this statement may fall through [-Werror=implicit-fallthrough=]
 3937 |     if(l3_proto == IPPROTO_TCP)
      |       ^
/home/ansuel/openwrt-ansuel/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-ipq807x_generic/PF_RING-8.0.0/kernel/pf_ring.c:3944:3: note: here
 3944 |   case cluster_per_flow_2_tuple:
      |   ^~~~
cc1: all warnings being treated as errors

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 2f86385ff5)
2024-06-08 12:55:23 -07:00
John Audia
c99fb8a8b2 openssh: bump to 9.7p1
Release notes: https://www.openssh.com/txt/release-9.7

Removed upstreamed patch: 010-better_fzero-call-detection.patch

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 6be0617c00)
2024-06-08 12:51:05 -07:00
Michael Heimpold
02347796d2 php8: update to 8.1.29
This fixes:
    - CVE-2024-4577
    - CVE-2024-5458
    - CVE-2024-5585

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-06-08 07:34:45 +02:00
Jeffery To
b048817981 python-jmespath: Update to 1.0.1
This also updates the Python dependency from python3 to python3-light.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit cde28d04e6)
2024-05-29 17:04:46 +02:00
Jeffery To
491610d2ec python-botocore: Update to 1.31.7, update dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 3d83c5c8d6)
2024-05-29 17:04:09 +02:00
Jeffery To
7f5443fd82 python-s3transfer: Update to 0.6.1, update dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 1ac094d012)
2024-05-29 17:03:47 +02:00
Jeffery To
f185287f13 python-boto3: Update to 1.28.7, update dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 182eaed42d)
2024-05-29 17:03:28 +02:00
Jeffery To
3f6428a026 python-awscli: Update to 1.29.7, update dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 211724c3fc)
2024-05-29 17:03:07 +02:00
Dengfeng Liu
60f0176f7e xfrpc: update to 3.05.661
This version is compatible with FRPS 0.58.0

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit d5c22612a9)
2024-05-28 23:04:21 +08:00
Dengfeng Liu
8c0f9c5f62 xfrpc: Revised the config file and adjusted the corresponding init file
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit e39af31753)
2024-05-28 23:04:21 +08:00
Olivier Poitrey
45856a76ad nextdns: Update to version 1.43.5
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2024-05-25 17:56:07 +03:00
Christian Lachner
82a021d5a6 haproxy: update to v2.4.26
- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.4.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2024-05-21 17:41:11 +08:00
Hannu Nyman
e4acbc5795 nano: update to 8.0
Update nano editor to version 8.0

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 69166dbbb7)
2024-05-03 16:25:23 +03:00
Olivier Poitrey
15d1752f99 nextdns: Update to version 1.43.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2024-05-01 19:30:21 +03:00
Josef Schlehofer
7d4c785cd8 transmission: update to version 4.0.5
Release notes:
https://github.com/transmission/transmission/releases/tag/4.0.5

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 19a424aede)
2024-04-30 14:46:21 +02:00
Jeffery To
64380bffa5 CI: Update sdk action, always upload artifacts
The updated version of gh-action-sdk will return compiled packages and
build logs for both build success and build errors.

This ensures these artifacts are always uploaded. This also sets the V
environment variable to enable verbose build output.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit aca4330c04)
2024-04-29 16:34:01 +02:00
Jeffery To
9a7637358e CI: Do package run-tests only if target packages were built
Currently, the package run-test phase will fail for PRs that only
add/update host-only packages, as no target packages (*.ipk) are built.

This checks if any target packages are built before attempting the
run-tests.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5ce254fd8e)
2024-04-29 16:33:48 +02:00
Jeffery To
5b9bcdafb5 CI: Run "apt-get update" before installing signify-openbsd
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 955a90944b)
2024-04-29 16:33:44 +02:00
Jeffery To
0c595a8215 CI: Add local feed for CI-built packages
To test each package, the CI-built target package (ipk) file is
installed, but currently the target package's dependencies are installed
from the standard opkg feeds.

There are cases when the CI-built target packages should be
installed/tested together:

* If a pull request contains several new packages that depend on each
  other, the test step will fail as the new dependencies cannot be found
  in the current packages feed.

* If a pull request upgrades a source package that builds several target
  packages that depend on each other, the test step may fail due to the
  version/ABI mismatch between a newer target package and the older
  dependencies installed from the packages feed.

This sets up a local feed for the CI-built packages so that dependencies
are also installed from the same set of packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit e9bb948402)
2024-04-29 16:33:36 +02:00
Paul Spooren
a66846118b ci: set correct arch for rootfs tests
With the commit 01e5cfc "CI: Add target/arch tags (no suffix) for
snapshot images"[1] the os/platform is set for all images, which is usually
different from what the GitHub action runner uses (x86). The Docker
deamon still tries to fetch the x86 version and fails.

This commit explicitly sets the fitting arch.

[1]: 01e5cfccd7

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit d359fa04ed)
2024-04-29 16:31:38 +02:00
Stan Grishin
26aedd9710 Merge pull request #24024 from rs/nextdns-1.43.0-openwrt-22.03
[22.03] nextdns: Update to version 1.43.0
2024-04-28 17:33:55 -07:00
Sibren Vasse
350e9ef2a3 openssh: fix build failure on powerpc_8548
1036d77b34

Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>
(cherry picked from commit a79c49578c)
2024-04-28 09:41:42 +02:00
Rucke Teg
794a9110d4 openssh: bump to 9.6p1
Release notes: https://www.openssh.com/txt/release-9.6

Signed-off-by: Rucke Teg <rucketeg@protonmail.com>
(cherry picked from commit e8dfc6abbe)
2024-04-28 09:41:37 +02:00
John Audia
92b4a034e8 openssh: bump to 9.5p1
Changelog: https://www.openssh.com/txt/release-9.5

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 6dc86d46da)
2024-04-28 09:41:31 +02:00
Olivier Poitrey
b81d247f14 nextdns: Update to version 1.43.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2024-04-28 00:47:37 +00:00
Marius Dinu
30a9623c40 tvheadend: Fix github warning about AUTORELEASE
Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit 091681e152)
2024-04-27 12:05:42 +02:00
Marius Dinu
645f5fa2ae tvheadend: add conditions for -O3 and LTO optimizations
Building for arc, mips and powerpc platforms fails if -O3 and LTO optimizations are enabled. This patch removes that option for everything other than arm and x86_64. These are known to work.
Fixes issue #19923.
Also fixes a typo in the description.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit 1490531981)
2024-04-27 12:05:21 +02:00
Ivan Pavlov
1301ccb894 openvpn: update to 2.5.8
Mostly bugfix release
For details refer to https://github.com/OpenVPN/openvpn/blob/v2.5.8/Changes.rst

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
(cherry picked from commit f49645d24c)
2024-04-27 11:53:41 +02:00
Martin Schiller
09a85c7e99 openvpn: add possibility to set param "compress" without algorithm
In some situations you need to set the compress param without an
algorithm. Compression will be turned off, but the packet framing for
compression will still be enabled, allowing a different setting to be
pushed later.

As it is not possible to have options with optional values at the
moment, I've introduced a pseudo value "frames_only" which will be
removed in the init script.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
(cherry picked from commit 5ce5220eb2)
2024-04-27 11:53:35 +02:00
Sibren Vasse
bfb0d953f0 openssh: update to 9.4p1
Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>
(cherry picked from commit 7fb8e823b9)
2024-04-27 10:04:05 +02:00
Philip Prindeville
8a1e03011a openssh: add server config subdirectory
Most distros allow dropping site configuration files into
/etc/sshd_config.d/ so that you don't have to tweak the main
server configuration file.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit ead95a26b6)
2024-04-27 10:04:05 +02:00
Nathan Friedly
e90632f98a librespeed-go: improve the description
This swaps the order of the lines in the description so that when LuCI displays only the first line, it still offers some helpful information.

Signed-off-by: Nathan Friedly <nathan@nfriedly.com>
(cherry picked from commit 06ea66c558)
2024-04-27 13:23:00 +08:00
Anya Lin
d44d1fcfa0 librespeed-go: Reload the daemon after modifying the tls certificate
Make the daemon reload after the tls certificate is updated

Signed-off-by: Anya Lin <hukk1996@gmail.com>
(cherry picked from commit fd1d506fff)
2024-04-27 13:22:57 +08:00
Josef Schlehofer
870b00c2fe syslog-ng: update to version 4.7.1
Release notes:
- https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.7.0
- https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.7.1

Also bump version in the config file to avoid warning

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 9d49df0dab)
2024-04-26 13:42:10 +02:00
Paul Spooren
020c2ae413 CI: remove CircleCI for now
The GitHub CI offers currenlty more architecture and the Signed-of-by
test is covered via the DOC CI test. In case GitHub ever changes
policies, we can simply switch back.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 26c101edc3)
2024-04-26 11:50:47 +02:00
Jeffery To
311c13cd77 CircleCI: Add 22.03 public keys, 18.06 v2 gpg key, 18.06 usign key
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit dce83a5022)
2024-04-26 11:50:17 +02:00
Ray Wang
a21e2d6847 natmap: add log_std{out,err} options
Introduce `log_stdout` and `log_stderr` options for managing logging output.

Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit 5abbd3bcb2)
2024-04-25 00:26:57 +08:00
Josef Schlehofer
2738e4ab7e modemmanager: drop backported patches
These patches were included in 1.18.8, thus it can be removed.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2024-04-23 16:38:07 +02:00
Aleksander Morgado
cb8ea00900 modemmanager: fix unquoted strings when launching pppd
Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit eb283ea8a3)
2024-04-23 16:37:01 +02:00
Arkadiusz Drabczyk
b971b843c9 modemmanager: fix mm_log() invocations in 25-modemmanager* files
Definition of mm_log() was changed in
45a56a8899 but 25-modemmanager* weren't
changed.

Signed-off-by: Arkadiusz Drabczyk <arkadiusz@drabczyk.org>
(cherry picked from commit cdbc7a67fc)
2024-04-23 16:36:48 +02:00
Aleksander Morgado
ba92c4552b modemmanager: explicitly disconnect even if no bearers found
A network restart where netifd is cleanly restarted involves bringing
the network interfaces down. The 'modemmanager' protocol handler will
run a mmcli --simple-disconnect in this case, but only if there are
bearer objects found.

If the network restart happened *during* the connection attempt
procedure, while the modem is e.g. being registered in the network, no
bearer objects exist yet, and so, we would skip doing anything during
the interface teardown operation. This would lead to the original
connection attempt succeeding, so leaving the modem in ModemManager
in connected state, while the associated interface in netifd is
reported down.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit c15e94f6c5)
2024-04-23 16:36:42 +02:00
Aleksander Morgado
2aff57efdc modemmanager: report network initiated disconnections to netifd
The new connection dispatcher scripts support integrated in
ModemManager 1.18.8 allows us to provide a openwrt-specific dispatcher
script used to report netifd that the underlying network connection is
down.

See also https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/merge_requests/775

Fixes https://github.com/openwrt/openwrt/issues/8368
Fixes https://github.com/openwrt/packages/issues/14096

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit bc754f31cf)
2024-04-23 16:36:35 +02:00
Aleksander Morgado
27747109cc modemmanager: install available FCC unlock scripts
The FCC unlock scripts are installed but not enabled by default.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit e430420aa1)
2024-04-23 16:36:29 +02:00
Maxim Anisimov
3c8a12e897 modemmanager: bump to 1.18.12
Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit c588b92d51)
2024-04-23 16:31:18 +02:00
Jan Klos
c2740e801f unbound: update to 1.19.3
Signed-off-by: Jan Klos <jan@klos.xyz>
(cherry picked from commit 558cbcac46)
2024-04-18 19:08:31 +02:00
Rui Salvaterra
d7d2427989 tor: update to 0.4.8.10 stable
Bugfix release, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.10/ChangeLog

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit ee8b29de2c)
2024-04-18 19:05:57 +02:00
Andrew Sim
b4d46c666c transmission: update to 4.0.4
Update Transamission to 4.0.4 stable release
Changelog: https://github.com/transmission/transmission/releases/tag/4.0.4

Signed-off-by: Andrew Sim <andrewsimz@gmail.com>
(cherry picked from commit 45170d9b67)
2024-04-18 18:52:30 +02:00
Michael Heimpold
8d38e3de1d Merge pull request #23940 from mhei/22.03-php8-update-to-8.1.28
[22.03] php8: update to 8.1.28
2024-04-16 21:10:07 +02:00
Michael Heimpold
f05d23ebbd php8: update to 8.1.28
This fixes:
  - CVE-2024-1874
  - CVE-2024-2756
  - CVE-2024-3096

While at, switch to https download URL.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-04-16 19:54:06 +02:00
Glenn Strauss
8d8620bbf2 lighttpd: update to lighttpd 1.4.76 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit a5557a2a47)
2024-04-13 14:00:48 -07:00
Josef Schlehofer
062b283f13 lualanes: update to version 3.16.3 and use tarball
1. Update it to version 3.16.3
Release notes: https://github.com/LuaLanes/lanes/releases/tag/v3.16.3

2. Change to download tarball instead of checking out Git sources
In the previous commit (in the Fixes tag), it was changed to Git sources without any reason. Let's revert it back. Let's use again tagged release.

Fixes: b93e5b45b1 ("lualanes: Version bump to v3.16.2")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 8b7040b6de)
2024-04-12 09:55:52 +02:00
Mark Baker
662dd4a0a4 lualanes: Version bump to v3.16.2
Update the PKG_VERSION and PKG_SOURCE_VERSION to pull version 3.16.2
from upstream. The upstream version includes fixes for the
`pthread_yield: symbol not found` issue.

Removed patches 100-musl-compat.patch and 200-fix-redef-error.patch
as fixes were implemented upstream.

Build tested on aarch64, arm_cortex_a15/a9, i386, mips[el]_24kc,
powerpc_464fp/8548, riscv64, x86_64. Confirmed on x86_64.

Signed-off-by: Mark Baker <mark@vpost.net>
(cherry picked from commit 08e51ab50a)
2024-04-12 09:55:36 +02:00
krant
8022fb4a83 hwdata: update to 0.379
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit 9f45bfd3d5)
2024-04-12 09:53:55 +02:00
Jo-Philipp Wich
8c02297d07 nano: fix syntax highlighting for raw ucode scripts
Text between interpreter line and start of first directive should only
highlighted as uninterpreted when running in template mode, so adjust
the match rule accordingly.

Fixes: #23761
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 8f9564387d)
2024-04-05 17:32:15 +03:00
Jo-Philipp Wich
51005623ca nano: add syntax highlighting for ucode scripts
Introduce local syntax highlighting support for ucode scripts, like
it is done already for uci configuration files.

Ref: https://github.com/jow-/ucode/issues/178
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit d8a574f7f0)
2024-04-05 17:32:11 +03:00
Peca Nesovanovic
7c3f86430e p910nd: fix running multiple instances
Compile tested: (ramips, rb760igs, 23.05 snapshot)
Run tested: (ramips, rb760igs, 23.05 snapshot, tests done)

Description:
In case we have multiple device defined in /etc/config/p910nd then init script will try to start multiple instance with same instance name
drop instance name as resolution

tested on 23.05 snapshot with 2 USB printers

Signed-off-by: Peca Nesovanovic <peca.nesovanovic@sattrakt.com>
(cherry picked from commit 152d80ce13)
2024-03-27 14:33:04 +08:00
Josef Schlehofer
ae3ae3f30e syslog-ng: enable http module based on zlib support in curl
Since version 4.4.0, syslog-ng added compression to http() destination
using zlib from curl. [1] However, zlib is currently disabled in curl [2]
and it prevented syslog-ng to start.

This commit changes the configuration opinion to enable http module only if
zlib support is enabled for curl and as well it adds dependency for zlib (in that case).
If the zlib is disabled, then it disables http module, so syslog-ng can start
and thus zlib dependency is not required.

[1] https://gitlab.nic.cz/turris/os/packages/-/issues/932
[2] 93cbaacbfb/net/curl/Config.in (L134)
Fixes: 4dd49d7c3c ("syslog-ng: update to version 4.4.0")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1e14d95d78)
2024-03-26 08:27:13 +01:00
Michal Hrusecky
1f10633db0 knot-resolver: Update to version 5.7.1
- Fixes CVE-2023-50868 and CVE-2023-50387
- Also, the resolver has not been called 'Knot DNS Resolver' for quite
some time, so fix that, too.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit 1131acf57f)
2024-03-24 11:38:27 +01:00
Šimon Bořek
e36ca36b92 knot-resolver: enable dnstap module build by default
'dnstap' module will be built but not loaded by default at runtime
(configuration must be provided for it to be loaded). It is still possible to
disable dnstap build manually using menuconfig.

"The dnstap module supports logging DNS requests and responses to a unix socket
in dnstap format using fstrm framing library. This logging is useful if you need
effectively log all DNS traffic."[^1]

Adds dependency on 'protobuf', 'protobuf-c', 'libfstrm'. Listed packages are
available from OpenWrt packages, have uncomplicated manifests and
while 'protobuf-c' doesn't have a maintainer since spring 2020, all the
packages (including 'protobuf-c') seem to be maintained - the last
updates of all of them in autumn 2021.

As stated by Vladimír Čunát from Knot Resolver team they build dnstap
while packaging for majority of standard Linux distributions.
Therefore this change brings us closer to expected default.

[^1]: https://knot-resolver.readthedocs.io/en/stable/modules-dnstap.html

Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
(cherry picked from commit a68397ff77)
2024-03-24 11:38:22 +01:00
Šimon Bořek
fc6fb6a860 knot-resolver: do not overwrite -Ddnstap=enabled configuration
It was possible to enable dnstap in menuconfig, but the configuration
only added dependencies while leaving dnstap module build disabled.

Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
(cherry picked from commit af521478f8)
2024-03-24 11:38:17 +01:00
Glenn Strauss
5a20abc059 lighttpd: update to lighttpd 1.4.75 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit a60a0d0730)
2024-03-23 15:13:01 +01:00
Fabrice Fontaine
87cf217806 treewide: assign PKG_CPE_ID
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 5afe5c9031)
2024-03-19 13:28:12 +01:00
Paul Donald
e4958a3762 p910nd: restart daemon even if no driver file is needed
Not all USB printers need a blob loading; restart the daemon
independently of driver loading.

Closes openwrt/packages#23588

Signed-off-by: Paul Donald <newtwen@gmail.com>
Tested-by: minicx <minicx@disroot.org>
(cherry picked from commit 685ef7d97b)
2024-03-13 10:29:23 +01:00
Jan Hák
2a09ee562e knot: update to version 3.3.5
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit d660dc6e7c)
2024-03-06 20:30:54 +01:00
Paul Donald
33cd89a57f ntpclient: remove
ntp sources are dead and gone. The most important functionality is now
provided by ntpd.

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 2cd10d8113)
2024-03-05 22:43:27 +01:00
Josef Schlehofer
a03500c5c8 syslog-ng: update to version 4.6.0
1. Bump version config to 4.6
2. Updated to 4.6.0 version
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.6.0
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.5.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit cf4df28d06)
2024-03-05 22:19:10 +01:00
Sergey Ponomarev
d8490a4722 syslog-ng: conf: fix deprecated stats_freq
The deprecated stats_freq() replaced with stats(freq(0)).

Also make comments shorter.
Fix tabs.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
(cherry picked from commit 37d2d69595)
2024-03-05 22:18:49 +01:00
Dengfeng Liu
ced6158ab4 apfree-wifidog: update to 7.02.1977
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
2024-03-05 11:41:06 +08:00
Dengfeng Liu
7e95cc8972 apfree-wifidog: fix some bugs in the wifidogx.init file
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
2024-03-05 11:41:06 +08:00
Stan Grishin
8ff00cec77 Merge pull request #23572 from stangri/openwrt-22.03-https-dns-proxy
[23.05] https-dns-proxy: update to upstream 2023-11-19
2024-03-04 13:58:32 -07:00
Ray Wang
7183f1d3a5 natmap: update to 20240303
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit 7bbd9156cc)
2024-03-04 23:40:10 +08:00
Tianling Shen
9ccca54089 rclone: add fuse3-utils as dependency
rclone has switched to use fuse3 since v1.62.0.

Reported-by: qiuzi <gxfclql@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit df9d076d60)
2024-03-02 17:55:14 +08:00
Stan Grishin
2b98e97b31 https-dns-proxy: update to upstream 2023-11-19
* update to upstream 2023-11-19
  (changes: 489c57efd4)
* bugfix: include resolveip dependency in Makefile
  (fixes https://github.com/openwrt/packages/issues/23567)
* minor update for failed healthcheck logging

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit bd501dd89c)
2024-03-02 00:21:34 +00:00
Rui Salvaterra
55b7f6f501 tor: update to 0.4.8.7 stable
Bugfix release, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.7/ChangeLog

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 5cb304e2b3)
2024-02-27 11:05:58 +01:00
ValdikSS ValdikSS
f532413ba2 tor: fix daemon reloading
procd requires init script name, not the path to executable

Signed-off-by: ValdikSS ValdikSS <iam@valdikss.org.ru>
(cherry picked from commit af58942738)
2024-02-27 11:05:49 +01:00
Rui Salvaterra
d7b84bfc32 tor: update to 0.4.8.4 stable
First release of the 0.4.8.x series, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.4/ChangeLog

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 1b2c1ddbb2)
2024-02-27 11:05:42 +01:00
Daniel Bermond
ba17b22a10 tor: update to version 0.4.7.13
Maintainers  : @hauke (Hauke Mehrtens) and @tripolar (Peter Wagner)
Build system : Arch Linux x86_64
Build tested : r7800 OpenWrt git master (r22104-01262c921c)
Run tested   : r7800 OpenWrt git master (r22104-01262c921c)

Signed-off-by: Daniel Bermond <danielbermond@gmail.com>
(cherry picked from commit 5f0a9ec722)
2024-02-27 11:05:35 +01:00
Rui Salvaterra
90d25bc61c tor: bump to 0.4.7.12 stable
Quoting the changelog:

Changes in version 0.4.7.12 - 2022-12-06
  This version contains a major change that is a new key for moria1. Also, new
  metrics are exported on the MetricsPort for the congestion control
  subsystem.

  o Directory authority changes (moria1):
    - Rotate the relay identity key and v3 identity key for moria1. They
      have been online for more than a decade and refreshing keys
      periodically is good practice. Advertise new ports too, to avoid
      confusion. Closes ticket 40722.

  o Minor feature (Congestion control metrics):
    - Add additional metricsport relay metrics for congestion control.
      Closes ticket 40724.

  o Minor features (fallbackdir):
    - Regenerate fallback directories generated on December 06, 2022.

  o Minor features (geoip data):
    - Update the geoip files to match the IPFire Location Database, as
      retrieved on 2022/12/06.

  o Minor bugfixes (cpuworker, relay):
    - Fix an off by one overload calculation on the number of CPUs being
      used by our thread pool. Fixes bug 40719; bugfix on 0.3.5.1-alpha.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 3fd37a234c)
2024-02-27 11:05:28 +01:00
Rui Salvaterra
d0f156a55e tor: bump to 0.4.7.11 stable
Quoting the changelog:

Changes in version 0.4.7.11 - 2022-11-10
  This version contains several major fixes aimed at helping defend against
  network denial of service. It is also extending drastically the MetricsPort
  for relays to help us gather more internal data to investigate performance
  and attacks.

  We strongly recommend to upgrade to this version especially for Exit relays
  in order to help the network defend against this ongoing DDoS.

  o Directory authority changes (dizum, Faravahar):
    - Change dizum IP address. Closes ticket 40687.
    - Remove Faravahar until its operator, Sina, set it back up online
      outside of Team Cymru network. Closes ticket 40688.

  o Major bugfixes (geoip data):
    - IPFire informed us on August 12th that databases generated after
      (including) August 10th did not have proper ARIN network
      allocations. We are updating the database to use the one generated
      on August 9th, 2022. Fixes bug 40658; bugfix on 0.4.5.13.

  o Major bugfixes (onion service):
    - Set a much higher circuit build timeout for opened client rendezvous
      circuit. Before this, tor would time them out very quickly leading to
      unnecessary retries meaning more load on the network. Fixes bug 40694;
      bugfix on 0.3.5.1-alpha.

  o Major bugfixes (OSX):
    - Fix coarse-time computation on Apple platforms (like Mac M1) where
      the Mach absolute time ticks do not correspond directly to
      nanoseconds. Previously, we computed our shift value wrong, which
      led us to give incorrect timing results. Fixes bug 40684; bugfix
      on 0.3.3.1-alpha.

  o Major bugfixes (relay):
    - Improve security of our DNS cache by randomly clipping the TTL
      value. TROVE-2021-009. Fixes bug 40674; bugfix on 0.3.5.1-alpha.

  o Minor feature (Mac and iOS build):
    - Change how combine_libs works on Darwin like platforms to make
      sure we don't include any `__.SYMDEF` and `__.SYMDEF SORTED`
      symbols on the archive before we repack and run ${RANLIB} on the
      archive. This fixes a build issue with recent Xcode versions on
      Mac Silicon and iOS. Closes ticket 40683.

  o Minor feature (metrics):
    - Add various congestion control counters to the MetricsPort. Closes
      ticket 40708.

  o Minor feature (performance):
    - Bump the maximum amount of CPU that can be used from 16 to 128. Note
      that NumCPUs torrc option overrides this hardcoded maximum. Fixes bug
      40703; bugfix on 0.3.5.1-alpha.

  o Minor feature (relay):
    - Make an hardcoded value for the maximum of per CPU tasks into a
      consensus parameter.
    - Two new consensus parameters are added to control the wait time in
      queue of the onionskins. One of them is the torrc
      MaxOnionQueueDelay options which supersedes the consensus
      parameter. Closes ticket 40704.

  o Minor feature (relay, DoS):
    - Apply circuit creation anti-DoS defenses if the outbound circuit
      max cell queue size is reached too many times. This introduces two
      new consensus parameters to control the queue size limit and
      number of times allowed to go over that limit. Closes ticket 40680.

  o Minor feature (relay, metrics):
    - Add DoS defenses counter to MetricsPort.
    - Add congestion control RTT reset counter to MetricsPort.
    - Add counters to the MetricsPort how many connections, per type,
      are currently opened and how many were created.
    - Add relay flags from the consensus to the MetricsPort.
    - Add total number of opened circuits to MetricsPort.
    - Add total number of streams seen by an Exit to the MetricsPort.
    - Add traffic stats as in number of read/written bytes in total.
    - Related to ticket 40194.

  o Minor features (fallbackdir):
    - Regenerate fallback directories generated on November 10, 2022.

  o Minor features (geoip data):
    - Update the geoip files to match the IPFire Location Database, as
      retrieved on 2022/11/10.

  o Minor bugfixes (authorities, sandbox):
    - Allow to write file my-consensus-<flavor-name> to disk when
      sandbox is activated. Fixes bug 40663; bugfix on 0.3.5.1-alpha.

  o Minor bugfixes (dirauth):
    - Directory authorities stop voting a consensus "Measured" weight
      for relays with the Authority flag. Now these relays will be
      considered unmeasured, which should reserve their bandwidth for
      their dir auth role and minimize distractions from other roles. In
      place of the "Measured" weight, they now include a
      "MeasuredButAuthority" weight (not used by anything) so the
      bandwidth authority's opinion on this relay can be recorded for
      posterity. Lastly, remove the AuthDirDontVoteOnDirAuthBandwidth
      torrc option which never worked right. Fixes bugs 40698 and 40700;
      bugfix on 0.4.7.2-alpha.

  o Minor bugfixes (onion service client):
    - A collapsing onion service circuit should be seen as an
      "unreachable" error so it can be retried. Fixes bug 40692; bugfix
      on 0.3.5.1-alpha.

  o Minor bugfixes (onion service):
    - Make the service retry a rendezvous if the circuit is being
      repurposed for measurements. Fixes bug 40696; bugfix
      on 0.3.5.1-alpha.

  o Minor bugfixes (relay overload statistics):
    - Count total create cells vs dropped create cells properly, when
      assessing if our fraction of dropped cells is too high. We only
      count non-client circuits in the denominator, but we would include
      client circuits in the numerator, leading to surprising log lines
      claiming that we had dropped more than 100% of incoming create
      cells. Fixes bug 40673; bugfix on 0.4.7.1-alpha.

  o Code simplification and refactoring (bridges):
    - Remove unused code related to ExtPort connection ID. Fixes bug
      40648; bugfix on 0.3.5.1-alpha.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 9136ff1532)
2024-02-27 11:05:20 +01:00
Glenn Strauss
648ff8de32 lighttpd: update to lighttpd 1.4.74 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 4d8bb07b73)
2024-02-23 08:20:21 +01:00
krant
2968d5c501 squid: fix configure options
- Remove non-existing 'dlmalloc' option
- Use 'with-cap' instead of 'with-libcap'
- Use 'with-xml2' instead of 'with-libxml2'
- Patch configure.ac to properly handle 'with-nettle'

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit f58be51721)
2024-02-21 17:13:58 +01:00
krant
72fc3a4ede squid: update to 6.7
- Switch URL to HTTPS
- Remove default/obsolete configure options
- Fix and refresh the patch

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit 4007a08529)
2024-02-21 17:13:48 +01:00
S. Brusch
d2c632fe65 unbound: update to latest upstream release version 1.19.1
Maintainer: @EricLuehrsen
Fixes: CVE-2023-50387, CVE-2023-50868
Release notes: https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/
Run tested: BPi-R3, mediatek/filogic, OpenWrt 23.05.2
Signed-off-by: S. Brusch <ne20002@gmx.ch>
(cherry picked from commit 35ba14e50c)
2024-02-21 08:14:39 +01:00
Sebastian Kemper
16480e7038 tiff: force libdeflate support to off
Commit 81d2b72 added a package providing libdeflate. Tiff by default
links to it, causing a build error.

Package libtiff is missing dependencies for the following libraries:
libdeflate.so.0

This commit forces libdeflate use off to avoid this. No revision bump is
done because the package is currently not compiling anyway.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit e3c6da4e25)
2024-02-21 08:08:53 +01:00
Daniel Golle
b72390bb95 libb64: add package
Add generic base64 encode/decode (static) library.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 6993b5d945)
2024-02-20 09:05:54 +01:00
Tianling Shen
f5e224ced4 libdeflate: Update to 1.18
Release note:
https://github.com/ebiggers/libdeflate/blob/master/NEWS.md#version-118

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8591e8fb3f)
2024-02-20 09:05:31 +01:00
Daniel Golle
c91b629ba6 libdeflate: add package
Add package for libdeflate which is a library for fast, whole-buffer
DEFLATE-based compression and decompression.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 81d2b7262e)
2024-02-20 09:05:26 +01:00
Daniel Golle
848f917a5e libdht: add package
Add Kademlia Distributed Hash Table (DHT) library.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit a281a8af9f)
2024-02-20 09:05:10 +01:00
Daniel Golle
9185c338f0 libutp: add package
Add Transmission version of the uTorrent Transport Protocol library.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1ecef46f1c)
2024-02-20 09:04:50 +01:00
Liangbin Lian
91d0edffae transmission: fix depends on libmbedtls
If a firmware build with curl without mbedtls, install transmission from openwrt official repo will fail to start

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit 2311e79218)
2024-02-20 09:01:19 +01:00
Tianling Shen
3b33d02a11 Merge pull request #23416 from systemcrash/p910nd_22_picks
P910nd v22.03 picks
2024-02-20 13:47:37 +08:00
Rosen Penev
dd8e952e82 openconnect: update to 9.12
Remove upstream backport and fix libxml 1.12 compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-19 13:28:47 +01:00
Vladislav Grigoryev
463b115966 openconnect: add support for option --pfs
Add support for the OpenConnect option `--pfs`.
Designed to require perfect forward secrecy.

Signed-off-by: Vladislav Grigoryev <vg.aetera@gmail.com>
2024-02-19 13:28:47 +01:00
John Audia
c2515de900 lxc: update to 5.0.3
Bump to latest upstream release.

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 1b5ee689f3)
2024-02-18 17:06:40 +01:00
Jeffery To
2c24e0e269 fail2ban: Fix compatibility with Python 3.11
This backports 2 commits from upstream[1]; the other 3 are not strictly
necessary. One of the patches has been updated to remove a change to a
regex that does not exist in 0.11.2.

[1]: https://github.com/fail2ban/fail2ban/pull/3267

Fixes: https://github.com/openwrt/packages/issues/22736

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0d9cc4aed2)
2024-02-18 17:04:01 +01:00
Marius Dinu
b54b3ce36f transmission: add copy_file_range syscall to seccomp
Fixes this crash:

root@RPi3OpenWrt:/# grep -i seccomp /var/log/audit/audit.log
type=SECCOMP msg=audit(1689503903.597:16): auid=4294967295 uid=224 gid=1012 ses=4294967295 pid=1752 comm="transmission-da" exe="/usr/bin/transmission-daemon" sig=31 arch=c00000b7 syscall=285 compat=0 ip=0x7fa3b0eefc code=0x80000000
root@RPi3OpenWrt:/# ausyscall 285
copy_file_range
root@RPi3OpenWrt:/#

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit f0926b44f4)
2024-02-18 17:00:51 +01:00
Marius Dinu
359331cb4e transmission: add ftruncate syscall to seccomp
Fixes many crashes.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit a037254588)
2024-02-18 17:00:45 +01:00
Leonid Bogdanov
3be19d32d1 transmission: Fix env variables passing
It's not possible to configure custom Transmission web home as corresponding
env var gets overwritten by the command that sets CA bundle env var.

Signed-off-by: Leonid Bogdanov <leonidbogdanov86@gmail.com>
(cherry picked from commit c662aefd9a)
2024-02-18 17:00:35 +01:00
Marius Dinu
744a5b5b7a transmission: add missing nls.mk include
Fixes issue #21016.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit f66bcdd1b6)
2024-02-18 17:00:02 +01:00
Daniel Golle
c2627a0f74 transmission: add missing ftruncate64 syscall
Transmission 4.0.3 started using the ftruncate64 syscall.
Add it to the list of allowed syscalls.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 142bbc77f1)
2024-02-18 16:59:56 +01:00
Daniel Golle
5e31c0d9cc transmission: add new syscall needed with musl 1.2.4
Apparently the "revcmsg" syscall is now needed, add it to the list
of allowed syscalls.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 6afcc1bc88)
2024-02-18 16:59:49 +01:00
Andrew Sim
1b12e2a9cc transmission: Update to v4.03
Update transmission to latest stable v4.0.3 release

Changelog: https://github.com/transmission/transmission/releases/tag/4.0.3

Signed-off-by: Andrew Sim <andrewsimz@gmail.com>
(cherry picked from commit f6c43e7c5a)
2024-02-18 16:59:36 +01:00
Daniel Golle
2482f02d83 transmission: update to version 4.0.2
See release notes for more details:
https://github.com/transmission/transmission/releases/tag/4.0.2

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 08ee78e022)
2024-02-18 16:59:31 +01:00
Daniel Golle
ebd7ad6b97 transmission: update to version 4.0.1
This is a major release, both in numbering and in effort! It's been in
active development for over a year and has a huge list of changes --
over a thousand commits -- since Transmission 3.00.

For more information about the release see
https://github.com/transmission/transmission/releases/tag/4.0.0
https://github.com/transmission/transmission/releases/tag/4.0.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 96fd2dc531)
2024-02-18 16:59:04 +01:00
Rosen Penev
3ef8cf643f transmission: get rid of iconv dependency
No need for an external one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 142b73b5db)
2024-02-18 16:58:32 +01:00
Salim B
cbfbb65532 transmission: retrieve boolean config opts using config_get_bool
The tranmission UCI config options

- `config_overwrite`
- `incomplete_dir_enabled`
- `watch_dir_enabled`

are all booleans, so we have to retrieve them using `config_get_bool` in order
to make sure they are properly interpreted in case the user sets them to a
keyword (`true`/`false`, `on`/`off` etc.) and not an integer (`0`/`1`).

Signed-off-by: Salim B <git@salim.space>
(cherry picked from commit 63dc13d7d2)
2024-02-18 16:54:58 +01:00
Alexander Egorenkov
ea055982f4 transmission: add 'incomplete' and 'watch' dirs to ujail mounts
To fix the errors:

Sun Apr 10 14:19:41 2022 daemon.err transmission-daemon[29831]: [2022-04-10 14:19:41.098] watchdir Failed to open directory "/mnt/sda1/openwrt/transmission/watch" (2): No such file or directory (watchdir.c:358)

and

Sun Apr 10 14:20:18 2022 daemon.err transmission-daemon[30175]: [2022-04-10 14:20:18.641] Couldn't create "/mnt/sda1/openwrt/transmission/incomplete": Permission denied (file-posix.c:243)

References:
- https://github.com/openwrt/packages/issues/17674

Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>
(cherry picked from commit cbc1b0790d)
2024-02-18 16:54:36 +01:00
Florian Eckert
bac36b9478 zabbix: update to version 6.4.7
Switch to current stable version 6.4.7.
See release notes:
https://www.zabbix.com/rn/rn6.4.7

So that the new version builds cleanly. The 'libevent2-pthreads' must be
added as dependency.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 4f9ced5cf9)
2024-02-17 15:01:51 +01:00
Christian Marangi
26e58ced08 zabbix: move to PCRE2 library
Move to PCRE2 library as PCRE is not EOL and won't receive any security
updates anymore.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 3dfb00c6c6)
2024-02-17 15:01:43 +01:00
Jeffery To
301dc0373d zabbix: Add "oldstable" source URL
Zabbix moved the 6.2 directory from "stable" into "oldstable". This adds
the "oldstable" URL to PKG_SOURCE_URL.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit c196aac4b1)
2024-02-17 15:01:38 +01:00
Florian Eckert
c4d1804108 zabbix: add sqlite3 support
This change makes it possible to build zabbix with sqlite3 support.

Attention:
By selecting "SQLite" as "Database Software" you are not able
to build the zabbix-server and zabbix-server-frontend package anymore.
This database is not supported for this service.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 3c11092560)
2024-02-17 15:01:33 +01:00
Scott Roberts
f86abce427 zabbix: update to 6.2.3
Refreshed patches.

Signed-off-by: Scott Roberts <ttocsr@gmail.com>
(cherry picked from commit 475d1cc0e9)
2024-02-17 15:01:18 +01:00
Florian Eckert
b6cd34db8b zabbix: add fping dependency
If fping is not installed on the system the following message is show if
hosts should be monitored via icmp.

Log-Message:
"At least one of '/usr/sbin/fping', '/usr/sbin/fping6' must exist. Both
are missing in the system."

To fix this also, add a dependency to 'fping' for 'zabbix-server' and
'zabbix-proxy' for installation to allow icmp hosts monitoring.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 672a655d6b)
2024-02-17 15:01:12 +01:00
Julien Cassette
c9c59f553e unbound: fix create_host_record_from_host error when dns is not set
The function `create_host_record_from_host` fails if the `dns` option
is not set in the host entry.
This sets a default to the `dns` variable in order to fix this error.

Fixes: #22691

Signed-off-by: Julien Cassette <julien.cassette@gmail.com>
(cherry picked from commit 8d60419251)
2024-02-17 14:59:31 +01:00
Julien Cassette
e629fc3db5 unbound: create extra host records from DHCP static leases
The "Extra DNS" option allows to create records from the DHCP
"Hostnames" configuration entries.
This allows to create such records from the DHCP "Static leases"
configuration entries too.

Fixes: #22593

Signed-off-by: Julien Cassette <julien.cassette@gmail.com>
(cherry picked from commit b4a31f92de)
2024-02-17 14:59:25 +01:00
Eric Luehrsen
0f7d777b66 unbound: update to 1.19.0
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit 183f166279)
2024-02-17 14:58:47 +01:00
Eric Luehrsen
c02c6e2013 unbound: update to 1.18.0
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit 03f70dcfd5)
2024-02-17 14:58:39 +01:00
Ted Hess
cf077e7945 Unbound: Silence SSL unexpected eof messages
Refs: https://github.com/NLnetLabs/unbound/issues/812
      https://github.com/NLnetLabs/unbound/issues/846

This is a backport of: https://github.com/NLnetLabs/unbound/commit/d7e7761
and can be removed with the next release/update of the Unbound package

Signed-off-by: Ted Hess <thess@kitschensync.net>
(cherry picked from commit 2a71e17ca1)
2024-02-17 14:58:33 +01:00
John Audia
d8ef968bd6 htop: update to 3.3.0
Changelog: https://github.com/htop-dev/htop/compare/3.2.2...3.3.0

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 3ee7b46610)
2024-02-17 14:55:54 +01:00
Alexander Egorenkov
d63ee8c4be yt-dlp: bump to version 2023.12.30
Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>
(cherry picked from commit 5d3424f992)
2024-02-17 14:50:33 +01:00
Alexander Egorenkov
b7330c9daa yt-dlp: bump to version 2023.11.16
Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>
(cherry picked from commit 707e87884d)
2024-02-17 14:50:24 +01:00
Rani Hod
596cd34952 yt-dlp: add missing dependencies
Added missing python3-{logging,uuid} dependencies.

Signed-off-by: Rani Hod <rani.hod@gmail.com>
(cherry picked from commit 40a680ffd7)
2024-02-17 14:50:07 +01:00
Jonas Jelonek
7823702d3f iperf3: update to 3.16
notable changes:
- multithreading support

changelog: https://github.com/esnet/iperf/releases/tag/3.16

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
(cherry picked from commit bdb6d2a37f)
2024-02-16 19:40:31 +01:00
Jakub Raczynski
deb51a38bb iperf3: Fix dependecy conflict with iperf3-ssl
When selecting both iperf3 and iperf3 ssl, there is a problem that
both packages install same binary file.
This patch fixes this issue by adding conflict between those packages.

Signed-off-by: Jakub Raczynski <myszsoda@gmail.com>
(cherry picked from commit cea45c75c0)
2024-02-16 19:40:26 +01:00
Alexander Couzens
a58f5da25d net/iperf3: assign PKG_CPE_ID
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
(cherry picked from commit e97f763a72)
2024-02-16 19:40:17 +01:00
Leo Douglas
3f85f0fd83 iperf3: update to 3.15
see changelog: https://github.com/esnet/iperf/releases/tag/3.15.

Signed-off-by: Leo Douglas <douglarek@gmail.com>
(cherry picked from commit 8a223d4724)
2024-02-16 19:40:11 +01:00
John Audia
ac44c9e297 iperf3: update to 3.14
Release Notes:
https://github.com/esnet/iperf/blob/master/RELNOTES.md

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 8c0afc4cab)
2024-02-16 19:40:05 +01:00
Nick Hainke
e72dcedacb iperf3: update to 3.13
Release Notes:
https://software.es.net/iperf/news.html#iperf-3-13-released

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 1bfd2f7ade)
2024-02-16 19:39:58 +01:00
Nick Hainke
80c30513f7 iperf3: update to 3.12
Release Notes:
https://groups.google.com/g/iperf-dev/c/_DgSWrpl9Gk?pli=1

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 431016a23d)
2024-02-16 19:39:51 +01:00
Nick Hainke
664368b890 iperf3: fix install section of Makefile and dependencies
In the Makefile the library installation was accidentally called
"Package/iperf3/install" and not "Package/libiperf3/install". Fix this
typo. Thanks to Hartmut spotting this.

Also the iperf3-ssl does not need to depend on libiperf3.

Fixes ae48be8e21 ("iperf3: add shared libiperf library and link iperf3 dynamically")

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit dc59d98c2c)
2024-02-16 19:39:44 +01:00
Nick Hainke
770e595ee9 iperf3: add shared libiperf library and link iperf3 dynamically
Add library for creating own functions with iperf3 functionality.
Example: https://github.com/esnet/iperf/blob/master/examples/mis.c
This library is needed by python3-iperf3.

Build iperf3 binary with dynamically linked libiperf3. However, still
build iperf3-ssl as static binary due to a lack of shipping two libiperf
versions.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit ae48be8e21)
2024-02-16 19:39:37 +01:00
Jan Hák
c32ee50e8b knot: update to version 3.3.4
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 66c1065b45)
2024-02-16 19:35:46 +01:00
Jan Hák
beb955a29d knot: update to version 3.3.3
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit a693dd5821)
2024-02-16 19:35:41 +01:00
Jan Hák
d8d0257015 knot: update to version 3.3.2
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit fbfa63a03b)
2024-02-16 19:35:34 +01:00
Noah Meyerhans
a9f1d7095c bind: bump to 9.18.24
Fixes CVEs:

- CVE-2023-50387: Validating DNS messages containing a lot of DNSSEC signatures
  could cause excessive CPU load, leading to a denial-of-service condition.
- CVE-2023-50868: Preparing an NSEC3 closest encloser proof could cause
  excessive CPU load, leading to a denial-of-service condition.
- CVE-2023-4408: Parsing DNS messages with many different names could cause
  excessive CPU load.
- CVE-2023-5517: Specific queries could cause named to crash with an assertion
  failure when nxdomain-redirect was enabled.
- CVE-2023-5679: A bad interaction between DNS64 and serve-stale could cause
  named to crash with an assertion failure, when both of these features were
  enabled.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit d277e41e78)
2024-02-16 19:21:54 +01:00
Marius Dinu
b5911e2984 transmission: add copy_file_range syscall to seccomp
Fixes this crash:

root@RPi3OpenWrt:/# grep -i seccomp /var/log/audit/audit.log
type=SECCOMP msg=audit(1689503903.597:16): auid=4294967295 uid=224 gid=1012 ses=4294967295 pid=1752 comm="transmission-da" exe="/usr/bin/transmission-daemon" sig=31 arch=c00000b7 syscall=285 compat=0 ip=0x7fa3b0eefc code=0x80000000
root@RPi3OpenWrt:/# ausyscall 285
copy_file_range
root@RPi3OpenWrt:/#

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit f0926b44f4)
2024-02-16 19:14:29 +01:00
Peter van Dijk
eb7593ef02 pdns-recursor: update to 4.8.6 (fixes CVE-2023-50387, CVE-2023-50868)
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2024-02-16 14:05:23 +08:00
Eneas U de Queiroz
c9362686b9 squid: bump to release 5.7
This is the latest version and brings compatibility with OpenSSL 3.0.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 78dcc29e47)
2024-02-15 07:48:44 +01:00
Paul Donald
455cb66663 p910nd: bump release
Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 9dad4285d3)
2024-02-15 02:41:25 +01:00
Paul Donald
563b526d4e p910nd: hotplug shellcheck fixes
Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 77f47a6341)
2024-02-15 00:05:59 +01:00
Paul Donald
4099d99a1a p910nd: init: check device (/dev/usb/lpX) existence
this prevents the daemon exiting when a configured device
is not plugged in.

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 4d461aacca)
2024-02-15 00:05:59 +01:00
Paul Donald
b5b755a736 p910nd: init: partial fix for openwrt/packages#10496
Harmless to carry this fix until procd.sh adds the param

This parameter will mean umdns advertises not just "OpenWrt" but a more
appropriate string:

"Apple LaserWriter Pro 630"

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 60be001775)
2024-02-15 00:05:59 +01:00
Paul Donald
f946b2e4bf p910nd: hotplug+init: include extra ieee1284 properties
Apple and macOS GUI co-opts the mDNS note= param as "Location"

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit c74f82e17b)
2024-02-15 00:05:59 +01:00
Paul Donald
b5607f4e10 p910nd: hotplug: minor bug fixes
Commit driver_home defaults before continuing

Fix missing path for serial number acquisition

Store current device if no previously configured device had one.
Also set CHAR_DEV so the printer can get its driver sent on first run.

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit c54cb399f3)
2024-02-15 00:05:59 +01:00
Paul Donald
b7f89169a3 p910nd: hotplug: small refactor
replace -a with &&

shorten uci commands via variables

add optional ieee1284_id parameters

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit d1b868b407)
2024-02-15 00:05:59 +01:00
Paul Donald
12c0db6867 p910nd: init: add txtvers=1 to mDNS properties
The spec https://developer.apple.com/bonjour/printing-specification/bonjourprinting-1.2.1.pdf
notes:

... if the meaning of any of the TXT record keys is changed, the txtvers value
will be incremented. The current value of this key is “1”, and if this key does not exist in
the TXT record, the default value of “1” is assumed. The txtvers SHOULD be the first
key/value pair in the TXT record.

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 55d00e3821)
2024-02-15 00:05:59 +01:00
Paul Donald
a6fe00eb7a p910nd: init: line-break and conditionalize mDNS properties
Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit d939c5c3aa)
2024-02-15 00:05:59 +01:00
Paul Donald
84a6d8427a p910nd: init: only run mDNS changes if mdns is set to on
i.e. don't do the extra work unless mdns setting is enabled

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 2c5927cfac)
2024-02-15 00:05:59 +01:00
Paul Donald
852746e9c9 p910nd: init script
Don't run procd with a name of p9100d or p9101d etc.
Use the original binary name: p910nd.

This way, all supplied parameters should be visible via e.g.:

ps
xargs -0 < /proc/{procid}/cmdline

Revise all p910nd strings to the variable DAEMON_NAME or CONFIG where
appropriate.

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 3f04d2d791)
2024-02-15 00:05:59 +01:00
Paul Donald
fab3288a4a p910nd: hotplug script
Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 825b22a4db)
2024-02-15 00:05:46 +01:00
Olivier Poitrey
eb8d12af6b nextdns: Update to version 1.42.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2024-02-04 16:09:06 -08:00
Sergey Ponomarev
ac3fa0b87e cloudflared: refine config.yml
The config.yml is an example of a tunnel local configuration.
But the cloudlfared treat it as a real config and fails to start.
So to avoid problems let's comment all the statements.

The `url: http://localhost:8000` is not a valid config option.

Additionally add a smale of configuring ingres rules.

The cloudflared.config has missing option token.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
(cherry picked from commit b3580a76d8)
2024-02-04 15:00:52 +08:00
Tianling Shen
80b3c476a7 rclone: Update to 1.65.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4437234dc4)
2024-02-04 15:00:49 +08:00
Stan Grishin
6d75c03d78 Merge pull request #23254 from stangri/openwrt-22.03-curl
[22.03] curl: update to 8.6.0
2024-02-03 16:15:40 -07:00
Konstantin Demin
85c29ebd48 curl: update to 8.6.0
* https://curl.se/changes.html#8_6_0

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
(cherry picked from commit 0f2c98d53f)
2024-02-02 13:48:49 +00:00
Ray Wang
8faff07237 natmap: update to 20240126
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit 42c6e10ada)
2024-01-28 16:26:30 +08:00
Tianling Shen
02abbdf6f6 v2raya: do not allow changing config/log directory
We need stable path to persist configurations and read log from LuCI.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 272cff0d1c)
2024-01-26 12:37:30 +08:00
Tianling Shen
45d7492bfe v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1aaa5c045d)
2024-01-26 12:36:28 +08:00
Tianling Shen
41f1bcb0a0 rclone: Update to 1.65.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 05b61b3b6d)
2024-01-26 12:35:26 +08:00
Tianling Shen
958a82d138 rclone: Update to 1.65.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ac17302410)
2024-01-26 12:35:21 +08:00
Michael Heimpold
444cedf4ff Merge pull request #22999 from mhei/22.03-php8-update-to-8.1.27
[22.03] php8: update to 8.1.27
2023-12-29 10:04:00 +01:00
Rosen Penev
8661c37221 mosquitto: update to 2.0.18
Switch to CMake. Allows faster compilation.

Small Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit aa89f847c6)
2023-12-29 10:00:52 +01:00
Michael Heimpold
69c7e53ab5 php8: update to 8.1.27
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2023-12-27 13:45:01 +01:00
Stan Grishin
f39d7eab85 curl: update to 8.5.0
* https://curl.se/changes.html#8_5_0

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 6501290c17)
2023-12-24 09:28:06 +01:00
Michael Heimpold
ad5a83c4a4 Merge pull request #22904 from mhei/22.03-php8-update-to-8.1.26
[22.03] php8: update to 8.1.26
2023-12-17 20:31:17 +01:00
Michael Heimpold
396aace59f php8: update to 8.1.26
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2023-12-16 16:56:55 +01:00
Stan Grishin
61fdaca672 Merge pull request #22874 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: only restart firewall when needed
2023-12-11 15:45:59 -07:00
Stan Grishin
638fb4aab5 https-dns-proxy: only restart firewall when needed
* only restart firewall when needed

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 8b6635bae9)
2023-12-11 13:19:27 +00:00
Stan Grishin
e34369a41b Merge pull request #22747 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: fix unintentional call of service_stopped in boot()
2023-11-25 17:12:39 -07:00
Stan Grishin
787079b673 https-dns-proxy: fix unintentional call of service_stopped in boot()
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 2e9f6c4446)
2023-11-24 16:13:46 +00:00
Stan Grishin
6daf8f25ec Merge pull request #22738 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: bugfix: prevent erros from boot()
2023-11-24 00:13:24 -07:00
Stan Grishin
97fd6c23fd https-dns-proxy: bugfix: prevent erros from boot()
* fixes https://github.com/openwrt/packages/issues/22674
* rename resolver_health_check to is_resolver_running for readability
* reorder functions in the init file by name

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit f519b68401)
2023-11-23 22:41:11 +00:00
Alexandru Ardelean
593f5c2afc numpy: bump version to 1.24.3
Need to also fix build for GCC 13 + musl.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 8f176e30f3)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-11-23 15:04:05 +01:00
Nikos Mavrogiannopoulos
8282c0f846 tang: set the right permissions to keys
Resolves: #22632

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2023-11-10 10:40:36 +01:00
S. Brusch
75e72cc7b8 crowdsec-firewall-bouncer: add ujail
* added ujail for crowdsec-firewall-bouncer
* set nice to reduce priority for process

Signed-off-by: S. Brusch <ne20002@gmx.ch>

Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: mediatek/filogic, BPI-R3, Openwrt 23.05.0

(cherry picked from commit a8df73ce72)
2023-11-06 09:57:58 +08:00
Josef Schlehofer
1075441a39 nmap: backport fix to be able to compile it with OpenSSL 1.1
The latest nmap version 7.9.3 currently fails to compile with OpenSSL 1.1 [1],
it required to backport upstream patch to fix the compilation. [2]

[1] https://github.com/nmap/nmap/issues/2516
[2] d6bea8dcde

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2c87004346)
2023-11-05 16:40:52 +01:00
Josef Schlehofer
455a336911 netbird: downgrade to version 0.17.0
The version, which is currently in OpenWrt 22.03 requires Go 1.20.

See the output:
../../../../../dl/go-mod-cache/github.com/netbirdio/wireguard-go@v0.0.0-20230524172305-5a498a82b33f/tun/tun_linux.go:362:18: undefined: errors.Join
note: module requires Go 1.20

Having Go 1.20 in OpenWrt 22.03 could be time consuming and as it is the stable branch, it seems like better idea to downgrade netbird to version 0.17.0, which is the latest version, which requires to use Go 1.19.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-11-05 14:55:00 +01:00
Tianling Shen
cf1ca0b01d Merge pull request #22598 from muink/dnsproxy-22.03
[22.03] dnsproxy: add more options
2023-11-05 16:30:58 +08:00
Anya Lin
fe754c6d86 dnsproxy: new features
1. Add new options:
  --http3    Enable HTTP/3 support (H3 first)
  --timeout  Timeout for outbound DNS queries to remote upstream servers in a human-readable form (default: 10s)

2. Allows listen on multiple interfaces and ports

Signed-off-by: Anya Lin <hukk1996@gmail.com>
(cherry picked from commit 47b4ebc5cb)
Signed-off-by: Anya Lin <hukk1996@gmail.com>
2023-11-05 15:00:22 +08:00
Jeffery To
6543a67e59 python-poetry-core: Update to 1.7.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit bc32e54713)
2023-11-04 22:34:04 +01:00
Jeffery To
e354dbfd51 python-poetry-core: Update to 1.6.1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit ac59c69237)
2023-11-04 22:33:59 +01:00
Rosen Penev
c0a189955b expat: update to 2.5.0
Fixes: CVE-2022-43680

Added GitHub mirror.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 409dbb05c9)
2023-11-02 23:37:26 +01:00
Jeffery To
d43972744d python-calver: Add new host-only package
From the README:

The calver package is a setuptools extension for automatically defining
your Python package version as a calendar version.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit f4a18fbd3d)
2023-11-02 22:45:34 +01:00
Jeffery To
9c4447a227 numpy: Avoid build user config files
This stops numpy from reading .numpy-site.cfg in the build user's home
directory. The code actually tries to find both .numpy-site.cfg and
site.cfg in the user's home directory; this patch prevents both.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 3cee44d888)
2023-11-02 11:20:41 +01:00
Jeffery To
400936a98c numpy: Fix compilation when OpenBLAS support is not enabled
Currently, if OpenBLAS support is not enabled, a site.cfg file is not
written and numpy will use build host paths for libraries. If the build
host has any conflicting libraries, specifically libpython3.10.a, then
compilation will fail.

This ensures site.cfg is always written with buildroot paths.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5cafab68ff)
2023-11-02 11:20:32 +01:00
Jeffery To
ca0cbe1e97 numpy: Fix pyproject.toml-based build
The versions of setuptools and wheel pinned in pyproject.toml are older
than the versions available in the packages repo. This unpins the
versions so that the build can proceed.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8d331953f3)
2023-11-02 11:20:25 +01:00
Josef Schlehofer
82cbf130ed nmap: drop upstream backports
These patches were introduced for old version, which we had in this repository from upstream in commit 129b7c3 ("nmap: fix ncat proxy mode with upstream patches"), but because nmap was recently updated in commit c12313f ("nmap: bump to 7.93
"), they are not required anymore.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-11-02 11:17:19 +01:00
Jeffery To
18ce57bb6d python-incremental: Add missing host build dependencies
Fixes: 8d81b67327 ("python-incremental: Update to 22.10.0, redo patch, add host build")
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 2c54b7637e)
2023-11-02 11:10:37 +01:00
Jeffery To
dd019cb9bd python-ubus: Update to 0.1.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 99d8554bcd)
2023-11-02 01:48:13 +01:00
Jeffery To
436bca63d7 python-ubus: Force old build process
This package will not build with the pyproject.toml-based build process
because it has a build dependency on pytest-runner[1].

pytest-runner has been deprecated[2], so instead of adding a package for
pytest-runner to fulfill the build dependency, force this package to use
the old build process.

[1]: https://gitlab.nic.cz/turris/python-ubus/-/blob/v0.1.1/setup.py#L35
[2]: https://github.com/pytest-dev/pytest-runner#deprecation-notice

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4a7173d27d)
2023-11-02 01:47:32 +01:00
Jeffery To
12028f6043 python3-packages: Set PYTHON3_PKG_BUILD:=0
This sets PYTHON3_PKG_BUILD:=0 so that python3-package.mk does not set
any default build recipes.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit bcba053fb0)
2023-11-02 01:43:27 +01:00
Jeffery To
5171a8341a python-trove-classifiers: Add new host-only package
From the README:

Canonical source for classifiers on PyPI.

Classifiers categorize projects per PEP 301. Use this package to
validate classifiers in packages for PyPI upload or download.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 7dc6b103c5)
2023-11-02 01:37:57 +01:00
Jeffery To
897e1e12d1 python-pathspec: Add new host-only package
From the README:

pathspec is a utility library for pattern matching of file paths. So far
this only includes Git's wildmatch pattern matching which itself is
derived from Rsync's wildmatch. Git uses wildmatch for its gitignore
files.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a1cfdba19c)
2023-11-02 01:36:49 +01:00
Jeffery To
f42d8f7e19 python-editables: Add new host-only package
From the README:

A Python library for creating "editable wheels"

This library supports the building of wheels which, when installed, will
expose packages in a local directory on sys.path in "editable mode". In
other words, changes to the package source will be reflected in the
package visible to Python, without needing a reinstall.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4465e57e5d)
2023-11-02 01:36:27 +01:00
Josef Schlehofer
13529ea17f Revert "python-libraries: Force old build process"
This commit was already applied 3 weeks ago in d640b11160, thus I bring it once again back, which was mistake as it was redone in 903003695a.

This reverts commit 60f0e661c5.
2023-11-02 01:19:51 +01:00
Jeffery To
cc09ec6597 fail2ban: Override Build/Compile instead of Py3Build/Compile
This allows changes to the Python build system apply more easily to the
package.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4195e5c4a8)
2023-11-02 01:16:36 +01:00
Jeffery To
49880edcb3 nmap: Force old Python build process
This package isn't compatible with the new Python build process yet, so
force the old build process for now.

This also adds a call to Py3Build/Install, for when the new build
process can be used.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit da55275f3b)
2023-11-02 01:15:50 +01:00
Nuno Gonçalves
d66edd21e7 nmap: update license
Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>
(cherry picked from commit 0563e5092c)
2023-11-02 01:15:44 +01:00
Nuno Gonçalves
c12313f7c1 nmap: bump to 7.93
Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>
(cherry picked from commit 43c990c43f)
2023-11-02 01:15:38 +01:00
Jeffery To
a61e86e982 python-jsonschema: Remove previous build workaround
With proper support for pyproject.toml-based builds in place, this is no
longer necessary.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 107e037763)
2023-11-02 01:14:01 +01:00
Jeffery To
1b3fa88251 python-exceptiongroup: Remove previous build workaround
With proper support for pyproject.toml-based builds in place, this is no
longer necessary.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 7734502693)
2023-11-02 01:14:01 +01:00
Jeffery To
c5224c74d1 python-astral: Remove BROKEN
With proper support for pyproject.toml-based builds in place, this
package will now build.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 628202d269)
2023-11-02 01:14:01 +01:00
Jeffery To
42d4e2c1cd onionshare-cli: Force old Python build process
This package requires poetry to build using the new Python build process
but poetry is not available, so force the old build process for now.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 705176cd6a)
2023-11-02 01:14:01 +01:00
Jeffery To
60f0e661c5 python-libraries: Force old build process
These packages will need adjustments to work with pyproject.toml-based
builds, so set PYTHON3_PKG_FORCE_DISTUTILS_SETUP:=1 to force the old
build process (when pyproject.toml-based builds are in place) for now.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit e6ae9e29d5)
2023-11-02 01:14:01 +01:00
Jeffery To
36b997a113 python-twisted: Update to 22.10.0
Includes fix for CVE-2022-39348 (NameVirtualHost Host header injection).

This adds a build dependency that will be required for
pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 56b10770fc)
2023-11-02 01:14:01 +01:00
Jeffery To
faaf36ed35 python-pytest-forked: Update to 1.6.0
The overly-strict build requirements in 1.3.0[1] would cause a build
failure with pyproject.toml-based builds.

[1]: https://github.com/pytest-dev/pytest-forked/blob/v1.3.0/pyproject.toml#L2

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 17d5bf224c)
2023-11-02 01:14:01 +01:00
Jeffery To
ee6708a027 python-jsonschema: Add build dependencies
These will be required for pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b1a8e4769f)
2023-11-02 01:14:01 +01:00
Jeffery To
43e34d9b7d python-exceptiongroup: Update to 1.1.1
This adds a build dependency that will be required for
pyproject.toml-based builds.

This also removes the run-time dependency on python3-attrs; there is no
indication this package is required.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 59b7a81964)
2023-11-02 01:14:01 +01:00
Jeffery To
d8b19b3df4 python-dns: Update to 2.3.0
This adds a build dependency that will be required for
pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 68c0c77df6)
2023-11-02 01:14:01 +01:00
Jeffery To
c97f1fe239 python-cryptography: Update patch to disable Rust
This extends the patch to also apply for pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0b5091bbff)
2023-11-02 01:14:01 +01:00
Jeffery To
ad0abb4159 python-astral: Update to 3.2
This adds a build dependency that will be required for
pyproject.toml-based builds.

This also marks the package as BROKEN (for now) as it requires proper
support for pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 1a1b444571)
2023-11-02 01:14:01 +01:00
Jeffery To
7442839f3a borgbackup: Add missing build dependencies
setuptools-scm is a declared build dependency[1], and pkgconfig will
allow setup to find the required libraries, replacing the need to set
environment variables.

[1]: https://github.com/borgbackup/borg/blob/1.2.4/setup.py#L313

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6649314a03)
2023-11-02 01:14:01 +01:00
Jeffery To
37f1902ea8 xxhash: Fix pkg-config metadata file
Currently, Build/InstallDev installs libxxhash.pc.in, which is the
template for libxxhash.pc and does not contain the correct information.
(pkg-config also does not recognize this file name.)

This uses PKG_INSTALL:=1 so that libxxhash.pc is generated (by 'make
install').

This also removes the need to override Build/Prepare by setting the
correct command in PKG_UNPACK.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 2f4b161e28)
2023-11-02 01:14:01 +01:00
Peter van Dijk
5ebc703184 dnsdist: bump to force rebuild against new h2o
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2023-11-02 00:28:27 +08:00
Peter van Dijk
81d6e449c2 h2o: ABI-breaking patch for CVE-2023-44487
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

(cherry picked from commit 5b9239a95b)
2023-11-02 00:28:27 +08:00
Glenn Strauss
71babfb9f3 lighttpd: update to lighttpd 1.4.73 release hash
* update to lighttpd 1.4.73 release hash
* update maintainer

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit f3e26bef52)
2023-10-31 23:18:18 +01:00
Jeffery To
7e763dc59d python-incremental: Update to 22.10.0, redo patch, add host build
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8d81b67327)
2023-10-31 23:05:43 +01:00
Jeffery To
8d550f045f python-pytest: Update to 7.3.0
This also removes BROKEN from the package.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit c7820e4fb1)
2023-10-31 23:04:01 +01:00
Jeffery To
1a022f0173 python-pluggy: Update to 1.0.0, add host build, add myself as maintainer
This also marks python3-pytest as BROKEN (for now) as the in-tree
version is not compatible with this version of pluggy.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b453daa336)
2023-10-31 23:03:33 +01:00
Jeffery To
2ea50079ad python-flit-scm: Add new host-only package
From the README:

A PEP 518 build backend that uses setuptools_scm to generate a version
file from your version control system, then flit_core to build the
package.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit bbc9b14470)
2023-10-31 23:01:55 +01:00
Jeffery To
9640b39608 python-pycrate: Update to 0.6.0
This also changes the download to PyPI and updates several package
makefile fields.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 550c29368e)
2023-10-31 22:53:56 +01:00
Jeffery To
d422140731 python-poetry-core: Update to 1.6.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 626c7efda9)
2023-10-31 22:50:16 +01:00
Jeffery To
f48791c906 python-poetry-core: Add new host-only package
From the README:

A PEP 517 build backend implementation developed for Poetry. This
project is intended to be a light weight, fully compliant,
self-contained package allowing PEP 517 compatible build frontends to
build Poetry managed projects.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 82766de815)
2023-10-31 22:50:10 +01:00
Jeffery To
cef09e1fbe python-pkgconfig: Add new host-only package
From the README:

pkgconfig is a Python module to interface with the pkg-config command
line tool for Python 3.3+.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d7bc1deb0e)
2023-10-31 22:49:24 +01:00
Andre Heider
f5fc29ebd1 lrzsz: update to v0.12.21rc and fix a CVE
This updates to v0.12.21rc from 1999 (sic), which was never officially
released. There're fixes in there, and it's what debian ships, so let's
use that too. While at it, use debian's autohell hack and package
description too.

Patch 1 fixes a hang with musl.
Patch 2 fixes CVE-2018-10195, add PKG_CPE_ID while at it.

Refesh the rest.

Fixes: CVE-2018-10195
Signed-off-by: Andre Heider <a.heider@gmail.com>
(cherry picked from commit 6d6c4b21b5)
2023-10-31 11:06:49 +01:00
Jeffery To
8b982ebc56 python: Add proper support for pyproject.toml-based builds
This removes the changes made in
61f202c017 and adds actual support for
pyproject.toml-based (PEP 517) builds of Python packages.

Packages can force the use of the old build process by setting
PYTHON3_PKG_FORCE_DISTUTILS_SETUP:=1; this should only be a temporary
workaround until the package can be updated/fixed to use the new build
process.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5156c0c82b)
2023-10-31 10:03:43 +01:00
Daniel Golle
b552374a3e postgresql: update to version 14.9
Update to latest PostgreSQL version 14 for OpenWrt 22.03.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2023-10-30 13:31:25 -07:00
Michael Heimpold
2f6cf2f414 Merge pull request #22521 from mhei/22.03-php8-update-to-8.1.25
[22.03] php8: update to 8.1.25
2023-10-28 09:55:58 +02:00
Tianling Shen
4be44fe6d4 rclone: Update to 1.64.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0d6bbc3bdd)
2023-10-28 12:58:40 +08:00
Tianling Shen
7554f3609c rclone: Update to 1.64.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0449b530ba)
2023-10-28 12:58:37 +08:00
Daniel Golle
d7171340c6 exim: update to version 4.96.2
Fixes vulnerabilities:
 - Improper Neutralization of Special Elements (CVE-2023-42117)
 - dnsdb Out-Of-Bounds Read (CVE-2023-42119)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 86ec7b19bc)
2023-10-27 22:50:16 +01:00
Michael Heimpold
21aab76dd6 php8: update to 8.1.25
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2023-10-27 18:33:01 +02:00
Stan Grishin
64d48d70a1 Merge pull request #22512 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: bugfix: crashes on logging from upstream
2023-10-26 16:09:31 -06:00
Stan Grishin
0e02734e15 https-dns-proxy: bugfix: crashes on logging from upstream
* update to 2023-10-25 upstream version which fixes the crashes on logging on ath79
* remove no longer needed 030-src-logging.c-fix-crash.patch
* update 010-cmakelists-remove-cflags.patch to work with a new version
* update 020-src-options.c-add-version.patch to work with a new version

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 6b92b6c6d2)
2023-10-26 14:44:03 +00:00
Stan Grishin
54bfb40841 Merge pull request #22490 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: bugfix: prevent crashes on IPv6 systems
2023-10-23 22:56:11 -06:00
Stan Grishin
77a7bb6c62 https-dns-proxy: bugfix: prevent crashes on IPv6 systems
* update service triggers so that procd_add_raw_trigger is only
  executed on boot and not on other service actions
* remove outdated iface hotplug script

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 5dd08fe23f)
2023-10-24 02:16:57 +00:00
Jeffery To
6a390b09c3 python-typing-extensions: Add host build
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit abf3f3d77c)
2023-10-23 17:26:28 +02:00
Jeffery To
9bb9351976 python-tomli: Add new host-only package
From the README:

Tomli is a Python library for parsing TOML. Tomli is fully compatible
with TOML v1.0.0.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 7d171049fd)
2023-10-23 17:25:17 +02:00
Christian Marangi
f62b74037b shadowsocks-libev: convert to PCRE2
Convert package to PCRE2 by porting a pending patch from a closed PR.

The PR is old but the code never changed and is simple enough to check
the changes. The patch apply directly with no changes (aside from
commenting out the travis CI file)

The PR was never merged as PCRE2 at times was too new and they were
trying to find a better regex lib.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit db305165c9)
2023-10-23 10:11:16 +02:00
Kirill Fertikov
8396f6a590 shadowsocks-libev: ACL support
Link: https://github.com/openwrt/packages/pull/20647
Signed-off-by: Kirill Fertikov <kirill.fertikov@gmail.com>
[indentation fix]
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit d1ad585ca9)
2023-10-23 10:11:07 +02:00
Christian Marangi
3eca7825b8 net-snmp: backport patch fixing memory leak for PCRE2
Backport patch fixing memory leak for PCRE2 present upstream.

Fixes: #22428
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 9f50361691)
2023-10-23 10:08:10 +02:00
Nick Hainke
9c106fe2ea conntrack-tools: update to 1.4.8
Release Notes:
https://marc.info/?l=netfilter&m=169598613909790&w=2

Furthermore, switch to "tar.xz".

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit af666be21f)
2023-10-22 17:00:54 +02:00
Nick Hainke
a83c41330b conntrack-tools: update to 1.4.7
Release Notes:
https://marc.info/?l=netfilter&m=166506855929074&w=2

Remove upstreamed:
- 001-endianness_fix.patch (upstreamed: conntrackd: fix endianness bug
  in IPv4 and IPv6 address)
- 002-conntrackd-do-not-include-conntrack-ID-in-hashtable-cmp.patch

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 1d6c7506ab)
2023-10-22 17:00:54 +02:00
Liangbin Lian
c4bebaf6d9 shairport-sync: fix init script
'name' may contains '%h' or '%v', printf will fail on that

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit 97ec5d2a68)
2023-10-19 18:01:44 -07:00
Stan Grishin
111b2b86a5 Merge pull request #22423 from stangri/openwrt-22.03-https-dns-proxy 2023-10-17 18:30:28 -06:00
Jeffery To
088b51202a python-cffi: Update to 1.16.0
This includes a patch to unpin the version of setuptools required for
build; the required version is newer than the version bundled with
Python 3.11. This patch should not be necessary when Python 3.12 is
available.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit dd5af62695)
2023-10-17 21:03:22 +02:00
Jeffery To
d87f162d21 bcrypt: Update to 3.2.2, rename source package
This is the last released version before bcrypt's Rust rewrite; this
package can be further updated after the OpenWrt Rust toolchain has
stablized.

This also renames the source package from bcrypt to python-bcrypt to
match other Python packages, and updates the list of dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 3def783d3c)
2023-10-17 21:00:27 +02:00
Jeffery To
d2b55246bd python-wheel: Update to 0.41.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6e1785d148)
2023-10-17 20:57:58 +02:00
Jeffery To
42bff8d7d6 python-hatchling: Update to 1.17.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit fdc320dc0c)
2023-10-17 20:41:58 +02:00
Jeffery To
6b2dafb2f0 python-hatchling: Update to 1.14.1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 54c1303dc4)
2023-10-17 20:41:53 +02:00
Jeffery To
2943516016 python-hatchling: Update to 1.14.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit fe0dc6f48a)
2023-10-17 20:41:48 +02:00
Alexandru Ardelean
cb38274d9c python-requests: bump to version 2.31.0
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 04774bb720)
2023-10-17 20:40:05 +02:00
Alexandru Ardelean
d2f44e77f5 python-requests: bump to version 2.30.0
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 5c131f8a90)
2023-10-17 20:39:17 +02:00
Alexandru Ardelean
7e45090b29 python-requests: bump to version 2.28.2
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 1f1bd5ade9)
2023-10-17 20:39:11 +02:00
Alexandru Ardelean
897f21a215 python-requests: bump to version 2.28.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 884ac1e35b)
2023-10-17 20:38:56 +02:00
Jeffery To
332434cb7b setools: Update to 4.4.2, reorganize package
* Add separate packages for each tool (setools-*) and a package for the
  Python bindings (python3-setools)

* Update the setools package as a meta-package that installs all tools,
  keeping it functionally the same as the current setools package

* Remove gui tool (apol) and Python binding (setoolsgui)

* Simplify 030-remove-host-paths.patch (libraries installed by
  Build/InstallDev are placed in $(STAGING_DIR)/usr/lib only)

* Update package titles, descriptions, license, and dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6938f58a45)
2023-10-17 20:34:40 +02:00
Stan Grishin
71daa70e16 https-dns-proxy: bugfix: logging crashing instances on ath79
* finally fixes https://github.com/openwrt/packages/issues/19366
* simplify service_triggers
* improve output for dnsmasq restart
* improve grep/sed dependencies
* remove interface hotplug

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 38c026250f)
2023-10-17 09:48:49 +00:00
Glenn Strauss
91917b26ac lighttpd: update to lighttpd 1.4.72 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 3e9b2d85f0)
2023-10-16 14:53:16 +02:00
Christian Marangi
9a926762e0 zsh: backport PCRE2 patches and move to it
Backport PCRE2 patches from upstream and move package to PCRE2 library
as PCRE is EOL and won't receive any security update anymore.

Patch are backported with minimal change, only the Changelog change is
commented out as it would conflict and makes no sense to adapt for the
purpose of backport patches.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 5b929fde5f)
2023-10-16 14:52:02 +02:00
Oskari Rauta
32147c891c zsh: use autoreconf PKG_FIXUP to configure
In preparation to PCRE2 fixup, use autoreconf PKG_FIXUP as a better
configure system instead of configure script. This is needed to reduce
upcoming patch to migrate to PCRE2 library.

To correctly use autoreconf it's needed to declare empty
PKG_REMOVE_FILES.

zsh include custom macro in the default aclocal.m4
When autoreconf PKG_FIXUP is used, if PKG_REMOVE_FILES is not defined,
it's set to remove the file aclocal.m4 by default resulting in problem
with the custom macro AC_PROG_LN.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
[ split to 2 commit, add PKG_REMOVE_FILES, reword commit description ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit a7f837c98b)
2023-10-16 14:51:56 +02:00
John Audia
cdf60597e9 zsh: update to 5.9
Bump to latest release

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit de2ff3a5f1)
2023-10-16 14:51:48 +02:00
Tianling Shen
66299b2572 Merge pull request #22349 from miska/samba4-22.03
[22.03] samba4: Update to version 4.18.7
2023-10-16 16:46:38 +08:00
Jeffery To
f0fdbf317c python-pycparser: Add host build
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8f32fd202e)
2023-10-16 10:20:51 +02:00
Michal Hrusecky
3a3a0c2162 samba4: Update to version 4.18.8
Mainly security release, fixing CVE-2023-3961, CVE-2023-4091,
CVE-2023-4154, CVE-2023-42669 and CVE-2023-42670. For more details see:
https://www.samba.org/samba/history/samba-4.18.8.html

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit c9c5f62e30)
2023-10-16 09:39:31 +02:00
Jeffery To
88de440581 python-hatchling: Add new host-only package
From the README:

This is the extensible, standards compliant build backend used by Hatch.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5e832f44fc)
2023-10-15 08:06:37 +02:00
Jeffery To
0afac56b78 python-hatch-fancy-pypi-readme: Add new host-only package
From the README:

hatch-fancy-pypi-readme is a Hatch metadata plugin for everyone who
cares about the first impression of their project’s PyPI landing page.
It allows you to define your PyPI project description in terms of
concatenated fragments that are based on static strings, files, and most
importantly: parts of files defined using cut-off points or regular
expressions.

Once you’ve assembled your readme, you can additionally run regular
expression-based substitutions over it. For instance to make relative
links absolute or to linkify users and issue numbers in your changelog.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6294cf26c7)
2023-10-15 08:06:06 +02:00
Jeffery To
7cf4a94aa2 python-hatch-vcs: Add new host-only package
From the README:

This provides a plugin for Hatch that uses your preferred version
control system (like Git) to determine project versions.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit fb48859907)
2023-10-15 08:05:37 +02:00
Jeffery To
2e5c43d72f python-setuptools-scm: Add new host-only package
The host build replaces the use of the host pip requirements file. This
also updates the dependants of setuptools-scm to depend on the host
build.

This also removes the toml host pip requirements file as toml is not
used by any other package.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 3ee4e7297c)
2023-10-15 08:03:47 +02:00
Javier Marcet
e2219cf5e0 python-jsonschema: Update to 4.17.3
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit b80213e65e)
2023-10-15 08:03:41 +02:00
Javier Marcet
86b1319f30 python-jsonschema: Update to 4.16.0
- Improve the base URI behavior when resolving a $ref to a resolution
 URI which is different from the resolved schema's declared $id.
 - Accessing jsonschema.draftN_format_checker is deprecated. Instead,
 if you want access to the format checker itself, it is exposed as
 jsonschema.validators.DraftNValidator.FORMAT_CHECKER on any
 jsonschema.protocols.Validator.

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 6c553c35b3)
2023-10-15 08:03:37 +02:00
Javier Marcet
f3b387e0f5 python-jsonschema: Update to 4.15.0, broken since 4.6.0
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 617efbc02e)
2023-10-15 08:03:32 +02:00
Javier Marcet
9b03119741 python-jsonschema: Update to 4.9.0
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 500cdd1243)
2023-10-15 08:03:27 +02:00
Javier Marcet
3bc7fa6305 python-jsonschema: Update to 4.6.1
What's Changed:

 - Type annotate format checker methods by @sirosen
 - Fix fuzzer to include instrumentation by @DavidKorczynski
 - [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 83de96fbb3)
2023-10-15 08:03:22 +02:00
Javier Marcet
03b91e65d7 python-jsonschema: Update to 4.6.0
What's Changed:

 - Add package_url for changelog by @fhightower
 - Only validate unevaluated properties/items on applicable types by
 @EpicWink
 - Mark library as typed (PEP-561) by @ssbarnea
 - Add v4.5.1 to changelog by @sirosen
 - Modernize the packaging setup via PEP 621 and Hatch. by @Julian

New Contributors:

 - @fhightower made their first contribution
 - @EpicWink made their first contribution

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit f7a00eb6ab)
2023-10-15 08:03:16 +02:00
Javier Marcet
5ba23fd033 python-jsonschema: Update to 4.5.1
What's Changed:

 - Extend dynamicRef keyword by @nezhar
 - Add FORMAT_CHECKER attribute for Validator by @TiborVoelcker
 - Remove stray double-quote by @lurch
 - Ensure proper sorting of list in error message by @ssbarnea

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit f1ed3f5bc2)
2023-10-15 08:03:11 +02:00
Jeffery To
6fecfdea20 python-yaml: Update to 6.0.1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 60315a6638)
2023-10-14 17:58:32 +02:00
Jeffery To
c8d4bb4759 python-packages: Clean up build variables
* Rename PYTHON3_PKG_SETUP_VARS to PYTHON3_PKG_BUILD_VARS, and
  PYTHON3_PKG_SETUP_DIR to PYTHON3_PKG_BUILD_PATH

  The new variable names emphasize that these values apply to the new
  build process.

* Remove PYTHON3_PKG_SETUP_ARGS set to the empty string

  These were set to override the default arguments in the old build
  process and not applicable to the new build process.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b1b008f42f)
2023-10-14 17:58:03 +02:00
Jeffery To
9ec3a25e2f i2c-tools: Prepare for new Python build process
This sets build options and adds a call to Py3Build/Install to prepare
for the new Python build process.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 39991fec1e)
2023-10-14 17:57:32 +02:00
Javier Marcet
e98966545a python-stem: update to v1.8.1
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit e6cc43a7f0)
2023-10-14 17:56:59 +02:00
Jeffery To
45b1c9ca8f python-cffi: Update to 1.15.1, add host build
The host build replaces the use of the host pip requirements file. This
also updates the dependants of cffi to depend on the host build.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit aabe27a379)
2023-10-14 17:56:24 +02:00
Fabian Lipken
122b71b980 python-pycares: PKG_RELEASE:=1
Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
(cherry picked from commit 85a4c5978b)
2023-10-14 17:56:18 +02:00
Fabian Lipken
ccf85044e4 python-pycares: bump to 4.3.0
Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
(cherry picked from commit b0afdf5991)
2023-10-14 17:56:11 +02:00
Javier Marcet
740a2b4206 python3-paramiko: update to version 2.12.0
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 2ee0f893e3)
2023-10-14 17:52:14 +02:00
Javier Marcet
e20a4a84fb python3-paramiko: update to version 2.11.0
2.11.0:

 - [Feature] Add SSH config token expansion (eg %h, %p) when parsing
 ProxyJump directives. Patch courtesy of Bruno Inec.

 - [Support] (via #2011) Apply unittest skipIf to tests currently
 using SHA1 in their critical path, to avoid failures on systems
 starting to disable SHA1 outright in their crypto backends (eg RHEL
 9). Report & patch via Paul Howarth.

 - [Support] Update camelCase method calls against the threading
 module to be snake_case; this and related tweaks should fix some
 deprecation warnings under Python 3.10. Thanks to Karthikeyan
 Singaravelan for the report, @Narendra-Neerukonda for the patch,
 and to Thomas Grainger and Jun Omae for patch workshopping.

 - [Support] Recent versions of Cryptography have deprecated Blowfish
 algorithm support; in lieu of an easy method for users to remove it
 from the list of algorithms Paramiko tries to import and use, we’ve
 decided to remove it from our “preferred algorithms” list. This will
 both discourage use of a weak algorithm, and avoid warnings. Credit
 for report/patch goes to Mike Roest.

2.10.5:

 - [Bug] Windows-native SSH agent support as merged in 2.10 could
 encounter Errno 22 OSError exceptions in some scenarios (eg server
 not cleanly closing a relevant named pipe). This has been worked
 around and should be less problematic. Reported by Danilo Campana
 Fuchs and patched by Jun Omae.

 - [Bug] OpenSSH 7.7 and older has a bug preventing it from
 understanding how to perform SHA2 signature verification for RSA
 certificates (specifically certs - not keys), so when we added SHA2
 support it broke all clients using RSA certificates with these
 servers. This has been fixed in a manner similar to what OpenSSH’s
 own client does: a version check is performed and the algorithm used
 is downgraded if needed. Reported by Adarsh Chauhan, with fix
 suggested by Jun Omae.

 - [Bug] Align signature verification algorithm with OpenSSH re:
 zero-padding signatures which don’t match their nominal size/length.
 This shouldn’t affect most users, but will help Paramiko-implemented
 SSH servers handle poorly behaved clients such as PuTTY. Thanks to
 Jun Omae for catch & patch.

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 117e3d6a18)
2023-10-14 17:52:08 +02:00
Javier Marcet
e7c5bafb2c python3-paramiko: update to version 2.10.4
- [Bug] Servers offering certificate variants of hostkey algorithms
 (eg ssh-rsa-cert-v01@openssh.com) could not have their host keys
 verified by Paramiko clients, as it only ever considered non-cert key
 types for that part of connection handshaking. This has been fixed.

 - [Bug] PKey instances’ __eq__ did not have the usual safety guard in
 place to ensure they were being compared to another PKey object,
 causing occasional spurious BadHostKeyException (among other things).
 This has been fixed. Thanks to Shengdun Hua for the original report
 /patch and to Christopher Papke for the final version of the fix.

 - [Support] Update camelCase method calls against the threading
 module to be snake_case; this and related tweaks should fix some
 deprecation warnings under Python 3.10. Thanks to Karthikeyan
 Singaravelan for the report, @Narendra-Neerukonda for the patch, and
 to Thomas Grainger and Jun Omae for patch workshopping.

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit b1159e8764)
2023-10-14 17:52:02 +02:00
Javier Marcet
f3edfff2f6 python3-paramiko: update to version 2.10.3
2.10.2:

 - [Bug] Fix Python 2 compatibility breakage introduced in 2.10.1.
 Spotted by Christian Hammond.

2.10.3:

 - [Bug] Switch from module-global to thread-local storage when
 recording thread IDs for a logging helper; this should avoid one
 flavor of memory leak for long-running processes. Catch & patch via
 Richard Kojedzinszky.

 - [Bug] Certificate-based pubkey auth was inadvertently broken when
 adding SHA2 support; this has been fixed. Reported by Erik Forsberg
 and fixed by Jun Omae.

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 539f9d07a1)
2023-10-14 17:51:54 +02:00
Jeffery To
0e03455310 python-docker: Add missing build dependency
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit be90d8aecd)
2023-10-14 17:50:58 +02:00
Javier Marcet
cf369e8caf python-docker: Update to 6.0.1
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 360383a997)
2023-10-14 17:50:45 +02:00
Javier Marcet
0beda4d9de python-docker: Update to 6.0.0
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 7b3ceb95d9)
2023-10-14 17:50:40 +02:00
Jeffery To
903003695a python-libraries: Update build options
This updates the build options for these packages to work with the
pyproject.toml-based build process, and removes
PYTHON3_PKG_FORCE_DISTUTILS_SETUP:=1.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 63d13aa15f)
2023-10-14 17:48:56 +02:00
Alexandru Ardelean
e9286627e7 pillow: bump to version 9.5.0
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 0b0232ed66)
2023-10-14 17:48:46 +02:00
Alexandru Ardelean
ed6f79a6e7 pillow: bump to version 9.4.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit acc96ee984)
2023-10-14 17:48:34 +02:00
Alexandru Ardelean
f90542f6e1 pillow: bump to version 9.3.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit b8e20215a2)
2023-10-14 17:48:31 +02:00
Alexandru Ardelean
b7fcfa261a python-evdev: bump to version 1.6.1
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 23b09de42d)
2023-10-13 15:34:54 +02:00
Alexandru Ardelean
34dadda85c python-evdev: bump to 1.6.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit f5f282f0bb)
2023-10-13 15:34:42 +02:00
Alexandru Ardelean
812bd60797 python-evdev: bump to version 1.5.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 306af23e08)
2023-10-13 15:34:36 +02:00
Waldemar Konik
9d81c43e51 python-curl: update to version 7.45.2
PycURL changeLog:

-----------------------------------------------------------------
PycURL 7.45.2 - 2022-12-16
-----------------------------------------------------------------
This release fixes several minor issues and adds support for several libcurl options.

-----------------------------------------------------------------
PycURL 7.45.1 - 2022-03-13
-----------------------------------------------------------------
This release fixes build when libcurl < 7.64.1 is used.

-----------------------------------------------------------------
PycURL 7.45.0 - 2022-03-09
-----------------------------------------------------------------
This release adds support for SecureTransport SSL backend (MacOS), adds ability to unset a number of multi options, adds ability to duplicate easy handles and permits pycurl classes to be subclassed.

-----------------------------------------------------------------
PycURL 7.44.1 - 2021-08-15
-----------------------------------------------------------------
This release repairs incorrect Python thread initialization logic which caused operations to hang.
-----------------------------------------------------------------

Signed-off-by: Waldemar Konik <informatyk74@interia.pl>

Compile tested: x86_64

(cherry picked from commit da564ae8cc)
2023-10-13 15:33:31 +02:00
Jeffery To
d640b11160 python-libraries: Force old build process
These packages will need adjustments to work with pyproject.toml-based
builds, so set PYTHON3_PKG_FORCE_DISTUTILS_SETUP:=1 to force the old
build process (when pyproject.toml-based builds are in place) for now.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit e6ae9e29d5)
2023-10-13 15:32:02 +02:00
Jeffery To
4c9e11252a python-packaging: Update to 23.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 78bcdd0fd1)
2023-10-13 08:39:26 +02:00
Jeffery To
25f1bf2301 python-packaging: Update to 23.1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 16779c2d6e)
2023-10-13 08:39:19 +02:00
Jeffery To
339495faa4 python-packaging: Remove BROKEN
With proper support of pyproject.toml-based builds in place, this
package will now build.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 84d9831dcb)
2023-10-13 08:39:13 +02:00
Jeffery To
a675c4efd5 python-flask-seasurf: Update to 1.1.1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 68c434dd6a)
2023-10-13 08:36:04 +02:00
Jeffery To
46f1ed0d55 python-urllib3: Update to 2.0.4
The package changed to the hatchling build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 1b2811920a)
2023-10-13 08:35:35 +02:00
Jeffery To
584000d8ea python-markupsafe: Update to 2.1.3, add host build
The host build will be used for mako (to be added later).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit ff51716aaa)
2023-10-13 08:33:36 +02:00
Jeffery To
3bc27a7441 MarkupSafe: Update to 2.1.2, rename source package
This renames the source package from MarkupSafe to python-markupsafe to
match other Python packages.

This also updates the package title and description.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5602cc85d3)
2023-10-13 08:33:31 +02:00
Daniel Golle
d9239a79d4 MarkupSafe: update to version 2.1.1
Version 2.1.1
Released 2022-03-14
  Avoid ambiguous regex matches in striptags. pallets/markupsafe#293

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 6957a4275a)
2023-10-13 08:33:22 +02:00
Alexandru Ardelean
2919eb1d06 python-pytz: bump to version 2023.3
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit c59cbd13f3)
2023-10-13 08:31:27 +02:00
Alexandru Ardelean
c04ebe3f8f python-pytz: bump to version 2022.7.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 5257477a02)
2023-10-13 08:31:20 +02:00
Jeffery To
27d5d5cd3a python-ply: Add host build
The host build replaces the use of the host pip requirements file. This
also updates the dependants of ply to depend on the host build.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 790beee430)
2023-10-13 08:26:25 +02:00
Jeffery To
271d067cb3 python-pyproject-hooks: Add new host-only package
From the README:

This is a low-level library for calling build-backends in
pyproject.toml-based project. It provides the basic functionality to
help write tooling that generates distribution files from Python
projects.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit f6d68782d9)
2023-10-13 08:26:17 +02:00
Jeffery To
6a367bc3a2 python-build: Add new host-only package
From the documentation:

A simple, correct PEP 517 build frontend.

build will invoke the PEP 517 hooks to build a distribution package. It
is a simple build tool and does not perform any dependency management.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 34fb0202f9)
2023-10-13 08:26:11 +02:00
Jeffery To
a2f357c21a python-installer: Add host-only package
From the README:

This is a low-level library for installing a Python package from a wheel
distribution. It provides basic functionality and abstractions for
handling wheels and installing packages from wheels.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 37caea7c93)
2023-10-13 08:25:49 +02:00
Jeffery To
55c9fba5df python-cython: Add new host-only package
The host build replaces the use of the host pip requirements file. This
also updates the dependants of Cython to depend on the host build.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit dcf551fbcf)
2023-10-13 08:25:29 +02:00
Jeffery To
fe1c3ae0c7 python-wheel: Add new host-only package
From the README:

This library is the reference implementation of the Python wheel
packaging standard, as defined in PEP 427.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit afd6f8e445)
2023-10-13 08:25:19 +02:00
Jeffery To
2f7e60a850 python-flit-core: Add host-only package
From the README:

This provides a PEP 517 build backend for packages using Flit. The only
public interface is the API specified by PEP 517, at flit_core.buildapi.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 2f37a616af)
2023-10-13 08:25:09 +02:00
Jeffery To
d819ce7b23 python-packaging: Update to 23.0, add host build
This also adds myself as maintainer, and marks the target package as
BROKEN (for now) as the update requires proper support for
pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit e9dd1a1dfc)
2023-10-13 08:25:02 +02:00
Jeffery To
19e6300f0c python: Better host pip options
pip by default will read system-wide and per-user configuration
files[1]. Setting PIP_CONFIG_FILE=/dev/null instructs pip to not read
any config files[2].

pip will spawn child processes of itself to do work, but not all options
are passed down to the child processes[3]. Setting global options as
environment variables[4] ensures they are passed down to any child
processes.

[1]: https://pip.pypa.io/en/stable/topics/configuration/#configuration-files
[2]: https://pip.pypa.io/en/stable/topics/configuration/#pip-config-file
[3]: https://github.com/pypa/pip/issues/9081#issue-733819665
[4]: https://pip.pypa.io/en/stable/topics/configuration/#environment-variables

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8c2abb7403)
2023-10-13 08:23:39 +02:00
Jeffery To
b5ccf456df python: Add pyproject.toml-based builds for host Python packages
Using pip to install host packages with pyproject.toml-based (PEP 517)
builds is problematic:

* If build isolation is used, pip will create an isolated build
  environment, install any build dependencies for the requested package,
  then build the requested package.

  It does not appear currently possible to have pip install the build
  dependencies with hash-checking mode enabled[1].

* If build isolation is not used, any build dependencies must be
  installed in the build environment before invoking pip to build the
  requested package[2].

  This would require creating a package dependency resolution system to
  install build dependencies, and any dependencies of dependencies, in
  the correct order.

* It is very difficult to patch the packages installed by pip.

This adds a new include file (python3-host-build.mk) with recipes to
install host Python packages with pyproject.toml-based builds. This is
backwards-compatible with packages that require running setup.py.

Besides addressing the above issues (the OpenWrt build system already
resolves dependencies between packages, checks all source downloads
against known hashes, and supports patching packages), host packages
also:

* Capture package licensing and maintainer information
* Enable uscan checking for package updates/CVEs
* Are a known concept for OpenWrt packagers/developers

The existing functionality of using host pip to install packages will
remain for now, but should be considered deprecated and expected to be
removed in the future.

This also updates Py3Build/CheckHostPipVersionMatch for the case where
the host-pip-requirements directory does not exist or is empty.

[1]: https://pip.pypa.io/en/stable/user_guide/#changes-to-the-pip-dependency-resolver-in-20-3-2020
[2]: https://pip.pypa.io/en/stable/cli/pip_install/#cmdoption-no-build-isolation

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit fe78c07a31)
2023-10-13 08:23:16 +02:00
Alexandru Ardelean
dc68822dcc python-build: add support for pyproject.toml files
A new PEP 517 (https://www.python.org/dev/peps/pep-0517/) has defined that
Python packages can be shipped without any `setup.py` file, and that a
`pyproject.toml` file is sufficient.

A `setup.py` shim layer is suggested as a method for running the build.

For these cases, we will add a support in the OpenWrt build-system to
provide the default `setup.py` shim layer in case this file does not exist,
but there is a `pyproject.toml` file.

We also seem to need to tweak the shim layer with the PKG_VERSION,
otherwise the detected version is 0.0.0.
We will need to see if this will be fixed later in setuptools{-scm}.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 61f202c017)
2023-10-13 08:23:08 +02:00
Jeffery To
912aaaa9cf python: Unset Python environment variables
This will prevent the user's environment variables from affecting host
Python, removing the need to manually override these variables.

It is also not necessary to set PYTHONPATH (when not working on target
Python packages) because the given directories are already included in
Python's search path by default.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6ef46bb919)
2023-10-13 08:21:12 +02:00
Jeffery To
05342e9897 Werkzeug: Update to 2.3.4, rename source package
This renames the source package from Werkzeug to python-werkzeug to
match other Python packages.

This also updates the package title, description, and list of
dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 574d43fca6)
2023-10-13 08:19:28 +02:00
Daniel Golle
d643369722 Werkzeug: update to version 2.2.2
Version 2.2.2
Released 2022-08-08

  Fix router to restore the 2.1 strict_slashes == False behaviour
  whereby leaf-requests match branch rules and vice versa.
  pallets/werkzeug#2489

  Fix router to identify invalid rules rather than hang parsing them,
  and to correctly parse / within converter arguments.
  pallets/werkzeug#2489

  Update subpackage imports in werkzeug.routing to use the import as
  syntax for explicitly re-exporting public attributes.
  pallets/werkzeug#2493

  Parsing of some invalid header characters is more robust.
  pallets/werkzeug#2494

  When starting the development server, a warning not to use it in a
  production deployment is always shown. pallets/werkzeug#2480

  LocalProxy.__wrapped__ is always set to the wrapped object when the
  proxy is unbound, fixing an issue in doctest that would cause it to
  fail. pallets/werkzeug#2485

  Address one ResourceWarning related to the socket used by run_simple.
  pallets/werkzeug#2421

Version 2.2.1
Released 2022-07-27

  Fix router so that /path/ will match a rule /path if strict slashes
  mode is disabled for the rule. pallets/werkzeug#2467

  Fix router so that partial part matches are not allowed i.e. /2df
  does not match /<int>. pallets/werkzeug#2470

  Fix router static part weighting, so that simpler routes are matched
  before more complex ones. pallets/werkzeug#2471

  Restore ValidationError to be importable from werkzeug.routing.
  pallets/werkzeug#2465

Version 2.2.0
Released 2022-07-23

  Deprecated get_script_name, get_query_string, peek_path_info,
  pop_path_info, and extract_path_info. pallets/werkzeug#2461

  Remove previously deprecated code. pallets/werkzeug#2461

  Add MarkupSafe as a dependency and use it to escape values when
  rendering HTML. pallets/werkzeug#2419

  Added the werkzeug.debug.preserve_context mechanism for restoring
  context-local data for a request when running code in the debug
  console. pallets/werkzeug#2439

  Fix compatibility with Python 3.11 by ensuring that end_lineno and
  end_col_offset are present on AST nodes. pallets/werkzeug#2425

  Add a new faster matching router based on a state machine.
  pallets/werkzeug#2433

  Fix branch leaf path masking branch paths when strict-slashes is
  disabled. pallets/werkzeug#1074

  Names within options headers are always converted to lowercase. This
  matches RFC 6266 that the case is not relevant. pallets/werkzeug#2442

  AnyConverter validates the value passed for it when building URLs.
  pallets/werkzeug#2388

  The debugger shows enhanced error locations in tracebacks in Python
  3.11. pallets/werkzeug#2407

  Added Sans-IO is_resource_modified and parse_cookie functions based
  on WSGI versions. pallets/werkzeug#2408

  Added Sans-IO get_content_length function. pallets/werkzeug#2415

  Don’t assume a mimetype for test responses. pallets/werkzeug#2450

  Type checking FileStorage accepts os.PathLike. pallets/werkzeug#2418

Version 2.1.2
Released 2022-04-28

  The development server does not set Transfer-Encoding: chunked for
  1xx, 204, 304, and HEAD responses. pallets/werkzeug#2375

  Response HTML for exceptions and redirects starts with <!doctype
  html> and <html lang=en>. pallets/werkzeug#2390

  Fix ability to set some cache_control attributes to False.
  pallets/werkzeug#2379

  Disable keep-alive connections in the development server, which are
  not supported sufficiently by Python’s http.server.
  pallets/werkzeug#2397

Version 2.1.1
Released 2022-04-01

  ResponseCacheControl.s_maxage converts its value to an int, like
  max_age. pallets/werkzeug#2364

Version 2.1.0
Released 2022-03-28

  Drop support for Python 3.6. pallets/werkzeug#2277

  Using gevent or eventlet requires greenlet>=1.0 or PyPy>=7.3.7.
  werkzeug.locals and contextvars will not work correctly with older
  versions. pallets/werkzeug#2278

  Remove previously deprecated code. pallets/werkzeug#2276

    Remove the non-standard shutdown function from the WSGI environ
    when running the development server. See the docs for alternatives.

    Request and response mixins have all been merged into the Request
    and Response classes.

    The user agent parser and the useragents module is removed. The
    user_agent module provides an interface that can be subclassed to
    add a parser, such as ua-parser. By default it only stores the
    whole string.

    The test client returns TestResponse instances and can no longer be
    treated as a tuple. All data is available as properties on the
    response.

    Remove locals.get_ident and related thread-local code from locals,
    it no longer makes sense when moving to a contextvars-based
    implementation.

    Remove the python -m werkzeug.serving CLI.

    The has_key method on some mapping datastructures; use key in data
    instead.

    Request.disable_data_descriptor is removed, pass shallow=True
    instead.

    Remove the no_etag parameter from Response.freeze().

    Remove the HTTPException.wrap class method.

    Remove the cookie_date function. Use http_date instead.

    Remove the pbkdf2_hex, pbkdf2_bin, and safe_str_cmp functions. Use
    equivalents in hashlib and hmac modules instead.

    Remove the Href class.

    Remove the HTMLBuilder class.

    Remove the invalidate_cached_property function. Use del obj.attr
    instead.

    Remove bind_arguments and validate_arguments. Use Signature.bind()
    and inspect.signature() instead.

    Remove detect_utf_encoding, it’s built-in to json.loads.

    Remove format_string, use string.Template instead.

    Remove escape and unescape. Use MarkupSafe instead.

  The multiple parameter of parse_options_header is deprecated.
  pallets/werkzeug#2357

  Rely on PEP 538 and PEP 540 to handle decoding file names with the
  correct filesystem encoding. The filesystem module is removed.
  pallets/werkzeug#1760

  Default values passed to Headers are validated the same way values
  added later are. pallets/werkzeug#1608

  Setting CacheControl int properties, such as max_age, will convert
  the value to an int. pallets/werkzeug#2230

  Always use socket.fromfd when restarting the dev server.
  pallets/werkzeug#2287

  When passing a dict of URL values to Map.build, list values do not
  filter out None or collapse to a single value. Passing a MultiDict
  does collapse single items. This undoes a previous change that made
  it difficult to pass a list, or None values in a list, to custom URL
  converters. pallets/werkzeug#2249

  run_simple shows instructions for dealing with “address already in
  use” errors, including extra instructions for macOS.
  pallets/werkzeug#2321

  Extend list of characters considered always safe in URLs based on RFC
  3986. pallets/werkzeug#2319

  Optimize the stat reloader to avoid watching unnecessary files in
  more cases. The watchdog reloader is still recommended for
  performance and accuracy. pallets/werkzeug#2141

  The development server uses Transfer-Encoding: chunked for streaming
  responses when it is configured for HTTP/1.1. pallets/werkzeug#2090,
  pallets/werkzeug#1327, pallets/werkzeug#2091

  The development server uses HTTP/1.1, which enables keep-alive
  connections and chunked streaming responses, when threaded or
  processes is enabled. pallets/werkzeug#2323

  cached_property works for classes with __slots__ if a corresponding
  _cache_{name} slot is added. pallets/werkzeug#2332

  Refactor the debugger traceback formatter to use Python’s built-in
  traceback module as much as possible. pallets/werkzeug#1753

  The TestResponse.text property is a shortcut for
  r.get_data(as_text=True), for convenient testing against text instead
  of bytes. pallets/werkzeug#2337

  safe_join ensures that the path remains relative if the trusted
  directory is the empty string. pallets/werkzeug#2349

  Percent-encoded newlines (%0a), which are decoded by WSGI servers,
  are considered when routing instead of terminating the match early.
  pallets/werkzeug#2350

  The test client doesn’t set duplicate headers for CONTENT_LENGTH and
  CONTENT_TYPE. pallets/werkzeug#2348

  append_slash_redirect handles PATH_INFO with internal slashes.
  pallets/werkzeug#1972, pallets/werkzeug#2338

  The default status code for append_slash_redirect is 308 instead of
  301. This preserves the request body, and matches a previous change
  to strict_slashes in routing. pallets/werkzeug#2351

  Fix ValueError: I/O operation on closed file. with the test client
  when following more than one redirect. pallets/werkzeug#2353

  Response.autocorrect_location_header is disabled by default. The
  Location header URL will remain relative, and exclude the scheme and
  domain, by default. pallets/werkzeug#2352

  Request.get_json() will raise a 400 BadRequest error if the
  Content-Type header is not application/json. This makes a very common
  source of confusion more visible. pallets/werkzeug#2339

Version 2.0.3
Released 2022-02-07

  ProxyFix supports IPv6 addresses. pallets/werkzeug#2262

  Type annotation for Response.make_conditional,
  HTTPException.get_response, and Map.bind_to_environ accepts Request
  in addition to WSGIEnvironment for the first parameter.
  pallets/werkzeug#2290

  Fix type annotation for Request.user_agent_class.
  pallets/werkzeug#2273

  Accessing LocalProxy.__class__ and __doc__ on an unbound proxy
  returns the fallback value instead of a method object.
  pallets/werkzeug#2188

  Redirects with the test client set RAW_URI and REQUEST_URI correctly.
  pallets/werkzeug#2151

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit d99b5473e5)
2023-10-13 08:19:27 +02:00
Jeffery To
11ef134180 Jinja2: Update to 3.1.2, rename source package
This renames the source package from Jinja2 to python-jinja2 to match
other Python packages.

This also updates the package license files, title, and list of
dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 572387f0cb)
2023-10-13 08:18:45 +02:00
Šimon Bořek
672a04a2de Jinja2: get rid of deprecated AUTORELEASE
Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
(cherry picked from commit b4c6c4e7c1)
2023-10-13 08:18:35 +02:00
Jeffery To
2a5a313e14 python-babel: Update to 2.12.1, add host build
Also updated dependencies for the new version.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0174cea697)
2023-10-13 08:17:44 +02:00
Jeffery To
01643d2c1a python-flask-babel: Update to 3.1.0
The package changed to the poetry-core build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit c579a4ab0e)
2023-10-13 08:17:05 +02:00
Michal Hrusecky
f7b498aa6b mariadb: Update to version 10.6.15
For list of changes, see:

* https://mariadb.com/kb/en/mariadb-10-6-15-release-notes/
* https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
* https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
* https://mariadb.com/kb/en/mariadb-10-6-12-release-notes/
* https://mariadb.com/kb/en/mariadb-10-6-11-release-notes/

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2023-10-11 11:21:52 +02:00
Michal Hrusecky
90ec97c1e4 curl: Update to version 8.4.0
For detailed changes, see https://curl.se/changes.html#8_4_0
Switching to tar.bz2 for the time being as tar.xz is not yet available.
Fixes CVE-2023-38546 and CVE-2023-38545.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from d353218c32)
2023-10-11 11:19:52 +02:00
Olivier Poitrey
3c154f15fb nextdns: Update to version 1.41.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2023-10-08 14:07:17 +03:00
Christian Marangi
ff6db82cba net-snmp: move to PCRE2 library
Add upstream patch adding support for pcre2 and update dependency to
require libpcre2 instead of libpcre.

--with-pcre2-8 is now needed to exclude support for pcre and only
require pcre2 as net-snmp still use and try to use pcre by default.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit daf29ecbb2)
2023-10-08 11:55:03 +02:00
Florian Eckert
f14b93b394 net-snmp: rename stop_service to service_stopped
The commands in the function 'stop_service' do not stop the service.
Rather, they are commands that are to be executed when the service has
already been stopped. By renaming the function, the commands are now
executed after the service has been stopped.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 9b67f7d134)
2023-10-08 11:54:20 +02:00
Florian Eckert
4f356ba87d net-snmp: fix whitespaces
Replace spaces with tabs

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit d6edd837f5)
2023-10-08 11:54:15 +02:00
Luiz Angelo Daros de Luca
cf9f81240f libvpx: update to 1.13.1
v1.13.0

This release includes more Neon and AVX2 optimizations, adds a new codec
control to set per frame QP, upgrades GoogleTest to v1.12.1, and includes
numerous bug fixes.

v1.13.1

This release contains two security related fixes. One each for VP8 and VP9.

- https://crbug.com/1486441 (CVE-2023-5217)
- Fix bug with smaller width bigger size (CVE-2023-44488)

Fixes #22318

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit 36566a99af)
2023-10-08 08:34:19 +02:00
Rosen Penev
d5b991ce19 libvpx: update to 1.12.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d4410f7750)
2023-10-08 08:33:49 +02:00
Daniel Golle
8361a8f402 exim: update to version 4.96.1
This is a security release.

JH/01 Bug 2999: Fix a possible OOB write in the external authenticator, which
      could be triggered by externally-supplied input.  Found by Trend Micro.
      CVE-2023-42115

JH/02 Bug 3000: Fix a possible OOB write in the SPA authenticator, which could
      be triggered by externally-controlled input.  Found by Trend Micro.
      CVE-2023-42116

JH/03 Bug 3001: Fix a possible OOB read in the SPA authenticator, which could
      be triggered by externally-controlled input.  Found by Trend Micro.
      CVE-2023-42114

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7c8f4a2a1c)
2023-10-08 05:12:48 +02:00
Eneas U de Queiroz
fea0f7a9e8 python3: avoid unnecessary rebuilds
Move the order in which BuildPackage is called, so that the libpython
package is built ahead of the module packages, to avoid forcing a
clean-build of the package when 'make package/python3/compile' is called
a second time without changes.

The library must be built first, so that when the buildsystem checks for
ABI version changes using libpython3.version, its timestamp should be
older than the dependent package's STAMP_PREPARED file.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit c230d7bd7f)
2023-10-07 19:33:30 +02:00
S. Brusch
52ec0079e9 crowdsec-firewall-bouncer: new upstream release version 0.0.28
Signed-off-by: S. Brusch <ne20002@gmx.ch>

Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: mediatek/filogic, BPI-R3, Openwrt 23.05.0-rc3

Description: Update crowdsec-firewall-bouncer to latest upstream release version 0.0.28
(cherry picked from commit 401d2428ac)
2023-10-07 12:54:44 +08:00
Christian Marangi
c7ae1bbced atftp: move to PCRE2
Move atftp to PCRE2 as PCRE is flagged as EOL and won't receive security
updates anymore.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit f81a1a1212)
2023-10-04 18:36:52 +02:00
Christian Marangi
9855b131c7 atftp: bump to release 0.8.0
Bump to release 0.8.0. Autorecong is now needed to correctly compile the
package.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 364fe00b17)
2023-10-04 18:36:36 +02:00
Jan Kratochvil
0fc748e6d9 ffmpeg: Add avi muxer
Otherwise one cannot produce *.avi containers needed for some H.264
camera codecs.

Signed-off-by: Jan Kratochvil <jan@jankratochvil.net>
(cherry picked from commit 62f01d7b36)
2023-10-04 18:33:48 +02:00
Josef Schlehofer
41246c2847 btrfs-progs: update to version 6.5.1
Release notes:
https://github.com/kdave/btrfs-progs/releases/tag/v6.5.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 16e484cad1)
(cherry picked from commit c6656a6289)
2023-10-04 18:10:13 +02:00
Tianling Shen
0345cb3d11 btrfs-progs: Update to 6.3
Fixed build issue with musl 1.2.4.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c2b8dbd085)
2023-10-04 18:09:54 +02:00
Tianling Shen
a03a80280a wget: Update to 1.21.4
Removed upstreamed patches and unneeded autoreconf.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 54593c0ba9)
2023-10-04 18:07:12 +02:00
Josef Schlehofer
42a20e3dbd syslog-ng: update to version 4.4.0
- Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.4.0

- Bump version in config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 4dd49d7c3c)
2023-10-04 18:03:55 +02:00
Josef Schlehofer
c926fd29d7 prometheus-node-exporter-lua: drop bmx6 package
In the OpenWrt routing feed, package bmx6 and luci-app-bmx6 were removed because the LuCI app was vulnerable to several CVEs, as found by dependabot. It has been reporting it for a few months and has even created an issue. These two packages are not maintained in OpenWrt as well in upstream.

Users should switch to the bmx7 package.

Fixes: 9fb9d9343ea27d6dbb5008ece10c0c843dd2c781 ("bmx6: drop package") in the routing feed

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 9c2bf85900)
2023-10-03 14:49:28 +02:00
Daniel Golle
a475867425 exim: apply hotfix for some ZDI reported vulnerabilities
Apply preliminary hotfix for some (three?) of the 0-day
vulnerabilities reported by ZDI.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit db85d9ead6)
2023-10-02 11:35:44 +01:00
Christian Marangi
106ee9ede9 apache: bump to release 2.4.57
Bump apache to release 2.4.57 and refresh patch automatically.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 86f9af41c1)
2023-09-28 10:43:17 +02:00
Christian Marangi
1ba11e38a4 apache: move to PCRE2
Move apache to PCRE2 now that PCRE is flagged EOL and won't receive any
security update.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit d14fe0c51c)
2023-09-28 10:43:14 +02:00
Noah Meyerhans
029d2de98c bind: bump to 9.18.19
Fixes CVEs:

CVE-2023-3341 - Previously, sending a specially crafted message over the
control channel could cause the packet-parsing code to run out of available
stack memory, causing named to terminate unexpectedly.

CVE-2023-4236 - A flaw in the networking code handling DNS-over-TLS queries
could cause named to terminate unexpectedly due to an assertion failure under
significant DNS-over-TLS query load.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 835b105151)
2023-09-27 16:02:27 -07:00
Matthias Schiffer
a2fd53756b openvswitch: disable groff manpage check
The openvswitch build trips over a number of warnings during the
manpage-check step if groff 1.23 is installed on the build host,
resulting in a failed build.

As this check is optional, and we don't even install the manpages, simply
override the groff configure check to never detect groff.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit db34f33cc7)
2023-09-27 18:16:56 +02:00
Matthias Schiffer
a022b21328 tunneldigger: set PKG_SOURCE_DATE
opkg requires monotonically increasing version numbers to know which
version of a package is newer. As git commit IDs do not satisfy this
condition, PKG_SOURCE_DATE must be set to the date of the referenced
commit, resulting in the complete version number '2021-03-08-4f72b305-1'.

As the source date also becomes part of the paths inside the download
archive, the source hash must be updated as well.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit 0a3e5dd122)
2023-09-27 18:16:53 +02:00
Matthias Schiffer
038bbe283e tunneldigger: add group option to UCI config
The group can be used for policy routing and similar purposes.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit 21dd77f6c4)
2023-09-27 18:16:49 +02:00
Salem Huang
407f701652 netbird: update to 0.21.7
1. Release notes:
   https://github.com/netbirdio/netbird/releases/tag/v0.21.2
   https://github.com/netbirdio/netbird/releases/tag/v0.21.3
   https://github.com/netbirdio/netbird/releases/tag/v0.21.4
   https://github.com/netbirdio/netbird/releases/tag/v0.21.5
   https://github.com/netbirdio/netbird/releases/tag/v0.21.6
   https://github.com/netbirdio/netbird/releases/tag/v0.21.7
2. Update GO_PKG_LDFLAGS, because of 292ee260ad
3. Define the configuration file.

Signed-off-by: Salem Huang <solohoh@hotmail.com>
(cherry picked from commit 35b668b6ca)
2023-09-26 20:31:23 +02:00
Oskari Rauta
c36d37a3f4 netbird: update to 0.21.1
Release notes: https://github.com/netbirdio/netbird/releases

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 9bc2733f31)
2023-09-25 19:51:00 +02:00
Oskari Rauta
66fb7507eb netbird: update to 0.14.5
Release Notes

Management

 - Introduce a new ACL engine based on Rego (Open Policy Agent) for firewall control
 - Personal access tokens generation as a first iteration toward public API release
 - Add Keycloak support as an IDP manager

Agent

 - Introduce a Firewall interface to apply granular access control (e.g., connection direction, port, or protocol level)
 - Make the agent run on Android (mobile support)

Changelog

 - Feat rego default policy
 - Don't drop Rules from file storage after migration to Policies
 - Add version info command to signal server
 - Feat firewall controller interface
 - Adding Personal Access Token generation
 - Exchange proxy mode via signal
 - Fix connstate indication
 - Mobile
 - PAT persistence
 - Add Keycloak Idp Manager
 - Adjustments for the change server flow
 - Disable peer expiration of peers added with setup keys
 - Add JWT middleware validation failure log

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 12f8ebc4b1)
2023-09-25 19:51:00 +02:00
Oskari Rauta
337e8e6232 netbird: update to 0.14.4
Bug fixes & refactor
Fix: send remote agents updates when peer re-authenticates

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit ab573bdb4d)
2023-09-25 19:51:00 +02:00
Oskari Rauta
a63c543adc netbird: update to 0.14.3
Bug fixes & refactor

Release notes:
 - Fix: send remote agents updates when peer re-authenticates

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit f9e3af87f5)
2023-09-25 19:51:00 +02:00
Oskari Rauta
bf9212c53e netbird: update to 0.14.2
Update from 0.12.0 -> 0.14.2
Release notes: https://github.com/netbirdio/netbird/releases

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 58fcaf8fc4)
2023-09-25 19:51:00 +02:00
Oskari Rauta
0fcaf00768 netbird: new package
Netbird is similar vpn service as tailscale and zerotier.

Description:
NetBird is an open-source VPN management platform built on top of WireGuard® making it easy to create secure private networks for your organization or home.
It requires zero configuration effort leaving behind the hassle of opening ports, complex firewall rules, VPN gateways, and so forth.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit a4d8d2459a)
2023-09-25 19:51:00 +02:00
S. Brusch
468916ac88 crowdsec: new upstream release version 1.5.4
Update crowdsec to latest upstream release version 1.5.4

Signed-off-by: S. Brusch <ne20002@gmx.ch>

Maintainer: Kerma Gérald <gandalf@gk2.net>
Build tested: package build checked, no run test due to limited space

Description: update to latest version of upstream
(cherry picked from commit 7528bf7682)
2023-09-25 22:31:39 +08:00
Dengfeng Liu
ef3564dbe5 apfree-wifidog: Update to v6.08.1950
Fixed some memory leak bug

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 5b3e517be4)
2023-09-25 22:31:05 +08:00
Dengfeng Liu
f19375014e xfrpc: update to version 2.9.644
Release notes:
https://github.com/liudf0716/xfrpc/releases/tag/2.9.644

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 6cd80e0727)
2023-09-25 00:52:42 +08:00
Josef Schlehofer
173990d6c0 git: update to version 2.34.8
Fixes CVE:
CVE-2023-25652
CVE-2023-25815
CVE-2023-29007

Release notes:
abcb63fb70

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-23 19:16:09 -07:00
Michal Hrusecky
0f8c275005 samba4: update to 4.18.6
Update to the version of samba4 from 23.05 as version 4.14 is no longer
supported by upstream since 2022-09-13:

https://wiki.samba.org/index.php/Samba_Release_Planning#General_information

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2023-09-23 19:15:21 -07:00
Josef Schlehofer
f583a17e1c czmq: drop libpcre dependency
It seems like the libpcre dependency was added by mistake.
While checking in the source code of czmq (Makefile.am, CMakeLists.txt),
I see there are several dependencies, but there isn't PCRE.

Fixes: 936a48a ("czmq: add new package")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e3ab95185c)
2023-09-22 09:26:06 +02:00
Hirokazu MORIKAWA
312b26f641 mg: switch pcre to pcre2
Switch pcre to pcre2
https://github.com/openwrt/packages/issues/22006

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 3d11e5c197)
2023-09-22 09:25:59 +02:00
Josef Schlehofer
1c6b81f3c1 msmtp: update to version 1.8.24
Release notes:
ef62463e4dX

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 29a9a6a4a7)
2023-09-22 00:28:57 +02:00
Hauke Mehrtens
cafcd75d7c postfix: Fix compile against glibc 2.36
This backports a change from postfix 3.8, I do not know exactly why it
detects Linux 6 here, but this is needed to fix compilation with glibc
2.36.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 33786efe66)
2023-09-21 23:35:38 +02:00
Jitao Lu
2b8e549f8e glib2: disable gnulib printf
A compiler bug (suspiciously) blocks gnulib compilation for
mipsel_24kc_24kf. While we had this patch to disable gnulib, it was
accidentally removed by 5d27631d9f. Add it
back to fix the long broken build for mipsel_24kc_24kf.

Fixes: #19511
Signed-off-by: Jitao Lu <dianlujitao@gmail.com>
(cherry picked from commit 68f23a9c33)
2023-09-21 09:35:03 +02:00
Florian Eckert
0d13ad10fd glib2: fix host build offline download
If buildsystem does not have a internet connection, then the build
fails. This is because of the fact, that glib2 is downloading and building
the missing dependencies during host compilation.

This cannot be allowed to happen. The package must also be built without
an internet connection.

Adding the missing host build dependency and removing the 'forcefallback'
fixes this issue.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit c664b83535)
2023-09-21 09:34:34 +02:00
Matthias Schiffer
698f630627 fastd: update repository URL
I've changed my username to neocturne.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit ac897e05dd)
2023-09-20 21:57:46 +02:00
Matthias Schiffer
3363e36066 libuecc: update repository URL
I've changed my username to neocturne.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit 1df594bc01)
2023-09-20 21:57:44 +02:00
Josef Schlehofer
c289d3078c bind: update to version 9.18.18
Release notes:
https://downloads.isc.org/isc/bind9/9.18.18/doc/arm/html/notes.html#notes-for-bind-9-18-18
https://downloads.isc.org/isc/bind9/9.18.17/doc/arm/html/notes.html#notes-for-bind-9-18-17

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 6a8d3565f0)
2023-09-20 08:12:39 -07:00
Tianling Shen
07639142d8 rclone: Update to 1.64.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1b75de7e5c)
2023-09-20 10:47:21 +08:00
Andrew Sim
724600576b samba4: update to 4.14.14
* update to 4.14.14
* fixes: CVE-2022-2031, CVE-2022-32744, CVE-2022-32745, CVE-2022-32746, CVE-2022-32742

Signed-off-by: Andrew Sim <andrewsimz@gmail.com>
(cherry picked from commit 5cf95dbf05)
2023-09-20 02:21:36 +02:00
Andy Walsh
944a3cf18f samba4: drop maintainership
drop maintainership:
* samba4
* ksmbd-tools
* perl-parse-yapp
* libtirpc
* softethervpn5
* wsdd2
* rpcsvc-proto

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry picked from commit cd49a8fb27)
2023-09-20 02:21:29 +02:00
Sergey V. Lobanov
368188b05f samba4: fix build on macos
This commit fixes two issues on macos:
1. Added a patch to fix 'echo -n' issue with MacOS shell
(backported from upstream)
2. Redefined sys.platform='linux' for target build if build host is
MacOS (otherwise, build script tries to use MacOS logic for
OpenWrt(Linux) target build)

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
(cherry picked from commit 510d44d988)
2023-09-20 02:21:19 +02:00
Sergey Ponomarev
0dab01d398 emailrelay: update to v2.4.1
The patch seems not needed anymore.
Also remove deprecated PKG_RELEASE:=$(AUTORELEASE)

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
(cherry picked from commit 735cba83ce)
2023-09-20 02:18:28 +02:00
Eneas U de Queiroz
f5f990d7d7 alpine: disable parallel build
Parallel build does not work because it may reach a point where OSTYPE
might be needed before it is actually built.  They appear to run
parallel to each other:

echo slx > OSTYPE
[...]
cat: OSTYPE: No such file or directory
sh: line 1: test: too many arguments
cat: OSTYPE: No such file or directory
Already built for -- you must do "make clean" first
make[6]: *** [Makefile:706: rebuild] Error 1
make[6]: *** Waiting for unfinished jobs....

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 0e652e2449)
2023-09-20 02:17:49 +02:00
Rosen Penev
c9c122966a alpine: fix old URL
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 40c685e616)
2023-09-20 02:17:44 +02:00
Tianling Shen
bcb03c07db ipfs-http-client: remove package
This package lacks proper maintenance in both upstream and here.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 72c8977b3b)
2023-09-20 02:14:44 +02:00
Alexandru Ardelean
e02f8f5076 sudo: bump to verison 1.9.14p3
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit a1edb56083)
2023-09-20 02:11:15 +02:00
Alexandru Ardelean
831382f190 sudo: bump to verison 1.9.14p1
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 7953466d7f)
2023-09-20 02:11:10 +02:00
Alexandru Ardelean
be01aaea26 sudo: bump to verison 1.9.13p3
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 2d9e475444)
2023-09-20 02:11:04 +02:00
Alexandru Ardelean
88016d54af sudo: bump to version 1.9.12p2
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 18ce787530)
2023-09-20 02:10:58 +02:00
Alexandru Ardelean
1d9c7f6ee9 sudo: bump to verison 1.9.12p1
Fixes: https://github.com/openwrt/packages/issues/19816

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 8e2091c6ad)
2023-09-20 02:10:48 +02:00
Alexandru Ardelean
40ad85df60 sudo: bump to version 1.9.12
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit b40372da41)
2023-09-20 02:10:43 +02:00
Rosen Penev
201a2d8247 sudo: don't build with MIPS16
GCC12 doesn't implement some security flags used by sudo.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 97e986e5ed)
2023-09-20 02:10:35 +02:00
Alexandru Ardelean
b29c0e17e3 sudo: bump to verison 1.9.11p3
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit b083d9b82b)
2023-09-20 02:10:26 +02:00
Jan Hák
2d2dcf9b1b knot: update to version 3.3.1
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 2a6dc24882)
2023-09-20 00:25:53 +02:00
Lucian Cristian
e56dcfef59 libreswan: update to 4.12
fix CVE-2023-38710, CVE-2023-38711, CVE-2023-38712

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 5a1b878010)
2023-09-20 00:21:46 +02:00
Lucian Cristian
bbd1312705 libreswan: update to 4.11
Fixes https://libreswan.org/security/CVE-2023-30570

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit a5c2eececb)
2023-09-20 00:21:39 +02:00
Josef Schlehofer
b949001ea8 ffmpeg: update to version 5.1.3
Fixes CVEs:
CVE-2022-3964 [1]
CVE-2022-3965 [2]

[1] https://nvd.nist.gov/vuln/detail/CVE-2022-3964
[2] https://nvd.nist.gov/vuln/detail/CVE-2022-3965

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 87b2a2bb57)
2023-09-17 13:46:07 +02:00
Stan Grishin
494a053faa Merge pull request #22123 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: improve boot up startup
2023-09-16 18:59:27 -07:00
Stan Grishin
52e318a15c https-dns-proxy: improve boot up startup
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 22d21e28a7)
2023-09-16 23:52:31 +00:00
Stan Grishin
d38d78edba Merge pull request #22116 from stangri/openwrt-22.03-curl
[22.03] curl: update to version 8.3.0
2023-09-16 16:43:18 -07:00
Josef Schlehofer
8d617af751 unbound: update to version 1.17.1
- Refreshed one patch
- Removed deprecated AUTORELEASE

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 97e69ec89c)
2023-09-16 12:58:07 +02:00
John Audia
f4c5b4389e ffmpeg: update to 5.1.2
Bump to latest upstream version

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 6b71d2fbde)
2023-09-16 12:32:24 +02:00
John Audia
4e4e494a6c ffmpeg: update to 5.1.1
Bump to latest upstream version

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 73e02994fb)
2023-09-16 12:32:14 +02:00
Jeffery To
d02538e0e9 python-sentry-sdk: Update to 1.29.2, update list of dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit f279ae9418)
2023-09-16 12:29:17 +02:00
Josef Schlehofer
f7560f4896 treewide: change my no longer used email
Since February 2023, I decided to no longer work with Turris, I mean CZ.NIC company
due to some reasons how the development goes and since that day my work address is not
available and not sure if there is some redirect to someone else, but if anyone wants to
reach me, use my email address, where they can find me.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1e1b2051db)
2023-09-16 12:26:40 +02:00
Josef Schlehofer
adad342905 curl: update to version 8.3.0
Release notes:
https://curl.se/changes.html#8_3_0

Fixes:
CVE-2023-38039 [1]

[1] https://curl.se/docs/CVE-2023-38039.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 07c0a5eab8)
2023-09-16 10:25:56 +00:00
Olivier Poitrey
7564720af8 nextdns: Update to version 1.40.1
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2023-09-16 17:02:17 +08:00
Sibren Vasse
cda94a1660 openssh: update to 9.3p2
Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>
(cherry picked from commit 731f0d70a8)
2023-09-15 15:57:27 +02:00
Darren Tucker
3013608d01 openssh: sftp no longer needs crypto or zlib.
OpenSSH 9.1p1 removed remaining dependencies and stopped linking sftp,
sftp-server and scp against libcrypto or libz.  This change moves those
package dependencies from the default to those that still need them.
In particular, this will allow sftp-server to be installed for use with
Dropbear without needing to install zlib or openssl.

Signed-off-by: Darren Tucker <dtucker@dtucker.net>
(cherry picked from commit 74c4ad2c0c)
2023-09-15 15:57:18 +02:00
Darren Tucker
63593c9bf0 openssh: Use CDN first for source downloads.
Also point to https for website.

Signed-off-by: Darren Tucker <dtucker@dtucker.net>
(cherry picked from commit 1daddd582f)
2023-09-15 15:57:10 +02:00
Glen Huang
8669835b62 openssh: preserve authorized_keys
The root user is usually the user that clients ssh into with, so in most
cases its authorized_keys determines what clients are allowed to ssh
into this device. Without preserving this file, they could potentially
be locked out after upgrading.

Signed-off-by: Glen Huang <me@glenhuang.com>
(cherry picked from commit e36a55c9ed)
2023-09-15 15:57:00 +02:00
Sibren Vasse
b3704dc4ff openssh: update to 9.3p1
Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>
(cherry picked from commit 2c755759df)
2023-09-15 15:54:12 +02:00
Sibren Vasse
5f181e80c2 openssh: actually build openssh-server-pam with pam support
Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>
(cherry picked from commit d41e918a36)
2023-09-15 15:54:03 +02:00
Sibren Vasse
004c7f3a44 openssh: update to 9.2p1
Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>
(cherry picked from commit 5c43c1bade)
2023-09-15 15:53:52 +02:00
Sibren Vasse
6fc31027de openssh: update to 9.1p1
Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>
(cherry picked from commit ba8cb7c16c)
2023-09-15 15:53:27 +02:00
Sibren Vasse
fb446ac437 openssh: update to 9.0p1
Remove upstreamed patches.

Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>
(cherry picked from commit 08b45115d7)
2023-09-15 15:53:10 +02:00
Rosen Penev
e51d6bbb1e glib2: update to 2.74.0
Remove upstreamed patch and delete pointless one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5d27631d9f)
2023-09-15 09:55:19 +02:00
Rosen Penev
37a240dcdd glib2: remove libiconv/host build dependency
No longer present. The original reason for having it was an unfortunate
side effect of the way meson uses HOST_LDFLAGS. Since the transistion to
use dependency('iconv'), this is no longer relevant.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 568669dc46)
2023-09-15 09:55:01 +02:00
Josef Schlehofer
6b5e69d11c syslog-ng: update to version 4.3.1
Makefile changes:
- Since version 4.3.0, there is required to use pcre2 instead of pcre
Reference: https://github.com/syslog-ng/syslog-ng/pull/4537

- Disable c++ support by default to avoid picking libstdcpp dependency
Reference: https://github.com/syslog-ng/syslog-ng/pull/4484

Config changes:
- Bump version in config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c43599b0c8)
2023-09-15 09:30:01 +02:00
Tianling Shen
2fd3caba44 Merge pull request #22084 from jefferyto/golang-1.19.13-openwrt-22.03
[openwrt-22.03] golang: Update to 1.19.13
2023-09-11 09:55:44 +08:00
Jeffery To
ef6064771b golang: Update to 1.19.13
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-09-11 04:06:34 +08:00
Jeffery To
99f9e68f7b python3: Update to 3.10.13
Includes fix for CVE-2023-40217 (Bypass TLS handshake on closed
sockets).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-09-08 19:01:59 +08:00
Liangbin Lian
9f1f0665ca transmission: add syscalls to seccomp filter
Add missing syscalls found using `/etc/init.d/transmission trace`.

fix crash on adding torrent on x86_64 platform

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
2023-09-07 19:26:48 -07:00
Moritz Warning
f88ff7f861 zerotier: update to 1.12.1
* split up "fix makefile" patch logical distinct parts
* add libatomic dependency needed for prometheus-cpp-lite-1.0
* refresh patch series
* improve warning message in init script

Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit 6cf39ba626)
2023-09-04 14:30:32 +08:00
Oskari Rauta
419374b406 zerotier: do not allow executable stack
zerotier as default has executable stack.
[   11.343143] process '/usr/bin/zerotier-one' started with executable stack

executable stacks are not recommend, possibly provide a threat and there
seems to be no advantage of executable stack with zerotier-one - so let's
build it without instead.

Stack is executable on x86_64, but not on all archs, such as ramips.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 56f30520f2)
2023-09-04 14:30:32 +08:00
Moritz Warning
41048a79f9 zerotier: update to 1.10.4
Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit b5cde91594)
2023-09-04 14:30:32 +08:00
Jan Hoffmann
1657fdb869 vnstat2: update to version 2.11
This release breaks the noexit patch, because the code for removing old
now returns an error when no interfaces are configured. As it is run on
startup, the daemon exits in this case. To avoid this, add an additional
check so an error is only returned in an actual error case.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>
(cherry picked from commit 9871979707)
2023-09-04 14:30:05 +08:00
Jan Hoffmann
fc76c3e9fe vnstat2: update to version 2.10
Signed-off-by: Jan Hoffmann <jan@3e8.eu>
(cherry picked from commit 4edbd1afe7)
2023-09-04 14:30:05 +08:00
Stan Grishin
708ec95903 Merge pull request #22018 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: fix dns resolution not working on boot
2023-09-03 18:03:07 -07:00
Stan Grishin
8819ac9f48 https-dns-proxy: fix dns resolution not working on boot
* fix dns resolution not working on boot
* add hotplug-online script
* reorganizes files/ and Makefile to reflect files destinations

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 9a2c5ae18c)
2023-09-03 20:37:46 +00:00
Leon M. Busch-George
4e2cd2ced5 wget: use pcre2
Pcre (1) is unmaintained and reached its end of life in 2021.
The base system provides pcre2 exclusively since May.

Signed-off-by: Leon M. Busch-George <leon@georgemail.eu>
(cherry picked from commit 379946951c)
2023-09-03 10:52:06 +02:00
Josef Schlehofer
5800425cb0 knot-resolver: update to version 5.7.0
Changelog:
https://www.knot-resolver.cz/2023-01-26-knot-resolver-5.6.0.html
https://www.knot-resolver.cz/2023-08-22-knot-resolver-5.7.0.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a531468114)
2023-09-03 10:03:51 +02:00
Jan Hák
a8575f7084 knot: enable QUIC support
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit dea3e7acb6)
2023-09-01 22:08:55 +02:00
Jan Hák
3159348b04 knot: update to version 3.3.0
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit e79e441513)
2023-09-01 22:08:47 +02:00
Jan Hák
47e25fd7ac knot: update to version 3.2.9
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit f6aa1198eb)
2023-09-01 22:08:37 +02:00
Jan Hák
94e1621abc knot: update to version 3.2.8
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 9517ef080a)
2023-09-01 22:08:28 +02:00
Jan Hák
4465026738 knot: update to version 3.2.7
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 439694a012)
2023-09-01 22:08:19 +02:00
Jan Hák
dca5104967 knot: update to version 3.2.6
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit bb946a19cd)
2023-09-01 22:08:08 +02:00
Tianling Shen
981dbdf9c4 tmate: fix build against msgpack-c 6.0
This patch is taken from
https://git.alpinelinux.org/aports/commit/?id=f923597f4bdea424dc28b1d026269df060596fac

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 928710813b)
2023-09-01 22:07:17 +02:00
Tianling Shen
6f180964af msgpack-c: Update to 6.0.0
Removed 010-no-gtest.patch as upstream no longer detects it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 394cc366b3)
2023-09-01 22:06:35 +02:00
Tianling Shen
6c43ff614c tmate-ssh-server: fix build against msgpack-c 6.0
This patch is taken from
https://git.alpinelinux.org/aports/commit/?id=f923597f4bdea424dc28b1d026269df060596fac

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c49a1dad52)
2023-09-01 22:06:10 +02:00
Nikos Mavrogiannopoulos
c30b106576 tang: do not require bash and curl (backport from 23.05)
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2023-08-31 18:45:39 +02:00
Nikos Mavrogiannopoulos
5918cb1143 tang: corrected hash for v14
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2023-08-30 09:27:27 +02:00
Ray Wang
e1a2aa82c9 natmap: update to 20230820
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit d5b99f9e8a)
2023-08-30 09:48:31 +08:00
Nikos Mavrogiannopoulos
cb1b1ad987 tang: updated to v14
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2023-08-29 20:32:24 +02:00
Nikos Mavrogiannopoulos
68cae7981d tang: create user tang
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2023-08-28 18:24:15 +02:00
Nikos Mavrogiannopoulos
ed5a5979ba tang: use sbin instead of libexec
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2023-08-28 18:23:48 +02:00
Nikos Mavrogiannopoulos
a6265258f8 tang: remove post-installation key generation
The keys will be generated on startup.

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2023-08-28 18:23:12 +02:00
Nikos Mavrogiannopoulos
16391a06eb tang: updated to version 12
This version enables standalone operation.

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2023-08-28 18:23:06 +02:00
Jo-Philipp Wich
7b6f573fed strongswan: fix compilation against updated WolfSSL 5.6.3
After OpenWrt base updated WolfSSL to version 5.6.3, the strongswan wolfssl
plugin fails to compile due to a header conflict.

The error reported by the builders is:

    In file included from .../usr/include/wolfssl/openssl/asn1.h:27,
                     from .../usr/include/wolfssl/ssl.h:4123,
                     from wolfssl_common.h:64,
                     from wolfssl_ec_private_key.c:23:
    ../../../../src/libstrongswan/asn1/asn1.h:43:9: error: 'WOLFSSL_ASN1_STRING' redeclared as different kind of symbol
       43 |         ASN1_UTF8STRING =               0x0C,
          |         ^~~~~~~~~~~~~~~
    In file included from wolfssl_common.h:64,
                     from wolfssl_ec_private_key.c:23:
    .../usr/include/wolfssl/ssl.h:212:41: note: previous declaration of 'WOLFSSL_ASN1_STRING' with type 'WOLFSSL_ASN1_STRING'
      212 | typedef struct WOLFSSL_ASN1_STRING      WOLFSSL_ASN1_STRING;
          |                                         ^~~~~~~~~~~~~~~~~~~
    make[9]: *** [Makefile:621: wolfssl_ec_private_key.lo] Error 1

Solve this issue by adding a local path that remaps `ASN1_UTF8STRING`
during wolfssl header inclusion, like it is done already for other
conflicting defines.

Ref: https://forum.openwrt.org/t/x/169580
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2023-08-25 10:46:44 +02:00
Karl Palsson
201a7c81d6 net/mosquitto: bump to 2.0.17
This is a security and bug fix release.

Security:
- CVE-2023-28366: Fix memory leak in broker when clients send multiple QoS 2
  messages with the same message ID, but then never respond to the PUBREC
  commands.
- CVE-2023-0809: Fix excessive memory being allocated based on malicious
  initial packets that are not CONNECT packets.
- CVE-2023-3592: Fix memory leak when clients send v5 CONNECT packets with a
  will message that contains invalid property types.
- Broker will now reject Will messages that attempt to publish to $CONTROL/.
- Broker now validates usernames provided in a TLS certificate or TLS-PSK
  identity are valid UTF-8.
- Fix potential crash when loading invalid persistence file.
- Library will no longer allow single level wildcard certificates, e.g. *.com

Bugfixes of note or relevance to OpenWrt:
- Fix bridges with non-matching cleansession/local_cleansession being expired
  on start after restoring from persistence. Closes #2634.
Client library:
- Use CLOCK_BOOTTIME when available, to keep track of time. This solves the
  problem of the client OS sleeping and the client hence not being able to
  calculate the actual time for keepalive purposes. Closes #2760.

Full changelog available at: https://github.com/eclipse/mosquitto/blob/v2.0.16/ChangeLog.txt
plus: https://github.com/eclipse/mosquitto/blob/v2.0.17/ChangeLog.txt
(2.0.17 fixes regressions from the 2.0.16 release)

Signed-off-by: Karl Palsson <karlp@tweak.au>
2023-08-23 22:04:01 +00:00
Perry Melange
fc4d143cf3 tunneldigger-broker: update to v0.4.0
Include new hook script to build

Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>
(cherry picked from commit 93a102e21a)
2023-08-23 13:46:32 +02:00
Perry Melange
be07e79e68 tunneldigger-broker: add rate-limit hook
Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>
(cherry picked from commit 0d1085fe9e)
2023-08-23 13:46:32 +02:00
Perry Melange
930223cf4b tunneldigger-broker: add option to isolate bridge ports
Add new option to a config bridge section to indicate
if a bridge port added to the bridge should be isolated
or not.  The default is 0 (no isolation).

example

config bridge
     option interface 'br-mybridge1446'
     option mtu '1446'
     option isolate '1' # default '0'

Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>
(cherry picked from commit 49cdf15da4)
2023-08-23 13:46:32 +02:00
Perry Melange
855f7f0e03 tunneldigger-broker: update lib functions
Use config_foreach instead of config_cb

Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>
(cherry picked from commit ab2b1ade27)
2023-08-23 13:46:32 +02:00
Perry Melange
e4224e3f76 tunneldigger-broker: update config file and init for v0.4.0
Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>
(cherry picked from commit 99dfea7730)
2023-08-23 13:46:32 +02:00
Stan Grishin
5b032f7f6e Merge pull request #21829 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: bugfixes for uci_load_validate
2023-08-16 13:42:42 -07:00
Stan Grishin
65f4d3a0b4 simple-adblock: bugfixes for uci_load_validate
* fix validation for force_dns_port when missing in config
* fix validation for dns_instance when * or - are used

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit ad8aa084c1)
2023-08-15 16:33:48 +00:00
Michael Heimpold
f165ad9979 Merge pull request #21818 from mhei/22.03-php8-update-to-8.1.22
[22.03] php8: update to 8.1.22
2023-08-15 07:40:12 +02:00
Michael Heimpold
addaa5e0b6 php8: update to 8.1.22
This fixes:
    - CVE-2023-3823
    - CVE-2023-3824

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2023-08-13 11:55:49 +02:00
Hirokazu MORIKAWA
9ddc94bbe2 node: August 2023 Security Releases
Update to v16.20.2
This is a security release.

Notable Changes
The following CVEs are fixed in this release:
* CVE-2023-32002: Policies can be bypassed via Module._load (High)
* CVE-2023-32006: Policies can be bypassed by module.constructor.createRequire (Medium)
* CVE-2023-32559: Policies can be bypassed via process.binding (Medium)
* OpenSSL Security Releases  (Depends on shared library provided by OpenWrt)
    * OpenSSL security advisory 14th July.
    * OpenSSL security advisory 19th July.
    * OpenSSL security advisory 31st July

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2023-08-10 20:03:16 +03:00
Stan Grishin
76fccd9ead Merge pull request #21762 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: force_dns_port validation bugfix
2023-08-08 13:15:40 -07:00
Stan Grishin
6f936f07b9 Merge pull request #21694 from stangri/openwrt-22.03-curl
[22.03] curl: update to 8.2.1
2023-08-08 13:15:23 -07:00
Stan Grishin
af7b0f9eff simple-adblock: force_dns_port validation bugfix
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 173d163f09)
2023-08-08 09:33:18 +00:00
Tianling Shen
af603bd12a v2fly-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1003f84ead)
2023-08-08 06:36:16 +08:00
Tianling Shen
9f8a407659 v2raya: Update to 2.1.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4faa0e88fe)
2023-08-08 06:36:12 +08:00
Tianling Shen
9ebf145a10 cloudreve: Update to 3.8.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d1f4f875fa)
2023-08-08 06:36:04 +08:00
R4SAS I2P
bf65da62e7 i2pd: update to version 2.48.0
Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
(cherry picked from commit d7b0d3f83d)
2023-08-07 16:53:22 +08:00
Tianling Shen
36beb7d058 Merge pull request #21740 from jefferyto/golang-1.19.12-openwrt-22.03
[openwrt-22.03] golang: Update to 1.19.12
2023-08-07 08:40:23 +08:00
Jeffery To
113a9fc19e golang: Update to 1.19.12
Includes fix for CVE-2023-29409 (crypto/tls: verifying certificate
chains containing large RSA keys is slow).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-08-07 02:43:20 +08:00
Stan Grishin
d321bf348f curl: update to 8.2.1
* https://curl.se/changes.html#8_2_1

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 82dbc1c4d5)
2023-08-01 05:28:55 +00:00
Stan Grishin
336660337e Merge pull request #21639 from stangri/openwrt-22.03-curl
[22.03] curl: update to 8.2.0
2023-07-31 22:28:17 -07:00
Hirokazu MORIKAWA
545165018d mg: bump to 7.3
Description:
Sync to OpenBSD 7.3

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit e25f57b602)
2023-07-29 04:25:09 +08:00
Stan Grishin
93f4f3bbfd Merge pull request #21632 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: improve CLI messaging
2023-07-23 08:52:57 -07:00
Stan Grishin
29ef4d2e3b curl: update to 8.2.0
* https://curl.se/changes.html#8_2_0

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit a276cebd9e)
2023-07-23 15:50:21 +00:00
Stan Grishin
074151c176 Merge pull request #21629 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: dnsmasq access bugfix & misc improvements
2023-07-23 08:14:15 -07:00
Stan Grishin
bc891685b3 https-dns-proxy: improve CLI messaging
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 649fbcf9fc)
2023-07-23 05:24:03 +00:00
Stan Grishin
8b97c69f42 simple-adblock: dnsmasq access bugfix & misc improvements
* fix permission to dnsmasq files for ad-blocking
* add pause function to pause the ad-blocking temporarily
* introduce pause_timeout option to control default pause time
* update default config and config-update file
* use $param instead of $1 in adb_start()

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit dea274cc33)
2023-07-23 05:18:22 +00:00
Tianling Shen
a04283af16 rclone: Update to 1.63.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 34d1c310b3)
2023-07-23 00:56:03 +08:00
Tianling Shen
42ad394290 dnsproxy: Update to 0.52.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit dc3af571d7)
2023-07-23 00:56:03 +08:00
Tianling Shen
0bba5b7ad0 cloudflared: Update to 2023.7.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 498343e2c0)
2023-07-23 00:56:02 +08:00
Nick Hainke
2631e02807 snowflake: update to 2.6.0
Tor projects tries to migrate away from git.torproject.org [0,1]. We
need to adjust PKG_SOURCE and GO_PKG name. Further, we need to backport
patches to fix compiling on riscv64, so add:
- 0001-Bump-minimum-required-version-of-go.patch
- 0002-Update-dependencies.patch

Changelog:
2fa8fd9188

[0] - https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/86
[1] - 82cc0f38f7

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 0281f7594b)
2023-07-19 23:16:44 +02:00
Tianling Shen
6d28f29464 Merge pull request #21591 from jefferyto/golang-1.19.11-openwrt-22.03
[openwrt-22.03] golang: Update to 1.19.11
2023-07-17 21:18:42 +08:00
Jeffery To
4e911ee6b9 golang: Update to 1.19.11
Includes fix for CVE-2023-29406 (net/http: insufficient sanitization of
Host header).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-07-17 15:32:40 +08:00
Dirk Brenken
c59b975f2f banip: release 0.9.0-1
* supports allowing / blocking of certain VLAN forwards in segregated network environments,
   set 'ban_vlanallow', ''ban_vlanblock' accordingly
* simplified the code/JSON to generate/parse the banIP status
* enclose nft related devices in quotation marks , e.g. to handle devices which starts with a number '10g-1'
* made the new vlan options available to LuCI (separate commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1c14eb6d8c)
2023-07-16 16:33:46 +02:00
Tianling Shen
d31c3263c3 yq: Update to 4.34.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1cb2590c17)
2023-07-16 03:12:49 +08:00
Tianling Shen
3264af5e55 cloudflared: Update to 2023.7.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5e0c715a51)
2023-07-16 03:12:45 +08:00
Michael Heimpold
d29be8f83a Merge pull request #21559 from mhei/22.03-php8-update-to-8.1.21
[22.03] php8: update to 8.1.21
2023-07-14 07:57:36 +02:00
Michael Heimpold
0ed6605f66 php8: update to 8.1.21
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2023-07-12 22:53:59 +02:00
Tianling Shen
ca2469882d rclone: Update to 1.63.0
While at it fixed a typo error of license files variable.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 952844c976)
2023-07-10 21:53:23 +08:00
Tianling Shen
b00b4518e1 rclone: Update to 1.62.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 392a68e247)
2023-07-10 21:53:19 +08:00
Tianling Shen
5d8cb47853 dnsproxy: Update to 0.51.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9cf533dffe)
2023-07-10 21:52:55 +08:00
Dirk Brenken
069b3a1822 banip: update 0.8.9-4
* made the etag id parsing more bulletproof (to catch unverified etags as well)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 5e2a9f082a)
2023-07-09 07:02:51 +02:00
Dirk Brenken
92edb3e8b4 banip: update 0.8.9-3
* prevent superflous etag function calls during start action (on start backups will be used anyway)
* changed the ipthreat feed download URL (load a compressed file variant to save bandwidth)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 88e64a2ae4)
2023-07-08 22:09:25 +02:00
Dirk Brenken
5b806c5c7f banip: update 0.8.9-2
* fix a corner case backup issue with empty feed downloads

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 137045faa9)
2023-07-08 22:09:16 +02:00
Dirk Brenken
1691664f82 banip: release 0.8.9-1
* added HTTP ETag or entity tag support to download only ressources that have been updated on the server side,
  to save bandwith and speed up banIP reloads
* added 4 new feeds: binarydefense, bruteforceblock, etcompromised, ipblackhole (see readme)
* updated the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 68cdc3952d)
2023-07-08 22:09:03 +02:00
Tianling Shen
f0ef3925d4 dnslookup: Update to 1.9.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 65c9414e16)
2023-07-05 19:22:27 +08:00
Dirk Brenken
999c5b47a6 adblock: update to 4.1.5-8
* adapt adguard_tracking source changes

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e1fa285f32)
2023-06-30 07:30:51 +02:00
Noah Meyerhans
b660c6e659 bind: bump to 9.18.16
Fixes CVEs:

- CVE-2023-2828: The overmem cleaning process has been improved, to
  prevent the cache from significantly exceeding the configured
  max-cache-size limit.
- CVE-2023-2911: A query that prioritizes stale data over lookup
  triggers a fetch to refresh the stale data in cache. If the fetch is
  aborted for exceeding the recursion quota, it was possible for named
  to enter an infinite callback loop and crash due to stack overflow.

The complete list of changes is available in the upstream release
notes at
https://ftp.isc.org/isc/bind9/cur/9.18/doc/arm/html/notes.html#notes-for-bind-9-18-16

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 9ac79ad469)
2023-06-25 21:30:48 -07:00
Dirk Brenken
1c066e61f4 banip: update 0.8.8-2
* process local lists in strict sequential order to prevent possible race conditions
* support ranges in the IP search, too
* fix some minor search issues

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c3084be415)
2023-06-24 22:28:32 +02:00
Dirk Brenken
6e8e34b95a banip: release 0.8.8-1
* Support MAC-/IPv4/IPv6 ranges in CIDR notation
* Support  concatenation of local MAC addresses with IPv4/IPv6 addresses, e.g. to enforce dhcp assignments (see readme)
* small fixes & cosmetics
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit b9bd6cdb0d)
2023-06-24 22:28:15 +02:00
Dirk Brenken
fac9edfe46 banip: release 0.8.7-1
* Optionally auto-add entire subnets to the blocklist Sets based on an additional RDAP request with the
   monitored suspicious IP, set 'ban_autoblocksubnet' accordingly (disabled by default).
   For more information regarding RDAP see
   https://www.ripe.net/manage-ips-and-asns/db/registration-data-access-protocol-rdap for reference.
* small fixes & cosmetics
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 767d1ec663)
2023-06-24 22:27:56 +02:00
Hirokazu MORIKAWA
e061716ae0 c-ares: bump to 1.19.1
This is a security and bugfix release.

Security
o CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
o CVE-2023-31147. Moderate. Insufficient randomness in generation of DNS
query IDs
o CVE-2023-31130. Moderate. Buffer Underwrite in ares_inet_net_pton()
o CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE during cross
compilation

Fixing libcares.pc
 The pkg-config file libcares.pc in version 1.19.1 has been changed to be unsuitable for OpenWrt
 and causes build errors with Openwrt packages that use libcares.
 For this reason, libcares.pc was replaced.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 4c4d3b9001)
2023-06-22 22:26:17 +08:00
Tianling Shen
3d45b0e2c4 cloudflared: Update to 2023.6.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1aa41e92ac)
2023-06-22 01:43:27 +08:00
Tianling Shen
1b1edcc253 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e4a22284cb)
2023-06-22 01:43:27 +08:00
Tianling Shen
40fe28ce21 xray-core: update to 1.8.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c912e2bced)
2023-06-22 01:43:26 +08:00
Tianling Shen
33621d873d cloudflared: Update to 2023.6.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 194cf52a82)
2023-06-22 01:43:26 +08:00
Scott McKenzie
57677dc651 cloudflared: support setting tunnel token
Allows user to provide a token for Cloudflare tunnel.
When provided along with credentials, this will take precedence.

Signed-off-by: Scott McKenzie <scott@noizyland.net>
(cherry picked from commit 61106a8df2)
2023-06-22 01:43:23 +08:00
Hirokazu MORIKAWA
5657f77c09 node: June 20 2023 Security Releases
Update to v16.20.1

The following CVEs are fixed in this release:
* CVE-2023-30581: mainModule.__proto__ Bypass Experimental Policy Mechanism (High)
* CVE-2023-30585: Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium)
* CVE-2023-30588: Process interuption due to invalid Public Key information in x509 certificates (Medium)
* CVE-2023-30589: HTTP Request Smuggling via Empty headers separated by CR (Medium)
* CVE-2023-30590: DiffieHellman does not generate keys after setting a private key (Medium)

* OpenSSL Security Releases  (Depends on shared library provided by OpenWrt)
    * OpenSSL security advisory 28th March.
    * OpenSSL security advisory 20th April.
    * OpenSSL security advisory 30th May

* c-ares vulnerabilities:  (Depends on shared library provided by OpenWrt)
    * GHSA-9g78-jv2r-p7vc
    * GHSA-8r8p-23f3-64c2
    * GHSA-54xr-f67r-4pc4
    * GHSA-x6mf-cxr9-8q6v

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2023-06-21 20:48:54 +08:00
ValdikSS ValdikSS
129b7c367c nmap: fix ncat proxy mode with upstream patches
ncat utility from nmap package has a bug in 7.90 and 7.91 version which
prevent it from working via proxy.

Signed-off-by: ValdikSS ValdikSS <iam@valdikss.org.ru>
2023-06-20 17:00:42 +01:00
Stan Grishin
506ac7a6c3 Merge pull request #21412 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: update to 2023-05-25-2
2023-06-20 09:58:09 -06:00
Stan Grishin
23d6768487 Merge pull request #21283 from stangri/openwrt-22.03-curl
[22.03] curl: update to 8.1.2
2023-06-19 20:59:57 -06:00
Stan Grishin
82a01e3c8c https-dns-proxy: update to 2023-05-25-2
bugfix: proper mdns object creation
bugfix: prevent fw errors by allowing custom interfaces in config

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit a31640ac7c)
2023-06-20 02:10:16 +00:00
Robert Marko
516e306650 mhz: add new package
mhz is a tool for mathematically calculating the current CPU frequency, it
has proven to be a really good help while developing CPU frequency scaling
solutions as it allows to independently prove that scaling actually works.

Now that the author has added a license we can package it for the all to
use.

Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit 89123b308f)
2023-06-18 08:44:27 +02:00
Michael Heimpold
1dbd21eb94 Merge pull request #21382 from mhei/22.03-php8-update-to-8.1.20
[22.03] php8: update to 8.1.20
2023-06-16 08:07:26 +02:00
Michael Heimpold
65bc480e85 php8: update to 8.1.20
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2023-06-15 21:24:26 +02:00
Tianling Shen
52c11cf2ff cloudreve: Update to 3.8.0
- Fixed packing web frontend assets
- Enabled build for riscv64

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 27e6796a83)
[removed unavailable riscv64 from supported arches]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-06-14 13:52:11 +08:00
Tianling Shen
dc647cc8a4 dnsproxy: Update to 0.50.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit eda669c819)
2023-06-14 13:51:45 +08:00
Tianling Shen
f482e5d97c Merge pull request #21346 from jefferyto/python-3.10.12-openwrt-22.03
[openwrt-22.03] python3: Update to 3.10.12
2023-06-13 11:00:35 +08:00
Nick Hainke
3580c81aa5 tunneldigger: add package for establishing L2TPv3 tunnels over UDP
In the previous commit we already added tunneldigger-broker. Add the
corresponding client.

This PR is just a refactoring of the already existing opkg package from
wlanslovenija [0].

[0] - https://github.com/wlanslovenija/firmware-packages-opkg/tree/master/net/tunneldigger

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit bd2b4f311a)
2023-06-12 16:57:55 +02:00
Nick Hainke
43a6898165 tunneldigger-broker: add broker for tunneldigger
In mesh communities, tunneldigger is widely used to create L2TPv3 tunnels
and mesh via them. Since the broker is typically installed on other
distributions, the openwrt broker package has not received any
maintenance in recent years [0]. I  take now care of the further maintaince
of this package. Furthermore, I consulted with the maintainers to ensure
that they were comfortable with the change [1].

This PR is just a refactoring of the already existing opkg package from
wlanslovenija. It fixes config parsing and in general the config, adapts
to the new python syntax and fixes dependency handling.

- [0] https://github.com/wlanslovenija/firmware-packages-opkg/tree/master/net/tunneldigger-broker
- [1] https://github.com/wlanslovenija/firmware-packages-opkg/issues/24

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 8298ce8234)
2023-06-12 16:57:55 +02:00
Tianling Shen
4d295277b1 Merge pull request #21343 from jefferyto/golang-1.19.10-openwrt-22.03
[openwrt-22.03] golang: Update to 1.19.10
2023-06-12 18:21:13 +08:00
Jeffery To
4d2aad0995 python3: Update to 3.10.12
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-06-12 15:17:41 +08:00
Jeffery To
a452cf0343 golang: Update to 1.19.10
Includes fixes for:

* CVE-2023-29402: cmd/go: cgo code injection
* CVE-2023-29403: runtime: unexpected behavior of setuid/setgid binaries
* CVE-2023-29404: cmd/go: improper sanitization of LDFLAGS
* CVE-2023-29405: cmd/go: improper sanitization of LDFLAGS

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-06-12 12:25:43 +08:00
Hirokazu MORIKAWA
9bc26cef1a avahi: Import patches for security fixes
Imported patches included in debian and other package.

* 200-Fix-NULL-pointer-crashes-from-175.patch
  CVE-2021-3502
   A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this vulnerability is to the service availability.

* 201-Avoid-infinite-loop-in-avahi-daemon-by-handling-HUP-event.patch
  CVE-2021-3468
   A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service, which becomes unresponsive after this flaw is triggered.

* 202-avahi_dns_packet_consume_uint32-fix-potential-undefined-b.patch
   avahi_dns_packet_consume_uint32 left shifts uint8_t values by 8, 16 and 24 bits to combine them into a 32-bit value. This produces an undefined behavior warning with gcc -fsanitize when fed input values of 128 or 255 however in testing no actual unexpected behavior occurs in practice and the 32-bit uint32_t is always correctly produced as the final value is immediately stored into a uint32_t and the compiler appears to handle this "correctly".
Cast the intermediate values to uint32_t to prevent this warning and ensure the intended result is explicit.

* 203-Do-not-disable-timeout-cleanup-on-watch-cleanup.patch
   This was causing timeouts to never be removed from the linked list that tracks them, resulting in both memory and CPU usage to grow larger over time.

* 204-Emit-error-if-requested-service-is-not-found.patch
   It currently just crashes instead of replying with error. Check return
value and emit error instead of passing NULL pointer to reply.

* 205-conf-file-line-lengths.patch
   Allow avahi-daemon.conf file to have lines longer than 256 characters (new limit 1024).

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 779af4d40c)
2023-06-10 15:27:10 +08:00
Toke Høiland-Jørgensen
10a27f92ae net/acme: Bump acme.sh to v3.0.6
Important security fix.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2023-06-09 19:57:03 +02:00
S. Brusch
76c19152fb crowdsec: new upstream release version 1.5.2
Update crowdsec to latest upstream release version 1.5.2

Signed-off-by: S. Brusch <ne20002@gmx.ch>

Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: ipq40xx/generic, Fritzbox 4040, Openwrt 22.03.5

Description: update to latest version of upstream
(cherry picked from commit 1813bf2c6e)
2023-06-09 09:41:13 +08:00
Stan Grishin
31c32b5228 curl: update to 8.1.2
* https://curl.se/changes.html#8_1_2

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 5afd8e088a)
2023-06-05 19:39:15 +00:00
Dengfeng Liu
ba197b2549 xfrpc: update to 2.6.633
support socks5

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
2023-06-05 01:02:11 +08:00
Maxim Storchak
82f6aa5a21 collectd: enable AllPortsSummary for tcpconns plugin
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
(cherry picked from commit 8270bd173e)
[remove AUTORELEASE at the same time]
2023-06-02 17:53:18 +03:00
Tianling Shen
7c4ce83613 dnsproxy: Update to 0.49.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d717bace8d)
2023-06-02 21:18:20 +08:00
Tianling Shen
7dd3897220 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 56de9f91fd)
2023-06-02 21:17:54 +08:00
Tianling Shen
665a08f6b8 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b8d7376411)
2023-06-02 21:17:50 +08:00
Tianling Shen
3a372dec63 yq: Update to 4.34.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2ecf76e27d)
2023-06-02 21:17:24 +08:00
Tianling Shen
f6d0fc339c v2ray-core: Update to 5.7.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b95ec1db56)
2023-06-02 21:17:24 +08:00
Tianling Shen
c0af419624 cloudflared: Update to 2023.5.1
Fixed build issue with Go 1.20.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0625f038b3)
2023-06-02 21:17:24 +08:00
Dengfeng Liu
f98da3b6fc apfree-wifidog: Update to 6.02.1939
1. support fw4
2. support openssl3.0

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
2023-06-02 12:39:44 +08:00
Stan Grishin
5d1c4522d9 Merge pull request #21204 from stangri/openwrt-22.03-curl-8.1.1
[22.03] curl: update to 8.1.1
2023-05-31 11:38:23 -06:00
Glenn Strauss
5433c7f0bb lighttpd: update to lighttpd 1.4.71 release hash
remove patches included upstream

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 19291ee195)
2023-05-28 15:42:56 +03:00
Stan Grishin
8679706e27 curl: update to 8.1.1
* https://curl.se/changes.html#8_1_1

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit b126e765cc)
2023-05-28 04:53:37 +00:00
Alexandru Ardelean
49a7b86bef Merge pull request #21156 from jefferyto/python-3.10.11-openwrt-22.03
[openwrt-22.03] python3: Update to 3.10.11, refresh/restore patches; cherry pick fixes
2023-05-27 21:16:35 +03:00
Stan Grishin
8c30ba5de0 Merge pull request #21146 from stangri/openwrt-22.03-curl
[22.03] curl: update to 8.1.0
2023-05-27 00:46:07 -06:00
Alexandru Ardelean
e3b4c4fc1a Merge pull request #21178 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: update to 2023-05-25-1
2023-05-27 09:26:54 +03:00
Stan Grishin
dcaeabbcc0 https-dns-proxy: update to 2023-05-25-1
* update to a new upstream commit, fixes #19366
* update patches/010-cmakelists-remove-cflags.patch as upstream file was update
* remove patches/020-cmakelists-add-version.patch as version is now set elsewhere
* add patches/020-src-options.c-add-version.patch to set the version information
* adjust PROCD START time to 95

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit eb40aa1b5d)
2023-05-26 08:33:29 +00:00
Jeffery To
6601f014e4 python3: Update to 3.10.11, refresh/restore patches
This also restores (and updates) a patch for pip that was removed
earlier but is still necessary.

Fixes: 7a756db002 ("python3: bump to version 3.10.9")
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-24 16:49:03 +08:00
Jeffery To
5e46567c39 python3: Fix hashlib module not compiled for host Python
This updates 026-openssl-feature-flags.patch with a newer version from
OpenBSD[1].

This also adds 029-no-FIPS_mode.patch to patch out a call to
FIPS_mode(). LibreSSL 3.4 does not have a function definition for
FIPS_mode.

[1]: 26a04435bf/lang/python/3.10/patches/patch-Modules__hashopenssl_c

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-24 16:47:52 +08:00
Jeffery To
aa2102f70d python3: Fix uuid module not compiled for host Python
This adds $(STAGING_DIR_HOST)/include/e2fsprogs to HOST_CFLAGS and
HOST_CPPFLAGS so that configure can find uuid/uuid.h.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 44fb4927f1,
adjusted PKG_RELEASE)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-24 13:59:49 +08:00
Jeffery To
43bd87954c python3: Fix multiarch/local paths added when building host Python
By default, the Python build process will add /usr/local/{lib,include},
and multiarch paths (e.g. /usr/{lib,include}/x86_64-linux-gnu) if
building on Debian/Ubuntu, to its library and includes paths.

006-remove-multi-arch-and-local-paths.patch was added in
84202f17e1 to stop the Python build
process from adding these paths.

006-remove-multi-arch-and-local-paths.patch was removed in
48277ec915.

006-do-not-add-multiarch-paths-when-cross-compiling.patch was added in
0c8b0b0bf7 to stop the Python build
process from adding these paths for target Python.

These paths are still added by the Python build process when building
host Python.

This replaces the cross-compiling-only patch with the original patch,
renamed slightly and adapted for Python 3.10.

Fixes: 48277ec915 ("python3: bump to version 3.8")
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit f006d0ea23,
adjusted PKG_RELEASE)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-24 13:59:48 +08:00
Jeffery To
9c5eb22fde python3: Fix race condition when doing parallel builds
When doing parallel builds, host Python can install the python3 symlink
before the Python standard library is installed completely.

When this occurs, it is possible for other packages to detect the
python3 symlink and try to use host Python before it is fully installed.

This adds a patch to make commoninstall (where the standard library is
installed) a prerequisite of bininstall (where the python3 symlink is
installed), so that commoninstall is fully completed before bininstall
begins.

Patch has been submitted upstream:
https://github.com/python/cpython/pull/104693

Fixes: https://github.com/openwrt/packages/issues/19241

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 67e47f1196)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-24 13:59:48 +08:00
Jeffery To
8388941fde python3: Fix readelf program name not replaced in _sysconfigdata.py
The Makefile lines to add READELF to TARGET_CONFIGURE_OPTS was removed
in 4e05541782.

Without setting READELF, configure finds the symlink to
$(TARGET_CROSS)readelf (e.g. arm-openwrt-linux-readelf) instead of
$(TARGET_CROSS)readelf (e.g. arm-openwrt-linux-muslgnueabi-readelf).

This leads to the symlink name being saved to _sysconfigdata.py, and so
the readelf name is not replaced correctly (in
Py3Package/python3-base/install).

This restores the removed Makefile lines.

Fixes: 4e05541782 ("python3: bump to version 3.10.0")
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit e1a9578635,
adjusted PKG_RELEASE)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-24 13:59:48 +08:00
Jeffery To
f5dc45c3ab python3: Fix __pycache__ files included in python3-light
003-do-not-run-distutils-tests.patch was removed in
4e05541782. This patch stopped "make
install" from, among other things, running compileall.

When this patch was removed, "make install" ran compileall as normal and
created bytecode files in __pycache__ directories. These files were then
packaged in python3-light.

This adds a patch to stop compileall from being run during "make
install".

Fixes: 4e05541782 ("python3: bump to version 3.10.0")
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8a4da01790,
adjusted PKG_RELEASE, refreshed patches)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-24 13:59:36 +08:00
Jeffery To
1e800488ae python3: Remove --without-pymalloc
--without-pymalloc was added in 7bf1ae65a8
because leaving it enabled added an "m" flag/suffix to file names.

This flag/suffix was removed in Python 3.8[1], so disabling pymalloc is
no longer necessary.

[1]: https://docs.python.org/3.8/whatsnew/3.8.html#build-and-c-api-changes

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 3032e7063f,
adjusted PKG_RELEASE)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-24 13:59:19 +08:00
Rosen Penev
c325b04560 python3: use tools/expat for host build
Oversight from when the expat host build was removed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d09844e395)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-24 13:01:48 +08:00
Stan Grishin
548db9a73d curl: update to 8.1.0
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit b2904dff93e805c1d72407ff765fe17a68046e86)
2023-05-23 18:05:35 +00:00
Ray Wang
4374d87c8c natmap: add myself to maintainers
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit c2ed86d59f)
2023-05-20 14:25:21 +08:00
Ray Wang
7a35a3d489 natmap: update to 20230519
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit ad612d813c)
2023-05-20 14:25:21 +08:00
Rafał Miłecki
a9bfaee23e wsdd2: fix stopping service
Function start_service() is called whenever service may need reloading.
If SMB server is not running it could be simply because it has been
stopped. Reloading service in such case is not an error so:
1. Don't log error as it isn't one
2. Don't exit with error code as it was confusing procd

This change fixes scenario like:
/etc/init.d/ksmbd stop
/etc/init.d/wsdd2 reload
(previously above wasn't stopping wsdd2)

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(cherry picked from commit 6020ca52bf)
2023-05-19 16:37:31 +02:00
Li Zhang
c827e9eef3 wsdd2: Remove extra comma, which breaks the key-value pair of the '-b' parameter
Signed-off-by: Li Zhang <starsunyzl@gmail.com>
(cherry picked from commit 5fc06d939f)
2023-05-19 16:37:14 +02:00
Rafał Miłecki
20d9cf4bc2 lxc: set RUNTIME_PATH define to the /var/run path
The default runtime directory used by LXC is /run which doesn't exist
in OpenWrt. It causes errors like:

Failed to create lock for foo
lxc-create: foo: tools/lxc_create.c: main: 260 Failed to create lxc container

There has been workaround for that in the lxc-auto.init but it requires
installing "lxc-auto" package. Replacing that "ln -s" workaround with
Makefile specifying RUNTIME_PATH define allows using pure "lxc" in
OpenWrt (without the "lxc-auto").

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(cherry picked from commit 90fef036fe)
2023-05-19 12:40:00 +02:00
John Audia
cf242774f7 lxc: update to 5.0.2
Bump to latest upstream release.

Removed upstreamed patches:
	001-build-detect-where-struct-mount_attr-is-declared.patch[1]
	002-build-detect-sys-pidfd.h-availability.patch[2]
	003-build-check-for-FS_CONFIG_-header-symbol-in-sys-moun.patch[3]
	011-tree-wide-wipe-direct-or-indirect-linux-mount.h-incl.patch[4]
	012-tree-wide-use-struct-clone_args-directly.patch[5]
	013-tree-wide-use-struct-open_how-directly.patch[6]

1. b7b269680f
2. e510d6bd87
3. 02f4bd00f5
4. 497479ea3b
5. c9bca33263
6. d1dfce9c59

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 11cac71248)
2023-05-19 12:39:35 +02:00
S. Brusch
6a6b9a2a83 crowdsec: new upstream release version 1.5.1
Update crowdsec to latest upstream release version 1.5.1

Signed-off-by: S. Brusch <ne20002@gmx.ch>

Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: ipq40xx/generic, Fritzbox 4040, Openwrt 22.03.5

Description: update to latest version of upstream

(cherry picked from commit 0c15327f98)
2023-05-19 00:01:53 +08:00
Jan Hák
ebd949f6c0 knot: update to version 3.2.5
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 94512aba16)
2023-05-18 07:24:07 +02:00
Josef Schlehofer
d3c43c3a6c syslog-ng: update to version 4.1.1
- Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.1.1

- Updated version in config

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 7de98324c7)
2023-05-18 07:19:09 +02:00
S. Brusch
5475231cc1 crowdsec-firewall-bouncer: new upstream release version 0.0.27
Update crowdsec-firewall-bouncer to latest upstream release version 0.0.27

Signed-off-by: S. Brusch <ne20002@gmx.ch>

Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: ipq40xx/generic, Fritzbox 4040, Openwrt 22.03.5

(cherry picked from commit fa771eead4)
2023-05-17 22:45:28 +08:00
Dirk Brenken
8900a7cf34 banip: update 0.8.6-2
* fix/rework no-op loop
* small fixes & cosmetics
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit cf4ac0301d)
2023-05-16 12:35:52 +02:00
Glenn Strauss
67112ed519 lighttpd: include mod_h2 in base package
The next version of lighttpd will move HTTP/2 support from the lighttpd
base executable into a separate module: mod_h2

Include patch to do so now, and update packaging to handle it.

HTTP/2 support is enabled by default since lighttpd 1.4.59, but if
HTTP/2 support is explicitly disabled in the configuration, then mod_h2
will not be loaded, thereby reducing lighttpd memory use.

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit f4152fccad)
2023-05-15 02:23:56 +08:00
Glenn Strauss
397fafca3e lighttpd: update to lighttpd 1.4.70 release hash
remove patches included upstream

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 0d5b110077)
2023-05-15 02:23:56 +08:00
Glenn Strauss
2e91c8ddcd lighttpd: adjust packages for built-in modules
(.so is no longer built, but package still contains config files)

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 7fda9563de)
2023-05-15 02:23:56 +08:00
Glenn Strauss
b1f0fee49e lighttpd: fix package DEPENDS syntax
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
Co-authored-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ae5135a913)
2023-05-15 02:23:56 +08:00
Daniel Golle
45e88fc589 pigeonhole: update to version 0.5.20
v0.5.20 2022-12-12  Aki Tuomi <aki.tuomi@open-xchange.com>

    * No changes - release done to keep version numbers synced.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 470c63d1c1)
2023-05-14 18:53:41 +02:00
W. Michael Petullo
5d50b09bbe pigeonhole: update to 0.5.19
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 7316c74177)
2023-05-14 18:53:41 +02:00
Daniel Golle
a3073e93f7 dovecot: update to version 2.3.20
v2.3.20 2022-12-22  Aki Tuomi <aki.tuomi@open-xchange.com>

    + Add dsync_features=no-header-hashes. When this setting is enabled and
      one dsync side doesn't support mail GUIDs (i.e. imapc), there is no
      fallback to using header hashes. Instead, dsync assumes that all mails
      with identical IMAP UIDs contains the same mail contents. This can
      significantly improve dsync performance with some IMAP servers that
      don't support caching Date/Message-ID headers.
    + lua: HTTP client has more settings now, see
      https://doc.dovecot.org/admin_manual/lua/#dovecot.http.client
    + replicator: "doveadm replicator status" command now outputs when the
      next sync is expected for the user.
    - LAYOUT=index: duplicate GUIDs were not cleaned out. Also the list
      recovery was not optimal.
    - auth: Assert crash would occur when iterating multiple userdb
      backends.
    - director: Logging into director using master user with
      auth_master_user_separator character redirected user to a wrong
      backend, unless master_user_separator setting was also set to the same
      value. Merged these into auth_master_user_separator.
    - dsync: Couldn't always fix folder GUID conflicts automatically with
      Maildir format. This resulted in replication repeatedly failing
      with "Remote lost mailbox GUID".
    - dsync: Failed to migrate INBOX when using namespace prefix=INBOX/,
      resulting in "Remote lost mailbox GUID" errors.
    - dsync: INBOX was created too early with namespace prefix=INBOX/,
      resulting a GUID conflict. This may have been resolved automatically,
      but not always.
    - dsync: v2.3.18 regression: Wrong imapc password with dsync caused
      Panic: file lib-event.c: line 506 (event_pop_global):
      assertion failed: (event == current_global_event)
    - imapc: Requesting STATUS for a mailbox with imapc and INDEXPVT
      configured did not return correct (private) unseen counts.
    - lib-dict: Process would crash when committing data to redis without
      dict proxy.
    - lib-mail: Corrupted cached BODYSTRUCTURE caused panic during FETCH.
      Fixes: Panic: file message-part-data.c: line 579 (message_part_is_attachment):
      assertion failed: (data != NULL). v2.3.13 regression.
    - lib-storage: mail_attribute_dict with dict-sql failed when it tried to
      lookup empty dict keys.
    - lib: ioloop-kqueue was missing include breaking some BSD builds.
    - lua-http: Dovecot Lua HTTP client could not resolve DNS names in mail
      processes, because it expected "dns-client" socket to exist in the
      current directory.
    - oauth2: Using %{oauth2:name} variables could cause useless
      introspections.
    - pop3: Sending POP3 command with ':' character caused an assert-crash.
      v2.3.18 regression.
    - replicator: Replication queue had various issues, potentially causing
      replication requests to become stuck.
    - stats: Invalid Prometheus label names were created with specific
      histogram group_by configurations. Prometheus rejected these labels.

v2.3.19.1 2022-06-14  Aki Tuomi <aki.tuomi@open-xchange.com>

    - doveadm deduplicate: Non-duplicate mails were deleted.
      v2.3.19 regression.
    - auth: Crash would occur when iterating multiple backends.
      Fixes: Panic: file userdb-blocking.c:
      line 125 (userdb_blocking_iter_next): assertion failed: (ctx->conn != NULL)

v2.3.19 2022-05-10  Aki Tuomi <aki.tuomi@open-xchange.com>

    + Added mail_user_session_finished event, which is emitted when the mail
      user session is finished (e.g. imap, pop3, lmtp). It also includes
      fields with some process statistics information.
      See https://doc.dovecot.org/admin_manual/list_of_events/ for more
      information.
    + Added process_shutdown_filter setting. When an event matches the filter,
      the process will be shutdown after the current connection(s) have
      finished. This is intended to reduce memory usage of long-running imap
      processes that keep a lot of memory allocated instead of freeing it to
      the OS.
    + auth: Add cache hit indicator to auth passdb/userdb finished events.
      See https://doc.dovecot.org/admin_manual/list_of_events/ for more
      information.
    + doveadm deduplicate: Performance is improved significantly.
    + imapc: COPY commands were sent one mail at a time to the remote IMAP
      server. Now the copying is buffered, so multiple mails can be copied
      with a single COPY command.
    + lib-lua: Add a Lua interface to Dovecot's HTTP client library. See
      https://doc.dovecot.org/admin_manual/lua/ for more information.
    - auth: Cache lookup would use incorrect cache key after username change.
    - auth: Improve handling unexpected LDAP connection errors/hangs.
      Try to fix up these cases by reconnecting to the LDAP server and
      aborting LDAP requests earlier.
    - auth: Process crashed if userdb iteration was attempted while auth-workers
      were already full handling auth requests.
    - auth: db-oauth2: Using %{oauth2:name} variables caused unnecessary
      introspection requests.
    - dict: Timeouts may have been leaked at deinit.
    - director: Ring may have become unstable if a backend's tag was changed.
      It could also have caused director process to crash.
    - doveadm kick: Numeric parameter was treated as IP address.
    - doveadm: Proxying can panic when flushing print output. Fixes
      Panic: file ioloop.c: line 865 (io_loop_destroy): assertion failed:
      (ioloop == current_ioloop).
    - doveadm sync: BROKENCHAR was wrongly changed to '_' character when
      migrating mailboxes. This was set by default to %, so any mailbox
      names containing % characters were modified to "_25".
    - imapc: Copying or moving mails with doveadm to an imapc mailbox could
      have produced "Error: Syncing mailbox '[...]' failed" Errors. The
      operation itself succeeded but attempting to sync the destination
      mailbox failed.
    - imapc: Prevent index log synchronization errors when two or more imapc
      sessions are adding messages to the same mailbox index files, i.e.
      INDEX=MEMORY is not used.
    - indexer: Process was slowly leaking memory for each indexing request.
    - lib-fts: fts header filters caused binary content to be sent to the
      indexer with non-default configuration.
    - doveadm-server: Process could hang in some situations when printing
      output to TCP client, e.g. when printing doveadm sync state.
    - lib-index: dovecot.index.log files were often read and parsed entirely,
      rather than only the parts that were actually necessary. This mainly
      increased CPU usage.
    - lmtp-proxy: Session ID forwarding would cause same session IDs being
      used when delivering same mail to multiple backends.
    - log: Log prefix update may have been lost if log process was busy.
      This could have caused log prefixes to be empty or in some cases
      reused between sessions, i.e. log lines could have been logged for the
      wrong user/session.
    - mail_crypt: Plugin crashes if it's loaded only for some users. Fixes
      Panic: Module context mail_crypt_user_module missing.
    - mail_crypt: When LMTP was delivering mails to both recipients with mail
      encryption enabled and not enabled, the non-encrypted recipients may
      have gotten mails encrypted anyway. This happened when the first
      recipient was encrypted (mail_crypt_save_version=2) and the 2nd
      recipient was not encrypted (mail_crypt_save_version=0).
    - pop3: Session would crash if empty line was sent.
    - stats: HTTP server leaked memory.
    - submission-login: Long credentials, such as OAUTH2 tokens, were refused
      during SASL interactive due to submission server applying line length
      limits.
    - submission-login: When proxying to remote host, authentication was not
      using interactive SASL when logging in using long credentials such as
      OAUTH2 tokens. This caused authentication to fail due to line length
      constraints in SMTP protocol.
    - submission: Terminating the client connection with QUIT command after
      mail transaction is started with MAIL command and before it is
      finished with DATA/BDAT can cause a segfault crash.
    - virtual: doveadm search queries with mailbox-guid as the only parameter
      crashes: Panic: file virtual-search.c: line 77 (virtual_search_get_records):
      assertion failed: (result != 0)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit a1648fbd1c)
2023-05-14 18:53:41 +02:00
Juan del Bosque
4c8d58532f dovecot: Fix iconv macro is missing compile error
Fix a Dovecot compile error when building with no other packages than
the default in master build, because iconv macro is missing.

Fixes: #20677

Signed-off-by: Juan del Bosque <juan@web64.pro>
(cherry picked from commit 96145db78a)
2023-05-14 18:53:41 +02:00
Stan Grishin
697556f54d Merge pull request #20992 from stangri/openwrt-22.03-pbr
[22.03] pbr: bugfix: create IPv6 routes
2023-05-14 08:55:50 -06:00
Stepan Henek
eda90a56ed python-eventlet: bump to version 0.33.3
old eventlet is not working well with python3.10

```
root@turris:~# python3
Python 3.10.9 (main, Feb  9 2023, 10:37:45) [GCC 11.2.0] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> import eventlet
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/__init__.py", line 17, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/convenience.py", line 7, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/green/socket.py", line 4, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/green/_socket_nodns.py", line 11, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/greenio/__init__.py", line 3, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/greenio/base.py", line 32, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/timeout.py", line 166, in wrap_is_timeout
TypeError: cannot set 'is_timeout' attribute of immutable type 'TimeoutError'
```

see 0.33.3 release notes for details - https://eventlet.net/doc/changelog.html#id1

Signed-off-by: Stepan Henek <stepan.henek@nic.cz>
(cherry picked from commit eb7275402e)
2023-05-14 10:58:49 +02:00
Michael Heimpold
f557e9fcd4 Merge pull request #21004 from mhei/libxml2-update-to-2.10.4
[22.03] libxml2: update to 2.10.4
2023-05-14 09:41:19 +02:00
Michael Heimpold
af9503372e libxml2: update to 2.10.4
This fixes:
    - CVE-2023-29469
    - CVE-2023-28484

Full changelog:
https://download.gnome.org/sources/libxml2/2.10/libxml2-2.10.4.news

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2023-05-13 09:40:02 +02:00
Dirk Brenken
c553a14528 banip: release 0.8.6-1
* made the fetch utility function/autodetection more bullet proof
* no longer add suspicious IPs to the local blocklist when the nft set timeout has been set
* restructure internal functions & small fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 4920d96df0)
2023-05-13 06:31:03 +02:00
Stan Grishin
70039d4e52 pbr: bugfix: create IPv6 routes
* add missing space in str_contains
* unquote variable to make sure IPv6 rotues are added
* add IPv6 routes display to status output in nft mode

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 643e501c8d)
2023-05-11 23:09:38 +00:00
Nick Hainke
061752900d libreswan: update to 4.10
Release Notes:
https://github.com/libreswan/libreswan/releases/tag/v4.10

Fixes: CVE-2023-23009
Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 130e63931f)
2023-05-09 17:32:19 +02:00
Lucian Cristian
89ea7f04a4 libreswan: update to 4.9
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit a707fcc88d)
2023-05-09 17:32:19 +02:00
S. Brusch
0b40ebb3e8 crowdsec-firewall-bouncer: new upstream release version 0.0.26
Signed-off-by: S. Brusch <ne20002@gmx.ch>

Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: ipq40xx/generic, Fritzbox 4040, Openwrt 22.03.5

Update crowdsec-firewall-bouncer to latest upstream release version 0.0.26

(cherry picked from commit 05bc30fbb2)
2023-05-09 17:46:26 +08:00
Stan Grishin
e4fc099daa Merge pull request #20945 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: fixes/improvements
2023-05-08 19:45:04 -06:00
Stan Grishin
608e1f2b22 Merge pull request #20943 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: add family to firewall json objects
2023-05-08 19:44:53 -06:00
Stan Grishin
bd421b00bf Merge pull request #20931 from stangri/openwrt-22.03-pbr
[22.03] pbr: ipv6 & migration bugfixes
2023-05-08 19:41:36 -06:00
Jeffery To
85a9e0964c golang: Update to 1.19.9
Includes fixes for:
* CVE-2023-24539: html/template: improper sanitization of CSS values
* CVE-2023-24540: html/template: improper handling of JavaScript
  whitespace
* CVE-2023-29400: html/template: improper handling of empty HTML
  attributes

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-08 18:16:40 +02:00
Anna Tikhomirova
55eed17612 mwan3: bump PKG_VERSION to 2.11.7
Signed-off-by: Anna Tikhomirova <vamp@vampik.ru>
(cherry picked from commit bc2c6e63ee)
2023-05-08 09:55:21 +02:00
Florian Eckert
675bd01a13 mwan3: reset score to up+down on connected
Set the score value to the maximum value when the connected function is
called. The same happens with a disconnected event, the score value is
there set to zero.

Suggested-by: Anna Tikhomirova <vamp@vampik.ru>
Suggested-by: Maxim Mikityanskiy <maxtram95@gmail.com>
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 5f0461be8b)
2023-05-08 09:55:10 +02:00
Florian Eckert
3c9ad7df77 mwan3: refactoring mwan3track action handling
Refactoring the score handling, so that only one action could take place
during run. The behaviour should be more comprehensible, since several
score actions are not processed at the same time.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 1f6bd672fe)
2023-05-08 09:54:59 +02:00
Dirk Brenken
ce66eecb69 banip: release 0.8.5-2
* fixed a log parser regression introduced in latest 0.8.4 update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit f3054a90ea)
2023-05-08 09:18:05 +02:00
Dirk Brenken
d63f0e8596 banip: release 0.8.5-1
* add support for external allowlist URLs to reference additional IPv4/IPv6 feeds, set 'ban_allowurl' accordingly
* make download retries in case of an error configurable, set 'ban_fetchretry' accordingly (default 5)
* small fixes
* readme update
* LuCI update (separate commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7ac5f0a3d9)
2023-05-08 09:17:54 +02:00
Tianling Shen
7af20d4840 cloudflared: Update to 2023.5.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4bd7befa6a)
2023-05-07 17:34:24 +08:00
Stan Grishin
d9bffce114 https-dns-proxy: fixes/improvements
* use shared memory to store output data
* add family option to firewall json objects, due to reports that IPv6 hijacking
  doesn't work without explicit family declaration

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 25801ddf74)
2023-05-07 02:57:35 +00:00
Stan Grishin
a080da667f simple-adblock: add family to firewall json objects
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 0b84504670)
2023-05-07 02:33:12 +00:00
Stan Grishin
9a87df7dd1 pbr: ipv6 & migration bugfixes
* suppress RTNETLINK errors when inserting ipv6 routes
* only display global scope IPv6 gateways in status/WebUI
* stop and disable vpn-policy-routing when migrating

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit c2739705b9)
2023-05-05 01:52:18 +00:00
Stan Grishin
d20bc52bfb Merge pull request #20913 from stangri/openwrt-22.03-pbr
[22.03] pbr: update to 1.1.1-1
2023-05-04 19:41:18 -06:00
Dirk Brenken
20d99ef7bc banip: update 0.8.4-5
* fix remaining small issues
* standardize log wording
* polished up for branch 23.x

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7e70de77d0)
2023-05-04 22:44:45 +02:00
Hannu Nyman
8d9c17e913 zoneinfo: adjust to current timezone data file structure
Tweak the package to better match the current file structure in the
upstream time zone database. Add missing aliases. Make some clarifications

* Combine -northmerica and -southamerica into -america, as all
  current official America/xxx definitions were already in -northamerica
  and only the unofficial/deprecated Brazil/xxx, Chile and Argentina were
  in -southamerica. (Confusingly America/Sao_Paulo was in northamerica,
  while Brazil was in southamerica.)
  * Add PROVIDES for the old package names

* Add missing top-level dir country/nation alias links.
* Define Eire in -europe instead of -core.

* Rename -india to -indian, as it contains the Indian ocean islands
  instead of the actual Asia/Kolkata zone for the mainland India.
  * Add PROVIDES for the old package name

* Add 'Ocean' to all ocean zone titles.

* Make all zoneinfo-packages depend on zoneinfo-core, so that zone.tab,
  the UTC based definitions and the still existing short zone codes are
  always available.

* Clarify menuconfig menu as "Time Zone info"

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit b7b1fe6cb3)
2023-05-04 17:21:48 +03:00
Tianling Shen
2e667a1f8c sqlite3: Update to 3.41.2
Fixes: CVE-2021-20227

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f1e33826fb)
2023-05-04 20:11:29 +08:00
Dirk Brenken
726e945272 banip: update 0.8.4-4
* add housekeeping to the autoallow function, only the current uplink will be held
* fix small issues
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 97d6c8bf77)
2023-05-04 12:09:23 +02:00
Dirk Brenken
bb8efb657a banip: update 0.8.4-3
* add the option 'ban_autoallowuplink' to limit the uplink autoallow function: 'subnet' (default), 'ip' or 'disable'

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 829a9a61c2)
2023-05-04 12:09:13 +02:00
Anna Tikhomirova
02b6973b03 mwan3: bump PKG_VERSION to 2.11.6
Signed-off-by: Anna Tikhomirova <vamp@vampik.ru>
(cherry picked from commit d079652396)
2023-05-04 12:05:34 +02:00
Anna Tikhomirova
3b80d11e2b mwan3: fix addition of routes to mwan3_connected ipset
Addition of routes to mwan3_connected ipset is broken. The ipset name was
changed from mwan3_connected_v4/6 to mwan3_connected_ipv4/6, but this
change was not reflected in mwan3rtmon.

Signed-off-by: Anna Tikhomirova <vamp@vampik.ru>
* Update commit message
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 84b3de9eda)
2023-05-04 12:05:22 +02:00
Li Xin
aa68fc4cb3 shadowsocks-libev: ss-rules: Add 'auto-merge' flag to avoid conflicts
Link: https://github.com/openwrt/packages/pull/19872
Signed-off-by: Li Xin <i@crzidea.com>
(squash commits)
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 8966f49f9a)
2023-05-04 18:02:23 +08:00
Anna Tikhomirova
7398724ec5 mwan3: bump PKG_VERSION to 2.11.5
Signed-off-by: Anna Tikhomirova <vamp@vampik.ru>
(cherry picked from commit fd2e20f66b)
2023-05-04 11:54:12 +02:00
Anna Tikhomirova
4addfcf15d mwan3: fix addition of iptables rules for mwan3 sticky rules
Addition of iptables rules for mwan3 sticky rules is broken, resulting
in non-working sticky rules. The required parameters for the function
'mwan3_set_sticky_iptables' were passed in the wrong order.

Signed-off-by: Anna Tikhomirova <vamp@vampik.ru>
* Update commit message
* Quoting function arguments
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 66257510d9)
2023-05-04 11:54:00 +02:00
Stan Grishin
d8daba4419 Merge pull request #20769 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: implement curl_additional_param compressed_cache_dir
2023-05-01 19:36:05 -06:00
Jeffery To
5f26bba471 slang2: Update to 2.3.3, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 47d67e43bf)
2023-05-01 13:33:11 +03:00
Stan Grishin
3492a48b02 pbr: update to 1.1.1-1
*** MAKEFILE ***
* remove libubus dependency as it was causing issues
  https://forum.openwrt.org/t/policy-based-routing-pbr-package-discussion/140639/318
* move firewall hotplug directory/file creation out of default section into
  pbr and pbr-iptables packages sections in preparation for dropping it from pbr
* fix no new line after output when uninstalling packages

*** UCI-DEFAULTS ***
* only add firewall include to firewall config if the include file exists
* add shellcheck exception to netifd uci-defaults file

*** SCRIPTS ***
* more informative logging for firewall and iface hotplug scripts
* more informative logging for firewall include script

*** SERVICE ***
* introduce lock-file to prevent package starting on external events if it hasn't
  been auto- or manually started before
* use the `ip`, not `ip-full` command to prevent errors on OpenWrt 21.02
* parse firewall WAN zone to append list of interfaces
* append error and warning "arrays" with new messages
* used shared memory to store the service output/logging messages
* improve is_ovpn function to filter out false positives when interface names started
  with `tun`
* introduce is_valid_ovpn to find OpenVPN tunnels where the device name in OpenVPN config
  matches the device name in network config
* introduce opkg_get_version to compare versions of principal and luci packages
* better code to obtain AdGuardHome version with betas installed
* optimize code and add better logging for errors when inserting policies with iptables
* optimize code and add better logging for errors when inserting policies with nft
* bugfix: insert policies in all specified protocols
* bugfix: support using physical devices in policies in nft mode
* bugfix: use iptPrefix, not nftPrefix in iptables commands
* implement Tor support in nft mode
* bugfix: fix spelling for User File Syntax error
* restart service fully (instead of quick reload) for OpenVPN interface events, as
  the order/number of supported interfaces
* more verbose output (showing handles) of status in nft mode
* improve `icmp_interface`, `ignored_interface`, `supported_interface` validation
  regexes
* improve `interface`, validation regex

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit cdfff4a693)
2023-05-01 01:16:41 +00:00
Tianling Shen
1086d4f74d librespeed-go: update file permissions for ujail
This fixes "permission denied" error when access files as a normal user.

Reported-by: Anya Lin <hukk1996@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 42d340bce0)
2023-04-29 14:28:23 +08:00
Dirk Brenken
216261ea4c banip: update 0.8.4-2
* fix domain lookup function (parse banIP config vars)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 16acda2262)
2023-04-28 12:22:40 +02:00
Dirk Brenken
c68388fb65 banip: release 0.8.4-1
* add support for a custom feeds file (/etc/banip/banip.custom.feeds). Add new or edit existing banIP feeds on your own with the integrated custom feed editor (LuCI-component
* add a new option 'ban_blockpolicy' to overrule the default bblock policy (block all chains), see readme for details
* change the feed file format and add a new ipthreat feed, see readme
* refine (debug) logging
* multiple small fixes and improvements
* readme update
* luci update (separate commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c5d9b3ded2)
2023-04-28 12:22:29 +02:00
Josef Schlehofer
d057936acb Merge pull request #20866 from jefferyto/newt-0.52.23-openwrt-22.03
[openwrt-22.03] newt: Update to 0.52.23
2023-04-24 19:25:31 +02:00
Jeffery To
7d7663dc1e newt: Update to 0.52.23
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit ce086321a0)
2023-04-24 16:13:07 +08:00
Josef Schlehofer
4eea17e725 Merge pull request #20843 from jefferyto/obfs4proxy-0.0.14-openwrt-22.03
[openwrt-22.03] obfs4proxy: Update to 0.0.14
2023-04-23 20:57:18 +02:00
Tianling Shen
f64aaa69a8 dnsproxy: Update to 0.49.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9ff57568f5)
2023-04-22 02:49:11 +08:00
Tianling Shen
5d3fc9c5b4 dnsproxy: Update to 0.49.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e43676a92f)
2023-04-22 02:49:08 +08:00
Tianling Shen
bd2cebf655 xray-core: Update to 1.8.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c1019c64ea)
2023-04-22 02:48:30 +08:00
Tianling Shen
f0128ce985 v2ray-core: Update to 5.4.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8674af1b0a)
2023-04-22 02:48:21 +08:00
Jeffery To
4e7f27b21b obfs4proxy: Update to 0.0.14
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0759341cd8)
2023-04-19 12:12:55 +08:00
Stan Grishin
481560db3e Merge pull request #20741 from stangri/openwrt-22.03-curl
[22.03] curl: update to 8.0.1
2023-04-17 21:58:45 -06:00
Michael Heimpold
48df2c7ba6 Merge pull request #20816 from mhei/php8-update-to-8.1.18
[22.03] php8: update to 8.1.18
2023-04-17 06:46:39 +02:00
Luiz Angelo Daros de Luca
8912998223 ruby: update to 3.0.6
This release includes security fixes. Please check the topics below for
details.

- CVE-2023-28755: ReDoS vulnerability in URI
- CVE-2023-28756: ReDoS vulnerability in Time

This release also includes some bug fixes. See the
https://github.com/ruby/ruby/releases/tag/v3_0_6 for further details.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2023-04-15 22:12:58 +02:00
John Audia
93bd5fad31 htop: update to 3.2.2
Build-tested: x86/64
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 3482ea24e4)
2023-04-15 19:34:04 +03:00
Michael Heimpold
698132112f php8: update to 8.1.18
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2023-04-15 15:57:32 +02:00
Jeffery To
7158688679 Merge pull request #20805 from 1715173329/g1198
[openwrt-22.03] golang: Update to 1.19.8
2023-04-14 15:45:00 +08:00
Josef Schlehofer
24c9187841 Merge pull request #20798 from gstrauss/lighttpd-1.4.69-1-openwrt-22.03
lighttpd: update to lighttpd 1.4.69 release hash - backport to openwrt 22.03
2023-04-14 00:50:02 +02:00
Tianling Shen
42b5ae6403 golang: Update to 1.19.8
Included fixes for:
- CVE-2023-24534
- CVE-2023-24536
- CVE-2023-24537
- CVE-2023-24538

Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-04-14 00:35:10 +08:00
Glenn Strauss
be3a2dce98 lighttpd: update to lighttpd 1.4.69 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 8f2fbf093a)
2023-04-12 15:24:03 -04:00
Glenn Strauss
ad2f6fd4c6 lighttpd: remove patch included upstream
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit c5297aca29)
2023-04-12 15:24:03 -04:00
Glenn Strauss
6e07b2816f lighttpd: add lighttpd-mod-webdav_min package
add lighttpd-mod-webdav_min package alternative to lighttpd-mod-webdav

lighttpd-mod-webdav_min is more minimal than full lighttpd-mod-webdav.
lighttpd-mod-webdav_min does not support PROPPATCH, LOCK, UNLOCK, and
by not supporting those methods, removes dependencies on libxml2,
libsqlite3, and libuuid.

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit ed6fe528c1)
2023-04-12 15:24:03 -04:00
Glenn Strauss
e5a1e8befb lighttpd: collect mods now built into lighttpd exe
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 85279b49ce)
2023-04-12 15:24:03 -04:00
Glenn Strauss
9116a58803 lighttpd: fix meson build
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 74d26813f7)
2023-04-12 15:24:03 -04:00
Glenn Strauss
aa6df20e55 lighttpd: remove patch included upstream
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 66001d5a91)
2023-04-12 15:24:03 -04:00
Glenn Strauss
64cdc76c0c lighttpd: update to lighttpd 1.4.68 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 6383ae9407)
2023-04-12 15:24:03 -04:00
Glenn Strauss
0d66dc36c3 lighttpd: modify build cmd for type: feature opts
modify build command for meson type: feature options

remove -Dwith_libev=disabled (option no longer has any effect)

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 4a3b62a92a)
2023-04-12 15:24:03 -04:00
Glenn Strauss
8bcfb64a58 lighttpd: add lighttpd-mod-rrdtool dep on rrdtool1
add lighttpd-mod-rrdtool dependency on rrdtool1

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 9f299e881b)
2023-04-12 15:24:03 -04:00
Glenn Strauss
0c0fd4bbdc lighttpd: lighttpd-1.4.67-4
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit a09dbfcf97)
2023-04-12 15:24:03 -04:00
Glenn Strauss
10c8bee8cd lighttpd: document crypto lib options in Makefile
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 43741e748f)
2023-04-12 15:24:00 -04:00
Tianling Shen
fb17428a1f cloudflared: Update to 2023.4.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 62fdfb8278)
2023-04-13 03:16:47 +08:00
Julien Malik
235acacf0a borgbackup: bump to 1.2.4
Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 45a3afbfb7)
2023-04-13 03:13:45 +08:00
Julien Malik
31f36e5b2d borgbackup: add missing dependencies
The initial package submission was missing
some required and optional dependencies
due to lack of testing on a system without any python
related packages pre-installed.

Some optional but highly recommended dependencies
were discovered with the stdlib module as described in:
392a68e247/lang/python/README.md

Fixes #20441

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 1f25be97b6)
2023-04-13 03:13:38 +08:00
Dirk Brenken
3d12ac7e74 banip: update 0.8.3-2
* more init fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit d178bf5d35)
2023-04-12 19:28:35 +02:00
Dirk Brenken
81a57cdc11 banip: release 0.8.3-1
* add the new init command 'lookup', to lookup the IPs of domain names in the local lists and update them
* significant acceleration of the domain lookup function
* multiple small fixes and improvements
* readme update
* luci update (separate commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c07fae25e7)
2023-04-12 19:28:21 +02:00
Hannu Nyman
d329448c89 Merge pull request #20791 from hnyman/apinger2203
Apinger: backport apinger-rrd and the procd conversion to 22.03
2023-04-12 17:23:48 +03:00
Tianling Shen
9b81bca1b1 v2raya: Update to 2.0.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 23e1348166)
2023-04-11 17:29:28 +08:00
Jaymin Patel
bab4d7ebf8 apinger: add rrd graph support
- add package apinger-rrd for RRD graphs
- add RPC to get an overview and update graphs
- fix interface hotplug to restart apinger instance
- add patch to split alarms list in the status

Signed-off-by: Jaymin Patel <jem.patel@gmail.com>
(cherry picked from commit 4281b7639c)
2023-04-10 21:26:43 +03:00
Jaymin Patel
e5c7e50217 apinger: improve uci and procd support
- convert apinger into procd instances
- generate instance specific apinger.conf from uci
- hotplug handling for apinger alarms
- restart apinger interface instance on ifup action of interface
- don't exit on packet count mismatch, allows to use apinger as monitor
  for multiple targets handling
- add srcip option to target configuration, allows specifying source ip
  used to monitor target
- allow creating status file in script parseable format

Patches are ported against latest version of apinger and referenced from
https://git.pld-linux.org/?p=packages/apinger.git;a=summary

Signed-off-by: Jaymin Patel <jem.patel@gmail.com>
(cherry picked from commit e4e3206f32)
2023-04-10 21:23:25 +03:00
Ryan Shi
87c46fde91 rrdtool: update PKG_SOURCE_URL
Signed-off-by: Ryan Shi <qweaszxcdf@users.noreply.github.com>
(cherry picked from commit 164e0257e7)
2023-04-10 21:13:13 +03:00
Tianling Shen
38cb012973 dnsproxy: Update to 0.48.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 04d5fa8dfc)
2023-04-10 03:47:34 +08:00
Tianling Shen
1fd9cbcf93 yq: Update to 4.33.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0b255830e9)
2023-04-06 18:51:30 +08:00
Hannu Nyman
93b973f514 nano: make nanorc world readable
If file /etc/nanorc is readable by everyone, "default" settings
are available for users as well without necessarily requiring
their own customized .nanorc in their home directory. Or if
they want one, but want it to be based on system's default
nanorc, they can copy it from /etc - without chmodding
file, it is in-accessible for users.

Suggested-by: Oskari Rauta <oskari.rauta@gmail.com>
[switched approach to use INSTALL_DATA]
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 76d02f933f)
2023-04-05 20:47:45 +03:00
Vladimir Ulrich
12bef946fe zoneinfo: updated to the latest release
Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit 23e6200e4d)
(cherry picked from commit 0ff1a8666b)
2023-04-05 20:24:00 +03:00
Stan Grishin
5b7e01ad52 simple-adblock: implement curl_additional_param compressed_cache_dir
* curl_additional_param: to pass additional parameters (like proxy) to curl
* compressed_cache_dir: where to store compressed cache in non-volitile memory

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 549a66bbfa)
2023-04-03 21:26:09 +00:00
Hirokazu MORIKAWA
6306030427 node: bump to v16.20.0
Description:
Update to v16.20.0
Fixed a bug with system-icu.
Fixed a bug when selecting arm-fpu for vfpv3-d16.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2023-04-03 23:58:35 +08:00
Dirk Brenken
391e18067e banip: update to 0.8.2-6
* restored some accidently removed init stuff in last commit

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 692fe359a9)
2023-03-30 20:13:56 +02:00
Dirk Brenken
9748c394d3 banip: update to 0.8.2-5
* fixed missing version number when installed as separate package (not in build)
* fixed cornercase init and mailing issues
* sorted Country list by country names ascending
* fixed some shellcheck findings

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c9bf92c88d)
2023-03-30 18:02:44 +02:00
Tianling Shen
5ae16a7a67 yq: Update to 4.33.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e2cf4fa9a1)
2023-03-30 02:48:25 +08:00
Tianling Shen
e9b65e5d7f dnsproxy: Update to 0.48.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1ac880fb12)
2023-03-30 02:47:56 +08:00
Tianling Shen
7894fd057c dnsproxy: Update to 0.48.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e5395396bd)
2023-03-30 02:47:52 +08:00
Tianling Shen
8a8c51a922 dnsproxy: Update to 0.48.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit dbf66a3ae5)
2023-03-30 02:47:46 +08:00
Ray Wang
b2c3f2d133 natmap: update to 20230322
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit feccbf8612)
2023-03-29 18:33:15 +08:00
Stan Grishin
ec321e666c curl: update to 8.0.1
* https://curl.se/changes.html#8_0_1

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 5640b7c94a)
2023-03-27 23:09:22 +00:00
Dirk Brenken
7852691b80 banip: update to 0.8.2-4
* fixed a race condition if the service is in a disabled state

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 6b1df72e64)
2023-03-26 23:24:33 +02:00
Dirk Brenken
9fb40dbb8b banip: update to 0.8.2-3
* raise max. timeouts from 10 to 30 seconds to stabilize the autodetection on slow hardware
* made interface trigger action configurable, set 'ban_triggeraction' accordingly (default: 'start')
* made E-Mail notifications configurable to receive status E-Mais with every banIP run,
  set 'ban_mailnotification' accordingly (default: disabled)
* small fixes & optimizations
* readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1f5bc3f0f1)
2023-03-26 23:24:11 +02:00
Tianling Shen
33431b63b4 sqlite3: Update to 3.41.1
Removed `SQLITE3_JSON1` option as it was dropped by upstream.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a7dfb006fe)
2023-03-25 23:59:58 +08:00
Dirk Brenken
0d566071c9 adblock: update to 4.1.5-7
* fix cornercase issue with duplicate entries in black- and whitelist
* change cpbl source URL
* firewall redirects now blocks IPv4 and IPv6 (set family to "any")

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit a4b9697684)
2023-03-20 20:34:54 +01:00
Tianling Shen
05262f346a yq: Update to 4.32.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 65dc683efe)
2023-03-21 01:26:04 +08:00
Tianling Shen
245d3479c0 cloudflared: Update to 2023.3.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 67c2619008)
2023-03-21 01:25:54 +08:00
Tianling Shen
bf9bafd2c6 v2raya: Update to 2.0.4
- Added TproxyNotSkipBr flag for OpenWrt.
- Removed all upstreamed patches.
- Removed deprecated option.
- Re-enable ipv6/nftables auto-detect.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5062779dc7)
2023-03-21 01:25:49 +08:00
Dirk Brenken
06d85b2acd Merge pull request #20682 from dibdot/banIP
[22.03] banip: push 0.8.2-2 to stable branch
2023-03-19 19:31:19 +01:00
Dirk Brenken
66816f0f6e banip: push 0.8.2-2 to stable branch
* banIP is now nft/fw4 compatible and has been successfully tested by many 22.03 users.

Signed-off-by: Dirk Brenken <dev@brenken.org>
2023-03-17 18:08:37 +01:00
Florian Eckert
18429da131 Merge pull request #20678 from TDT-AG/pr/20220416-openwrt-22.3-strongswan-cves
strongswan: backport CVE fix
2023-03-17 16:29:51 +01:00
Tianling Shen
07e032ee1b v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4dd80ed519)
2023-03-17 13:19:09 +08:00
Tianling Shen
869e5573c9 xray-core: Update to 1.8.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0e96d2f862)
2023-03-17 13:19:05 +08:00
Florian Eckert
b13728e6af strongswan: add fix for CVE-2022-40617
Full details of the CVE can be found at the following link:
https://www.strongswan.org/blog/2022/10/03/strongswan-vulnerability-(cve-2022-40617).html

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-03-16 14:59:50 +01:00
Josef Schlehofer
2559997353 Merge pull request #20612 from paper42/22-yt-dlp-2023.3.4
[22.03] yt-dlp: update to 2023.3.4
2023-03-16 13:54:00 +01:00
Josef Schlehofer
b3e49d1956 Merge pull request #20675 from jefferyto/golang-1.19.7-openwrt-22.03
[openwrt-22.03] golang: Update to 1.19.7
2023-03-16 09:32:47 +01:00
Michael Heimpold
33734a743f Merge pull request #20666 from mhei/22.03-php8-update-8.1.16
[22.03] php8: update to 8.1.16
2023-03-16 07:30:23 +01:00
Jeffery To
eb4966e545 golang: Update to 1.19.7
Includes fix for CVE-2023-2453 (crypto/elliptic: specific unreduced
P-256 scalars produce incorrect results).

This also includes makefile updates for Go 1.19.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8677ed11e3)
2023-03-16 10:47:59 +08:00
Stijn Tintel
b1f684f01c miniupnpd: bump to 2.3.3
Fixes: #19637
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit f7c0e413f4)
2023-03-15 18:53:38 -07:00
Michael Heimpold
1f1bfff84e php8: update to 8.1.16
This fixes:
    - CVE-2023-0567
    - CVE-2023-0568
    - CVE-2023-0662

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2023-03-14 22:04:59 +01:00
Rosen Penev
fe75545e61 gphoto2: fix compilation with BUILD_NLS
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b90f1b5ad1)
2023-03-12 11:50:52 +01:00
Stan Grishin
dd7e9f5ad7 Merge pull request #20646 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: update init file and config
2023-03-11 15:59:25 -07:00
Stan Grishin
9747a3d67f Merge pull request #20541 from stangri/openwrt-22.03-curl
[22.03] curl: update to 7.88.1
2023-03-11 15:58:32 -07:00
Etienne Champetier
21bf5cc18f Merge pull request #20649 from champtar/mv88e6xxx_dump_update_2203
[22.03] mv88e6xxx_dump: update to 2023.03.08
2023-03-11 20:54:05 +01:00
Etienne Champetier
19347485a9 mv88e6xxx_dump: update to 2023.03.08
This fixes 2 issues where mv88e6xxx_dump was displaying
data incorrectly for --vtu and --global2

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 2bf3832193)
2023-03-11 14:22:35 -05:00
Stan Grishin
ae7dd67aac simple-adblock: update init file and config
* move network.sh and jshn.sh includes into load_validate_config function
  to prevent errors when adding the package to image with the Image Builder
* add @bongochong compressed domains block-list to the config

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 35f4830de7)
2023-03-11 10:49:16 +00:00
S. Brusch
4ee651287e crowdsec: update to 1.4.6
Update crowdsec to latest upstream release version 1.4.6

Signed-off-by: S. Brusch <ne20002@gmx.ch>

Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: ipq40xx/generic, Fritzbox 4040, Openwrt 22.03.3
2023-03-11 13:00:02 +08:00
Van Waholtz
6c78413ed2 frp: update to 0.48.0
Changelog: https://github.com/fatedier/frp/releases/tag/v0.48.0

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 4f8874f636)
2023-03-10 17:15:20 +08:00
Van Waholtz
4ab4523f7c frp: update to 0.47.0
A restart is only required if `$conf_file` has been modified.

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 8fcc48c339)
2023-03-10 17:15:20 +08:00
Tianling Shen
90749ee59e v2raya: switch to use nftables
Backport a pending PR to add nftables support.
Upstream PR: https://github.com/v2rayA/v2rayA/pull/805

As nftables merged ipv4/ipv6 support into a single command, so simply
enable ipv6 support by default.

While at it, backport a upstreamed fix for simple-obfs plugin.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 41987abc84)
2023-03-09 10:45:47 +08:00
Tianling Shen
70bfe06bbe perl-ack: Update to 3.7.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 26b92db22c9a051447ee445acaa11a795fb35a4e)
(cherry picked from commit de085a237a)
2023-03-09 10:45:40 +08:00
Tianling Shen
b53d4f03f3 v2ray-core: Update to 5.4.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d40efc0811)
2023-03-09 10:45:15 +08:00
S. Brusch
acddc2050a crowdsec-firewall-bouncer: update to 0.0.25
Update crowdsec-firewall-bouncer to latest upstream release version 0.0.25

Signed-off-by: S. Brusch <ne20002@gmx.ch>

Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: ipq40xx/generic, Fritzbox 4040, Openwrt 22.03.3

Rework:
- now based on uci config file
- create nftables tables and chains in initd script
2023-03-09 10:42:41 +08:00
Michal Vasilek
3c59f514be yt-dlp: update to 2023.3.4
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 0c22dc099b0943f7423bcb0be6edccb9759cd218)
2023-03-08 12:43:40 +01:00
Christian Lachner
3ea3a06577 haproxy: update to v2.4.22
- Update haproxy download URL and hash
- This release fixes a critial flaw known as CVE-2023-25725. See:
  http://git.haproxy.org/?p=haproxy-2.4.git;a=commit;h=486cd730485c8a119ef65b3f792134b56e7941b4

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2023-03-06 13:19:24 +08:00
Tianling Shen
f06652bc11 v2raya: drop wrong patches
These patches should not be backported to OpenWrt, otherwise tproxy
won't work for devices connected to br-lan (bypassed by the fw rules).

We have introduced a new compile-time flag for new version (which
is not released yet), but it's unnecessray to backport redudant
patches as here is still at the old version.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 40669c4135)
2023-03-05 14:46:43 +08:00
Tianling Shen
b6fab07508 yq: Update to 4.31.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1343bb5856)
2023-03-05 14:46:41 +08:00
Tianling Shen
614680d93b yq: Update to 4.31.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b76bd94605)
2023-03-05 14:46:35 +08:00
Tianling Shen
781be97311 cloudflared: Update to 2023.3.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8e10f5f9a1)
2023-03-05 14:46:12 +08:00
Tianling Shen
889028f860 cloudflared: Update to 2023.2.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b52fdec659)
2023-03-05 14:46:04 +08:00
Alan Swanson
4b630ba72e sed: remove old libpcre dependency
Signed-off-by: Alan Swanson <reiver@improbability.net>
(cherry picked from commit 0a00f0f2a5)
2023-03-02 07:36:46 +01:00
Tianling Shen
3e2c1336a0 msgpack-c: Update to 5.0.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5890d2f2d7)
2023-02-27 10:30:23 +08:00
Tianling Shen
43ae97707a golang: Update to 1.19.6
go1.19.6 (released 2023-02-14) includes security fixes to the
crypto/tls, mime/multipart, net/http, and path/filepath packages,
as well as bug fixes to the go command, the linker, the runtime,
and the crypto/x509, net/http, and time packages.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0cdd7b8c0e)
2023-02-27 10:30:16 +08:00
Stan Grishin
3e3650bc94 curl: add lang/perl-www-curl/patches/230-curl_7.88_compat.patch
* fixes compilation issues from https://github.com/openwrt/packages/pull/20540#issuecomment-1439537287

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2023-02-26 20:04:29 +00:00
Stan Grishin
009b2d005c curl: update to 7.88.1
* https://curl.se/changes.html#7_88_1

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 678bad7e86c51aa96dc2f9336f7ff32b19c6de99)
2023-02-25 21:56:46 +00:00
Hirokazu MORIKAWA
692052b8c0 node: bump to v16.19.1
Thursday February 16 2023 Security Releases

Notable Changes
The following CVEs are fixed in this release:
* CVE-2023-23918: Node.js Permissions policies can be bypassed via process.mainModule (High)
* CVE-2023-23919: Node.js OpenSSL error handling issues in nodejs crypto library (Medium)
* CVE-2023-23936: Fetch API in Node.js did not protect against CRLF injection in host headers (Medium)
* CVE-2023-24807: Regular Expression Denial of Service in Headers in Node.js fetch API (Low)
* CVE-2023-23920: Node.js insecure loading of ICU data through ICU_DATA environment variable (Low)
More detailed information on each of the vulnerabilities can be found in February 2023 Security Releases blog post.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 6cd5a2c57f)
2023-02-25 08:17:45 +08:00
Moritz Warning
2fcba9a46a zerotier: update to 1.10.3
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2023-02-24 16:09:12 -08:00
Michal Vasilek
651c734678 git: update to 2.34.7
Fixes CVE-2023-22490, CVE-2023-23946

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 06f466cc61)
2023-02-23 19:34:29 +01:00
Stan Grishin
be2a7de87d Merge pull request #20555 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: 2022-10-15-11 update
2023-02-22 21:47:43 -07:00
Stan Grishin
656835201b https-dns-proxy: 2022-10-15-11 update
* config file update
* introduce boot() function

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 30aefce999)
2023-02-22 20:39:56 +00:00
Alexandru Ardelean
0a15829d73 Merge pull request #20519 from commodo/django-22.03
[22.03] django: bump to version 4.0.10
2023-02-20 11:10:44 +02:00
Stan Grishin
32b880288a Merge pull request #20533 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: bugfix: ensure directory for jsonFile is created
2023-02-19 19:52:50 -07:00
Tianling Shen
0790a06264 cloudreve: Update to 3.7.1
Dropped architectures that are no longer supported by upstream.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5a9979d243)
2023-02-20 09:48:44 +08:00
Tianling Shen
11780f5974 gg: Update to 0.2.18
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 70009d3586)
2023-02-20 09:48:42 +08:00
Tianling Shen
a4393e6482 dnsproxy: Update to 0.47.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c5c3c2e223)
2023-02-20 09:48:27 +08:00
Dengfeng Liu
2ccdd6d279 kcptun: update to version 20230207
add support for port-range dailer, port-range listener

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
2023-02-20 06:35:15 +08:00
Stan Grishin
48d58b61cc simple-adblock: bugfix: ensure directory for jsonFile is created
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 2bb10d0c2c)
2023-02-19 20:24:21 +00:00
Stan Grishin
0d8122e906 Merge pull request #20524 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: implement procd_boot_wan_timeout support
2023-02-19 13:21:32 -07:00
Stan Grishin
b0050dc7fe simple-adblock: implement procd_boot_wan_timeout support
* implement procd_boot_wan_timeout support
* update config with oisd ABPlus and domains lists

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 587cd4d0d7)
2023-02-19 05:12:25 +00:00
Stan Grishin
127f85151d Merge pull request #20512 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: update to 1.9.4-1
2023-02-18 22:04:23 -07:00
Dirk Brenken
fc70290d50 adblock: update 4.1.5-6
* adapted changed oisd downloads (again), fixed #20516

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0b222b7e10)
2023-02-18 20:18:38 +01:00
Nick Hainke
1e59e5d121 snowflake: update to v2.5.1
Changes in version v2.4.3 - 2023-01-16
- Fix version number in version.go

(Changes for v2.5.1 are missing)

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit ac9027aebb)
2023-02-18 10:07:01 +01:00
Alexandru Ardelean
c13c734e3a django: bump to version 4.0.10
Fixes:
   https://nvd.nist.gov/vuln/detail/CVE-2023-23969

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2023-02-17 19:30:57 +02:00
Hannu Nyman
d3c9e52005 irqbalance: Add upstream fix for AARCH64 irq name parsing
Add upstream fix for AARCH64 irq name parsing.

> On arm64 SoCs like TI's K3 SoC and few other SoCs,
> IRQ names don't get parsed correct due to which they
> end up being classified into wrong class. Fix this by
> considering last token to contain IRQ name always.

The fix seems to enable e.g. RT3200 to notice a few more
interrupts and start balancing them.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 22188b42bd)
2023-02-17 08:05:13 +02:00
Stan Grishin
f38c9e1d27 simple-adblock: update to 1.9.4-1
* update default config for new oisd.nl lists
* conf.update file to migrate oisd.nl lists to the new format
* introduce AdBlockPlus lists support (new oisd.nl format)
* longer wait for WAN up/gateway detection
* make load_environemnt only execute once to suppress duplicate
  warnings/errors

PS. While I was testing this, oisd.nl has brought back the old domains
    lists as well, so this version supports both as I'm unclear as to
    why the "big" ABPlus list is only 6.2Mb where as the "big" domains
    list is whopping 19.9Mb.

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 6c45b40317)
2023-02-16 23:30:18 +00:00
Dirk Brenken
1c0d2ce418 adblock: update 4.1.5-5
* adapted changed oisd namings / download locations
   oisd_big (old: oisd_full), oisd_small (old: oisdb_basic)
* added antipopads as new sources
* removed broken energized source
* fixed readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 51634a960c)
2023-02-15 21:18:23 +01:00
Michael Heimpold
3dbffe64bf Merge pull request #20477 from mhei/22.03-php8-update-8.1.15
[22.03] php8: update to 8.1.15
2023-02-12 15:40:13 +01:00
Tianling Shen
669357351c v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4947b057cf)
2023-02-12 06:13:29 +08:00
Tianling Shen
04af31728e v2ray-core: Update to 5.3.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a9ac85db71)
2023-02-12 06:13:29 +08:00
Tianling Shen
6c13c9363d xray-core: Update to 1.7.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b4c4b17308)
2023-02-12 06:13:29 +08:00
Tianling Shen
bfe92ef867 cloudflared: Update to 2023.2.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c1544f9a5f)
2023-02-12 06:13:01 +08:00
Tianling Shen
ce1d359a78 cloudflared: Update to 2023.1.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit aa700a6b46)
2023-02-12 06:12:55 +08:00
Michael Heimpold
5b8e61edb8 php8: update to 8.1.15
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2023-02-07 07:56:01 +01:00
Stan Grishin
da1dbf4946 Merge pull request #20447 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: update to 1.9.3-7
2023-02-04 22:47:24 -07:00
Tianling Shen
f91f915f0f Merge pull request #20430 from liudf0716/xfrpc
[22.03] xfrpc: add xfrpc to 22.03
2023-02-05 11:40:11 +08:00
Dengfeng Liu
65b1563d03 xfrpc: update to version 2.1.606
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit db243b31c8)
2023-02-05 02:51:50 +00:00
Dengfeng Liu
30b0a36c79 xfrpc: Update to 1.11.587
refactor tcp mux

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 419c434002)
2023-02-05 02:51:50 +00:00
Dengfeng Liu
3f023d5af8 xfrpc: allow server_addr ip and domain
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit a7e3f28c37)
2023-02-05 02:51:50 +00:00
Dengfeng Liu
028345fa94 xfrpc: Update to 1.07.582
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 9fbd26f170)
2023-02-05 02:51:50 +00:00
Dengfeng Liu
9167756cbf xfrpc: update to 1.06.579
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 5615ce33fa)
2023-02-05 02:51:50 +00:00
Dengfeng Liu
ff4c824e23 xfrpc: set xfrpc's disabled default value to 0
change this to satisfy luci-app-xfrpc's need

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 10a24d4cad)
2023-02-05 02:51:50 +00:00
Dengfeng Liu
74ed1a15ae xfrpc: fix bug of xfrpc.init
replace xfrpc with xfrp

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit b3bd24f1af)
2023-02-05 02:51:50 +00:00
Dengfeng Liu
8b80ad3b9e xfrpc: update to 1.05.561
support tcp mux and default to turn it on

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit d4430d2e89)
2023-02-05 02:51:50 +00:00
Dengfeng Liu
b266107c34 xfrpc: Update to 1.05.548
deprecated xfrps, compatible with frps

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 2cb01429b1)
2023-02-05 02:51:50 +00:00
Dengfeng Liu
ef5cacd4e8 xfrpc: fast reverve proxy client in c language
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 9af01c87bf)
2023-02-05 02:51:50 +00:00
Stan Grishin
97c38b456e simple-adblock: update to 1.9.3-7
* add boot() function which waits for network.interface to come up
* switch oisd.nl hosts entry to domains
* remove erroneous oisd substitution from config-update file

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 8c8384611b)
2023-02-04 22:52:40 +00:00
Christian Marangi
a13b1a64de ci: update github actions to v3
Update checkout and upload-artifact action to v3 to mute nodejs
deprecation warning.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 52570d4242)
2023-02-03 20:11:55 +01:00
Jeffery To
7abfee2e8d ci: Use openwrt/gh-action-sdk@v5
The previous build errors with v5 have been fixed. This version builds
packages as a normal user instead of as root.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 37f9b77b01)
2023-02-03 20:11:55 +01:00
ValdikSS ValdikSS
02e95fdef9 autossh: return from instance function, not exit the script
In case of disabled configuration instances in the bottom of
configuration file, enabled instances won't be started as the first
disabled instance would return in init script termination.

Signed-off-by: ValdikSS ValdikSS <iam@valdikss.org.ru>
2023-02-03 10:12:23 -08:00
ValdikSS ValdikSS
76ba437114 autossh: Add dropbear proxy (-J) support
It's not possible to pass quoted string as a single argument
using uci, which makes it impossible to supply proxy string
to dropbear.

Additional option solves this issue.

Signed-off-by: ValdikSS ValdikSS <iam@valdikss.org.ru>
2023-02-03 10:11:41 -08:00
Etienne Champetier
5a47a190b7 Merge pull request #20437 from champtar/22.03_mv88e6xxx_dump
[22.03] mv88e6xxx_dump: add new packages to debug switch issues
2023-02-03 13:49:47 +02:00
Etienne Champetier
09ae01170d mv88e6xxx_dump: add new packages to debug switch issues
Reviewed-by: Chris Healy cphealy@gmail.com
Reviewed-by: Robert Marko <robimarko@gmail.com>
Reviewed-by: Andre Heider <a.heider@gmail.com>
Tested-by: Petr Štetiar <ynezz@true.cz>
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 167c6234d0)
2023-02-03 13:23:20 +02:00
Noah Meyerhans
1497ef515b bind: update to 9.18.11
Fixes CVEs:
      - CVE-2022-3924: Fix serve-stale crash when recursive clients
      soft quota is reached.
      - CVE-2022-3736: Handle RRSIG lookups when serve-stale is
      active.
      - CVE-2022-3094: An UPDATE message flood could cause named to
      exhaust all available memory. This flaw was addressed by adding
      a new "update-quota" statement that controls the number of
      simultaneous UPDATE messages that can be processed or
      forwarded. The default is 100. A stats counter has been added to
      record events when the update quota is exceeded, and the XML and
      JSON statistics version numbers have been updated.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 47fcec43ab)
2023-02-01 23:18:31 +01:00
Olivier Poitrey
4cb3303d51 nextdns: Update to version 1.39.4
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2023-01-28 06:38:17 +08:00
Alexandru Ardelean
33ae68f40e Merge pull request #20386 from commodo/python3-3.10.9-22.03
[22.03] python3: bump to version 3.10.9
2023-01-27 11:48:05 +02:00
Alexandru Ardelean
7a756db002 python3: bump to version 3.10.9
Refresh patches.
Bump setuptools to 65.5.0
Bump pip to 22.3.1
  Removed patch: patches-pip/001-pep517-pyc-fix.patch
  No longer needed as per:
    fa4b2efbab

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2023-01-27 10:57:15 +02:00
Michael Heimpold
e924409c94 Merge pull request #20371 from mhei/22.03-php8-update-8.1.14
[22.03] php8: update to 8.1.14
2023-01-26 07:48:44 +01:00
Stan Grishin
8c13fbdfb7 Merge pull request #20373 from stangri/openwrt-22.03-pbr
[22.03] pbr: bugfix: fix is_domain()
2023-01-23 03:42:42 -07:00
Josef Schlehofer
bcd299d0c1 bash: update to version 5.2.15
Refreshed patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f350e2c2cb)
2023-01-23 09:26:46 +01:00
Stan Grishin
0804660644 pbr: bugfix: fix is_domain()
* fixes https://github.com/openwrt/packages/issues/20352

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit e7e4a013be)
2023-01-22 23:15:34 +00:00
Michael Heimpold
994dbb7850 php8: update to 8.1.14
This fixes:
    - CVE-2022-31631

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2023-01-22 16:16:54 +01:00
Tianling Shen
47fb67e5e2 v2ray-core: Update to 5.2.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5d7eab630c)
2023-01-22 15:23:00 +08:00
Josef Schlehofer
dc39bbef14 atlas-sw-probe: add more binaries
They were added in these commits [1] [2] and if they are not included,
the RIPE Atlas SW Probe does not work correctly.

This should also prevent this from happening in the future as it now. We include all
files with .sh extension file type.

[1] 70ced29fc3
[2] 71a4ff0e68

Fixes: https://github.com/openwrt/packages/issues/20338

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1a368a5409)
2023-01-21 20:47:58 +01:00
Eneas U de Queiroz
73cbdbc82e python-docutils: bump to version 0.19
Package does not currently build because of distutil dependency.  Fix
this by updating to the latest version.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 4a16e5eb8c)
[do not use AUTORELEASE]
2023-01-21 20:46:42 +02:00
Van Waholtz
328e648353 frp: update to 0.46.1
Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 97f478cfe4)
2023-01-21 16:21:23 +02:00
Van Waholtz
02b33536b4 frp: update to 0.46.0
Add `test.sh`.

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit bd02d2e89c3189ac4978b6048a6cae8f475e3ac5)
2023-01-21 16:21:23 +02:00
Hannu Nyman
5ba2c13142 nano: update to 7.2
Update nano editor to version 7.2.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6a3d2386fa)
2023-01-21 12:21:08 +02:00
Michal Vasilek
05844d9092 git: update to 2.34.6
Fixes CVE-2022-23521
Fixes CVE-2022-41903
Fixes CVE-2022-39260
Fixes CVE-2022-39253
Fixes CVE-2022-29187

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 96e8ff604f)
2023-01-19 19:28:13 +01:00
Tianling Shen
b4198d7aca xray-core: Update to 1.7.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 65ccc4c913)
2023-01-18 18:29:19 +08:00
Tianling Shen
057cadb084 yq: Update to 4.30.8
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 99d6d25bb5)
2023-01-18 18:27:06 +08:00
Tianling Shen
1ae5d856c6 yq: Update to 4.30.7
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3c34ef4c99)
2023-01-18 18:27:00 +08:00
Vitalii Koshura
37d658ce6b boinc-wrapper: add new package
Signed-off-by: Vitalii Koshura <lestat.de.lionkur@gmail.com>
(cherry picked from commit 40e144be7d)
2023-01-17 23:59:40 +01:00
Karl Palsson
b31bcb0539 python-requests: update URL
The old 2.python-requests.org URL is not reachable on modern browsers,
and is not the current canonical URL for the project.  Update to the
current best URL for the project.

Signed-off-by: Karl Palsson <karlp@etactica.com>
(cherry picked from commit 4969de2bdf)
2023-01-17 23:55:43 +01:00
Rosen Penev
28d0c75ddf netperf: use git tarball
netperf.org is gone now. Only github is left.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2fa8db3c3c)
2023-01-17 23:55:12 +01:00
Rosen Penev
716c76b1d1 bc: use @DEBIAN
Seems Debian no longer offers ftp.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 08a846c684)
2023-01-17 23:55:05 +01:00
Julien Malik
8e02db2d7b python-exceptiongroup: bump to 1.1.0
Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit f04af1261c)
2023-01-17 23:54:27 +01:00
Julien Malik
d8632f16db borgbackup: bump to 1.2.3
Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 5dffc0af0e)
2023-01-17 23:54:22 +01:00
Nick Hainke
215b235c7c snowflake: update to 2.4.2
Changes in version v2.4.2 - 2023-01-13
- Issue 40208: Enhance help info for capacity flag
- Issue 40232: Update README and fix help output
- Issue 40173: Increase clientIDAddrMapCapacity
- Issue 40177: Manually unlock mutex in ClientMap.SendQueue
- Issue 40177: Have SnowflakeClientConn implement io.WriterTo
- Issue 40179: Reduce turbotunnel queueSize from 2048 to 512
- Issue 40187/40199: Take ownership of buffer in QueuePacketConn QueueIncoming/WriteTo
- Add more tests for URL encoded IPs (safelog)
- Fix server flag name
- Issue 40200: Use multiple parallel KCP state machines in the server
- Add a num-turbotunnel server transport option
- Issue: 40241: Switch default proxy STUN server to stun.l.google.com

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 5435ddb8f8)
2023-01-17 23:54:09 +01:00
ValdikSS ValdikSS
4e9dcb98f0 miredo: add miredo.conf conffile
Keep miredo.conf modified configuration upon upgrades

Signed-off-by: ValdikSS ValdikSS <iam@valdikss.org.ru>
(cherry picked from commit 95acb627f4)
2023-01-17 19:49:39 +02:00
Stan Grishin
f48493b940 Merge pull request #20318 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: update sed for allowing domains
2023-01-16 20:59:32 -07:00
Stan Grishin
d079ff83aa Merge pull request #20336 from stangri/openwrt-22.03-pbr
[22.03] pbr: update to 1.0.1-14
2023-01-16 20:58:10 -07:00
Stan Grishin
9e9eb82405 pbr: update to 1.0.1-14
* improve install/uninstall messages
* fix ips add command
* add boot() to init file

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit f4f899f6f9)
2023-01-17 00:50:49 +00:00
Josef Schlehofer
2417b74fc3 atlas-sw-probe: update to version 5080
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 12fd3cfe1e)
2023-01-16 11:12:53 +01:00
Tianling Shen
18fa44a14c golang: Update to 1.19.5
Go1.19.5 (released 2023-01-10) includes fixes to the compiler,
the linker, and the crypto/x509, net/http, sync/atomic,
and syscall packages.

Removed upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5a25a731c6)
2023-01-16 16:24:47 +08:00
Rosen Penev
e81ff3fcc3 atlas-probe: update to 2.6.3
Switch to git tarballs.

Remove upstreamed patches and add OpenSSL patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3eace67a30)
2023-01-15 13:08:00 +01:00
Stan Grishin
3232bd0495 simple-adblock: update sed for allowing domains
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 4b77f94b53)
2023-01-14 23:50:17 +00:00
Hannu Nyman
360bce6f38 xz: update to version 5.4.1
Update to 5.4.1  (keep in sync with xz in tools/)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 84856c9042)
2023-01-14 11:58:03 +02:00
Javier Marcet
68d3d099b2 docker-compose: Update to version 2.15.1
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit e7f2e6f01c)
2023-01-11 11:52:05 +08:00
Oskari Rauta
2feedb1e2a speedtestpp: drop libxml2 dependency
Co-authored-by: Tianling Shen <cnsztl@gmail.com>
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 281d624203)
2023-01-11 11:51:59 +08:00
Michal Vasilek
df3799fe04 yt-dlp: update to 2023.1.6
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit b7d2518589)
2023-01-11 11:51:49 +08:00
Hannu Nyman
69a8305f7c ocserv: disable libmaxminddb detection
Disable libmaxminddb detection to fix a build error
due to missing dependency.
(the libmaxminddb library is now detected, but is unncessary.)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 508c4548dc)
2023-01-10 21:11:32 +02:00
Hannu Nyman
5234dc93b7 knot: disable libmaxminddb detection
Disable libmaxminddb detection to fix a build error due to
missing dependency.
(the libmaxminddb library is now detected, but is unncessary.)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit ce46bf8a43)
2023-01-10 21:11:14 +02:00
Hannu Nyman
c0dca476f3 Merge pull request #20242 from aquilacooper/openwrt-22.03-update-stubby-to-0.4.3-1
[openwrt-22.03] stubby: Update to 0.4.3
2023-01-09 17:45:07 +02:00
Alexandru Ardelean
709172c95a python-pytz: bump to version 2022.7
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2023-01-09 17:43:15 +02:00
Javier Marcet
0d346fe7f2 bind: disable geoip
Signed-off-by: Javier Marcet <javier@marcet.info>
[modified also PKG_RELEASE]
(cherry picked from commit 073ee02500)
2023-01-09 17:32:49 +02:00
Javier Marcet
e4a7f86bfb docker-compose: Update to version 2.15.0
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit e38eee42a5)
2023-01-08 17:44:01 +08:00
Aquila Cooper
f709ba1ee2 stubby: Restart on interface trigger
Cherry-picked from commit 3c04a6d235.

Force restart stubby if any of the trigger interfaces goes up or down. Avoids DoT DNS lookup timeouts when default route changes, in case of multiple
upstream interfaces.

Signed-off-by: Aquila Cooper <aquila@cpr.is>
2023-01-07 11:34:00 +00:00
Aquila Cooper
4ff16a7bf6 stubby: Update to 0.4.3
Changelog from upstream (https://github.com/getdnsapi/stubby/blob/v0.4.3/ChangeLog):

* 2022-12-22: version 0.4.3
  * Fix Issue getdnsapi/stubby#330 and PR getdnsapi/stubby#324: PrivateUsers=false needed in systemd
    stubby.service file for stubby to start.
    Thanks Archcan and Petr Menšík
  * PR getdnsapi/stubby#323: Reduce log messages when interface is offline.
    Thanks Russ Bubley and Andre Heider 

* 2022-08-19: version 0.4.2
  * Fix Issue getdnsapi/stubby#320: Stubby doesn't start without "log_level"
    entry. Thanks Johnny S. Lee

* 2022-08-19: Version 0.4.1
  * Several updates to the servers in the config file:
     * sinodun.dnsovertls*.com servers are removed and will be
       decommissioned in the near future. This leaves only the
       getdnsapi.net server as the default.
       A recommendation is made that users choose additional servers
       from the list available.
     * Additional Quad9 servers added (thanks pataquets).
     * LDN servers removed as the service is now stopped. 
     * Tidy up of remaining server data.
     * Change `comment` lines on Uncensored server data to more clearly
       be comments (not valid YAML)
     * Fix and improve descriptions of default values
     * getdnsapi.net DoT servers liston on port 443 now too
  * Fixes for parsing of quoted key values for `tls-ca-file`,
    `tls-curves-list` and `resolvconf`
  * Add Dockerfile into `contrib` - thanks to pataquets.
  * Strengthen version checking for LibIDN2 during the cmake step so
    LibIDN2 version 2.3.3 can be properly found (thanks jpbion).
  * Updated stubby.service file. Thanks Bruno Pagani
  * log level configurable in config file with log_level setting
    Command line setting (with -v or -l) overrules the config file
    setting

Signed-off-by: Aquila Cooper <aquila@cpr.is>
2023-01-07 10:55:00 +00:00
Hannu Nyman
d485217add Merge pull request #20234 from aquilacooper/patch-2
[openwrt-22.03] getdns: Update to 1.7.3
2023-01-07 11:24:23 +02:00
Aquila Cooper
8038868baf getdns: Update to 1.7.3
Changelog from upstream (https://github.com/getdnsapi/getdns/releases/tag/v1.7.3):

* 2022-12-22: Version 1.7.3
  * PR getdnsapi/getdns#532: Increase CMake required version 3.5 -> 3.20, because we
    need cmake_path for Absolute paths in pkg-config (See Issue getdnsapi/getdns#517)
    Thanks Gabriel Ganne
  * Updated to Stubby 0.4.3 quickfix release

* 2022-08-19: Version 1.7.2
  * Stubby updated to 0.4.2 quickfix release

* 2022-08-19: Version 1.7.1
  * Always send the `dot` ALPN when using DoT
  * Strengthen version determination for Libidn2 during cmake processing
    (thanks jpbion).
  * Fix for issue in UDP stream selection in case of timeouts.
    Thanks Shikha Sharma
  * Fix using asterisk in ipstr for any address. Thanks uzlonewolf.
  * Issue getdnsapi/stubby#295: rdata not correctly written for validation for
    certain RR type. Also, set default built type to RelWithDebInfo and
    expose CFLAGS via GETDNS_BUILD_CFLAGS define and via
    getdns_context_get_api_information()
  * Issue getdnsapi/getdns#524: Bug fixes from submodules' upstream?
    Thanks Johnnyslee
  * Issue getdnsapi/getdns#517: Allow Absolute path CMAKE_INSTALL_{INCLUDE,LIB}DIR in
    pkg-config files. Thanks Alex Shpilkin
  * Issue getdnsapi/getdns#512: Update README.md to show correct PGP key location.
    Thanks Katze Prior.

Signed-off-by: Aquila Cooper <aquila@cpr.is>
2023-01-07 04:50:00 +00:00
Tianling Shen
4b30c97b57 libtorrent-rasterbar: Update to 2.0.8
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 991c2d452c)
2023-01-06 16:35:02 +08:00
Van Waholtz
db78655bb8 syncthing: update to 1.23.0
Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 27b1869820)
2023-01-06 08:11:45 +01:00
Rosen Penev
f8cd482074 libmaxminddb: install pkgconfig file
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c0be86e1ac)
2023-01-03 22:05:23 -08:00
Rosen Penev
55222315f1 libmaxminddb: update to 1.7.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 448cd7fba1)
2023-01-03 22:05:23 -08:00
YiZhen Choo
27db10b960 AdGuardHome: update to v0.107.21
Signed-off-by: YiZhen Choo <yizhen.c02@gmail.com>
(cherry picked from commit 60ae1e5637)
2023-01-04 06:37:22 +01:00
Gerard Ryan
2048c5bbf6 libnetwork: Update to dcdf8f1 for Docker v20.10.22
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit ec191eb08e)
2023-01-03 15:09:00 +02:00
Gerard Ryan
b7500ff2d9 containerd: Update to v1.6.13 for Docker v20.10.22
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit b684f741e4)
2023-01-03 15:09:00 +02:00
Gerard Ryan
27e985f326 docker: Update to v20.10.22
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit fc7a7f6137)
2023-01-03 15:09:00 +02:00
Gerard Ryan
7426365dea dockerd: Update to v20.10.22
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 3c06e3a249)
2023-01-03 15:09:00 +02:00
Espen Jürgensen
511de74cea owntone: Update to 28.5
Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>
(cherry picked from commit 983006f12a)
2023-01-02 21:21:08 +02:00
Espen Jürgensen
90c25ab10b owntone: update to 28.4
Included changes:
* Install web UI
* Remove libantlr3c dependency
* Add Spotify support to description
* Updated conf file

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>
(cherry picked from commit feda8e036d)
2023-01-02 21:20:53 +02:00
Espen Jürgensen
94a947f1cc mxml: update to 3.3.1
Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>
(cherry picked from commit 94f6216ef5)
2023-01-01 20:36:47 +02:00
Javier Marcet
b5fd276fd5 docker-compose: Update to version 2.14.2
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 4c58d6d288)
2023-01-01 11:07:49 +08:00
Javier Marcet
5c9215b208 docker-compose: Update to version 2.14.1
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 24faf56110)
2023-01-01 11:07:49 +08:00
Javier Marcet
7bd647a50c docker-compose: Update to version 2.14.0
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 37a86626e0)
2023-01-01 11:07:49 +08:00
Javier Marcet
dad5db7a2c docker-compose: Update to version 2.12.2
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 17badaee1c)
2023-01-01 11:07:49 +08:00
Javier Marcet
d3d580daa6 docker-compose: Update to version 2.12.0
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit d4134174bc)
2023-01-01 11:07:49 +08:00
Javier Marcet
ec76dce13a docker-compose: Update to version 2.11.2
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 25e3d9ef42)
2023-01-01 11:07:49 +08:00
Javier Marcet
3d9f6f2faa docker-compose: Update to version 2.11.1
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 86fc30e177)
2023-01-01 11:07:49 +08:00
Javier Marcet
8353f504a7 docker-compose: Update to version 2.11.0
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 2aee5cfa46)
2023-01-01 11:07:49 +08:00
Javier Marcet
41ab6565ba docker-compose: Update to version 2.10.2
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit ebf86a645a)
2023-01-01 11:07:49 +08:00
Javier Marcet
e65d20aeee docker-compose: Update to version 2.9.0
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 35b1a03b83)
2023-01-01 11:07:49 +08:00
Javier Marcet
0aff8059fc docker-compose: Update to version 2.7.0
What's Changed:

 - Enhancements:

   - add support of environment secret during build step by @glours

 - Fixes:

   - networks: prevent issues due to duplicate names by @milas
   - Use appropriate dependency condition for one-shot containers when
   running compose up --wait by @laurazard
   - Fix environment variable expansion by @ulyssessouza in
   compose-spec/compose-go#276
   - Validate depended-on services exist in consistency check by
   @laurazard in compose-spec/compose-go#281
   - Fix hash usage in environment values by @ulyssessouza in
   compose-spec/compose-go#283
   - build: respect dependency order for classic builder by @milas
   - fix: panic caused by empty string argument by @nicksieger
   - (re)start should not impact one-off containers by @ndeloof
   - Fix issue with close networks name on up and down command by
   @glours
   - keep the container reference when volumes_from target a container
   and not a service by @glours
   - build.go: initialize CustomLabels map if nil by @paroque28

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit de563c1ae1)
2023-01-01 11:07:49 +08:00
Javier Marcet
3846dc1f45 docker-compose: Update to version 2.6.1
Enhancements:

 - Support for setting secret from env variable by @ndeloof

Fixes:

 - Do not start unrelated dependencies on run by @laurazard
 - Fix service not found errors when using --no-deps by @nicksieger
 - Respect COMPOSE_REMOVE_ORPHANS env var on down by @nicksieger
 - Fix project level bind mounts volumes by @ulyssessouza
 - Respect deploy.limits.cpus and deploy.limits.pids by @glours

Internal:

 - Upgrade: Go v1.18.3 by @thaJeztah
 - Upgrade: compose-go v1.2.8 by @milas
 - Upgrade: buildx v0.8.2 by @dependabot
 - Upgrade: containerd v1.6.6 by @dependabot

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 5995e4d90b)
2023-01-01 11:07:49 +08:00
Javier Marcet
a749254bd1 docker-compose: Update to version 2.6.0
What's Changed:

 - fix TestLocalComposeUp which fail locally and bump compose-go to
 1.2.7 by @glours
 - attach only to services declared by project applying profiles by
 @ndeloof
 - Add ddev's e2e test by @ulyssessouza
 - Fix local run of make e2e-compose-standalone by @ulyssessouza
 - fix: prevent flickering prompt when pulling same image from N
 services by @maxcleme
 - add tags property to build section by @glours
 - update golang version to 1.18 by @glours
 - bump compose-go to 1.2.6 by @maxcleme
 - add e2e tests to verify env variables priority by @glours
 - Import dotenv file to os environment by @ulyssessouza

New Contributors:

 - @maxcleme made their first contribution

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 8089548622)
2023-01-01 11:07:49 +08:00
Javier Marcet
66f07e3405 docker-compose: Update to version 2.5.1
What's Changed:

 - Fix relative paths on envfile label by @ulyssessouza
 - down: Reject all arguments by @Jille
 - Clarify what default work dir is when multiple compose files by
 @quite
 - compose down exit=0 if nothing to remove by @ndeloof
 - cp command: copy to all containers of a service as default
 behaviour by @glours
 - Fix extra space printed with --no-log-prefix option by @jan4843
 - bump compose-go to 1.2.5 by @ndeloof

New Contributors:

 - @Jille made their first contribution
 - @quite made their first contribution
 - @jan4843 made their first contribution

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 32d87ae946)
2023-01-01 11:07:49 +08:00
Javier Marcet
01d6208e57 docker-compose: Update to version 2.5.0
What's Changed:

 - Fix search/replace typo in --no-TTY documentation by @ericfreese
 - Fix panic with down command when -p flag specified by @glours
 - use project we just created to start services by @ndeloof
 - include services declared by links as implicit dependencies by
 @ndeloof
 - pull to respect pull_policy by @ndeloof
 - don't ignore error by @ndeloof
 - project name MUST be lowercase by @ndeloof
 - add support for build secrets by @ndeloof
 - create also a checksums.txt file, add --binary by @MaxPeal
 - add support for ppc64le for docker compose by @snehakpersistent
 - inspect image ID after pull to se com.docker.compose.image by
 @ndeloof
 - Fix cannot setup IPAM gateway by @qnap-ericfan

New Contributors:

 - @ericfreese made their first contribution
 - @MaxPeal made their first contribution
 - @snehakpersistent made their first contribution
 - @qnap-ericfan made their first contribution

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit ac02159f63)
2023-01-01 11:07:49 +08:00
Javier Marcet
1900774adb docker-compose: Update to version 2.4.1
What's Changed:

 - now we use directly the Docker CLI to run autoremove flag should
 be p… by @glours
 - use ssh config when building from compose up by @glours
 - get Tty from container to know adequate way to attach to by
 @ndeloof

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 3e4ec2a9a8)
2023-01-01 11:07:49 +08:00
Javier Marcet
07647d822a docker-compose: Update to version 2.4.0
What's Changed:

 - pass interactive flag to ExecOptions for the RunExec command by
 @glours
 - go.mod: pin k8s version to fix build on go1.16, and update buildx
 to v0.8.1 by @thaJeztah
 - support cache_from|to|no|pull by @ndeloof
 - fix race condition on start-stop e2e tests running in parrallel by
 @glours
 - Add support of ssh authentications defined in compose file or via
 cli… by @glours
 - fix typo in ssh option description by @mschoettle
 - Takes COMPOSE_PROJECT_NAME into consideration on commands by
 @ulyssessouza
 - Remove dead warning code by @ulyssessouza
 - Fix down command without any resource to delete by @ulyssessouza
 - vendor: github.com/containerd/containerd v1.6.2 by @thaJeztah

New Contributors:

 - @mschoettle made their first contribution

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 29a007ee5b)
2023-01-01 11:07:49 +08:00
Javier Marcet
7dc695f355 docker-compose: Update to version 2.3.4
What's Changed:

 - don't fail trying to remove container with no candidate by @ndeloof
 - recreate container after image has been rebuilt/pulled by @ndeloof
 - ps: un-deprecate --filter, and enhance docs by @thaJeztah
 - Bump github.com/spf13/cobra from 1.3.0 to 1.4.0 by @dependabot
 - Remove DEPRECATED text, since it's just the default by
 @ulyssessouza
 - Bump Buildx to v0.8.0 by @ndeloof
 - kill only need project name by @ndeloof
 - don't remove external volumes/networks by @ndeloof
 - use docker/cli RunExec and RunStart to handle all the
 interactive/tty/* terminal logic by @ndeloof
 - Validate doc on pr by @glours

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit b33c5dbd06)
2023-01-01 11:07:49 +08:00
Daniel Engberg
5b32db43f6 telnet-bsd: add package
net/telnet-bsd: Add telnet-bsd 1.2 to repo

Patch sources:
https://gitweb.gentoo.org/repo/gentoo.git/tree/net-misc/telnet-bsd/files
https://ftp.uni-erlangen.de/gentoo-portage/net-misc/telnet-bsd/files

Template for excluding telnetd:
https://github.com/theeternalsw0rd/telnet-macos

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
[set me as maintainer, add patches suggested by @pkgadd]
Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 51d381e549)
Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
2022-12-30 15:17:14 +00:00
Lucian Cristian
60af04fa47 domoticz: update to 2022.1
change to codeload
fix python 3.10 plugin loading and usage

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit e1ed4ee3d3)
2022-12-30 10:18:07 +01:00
Philip Prindeville
801c001935 bind: update to version 9.18.10
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 07f528b331)
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2022-12-28 11:21:30 -08:00
Josef Schlehofer
ae35f7479b Merge pull request #20156 from paper42/libarchive-cve-22
[22.03] libarchive: update to 3.5.3, fix CVE-2022-36227
2022-12-28 11:47:21 +01:00
Tianling Shen
82a4e7a469 golang: backport an upstream fix for non-retpoline-compatible error
This fixes the following build error:
```
Building targets
runtime
<autogenerated>:1: non-retpoline-compatible: 00200 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/time.go:915)       JMP     (R15)(R12*8)
<autogenerated>:1: non-retpoline-compatible: 00115 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/type.go:614)       JMP     (AX)(SI*8)
<autogenerated>:1: non-retpoline-compatible: 00028 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/time.go:452)       JMP     (R11)(R10*8)
<autogenerated>:1: non-retpoline-compatible: 00021 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/error.go:261)      JMP     (DX)(CX*8)
<autogenerated>:1: non-retpoline-compatible: 00050 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/time.go:691)       JMP     (CX)(R12*8)
<autogenerated>:1: non-retpoline-compatible: 00024 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/debuglog.go:616)   JMP     (CX)(SI*8)
<autogenerated>:1: non-retpoline-compatible: 00079 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/time.go:617)       JMP     (R9)(R8*8)
<autogenerated>:1: non-retpoline-compatible: 00025 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/cgocall.go:453)    JMP     (R9)(DX*8)
<autogenerated>:1: non-retpoline-compatible: 00018 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/type.go:66)        JMP     (DX)(CX*8)
<autogenerated>:1: non-retpoline-compatible: 00020 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/alg.go:156)        JMP     (SI)(DX*8)
<autogenerated>:1: too many errors
```

Fixes: #20026

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 35f33c99b1)
2022-12-28 12:56:54 +08:00
Tianling Shen
01406a6ca2 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ea969a117a)
2022-12-28 12:56:40 +08:00
Tianling Shen
17d72277e5 v2ray-core: Update to 5.2.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 7ea1c47c44)
2022-12-28 12:56:35 +08:00
Tianling Shen
c5a51a4408 xray-core: Update to 1.7.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9a7926339b)
2022-12-28 12:56:30 +08:00
Tianling Shen
5f5d9ddf6e rclone: Update to 1.61.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 822d44e8f8)
2022-12-28 12:56:23 +08:00
Tianling Shen
c2f2b69779 cloudreve: Update to 3.6.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c67193be61)
2022-12-28 12:56:19 +08:00
Tianling Shen
02a6ad64d5 xray-core: Update to 1.6.6-2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4afc17e6e0)
2022-12-28 12:56:15 +08:00
Tianling Shen
2d059c5d9b yq: Update to 4.30.6
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 071e97949f)
2022-12-28 12:56:09 +08:00
Tianling Shen
334c598b13 dnsproxy: Update to 0.46.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4e9c47e558)
2022-12-28 12:56:03 +08:00
Tianling Shen
bb646b65fb dnslookup: Update to 1.8.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 62cc9d2a39)
2022-12-28 12:55:58 +08:00
Tianling Shen
5c9ffc34d2 cloudflared: Update to 2022.12.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f526a1d169)
2022-12-28 12:55:52 +08:00
Richard Yu
58b61913dd natmap: update to 20221225
Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit 6163de4ffa)
2022-12-27 16:40:28 +08:00
Richard Yu
f6db134429 natmap: fix service not stopped when disabled in luci
luci removes `enable` option when disabled,
fix by setting default value to 0.

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit 8111d49474)
2022-12-27 16:40:23 +08:00
Richard Yu
4b9641eea1 natmap: add Package/conffiles
Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit 39af47f1c0)
2022-12-27 16:40:18 +08:00
Hirokazu MORIKAWA
91312dbde7 node: bump to v16.19.0
Notable Changes
*OpenSSL 1.1.1s
*Root certificates updated to NSS 3.85
*Time zone update to 2022f

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit f8bd5eaa6e)
2022-12-23 10:25:58 -08:00
Stan Grishin
8445e93619 Merge pull request #20160 from stangri/openwrt-22.03-pbr
[22.03] pbr: bugfix: Makefile, rt_tables fix
2022-12-22 14:56:57 -07:00
Stan Grishin
1478867e58 pbr: bugfix: Makefile, rt_tables fix
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit edbcb97b78)
2022-12-22 21:31:47 +00:00
Michal Vasilek
e4fc506443 libarchive: add missing CONFLICT
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-12-22 14:36:28 +01:00
Michal Vasilek
a139b554c9 libarchive: fix CVE-2022-36227
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-12-22 11:41:55 +01:00
Michal Vasilek
ab468882d5 libarchive: update to 3.5.3
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-12-22 11:36:44 +01:00
Tianling Shen
6c1d003fea Merge pull request #20154 from ysc3839/natmap-fix-2203
[22.03] natmap: add forward_port option
2022-12-22 14:59:00 +08:00
Richard Yu
a426a62da3 natmap: add forward_port option
The bind port (-b) can be used with forward port (-p),
so expose this option in config file.

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit cd51b58efd)
2022-12-22 12:05:10 +08:00
Stan Grishin
3730093bcf Merge pull request #20114 from stangri/openwrt-22.03-pbr
[22.03] pbr: update to 1.0.1-1
2022-12-19 14:10:07 -07:00
Stan Grishin
8e9b85daf0 pbr: update to 1.0.1-1
* add more error/warning messages
* better return statements from ips/nftset functions
* better error/warning handling when inserting policies
* comment out unnecessary nft set/ipst clean ups
* shellchecked status functions

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 5bec4a2541)
2022-12-19 19:20:04 +00:00
Florian Eckert
40714e889c mwan3: make mwan3.user executable
This is a fix for the the following change:
3d824ea288

Before the change, it was only possible to execute a shell script. To
remove this restriction, a binary or other script language can now also
be used for 'mwan3.user'. Unfortunately, the old shell script was not
executable for older mwan3 version. During a sysupgrade with config transfer,
this 'mwan3.user' script could not be executed for newer mwan3 versions.
To fix this, the calling script checks whether the 'mwan3.user' is executable,
and if not, this executable bit is now set.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 0434407428)
2022-12-19 08:38:51 +01:00
Florian Eckert
d0a0fcad8b mwan3: update to 2.11.3
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 8fea564fc9)
2022-12-19 08:38:42 +01:00
Florian Eckert
0dedc20597 mwan3: only send disconnected event if interface was connected before
Up to now on every interface down event a mwan3 disconnected event was
send. This is wrong because if the interface was never connected, then a
disconnected event should not get generated. This commit fixes this bug.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 997c0842ca)
2022-12-19 08:38:30 +01:00
Florian Eckert
8d1f90b7ba mwan3: change log message on already added route
Only show message on already set route, if debugging is enabled.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a6606bed17)
2022-12-19 08:38:20 +01:00
Denys Yarkovyi
c70e2ad396 mwan3: support offload routing modifier
Signed-off-by: Denys Yarkovyi <dyarkovoy@gmail.com>
(cherry picked from commit 675ecfba89)
2022-12-19 08:38:07 +01:00
James White
d8a77e90fc mwan3: Switch default track_ip targets from Google DNS to Cloudflare DNS
Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit 1a703ed6a6)
2022-12-19 08:38:01 +01:00
Florian Eckert
33e0c6b204 mwan3: fix balanced default config
The metrics and weight need to be the same. A 50% balanced would be
require member policies of the same metric and weight value.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 0ed8450d2f)
2022-12-19 08:37:52 +01:00
Tianling Shen
09604ee3e8 golang: Update to 1.19.4
go1.19.4 (released 2022-12-06) includes security fixes to the net/http
and os packages, as well as bug fixes to the compiler, the runtime,
and the crypto/x509, os/exec, and sync/atomic packages.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 6a0ee524b1)
2022-12-18 21:09:45 +01:00
Alois Klink
694026540c privoxy: fix preinst/postinst script indentation
Fix the indentation of the preinst/postinst scripts for the privoxy
package.

Because these scripts didn't start with `#!/bin/sh`
(they instead started with the TAB character), `/bin/sh` was not used
to start them.

On x86_64 and i386_pentium-mmx, this seems to be fine, but on
arm_cortex-a15_neon-vfpv4 and aarch64_cortex-a53, running these
scripts fails with a:

```
Installing privoxy (3.0.33-3) to root...
Collected errors:
 * pkg_run_script: package "privoxy" preinst script returned status 1.
 * preinst_configure: Aborting installation of privoxy.
 * opkg_install_cmd: Cannot install package privoxy.
```

Reported-by: Marius Dinu <m95d+git@psihoexpert.ro>
Signed-off-by: Alois Klink <alois@aloisklink.com>
(cherry picked from commit 6703d76230)
2022-12-18 21:09:04 +01:00
Carlo Alberto Ferraris
c541486314 tailscale: preserve tailscaled state file
Fixes #19774

Signed-off-by: Carlo Alberto Ferraris <cafxx@strayorange.com>
(cherry picked from commit 02e154d3e5)
2022-12-18 21:07:48 +01:00
Jan Hák
f553dab194 knot: update to version 3.2.4
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit c933a15ceb)
2022-12-18 21:02:59 +01:00
Michal Vasilek
bf124d3805 yt-dlp: update to 2022.11.11
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit e398becaa6)
2022-12-18 21:02:40 +01:00
Doug Thomson
91ca31025d perl: enable threading support for aarch64 by default
Perl threads seem to be supported and working for aarch64, and
including aarch64 here would allow packages like freeswitch-mod-perl
to become available from the standard OpwnWrt package repository for
popular routers such as the Linksys E8450 and Belkin RT3200.

Signed-off-by: Doug Thomson <dwt62f+github@gmail.com>
(cherry picked from commit 6db2fe93cd)
2022-12-18 21:02:25 +01:00
Marc Benoit
1f3b5ba00a lxc-auto: made init script compatible with image builder
Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit e70844a9ca)
2022-12-17 14:04:23 +08:00
Oli Ze
ac64d88091 igmpproxy: update to version 0.4.0
Signed-off-by: Oli Ze <olze@trustserv.de>
(cherry picked from commit 44e1c2115e)
2022-12-16 20:51:19 -08:00
Michal Vasilek
e9bc14cf36 apr-util: disable parallel build
Build reliably fails with -j20

    crypto/apr_passwd.c:200:1: fatal error: error closing -: Broken pipe
      200 | }
          | ^
    compilation terminated.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit bd9e119d68)
2022-12-16 20:48:28 -08:00
Alexandru Ardelean
9481f437ac python3-pytz: bump to version 2022.6
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-12-17 08:32:42 +08:00
Hannu Nyman
ea8cfdf020 nano: update to 7.1
Update nano editor to version 7.1
* drop the backported upstream fix for 7.0
* drop AUTORELEASE
* disable justify from 'plus'. Rarely needed with OpenWrt

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 89dc1b17e9)
2022-12-15 17:57:20 +02:00
Alexandru Ardelean
4cd549b1ea Merge pull request #20017 from commodo/stress-ng-update-22.03
stress-ng: adjust build with xxhash & libegl
2022-12-14 09:31:04 +02:00
Hannu Nyman
cde7af9808 wget: apply upstream fix to avoid nettle linking in nossl
Replace my own patch with the upstream solution, which they issued
in response to my bug report.
(Two patches as they overlooked something on the first try.
Reference to https://savannah.gnu.org/bugs/index.php?63431 )

The nettle lib evaluation is now conditional to not having "--disable-ntlm".

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit fd7da3333e)
2022-12-13 17:36:49 +02:00
Hannu Nyman
e3a60c072f wget: update to 1.21.3
Update wget to 1.21.3

* Remove patch 100-fix-hsts-time.patch as upstream has issued
  its own version on the fixes

* Add a hack (and fixup autoreconf) to fix an upstream bug that
  forces the nettle library into nossl even if NTLM is disabled.
  Upstream bug filed: https://savannah.gnu.org/bugs/?63431

* Remove old maintainer who has not been active

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit a694130993)
2022-12-13 17:36:25 +02:00
Alexandru Ardelean
80443fc66c stress-ng: disable xxhash & libegl stressors
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-12-13 13:06:04 +02:00
Stan Grishin
54a387fb94 Merge pull request #20063 from stangri/openwrt-22.03-pbr
[22.03] pbr: detect missing iptables
2022-12-12 20:21:16 -07:00
Van Waholtz
9b29ac76a9 syncthing: update to 1.22.2
Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit d22bed1dc3)
2022-12-12 23:36:56 +01:00
Stan Grishin
c4e6977a07 Merge pull request #20077 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: bugfix: add dnsmasq.nftset to uci_load_validate
2022-12-12 15:20:07 -07:00
Josef Schlehofer
6b6776ab5b Merge pull request #20073 from luizluca/22.03/ruby-3.0.5
ruby: update to 3.0.5
2022-12-12 23:17:29 +01:00
Stan Grishin
cabc98c447 simple-adblock: bugfix: add dnsmasq.nftset to uci_load_validate
* fixes https://github.com/openwrt/openwrt/issues/11481 thanks to:
* https://github.com/mistepien for reporting
* https://github.com/dave14305 for diagnosing

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit fff884e67f)
2022-12-12 21:54:13 +00:00
Luiz Angelo Daros de Luca
43c05fbedc ruby: update to 3.0.5
This release includes a security fix.

- CVE-2021-33621: HTTP response splitting in CGI

For more details:
- https://www.ruby-lang.org/en/news/2022/11/24/ruby-3-0-5-released/

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2022-12-12 14:32:10 -03:00
Stan Grishin
c6ac63b5c0 pbr: detect missing iptables
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit a86985879f)
2022-12-12 02:54:53 +00:00
Stan Grishin
e4813f4fe1 Merge pull request #20053 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: fix restart
2022-12-10 20:32:12 -07:00
Stan Grishin
8dc3252229 https-dns-proxy: fix restart
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 75ac50ca89)
2022-12-10 05:39:49 +00:00
Stan Grishin
2075769c4b Merge pull request #20043 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: add mdns service records
2022-12-09 22:02:55 -07:00
Stan Grishin
5981973734 Merge pull request #20051 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: support new OISD dnsmasq config
2022-12-09 22:02:15 -07:00
Stan Grishin
1c6c8cee44 simple-adblock: support new OISD dnsmasq config
* OISD dnsmasq config files switched from using address= to server=

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 3950f0ce99)
2022-12-10 01:59:54 +00:00
Tianling Shen
04eadf8600 dnsproxy: Update to 0.46.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 88d33fef91)
2022-12-09 06:59:53 +08:00
Tianling Shen
f5547cfdea cloudflared: Update to 2022.11.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a1a14c1103)
2022-12-09 06:59:44 +08:00
Stan Grishin
4962ad8e8a https-dns-proxy: add mdns service records
* add mdns records for started instances
* Makefile: use $(PKG_VERSION) as a value for PKG_SOURCE_DATE instead of
  hard-coding it

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit ee37d0ec86)
2022-12-08 21:13:48 +00:00
Alois Klink
4abdc2f333 github-ci: error on any shell errors
Enable `errexit` and `nounset` [POSIX shell options][1]
in `.github/workflows/entrypoint.sh` so that the script fails
if any command within the script fails.

[1]: https://pubs.opengroup.org/onlinepubs/9699919799//utilities/V3_chap02.html#set

Reported-by: Marius Dinu <m95d+git@psihoexpert.ro>
Fixes: https://github.com/openwrt/packages/issues/19953
Signed-off-by: Alois Klink <alois@aloisklink.com>
(cherry picked from commit 18d3c529fa)
2022-12-08 10:56:11 +01:00
Alexandru Ardelean
8506ba5879 Merge pull request #20033 from peter-stadler/openwrt-22.03
django: bump version 4.0.8
2022-12-08 11:26:21 +02:00
Peter Stadler
798fe3f59f django: bump version 4.0.8
fix CVE-2022-41323

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2022-12-08 08:36:15 +01:00
Richard Yu
ce3e9d4b4b natmap: merge "ipv4" and "ipv6" options into single "family" option
Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit 190e04caf6)
2022-12-07 22:29:58 +08:00
Daniel Golle
0393a5c19b snowflake: update to version 2.4.1
Changes in version v2.4.1 - 2022-12-01
 - Issue 40224: Bug fix in utls roundtripper

Changes in version v2.4.0 - 2022-11-29
 - Fix proxy command line help output
 - Issue 40123: Reduce multicast DNS candidates
 - Add ICE ephemeral ports range setting
 - Reformat using Go 1.19
 - Update CI tests to include latest and minimum Go versions
 - Issue 40184: Use fixed unit for bandwidth logging
 - Update gorilla/websocket to v1.5.0
 - Issue 40175: Server performance improvements
 - Issue 40183: Change snowflake proxy log verbosity
 - Issue 40117: Display proxy NAT type in logs
 - Issue 40198: Add a `orport-srcaddr` server transport option
 - Add gofmt output to CI test
 - Issue 40185:  Change bandwidth type from int to int64 to prevent overflow
 - Add version output support to snowflake
 - Issue 40229: Change regexes for ipv6 addresses to catch url-encoded addresses
 - Issue 40220: Close stale connections in standalone proxy

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f60f11f927)
2022-12-06 17:12:57 +01:00
Richard Yu
ec2fbd57ee natmap: add new package
NATMap is a program for opening port behind full cone NAT (NAT-1),
without the need for using UPnP or another port forward settings.

More details can be found at original repo: https://github.com/heiher/natmap

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit e691a25cb3)
2022-12-06 17:12:32 +01:00
Hannu Nyman
f6a6887761 xz: update to 5.2.9
Update xz to version 5.2.9.

Switch back to .bz2 sources, as we already download .bz2 for tools/
No sense to re-download sources as a .xz file.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit c122236552)
2022-12-06 12:08:26 +02:00
Nick Hainke
b1b1281da8 xz: update to 5.2.7
Update to latest version. No release notes available.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 964e59d385)
2022-12-06 12:08:26 +02:00
Nick Hainke
ed99f2f008 xz: update to 5.2.6
Release Notes:
https://git.tukaani.org/?p=xz.git;a=blob;f=NEWS;hb=HEAD

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit d7d39043c3)
2022-12-06 12:08:26 +02:00
Stanislav Petrashov
bdc161a079 tailscale: Update to version 1.32.3
Signed-off-by: Stanislav Petrashov <s@petrashov.ru>
(cherry picked from commit 1ffe60bc85)
2022-12-05 23:09:06 +01:00
Stanislav Petrashov
26dabd3741 tailscale: update to v1.32.0
Signed-off-by: Stanislav Petrashov <s@petrashov.ru>
(cherry picked from commit 9434a2dfb2)
2022-12-05 23:08:59 +01:00
Stan Grishin
023fe97006 Merge pull request #20010 from stangri/openwrt-22.03-pbr
[22.03] pbr: initial commit
2022-12-04 10:51:18 -07:00
Dobroslaw Kijowski
fda81981bd adguardhome: bump to 0.107.18
* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.17
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.18

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit e3dc753781)
2022-12-04 14:56:18 +01:00
YiZhen Choo
aa61ca8bf2 AdGuardHome: update to v0.107.16
Signed-off-by: YiZhen Choo <yizhen.c02@gmail.com>
(cherry picked from commit 64dabe2d68)
2022-12-04 14:56:11 +01:00
YiZhen Choo
acb201a0ab AdGuardHome: update to v0.107.12
Signed-off-by: YiZhen Choo <yizhen.c02@gmail.com>
(cherry picked from commit e806d85e46)
2022-12-04 14:56:08 +01:00
YiZhen Choo
820bcedfd3 AdGuardHome: update to v0.107.11
Signed-off-by: YiZhen Choo <yizhen.c02@gmail.com>
(cherry picked from commit 79acc3c21f)
2022-12-04 14:56:03 +01:00
Michael Heimpold
3352cf56d4 Merge pull request #20003 from mhei/22.03-php8-update-8.1.13
[22.03] php8: update to 8.1.13
2022-12-03 14:33:14 +01:00
Hauke Mehrtens
12bc0789a1 btrfs-progs: Update to version 6.0.1
This fixes compilation problems with glibc 2.36.

Full Changelog:
btrfs-progs-6.0 (2022-10-11)
-----------------------------
   * fi usage: in tabular output, print total size and slack size
   * mkfs:
      * option -O now accepts values from -R to unify the interface (-R will
	continue to work)
      * zone reset and discard is done in parallel on all devices
      * removed option --leafsize, deprecated long time ago
   * corrupt-block: recalculate checksum when changing generation
   * fixes:
      * convert: fix reserved range detection and overlaps
      * mkfs: fix creating files with reserved inode numbers with --rootdir
      * receive: escape filenames in command attributes
      * fix extent buffer leaks after transaction abort
   * experimental:
      * mkfs: support for block-group-tree (kernel 6.1)
      * fsverity in send (protocol v3, WIP)
      * btrfstune -b converts to block-group-tree
   * other:
      * cleanups, refactoring
      * new and updated tests
      * update documentation

btrfs-progs-6.0.1 (2022-11-04)
""""""""""""""""""""""""""""""
   * send: minor speed up for v2 due to increased buffer size
   * resize: invalid command line options fail with error code
   * quota rescan:
      * add long options --status and --wait
      * new option to wait but don't start rescan
   * qgroup show: print path by default, updated format
   * qgroup: new subcommand clear-stale, remove qgroups without their subvolumes
   * experimental:
      * add warnings to commands that have it enabled (mkfs, image, btrfstune)
   * other:
      * documentation, help text, error message updates

btrfs-progs-5.19 (2022-08-16)
-----------------------------
   * send: support protocol version 2
   * fi show: print all missing devices
   * device stats: add tabular output
   * replace: add alias to device group (device replace)
   * check: validate free space tree items
   * fixes:
      * convert: support large filesystems (block count > 32bit)
      * recognize filesystems with verity enabled
      * mkfs and DUP could write out of order, fix it for zoned mode
   * build:
      * optional support for LZO and ZSTD in receive
      * compatibility with glibc 2.36 (mount.h)
      * add fallbacks for new GCC builtins
   * other:
      * corrupt-block: target specific items, offsets
      * documentation updates, new pages from wiki
      * new tests

btrfs-progs-5.19.1 (2022-09-12)
"""""""""""""""""""""""""""""""
   * fix memory leaks (extent buffer, path)
   * check: verify block device size vs item
   * rescue fix-device-size: allow to shrink device item
   * receive: fix crash on wrong pinter free()
   * other:
      * experimental: support for block-group-tree
      * documentation updates
      * new tests

btrfs-progs-5.18 (2022-05-25)
-----------------------------
   * fixes:
      * dump-tree: don't print traling zeros in checksums
      * recognize paused balance as exclusive operation state, allow to start
        device add
      * convert: properly initialize target filesystem label
      * mkfs: don't create free space bitmaps for empty filesystem
   * restore: make lzo support build-time configurable, print supported
     compression in help text
   * update kernel-lib sources
   * other:
      * documentation updates, finish conversion to RST, CHANGES and INSTALL
        could be included into RST
      * fix build detection of experimental mode
      * new tests

btrfs-progs-5.18.1 (2022-06-06)
"""""""""""""""""""""""""""""""
   * fixes:
      * convert: fix self reference of toplevel directory
      * build: make kernel lib headers compatible with C++
   * zoned mode: verify minimum zone size 4MiB
   * libbtrfs: cleanups, merge headers and remove declarations of unexported
     symbols
   * other: documentation updates

btrfs-progs-5.17 (2022-04-26)
-----------------------------
   * check:
      * repair wrong num_devices in superblock
      * recognize overly long xattr names
      * fix wrong total bytes check for seed device
   * auto-repair on read on RAID56
   * property set: unify handling of empty value to mean default, changed meaning
     for property 'compression' to allow reset to default and to set NOCOMPRESS,
     since kernel 5.14
   * fixes:
       * dump-tree: print fs-verity items
       * fix location of system chunk on zoned filesystem
       * do not allow setting seeding flag on a filesystem with dirty log
       * mkfs and subpage support: use sectorsize as nodesize fallback for mixed
	 profiles
   * preparatory work for extent tree v2, global roots
   * experimental feature (unstable interface, not built by default,
       do not use for production)
       * btrfstune: option --csum to switch checksum algorithm
   * other:
       * cleanups, refactoring
       * update documentation build, remove asciidocs leftovers
       * update fssum to consider xattrs
       * add fsstress

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 99f5604905)
2022-12-03 12:55:05 +01:00
W. Michael Petullo
7e75519ac1 libgpg-error: copy gpg-error.pc to staging directory
Packages like libassuan and libksba would not compile after updating
libgpg-error to 1.46. This was because gpg-error.m4 (and thus the affected
packages' configure scripts) relies on gpgrt-config, which in turn needs
access to gpg-error.pc. This modifies the libgpg-error build process to
copy gpg-error.pc to OpenWrt's staging directory, so that it is available
for subsequent dependent package builds.

Fixes: https://github.com/openwrt/packages/issues/19880

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit a93e0269a1)
2022-12-03 12:54:14 +01:00
Tjeu Kayim
c38abeb951 gnupg: compile with -fcommon
This fixes a segfault because gnupg/g10/options.h struct opt
is otherwise not shared between the different compilation units,
resulting in opt.homedir being NULL when passed to make_filename.

$ gpg1 -i

gpg: signal 11 caught ... exiting
Segmentation fault

(gdb) bt
    #0  0x00007f17bb2185e2 in strlen (s=s@entry=0x0) at src/string/strlen.c:17
    #1  0x0000000000460ea0 in make_filename (first_part=first_part@entry=0x0) at gnupg-1.4.23/util/fileutil.c:174
    #2  0x000000000040ee42 in keydb_add_resource (url=url@entry=0x46bfe3 "secring.gpg", flags=flags@entry=4, secret=secret@entry=1)
        at gnupg-1.4.23/g10/keydb.c:238
    #3  0x00000000004062ee in main (argc=<optimized out>, argv=<optimized out>) at gnupg-1.4.23/g10/gpg.c:3323

Signed-off-by: Tjeu Kayim <15987676+TjeuKayim@users.noreply.github.com>
(cherry picked from commit f4058c1c18)
2022-12-03 12:53:37 +01:00
Josh Powers
6d14306a6f privoxy: fix postinst missing $
fixes: #19949

Signed-off-by: Josh Powers <powersj@fastmail.com>
(cherry picked from commit 46e4def61f)
2022-12-03 12:53:14 +01:00
Josh Powers
7c1b94bb13 privoxy: correctly format /etc/services additions
This adds the missing protocol (e.g. /tcp and /udp) to the entry in
/etc/services. If the entry already exists, it will add the /tcp to it.
Otherwise, it will look and add the tcp and udp entries if either is
missing.

fixes: openwrt#19665

Signed-off-by: Josh Powers <powersj@fastmail.com>
(cherry picked from commit 95edfa723c)
2022-12-03 12:53:09 +01:00
Stanislav Petrashov
a505d6f26a golang: update to v1.19.3
Signed-off-by: Stanislav Petrashov <s@petrashov.ru>
(cherry picked from commit 440dcd8d34)
2022-12-03 12:51:39 +01:00
Stanislav Petrashov
e0238d3091 golang: update to v1.19.2
Includes fixes for security vulnerabilities:
 * [CVE-2022-27664](https://github.com/advisories/GHSA-69cg-p879-7622) net/http: handle server errors after sending GOAWAY
 * [CVE-2022-32190](https://github.com/golang/go/issues/54385) net/url: JoinPath does not strip relative path components in all circumstances
 * [CVE-2022-2879](https://github.com/golang/go/issues/54853) archive/tar: unbounded memory consumption when reading headers
 * [CVE-2022-2880](https://github.com/golang/go/issues/54663) net/http/httputil: ReverseProxy should not forward unparseable query parameters
 * [CVE-2022-41715](https://github.com/golang/go/issues/55949) regexp/syntax: limit memory used by parsing regexps

Addresses the build failure:
* https://github.com/openwrt/packages/pull/19613

Signed-off-by: Stanislav Petrashov <s@petrashov.ru>
(cherry picked from commit 0ad7a2fe18)
2022-12-03 12:51:33 +01:00
Stan Grishin
b90c80aae4 pbr: initial commit
* The makefile produces the nft and iptables capable `pbr` package
  and the `pbr-iptables` package for legacy setups
* This replaces `vpnbypass` and `vpn-policy-routing` packages
* I'm soliciting feedback on this package and my intention is to
  update the version to 1.0.0 before this is merged, but I need the
  feedback on this and luci-app-pbr before then.

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 47eca64cb8)
2022-12-03 02:38:02 +00:00
Stan Grishin
e5083a9dba Merge pull request #19994 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: localizable error/warning messages
2022-12-02 12:19:27 -07:00
Julien Malik
6b21bd34f3 borgbackup: add package for 1.2.2
Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 2ad61a4529)
2022-12-02 11:26:09 +01:00
Julien Malik
5a7ecd11e0 python-pyfuse3: add package for 3.2.2
Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 17f58b94a7)
2022-12-02 11:26:04 +01:00
Julien Malik
bdf7a73cb5 python-trio: add package for 0.22.0
Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 07e29c3782)
2022-12-02 11:26:00 +01:00
Julien Malik
e2b1c2cd4f python-sniffio: add package for 1.3.0
Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit f35f4dace7)
2022-12-02 11:25:55 +01:00
Julien Malik
e029bdb32c python-outcome: add package for 1.2.0
Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 750facea90)
2022-12-02 11:25:50 +01:00
Julien Malik
dd9ff1b6c5 python-async-generator: add package for 1.10
Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 8fe1dab371)
2022-12-02 11:25:46 +01:00
Julien Malik
f0a0937011 python-exceptiongroup: add package for 1.0.4
Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit a19f331b06)
2022-12-02 11:25:37 +01:00
Julien Malik
0310a6edf4 python-sortedcontainers: add package for 2.4.0
Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 69655222fc)
2022-12-02 11:25:31 +01:00
Julien Malik
c5877bd654 xxhash: add package for 0.8.1
Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit dcbb2cf3d5)
2022-12-02 11:25:24 +01:00
Liangbin Lian
452681ea7f samba4: support both user map and valid users on same time
Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit e04e523a01)
2022-12-02 17:50:54 +08:00
Glenn Strauss
6de7a04c42 lighttpd: lighttpd.conf vars, comments, guidance
lighttpd.conf variables, documentation comments, configuration guidance

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit c862b524fb)
2022-12-02 09:57:21 +01:00
Glenn Strauss
bc6431a94a lighttpd: print stderr trace if validation fails
lighttpd.init validate_conf(): print stderr trace if validation fails

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 38ffa02e42)
2022-12-02 09:57:17 +01:00
Michael Heimpold
cf8ce7a4e2 php8: update to 8.1.13
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 056051da49)
2022-12-01 21:15:25 +01:00
Tianling Shen
e057ed8827 v2raya: backports upstream fixes and add 3 new options
It may take a long time waiting for a new tag, so backport these
important bug fixes for now.

While at it, added 3 new options provided by upstream, and deprecated
the usage of `$(AUTORELEASE)`.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 17362ce57c)
2022-12-01 01:44:19 +08:00
Tianling Shen
fe96d64b81 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 664ecae4e6)
2022-12-01 01:44:14 +08:00
Tianling Shen
a8858d1e3f xray-core: Update to 1.6.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b3e453f335)
2022-12-01 01:44:09 +08:00
Tianling Shen
85a0f22ca4 yq: Update to 4.30.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 255d19a007)
2022-12-01 01:44:04 +08:00
Maxim Anisimov
f19180a1d8 libqmi: bump to 1.30.8
Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit 0b0d8163d5)
2022-11-30 13:03:00 +01:00
Stan Grishin
6cf7648bd9 simple-adblock: localizable error/warning messages
* store all error/warning messages with the error text id so that
  they can be made localizable for the luci app

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 8047d2ccb7)
2022-11-29 22:41:55 +00:00
Stan Grishin
a99116f200 Merge pull request #19988 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: bugfix: detect dnsmasq ipset support
2022-11-29 14:41:13 -07:00
Stan Grishin
d59f56bb66 Merge pull request #19986 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: improve performance on restart
2022-11-29 14:40:58 -07:00
Tianling Shen
91b205481c librespeed-go: add new package
Go backend for LibreSpeed.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a157e382df)
2022-11-28 23:22:29 +01:00
Stan Grishin
2e7ce8a23c simple-adblock: bugfix: detect dnsmasq ipset support
* Fixes https://github.com/openwrt/packages/issues/19978, thank you
  @parona-source for the report/patch!

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit cc10774e6e)
2022-11-28 21:25:15 +00:00
Stan Grishin
80dd929bfc https-dns-proxy: improve performance on restart
* instead of doing stop/start which involves restarting dnsmasq twice,
  kill the existing service instances on restart instead

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit e6d746a0ba)
2022-11-28 21:23:10 +00:00
Peter van Dijk
6f405bd565 pdns-recursor: update to 4.7.4
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit 7bcc02e7c9)
2022-11-26 10:24:00 +01:00
Christian Lachner
11d749180a liburing: Update to v2.3
- Updated download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
(cherry picked from commit f01ebf5f33)
2022-11-25 20:11:03 +01:00
Christian Lachner
17b54726de liburing: Update to v2.2
- Updated download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
(cherry picked from commit 3f82f9a002)
2022-11-25 20:10:59 +01:00
Tilman Vogel
44781b792e ices: Update to 2.0.3
This fixes a timing issue causing a playlist to be streamed as-fast-as-
possible until memory exhaustion, finally crashing ices and making it
basically useless.

This problem occurred in  the timing code in src/common/timing/ and is
probably related to libc header changes because ices 2.0.2 worked up until
OpenWrt 21.02.3 (at least) but failed in OpenWrt 22.03.2.

Signed-off-by: Tilman Vogel <tilman.vogel@web.de>
(cherry picked from commit 4e2b09bd95)
2022-11-25 20:10:32 +01:00
Rosen Penev
198459abea gphoto2: update to 2.5.28
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit dc3ab606d5)
2022-11-25 20:09:57 +01:00
Rosen Penev
b7c43947fb libgphoto2: update to 2.5.30
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8f3a4366f0)
2022-11-25 20:09:52 +01:00
Van Waholtz
a02a11f681 syncthing: update to 1.22.1
Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 4d5c427922)
2022-11-25 20:07:30 +01:00
Michal Vasilek
fdd9f725a6 syncthing: update to 1.20.1
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit b48482fdf8)
2022-11-25 20:07:24 +01:00
Van Waholtz
94f7097207 syncthing: add stdiscosrv and strelaysrv
Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 9d17ba1a93)
2022-11-25 20:05:45 +01:00
Marius Dinu
8e7192b9b6 tvheadend: update to git master 2022-11-20
- EPG database switched from v2 to v3. This commit updates OpenWrt init script to use the new database file.
- EPG database symlink created by OpenWrt config option is overwritten with a real file by tvheadend.
  The latest tvheadend commit included here fixes that.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit bf27912019)
2022-11-24 12:34:48 +01:00
Jan Hák
8a0333ed74 knot: update to version 3.2.3
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 4370e457c8)
2022-11-24 12:34:25 +01:00
Tianling Shen
0e190e5cd0 cloudflared: Update to 2022.11.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 804ab5540e)
2022-11-23 15:08:19 +08:00
Stan Grishin
beb67db2e8 Merge pull request #19957 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: update Makefile package descrition
2022-11-22 14:19:10 -07:00
Tianling Shen
714075bb6f ooniprobe: Update to 3.16.5
Fix build with Go 1.19.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1c6570dcc7)
2022-11-22 14:07:06 +01:00
Eric Luehrsen
0de8e969e3 unbound: update to 1.17.0
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit 6bc0293a73)
2022-11-22 14:07:00 +01:00
Michal Vasilek
7e25e745f5 librespeed-cli: rename binary to librespeed-cli
upstream names the binary librespeed-cli and this avoids a conflict with
python3-speedtest-cli

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit c2ad338b0f)
2022-11-22 14:37:51 +08:00
Tianling Shen
dfdf74ef9e rclone: Update to 1.60.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 88a1535d00)
2022-11-22 14:37:47 +08:00
Tianling Shen
e769b3fdb1 gg: Update to 0.2.15
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit fec75efd8b)
2022-11-22 14:37:42 +08:00
Tianling Shen
bee5b07c65 sqlite3: Update to 3.40.0
1. Added a new option for SQLITE3_COLUMN_METADATA.
2. Minor cleanup Makefile and fixed 2 typo errors.

Fixes: CVE-2022-35737

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a4a0f0793b)
2022-11-22 14:37:31 +08:00
Stan Grishin
554f0aed0c https-dns-proxy: update Makefile package descrition
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 0765fb0790)
2022-11-22 01:15:15 +00:00
Tianling Shen
03b41dbb57 xray-core: Update to 1.6.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d36c34f984)
2022-11-21 19:03:34 +08:00
Olivier Poitrey
dcb6389f2a nextdns: Update to version 1.38.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
(cherry picked from commit 1acf423ef5)
2022-11-21 02:17:57 +08:00
Stan Grishin
ee07ea15ca Merge pull request #19901 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: update to 1.9.3-1
2022-11-19 22:26:03 -07:00
Hannu Nyman
ffa5f4db84 nano: update to 7.0
Update nano to version 7.0.

Add a patch to fix the plus variant.
Upstream discussion and patch in
https://savannah.gnu.org/bugs/?63372

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 4a89a577a7)
2022-11-18 20:28:12 +02:00
Stefan Brusch
20d5a2216d bcp38: migrate to nftables
Signed-off-by: Stefan Brusch <ne20002@gmx.ch>
(cherry picked from commit 471ffdd98c)
2022-11-17 18:12:08 +08:00
Tianling Shen
fd3e15543e yq: Update to 4.30.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8762261112)
2022-11-17 17:53:24 +08:00
van waholtz
b7166a81fb frp: update to 0.45.0
Signed-off-by: van waholtz <brvphoenix@gmail.com>
2022-11-16 22:51:18 -08:00
van waholtz
b2081557f2 ariang: update to 1.3.2
Signed-off-by: van waholtz <brvphoenix@gmail.com>
2022-11-16 17:34:09 -08:00
Stijn Tintel
5c1e589739 Revert "openthread-br: new package"
The PR to add openthread-br in master isn't merged yet, as it has draft
status. This was merged prematurely. Revert.

This reverts commit 27dd30aadb.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2022-11-15 16:39:07 +02:00
Stan Grishin
553d07845d simple-adblock: update to 1.9.3-1
* introduce the new curl_max_file_size option
* prevent warnings/errors to be displayed each time the load_environment
  is invoked
* better organize dl_command appendixes
* implement support for downloading/using external dnsmasq config file
* refactor adb_check and adb_allow for better readability
* update default values for some options in the uci_load_validate call
* update reload trigger to include curl options

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit f11ce28baf)
2022-11-14 19:24:04 +00:00
Tianling Shen
71e8e63a34 yq: Update to 4.30.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4d667ec8e8)
2022-11-14 16:51:20 +08:00
Tianling Shen
bf8a6584f6 yq: Update to 4.30.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2cba6e5f73)
2022-11-14 16:51:15 +08:00
John Audia
67b2ba78ef rsync: update to 3.2.7
Bump to latest upstream release.

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit de85ed88a7)
2022-11-14 16:47:33 +08:00
John Audia
6fb9da0cd4 rsync: incorporate upstream fixes
Upstream is requesting that packagers cherry-pick two commits to fix the
current release.[1]

1. https://www.mail-archive.com/rsync@lists.samba.org/msg33576.html

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit deddf26cc2)
2022-11-14 16:47:28 +08:00
John Audia
0c4379d16b rsync: bump to 3.2.6
Bump to latest upstream release.

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 454bbae888)
2022-11-14 16:47:22 +08:00
Moritz Warning
a74d1b82ef zerotier: update to 1.10.2
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-11-14 02:46:41 +08:00
Hannu Nyman
8aec58f78c irqbalance: update to 1.9.2
Update irqbalance to version 1.9.2.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 5c8d0939e8)
2022-11-12 21:13:52 +02:00
Tianling Shen
fc62b59a9f gg: Update to 0.2.14
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1e633ccfdd)
2022-11-12 18:48:08 +02:00
Tianling Shen
5423b2d103 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e5c3c3409c)
2022-11-12 18:47:20 +02:00
Tianling Shen
ddc4edc5bc xray-core: Update to 1.6.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4194268e3f)
2022-11-12 18:47:20 +02:00
Stijn Tintel
27dd30aadb openthread-br: new package
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit ff49c0c02b290a3939b8a7f25fd58c160a904dbb)
2022-11-11 15:15:26 -08:00
Josef Schlehofer
bf2eb2333c golang: update to version 1.18.8
Fixes following CVEs:
- CVE-2022-32189 (version 1.18.5 [1]]
- CVE-2022-27664 (version 1.18.6 [2])
- CVE-2022-32190 (version 1.18.6 [2])
- CVE-2022-2879 (version 1.18.7 [3])
- CVE-2022-2880 (version 1.18.7 [3])
- CVE-2022-41715 (version 1.18.7 [3])
- CVE-2022-41716 (version 1.18.8 [4])

and refreshed patch

[1] https://groups.google.com/g/golang-announce/c/YqYYG87xB10
[2] https://groups.google.com/g/golang-announce/c/x49AQzIVX-s
[3] https://groups.google.com/g/golang-announce/c/xtuG5faxtaU
[4] https://groups.google.com/g/golang-announce/c/mbHY1UY3BaM

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c33c2d8869)
2022-11-10 09:16:03 +01:00
David Bauer
4f15ecf5e4 Merge pull request #19871 from blocktrron/qcsuper-2203
qcsuper: add package with dependencies
2022-11-10 03:41:52 +01:00
David Bauer
48fc509502 qcsuper: add package
Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit e4dfee0886)
2022-11-10 02:04:42 +01:00
David Bauer
3e63425d75 python-pycrate: add package
Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit e956e733c3)
2022-11-10 02:04:35 +01:00
David Bauer
2466b3c0d0 python-crcmod: add package
Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 341b07f92e)
2022-11-10 02:04:28 +01:00
Josef Schlehofer
c2b7f86a88 ffmpeg: libffmpeg-full package should provide libffmpeg package, too
The previous solution overwrote the provide from ``define
Package/libffmpeg/Default``, but that's not what was wanted.
Thus libffmpeg-full should provide three packages libffmpeg,
libffmpeg-mini and libffmpeg-audio-dec

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c333c0e522)
2022-11-09 15:13:01 +01:00
Stan Grishin
419f673774 Merge pull request #19861 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: update to 1.9.2-4
2022-11-07 17:11:36 -08:00
Stan Grishin
2f7a640bc7 simple-adblock: update to 1.9.2-4
* update default config file to list options alphabetically
* rearrange some of the init script code to support transition
  of WebUI to javascript
* rename wan6_trigger to procd_trigger_wan6 for readability

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 7393b74457)
2022-11-08 00:46:25 +00:00
Tianling Shen
c5974e7d16 xray-core: Update to 1.6.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e606ea7e78)
2022-11-06 11:44:16 -08:00
Michael Heimpold
b639d7b438 Merge pull request #19835 from mhei/22.03-php8-update-to-8.1.12
[22.03] php8: update to 8.1.12
2022-11-06 15:52:54 +01:00
Josef Schlehofer
458836e6c1 pulseadio: fix conffiles for pulseadio-daemon-avahi package
Fixes: 60ac7dd751 ("pulseaudio: simplify
and rework Makefile")

Reported-by: Hannu Nyman <hannu.nyman@iki.fi>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 7ae66ec7ca)
2022-11-05 21:21:02 +01:00
Stijn Tintel
01cb4fc41d hub-ctrl: trim trailing spaces
Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 9579da76ec)
2022-11-05 21:20:55 +01:00
Stijn Tintel
3f4cc35d14 announce: trim trailing spaces
Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit d6b78a0a2b)
2022-11-05 21:20:51 +01:00
Jan Hák
58b48b2df4 knot: update to version 3.2.2
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit a5913d51c7)
2022-11-05 21:20:46 +01:00
Josef Schlehofer
8a106f066e pulseaudio: change homepage URLs to freedesktop.org
The previous used domain http(s)://pulseaudio.org redirects to
https://www.freedesktop.org/wiki/Software/PulseAudio/

This change enforces to use HTTPS everywhere for homepage URLs

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 00e3918069)
2022-11-05 21:20:41 +01:00
Josef Schlehofer
58a5e8a5e1 pulseaudio: use AUTORELEASE variable
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 364054fbe7)
2022-11-05 21:20:36 +01:00
Josef Schlehofer
05be550e75 pulseaudio: daemons should conflict to each other
It should not be possible to install pulseaudio-daemon and
pulseadio-daemon-avahi at the same time as they have the same files.
Let's avoid that situation by adding conflict.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5a5bb15949)
2022-11-05 21:20:32 +01:00
Josef Schlehofer
6a4b1d195b pulseaudio: simplify and rework Makefile
There were two conffiles sections and both of them were same, but for
different variants. We can have just one conffile section and use it also
for the other variant.

The same applies for the install section for different variants.
- We have two install sections, but we call the first one with the same
  files and then add something more for the second variant.

- While at it to make it easier, let's change those three rows for
  copying packages into the single one to make sure that I did not miss
anything. Also, we create a directory first and then move files.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 60ac7dd751)
2022-11-05 21:20:27 +01:00
Stijn Tintel
e8c1696931 luaexpat: trim trailing spaces
Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit b051bbcad8)
2022-11-05 21:20:19 +01:00
Stijn Tintel
8f85f89845 squid: trim trailing space
Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit d3ef994b35)
2022-11-05 21:19:55 +01:00
Stijn Tintel
8ff3244193 mini_snmpd: trim trailing spaces
Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 3d98f91fe2)
2022-11-05 21:19:50 +01:00
Stijn Tintel
1fcbe2d6e8 lynx: trim trailing space
Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 1ba153246b)
2022-11-05 21:19:46 +01:00
Michal Vasilek
e4a3e0d948 librespeed-cli: add package
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit bb33b55354)
2022-11-05 21:19:39 +01:00
Vladimir Ulrich
503e3a0e38 zoneinfo: updated to the latest release
Updated zoneinfo-all meta-package to fix warnings on build
Removed zoneinfo-simple from dependencies of zoneinfo-all as its contents are included in other packages.

Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit 1d88250815)
2022-11-05 21:19:23 +01:00
Vladimir Ulrich
db2989ebc7 zoneinfo: updated to the latest release
Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit 5a9e8698c9)
2022-11-05 21:19:18 +01:00
Vladimir Ulrich
de77e23209 zoneinfo: updated to the latest release
Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit 8d693a79be)
2022-11-05 21:19:11 +01:00
Szabolcs Hubai
cb7fe299f9 mpd: depend the full variant on pulseaudio instead of pulseaudio-daemon
The full variant of mpd depends on pulseaudio-daemon, so it was not
possible to use the other pulseaudio variant with avahi.

Both pulseaudio daemons provides package pulseaudio, so users can choose
which variant suits them best.
Let's change the dependency to pulseaudio.

Fixes: #19187
Fixes: 2ed62adc59 ("mpd: enable pulseaudio in full package")
Signed-off-by: Szabolcs Hubai <szab.hu@gmail.com>
(cherry picked from commit abe35e89f6)
2022-11-05 18:57:15 +01:00
Stan Grishin
6b8c90260d Merge pull request #19793 from stangri/openwrt-22.03-curl-7.86.0
[22.03] curl: update to 7.86.0
2022-11-04 19:07:03 -07:00
Stan Grishin
1b384f4c48 Merge pull request #19710 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: rename wan6_trigger option
2022-11-04 19:05:38 -07:00
Stan Grishin
341e50de0f Merge pull request #19708 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: rename options
2022-11-04 19:05:16 -07:00
Michael Heimpold
4d8a00e541 php8: update to 8.1.12
This fixes:
    - CVE-2022-31630
    - CVE-2022-37454

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 58b47869c0)
2022-11-04 18:44:48 +01:00
Tianling Shen
1f71809d69 cloudflared: Update to 2022.10.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 33634e30c2)
2022-11-03 20:27:17 -07:00
Tianling Shen
18854f6f85 rclone: Update to 1.60.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 90e037b5e5)
2022-11-03 20:27:06 -07:00
Tianling Shen
81b355ec51 yq: Update to 4.29.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d1f2b96b7e)
2022-11-03 20:26:56 -07:00
Stan Grishin
58bd7b001d curl: bugfix: building as selected package doesn't break build
* Reported-by: Chen Minqiang <ptpt52@gmail.com>
* details [here](88009b2d5e (commitcomment-88604318))

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 9c78e10030)
2022-11-03 11:16:29 +00:00
Stan Grishin
cc160ea8d0 curl: update to 7.86.0
* update to 7.86.0: https://curl.se/changes.html#7_86_0
* remove 300-curl-wolfssl.m4-error-out-if-wolfSSL-is-not-usable.patch as
  it was fixed upstream: https://github.com/curl/curl/pull/9682
* update configure options for OpenSSL as --without-ssl is breaking build
* remove --without-libidn configure arg as it's no longer recognized

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 88009b2d5e)
2022-11-03 11:16:29 +00:00
Alexandru Ardelean
6f4e732871 python3-pytz: bump to version 2022.5
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-03 09:45:51 +01:00
Stan Grishin
0bca5e2a0e curl: include nls.mk
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit d66435208c)
2022-10-31 23:44:24 -07:00
Tianling Shen
56380fb013 dnsproxy: Update to 0.46.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 631122c0eb)
2022-10-30 12:35:37 -07:00
Tianling Shen
1acc8e3e73 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 998e87b6d9)
2022-10-30 12:35:24 -07:00
Tianling Shen
ab97e3d50e xray-core: Update to 1.6.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b16b07409f)
2022-10-30 12:35:24 -07:00
Tianling Shen
a1fbaa7043 xray-core: remove orphan xray-geodata definition
Fixes: 975153f93d ("v2ray-geodata: split from xray-geodata")

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8e2e11aa2d)
2022-10-30 12:35:24 -07:00
Hirokazu MORIKAWA
0b68bfd6c0 node: bump to v16.18.0
Update to v16.18.0

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 5851aa8062)
2022-10-28 14:11:20 +02:00
Josef Schlehofer
f916e3426b ffmpeg: add conflicts and provides
Motivation of this change is that full variants provides the mini
variant and as well audio-dec package, thus you can not install both as
it fails with the following output:

Collected errors:
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavcodec.so.58
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavcodec.so.58.91.100
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavdevice.so.58
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavdevice.so.58.10.100
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavformat.so.58
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavformat.so.58.45.100
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavutil.so.56
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavutil.so.56.51.100
	But that file is already provided by package  * libffmpeg-full
 * opkg_install_cmd: Cannot install package libffmpeg-audio-dec.

Let's change it to:
Installing libffmpeg-audio-dec (4.3.4-1) to root...
Collected errors:
 * check_conflicts_for: The following packages conflict with libffmpeg-audio-dec:
 * check_conflicts_for:         libffmpeg-full *
 * opkg_install_cmd: Cannot install package libffmpeg-audio-dec.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 9693bd47c5)
2022-10-28 13:49:01 +02:00
Jean-Michel Lacroix
f7d592607f bandwidthd: fix time_t problem
Fixes issue #19510 with the change in time_t with musl 1.2

Signed-off-by: Jean-Michel Lacroix <lacroix@lepine-lacroix.info>
(cherry picked from commit 61d1a86)
2022-10-27 12:02:13 -07:00
Christian Marangi
1cebcd66f4 atlas-probe: fix SIGSEGV error on 32bit system
Changes to time_t cause SIGSEGV error on 32bit system and cause ripe
atlas malfunction. (registration successful but no traffic)
Also introduce minor patch to fix some compilation warning.

While at it move PKG_RELEASE to AUTORELEASE macro.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 14c5dfe4c1)
2022-10-27 16:03:17 +02:00
Nick Hainke
ea7a0739a7 samplicator: update to latest master commit 2021-10-11
The newest master branch has important fixes. However, no new release is
published [0]. Switch to git and update to latest master commit.
This introduces new version scheme by using YYYY-MM-DD of the commit.

In addition, add necessary "PKG_FIXUP" and "PKG_REMOVE_FILES" to allow
compile the new version. Also add enable "PKG_BUILD_PARALLEL".

Further, use a pidfile and remove outdated patches.

https://github.com/sleinen/samplicator/issues/73

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit a6d7ed4d6d)
2022-10-27 15:37:49 +02:00
Josef Schlehofer
b4d1b8424e libwebsockets: fix recursive dependency
While running `make menuconfig`, it was discovered then there is a
recursive dependency like this:
tmp/.config-package.in:59138:error: recursive dependency detected!
tmp/.config-package.in:59138:	symbol PACKAGE_libwebsockets-openssl is selected by PACKAGE_libwebsockets-mbedtls
tmp/.config-package.in:59122:	symbol PACKAGE_libwebsockets-mbedtls depends on PACKAGE_libwebsockets-openssl

It is not possible with the recently added conflicts that two packages
(OpenSSL and full variant, which uses OpenSSL as well), which are almost the same
provides the same named package libwebsockets as their conflict - Mbed
TLS.

Fixes: 676c5c72b5 ("libwebsockets: OpenSSL
and mbedTLS variants should conflict")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a4e8cbb89a)
2022-10-27 14:24:51 +02:00
Stan Grishin
b2727bbe02 simple-adblock: rename wan6_trigger option
* rename wan6_trigger to procd_trigger_wan6
* reorder options in default config alphabetically

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 491ade4197)
2022-10-25 22:15:43 +00:00
Stan Grishin
fa567eef0e https-dns-proxy: rename options
* rename wan6_trigger to procd_trigger_wan6
* rename update_dnsmasq_config to dnsmasq_config_update
* add the uci-defaults file to run sed on config file
* update Makefile to include uci-defaults file

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 6bd055284c)
2022-10-25 21:38:52 +00:00
Josef Schlehofer
fefd89f774 libwebsockets: OpenSSL and mbedTLS variants should conflict
They provide the same files, but they don't conflict to each other, this
means that users can install them side by side.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 676c5c72b5)
2022-10-25 14:29:25 +02:00
Josef Schlehofer
21ac9491f1 libwebsockets: full variant provides OpenSSL
For some time, it is not possible to install ttyd and mosquitto-ssl at the
same time, so let's solve it that libwebsockets-full provides
libwebsockets-openssl. This allows to install ttyd and mosquitto at
the same time.

Also, we need to add conflict, because we should not have installed
libwebsockets-openssl and libwebsockets-full at the same time as they
provides the same files.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 77e682a11c)
2022-10-25 14:29:20 +02:00
Josef Schlehofer
deefa58a83 lighttpd: backport patch to fix dummy Sec-WebSocket-Key
It was requested in https://gitlab.nic.cz/turris/os/packages/-/issues/873

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit de49362d35)
2022-10-25 14:05:36 +02:00
Stan Grishin
5caff2eca1 Merge pull request #19700 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: add version information to binary
2022-10-24 23:11:34 -07:00
Stan Grishin
944a36af43 Merge pull request #19697 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: service_triggers improvements
2022-10-24 23:11:24 -07:00
Michal Hrusecky
54f3c84449 mariadb: Drop unused rundir fix socket dir perms
We had been creating "rundir" but it was never used, probably leftover
from some removed function. At the same time, we were setting quite
strict rights to the socket directory (while comments sugested
otherwise).

Signed-off-by: Michal Hrusecky <michal@hrusecky.net>
(cherry picked from commit 8f6831b64b)
2022-10-25 06:47:33 +02:00
Stan Grishin
6f49212bcf https-dns-proxy: add version information to binary
* add patches/020-cmakelists-add-version.patch (thanks @baranyaib90)
  to add version information to the binary and fix https://github.com/aarond10/https_dns_proxy/issues/149
* modify Makefile to add version information for the binary
* rename patches/010-fix-cmakelists.patch for better readability
* revert back to service restart in WAN/WAN6 trigger
* update test.sh to test both init script and binary versions

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 61ca2f4d16)
2022-10-24 21:54:11 +00:00
Stan Grishin
0be9e78c08 simple-adblock: service_triggers improvements
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 188d332840)
2022-10-24 17:04:31 +00:00
Stan Grishin
14125f8002 Merge pull request #19692 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: bugfix: restore empty server; misc improvements
2022-10-24 09:45:13 -07:00
Dirk Brenken
7132a6b55d adblock: update 4.1.5-4
* fixed broken oisd regex

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e90b4c01e1)
2022-10-24 12:35:24 +02:00
Sebastian Kemper
55c412f4b8 softflowd: use %lld for time_t always
Add upstreamed patch to fix segmentation fault reported in [1].

[1] https://github.com/openwrt/packages/issues/19655

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 7d019635b1)
2022-10-23 23:29:58 -07:00
Michal Hrusecky
5076201543 mariadb: Update to the latest version 10.6.10
Keeping the major version, bumping just a minor version. It includes
various bug fixes and security fixes. For details, see:

https://mariadb.com/kb/en/mariadb-10610-release-notes/
https://mariadb.com/kb/en/mariadb-1069-release-notes/
https://mariadb.com/kb/en/mariadb-1068-release-notes/
https://mariadb.com/kb/en/mariadb-1067-release-notes/
https://mariadb.com/kb/en/mariadb-1066-release-notes/
https://mariadb.com/kb/en/mariadb-1065-release-notes/

Following two patches dropped as the issues were fixed in upstream.

* 130-c11_atomics.patch
* 140-mips-connect-unaligned.patch

The rest of the patches were refreshed.

Don't need to disable cassandra and tokudb anymore as they were dropped
from upstream tarball.

Signed-off-by: Michal Hrusecky <michal@hrusecky.net>
2022-10-23 23:26:44 -07:00
Stan Grishin
e7b83b5a54 https-dns-proxy: bugfix: restore empty server; misc improvements
* bugfix: properly restore empty server config for dnsmasq (to
  address issue brought up in https://github.com/stangri/source.openwrt.melmac.net/pull/162)
* better handling of non-existant wan/wan6 interface for triggers
* add resolver url to ubus data for future-proofing WebUI js move

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit fbc63cb9f6)
2022-10-24 04:22:20 +00:00
Dirk Brenken
7278c00b26 adblock: update 4.1.5-3
* fixed search regression in DNS report
* removed last shallalist pointers in the init help

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit ca4c4d4fbc)
2022-10-22 09:24:45 +02:00
Tianling Shen
15ce9af907 treewide: fix procd service inactive
Exit directly will result procd service inactive and uci
configuration changes are no longer monitored.

Reported-by: Lvc Revincx <revincx233@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b1651c5d54)
2022-10-21 15:09:08 -07:00
Tianling Shen
31b99e2560 dnsproxy: Update to 0.45.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5801b0134a)
2022-10-21 15:03:16 -07:00
Stan Grishin
55fe139c72 Merge pull request #19661 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: bugfix: prevent creation of empty interface trigger
2022-10-21 14:15:44 -07:00
Stan Grishin
cd052c1b97 Merge pull request #19659 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: remove unnecessary procd_add_reload_interface_trigger
2022-10-21 14:15:25 -07:00
Stan Grishin
ad1d25d0bf https-dns-proxy: bugfix: prevent creation of empty interface trigger
* When $wan/$wan6 are empty but double-quoted, it leads to creation
  of an interface trigger with empty interface

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 425cef2f8c)
2022-10-21 11:59:44 +00:00
Stan Grishin
45cdc86462 simple-adblock: remove unnecessary procd_add_reload_interface_trigger
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit ef067f6304)
2022-10-21 11:54:52 +00:00
Stan Grishin
6af202f917 Merge pull request #19594 from pymumu/master
[openwrt-22.03] smartdns: update to 1.2022.38.1
2022-10-20 04:53:07 -07:00
Stan Grishin
2104296291 Merge pull request #19636 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: bugfix: remove canary domains
2022-10-20 03:42:32 -07:00
Dirk Brenken
667ba42946 adblock: update 4.1.5-2
* fixed broken/blocked oisd download links (switched to the official github mirror)
* made sure that curl error out on http errors as well
* removed obsolete compatibility stuff from init script

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit f83baf221d)
2022-10-20 11:49:15 +02:00
Stan Grishin
1b93c3104a https-dns-proxy: bugfix: remove canary domains
* bugfix: canary domains persistence (as described in
  https://forum.openwrt.org/t/https-dns-proxy-canary-domain-persistance/139967)
* minor: remove global variables and make them local in
  service_start/service_stop/service_triggers
* minor: split DEFAULT_BOOTSTRAP into BOOTSTRAP_CF and BOOTSTRAP_GOOGLE for
  better code readability

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 92a45c3985)
2022-10-20 05:24:11 +00:00
Stan Grishin
997737ee83 Merge pull request #19634 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: bugfix: remove wan6 from procd triggers
2022-10-19 05:21:25 -07:00
Stan Grishin
7a7b95639d https-dns-proxy: bugfix: remove wan6 from procd triggers
* fixes https://github.com/openwrt/packages/issues/19631

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 409ce0f14f)
2022-10-19 09:05:18 +00:00
Hannu Nyman
9b6e0fde7e irqbalance: update to 1.9.1
Update irqbalance version to 1.9.1

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit c1582e1ad0)
2022-10-19 08:51:13 +02:00
Rosen Penev
40006c97c3 irqbalance: add meson
Fixes compilation when libiconv is missing.

Also remove pthread from glibc. No longer needed.

Cleanup Makefile for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 59cadc7c65)
2022-10-19 08:51:13 +02:00
Rui Salvaterra
dc768d941a irqbalance: handle deepestcache option
Allow the user to specify the level at which irqbalance assumes the cache
domains are partitioned. Keep the default value of 2.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit d9447cfdc2)
2022-10-19 08:51:13 +02:00
Stan Grishin
acfd1ca906 Merge pull request #19604 from stangri/openwrt-22.03-nebula
[22.03] nebula: implement netifd support
2022-10-18 11:09:16 -07:00
Stan Grishin
44c6348c2c Merge pull request #19626 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: update to 1.9.2-1
2022-10-18 11:08:13 -07:00
Dirk Brenken
b365fdf8c7 adblock: update 4.1.5
* made the reporting/top statistics flexible, see "top_count" parm in CLI or in LuCI (default 10), fixes #19622
* added the new blocklist source cpbl (provided by PascalCoffeeLake@gmail.com)
* added/separated Easylist/Easyprivacy blocklist sources (provided by PascalCoffeeLake@gmail.com)
* added reg_jp blocklist_source (provided by PascalCoffeeLake@gmail.com)
* removed the easylist addons from the other regional lists
* removed the second/obsolete pl regional list and renamed the first one to "reg_pl"
* updated the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0e19246d14)
2022-10-18 19:02:09 +02:00
Michal Vasilek
de80dad8c2 ddns-scripts: fix cloudflare&digitalocean provides
Fixes mistake in dbe79e409d, the
cloudflare PROVIDES got mixed up with digitalocean.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 001564ed83)
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Remove PKG_RELEASE version bump
2022-10-18 15:51:39 +02:00
Michal Vasilek
b0e5208557 ddns-scripts: add PROVIDES for old package names
* ddns-scripts-services: provide ddns-scripts_service
* ddns-scripts-cloudflare: provide ddns-scripts_digitalocean.com-v2
* ddns-scripts-freedns: provide ddns-scripts_freedns_42_pl
* ddns-scripts-godaddy: provide ddns-scripts_godaddy.com-v1
* ddns-scripts-noip: provide ddns-scripts_no-ip_com
* ddns-scripts-nsupdate: provide ddns-scripts_nsupdate
* ddns-scripts-route53: provide ddns-scripts_route53-v1
* ddns-scripts-cnkuai: provide ddns-scripts_cnkuai_cn

https://github.com/openwrt/packages/pull/13509 renamed many ddns-scripts
packages, but didn't include a PROVIDES for the old package names to
make updates work well.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit dbe79e409d)
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Remove PKG_RELEASE version bump
2022-10-18 13:35:46 +02:00
Stan Grishin
e8fc003672 simple-adblock: update to 1.9.2-1
* make PKG_VERSION of the init script readonly to remove shellcheck
  exception
* replace exit with return in the the procd scripts per:
  https://github.com/openwrt/packages/pull/19617
* remove custom boot() function as it prevented creation of procd
  firewall object on start on boot
* improve performance of allowing domains code

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 3ba54553ca)
2022-10-18 10:25:40 +00:00
Michal Vasilek
f8262f4056 tailscale: add version tests
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 551bb8b718)
2022-10-18 09:04:46 +02:00
Michal Vasilek
20595747f5 tailscale: fix -version
tailscale version, tailscaled -version and the web UI reported the wrong
version number which doesn't cause any issues, but it can be confusing.

This is fixed by specifying the version in go ldflags similar to how
it's done in many other go packages and the official tailscale Dockerfile.

version.Long version can not be specified in GO_PKG_LDFLAGS_X because it
contains a space and GO_PKG_LDFLAGS_X is always split at a space.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 738f44be4f)
2022-10-18 09:04:08 +02:00
Michael Heimpold
822cd366d6 Merge pull request #19619 from mhei/22.03-libxml2-update-2.10.3
[22.03] libxml2: update to 2.10.3
2022-10-18 08:00:13 +02:00
Michael Heimpold
37fd7c0316 libxml2: update to 2.10.3
This fixes:
    - CVE-2022-40303
    - CVE-2022-40304

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit c2742973b0)
2022-10-17 22:05:59 +02:00
Stan Grishin
d8e9f6a7a7 Merge pull request #19612 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: upstream bugfix for ca_info
2022-10-16 23:57:45 -07:00
Stan Grishin
ceba4b361a https-dns-proxy: upstream bugfix for ca_info
* upstream bugfix: Add a forgotten 'NULL' initialize for ca_info
  if not manually set
* make init script PKG_VERSION variable readonly so that a
  shellcheck excettion can be removed
* add procd interface trigger to 'wan6' if IPv6 wan interface name
  cannot be obtained on start

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit bca5d0ed8e)
2022-10-16 12:12:50 +00:00
Alexandru Ardelean
b201f469c7 numpy: bump to version 1.23.3
Also bump Cython version to 0.29.32

And yeeeey: zip -> tar.gz

And they fixed the Intel AVX extension stuff/detection.
Which is why I deferred updating it until now.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 5b9a66cd7c)
2022-10-15 17:22:11 +02:00
Eneas U de Queiroz
dba8a0102e gnunnet: halt build if any command fails
There are many places in the packages' install recipes whith multiple
commands being executed in the same shell invocation, separated with a
semicolon (;).  The return status will depend only on the last command
being run.  The same thing happens in loops, where only the last file
will determine the result of the command.

Change the ';' to '&&', and exit the loop if any operation fails.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 2e75ccbb7d)
2022-10-14 20:44:27 +02:00
Eneas U de Queiroz
c1700e3a33 gnunnet: don't copy non-existing files
There are six places pointing to files that do not exist any more:
 - gns-import.sh in package gnunet-gns (dropped in v0.11.0)
 - libgnunetdnsstub.so* in gnunet-vpn (integrated into util in v0.11.0)
 - libgnunettun.so* in gnunet-vpn (integrated into util in v0.11.0)
 - gnunet-service-ats-new in package gnunet (dropped in v0.12.0)
 - libgnunetreclaimattribute.so.* (integrated into reclaim in v0.13.0)
 - libgnunetabe.so.* in gnunet-reclaim (dropped in v0.17.2)

They were not noticed because their failing copy commands were part of
loops in which only the last operation had its exit status checked.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit fb91f8b7b0)
2022-10-14 20:44:23 +02:00
Eneas U de Queiroz
9c68da83ec gnunet: gnunet-rest: add libjose dependency
According to the package's configure.ac, reclaimID OpenID Connect plugin
depends on jose.  It is installed by the gnunet-rest plugin package:
libgnunnetrest_openid_connect.so.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit f041796003)
2022-10-14 20:44:18 +02:00
Eneas U de Queiroz
e1d7992559 opendoas: avoid libpam dependency
Package is failing to build because it picks up libpam dependency
regardless of `BUSYBOX_CONFIG_PAM`.

Use configure args --with-pam, --without-pam to assert the option.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 8cb0ed95dd)
2022-10-14 20:41:30 +02:00
Josef Schlehofer
53c0a2767c Revert "wget: update to 1.21.3"
With the newer wget version, wget-nossl can not be compiled due to
missing library, so let's revert it.

Package wget-nossl is missing dependencies for the following libraries:
libnettle.so.8

This reverts commit 5075f5b701.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-10-14 16:14:17 +02:00
Stan Grishin
93d378788f nebula: implement netifd support
This commit contains the following:
* Update binary to version 1.6.1
* Update README URLs in the Makefile to link OpenWrt-specific info
* Separate the binary, the init script and netifd script into 3 packages:
  nebula, nebula-service and nebula-proto accordingly
* implement yml parser for init script to fetch variables from it
* add the netifd script for nebula protocol
* update test file to address all built packages
* make the PKG_VERSION variable of init/proto scripts readonly

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 51902f9206)
2022-10-14 11:02:48 +00:00
Scott Roberts
e0502e477c zabbix: add variants for SSL support
opkg does not offer ssl varients:
zabbix-agentd
zabbix-sender
zabbix-get
zabbix-proxy
zabbix-server

resolve this by adding ssl varients.

Signed-off-by: Scott Roberts <ttocsr@gmail.com>
(cherry picked from commit cd48d03f01)
2022-10-13 22:05:10 +02:00
Nick Hainke
f9bbda2e4c wget: update to 1.21.3
Release Notes:
https://lists.gnu.org/archive/html/info-gnu/2022-02/msg00017.html

Remove the patch "100-fix-sts-time". This patch was replaced upstream by
several other fixes, see:
https://git.savannah.gnu.org/cgit/wget.git/log/src/hsts.c

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 5075f5b701)
2022-10-13 22:04:23 +02:00
Daniel Golle
0f48935aba auc: update to 0.3.1
Remove wrongly placed 'break' statement to actually jump to the most
recent version of a release branch.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit fd36c91db8)
2022-10-13 19:59:04 +01:00
Daniel Golle
62a7ef57d4 auc: update to version 0.3.0
Most notably this brings support for processing package changes such
as suggesting to replace firewall with firewall4 when updating from
21.02.x -> 22.03.y release.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 36525086ce)
2022-10-13 19:58:59 +01:00
Daniel Golle
427008a2a6 snowflake: update to version 2.3.1
03b2b56f Fix broker race condition
 36f03dfd Record proxy type for proxy relay stats

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 15fdb5fa16)
2022-10-13 19:58:53 +01:00
Daniel Golle
d57a6a35ba perl-net-dns: update to version 1.35
**** 1.35 Oct 4, 2022

    Improve SVCB error reporting.

Fix rt.cpan.org #144328
    accept_reply test fails with matched consecutive "random"
    generated packet->id

Fix rt.cpan.org #144299
    Spelling errors.

**** 1.34 May 30, 2022

    Improve robustness of EDNS option compose/decompose functions.
    Simplify code in Makefile.PL.

Fix rt.cpan.org #142426
    Avoid "Useless use of a constant in void context" warning.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit b9338331be)
2022-10-13 19:58:48 +01:00
Daniel Golle
b4be6d6b19 pcsc-lite: update to verion 1.9.9
1.9.9: Ludovic Rousseau
 11 September 2022
  - SCardEstablishContext() may return SCARD_W_SECURITY_VIOLATION if refused by Polkit
  - Fix SCardReleaseContext() failure on orphan handles
  - Fix SCardDisconnect() on orphan handle
  - pcsc-spy: log the pioSendPci & pioRecvPci SCardTransmit() parameters
  - Improve the log from pcscd: log the return code in text instead of hex
  - Some other minor improvements

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit a8698d5ede)
2022-10-13 19:58:42 +01:00
Daniel Golle
37de51dbab gawk: update to version 5.2.0
For changes see ChangeLog file[1].

[1]: https://git.savannah.gnu.org/cgit/gawk.git/plain/ChangeLog?h=gawk-5.2.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit cd20631bc7)
2022-10-13 19:58:36 +01:00
Daniel Golle
5ca1c82f87 libksba: update to version 1.6.1
Update to stable release 1.6.1.
See commit log since version 1.6.0 for changes[1].

[1]: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=shortlog;h=d3c1e063d708a46ef39152256f8b1ea466b61be0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit df589ce880)
2022-10-13 19:58:30 +01:00
Daniel Golle
c033edcca3 gnunet: update to version 0.17.5
Beware that switching to the new major version 0.17.x results in
incompatibility with clients still running 0.16.x.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 6d49ad9e5c)
2022-10-13 19:58:24 +01:00
Daniel Golle
30b4936199 libp11: update to version 0.4.12
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit d3b5074476)
2022-10-13 19:58:18 +01:00
Daniel Golle
f8f768f90e libinput: update to version 1.19.4
This release includes a fix for CVE-2022-1215, a format string
vulnerabilty in the evdev device handling. For details, see
https://gitlab.freedesktop.org/libinput/libinput/-/issues/752

Peter Hutterer (2):
      evdev: strip the device name of format directives
      libinput 1.19.4

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit b95dbe4187)
2022-10-13 19:58:11 +01:00
Daniel Golle
19874c3a79 libevdev: update to version 1.13.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 630f5b1608)
2022-10-13 19:58:05 +01:00
Daniel Golle
7dc69e306f postgresql: update to version 14.5
Release date: 2022-08-11
Adresses CVE-2022-2625.
For more details, please see the release notes[1].

[1]: https://www.postgresql.org/docs/release/14.5/
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit ead096d6dd)
2022-10-13 19:57:59 +01:00
Daniel Golle
4493098f60 pcsc-lite: update to version 1.9.8
1.9.8: Ludovic Rousseau
11 June 2022
- Install install_spy.sh & uninstall_spy.sh scripts in docdir
- SCardTransmit(): do not fail if receive buffer is "too large"
- SCardControl(): do not fail if receive buffer is "too large"
- fix some memory leaks on shutdown
- use a better random number generator
- Some other minor improvements

1.9.7: Ludovic Rousseau
13 May 2022
- disable strict compilation by default
- fix 3 warnings

1.9.6: Ludovic Rousseau
11 May 2022
- do not fail reader removal in some specific cases (USB/Thunderbolt port)
- improve documentation regarding /etc/reader.conf.d/
- SCardGetStatusChange: speedup the case DISABLE_AUTO_POWER_ON
- configure:
  . add --disable-strict option
   By default the compiler arguments are now:
   -Wall -Wextra -Wno-unused-parameter -Werror ${CFLAGS}
  . fail if flex is not found
- fix different data races
- pcscdaemon: -v displays internal constants values:
  MAX_READERNAME & PCSCLITE_MAX_READERS_CONTEXTS
- Some other minor improvements

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit db667b5b0f)
2022-10-13 19:57:53 +01:00
Daniel Golle
5d5348bc59 exim: update to version 4.96
Exim version 4.96
-----------------

JH/01 Move the wait-for-next-tick (needed for unique message IDs) from
      after reception to before a subsequent reception.  This should
      mean slightly faster delivery, and also confirmation of reception
      to senders.

JH/02 Move from using the pcre library to pcre2.  The former is no longer
      being developed or supported (by the original developer).

JH/03 Constification work in the filters module required a major version
      bump for the local-scan API.  Specifically, the "headers_charset"
      global which is visible via the API is now const and may therefore
      not be modified by local-scan code.

JH/04 Fix ClamAV TCP use under FreeBSD. Previously the OS-specific shim for
      sendfile() didi not account for the way the ClamAV driver code called it.

JH/05 Bug 2819: speed up command-line messages being read in.  Previously a
      time check was being done for every character; replace that with one
      per buffer.

JH/06 Bug 2815: Fix ALPN sent by server under OpenSSL.  Previously the string
      sent was prefixed with a length byte.

JH/07 Change the SMTP feature name for pipelining connect to be compliant with
      RFC 5321.  Previously Dovecot (at least) would log errors during
      submission.

JH/08 Remove stripping of the binaries from the FreeBSD build.  This was added
      in 4.61 without a reason logged. Binaries will be bigger, which might
      matter on diskspace-constrained systems, but debug is easier.

JH/09 Fix macro-definition during "-be" expansion testing.  The move to
      write-protected store for macros had not accounted for these runtime
      additions; fix by removing this protection for "-be" mode.

JH/10 Convert all uses of select() to poll().  FreeBSD 12.2 was found to be
      handing out large-numbered file descriptors, violating the usual Unix
      assumption (and required by Posix) that the lowest possible number will be
      allocated by the kernel when a new one is needed.  In the daemon, and any
      child procesees, values higher than 1024 (being bigger than FD_SETSIZE)
      are not useable for FD_SET() [and hence select()] and overwrite the stack.
      Assorted crashes happen.

JH/11 Fix use of $sender_host_name in daemon process.  When used in certain
      main-section options or in a connect ACL, the value from the first ever
      connection was never replaced for subsequent connections.  Found by
      Wakko Warner.

JH/12 Bug 2838: Fix for i32lp64 hard-align platforms. Found for SPARC Linux,
      though only once PCRE2 was introduced: the memory accounting used under
      debug offset allocations by an int, giving a hard trap in early startup.
      Change to using a size_t.  Debug and fix by John Paul Adrian Glaubitz.

JH/13 Bug 2845: Fix handling of tls_require_ciphers for OpenSSL when a value
      with underbars is given.  The write-protection of configuration introduced
      in 4.95 trapped when normalisation was applied to an option not needing
      expansion action.

JH/14 Bug 1895: TLS: Deprecate RFC 5114 Diffie-Hellman parameters.

JH/15 Fix a resource leak in *BSD.  An off-by-one error resulted in the daemon
      failing to close the certificates directory, every hour or any time it
      was touched.

JH/16 Debugging initiated by an ACL control now continues through into routing
      and transport processes.  Previously debugging stopped any time Exim
      re-execs, or for processing a queued message.

JH/17 The "expand" debug selector now gives more detail, specifically on the
      result of expansion operators and items.

JH/18 Bug 2751: Fix include_directory in redirect routers.  Previously a
      bad comparison between the option value and the name of the file to
      be included was done, and a mismatch was wrongly identified.
      4.88 to 4.95 are affected.

JH/19 Support for Berkeley DB versions 1 and 2 is withdrawn.

JH/20 When built with NDBM for hints DB's check for nonexistence of a name
      supplied as the db file-pair basename.  Previously, if a directory
      path was given, for example via the autoreply "once" option, the DB
      file.pag and file.dir files would be created in that directory's
      parent.

JH/21 Remove the "allow_insecure_tainted_data" main config option and the
      "taint" log_selector.  These were previously deprecated.

JH/22 Fix static address-list lookups to properly return the matched item.
      Previously only the domain part was returned.

JH/23 Bug 2864: FreeBSD: fix transport hang after 4xx/5xx response. Previously
      the call into OpenSSL to send a TLS Close was being repeated; this
      resulted in the library waiting for the peer's Close.  If that was never
      sent we waited forever.  Fix by tracking send calls.

JH/24 The ${run} expansion item now expands its command string elements after
      splitting.  Previously it was before; the new ordering makes handling
      zero-length arguments simpler.  The old ordering can be obtained by
      appending a new option "preexpand", after a comma, to the "run".

JH/25 Taint-check exec arguments for transport-initiated external processes.
      Previously, tainted values could be used.  This affects "pipe", "lmtp" and
      "queryprogram" transport, transport-filter, and ETRN commands.
      The ${run} expansion is also affected: in "preexpand" mode no part of
      the command line may be tainted, in default mode the executable name
      may not be tainted.

JH/26 Fix CHUNKING on a continued-transport.  Previously the usabliility of
      the the facility was not passed across execs, and only the first message
      passed over a connection could use BDAT; any further ones using DATA.

JH/27 Support the PIPECONNECT facility in the smtp transport when the helo_data
      uses $sending_ip_address and an interface is specified.
      Previously any use of the local address in the EHLO name disabled
      PIPECONNECT, the common case being to use the rDNS of it.

JH/28 OpenSSL: fix transport-required OCSP stapling verification under session
      resumption. Previously verify failed because no certificate status is
      passed on the wire for the restarted session. Fix by using the recorded
      ocsp status of the stored session for the new connection.

JH/29 TLS resumption: the key for session lookup in the client now includes
      more info that a server could potentially use in configuring a TLS
      session, avoiding oferring mismatching sessions to such a server.
      Previously only the server IP was used.

JH/30 Fix string_copyn() for limit greater than actual string length.
      Previously the copied amount was the limit, which could result in a
      overlapping memcpy for newly allocated destination soon after a
      source string shorter than the limit.  Found/investigated  by KM.

JH/31 Bug 2886: GnuTLS: Do not free the cached creds on transport connection
      close; it may be needed for a subsequent connection.  This caused a
      SEGV on primary-MX defer.  Found/investigated by Gedalya & Andreas.

JH/32 Fix CHUNKING for a second message on a connection when the first was
      rejected.  Previously we did not reset the chunking-offered state, and
      erroneously rejected the BDAT command.  Investigation help from
      Jesse Hathaway.

JH/33 Fis ${srs_encode ...} to handle an empty sender address, now returning
      an empty address.  Previously the expansion returned an error.

HS/01 Bug 2855: Handle a v4mapped sender address given us by a frontending
      proxy.  Previously these were misparsed, leading to paniclog entries.

Also contains commit 51be321b27 "Fix PAM auth. Bug 2813" addressing
CVE-2022-37451.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f2763b95af)
2022-10-13 19:57:46 +01:00
Daniel Golle
8013e8929c gpgme: update to version 1.18.0
Noteworthy changes in version 1.18.0 (2022-08-10)
 -------------------------------------------------

 * New keylist mode to force refresh via external methods.  [T5951]
 * The keylist operations now create an import result to report the
   result of the locate keylist modes.  [T5951]
 * core: Return BAD_PASSPHRASE error code on symmetric decryption
   failure.  [T5939]
 * cpp, qt: Do not export internal symbols anymore.  [T5906]
 * cpp, qt: Support revocation of own OpenPGP keys.  [T5904]
 * qt: The file name of (signed and) encrypted data can now be set.  [T6056]
 * cpp, qt: Support setting the primary user ID.  [T5938]
 * python: Fix segv(NULL) when inspecting contect after exeception.  [T6060]

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 00bfb4f151)
2022-10-13 19:57:40 +01:00
Daniel Golle
d0dd2a730d cryptsetup: update to version 2.5.0
Update to new major release of cryptsetup. For details, please see
the release notes[1].

[1]: https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.5/v2.5.0-ReleaseNotes
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 80439f802c)
2022-10-13 19:57:29 +01:00
Daniel Golle
c2296d9304 lvm2: update to release 2.03.16
Mostly bug fixes and minor improvements.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 4e70f5caef)
2022-10-13 19:57:21 +01:00
Nick Peng
746c6519f8 smartdns: update to 1.2022.38.1
Signed-off-by: Nick Peng <pymumu@gmail.com>
2022-10-12 23:15:40 +08:00
Josef Schlehofer
97a25e6778 Merge pull request #19571 from 1715173329/v2
[openwrt-22.03] v2ray-core: add new package
2022-10-12 08:43:04 +02:00
Michal Vasilek
33d0a7adca python3: update to 3.10.7
* fixes CVE-2021-28861
* adjust pip and setuptools versions
* refresh patches

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit e9ddc479f9)
2022-10-11 17:57:17 +02:00
Stan Grishin
236e335953 Merge pull request #19580 from stangri/openwrt-22.03-curl
[22.03] curl: error out if wolfSSL is not usable
2022-10-10 04:09:22 -07:00
Petr Štetiar
bb4943d558 curl: error out if wolfSSL is not usable
When we explicitly declare, that we would like to have curl built with
wolfSSL support using `--with-wolfssl` configure option, then we should
make sure, that we either endup with curl having that support, or it
shouldn't be available at all, otherwise we risk, that we end up with
regressions like following:

  configure:25299: checking for wolfSSL_Init in -lwolfssl
  configure:25321: x86_64-openwrt-linux-musl-gcc -o conftest [snip]
  In file included from target-x86_64_musl/usr/include/wolfssl/wolfcrypt/dsa.h:33,
                   from target-x86_64_musl/usr/include/wolfssl/wolfcrypt/asn_public.h:35,
                  from target-x86_64_musl/usr/include/wolfssl/ssl.h:35,
                   from conftest.c:47:
  target-x86_64_musl/usr/include/wolfssl/wolfcrypt/integer.h:37:14: fatal error: wolfssl/wolfcrypt/sp_int.h: No such file or directory
       #include <wolfssl/wolfcrypt/sp_int.h>
                ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
  compilation terminated.

and in the end thus produce curl without https support:

 curl: (1) Protocol "https" not supported or disabled in libcurl

So fix it, by making the working wolfSSL mandatory and error out in
configure step when that's not the case:

 checking for wolfSSL_Init in -lwolfssl... no
 configure: error: --with-wolfssl but wolfSSL was not found or doesn't work

References: #19005, #19547
Upstream-Status: Accepted [https://github.com/curl/curl/pull/9682]
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 9140f366ef)
2022-10-10 10:58:09 +00:00
Josef Schlehofer
5055796eec Merge pull request #19568 from 1715173329/y3
[openwrt-22.03] yq: Update to 4.28.1
2022-10-09 21:37:02 +02:00
Josef Schlehofer
2e6cbfbf83 Merge pull request #19567 from 1715173329/c3
[openwrt-22.03] cloudflared: Update to 2022.10.0
2022-10-09 21:36:56 +02:00
Tianling Shen
4d900b2a1d v2ray-geodata: split from xray-geodata
This can be used for v2ray, Xray, v2rayA and some other projects,
make it generic.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 975153f93d)
[rebased into 22.03 branch]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-10-09 23:51:01 +08:00
Tianling Shen
9bdab0d797 v2ray-core: add new package
Project V is a set of network tools that help you to build your own computer network.
It secures your network connections and thus protects your privacy.

For more details, see https://www.v2fly.org/en_US/guide/faq.html

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 6461d1b055)
2022-10-09 23:50:18 +08:00
Tianling Shen
bda5d8e3b3 yq: Update to 4.28.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 40f0e263bf)
2022-10-09 17:00:57 +08:00
Tianling Shen
0e4e3743f5 cloudflared: Update to 2022.10.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 37bdf739b1)
2022-10-09 16:59:02 +08:00
Tianling Shen
f5d5326c09 cloudflared: Update to 2022.9.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit cae36485f0)
2022-10-09 16:58:56 +08:00
Alexandru Ardelean
088222c39d Merge pull request #19553 from commodo/python-pytz-22.03
[22.03] python3-pytz: bump to version 2022.4
2022-10-09 08:07:48 +03:00
Tianling Shen
972fb7861b gg: Update to 0.2.13
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 891b87747a)
2022-10-08 15:37:09 +02:00
Tianling Shen
c243509b61 dnsproxy: Update to 0.45.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b5ec852c54)
2022-10-08 15:36:32 +02:00
Tianling Shen
44034384aa dnsproxy: Update to 0.45.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5b72dce338)
2022-10-08 15:36:32 +02:00
Stan Grishin
c29e56d76d Merge pull request #19544 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: update to 2022-08-12-1
2022-10-07 14:27:43 -07:00
Alexandru Ardelean
a1d8cd1727 python3-pytz: bump to version 2022.4
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-10-07 20:38:44 +03:00
Noah Meyerhans
d3a4c41a5a bind: bump to 9.18.7
Fixes multiple security issues:

CVE-2022-38178 - Fix memory leak in EdDSA verify processing

CVE-2022-3080 - Fix serve-stale crash that could happen when
			stale-answer-client-timeout was set to 0 and there was
			a stale CNAME in the cache for an incoming query

CVE-2022-2906 - Fix memory leaks in the DH code when using OpenSSL 3.0.0
			and later versions. The openssldh_compare(),
			openssldh_paramcompare(), and openssldh_todns()
			functions were affected

CVE-2022-2881 - When an HTTP connection was reused to get
			statistics from the stats channel, and zlib
			compression was in use, each successive
			response sent larger and larger blocks of memory,
			potentially reading past the end of the allocated
			buffer

CVE-2022-2795 - Prevent excessive resource use while processing large
			delegations

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 58bcd3fad3)
2022-10-07 09:20:12 -07:00
Stan Grishin
47e5343d59 https-dns-proxy: update to 2022-08-12-1
* update to upstream version 2022-08-12
* add ca_certs_file option for CA certs file for curl
* add procd_add_interface_trigger for wan6 (hopefully fixes
  https://github.com/openwrt/packages/issues/19531)

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 796a3dda80)
2022-10-07 06:33:46 +00:00
Eneas U de Queiroz
5df363db70 libgd: avoid recursive and redundant dependencies
Change the CONFLICTS line from the libgd-full to libgd to fix a
recursive dependency.

While at it, remove the redundant +LIBGD_TIFF:libtiff
+LIBGD_FREETYPE:libfreetype dependencies from Package/libgd/default.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 085eb34fbf)
2022-10-06 11:45:42 +02:00
Nick Hainke
24ad5359fe tor: update to 0.4.7.10
Release Notes:
https://forum.torproject.net/t/urgent-stable-release-0-4-5-14-0-4-6-12-and-0-4-7-10

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit b9cf0cdce6)
[fix commit title]
Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-10-05 23:31:02 +02:00
Nick Hainke
1a070a2899 expat: update to 2.4.9
Fixes CVE-2022-40674.

Release Notes:
- https://github.com/libexpat/libexpat/blob/R_2_4_8/expat/Changes
- https://github.com/libexpat/libexpat/blob/R_2_4_9/expat/Changes

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit a8774f84e9)
2022-10-05 23:30:06 +02:00
Glenn Strauss
2f2989e3ea lighttpd: remove deprecated modules
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 9d7e18fb25)
2022-10-05 23:29:52 +02:00
Hirokazu MORIKAWA
f9515613f9 node: bump to v16.17.1
The following CVEs are fixed in this release:
* CVE-2022-32212: DNS rebinding in --inspect on macOS (High)
    * Insufficient fix for macOS devices on v18.5.0
* CVE-2022-32222: Node 18 reads openssl.cnf from /home/iojs/build/ upon startup on MacOS (Medium)
* CVE-2022-32213: HTTP Request Smuggling - Flawed Parsing of Transfer-Encoding (Medium)
    * Insufficient fix on v18.5.0
* CVE-2022-32215: HTTP Request Smuggling - Incorrect Parsing of Multi-line Transfer-Encoding (Medium)
    * Insufficient fix on v18.5.0
* CVE-2022-35256: HTTP Request Smuggling - Incorrect Parsing of Header Fields (Medium)
* CVE-2022-35255: Weak randomness in WebCrypto keygen
More detailed information on each of the vulnerabilities can be found in September 22nd 2022 Security Releases blog post.

llhttp updated to 6.0.10
llhttp is updated to 6.0.10 which includes fixes for the following vulnerabilities.
* HTTP Request Smuggling - CVE-2022-32213 bypass via obs-fold mechanic (Medium)(CVE-2022-32213 ): The llhttp parser in the http module does not correctly parse and validate Transfer-Encoding headers. This can lead to HTTP Request Smuggling (HRS).
* HTTP Request Smuggling - Incorrect Parsing of Multi-line Transfer-Encoding (Medium)(CVE-2022-32215): The llhttp parser in the http module does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling (HRS).
* HTTP Request Smuggling - Incorrect Parsing of Header Fields (Medium)(CVE-35256): The llhttp parser in the http does not correctly handle header fields that are not terminated with CLRF. This can lead to HTTP Request Smuggling (HRS).

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 658621bf5e)
2022-10-05 23:29:43 +02:00
Petr Štetiar
698323d467 Merge pull request #19521 from ynezz/ynezz/openwrt-22.03-wolfssl-CVE-2022-39173
[22.03] treewide: fix security issues by bumping all packages using libwolfssl
2022-10-05 21:30:52 +02:00
Stan Grishin
4af0bb1a10 Merge pull request #19528 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: add settings for canary domains
2022-10-04 23:41:12 -07:00
Stan Grishin
7869127db7 https-dns-proxy: add settings for canary domains
* add setting to enable/disable blocking access to iCloud Private Relay resolvers
* add setting to enable/disable blocking access to Mozilla resolvers
* rename variables loaded from config in the init script

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 4ff71d8e4c)
2022-10-04 22:20:35 +00:00
Stan Grishin
62c0e0fc11 Merge pull request #19526 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: bugfix: prevent canary domains duplicates
2022-10-04 15:06:15 -07:00
Stan Grishin
a4a6411e13 https-dns-proxy: bugfix: prevent canary domains duplicates
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit f99ada410f)
2022-10-04 21:31:33 +00:00
Michael Heimpold
127e4e1478 Merge pull request #19516 from mhei/22.03-php8-update-8.1.11
[22.03] php8: update to 8.1.11
2022-10-04 17:35:04 +02:00
Petr Štetiar
f624e41f38 treewide: fix security issues by bumping all packages using libwolfssl
As wolfSSL is having hard time maintaining ABI compatibility between
releases, we need to manually force rebuild of packages depending on
libwolfssl and thus force their upgrade. Otherwise due to the ABI
handling we would endup with possibly two libwolfssl libraries in the
system, including the patched libwolfssl-5.5.1, but still have
vulnerable services running using the vulnerable libwolfssl-5.4.0.

So in order to propagate update of libwolfssl to latest stable release
done in commit ec8fb542ec3e4 ("wolfssl: fix TLSv1.3 RCE in uhttpd by
using 5.5.1-stable (CVE-2022-39173)") which fixes several remotely
exploitable vulnerabilities, we need to bump PKG_RELEASE of all packages
using wolfSSL library.

Same bump has been done in buildroot in commit f1b7e1434f66 ("treewide:
fix security issues by bumping all packages using libwolfssl").

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 845d81ca09)
2022-10-04 10:22:40 +02:00
Petr Štetiar
ea8108a319 Revert "treewide: fix security issues by bumping all packages using libwolfssl"
This reverts commit 0ddec62e69 as it was
backport too soon, we need to first wait for fixed libwolfssl being
available.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
2022-10-04 10:14:07 +02:00
Petr Štetiar
0ddec62e69 treewide: fix security issues by bumping all packages using libwolfssl
As wolfSSL is having hard time maintaining ABI compatibility between
releases, we need to manually force rebuild of packages depending on
libwolfssl and thus force their upgrade. Otherwise due to the ABI
handling we would endup with possibly two libwolfssl libraries in the
system, including the patched libwolfssl-5.5.1, but still have
vulnerable services running using the vulnerable libwolfssl-5.4.0.

So in order to propagate update of libwolfssl to latest stable release
done in commit ec8fb542ec3e4 ("wolfssl: fix TLSv1.3 RCE in uhttpd by
using 5.5.1-stable (CVE-2022-39173)") which fixes several remotely
exploitable vulnerabilities, we need to bump PKG_RELEASE of all packages
using wolfSSL library.

Same bump has been done in buildroot in commit f1b7e1434f66 ("treewide:
fix security issues by bumping all packages using libwolfssl").

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 845d81ca09)
2022-10-04 01:03:35 -07:00
Ivan Pavlov
2d061d1cba openvpn: explicitly disable engine parameter for openssl variant
Engine support is deprecated in OpenSSL 3.0 and for OpenSSL 3.0 the default
is to disable engine support as engine support is deprecated. For ath79 architecture
build with autodetection engine support fails, so explicitly set off for now.

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
(cherry picked from commit 62e909e845)
2022-10-04 01:00:49 -07:00
Ivan Pavlov
0c670f870e openvpn: update to 2.5.7
Added limited support for OpenSSL 3.0
Fixed some bugs

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
(cherry picked from commit 45b751dd85)
2022-10-04 01:00:49 -07:00
Ivan Pavlov
50ae0353af openvpn: update to 2.5.6
Maintainer: me / @mkrkn

Compile tested: ramips/mt7620 TP-Link Archer C50 v1, ramips/mt7621 Xiaomi Mi router 3 Pro, ath79/generic TP-Link WDR-3500
Run tested: ramips/mt7620 TP-Link Archer C50 v1, ramips/mt7621 Xiaomi Mi router 3 Pro, ath79/generic TP-Link WDR-3500

bugfix release including one security fix ("Disallow multiple deferred authentication plug-ins.", CVE: 2022-0547)

several build fixes, refer to https://github.com/OpenVPN/openvpn/blob/release/2.5/Changes.rst

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
(cherry picked from commit 172795b858)
2022-10-04 01:00:49 -07:00
Jianhui Zhao
8377e516e9 rtty: update to 8.0.1
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit 0ea357c164)
2022-10-04 01:00:13 -07:00
Michael Heimpold
7acb460010 php8: update to 8.1.11
This fixes:
    - CVE-2022-31628
    - CVE-2022-31629

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit e0db68ef0a)
2022-10-04 07:30:19 +02:00
Stan Grishin
0756af3c9e Merge pull request #19502 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: allow domains bugfix & canary domains support
2022-10-03 20:59:56 -07:00
Marc Benoit
52ddf2f0b5 nextdns: initialize nextdns from /etc/uci-defaults
Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit e54247a6fa)
2022-10-02 08:57:22 -07:00
Tianling Shen
eddc92a17d dnslookup: Update to 1.8.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 671e794db1)
2022-10-02 17:35:47 +02:00
Stan Grishin
356534dd42 simple-adblock: allow domains bugfix & canary domains support
* fix bug in download_lists and adb_allow to prevent unintended exclisions from
  the block-lists of domains containing allowed domain. Fixes issue:
  https://github.com/stangri/source.openwrt.melmac.net/issues/160
* add support for returning NXDOMAIN/blocking iCloud & Mozilla canary domains,
  disabled by default

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 9156ef6507)
2022-10-01 23:19:23 +00:00
Stan Grishin
d9341ee80c Merge pull request #19490 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: uci wrappers & iCloud canary domains
2022-10-01 16:01:43 -07:00
Stan Grishin
a219e0635e Merge pull request #19469 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: update to 1.9.1-1
2022-10-01 16:01:22 -07:00
Stan Grishin
de00aad596 https-dns-proxy: uci wrappers & iCloud canary domains
* switch to using uci wrappers instead of direct uci calls
* add support for iCloud canary domains
  https://developer.apple.com/support/prepare-your-network-for-icloud-private-relay

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 749b03ffbf)
2022-09-30 00:09:49 +00:00
Rosen Penev
b0e6930926 bandwidthd: fix format warnings
Should fix crashing errors under musl 1.2

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e62158b6f8)
2022-09-29 16:37:18 -07:00
Josef Schlehofer
a9423d8946 unbound: update to version 1.16.3
Changelog: https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-16-3
- Fixes: CVE-2022-3204

Refreshed one patch

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 027533f9a2)
2022-09-29 07:11:55 +02:00
Stan Grishin
d053da000e simple-adblock: update to 1.9.1-1
* remove obsolete block-lists from config
* add removal of obsolete lists to config-update
* add AdGuard team's block-list to config
* improve allow command
* improve nftset support
* move config load to uci_load_validate, which required some code refactoring which
  looks dramatic, but isn't
* always use dnsmasq_restart instead of dnsmasq_hup for all dns resolution options
  for dnsmasq

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit f8c5fd93e7)
2022-09-27 10:38:33 +00:00
Stan Grishin
8d62d37724 Merge pull request #19466 from stangri/openwrt-22.03-curl
[22.03] curl: bugfix: github source url
2022-09-26 13:34:50 -07:00
Stan Grishin
bc15988929 curl: bugfix: github source url
* fixes https://github.com/openwrt/packages/issues/19456

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit c812153f8d)
2022-09-26 19:08:30 +00:00
Peter van Dijk
eed717e6e0 pdns-recursor: update to 4.7.3
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit 8e234be1e7)
2022-09-26 13:30:01 +02:00
Karl Palsson
8df44cb6ef libs/cjson: bump to 1.7.15
This is a bugfix release.
Full release notes available at: https://github.com/DaveGamble/cJSON/releases/tag/v1.7.15

Signed-off-by: Karl Palsson <karlp@etactica.com>
2022-09-26 09:39:15 +00:00
Karl Palsson
44f898f98b pagekite: add patchs for 64bit time
Source: https://github.com/pagekite/libpagekite/pull/78

Signed-off-by: Karl Palsson <karlp@etactica.com>
2022-09-26 09:39:15 +00:00
Karl Palsson
d5aa9d76ea mosquitto: bump to 2.0.15
Changelog: https://mosquitto.org/blog/2022/08/version-2-0-15-released/
Changelog: https://mosquitto.org/blog/2021/11/version-2-0-14-released/

2.0.15 is bigger security and bugfix release.  2.0.14 had a couple of
  minor changes and was skipped for OpenWrt.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2022-09-26 09:39:15 +00:00
Ptilopsis Leucotis
4419a76baf mosquitto: add missing 'persistence' section in config
Section 'Persistence' in 'luci-app-mosquitto' is unusable without 'persistence'
section in config file.

Signed-off-by: Ptilopsis Leucotis <PtilopsisLeucotis@yandex.com>
2022-09-26 09:39:15 +00:00
David Bauer
376f1afddd poemgr: update to latest HEAD
8988247 Makefile: Enable warnings as errors (-Werror)
aea39ca Makefile: Respect the CFLAGS and LDFLAGS that have been passed in
189594f poemgr: Fix compiler warnings in poemgr.c
0e1a8cf pd69104: Avoid self-induced pointer casts
2d53298 uswflex: Remove unused variables and declarations
d345441 poemgr: Reorganize poemgr.h to remove forward declarations
df1a7bc contrib: remove unneccessary functions.sh loading
056a6a9 poemgr: Fix name based profile selection
b8f8f23 poemgr: prolong the power budget detection delay
9e8344a poemgr: configure power_budget to override detected limit

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 255c4e6c80)
2022-09-25 21:25:27 +02:00
Stijn Tintel
1eea84cca3 poemgr: fix conffiles path
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 33927a51c8)
2022-09-25 21:25:27 +02:00
Dirk Brenken
5092dbd147 adblock: update 4.1.4-5
* auto-whitelist ext. dns lookup domain
* add public doh server blocklist source
* whitespace fixes in adblock.sources

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 5603ed9237)
2022-09-25 21:03:07 +02:00
James McGuire
3f9a88d21b adblock: add lightswitch05 blocklist source
Signed-off-by: James McGuire <jamesm51@gmail.com>
(cherry picked from commit b971cdc79b)
2022-09-25 21:02:47 +02:00
Alexander E. Patrakov
0247d720ea hping3: add new package
The new package would help measuring one-way delays using ICMP type 13
packets. This is important for various scripts that automatically adjust
CAKE shaper bandwidth based on the observed bufferbloat. They need to
understand whether the delay is on the way up or on the way down, so
that they can adjust the bandwidth of the proper part of the shaper.

https://forum.openwrt.org/t/cake-w-adaptive-bandwidth-historic/108848
https://forum.openwrt.org/t/cake-w-adaptive-bandwidth/135379

V2: refreshed patches

Signed-off-by: Alexander E. Patrakov <patrakov@gmail.com>
(cherry picked from commit 688a5413d0)
2022-09-25 02:10:01 -07:00
Michael Heimpold
d6c7e63c93 Merge pull request #19438 from mhei/22.03-squid-libxml2-backport
[22.03] squid: fix compilation with libxml (fixes #19099)
2022-09-25 10:22:17 +02:00
Daniel Golle
be7e4f8e3f snowflake: run snowflake-proxy with procd-ujail
snowflake-proxy doesn't write any files
 => run in read-only rootfs environment

the process needs to read SSL certs but no other files
 => only exposed path is /etc/ssl/certificates (read-only)

running as unpriviledged user with no additional capabilities
 => set no-new-privs bit

By default procd-ujail also isolates the process by executing it in
a separate new IPC and PID namespace.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 0f3d48a378)
Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-09-25 07:59:19 +02:00
Daniel Golle
8c028f4fd1 snowflake: add package
Package Tor's Snowflake system components so users can offer e.g.
a standalone Snowflake proxy on their routers or other devices.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit cf120a7eff)
Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-09-25 07:59:19 +02:00
Michael Heimpold
aaedc165d5 squid: fix compilation with libxml (fixes #19099)
Add a patch which removes a call in Libxml2Parser.cc to 'xmlSetFeature'.
This function belongs to the 'depreciated' API part and is not
available in OpenWrt builds.

According to my understanding, this call can be removed safely since
it disables the feature "substitute entities" which is disabled by default.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 3ec47dc85c)
2022-09-24 09:42:16 +02:00
Martin Hübner
e563fe3836 gatling: add package gatling
Gatling is a high-performance webserver from fefe. It gives a
fairly decent feature-set at really small size. And its fast.

Co-authored-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Martin Hübner <martin.hubner@web.de>
(cherry picked from commit 83ff83e320)
2022-09-23 14:52:55 -07:00
Tianling Shen
81c0688405 gg: Update to 0.2.11
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2a0ee392ae)
2022-09-23 13:42:57 -07:00
Tianling Shen
40106c7dc6 yq: Update to 4.27.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit fca4f1b830)
2022-09-23 13:42:51 -07:00
Tianling Shen
05d1265cb7 xray-core: Update to 1.6.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a0126b15c5)
[Update geodata to latest version, based on f8c25627eb]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-09-23 13:42:41 -07:00
Glenn Strauss
8a2bd27540 lighttpd: update to lighttpd 1.4.67 release hash
* update to lighttpd 1.4.67 release hash

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit f750089d26)
2022-09-23 13:42:20 -07:00
Rosen Penev
4df5d1348a tang: update directory
There's no more cache.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b847cfb93f89114d7a714b57af67198abadf9fa4)
2022-09-22 16:06:30 -07:00
Rosen Penev
f50dc54f24 Revert "jose: remove libjose"
This reverts commit 02d6c8346c.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 09781a8a65fa6624db55867f6918e9b4c03d7a32)
2022-09-22 16:06:30 -07:00
Rosen Penev
9550d45fd4 Revert "jose: fix static library usage"
This reverts commit c61b70918b.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f5d3b820c529de94f2a55e078e8f5f2ff87755e9)
2022-09-22 16:06:30 -07:00
Michal Vasilek
5a02ae2fe8 knot-resolver: update to 5.5.3
* fixes CVE-2022-40188

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 5d2fd88693)
2022-09-23 00:43:20 +02:00
Tianling Shen
88257a87a5 libtorrent-rasterbar: Update to 2.0.7
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c741bf64cd)
2022-09-22 01:21:32 -07:00
Michael Heimpold
765fd399d1 Merge pull request #19418 from mhei/22.03-libxml2-update-2.10.2
[22.03] libxml2: update to 2.10.2
2022-09-21 17:25:12 +02:00
Stan Grishin
4fb657737d Merge pull request #19381 from stangri/openwrt-22.03-curl
[22.03] curl: update to 7.85.0
2022-09-20 15:04:44 -07:00
Hannu Nyman
1c5168cca1 Merge pull request #19415 from G-M0N3Y-2503/docker-update-22.03
[22.03] Docker: Update to v20.10.18
2022-09-20 22:27:30 +03:00
Gerard Ryan
954dd3b901 dockerd: Update to v20.10.18
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-09-20 21:28:42 +10:00
Gerard Ryan
a2defb8a68 docker: Update to v20.10.18
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-09-20 21:28:42 +10:00
Gerard Ryan
78949c659b libnetwork: Update to 0dde5c8 for Docker v20.10.18
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-09-20 21:28:42 +10:00
Gerard Ryan
3ffff095c6 containerd: Update to v1.6.8 for Docker v20.10.18
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-09-20 21:28:42 +10:00
Gerard Ryan
3ef01e4dd9 runc: Update to v1.1.4 for Docker v20.10.18
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-09-20 21:28:42 +10:00
Michael Heimpold
1e329ed5e9 libxml2: update to 2.10.2
This fixes:
- CVE-2022-2309

Release Notes:
- https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.0
- https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.1
- https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.2

Also drop removed docbook compile switch.
Disable PKG_FIXUP to allow backporting.

Signed-off-by: Nick Hainke <vincent@systemli.org>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit dc21121cf9c1c51649f0ffdaffd26326e53b4f45)
2022-09-20 07:59:57 +02:00
Michael Heimpold
91d060fd94 Merge pull request #19412 from mhei/22.03-php-8.1.10
[22.03] php8: update to 8.1.10
2022-09-20 07:51:48 +02:00
Michael Heimpold
74d181312d php8: update to 8.1.10
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 026a672ad1)
2022-09-19 21:35:35 +02:00
Rosen Penev
d86df0df5d jose: fix static library usage
When libjose is built statically, it must use --whole-archive as it uses
GCC's constructor attribute to initialize itself.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c61b70918b)
2022-09-18 23:19:57 -07:00
Dirk Brenken
fd5ba61549 adblock: update 4.1.4-3
* unbound: fix domain search regression

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e80d0236e3)
2022-09-18 09:10:52 +02:00
Eneas U de Queiroz
dfaa4bad50 uacme: add libev dependency to uacme-ualpn
The dependency has a PACKAGE_uacme-ualpn condition so that libev won't
be unnecessarily built if uacme-ualpn is not selected.

Remove PKG_USE_MIPS16:=0, as it is not necessary when not using the
libev that is bundled with uacme.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 1642b68d45)
2022-09-17 16:36:06 -07:00
Olivier Poitrey
ed56ca2aac nextdns: Update to version 1.37.11
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
(cherry picked from commit b665a6d683)
2022-09-17 12:56:55 -07:00
Michal Vasilek
219b0a1e58 python-flask-socketio: update to 5.3.1
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 7fd9d010a2)
2022-09-16 14:45:33 +02:00
Stan Grishin
c4d8769c8a curl: update to 7.85.0
* https://curl.se/changes.html#7_85_0
* add GitHub to PKG_SOURCE_URL

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 03a32717bc)
2022-09-15 21:00:05 +00:00
Dirk Brenken
20da9e28b3 adblock: update 4.1.4-2
* some more cleanups, forgotten with the last update
* optimized unbound syntax ('always_nxdomain' & 'always_transparent')
* optimized oisd download sources (use wilcard variants which are much smaller)
* removed superfluous version information/function

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 54f493ed9d)
2022-09-15 14:57:00 +02:00
Dirk Brenken
aaf90f333e adblock: update 4.1.4
* dnsmasq upstream has changed the code for domain handling
  and recommends the 'local' syntax for large blocklists
* remove pipefail command, see #19043 for reference
* removed the unused 'adb_dnsinotify' parameter
* removed the 'adb_maxqueue' parameter,
  the queue size will be automatically set by the number of cpu cores
* various cleanups, mostly shellcheck related

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 254b3d9380)
2022-09-15 14:56:49 +02:00
Michal Vasilek
6b13e6e67d yt-dlp: update to 2022.9.1
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit b1031b07a2)
2022-09-15 08:22:56 +02:00
Jan Hák
78d60b3c08 knot: update to version 3.2.1
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 023df0992a)
2022-09-15 08:22:30 +02:00
Šimon Bořek
b3373efe5a python3: backport and fix target musl libc detection
Patch 030:
Backported from Python main branch[^1] for Python to distinguish between glibc and musl libc SOABI.

Patch 131:
Changes PLATFORM_TRIPLET -gnu/-musl suffix detection (performed by the backported patch)
to be based on the target OS instead of the building OS.

See included patches for more detailed descriptions.

Specifically this fixes cross-compilation for mpc8548 CPUs with SPE instructions[^2] enabled.

[^1]: merged to python:main as https://github.com/python/cpython/pull/24502 'bpo-43112: detect musl as a separate SOABI'
[^2]: https://www.nxp.com/docs/en/reference-manual/SPEPEM.pdf

Co-authored-by: Pali Rohár <pali@kernel.org>
Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
(cherry picked from commit 992fcd1bd8)
2022-09-15 08:22:23 +02:00
Stan Grishin
e4f01cad33 Merge pull request #19350 from stangri/openwrt-22.03-aria2
[22.03] aria2: Fix aria2.init start issue
2022-09-13 03:56:34 +03:00
Naraku J
cd3d6156fe aria2: Fix aria2.init start issue
Re-mount '$config_file' inside the '$config_dir' will cause aria2 process unable to start.

Signed-off-by: Naraku J <74468372+Narakuku@users.noreply.github.com>
(cherry picked from commit 3eba8468e1)
2022-09-12 19:34:12 +00:00
Rafał Miłecki
f8fec60bdc ksmbd-tools: add package with hotplug.d script for auto sharing
One of common use cases for SMB3 server in routers is sharing hotplugged
drives. Users make many attempts setting that up which often are not
optimal.

This script handles it in the cleanest way by using:
1. hotplug.d mount subsystem
2. runtime config in the /var/run/config/

It provides a working basic solution that can be later adjusted by
modifying provided hotplug script.

A pretty much idential solution was part of the samba36 package. It was
added in the OpenWrt commit ef1efa756e0d0 ("samba36: add package with
hotplug.d script for auto sharing") as an answer for feature required by
the Rosinson company.

Cc: Jo-Philipp Wich <jo@mein.io>
Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(cherry picked from commit d0406d4c95)
2022-09-10 16:04:37 +02:00
Rafał Miłecki
1a05246164 ksmbd-tools: append config from /var/run/config/ for runtime shares
Dynamically created shares shouldn't be stored in the /etc/config/
because of:
1. Flash wearing
2. Risk of inconsistent state on reboots

With this change all automation/hotplug.d scripts can store runtime in
the /var/run/config/samba. It's useful e.g. for USB drives that user
wants to be automatically shared.

Also: automated scripts should never call "uci [foo] commit" as that
could flush incomplete config. This problem also gets solved.

Identical feature was added to samba36 in the OpenWrt commit
5a59e2c059866 ("samba36: append config from /var/run/config/ for runtime
shares") but wasn't ported to ksmbd until now.

Cc: Jo-Philipp Wich <jo@mein.io>
Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(cherry picked from commit c9cba61989)
2022-09-10 16:00:56 +02:00
Tianling Shen
764ba9c090 cloudflared: Update to 2022.9.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2bad3b604a)
2022-09-09 15:17:24 -07:00
John Audia
29fdb5086d lxc: update to 5.0.1
Bump to latest and update Makefile to use meson which is upstream's standard.
Deleted unneeded 010-Remove-distro-check.patch (reference to configure).

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit d957a2293b)
2022-09-09 12:02:11 -07:00
Josef Schlehofer
7012783066 syslog-ng: update to version 3.38.1
- Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.38.1

- Update the configuration file to use version 4.0 as mentioned in the
  release notes to try the latest changes

Fixes: CVE-2022-38725

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 34b7af9e08)
2022-09-08 09:58:18 +02:00
Jo-Philipp Wich
1342b58f24 miniupnpd: rework firewall4 integration
- Bump to the latest Git version in order to increase the package version
   for simpler opkg upgrade of the broken version

 - (Re-)Introduce PKG_RELEASE into the package, omitting it may lead to
   opkg segmentation faults under certain circumstances

 - Utilize automatic include hooks to drop the isolated miniupnpd table
   in favor to chains within the main inet fw4 table, otherwise PCP is
   unreliable as the upnp table might accept traffic which is later
   rejected by fw4

 - Install a fw4 script hook to restart miniupnpd on fw4 restarts and
   reloads in order to repopulate the upnp chains with forward rules

 - Register the used miniupnpd configuration file and the firewall uci
   configuration as change sources, otherwise `/etc/init.d/miniupnpd reload`
   has no effect if the firewall or upnpd config was changed

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 3c6ff6c6c9175b53453825e47f674af4881c2bc1)
2022-09-07 19:56:01 +02:00
Tiago Gaspar
7cc0a0eabd miniupnpd: update and fix nftables variant
Update the package to a commit that fixes an issue with removing PCP
mappings from nftables.
This also allows us to fix the nftables miniupnpd implementation on
openwrt.
In this new implementation, a table is created at the start of miniupnpd
and it is dedicated to miniupnpd with a priority above the firewall4
table. This allows miniupnpd to go ahead of the drop rules of firewall4
and forward traffic as needed. There was the possibility of adding a
chain inside the firewall4 table, but this would raise an issue where
if firewall4 was reloaded the port forwardings would be lost and
miniupnpd could be out of sync. When miniupnpd is stopped the table is
deleted, taking the port forwardings with it.

Some of this commit is based of msylgj's work, mainly the logic of the
init/hotplug scripts and the makefile build parameters.

Signed-off-by: ZiMing Mo <msylgj@immortalwrt.org>
Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 651a578cac)
2022-09-07 19:56:01 +02:00
Tianling Shen
85e6f9348a dnslookup: Update to 1.7.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 982903e0a3)
2022-09-04 00:31:10 -07:00
Tianling Shen
529842c787 dnsproxy: Update to 0.44.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2acf2d920f)
2022-09-04 00:31:03 -07:00
Tianling Shen
9951bdcb99 cloudflared: Update to 2022.8.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 529164d054)
2022-09-04 00:30:55 -07:00
Alexandru Ardelean
c3a153bdb7 pillow: bump to version 9.2.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit ed8420cd97)
Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
2022-09-03 14:07:08 -07:00
Alexandru Ardelean
7977389b21 pillow: bump to version 9.1.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit e65d982541)
Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
2022-09-03 14:07:08 -07:00
Alexandru Ardelean
b15b99eede pillow: bump to version 9.1.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 2c2a8990bb)
Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
2022-09-03 14:07:08 -07:00
Tianling Shen
b0fe84ca4a gg: Update to 0.2.9
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a6c043c296)
2022-09-03 14:04:57 -07:00
Tianling Shen
5819aa071b xray-core: Update to 1.5.10
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ddd4082d30)
2022-09-03 14:04:48 -07:00
Tianling Shen
c5619b78da yq: Update to 4.27.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 90a76f6467)
2022-09-03 14:04:40 -07:00
Daniel Golle
426ccd2e0c uvol: fix autopart handling double/float number
Consider only integer part of free space in megabytes when
deciding the boundaries of the to be created partition.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f50a289e51)
2022-08-31 02:11:07 +01:00
Fabian Lipken
32e4d8fa5a python-pycares: add new package
Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
(cherry picked from commit 90ef79afd8)
2022-08-30 16:17:09 +02:00
Hirokazu MORIKAWA
5dc5c79663 node: bump to v16.17.0
Notable Changes:
Experimental command-line argument parser API
Experimental ESM Loader Hooks API
Experimental test runner
Improved interoperability of the Web Crypto API

Dependency updates:
Updated Corepack to 0.12.1
Updated ICU to 71.1
Updated npm to 8.15.0
Updated Undici to 5.8.0

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 841b38f37a)
2022-08-29 12:45:26 +02:00
Philip Prindeville
4c311180da strongswan: add kernel module dependency on chapoly
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 6a30ed6fbd)
2022-08-28 10:14:37 +02:00
Daniel Bermond
8b04b607a9 i2pd: update to version 2.43.0
Maintainer   : @yangfl (David Yang)
Build system : Arch Linux x86_64
Build tested : r7800 OpenWrt git master (commit a434795809)
Run tested   : r7800 OpenWrt git master (commit a434795809)

Signed-off-by: Daniel Bermond <danielbermond@gmail.com>
(cherry picked from commit 58b3857a5a)
2022-08-27 15:59:16 +02:00
R4SAS I2P
240a8db7ee i2pd: Update package
* Update to 2.42.1
* Replace spaces with tabulation in init file

Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
(cherry picked from commit bdd8ab6faf)
2022-08-27 15:59:10 +02:00
Vladimir Ulrich
b519548e4a zoneinfo: updated to the latest release
Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit 89c2fa9d9b)
2022-08-27 15:58:14 +02:00
Vladimir Ulrich
fc47ed5f15 zoneinfo: updated to the latest release
Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit cb5bf2b007)
2022-08-27 15:58:12 +02:00
Stan Grishin
bcafba4320 Merge pull request #19262 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: bugfix for allow command
2022-08-26 22:52:35 +03:00
Stan Grishin
7073e7fb00 simple-adblock: bugfix for allow command
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 717499e62b)
2022-08-26 19:32:33 +00:00
Tianling Shen
c25231611d perl-ack: Update to 3.6.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d04fefc2b7)
2022-08-26 19:44:14 +02:00
Petr Štetiar
bca4b82fc1 syslog-ng: fix OOM issues by adding support for logrotate
With heavy system logging which goes by default into `/var/log/messages`
log file which is usually placed in tmpfs/RAM one can trigger OOM killer
fairly easily, thus killing random processes and in some cases making
system unusable.

This is likely happening due to the fact, that Linux by default uses 1/2
of available RAM for tmpfs, which might be for example an issue on low
RAM devices with ath10k wireless.

So let's fix it by adding logrotate functionality which should limit the
size of `/var/log/messages` log file to 1M by default, but could be
tweaked by config knob if needed be.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 660fa63faf)
2022-08-26 16:57:33 +02:00
Josef Schlehofer
87254d1086 python-uci: update to version 0.9.0
- Release notes:
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.9.0
- Update copyright while at it.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e340fe8a12)
2022-08-26 16:55:45 +02:00
Tianling Shen
0a6a1ffcdd v2raya: Update to 1.5.9.1698.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3c43f65ae9)
2022-08-26 13:09:02 +02:00
Toke Høiland-Jørgensen
ff09e836d6 sqm-scripts: Bump to v1.5.2
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
(cherry picked from commit a69e80648a)
2022-08-25 07:04:25 +02:00
Alexandru Ardelean
1b50725812 Merge pull request #19224 from commodo/django-22.03
[22.03] django: bump to version 4.0.7
2022-08-24 12:28:16 +03:00
Karel Kočí
d4cc947570 vim: variants conflict with each other
This adds conflicts between the variants,
because they provide the same files, and it should not be
possible to install them side by side. Otherwise, it might happen that
half files would be from one variant and the other half from the
other.

Also, adds provides as if you request to install ``vim`` and
``vim-full``, then the request could be satisfied even they collide,
because ``vim-full`` provides ``vim`` package.

Signed-off-by: Karel Kočí <cynerd@email.cz>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[add commit message]
(cherry picked from commit 46c058468a)
2022-08-24 08:25:17 +02:00
Josef Schlehofer
268efbeddd libgd: add conflicts to each other
The full variant should conflict with the default variant. This prevents that
libgd and libgd-full could be installed side by side, and also, the full
variant should provide the libgd. Otherwise, if you install libgd-full,
you can not install vnstat.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 42b36b7180)
2022-08-24 08:25:11 +02:00
Peter van Dijk
afea828268 pdns-recursor: update to 4.7.2
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit 0e660c9f50)
2022-08-23 21:16:05 -07:00
Stan Grishin
fad4eff765 Merge pull request #19246 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: update to 1.9.0-1
2022-08-24 03:52:33 +03:00
Stan Grishin
a1067fa6b1 simple-adblock: update to 1.9.0-1
* Update maintainer's email address
* Style Make and init file to OpenWrt standard
* Rename dnsmasq and unbound-related variables to better reflect
  their use
* New 'allow' CLI parameter to quickly unblock domain(s)
* Switch to uci wrappers
* Beautify the output of the 'check' CLI parameter
* Better handling of output files directory creation error
* Support for (upcoming) dnsmasq nftsets

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 3b686b08a5)
2022-08-24 00:30:33 +00:00
Alexandru Ardelean
9646958beb stress-ng: add libjpeg dep
Fixes: https://github.com/openwrt/packages/issues/19210

If libjpeg isn't selected by another package, all is fine.
But if it is selected, the stress-ng build will see it and try to build the
jpeg stressor. This would usually fail sometime and link-time.

In any case, it's better to just pick-up libjpeg as a dependency of
stress-ng. If people want to stress their system with this tool, they can
probably expect libjpeg as well.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit fc6f44b13a)
2022-08-24 01:07:37 +02:00
Josef Schlehofer
ef1af9a43f pciutils: backport patch to fix compilation with older binutils
While building pciutils 3.8.0 for OpenWrt 21.02 includes target
mvebu/cortex-a9, mvebu/cortex-a53 and powerpc/8540, it fails because of
this error:

-I<turris1x/ws/build/staging_dir/toolchain-powerpc_8548_gcc-8.4.0_musl/include>   -c -o filter.o filter.c
{standard input}: Assembler messages:
{standard input}:6: Error: multiple versions [`pci_filter_init@@LIBPCI_3.8'|`pci_filter_init@LIBPCI_3.3'] for symbol `pci_filter_init_v38'
{standard input}:8: Error: multiple versions [`pci_filter_parse_slot@@LIBPCI_3.8'|`pci_filter_parse_slot@LIBPCI_3.3'] for symbol `pci_filter_parse_slot_v38'
{standard input}:10: Error: multiple versions [`pci_filter_parse_id@@LIBPCI_3.8'|`pci_filter_parse_id@LIBPCI_3.3'] for symbol `pci_filter_parse_id_v38'
{standard input}:12: Error: multiple versions [`pci_filter_match@@LIBPCI_3.8'|`pci_filter_match@LIBPCI_3.3'] for symbol `pci_filter_match_v38'
make[4]: *** [<builtin>: filter.o] Error 1
make[4]: Leaving directory '<turris1x/ws/build/build_dir/target-powerpc_8548_musl/pciutils-3.8.0/lib'>
make[3]: *** [Makefile:70: lib/libpci.so.3.8.0] Error 2
make[3]: Leaving directory '<turris1x/ws/build/build_dir/target-powerpc_8548_musl/pciutils-3.8.0'>
make[2]: *** [Makefile:88: <turris1x/ws/build/build_dir/target-powerpc_8548_musl/pciutils-3.8.0/.built]> Error 2
make[2]: Leaving directory '<turris1x/ws/build/feeds/packages/utils/pciutils'>

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f08dadd517)
2022-08-23 21:14:26 +02:00
Jan Hák
85e26798c0 liburcu: update to version 0.13.2
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 754ba8920b)
2022-08-22 14:33:07 +02:00
Jan Hák
fddb4fe508 knot: update to version 3.2.0
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 74e2bfdd27)
2022-08-22 14:23:15 +02:00
Alexandru Ardelean
b92eb75be8 django: bump to version 4.0.7
Fixes: https://nvd.nist.gov/vuln/detail/CVE-2022-36359

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-08-22 09:30:51 +03:00
Marko Ratkaj
39943175a0 squid: bump to 4.17
Signed-off-by: Marko Ratkaj <markoratkaj@gmail.com>
(cherry picked from commit 15132b85b7)
2022-08-21 19:27:50 +02:00
Fabian Lipken
c15e924f14 dnscrypt-proxy2: update to version 2.1.2
Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
(cherry picked from commit 2c617bbe22)
2022-08-21 16:31:29 +02:00
Hauke Mehrtens
f1a15fd5b9 coova-chilli: Fix compile problem with _init()
The _init() function collides with a _init() function in crti.o.
This results in the following error in OpenWrt:
arc-openwrt-linux-gnu/bin/ld: libxt_coova.o: in function `_init':
/lib/gcc/arc-openwrt-linux-gnu/11.3.0/crti.o:(.init+0x4): first defined here
collect2: error: ld returned 1 exit status
make[7]: *** [Makefile:22: libxt_coova.so] Error 1

Fix this by suing a constructor attribute instead. This function will
still be called after the shared library was loaded.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 55297e45c8)
2022-08-21 10:28:51 +02:00
Rosen Penev
625f176330 mpd: update to 0.23.9
Fixes compilation with newer ffmpeg.

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b1999ec133)
2022-08-20 22:49:19 +02:00
Rosen Penev
900d42fbe4 mpd: update to 0.23.8
Simplify iconv patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 63ba2ccbda)
2022-08-20 22:49:11 +02:00
Lucian Cristian
257242799c pciutils: update to 3.8.0
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit c5ec5c70b3)
2022-08-20 22:48:37 +02:00
Dirk Brenken
1e53ad6886 travelmate: update 2.1.0
* vpn support can be disabled (enabled by default), fixes #19107 (see trm_vpn option)
* vpn support can be limited to certain interfaces (see trm_vpnifacelist list option)
* openvpn support works now per instance (same as wireguard today)
* add an auto-login script for tplink-omada hotspots provided by Sebastian Muszynski <basti@linkt.de>
* remove pipefail command, see #19043 for reference

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 963137dcc5)
2022-08-20 21:52:06 +02:00
Michal Vasilek
bed539e7c1 miniflux: update to 2.0.38
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit db0de16e8e)
2022-08-19 20:36:28 +02:00
Michal Vasilek
77d94fda9d miniflux: update to 2.0.37
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 62f57441af)
2022-08-19 20:36:23 +02:00
Michal Vasilek
c040633792 yt-dlp: update to 2022.8.14
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 6c6b3f33a8)
2022-08-19 20:35:50 +02:00
Michal Vasilek
39f39f72bb yt-dlp: update to 2022.7.18
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 9c4f8aa8c9)
2022-08-19 20:35:46 +02:00
Michal Vasilek
9655fc2791 yt-dlp: update to 2022.6.22.1
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 6c97e721a4)
2022-08-19 20:35:41 +02:00
Bheesham Persaud
ca6eaf0cdd ddns-scripts: Fix typo s/ganid/gandi/
Signed-off-by: Bheesham Persaud <me@bheesham.com>
(cherry picked from commit ad7f24684e)
2022-08-19 20:35:05 +02:00
Josef Schlehofer
3e1c7b9ff4 host-pip-requirements: update Cython to version 0.29.28
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e78352c043)
2022-08-19 20:34:56 +02:00
Aleksander Morgado
b02ea962ca libmbim: bump to 1.26.4
Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit 1d2ef5abbb)
2022-08-19 17:50:41 +02:00
Maxim Anisimov
5b87373a39 libmbim: switch to meson build tools
Using https://gitlab.freedesktop.org/mobile-broadband/libmbim.git to download the source code.
Enabled lto and additional gcc flags for perfomance and less size.
Modified to use meson as upstream has abandoned autotools.
Removed BUILD_PARALLEL options. These are default with ninja/meson.

Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit fea19c2399)
2022-08-19 17:50:37 +02:00
Maxim Anisimov
68946d4c72 modemmanager: switch to meson build tools
Using https://gitlab.freedesktop.org/mobile-broadband/ModemManager.git to download the source code.
Added compile option to compile qrtr support.
Enabled lto and additional gcc flags for perfomance and less size.
Modified to use meson as upstream has abandoned autotools.
Removed BUILD_PARALLEL options. These are default with ninja/meson.

Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit 6ae8b15d68)
2022-08-19 17:49:51 +02:00
Aleksander Morgado
b8a8dd53c7 libqmi: bump to 1.30.6
Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit 45e8d072ee)
2022-08-19 17:49:10 +02:00
Maxim Anisimov
94b824423b libqmi: polish Makefile
PKG_VERSION replaced by PKG_SOURCE_VERSION.
Simplify for collection selection.
Removed unneeded python3/host dep.

Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit ff5837ee8f)
2022-08-19 17:49:06 +02:00
Maxim Anisimov
1683d7c963 libqmi: switch to meson build tools
Using https://gitlab.freedesktop.org/mobile-broadband/libqmi.git to download the source code.
Enabled lto and additional gcc flags for perfomance and less size.
Added support for selecting qmi message collection.
Selected basic qmi message collection by default (modemmanager requires it).
Modified to use meson as upstream has abandoned autotools.
Removed BUILD_PARALLEL options. These are default with ninja/meson.

Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit f7cbd44540)
2022-08-19 17:49:01 +02:00
Tianling Shen
d2a0a8e038 rclone: Update to 1.59.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5c4b54de56)
2022-08-18 19:53:24 -07:00
Tianling Shen
f82e778c05 gg: Update to 0.2.8
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 6c757f0ff8)
2022-08-18 19:53:11 -07:00
David Bauer
e07b43761f usteer: update to latest HEAD
7d2b17c ubus: optimize connected_clients output format
8b10a4b policy: don't alter stats when remaining idle
3cc0f45 policy: count kick total
aadc562 policy: make steering ability evaluation uniform
17c558d ubus: include SSID in node dump
fc158e0 policy: only trigger roam-sm after client becomes roamable
837f144 usteer: add connected-since
9e6002d policy: improve readability

Build-tested: ath79-generic / ramips-mt76x8
Run-tested: ath79-generic / UniFi AC Lite

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 6e1687df30)
2022-08-18 21:05:49 +02:00
Stijn Tintel
613e709cef usteer: bump to git HEAD
041e884 local_node: query client MBO support from hostapd

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 6155b8245f)
2022-08-18 21:05:49 +02:00
Jonathan Pagel
46c8524e5a telegraf: Update to version 1.23.4
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit e4555e03ee)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-08-18 18:07:56 +02:00
Jonathan Pagel
74c36ecec0 telegraf: Add influxdb2 output plugin to package version small
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit a5e96189c3)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-08-18 17:42:16 +02:00
Guilherme Janczak
39a25cea0d stress-ng: update to 0.14.03
Signed-off-by: Guilherme Janczak <guilherme.janczak@yandex.com>
Co-authored-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 9a85437016)
2022-08-17 16:10:40 +02:00
Rosen Penev
95d59cc2a3 squeezelite: update to 1.9.9-1403
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6ffab7728e)
2022-08-16 13:24:17 -07:00
Van Waholtz
fcdba64d0b frp: update to 0.44.0
Changelog: https://github.com/fatedier/frp/release

Signed-off-by: Van Waholtz <vanwaholtz@gmail.com>
2022-08-16 13:10:20 -07:00
Michal Vasilek
ac1cf386f7 opendoas: fix build with PAM
When PAM is available, the build system will detect and use it, but the
package dependency was missing.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 626be11593)
2022-08-16 22:09:53 +02:00
Tianling Shen
2af698b989 cloudflared: Update to 2022.8.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 92f0b1b5a4)
2022-08-16 22:09:52 +02:00
Glenn Strauss
f37bdcc9ef lighttpd: update to lighttpd 1.4.66 release hash
* update to lighttpd 1.4.66 release hash

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 5eaf000c83)
2022-08-16 22:09:52 +02:00
Van Waholtz
b668781863 ariang: update to 1.2.4
Changelog: https://github.com/mayswind/AriaNg/releases

Signed-off-by: Van Waholtz <vanwaholtz@gmail.com>
2022-08-16 13:06:44 -07:00
Jan Hák
3d5f882b68 knot: update to 3.1.9
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 39a08a7aaf)
2022-08-15 20:01:10 +02:00
John Audia
90f35f2625 rsync: bump to 3.2.5
With the new OW release approaching, it might be better to get an officially
tagged upstream release in as PR#19087 just contained a fix for CVE-2022-29154
which itself introduced a few bugs.

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit eeaacc9052)
2022-08-15 13:50:39 +02:00
Michal Vasilek
94821d9c07 opendoas: add package
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit ad7d2e5270)
2022-08-14 07:49:50 +02:00
Liangbin Lian
b621a75f36 rclone: fix init script on CIDR format ipaddr
Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit 7af716f12d)
2022-08-13 11:34:55 +02:00
John Audia
dd45bb89cf rsync: bump to 3.2.4
Bump to latest upstream release.

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit 4876401174)
2022-08-13 11:31:56 +02:00
John Audia
8c85981f83 rsync: fix CVE-2022-29154
The rsync package is vulnerable to CVE-2022-29154[1], which is not yet in a
non-preview release. This commit applies the upstream commit to fix it and
several subsequent commits needed to fix bugs the initial fix introduced[2].

1. https://rsync.samba.org/ftp/rsync/NEWS#SECURITY_FIXES-3.2.5
2. https://bugs.archlinux.org/task/75558

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 2611b86547)
2022-08-13 11:31:33 +02:00
Josef Schlehofer
63d46221bb python-websockets: update to version 10.3
- Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ce1679a07f)
2022-08-13 07:56:58 +02:00
Pascal Ernster
eaefde9a4a unbound: update to 1.16.2, fix CVE-2022-30698, CVE-2022-30699
Maintainer: @EricLuehrsen
Compile tested: x86/64
Run tested: x86/64
Description: Update to 1.16.2, fix CVE-2022-30698 and CVE-2022-30699.

Signed-off-by: Pascal Ernster <git@hardfalcon.net>
(cherry picked from commit 2179432991)
2022-08-12 06:10:34 +02:00
Pascal Ernster
2e878763df unbound: update to 1.16.1
Maintainer: @EricLuehrsen
Compile tested: realtek/rtl838x, x86/64
Run tested: realtek/rtl838x, x86/64
Description: Update to 1.16.1

Signed-off-by: Pascal Ernster <git@hardfalcon.net>
(cherry picked from commit e702a66058)
2022-08-12 06:10:28 +02:00
John Thomson
c5ac15a869 antfs: require kernel version 5.10 to build
ANTFS does not compile with OpenWrt's current testing kernel 5.15,
as it needs to be modified for the Linux 5.12 idmapped mounts changes
2f221d6f7b88 ("attr: handle idmapped mounts")
https://lore.kernel.org/all/20210121131959.646623-1-christian.brauner@ubuntu.com/

Signed-off-by: John Thomson <git@johnthomson.fastmail.com.au>
(cherry picked from commit f043d0a7d8)
2022-08-11 22:13:50 +02:00
Rosen Penev
80a3d7738e ptunnel-ng: fix compilation with kernel 5.15
Some header change requires to include musl's headers first.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 468863128f)
2022-08-11 22:12:34 +02:00
Rosen Penev
60eff3656c pingcheck: update to 2022-03-01
Fixes compilation with kernel 5.15.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3bd4564d71)
2022-08-11 22:09:13 +02:00
Rosen Penev
a11f3757fd libpfring: update to 8.0.0
Fixes compilation with kernel 5.15

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f8f2146b1b)
2022-08-11 22:08:42 +02:00
Yousong Zhou
6df708763e shadowsocks-libev: ss-rules: nft rule cleanup on reload
Remove nft rules file generated by ss-rules if ss-rules was or should be
turned off for by configuration.  Use "fw4 restart" instead of "fw4
reload" to force the runtime rule reloading

Ref: https://github.com/openwrt/packages/pull/17937#issuecomment-1207357037
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 04ee032699)
2022-08-11 10:45:12 +08:00
Yousong Zhou
53952a136a shadowsocks-libev: ss-rules: setup policy rules for udp/ip6
Supersedes: https://github.com/openwrt/packages/pull/18852
Fixes: https://github.com/openwrt/packages/issues/18850
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit a67ad632b6)
2022-08-11 09:59:26 +08:00
Jo-Philipp Wich
6bede41577 cgi-io: update to latest Git HEAD
901b0f0 main: fix two one-byte overreads in header_value()

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 443c6c1c17)
2022-08-10 23:54:32 +02:00
Michael Heimpold
2726fbb00f Merge pull request #19137 from mhei/22.03-php8-update-8.1.9
[22.03] php8: update to 8.1.9
2022-08-10 20:20:20 +02:00
Michal Kowalski
81601471e0 watchcat: fix broken ping invocation for no-address-family configuration
Fix for issue #19010

Signed-off-by: John Kohl <jtk.git@bostonpog.org>
Signed-off-by: Michal Kowalski <18610805+kofec@users.noreply.github.com>
(cherry picked from commit 406adc5363)
2022-08-10 08:04:23 +02:00
Tianling Shen
5343d6a093 yq: Update to 4.27.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 82a45b28b7)
2022-08-09 21:38:56 +03:00
Michael Heimpold
a4933fc0a2 php8: update to 8.1.9
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 55e06d66fa)
2022-08-08 15:35:50 +02:00
Alexandru Ardelean
01d88e6d63 Merge pull request #19117 from commodo/squashfs-tools-zstd-22.03
[22.03] squashfs-tools: enable zstd compression by default
2022-08-08 11:36:43 +03:00
Jan Hoffmann
0fd2eb51af python-paho-mqtt: add missing dependency
The uuid module has been split out into a separate package with the
update to Python 3.10.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>
(cherry picked from commit 52ae0a2018)
2022-08-07 00:23:03 +02:00
Josef Schlehofer
d31488cf3a Merge pull request #19120 from autobakterie/libgpg-error_1-45_22-03
libgpg-error: update to 1.45
2022-08-06 20:03:58 +02:00
Martin Moreno
cd36b6eb8b sslh: update to v1.22c
Change notes:
	Updated Makefile package version and hash.
	Added libpcre2 dependency
	Removed USELIBPCRE make flag (no longer optional within sslh)
	Updated patch 001 to work with new sslh Makefile

Signed-off-by: Martin Moreno <fett3270@yahoo.com>
(cherry picked from commit 9b90bb37ee)
2022-08-06 19:45:41 +02:00
Šimon Bořek
1eb7076056 luajit: patch: PPC/e500 SPE: use soft float instead of failing
makes LuaJit builds for mpc85xx targets with SPE ISA extension
enabled possible

Quoting inner commit message:

This allows building LuaJit for systems with Power ISA SPE
extension[^1] support by using soft float on LuaJit side.

While e500 CPU cores support SPE instruction set extension
allowing them to perform floating point arithmetic natively,
this isn't required. They can function with software floating
point to integer arithmetic translation as well,
just like FPU-less PowerPC CPUs without SPE support.

Therefore I see no need to prevent them from running LuaJit
explicitly.

[^1]: https://www.nxp.com/docs/en/reference-manual/SPEPEM.pdf

Signed-off-by: Pali Rohár <pali@kernel.org>
Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
(cherry picked from commit a4a484fbca)
2022-08-06 19:42:44 +02:00
W. Michael Petullo
b169fd0262 libgpg-error: update to 1.45
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit c4842bdd20)
2022-08-06 15:48:15 +02:00
Alexandru Ardelean
8694f7f953 squashfs-tools: enable zstd compression by default
Requested via:
  https://github.com/openwrt/packages/issues/19111

PKG_RELEASE is set to AUTORELEASE, so no need to bump.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit f0d45ba340)
2022-08-05 14:32:45 +03:00
Daniel Golle
5c987e57d2 cryptsetup: fix library paths by calling autoreconf
Use PKG_FIXUP:=autoreconf when building cryptsetup to prevent
accidental linkage against host libraries.

Fixes: #19011
Reported-by: @dreirund
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit ad0ac5198d)
2022-08-04 13:48:21 +02:00
John Audia
79d1abd4c3 ffmpeg: update to 5.1
Bump to latest upstream version, manually rebased: 050-glibc.patch

Tested using:
ffmpeg -f lavfi -i testsrc=duration=10:size=1280x720:rate=30 testsrc.mpg

Resulting mpg was good.

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 5436f78d31)
2022-08-04 13:47:48 +02:00
Boris Krasnovskiy
cec18eb0d0 chrony: Avoid building unused gnutls and ca dependencies
Avoid building unused gnutls and ca dependencies

Signed-off-by: Boris Krasnovskiy <borkra@gmail.com>
(cherry picked from commit 089eabedf9)
2022-08-04 13:47:36 +02:00
Boris Krasnovskiy
7727beb713 gensio: Avoid building unused python and libstdcpp dependecies
Avoid building unused python and libstdcpp dependecies

Signed-off-by: Boris Krasnovskiy <borkra@gmail.com>
(cherry picked from commit 0c245fda70)
2022-08-04 13:47:31 +02:00
Boris Krasnovskiy
51ccd07614 gnutls: Avoid building unused gnutls dependency
Avoid building unused gnutls dependency

Signed-off-by: Boris Krasnovskiy <borkra@gmail.com>
(cherry picked from commit 32f4d46f51)
2022-08-04 13:47:27 +02:00
Michal Vasilek
bf519e9bc4 fail2ban: fix patch for python 3.10
89d5d2e091 only patched importing
MutableMapping from collections, but importing Mapping has to be patched
too

Closes: #18681
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 4bd2169e73)
2022-08-04 13:47:03 +02:00
Alexandru Ardelean
3c5270c9d9 django: bump to version 4.0.6
Fixes https://nvd.nist.gov/vuln/detail/CVE-2022-34265

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit b0ddec3161)
2022-08-03 20:33:42 +02:00
ZiMing Mo
8fdc92b86d rclone: update to 1.59.0
Release note: https://rclone.org/changelog/#v1-59-0-2022-07-09

Signed-off-by: ZiMing Mo <msylgj@immortalwrt.org>
(cherry picked from commit 05df1fe4f1)
2022-08-03 20:33:21 +02:00
Hannu Nyman
77afaaa479 nano: update to 6.4
Update nano editor to version 6.4.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 0aed202180)
2022-08-02 21:02:38 +03:00
Stan Grishin
72abf7e9f4 Merge pull request #19058 from stangri/openwrt-22.03-curl
[22.03] curl: switch default SSL to mbedTLS
2022-07-26 23:20:01 -06:00
Rosen Penev
d385ac5045 curl: switch default SSL to mbedTLS
The decision to switch the default to wolfSSL was taken because of
hostapd back from when curl was in base. Unfortunately, not only is
wolfSSL bigger but it has also been causing issues recently. There's
also no relation between hostapd and curl.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0a65e4c6fa)
2022-07-26 17:44:34 +00:00
Stan Grishin
a3f1e1265c Merge pull request #18917 from stangri/openwrt-22.03-nebula
[22.03] nebula: update to 1.6.0
2022-07-26 10:59:46 -06:00
Jonathan Pagel
910a8a0759 telegraf: Update to version 1.23.3
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 281d156a35)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-07-25 18:38:03 -07:00
Jan Hák
ce619701b2 knot: update to 3.1.8
- Release notes:
https://www.knot-dns.cz/2022-04-28-version-318.html

- Refreshed patch to avoid offset

Signed-off-by: Jan Hák <jan.hak@nic.cz>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[added commit message, refresh patch]
(cherry picked from commit db12181940)
2022-07-25 16:49:15 +02:00
Gerard Ryan
93d53a56dc dockerd: Update to v20.10.17
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-07-24 17:35:39 -07:00
Gerard Ryan
17758cf81c docker: Update to v20.10.17
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-07-24 17:35:39 -07:00
Gerard Ryan
90bbda1b5c libnetwork: Update to f6ccccb for Docker v20.10.17
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-07-24 17:35:39 -07:00
Gerard Ryan
0f2e46afe0 containerd: Update to v1.6.6 for Docker v20.10.17
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-07-24 17:35:39 -07:00
Gerard Ryan
f238e8f7c3 runc: Update to v1.1.2 for Docker v20.10.17
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-07-24 17:35:39 -07:00
Nick Hainke
c85111226e dawn: update to 2022-07-24
edca4d2 network: rework network status callbacks

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 28ca76d29b)
2022-07-24 13:12:04 +02:00
Nick Hainke
944a896e53 dawn: update to 2022-07-22
10fb043 network: dump detail on ping pong received

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 1f60c23296)
2022-07-22 21:54:58 +02:00
David Bauer
0902a5fc0f usteer: update to latest HEAD
9059b9a ubus: derive RSSI from measurement report

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 7967abfae0)
2022-07-21 19:40:51 +02:00
Stijn Tintel
71db92ef62 usteer: bump to git HEAD
5be6819 policy: allow disabling load balancing
  80b0b65 main: disable load balancing by default
  fca4b87 policy: improve readability
  73c424b usteer: add option for probe steering
  87de1ab main: disable probe steering by default

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit d0878c8504)
2022-07-21 19:40:51 +02:00
Nick Hainke
c90aaa1ec7 dawn: update to 2022-07-21
bb362db datastorage: fix ap_array_unlink_entry always returns NULL
47e98ef network: ping pong keepalive for tcp connections
eba0354 network: add timeout for client connections

In the dawn config the con_timeout needs to be added:
  option con_timeout '60'

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 204fd77bbc)
2022-07-21 18:45:27 +02:00
Rosen Penev
9552a30bc5 mutt: add PKG_CONFIG_DEPENDS
Should fix missing dependencies when manupulating options.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ecd3a8a8de)
2022-07-20 11:38:31 -07:00
Rosen Penev
ffe3069818 opusfile: add autoreconf
Fixes compilation under some hosts.

Added PKG_BUILD_PARALLEL for faster compilation.

Some small cleanups for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8588715b26)
2022-07-20 11:38:14 -07:00
Jeffery To
10a6452b87 golang: Update to 1.18.4
Includes fixes for:

* CVE-2022-1705: net/http: improper sanitization of Transfer-Encoding
  header
* CVE-2022-1962: go/parser: stack exhaustion in all Parse* functions
* CVE-2022-28131: encoding/xml: stack exhaustion in Decoder.Skip
* CVE-2022-30630: io/fs: stack exhaustion in Glob
* CVE-2022-30631: compress/gzip: stack exhaustion in Reader.Read
* CVE-2022-30632: path/filepath: stack exhaustion in Glob
* CVE-2022-30633: encoding/xml: stack exhaustion in Unmarshal
* CVE-2022-30635: encoding/gob: stack exhaustion in Decoder.Decode
* CVE-2022-32148: net/http/httputil: NewSingleHostReverseProxy - omit
  X-Forwarded-For not working

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 60168651a2)
2022-07-20 02:38:33 -07:00
Rosen Penev
fb72063566 libextractor: fix iconv handling
Autoreconf is enough to fix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit df335b1391)
2022-07-19 22:37:20 -07:00
Stijn Tintel
7d74fbf377 glib2: disable fortify source
The glib2 package fails to build when CONFIG_PKG_FORTIFY_SOURCE_1 or
CONFIG_PKG_FORTIFY_SOURCE_2 is enabled in the OpenWrt config:

In file included from ../glib/libcharset/localcharset.c:28:
/home/stijn/Development/OpenWrt/openwrt/staging_dir/toolchain-powerpc64_e5500_gcc-11.2.0_musl/include/fortify/stdio.h: In function 'snprintf':
/home/stijn/Development/OpenWrt/openwrt/staging_dir/toolchain-powerpc64_e5500_gcc-11.2.0_musl/include/fortify/stdio.h:101:9: error: format not a string literal, argument types not checked [-Werror=format-nonliteral]
  101 |         return __orig_snprintf(__s, __n, __f, __builtin_va_arg_pack());
      |         ^~~~~~
/home/stijn/Development/OpenWrt/openwrt/staging_dir/toolchain-powerpc64_e5500_gcc-11.2.0_musl/include/fortify/stdio.h: In function 'sprintf':
/home/stijn/Development/OpenWrt/openwrt/staging_dir/toolchain-powerpc64_e5500_gcc-11.2.0_musl/include/fortify/stdio.h:110:17: error: format not a string literal, argument types not checked [-Werror=format-nonliteral]
  110 |                 __r = __orig_snprintf(__s, __b, __f, __builtin_va_arg_pack());
      |                 ^~~
/home/stijn/Development/OpenWrt/openwrt/staging_dir/toolchain-powerpc64_e5500_gcc-11.2.0_musl/include/fortify/stdio.h:114:17: error: format not a string literal, argument types not checked [-Werror=format-nonliteral]
  114 |                 __r = __orig_sprintf(__s, __f, __builtin_va_arg_pack());
      |                 ^~~

Disable fortify source for the package as a workaround.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 723c4360c4)
2022-07-19 22:34:40 -07:00
Rosen Penev
756a3243dc wifidog: fix compilation with more recent wolfssl
Needs an extra header. pthread.h is also no longer implicitly included.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4605f98b41)
2022-07-19 21:19:24 -07:00
Rosen Penev
ef545e0317 curl: fix compilation with wolfSSL
options.h header is needed now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 317575755a)
2022-07-19 21:16:40 -07:00
Tianling Shen
fdd16fefab yq: Update to 4.26.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4df4b8eae7)
2022-07-18 19:44:43 +02:00
Tianling Shen
b0118aab51 xray-core: Update to 1.5.9
Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 25922c6afd)
2022-07-18 19:43:54 +02:00
Nick Hainke
d9c09bb409 dawn: update to 2022-07-18
e596ff1 ubus.c: only add nr entries matching our own SSID

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit bb0d45ed35)
2022-07-18 18:24:02 +02:00
Pacien TRAN-GIRARD
f4eb0c359b mpd: add missing AUDIO_SUPPORT in CONFIG_DEPENDS
Signed-off-by: Pacien TRAN-GIRARD <pacien.trangirard@pacien.net>
(cherry picked from commit 0bfe037f0f)
2022-07-17 13:50:18 -07:00
Pacien TRAN-GIRARD
ff0dd2d12f mpd-full: remove partial BUILD_PATENTED on ffmpeg
This removes the guard "CONFIG_BUILD_PATENTED" for the ffmpeg build
feature for mpd-full. ffmpeg was already unconditionally registered as a
dependency (at line 51).

The ffmpeg package already handles whether or not to include patented
codecs internally using the same config flag, so guarding its use as a
dependency here does not appear necessary anymore.

(For reference: guard "BUILD_PATENTED" was introduced in 44eb12f for
ffmpeg, then partially removed by 326c973).

Signed-off-by: Pacien TRAN-GIRARD <pacien.trangirard@pacien.net>
(cherry picked from commit f3fe7de8dc)
2022-07-17 13:50:18 -07:00
Michal Vasilek
c1732453f7 postfix: fix download failure
cdn.postfix.johnriley.me serves a certificate for a different domain
name.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit d4feef97e6)
2022-07-17 15:03:44 +02:00
Dirk Brenken
97ebbd0146 travelmate: update 2.0.9-2
* fix another vpn corner case
* add support for javascript based captive portals (location.href)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 3ae7a46b82)
2022-07-17 13:19:07 +02:00
Nick Hainke
86408bf662 dawn: update to 2022-07-16
0689b5e ubus: add missing lock for ubus hearing_map
4b7db09 CONFIGURE.md: fix typo
b3f61d4 CONFIGURE.md: adjust documentation about log levels

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit eef9ee0b83)
2022-07-16 19:52:16 +02:00
John Kohl
09d9d60930 watchcat: add support to run a script
Signed-off-by: John Kohl <jtk.git@bostonpog.org>
(cherry picked from commit 5c96ee5b1b)
2022-07-15 17:30:35 -07:00
John Kohl
afd77fd6c4 watchcat: add IP version selection support; fix bug with unlockbands
Signed-off-by: John Kohl <jtk.git@bostonpog.org>
(cherry picked from commit baed5531ef)
2022-07-15 17:30:35 -07:00
Eneas U de Queiroz
8829c40257 libuwsc: fix compiltation with wolfSSL
wolfssl/options.h needs to be included before the other wolfssl headers
to enable OpenSSL API required to build the package.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 8fb3fd3dac)
2022-07-15 13:15:54 -07:00
Peter van Dijk
e1090a0223 pdns: update to 4.6.3
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit 636da278eb)
2022-07-15 18:56:17 +02:00
Peter van Dijk
a3f25a7117 pdns-recursor: update to 4.7.1
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit c5480ef8a1)
2022-07-15 18:56:17 +02:00
Jonathan Pagel
71bd1a8a59 telegraf: Update to version 1.23.2
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 591f8cad33)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-07-14 20:42:01 +02:00
Jonathan Pagel
fe38196a70 telegraf: Update to version 1.23.1
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 9b1cdb7b52)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-07-14 20:42:01 +02:00
Tianling Shen
859f7319a9 dnslookup: Update to 1.7.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 798cf62bd8)
2022-07-14 19:37:26 +02:00
Tianling Shen
e34230521e cloudflared: Update to 2022.7.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e858624d29)
2022-07-14 19:37:10 +02:00
Eneas U de Queiroz
0ac8154bc0 xr_usb_serial_common: bump to 2022-03-30
This is the latest commit that touches the xr_usb_serial_common-1a dir.
The changes are restricted to whitespace fixes and kernel version
adaptations:
ecc6ebe xr_usb: Use tty_driver_kref_put for kernel 5.15 and above
caf6d25 xr_usb: Use tty_alloc_driver for kernel 5.15 and above
a42b7e6 xr_usb: Compilation fixes for kernel 5.14
497adb7 #39 fix compilation for newer linux kernels
9103471 xr_usb: fix some whitespace errors

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit eadab32450)
2022-07-14 12:39:04 +02:00
Rosen Penev
cdf76bc388 fio: update to 3.29
Fixes compilation with kernel 5.15

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d1edd7677a)
2022-07-14 12:08:15 +02:00
Petr Štetiar
2987868384 libarchive: fix ext2fs build race error condition
libarchive looks for ext2fs headers during configure, and if it finds
them it will expect to find them during compile, or on the rare occasion
when they aren't it will fail:

 libarchive/archive_entry.c:59:55: fatal error: ext2fs/ext2_fs.h: No such file or directory

As we just need headers for some type constants, let's re-use headers
from tools/e2fsprogs package which are always available.

Reported-by: Adam Dov <adov@maxlinear.com>
Suggested-by: Paul Eggleton <paul.eggleton@linux.intel.com>
References: https://git.yoctoproject.org/poky/commit/?id=f0b9a7cf9f80be1917e45266fa201f464a28c1e5
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 797945dfaa)
2022-07-13 08:47:30 +02:00
Stan Grishin
be959ca327 nebula: update to 1.6.0
* Update to https://github.com/slackhq/nebula/releases/tag/v1.6.0
* Update maintainer's email address
* Update for newest shellcheck

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit aa52a971a7)
2022-07-12 04:40:05 +00:00
Hirokazu MORIKAWA
81cd7959f3 node: July 7th 2022 Security Releases
Update to v16.16.0

Release for the following issues:
HTTP Request Smuggling - Flawed Parsing of Transfer-Encoding (Medium)(CVE-2022-32213)
HTTP Request Smuggling - Improper Delimiting of Header Fields (Medium)(CVE-2022-32214)
HTTP Request Smuggling - Incorrect Parsing of Multi-line Transfer-Encoding (Medium)(CVE-2022-32215)
DNS rebinding in --inspect via invalid IP addresses (High)(CVE-2022-32212)

https://nodejs.org/en/blog/vulnerability/july-2022-security-releases/

No vulnerabilities related with openssl (uses system openssl)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 8db0d09823)
2022-07-11 10:20:25 +02:00
Jeffery To
d2a2c005da nsutils: Update to latest version, switch to cmake
This also:

* Adds PKG_SOURCE_DATE and PKG_SOURCE_VERSION to PKG_VERSION (by
  default, when PKG_VERSION is defined, PKG_SOURCE_DATE and
  PKG_SOURCE_VERSION are not used)

* Fixes package copyright

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 2dd1c17626)
2022-07-09 21:42:50 -07:00
Oskari Rauta
241a7198a0 nsutils: bump to new release
Few minor changes, like -h flag for program (help).
Added URL to package definition.

No new version release with version number, so version stays
as is, but pkg_release is still bumbed with this commit.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 8f66090160)
2022-07-09 21:42:50 -07:00
Jeffery To
953e29f067 python-cryptography: Fix failing build
Fixes https://github.com/openwrt/packages/issues/18876.
Fixes https://github.com/openwrt/packages/issues/18879.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9e3b7d7883)
2022-07-07 09:53:48 -07:00
Dirk Brenken
1123b9dae3 travelmate: update 2.0.9
* various vpn fixes/optimizations (run tested by forum users)
* refine several log statements

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit cf1f9dc933)
2022-07-06 23:19:02 +02:00
Ivan Pavlov
a686f7975a xtables-addons: update to 3.21
updated to kernel 5.10.121+ changes

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
(cherry picked from commit 69e4ed4b6f)
2022-07-06 13:25:31 -07:00
Nick Hainke
d50620e22d xtables-addons: update to 3.20
866bc7f Xtables-addons 3.20
aa70669 doc: move changelog to rST
d7de2a9 doc: remove old changelog entries
d7e49a8 build: bump supported kernel version to 5.17
966fa43 extensions: replace PDE_DATA

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit c3141dc16a)
2022-07-06 13:25:31 -07:00
Nick Hainke
9b15693770 xtables-addons: add PKG_LICENSE_FILES and use SPDX
Add PKG_LICENSE_FILES. Use SPDX.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit b4d00c1c20)
2022-07-06 13:25:31 -07:00
Rosen Penev
1c4e8a14e1 xtables-addons: fix various warning in lua patch
These will become errors in the next LTS kernel.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1cd93b673b)
2022-07-06 13:25:31 -07:00
Rosen Penev
4a5633b6b5 xtables-addons: update to 3.19
Fixes compilation with kernel 5.15.

Fixed changed binary name.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e5af506795)
2022-07-06 13:25:31 -07:00
Rosen Penev
736996ecbb Revert "gcc: update 11 minor version"
This reverts commit 4db8466a14.

branch 22.03 has GCC 11.2

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-07-06 12:40:49 -07:00
Florian Eckert
b1814ff137 Merge pull request #18866 from bluebrother/collectd-dsl-fixes-22.03
[22.03] collectd: Fix various issues with lantiq dsl metrics.
2022-07-06 08:24:03 +02:00
Dominik Riebeling
d45c8f4c06 collectd: Fix various issues with lantiq dsl metrics.
- Handle bool values correctly. We get the values as bool, but collectd
  requires a bool value to be numeric in the range [0, 1].
- Remove profile and mode values. Those are strings, which cannot be
  represented by collectd.
- Update collectd type for some values.
- Fix latn value being present twice.

Signed-off-by: Dominik Riebeling <bluebrother@posteo.de>
(cherry picked from commit eb632da5bb)
2022-07-05 19:23:30 +02:00
Stijn Segers
6e49bec966 unbound: update to 1.16.0
Signed-off-by: Stijn Segers <foss@volatilesystems.org>
(cherry picked from commit 695e0dbaa4)
2022-07-05 04:54:38 +02:00
Michal Vasilek
f93755c934 yt-dlp: add package
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 534b538598)
2022-07-05 04:50:47 +02:00
Michal Vasilek
e846059b1a youtube-dl: drop package
youtube-dl is still maintained, but moves very slowly and many other
distributions instead package an active fork, yt-dlp.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 89710ac588)
2022-07-05 04:50:42 +02:00
Florian Eckert
75afb4a166 Merge pull request #18830 from nemesisdesign/openwrt-22.03
[22.03] openwisp-config: update to 1.0.1
2022-07-04 09:21:30 +02:00
Florian Eckert
a9baad9ca5 Merge pull request #18848 from nemesisdesign/monitoring-openwrt-22
[22.03] openwisp-monitoring: added 0.1.1
2022-07-04 09:09:25 +02:00
Rosen Penev
ed2234c1e7 glib2: replace intl patch with upstream solution
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1e2f4f1bf7)
2022-07-03 15:32:34 -07:00
Sebastian Kemper
45f10a3bef glib2: update libintl handling
glib2's meson.build runs check cc.has_function('ngettext', args :
osx_ldflags) and, if successful, it never looks for non-libc libintl.
For musl and glibc this test is always successful.

glib2 unconditionally sets ENABLE_NLS, so during compile <libintl.h>
gets included always. But then we have a disconnect when the OpenWrt pkg
is being built with BUILD_NLS=y, because the <libintl.h> will be from
libintl-full but glib2 will not link to libintl-full.

With BUILD_NLS=n there's no problem, because the <libintl.h> will be
from libc.

In lieu of proper libintl detection in glib2's meson build, removing the
SED call from the Makefile together with the added patch sorts this out.
The SED call can be removed because when we force libintl-full use, the
meson build will put the necessary linker flag into the pkg-config file
itself.

Alpine Linux does something similar (see [1]), but they always force
the use of the external libintl. I assume they always go for full NLS
support.

[1] https://git.alpinelinux.org/aports/tree/main/glib/musl-libintl.patch

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 721838ddd4)
2022-07-03 15:32:34 -07:00
Rosen Penev
19d957cfc2 glib2: update to 2.70.5
Enabled glib_checks to fix podman.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d0cd7eb5bf)
2022-07-03 15:32:34 -07:00
Federico Capoano
e1598040fd openwisp-monitoring: added 0.1.1
Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
(cherry picked from commit 0419a797ae)
2022-07-01 18:53:25 -04:00
Federico Capoano
dcc80b42c1 openwisp-config: update to 1.0.1
Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
(cherry picked from commit abb75e3a7b)
2022-07-01 18:46:40 -04:00
Florian Eckert
9315b36ec0 Merge pull request #18837 from 1715173329/y3
[openwrt-22.03] yq: Update to 4.25.3
2022-06-30 11:46:46 +02:00
Tianling Shen
95acc51cdb yq: Update to 4.25.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 15aff10231)
2022-06-30 16:22:15 +08:00
Toke Høiland-Jørgensen
3743870bc8 acme: switch from iptables to nft
Use nft instead of iptables to open port 80 in the firewall when getting a
cert. Since nft doesn't allow deleting a rule by its contents, capture and
save the handle when creating the rule, and use that to delete.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
(cherry picked from commit d926da5182)
2022-06-28 23:05:59 +02:00
Dirk Brenken
d845c3dc35 travelmate: update 2.0.8-3
* refine vpn timeout

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit f0477d9499)
2022-06-27 11:28:17 +02:00
Christian Marangi
5651f6a3ee gcc: update 11 minor version
- Update 11 minor version to match the upstream
- Rename patches dir to reflect new gcc 11 minor version
- Drop upstream patch

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 4db8466a14)
2022-06-26 19:43:02 -07:00
W. Michael Petullo
d713c4b4d3 gcc: depend on libzstd
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 8e0bc54fcd)
2022-06-26 19:43:02 -07:00
W. Michael Petullo
e32d33a2a2 gcc: update to allow compiling different versions
This is based on the toolchain GCC, and aims to share as much of its
Makefile and patches with that definition. The package requires two
additional patches:

(1) 003-dont-choke-when-building-32bit-on-64bit.patch, which fixes the
`error: size of array 'test_real_width' is negative` error that occurs
when building a 32-bit GCC on a 64-bit host. (Search the Internet for
examples of this error appearing.)

(2) 980-add-nostdinc++.patch, which backports a fix from 11.3.0 (11.2.0
only).

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit ceaa6e840e)
2022-06-26 19:43:02 -07:00
W. Michael Petullo
90e5bfd4f6 gcc: change maintainer
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit abbe33b369)
2022-06-26 19:42:08 -07:00
Dirk Brenken
4c4ac1b583 travelmate: update 2.0.8-2
* make vpn handling more reliable

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 06784b4e32)
2022-06-25 09:47:44 +02:00
Josef Schlehofer
ddf610ca49 syslog-ng: update to version 3.37.1
- Changelog:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.37.1

- Bump config version

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ae7aefe111)
2022-06-25 06:51:39 +02:00
Peter van Dijk
34dc9074f9 dnsdist: switch from liblua to luajit
luajit provides higher performance for requests handled in Lua hooks.
It also enables access to dnsdist functionality only exposed via FFI,
and allows configurations/hooks to call functions in any C library
without providing separate bindings.

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit 283b269c7c)
2022-06-24 11:30:21 -07:00
Stijn Tintel
6c942ec7fb Revert "lxc: export systemd cgroups after install"
The postinst script is sourced during image build, which causes the
follow failure:
/home/stijn/Development/OpenWrt/openwrt/build_dir/target-x86_64_musl/root-x86/etc/init.d/lxc-auto: line 3: /lib/functions.sh: No such file or directory
postinst script ./usr/lib/opkg/info/lxc-auto.postinst has failed with exit code 1

Sourcing /lib/functions.sh is not needed, as /etc/rc.common does so
already. Unfortunately removing that line from the init script is not
enough to fix the problem. The postinst script should also check
IPKG_INSTROOT. As these two changes are unrelated, they should go in
separate commits, and the solution to the image build problem is to
revert the commit that introduced the breakage.

This reverts commit 2cde10b950.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 039912dec5)
2022-06-24 12:20:26 +02:00
Michal Vasilek
345ae974bc lxc: export systemd cgroups after install
otherwise, a user would have to either manually run /etc/init.d/lxc-auto
boot or reboot the system to start using lxc.

originally committed in 2cde10b950
reverted in 039912dec5

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 7da7356539)
2022-06-24 12:17:28 +02:00
Lucian Cristian
6a89a690f5 libreswan: update to 4.7
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 8cf8518a08)
2022-06-23 23:34:25 +02:00
W. Michael Petullo
a5765aa290 nfdump: update to 1.6.24
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit d3b96a4b26)
2022-06-23 23:31:02 +02:00
Josef Schlehofer
70d787c82d knot-resolver: update to version 5.5.1
Changelog for versions:
- 5.4.4 [1]
- 5.5.0 [2]
- 5.5.1 [3]

[1] https://www.knot-resolver.cz/2022-01-05-knot-resolver-5.4.4.html
[2] https://www.knot-resolver.cz/2022-03-15-knot-resolver-5.5.0.html
[3] https://www.knot-resolver.cz/2022-06-14-knot-resolver-5.5.1.html

And refresh patch to avoid offset

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f74754fac1)
2022-06-23 20:14:28 +02:00
Dirk Brenken
40c2ef8c77 travelmate: update 2.0.8
* the domain whitelist feature has been extended to free up multiple nested captive portal domains.

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0ee0aa2b53)
2022-06-23 09:24:07 +02:00
Rosen Penev
26481ea6cd luajit: backport softfloat ppc support
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 24c0007ea2)
2022-06-23 05:07:51 +02:00
Stan Grishin
86dd650f28 Merge pull request #18698 from stangri/openwrt-22.03-curl
[22.03] curl: bump to 7.83.1
2022-06-21 12:41:20 -06:00
Tianling Shen
782f9a2b0a xray-core: Update to 1.5.8
Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c6103fe402)
2022-06-21 20:21:24 +03:00
Tianling Shen
976a19be59 cloudflared: Update to 2022.6.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f23aeedcbb)
2022-06-20 17:44:58 -06:00
Tianling Shen
7fa87d7329 v2raya: Update to 1.5.8.1
1. Switched to use prebuilt web files to get rid of massive Node.js.
2. Increased nofile limitation to avoid "too many open files" error.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d629a6f8b2)
2022-06-20 17:44:52 -06:00
Alexandru Ardelean
2869c80fc5 django: bump to version 4.0.5
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit b9a47cc470)
2022-06-20 12:03:51 +02:00
Florian Eckert
8e1571cb4e Merge pull request #18773 from AdorableJiang/openwrt-22.03-mydns
ddns-scripts: mydns.ip to mydns.jp
2022-06-20 08:26:28 +02:00
Shengjiang Quan
d588074ccb ddns-scripts: mydns.ip to mydns.jp
The provider is `mydns.jp` not `mydns.ip` which is wrong and misleading.
Same as #18467.

Signed-off-by: Shengjiang Quan <qsj287068067@126.com>
2022-06-18 13:57:24 +09:00
Etienne Champetier
0e27c101bf Merge pull request #18771 from champtar/prom-lua-wait-2203
[22.03] prometheus-node-exporter-lua: fix waiting for interface
2022-06-17 00:10:08 -04:00
Etienne Champetier
27ff7f17de prometheus-node-exporter-lua: fix waiting for interface
Instead of waiting for interface to be up,
wait for it to have IPs, as this is what we need.

Also do not call procd_open_instance when not ready.

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 1dd46bca62)
2022-06-16 22:31:35 -04:00
Jeffery To
8706ce73a6 python3: Update to 3.10.5, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 57e2b656cb)
2022-06-15 10:04:15 +02:00
Peter van Dijk
fe2783799e dnsdist: update to 1.7.2
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit 573829d625)
2022-06-14 21:47:31 +02:00
Nick Hainke
6a7ee3e0a5 dawn: update to 2022-06-13
88c78b4 memory_utils: fix reallocation

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 4a9eaecf58)
2022-06-14 20:10:41 +02:00
Nick Hainke
d6ad2268fe dawn: update to 2022-06-11
4cf9d0b treewide: code and documentation cleanup
48b12ee datastorage: Minor chnages to kicking algorithm to tidy up some handling.
7b615b6 treewide: improve beacon/probe logging
185f31b treewide: improve beacon request handling
0c2e713 datastorage/ubus: Add "soft" kicking algorithm
38f60c5 treewide: RSSI / RCPI handling updates
aba3e81 documentation: Parameter defaults and documentation
3979fdf treewide: cleanup code
e3b3753 scoring: improve scoring algorithm
33f380f treewide: cleanup code
b42193f kicking: improve kicking algorithm
16deab3 treewide: improve mutex handling
31f0a37 test: cleanup tests and add some test scripts
43ca8b8 treewide: fix bugs from Coverity Scan
8ae2a42 utils/storage: improve descriptions
9a9b4dd ubus: Simplify loops and scans in generating hearing map
c833064 treewide: rework mutex
1df5bc5 (master) network: cleanup and improve network handling
3bd349a utils: cleanup
a855087 utils/storage: cleanup
439fe95 ubus/datastorage/msghandler: cleanup
335ace2 datastorage: improve linked list
40ebf48 ubus/datastorage: cleanup
c13c285 utils: cleanup
0e4fc50 documentation: Heavily revised Markdown documentation files

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 0c74ab9a79)
2022-06-14 20:10:41 +02:00
Nick Hainke
179c12e13b dawn: update to 2022-06-09
850a75c fix compilation with GCC12
2ac7b9d workflow: fix workflow

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 96975a1f78)
2022-06-14 20:10:41 +02:00
Jonathan Pagel
c7552ebf6f telegraf: update to version 1.23.0
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit e8f6600851)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-06-13 19:42:05 -07:00
Hirokazu MORIKAWA
f84ccb4010 node: bump to v16.15.1
Upgrade npm to 8.11.0
Suppressed unnecessary builds.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit d8dc54ceea)
2022-06-13 01:06:51 -07:00
Glenn Strauss
61ea9bb1a6 lighttpd: update to lighttpd 1.4.65 release hash
* update to lighttpd 1.4.65 release hash
* specify lua version w/ -Dlua_version=lua to avoid patching meson.build

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit db8205e545)
2022-06-13 09:19:35 +02:00
Etienne Champetier
07f8725492 Merge pull request #18743 from champtar/prom-lua
[22.03] prometheus-node-exporter-lua: backport recent commits
2022-06-12 21:43:02 -04:00
Hannu Nyman
4d09e06374 irqbalance: upstream patch to fix segfault
Apply post-1.9.0 patch from upstream to fix a segfault.
savedptr can be NULL, so guard for that.

Fixes #18741

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit ab7a23102e)
2022-06-12 20:33:24 +03:00
Hannu Nyman
827a6352be irqbalance: upstream patch to fix irq-module relation
Apply post-1.9.0 patch from upstream to fix the irq-->module
relation detection.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 358c2293fa)
2022-06-12 20:33:13 +03:00
Nick Hainke
942a091633 prometheus-node-exporter: fix ubus stations
Not every radio has also ubus support. Only query radios with ubus
functions.

Signed-off-by: Nick Hainke <vincent@systemli.org>
[fixup, call ubus.connect() once per scrape]
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 0a07237514)
2022-06-12 10:43:33 -04:00
Etienne Champetier
a9accc565d prometheus-node-exporter-lua: use uhttpd-mod-lua
listen_ipv6 config option is removed and we now
listen on both ipv4 and ipv6 addresses.
HTTP keepalive is enabled and set to 70s by default.

With uhttpd-mod-lua there is a small change in behavior,
all code is loaded/parsed/executed once on startup as before,
but now each request is executed in his own fork, so we can't
keep a state between requests.

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 60460f0046)
2022-06-12 10:43:16 -04:00
Etienne Champetier
ab327729c8 prometheus-node-exporter-lua: fixup openwrt collector
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 3afccecdb2)
2022-06-12 10:43:08 -04:00
René Treffer
a7110baf4c prometheus-node-exporter-lua: add netclass.lua collector
All current node_exporter netclass metrics will be available. This includes
speed metrics per lan port on supported DSA switches.

Signed-off-by: René Treffer <treffer@measite.de>
(cherry picked from commit a315c40b72)
2022-06-12 10:41:59 -04:00
Jottr Doe
3aaf332420 mosh-full: Add perlbase-text dependency
Fixes https://github.com/openwrt/packages/issues/18182

Signed-off-by: Jottr Doe <jottr@users.noreply.github.com>
(cherry picked from commit 17d7efe7e7)
2022-06-12 10:39:10 +02:00
Jottr Doe
7caba084e5 mosh-full: Sort dependencies alphabetically
Signed-off-by: Jottr Doe <jottr@users.noreply.github.com>
(cherry picked from commit eaa37d2e8d)
2022-06-12 10:38:52 +02:00
Josef Schlehofer
afea2bcafc beep: change git repository to fix CVE-2018-0492 and CVE-2018-1000532
1. Changed Git repository, which is used for Fedora packaging
https://github.com/johnath/beep/issues/11#issuecomment-450277122

Fixed CVEs:
CVE-2018-0492 - https://nvd.nist.gov/vuln/detail/CVE-2018-0492
CVE-2018-1000532 - https://nvd.nist.gov/vuln/detail/CVE-2018-1000532

2. Fixed SPDX License Identifier

3. Add patch to comment out -D_FORTIFY_SOURCE
Otherwise, it can not be built by default.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 6488eaf250)
2022-06-10 13:53:26 +02:00
Hirokazu MORIKAWA
a7c3a883d3 node: bump to v16.15.0
Description:
Update from  v16.15.0
Changed handling of host's npm problems due to npm updates.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit fcfd2599d9)
2022-06-09 11:01:52 -07:00
Tianling Shen
b38fedc4d2 xray-core: increase nofile limitation
This fixes "too many open files" error caused by max-file limitation
when xray processes large traffic.

Reported-by: Terry Ding <terryding77@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d98fd52865)
2022-06-09 11:00:38 -07:00
Tianling Shen
9274641503 xray-core: Update to 1.5.7
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a60ebb597a)
2022-06-09 11:00:38 -07:00
Tianling Shen
486508e256 dnsproxy: Update to 0.43.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b7e1077a60)
2022-06-09 11:00:26 -07:00
Jeffery To
e9bab297a4 golang: Update to 1.18.3
Includes fix for CVE-2022-30634 (crypto/rand: Read hangs when passed
buffer larger than 1<<32 - 1).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 112cf09031)
2022-06-08 14:06:41 -07:00
Tianling Shen
83516e3032 gg: Update to 0.2.6
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 576032a0e4)
2022-06-08 14:06:30 -07:00
John Audia
fb773a5fec htop: update to 3.2.1
Build-tested: x86/64
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 6d73b8a09a)
2022-06-07 20:36:36 +03:00
Stan Grishin
2d2f7a07f7 curl: bump to 7.83.1
* https://curl.se/changes.html#7_83_1

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit b0f213a726)
2022-06-06 22:53:14 +00:00
Leo Soares
bc417a9558 libcoap: make sure libcoap-3-notls.so is installed
This commit fixes an issue where the `libcoap-3-notls.so` is not installed,
in some cases leaving the target's root with no library and just a broken link
from `libcoap-3.so` to `libcoap-3-notls.so`.

Signed-off-by: Leo Soares <leo@hyper.ag>
(cherry picked from commit 80c4d675c2)
2022-06-06 15:02:10 -07:00
Rosen Penev
b1fa0b81c6 ksmbd-tools: update to 3.4.5
Major changes are:

Add support for Heimdal as the Kerberos 5 implementation.
Add smbd max io size parameter.
Accept global share options.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-06-05 19:53:02 -07:00
Rosen Penev
b86d48ee25 ksmbd-tools: update to 3.4.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-06-05 19:53:02 -07:00
Hannu Nyman
0060d7663d irqbalance: remove local patch for socket directory
Upstream has finally patched the UI communication socket
creation to happen only if the irqbalance UI is enabled.

As we do not use the irqbalance UI, we can remove
our local fix implemented by 4f0c847828.
(If you want to enable irqbalance UI, the fix is still needed.)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 8e71e0ad97)
2022-06-05 20:04:07 +03:00
Hannu Nyman
cd35bee8b0 irqbalance: update to 1.9.0
Update irqbalance to version 1.9.0
* adopt AUTORELEASE

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit e9002ff3d9)
2022-06-05 20:03:44 +03:00
Maciej Krüger
dbec8e910f yggdrasil: stop properly
Previously it was using killall with procd respand enabled

This was causing yggdrasil to restart after being killed

root@r3test-hap:/# service yggdrasil stop ; echo $? ; sleep 10s ; ps | grep yggdrasil
Terminated
143
 6701 root      653m S    /usr/sbin/yggdrasil -useconffile /tmp/yggdrasil.conf
 6748 root      1308 S    grep yggdrasil

Now it's just using whatever procd is using and see there, it actually stops

root@r3test-hap:/# service yggdrasil stop ; echo $? ; sleep 10s ; ps | grep yggdrasil
0
 6802 root      1308 S    grep yggdrasil

I assume there was some procd bug that kept it from being used properly

Signed-off-by: Maciej Krüger <mkg20001@gmail.com>
(cherry picked from commit 17bb2d2519)
2022-06-02 17:29:11 +02:00
Federico Capoano
656ed7aefc openwisp-config: update to 1.0.0
Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
2022-06-01 13:53:11 -07:00
Tianling Shen
29d26d1d0a xray-core: Update to 1.5.6
Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2f5980d589)
2022-06-01 13:52:58 -07:00
Tianling Shen
0647d444bc cloudflared: Update to 2022.5.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1ce63c3fd8)
2022-06-01 13:52:53 -07:00
Tianling Shen
62514d5963 yq: Update to 4.25.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 31f9d48ff3)
2022-06-01 13:52:36 -07:00
Michael Heimpold
03bb7e8a06 Merge pull request #18652 from mhei/22.03-php8-update
[22.03] php8: update to 8.1.6
2022-06-01 07:38:48 +02:00
Michael Heimpold
dde831a6b5 Merge pull request #18651 from mhei/22.03-libxml2-update
[22.03] libxml2: update to 2.9.14
2022-06-01 07:38:34 +02:00
Michael Heimpold
a9eed2e802 php8: update to 8.1.6
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit fbcb35b33f)
2022-05-31 21:51:38 +02:00
Michael Heimpold
b427815231 php8: update to 8.1.5
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit ef1249f354)
2022-05-31 21:51:38 +02:00
Michael Heimpold
a60cb1fbd2 libxml2: update to 2.9.14
This fixes CVE-2022-29824.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit c12e1cfcab)
2022-05-31 21:37:00 +02:00
Peter van Dijk
dbe3820f3a pdns-recursor: update to 4.7.0
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit b624721435)
2022-05-31 12:34:36 -07:00
Florian Eckert
a10af03f4c Merge pull request #18518 from lowjoel/strongswan-rekey-bytes-packets-22.03
strongswan: support child rekey by bytes and packets
2022-05-30 11:28:10 +02:00
Maciej Krüger
70c8dc36ca lua-openssl: update to version 0.8.2-1
Signed-off-by: Maciej Krüger <mkg20001@gmail.com>
2022-05-28 17:32:39 +02:00
Dirk Brenken
a5a0c94cc1 banip: mark as broken
banIP 0.7.x is not compatible with new nft firewall (default in master and 22.03).
Mark the package as BROKEN for now.

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit a2f0257272)
2022-05-27 21:25:41 +02:00
Tianling Shen
f263b042af dnslookup: Update to 1.7.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 202f0007d6)
2022-05-26 19:23:07 -07:00
Tianling Shen
244eb582fa dnsproxy: Update to 0.43.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 20a51c2efd)
2022-05-26 19:23:01 -07:00
Tianling Shen
80675bedbc dnsproxy: Update to 0.42.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 35961ec90d)
2022-05-26 19:23:01 -07:00
Andreas Erhard
ba8efcc27f vpnc: Update to 0.5.3+git20220517
The new version of vpnc supports additional DH groups for improved key exchange security.

Signed-off-by: Andreas Erhard <andreas.erhard@i-med.ac.at>
(cherry picked from commit e82106eaeb)
2022-05-25 18:58:37 -07:00
Christian Lachner
009915f4f5 haproxy: Update HAProxy to v2.4.17
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2022-05-25 17:05:11 -07:00
Magnus Kessler
1efe209f16 tailscale: update to version 1.24.2
Signed-off-by: Magnus Kessler <Magnus.Kessler@gmx.net>
(cherry picked from commit b557e9f0d1)
2022-05-23 21:57:19 +02:00
Hirokazu MORIKAWA
4b697c468c node-serialport: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit acd8384ede)
2022-05-22 13:39:18 -07:00
Hirokazu MORIKAWA
403eb59cd6 node-hid: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 20876aadf8)
2022-05-22 13:39:12 -07:00
Hirokazu MORIKAWA
52cb98ae99 node-cylon: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 46ce0df523)
2022-05-22 13:39:07 -07:00
Hirokazu MORIKAWA
575fbc5b90 node-arduino-firmata: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 005e114ddd)
2022-05-22 13:39:01 -07:00
Hirokazu MORIKAWA
83a9458a14 node-serialport-bindings: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit fb36a5226c)
2022-05-22 13:38:56 -07:00
Hirokazu MORIKAWA
20a92ce230 node-yarn: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 285efba8ea)
2022-05-22 11:22:20 +02:00
Hirokazu MORIKAWA
9934d28513 node-homebridge: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 3138eacbe3)
2022-05-22 11:22:05 +02:00
Hirokazu MORIKAWA
97d325e6d4 node-javascript-obfuscator: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

The modification method is different from other node modules.
The reason is due to the npm@8 issue.
https://github.com/npm/cli/issues/4027

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit eee26dbac6)
2022-05-22 11:21:58 +02:00
Hirokazu MORIKAWA
7e853be8f2 node: Major update from v14 to v16
This update also changes npm from v6 to v8.
This change also requires node module packages to be modified.
Each package will be updated later.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 28be0c92c2)
2022-05-22 11:21:36 +02:00
John Audia
b708cf5a17 ffmpeg: update to 5.0.1
Bump to latest upstream version, patches automatically rebased.

Removed upstreamed:
    060-configure-link-to-libatomic-when-its-present.patch

Tested using:
ffmpeg -f lavfi -i testsrc=duration=10:size=1280x720:rate=30 testsrc.mpg

Resulting mpg was good.

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit 5b85e7466c)
2022-05-20 23:11:37 +02:00
W. Michael Petullo
2d0893afbc pigeonhole: update to 2.3.18
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit c0fbb4f7fd)
2022-05-20 23:10:09 +02:00
W. Michael Petullo
2904343fba dovecot: update to 2.3.18
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 4c2306468a)
2022-05-20 23:10:04 +02:00
Rui Salvaterra
771fc23731 openconnect: bump to version 9.01
Now with basic support for the Array Networks SSL VPN protocol.

Also fix the OpenSSL build. OpenConnect requires support for deprecated APIs,
for the time being, so select them if compiling against OpenSSL.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit a85a057b14)
2022-05-20 23:09:48 +02:00
Michal Vasilek
6621ab68bc miniflux: update to 2.0.36
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 68879aea20)
2022-05-20 23:09:39 +02:00
W. Michael Petullo
aaab4075c0 openldap: drop use of HTTP in favor of HTTPS
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit bab2f020ee)
2022-05-20 23:07:37 +02:00
Eneas U de Queiroz
2abb60c164 audit: avoid interferece with base libaudit build
Both audit in the packages feed and libaudito from the base repo use the
same sources.

Have 'audit' use a different build directory than 'libaudit' package to
avoid interference between them.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit c0f26f4980)
2022-05-20 23:07:05 +02:00
Eneas U de Queiroz
964e972aff audit: remove host build
The audit package in the packages feed share the same sources as the
libaudit package in the base repo.  libaudit performs a host build, used
only by libsemanage in base.

There is no package depending on 'audit/host', so we can remove it to
avoid possible confusion.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 1d54defb0f)
2022-05-20 23:06:59 +02:00
Eneas U de Queiroz
0c44bdceab audit: Fix compilation with kernel 5.15
Linux 5.15 does not have the linux/ipx.h header.

The patch is a partial cherry-pick (skipped ChangeLog) of upstream
commit 6b09724c6 ("Make IPX packet interpretation dependent on the ipx
header file existing").

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 7be14da0d5)
2022-05-20 23:06:35 +02:00
David Bauer
223f6215ba poemgr: add package
Add the poemgr package. This package is required to control the PSE
controller for the PoE outputs on the Ubiquiti UniFi Switch Flex.

Signed-off-by: David Bauer <mail@david-bauer.net>
2022-05-20 12:19:27 -07:00
Yousong Zhou
9f4253df4d shadowsocks-libev: fix compat issue with newer version of ucode
Reported-by: Huangbin Zhan <zhanhb88@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 93162b35c8)
2022-05-20 12:17:01 -07:00
Jeffery To
044425dc4b bluez: Update to 5.64, update/refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d3cdfa3c30)
2022-05-20 12:14:56 -07:00
Gerard Ryan
30c39ca1d7 docker: Update to v20.10.16
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit b05dac5671)
2022-05-20 12:13:05 -07:00
Gerard Ryan
b23eb24dcb dockerd: Update to v20.10.16
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 81dd38677b)
2022-05-20 12:13:05 -07:00
Gerard Ryan
6f3e7f8798 libnetwork: Updated to 339b97 for docker v20.10.16
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 127aa63898)
2022-05-20 12:13:05 -07:00
Gerard Ryan
c5061b93d9 containerd: Update to v1.6.4 for docker v20.10.16
* Overrode `PREFIX` to have the old behaviour

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 9a7e3c0b7b)
2022-05-20 12:13:05 -07:00
Gerard Ryan
33d3642c85 runc: Update to v1.1.1 for docker v20.10.16
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 8cf4c156c4)
2022-05-20 12:13:05 -07:00
Hirokazu MORIKAWA
001ab241e6 icu: bump to 71.1
Description:
ICU 71 updates to CLDR 41 locale data with various additions and corrections.

ICU 71 adds phrase-based line breaking for Japanese. Existing line breaking methods follow standards and conventions for body text but do not work well for short Japanese text, such as in titles and headings. This new feature is optimized for these use cases.

ICU 71 adds support for Hindi written in Latin letters (hi_Latn). The CLDR data for this increasingly popular locale has been significantly revised and expanded. Note that based on user expectations, hi_Latn incorporates a large amount of English, and can also be referred to as “Hinglish”

ICU 71 and CLDR 41 are minor releases, mostly focused on bug fixes and small enhancements. (The fall CLDR/ICU releases will update to Unicode 15 which is planned for September.) We are also working to re-establish continuous performance testing for ICU, and on development towards future versions.

ICU 71 updates to the time zone data version 2022a. Note that pre-1970 data for a number of time zones has been removed, as has been the case in the upstream tzdata release since 2021b.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit d46237f17c)
2022-05-20 12:10:18 -07:00
David Bauer
136fb020ff usteer: update to latest HEAD
7afab96 usteer: Fix better candidate not being set in policy

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit c46095085a)
2022-05-19 12:49:49 +02:00
Stan Grishin
646e539d8f Merge pull request #18363 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: 2021-11-22-3: add support for Canary Domains
2022-05-19 12:00:54 +03:00
Jonathan Pagel
db966f7196 telegraf: Update to version 1.22.4
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit f43a5f03bb)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-05-18 09:15:55 +02:00
Jeffery To
b331051086 Merge pull request #18543 from hexian000/openwrt-22.03
[openwrt-22.03] privoxy: update to 3.0.33 and fix the init script
2022-05-17 11:07:12 +08:00
Jeffery To
864bc0eac6 golang: Update to 1.18.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 659f87d5d4)
2022-05-16 06:27:04 -07:00
Jeffery To
867ad434ff micropython-lib: Update to latest master
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8550edbe85)
2022-05-16 06:26:52 -07:00
Jeffery To
0cd609b676 ci: Look for changed packages in the PR branch only
Fixes https://github.com/openwrt/packages/issues/15267.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6b2294ac37)
2022-05-16 11:20:14 +02:00
Liang Yang
9d2246b281 docker: fix compilation with glibc
Signed-off-by: Liang Yang <ggg17226@gmail.com>
(cherry picked from commit 624f48a602)
2022-05-15 07:57:39 -07:00
Liang Yang
5af6f2592e dockerd: fix compilation with glibc
Signed-off-by: Liang Yang <ggg17226@gmail.com>
(cherry picked from commit 9963312067)
2022-05-15 07:57:39 -07:00
Gerard Ryan
8905f9808d dockerd: Add firewall independent dependencies
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 1f96ec16ec)
2022-05-15 07:57:39 -07:00
Gerard Ryan
79614bb2ac dockerd: Sorted dependencies for better diffs
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 34c77110f1)
2022-05-15 07:57:39 -07:00
Andy Dodd
c227c65c68 docker: Update to 20.10.14
Signed-off-by: Andy Dodd <atd7@cornell.edu>
(cherry picked from commit cd99c4cafb)
2022-05-15 07:57:39 -07:00
Andy Dodd
df8b28232c dockerd: Update to 20.10.14, and update version checking mechanism
a7a7c732c0
changed package pinning from commit hash to version for some dependencies
(but not all, libnetwork is still referenced by commit)

Support the version-based pinning mechanism in addition to commit-based

Signed-off-by: Andy Dodd <atd7@cornell.edu>
(cherry picked from commit c3166c5a22)
2022-05-15 07:57:39 -07:00
Andy Dodd
23547de3c9 containerd: Update to 1.5.11
Signed-off-by: Andy Dodd <atd7@cornell.edu>
(cherry picked from commit a134a23a07)
2022-05-15 07:57:39 -07:00
Michal Vasilek
c79b4f85b2 runc: update to 1.0.3
* fixes CVE-2021-43784

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 9a4423995a)
2022-05-15 07:57:39 -07:00
He Xian
f8892740c1 privoxy: update to 3.0.33 and fix the init script
1. Fixed init script would kill itself when trying to stop a service.
2. Upgrade privoxy release to 3.0.33
3. Set PKG_RELEASE to AUTORELEASE

Signed-off-by: He Xian <hexian000@outlook.com>
(cherry picked from commit 5d917b9578)
2022-05-15 17:17:34 +08:00
Michal Vasilek
6f606107e7 lxc: export systemd cgroups after install
otherwise, a user would have to either manually run /etc/init.d/lxc-auto
boot or reboot the system to start using lxc.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 2cde10b950)
2022-05-15 07:29:39 +02:00
Tianling Shen
245c658fa4 cloudflared: Update to 2022.5.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 95a0d04046)
2022-05-14 21:54:47 -07:00
Tianling Shen
61a2e96d20 dnsproxy: Update to 0.42.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit dcb0495ca1)
2022-05-14 21:54:40 -07:00
Nick Hainke
f8e2c5dca0 dawn: update to 2022-05-09
7a72674 datastorage/ubus: rework kicking algorithm

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 8b41e959d0)
2022-05-13 13:16:03 +03:00
Christian Lachner
68c7cb1d3b haproxy: Update HAProxy to v2.4.16
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2022-05-13 13:15:20 +03:00
Joel Low
1646a22ddb strongswan: support child rekey by bytes and packets
This adds support for the child SA to be rekeyed through the byte/packet
threshold. The default is blank (which disables the byte/packet thresholds).

Signed-off-by: Joel Low <joel@joelsplace.sg>
(cherry picked from commit 5c8af06c94)
2022-05-12 07:09:16 +08:00
Jeffery To
889b2a4a07 Merge pull request #18469 from lowjoel/strongswan-wolfssl-22.03
strongswan: add wolfssl plugin
2022-05-12 03:52:58 +08:00
Jeffery To
1152948589 Merge pull request #18462 from 1715173329/cr
[openwrt-22.03] cloudreve: Update to 3.5.3
2022-05-12 03:25:36 +08:00
Jeffery To
50493163c0 Merge pull request #18461 from 1715173329/cf
[openwrt-22.03] cloudflared: Update to 2022.5.0
2022-05-12 03:22:35 +08:00
Jeffery To
e593f1ebfb Merge pull request #18339 from mwarning/zt-openwrt-22.03
[22.03] zerotier: fix segfault on ARM platforms
2022-05-11 04:09:45 +08:00
Jeffery To
770de80cad Merge pull request #18332 from clarkwang/v22.03-sexpect
[22.03] sexpect: Expect for Shells
2022-05-11 03:51:11 +08:00
Jeffery To
b688080365 Merge pull request #18333 from clarkwang/v22.03-passh
[22.03] passh: an sshpass alternative
2022-05-11 03:49:26 +08:00
Dirk Brenken
db148cc089 adblock: list maintenance
* add new oisd nsfw source (XL)
* change korean source name (again)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7c66d054bf)
2022-05-10 16:54:53 +02:00
Jeffery To
9daa13049c Merge pull request #18359 from 1715173329/v3
[openwrt-22.03] v2rayA: Update to 1.5.7
2022-05-10 15:00:55 +08:00
Derek Yerger
821fd24995 strongswan: add wolfssl plugin
Signed-off-by: Derek Yerger <derek@altdevs.net>
Signed-off-by: Joel Low <joel@joelsplace.sg>
(cherry picked from commit 51203cae24)
2022-05-10 08:27:14 +08:00
John Audia
220c75cef2 htop: update to 3.2.0
Build-tested: x86/64
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit b4043d9225)
2022-05-09 23:34:19 +03:00
Tianling Shen
dad9ae19ef v2rayA: Update to 1.5.7
- Removed an upstreamed patch
- Move logs to /var/log in accordance with FHS 3.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ff8f25cb98)
2022-05-08 15:26:56 +08:00
Tianling Shen
2aa2a157b6 cloudreve: Update to 3.5.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit fc090f1eeb)
[Removed wrong cherry-pick info]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-05-07 12:34:45 +08:00
Tianling Shen
d51f7c20b7 cloudreve: Update to 3.5.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8f6bf937ca)
2022-05-07 12:32:39 +08:00
Tianling Shen
0e639eb478 cloudflared: Update to 2022.5.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 74d7af61fe)
2022-05-07 12:31:04 +08:00
Michal Vasilek
23fc3e63c3 youtube-dl: update to 2021.12.17
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit ef29bf0163)
2022-05-06 19:09:33 +02:00
David Bauer
50e3063260 usteer: update to latest HEAD
46539ae policy: abort kick process for missing candidate
408bbca policy: don't kick clients immediatly
444b233 policy: only send preferred candidate with transition request

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit dcd33d5da6)
2022-05-06 08:43:01 +02:00
Matthias Schiffer
948ea0e9c0 ecdsautils: update to v0.4.1
This fixes CVE-2022-24884.

Also update the package URL to match the source repository.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit de5671e582)
2022-05-05 18:47:20 +02:00
Josef Schlehofer
97333939db hwdata: update to version 0.359
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 600eecbac6)
2022-05-04 18:11:54 +02:00
Rui Salvaterra
22c8efd937 tor: bump to 0.4.7.7 stable
The first stable release in the 0.4.7.x series.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 0b50456514)
2022-05-03 17:45:50 +02:00
Mister Benjamin
241e70f5fd etherwake-nfqueue: swap iptables for nftables dependency
Signed-off-by: Mister Benjamin <144dbspl@gmail.com>
2022-05-02 12:47:09 -07:00
Tianling Shen
61e0ee2e8e rclone: Update to 1.58.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit cf81132418)
2022-05-01 09:21:02 -07:00
Dengfeng Liu
a8374c48e1 apfree-wifidog: fix compile error
which requires libiptext library from iptables

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 7408185c1d)
2022-04-30 11:57:23 -07:00
Rosen Penev
2af08fe724 gst1-libav: fix compilation with ffmpeg5
Upstream backport.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1717048598)
2022-04-30 11:57:23 -07:00
Tianling Shen
419054a05f libtorrent-rasterbar: Update to 2.0.6
Added new dependency "libstdcpp".
Removed an upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2c78f8b154)
2022-04-30 11:23:04 -07:00
Tianling Shen
09da83968e yq: Update to 4.25.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 514ca20255)
2022-04-30 14:00:23 +02:00
Tianling Shen
c13bb6174b dnsproxy: Update to 0.42.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f6b1169c20)
2022-04-30 13:59:23 +02:00
Jonathan Pagel
8949136a8c telegraf: upgrade to version 1.22.3
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit c5b668df5b)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-04-30 12:16:02 +02:00
Van Waholtz
2b6b4712cb frp: update to 0.42.0
Changelogs: https://github.com/fatedier/frp/releases

Signed-off-by: Van Waholtz <vanwaholtz@gmail.com>
2022-04-30 09:53:40 +02:00
Peter van Dijk
a880a13b85 dnsdist: update to 1.7.1
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit e2f8ac23f6)
2022-04-29 18:32:16 +02:00
Hannu Nyman
afacf250a0 nano: update to 6.3
Update nano editor to version 6.3

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit e076a9a40d)
2022-04-29 19:15:11 +03:00
Clark Wang
f26d5e5462 passh: updated per OpenWrt's common practice
- removed extra white spaces in Makefile
- changed license from GPL-3.0 to GPL-3.0-only
- added test.sh

Signed-off-by: Clark Wang <dearvoid@gmail.com>
(cherry picked from commit 580fe568d6)
2022-04-29 09:30:54 +08:00
Clark Wang
3bd1d510e4 passh: an sshpass alternative
Sshpass does not work well in a few scenarios. Passh is an sshpass
alternative which tries to fix the issues.

Signed-off-by: Clark Wang <dearvoid@gmail.com>
(cherry picked from commit 1221ceed8d)
2022-04-29 09:30:54 +08:00
Jan Hák
bffdcd50a3 knot: update to 3.1.7
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit f30da8c572)
2022-04-28 23:40:45 +02:00
Rui Salvaterra
b0c1bbd272 tor: bump to 0.4.6.10 stable
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 17e78a9790)
2022-04-28 23:40:39 +02:00
Clark Wang
7fddd201f8 sexpect: updated per OpenWrt's common practice
- removed extra white spaces in Makefile
- changed license from GPL-3.0 to GPL-3.0-only
- added test.sh

Signed-off-by: Clark Wang <dearvoid@gmail.com>
(cherry picked from commit 17d4d05fd5)
2022-04-28 21:25:30 +08:00
Clark Wang
40e42950cd sexpect: Expect for Shells
Sexpect is another implementation of Expect which is specifically
designed for shells. It's lightweight and has no dependency on other
packages.

Signed-off-by: Clark Wang <dearvoid@gmail.com>
(cherry picked from commit 49b1e63444)
2022-04-28 21:25:30 +08:00
Alexandru Ardelean
1cd7daaa3f django: bump to version 4.0.4
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-04-28 08:32:34 +02:00
Jitao Lu
ee9f2b16c5 kitty-terminfo: Terminfo for kitty, an OpenGL-based terminal emulator
Signed-off-by: Jitao Lu <dianlujitao@gmail.com>
2022-04-27 22:05:18 -07:00
Jonathan Pagel
ee93a159bc telegraf: Update to version 1.22.2
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit a93b3baba1)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-04-26 10:54:12 +02:00
Tianling Shen
1f03233c08 xray-core: Update to 1.5.5
Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 67c0a17fee)
2022-04-25 23:31:09 -07:00
Tianling Shen
d0aac1ec89 cloudreve: Update to 3.5.1
Removed statik which was deprecated by the project.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f5401ff6dc)
2022-04-25 23:31:04 -07:00
Peter van Dijk
08f403b45c pdns-recursor: update to 4.6.2
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

(cherry picked from commit 5f6dcc013d)
(cherry picked from commit cbcc4c08df)
2022-04-25 12:11:44 -07:00
Peter van Dijk
86527494d5 pdns: update to 4.6.2
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit 0aaea23c07)
(cherry picked from commit da524a4d08)
2022-04-25 12:11:44 -07:00
Daniel Golle
c3960c7c44 uvol: update to version 0.8
Bump version to reset PKG_RELEASE counter.
Add missing dependency on ucode-mod-math which is needed for the
mkdtemp() implementation used to format UBI volumes.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-04-25 19:30:14 +01:00
Daniel Golle
1213cf98fd uvol: unbreak if LVM is installed but unused
Fix and simplify console output, make sure uvol doesn't break in case
of LVM being installed but not used.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 3959a9b22c)
2022-04-25 19:30:14 +01:00
Daniel Golle
33e89f46a0 uvol: yet another small compatibility hack
Shift ARGV until actual parameters start to compensate for older
versions of ucode passing the complete cmdline.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 31f02d5c1e)
2022-04-25 19:30:14 +01:00
Daniel Golle
17d2376261 uvol: fixes and adapt to in-tree ucode
Don't use features which are not yet present in the version of ucode
currently shipped with OpenWrt (such as `fs.access()` or assuming raw
mode by default).
Fix syntax error in main executable.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 74caff0d59)
2022-04-25 19:30:14 +01:00
Daniel Golle
3ef5254f4a uvol: unbreak build and adapt to updated ucode
* Fix build which was broken by a wrong path in the Makefile.

Adapt to ucode commit 4618807 ("main: rework CLI frontend"):
 * ucode now no longer needs the {% %} around each code file, remove
   that and safe one level of indentation.
 * ARGV now no longer includes ucode executable and script itself

Fixes: 6350c7bc6 ("uvol: replace with re-write in ucode")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 22d202e3a5)
2022-04-25 19:30:14 +01:00
Daniel Golle
27b395871d uvol: update to re-write in ucode
Replace previous Shell draft-quality implementation of uvol with a
rewrite in ucode[1].
While the new code is slightly larger, it performs much better (as
we no longer fork() for parsing strings like in Shell with grep, sed
and friends).

Before:
  time uvol list -j
  [ ... ]
  real	0m 0.82s
  user	0m 0.13s
  sys	0m 0.10s

After:
  time uvol list -j
  [ ... ]
  real	0m 0.47s
  user	0m 0.05s
  sys	0m 0.05s

[1]: https://github.com/jow-/ucode
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 6350c7bc63)
2022-04-25 19:30:14 +01:00
Nick Hainke
ff9109ad7c prometheus-node-exporter-lua: improve ubnt-manager
It is costly in transmissions to add all information to each metric.
Instead, only use the "device" as a label and add all other important
labels to the "uptime" metric.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 9f3064a11c)
2022-04-25 14:21:58 +02:00
Josef Schlehofer
4d539e859c git: update to version 2.34.3
Fixes:
- CVE-2022-24765

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c77f4f9e1d)
2022-04-25 11:18:31 +02:00
Stan Grishin
b282f5bba5 https-dns-proxy: 2021-11-22-3: add support for Canary Domains
Fixes https://github.com/stangri/source.openwrt.melmac.net/issues/155.
Background: https://support.mozilla.org/en-US/kb/canary-domain-use-application-dnsnet

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit cb3b47be433f43838a109c326152ef86354fa8da)
2022-04-25 01:12:09 +00:00
Luiz Angelo Daros de Luca
0582cea9f6 ruby: update to 3.0.4
Fixes:
- CVE-2022-28738: Double free in Regexp compilation
- CVE-2022-28739: Buffer overrun in String-to-Float conversion

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2022-04-23 10:31:50 +02:00
Rosen Penev
e6b95596ba ola: fix compilation with musl 1.2.3
Upstream sent patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e35467459b)
2022-04-22 12:03:11 -07:00
Rosen Penev
ea38786811 powertop: add gettext-version fixup
I hit this locally on Fedora 35 for some reason.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8324c1fe06)
2022-04-22 06:02:19 -07:00
Rosen Penev
6e04c2bcca powertop: update to 2.14
Upstream switched to github.

Fix license information.

Backport patch for ncurses 6.3. Remove other backported patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 32241d76d8)
2022-04-22 06:02:19 -07:00
Moritz Warning
b935346910 zerotier: fix segfault on ARM platforms
Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit b45d39c142)
2022-04-22 07:28:32 +02:00
David Bauer
28999ef36d usteer: update to latest HEAD
f88ac23 local-node: periodically send link-measurement requests
4473c6e measurement: add missing timeout-reset
6d3314c local-node: handle received link-measurement reports
7df969f measurement: generalize measurement handling
bb61f2a local-node: enable link-measurement capability
4458b6f usteer: expose STA link measurement capability

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 0248058f6b)
2022-04-22 02:15:15 +02:00
Jeffery To
3d33fa3b09 python-twisted: Update to 22.4.0, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 43a380f953)
2022-04-19 22:06:59 -07:00
Tianling Shen
342b647b88 yq: Update to 4.24.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit bedad06107)
2022-04-17 09:57:52 +02:00
Tianling Shen
cfb35eb34e yq: Update to 4.24.4
Updated GO_PKG due to upstream changes.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 07a29d211a)
2022-04-17 09:57:52 +02:00
Nick Hainke
99f859077c prometheus-node-exporter-lua: fix ubnt-manager collector
Update the version and add ubnt-manager to the build section.

Fixes: 76f27975a9 (" prometheus-node-exporter-lua: add ubnt-manager collector ")

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 42e841039b)
2022-04-16 17:31:42 -04:00
Nick Hainke
18b7f01e2b prometheus-node-exporter-lua: add ubnt-manager collector
Ubnt-manager-collector collects statistics from airos devices configured
in ubnt-manager.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 76f27975a9)
2022-04-16 17:31:42 -04:00
Nick Hainke
64029f426f ubnt-manager: add ubnt-manager
This app makes it easier to work with AirOS devices. So far, only monitoring is implemented.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit e4a8d3fc29)
2022-04-16 17:31:42 -04:00
James White
77de5ae65a adguardhome: Update v0.107.6
Remove Go 1.18 patch as upstream source has updated go dependencies

Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit ff6946e73e)
2022-04-16 10:59:04 -07:00
James White
f5e31b830e adguardhome: Patch quic-go to fix compilation on Go 1.18
Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit 4165f7c7dd)
2022-04-16 10:59:04 -07:00
Jeffery To
56108a08ba golang: Fix conditionals not stripped
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 86fd1ebbe4)
2022-04-16 10:58:51 -07:00
Jeffery To
84c53aa03c golang: Update to 1.18.1
Includes fixes for:
* CVE-2022-24675 - encoding/pem: stack overflow
* CVE-2022-28327 - crypto/elliptic: generic P-256 panic when scalar has
  too many leading zeroes

This also adds -buildvcs=false to omit VCS information in Go programs.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8c0477a895)
2022-04-16 10:58:51 -07:00
Jeffery To
7a7adcd08a golang: Update to 1.18, update patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 478666b00b)
2022-04-16 10:58:51 -07:00
Tianling Shen
698a4b7ddc dnslookup: Update to 1.6.0
Fixed typo error: `AUTORELESE` > `AUTORELEASE`.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b6a86a2b63)
2022-04-16 17:42:41 +02:00
Jeffery To
961c73ca7c syncthing: Update to 1.19.2
Includes patch based on upstream change[1] to fix compilation with Go
1.18.

Fixes https://github.com/openwrt/packages/issues/18267.

[1]: e30898ddb3

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4b7ff2df5e)
2022-04-16 17:10:14 +02:00
James White
bf66440256 ooniprobe: Update 3.14.2
Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit ddb4ccfeaf)
2022-04-15 22:06:01 -07:00
Tianling Shen
76a0a1c123 cloudflared: Update to 2022.4.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 74bf9cc71c)
2022-04-15 20:31:50 +02:00
Rosen Penev
584e13fae3 glibs: revert "fix compilation with Alpine Linux"
This reverts commit 0ce744202a.

Broken everywhere else. A better solution will need to be found.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2784618ab5)
2022-04-13 00:31:39 -07:00
Michael Heimpold
be14fb7e24 Merge pull request #18289 from mhei/22.03-php8-updates
[22.03] PHP8 / PHP8 PECL updates
2022-04-12 07:04:17 +02:00
Dirk Brenken
42dfe46f05 adblock: 4.1.3-8
* add new 'hblock' compilation source (XL, see https://hblock.molinero.dev for reference)
* print runtime/date information in ISO-8601 standard format
* minor cleanups

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 51a5ec6069)
2022-04-11 21:36:48 +02:00
Michael Heimpold
a7ff9ba63f php8-pecl-redis: update to 5.3.7
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 16a7a82e6c)
2022-04-11 21:08:27 +02:00
Michael Heimpold
d4cde38ae1 php8-pecl-imagick: update to 3.7.0
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 5877d902e9)
2022-04-11 21:08:27 +02:00
Michael Heimpold
6a46eda931 php8-pecl-http: update to 4.2.2
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit d30b18257d)
2022-04-11 21:08:27 +02:00
Michael Heimpold
f39f221b03 php8: update to 8.1.4
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 7c31879f78)
2022-04-11 21:08:27 +02:00
Hannu Nyman
7b0d4cf3fc haveged: update to 1.9.18
Update haveged to version 1.9.18

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 8579494bbb)
2022-04-11 18:25:53 +03:00
Tianling Shen
fa3965a58d cloudflared: Update to 2022.4.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 51208c9514)
2022-04-11 09:45:48 +02:00
Jonathan Pagel
2a7e3cf470 telegraf: Update to version 1.22.1
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 86b8b30683)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-04-09 09:33:52 +02:00
Florian Eckert
93eeb71b50 keepalived: fix libip6tc dependency
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit eed4277d5c)
2022-04-08 08:55:28 +02:00
Florian Eckert
6fcc21aa9f keepalived: add missing CONFIG_ prefix to PKG_CONFIG_DEPENDS elements
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 209bcc649a)
2022-04-08 08:55:12 +02:00
Jonathan Pagel
d1b8a40ced telegraf: Update to version 1.22.0
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 2c9c485822)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-04-06 21:17:07 +02:00
Stijn Tintel
e56959e66a strongswan: fix forecast plugin dependency
The forecast plugin does not require the iptables binary, it uses
libiptc instead.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 6e132e74fd)
2022-04-06 17:12:04 +02:00
Stijn Tintel
ddab7e7f2d strongswan: fix connmark plugin dependency
The connmark plugin does not require the iptables binary, it uses
libiptc instead.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 6cb15df69a)
2022-04-06 17:11:43 +02:00
Stijn Tintel
eabca62005 strongswan: move iptables deps to updown plugin
Let's move the iptables IPsec dependencies out of the strongswan package
and into the plugin package that actually depends on it,
strongswan-mod-updown. As the default updown script calls the iptables
binary, also add a dependency on the iptables-legacy package.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 93fbbcbfee)
2022-04-06 17:11:27 +02:00
Florian Eckert
c5eaff3966 Merge pull request #18261 from 1715173329/d3
[openwrt-22.03] dnsproxy: Update to 0.42.1
2022-04-06 16:47:09 +02:00
Tianling Shen
047ccddf4c dnsproxy: Update to 0.42.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a1f86641d2)
2022-04-06 22:31:11 +08:00
Alexandru Ardelean
0286908c88 python-pytz: bump to version 2022.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 685826db73)
2022-04-05 11:11:55 +02:00
Tianling Shen
59b8af69cf yq: Update to 4.24.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3cbdc7e422)
2022-04-02 06:54:26 -07:00
Tianling Shen
69ef633e82 dnsproxy: Update to 0.42.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f3a1d2ed1f)
2022-04-02 06:53:59 -07:00
Stijn Tintel
7817cf4422 openvswitch: bump to 2.15.3
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit f8c8348f32)
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2022-04-02 10:52:13 +08:00
Stijn Tintel
4f99b9af77 openvswitch: enable AUTORELEASE
Enable AUTORELEASE in a separate commit so that the next commit can be
reverted without having to manually re-introduce it.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit cf1e146858)
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2022-04-02 10:52:13 +08:00
Rosen Penev
1f949f5456 ksmbd-tools: revert update to 3.4.4
This reverts commit 3ffd540b04.

This does not work with the kmod currently in tree.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-04-01 12:19:22 -07:00
Josef Schlehofer
05986f212c Merge pull request #18122 from jefferyto/python-3.10.3-openwrt-22.03
[openwrt-22.03] python3: Update to 3.10.4
2022-03-31 09:55:56 +02:00
Josef Schlehofer
5b20c6c940 vala: update to version 0.56.0 (LTS version)
According, to the project website [1], we were not using long-term
version, but stable one. Let's use LTS version.

Changelog can be found on their GitLab [2].

[1] https://wiki.gnome.org/Projects/Vala
[2] https://gitlab.gnome.org/GNOME/vala/raw/0.56/NEWS

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 189f078a35)
2022-03-30 10:47:41 +02:00
Josef Schlehofer
30e5ccfded vala: update to version 0.54.8
Changelog:
https://gitlab.gnome.org/GNOME/vala/raw/0.54/NEWS

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 474414dff1)
2022-03-30 10:47:15 +02:00
Tianling Shen
77294c5044 cloudflared: Update to 2022.3.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 99dfcbd2fb)
2022-03-28 14:28:02 -07:00
Tianling Shen
7d84dd5b8d cloudflared: Update to 2022.3.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ed260f3b98)
2022-03-28 14:28:02 -07:00
Florian Eckert
1534c958eb mwan3: fix sticky chain length
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 87c611abf8)
2022-03-28 16:12:52 +02:00
Jeffery To
4fdf1438e2 python3: Update to 3.10.4
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d0efe27a8c)
2022-03-28 16:04:09 +08:00
Jeffery To
03858092b0 python3: Update to 3.10.3, refresh patches
Includes fixes for:
* Windows builds updated to bzip2 1.0.8 to mitigate CVE-2016-3189 and
  CVE-2019-12900
* CVE-2022-26488: Escalation of privilege via Windows Installer

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit bed8dc2132)
2022-03-28 14:13:17 +08:00
Tianling Shen
852b9ede3a yq: Update to 4.23.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8d7b7fbfb4)
2022-03-27 22:30:08 +03:00
Tianling Shen
5f7f751978 xray-core: Update to 1.5.4
Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f8fa16f40d)
2022-03-27 22:29:34 +03:00
Rosen Penev
abd5c00716 horst: fix compilation with ncurses 6.3
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2bf3d9a777)
2022-03-27 11:19:42 +03:00
Daniel Golle
c3858a879c gnunet: work-around sysupgrade restore missing file ownerships
Make sure /etc/gnunet and all its files and sub-directories are owned
by gnunet:gnunet. This is somehow necessary as file ownership otherwise
doesn't survive sysupgrade.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 65f5f850f3)
2022-03-26 21:29:51 +00:00
Petr Štetiar
ec1fa62ba8 Merge pull request #18141 from ynezz/ynezz/gh-action-sdk-v4-openwrt-22.03
[22.03] ci: use openwrt/gh-action-sdk@v4
2022-03-25 22:19:25 +01:00
Daniel Golle
c79a5d0384 Jinja2: add Josef as the maintainer of this package
It seems that Turris guys is using this package in the Turris OS, where
it is used for reForis (simple, basic UI for users)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
[replace Daniel as maintainer, add commit message]
Signed-off-by: Josef Schlehofer <josef.schlehofer@nic.cz>
(cherry picked from commit 2366b26813)
2022-03-24 23:07:45 +00:00
Josef Schlehofer
4e9b9bbb78 Flask: use AUTORELEASE
This helps in cases, when someone forgets to bump PKG_RELEASE

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 116c0d6c39)
2022-03-24 23:07:27 +00:00
Daniel Golle
1feb25ef37 Flask: add Josef as the maintainer of this package
It seems that Turris guys is using this package in the Turris OS, where
it is used for reForis (simple, basic UI for users)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
[replace Daniel as maintainer, add commit message]
Signed-off-by: Josef Schlehofer <josef.schlehofer@nic.cz>
(cherry picked from commit 934a7e22cd)
2022-03-24 23:06:38 +00:00
Daniel Golle
a22f2974a0 libudev-zero: update to version 1.0.1
The new version includes all previously locally backported patches.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 669e4a9542)
2022-03-24 23:06:25 +00:00
Daniel Golle
37714ea5a5 gpgme: update to version 1.17.1
Remove backported patch which is now included in the upstream release.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit d7799595bd)
2022-03-24 23:06:13 +00:00
Daniel Golle
2f6f65b216 uvol: fix list output on LVM backend
'uvol list' was broken when introducing support for the hidden volumes.
Fix that by not using 'continue' keyword to break the loop (as that
lead to skipping 'json_select ..') and using if-clause instead.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1337c44026)
2022-03-24 23:05:59 +00:00
Daniel Golle
34e0a97caf auc: only add filesystem type if it is known
Prevent NULL-pointer on older versions of OpenWrt.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f1969ab584)
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-24 23:05:47 +00:00
Daniel Golle
de6e5e899d auc: bump to version 0.2.5
Request root filesystem type to since it is possible now after
9d8467a748

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 6c9ab0e426)
2022-03-24 23:05:29 +00:00
Daniel Golle
02c95860fe gnunet-fuse: update to 0.16.0
Only notable change since 0.14.0 is that pthread_mutexattr_setkind_np()
is now no longer used.
pthread_mutexattr_setkind_np() is deprecated and non-standard.
The standard version is called pthread_mutexattr_settype()

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit d59731ba61)
2022-03-24 23:05:17 +00:00
Daniel Golle
9cb8739049 gnunet: update to 0.16.2
This is a bugfix release for gnunet 0.16.1.

Noteworthy changes in 0.16.2 (since 0.16.1)

    DHT: Fix path signature handling.
    GNS: Fix BOX handling in zone apex.
    NAMESTORE: Prevent storing under invalid labels.
    Buildsystem: Fix build on *BSD and Guix.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 033744ac59)
2022-03-24 23:05:03 +00:00
Dirk Brenken
7a6f2778fb adblock: 4.1.3-7
* removed discontinued source 'gaming'
* changed url of source 'reg_kr'

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit bed70d5f4b)
2022-03-24 21:12:02 +01:00
Hannu Nyman
e85ba63871 nano: provide nano-full with most features enabled
Provide a new variant, nano-full, that enables almost
all functionality of nano. Only libmagic file type detection
has been left out.

Ship with a minimal /etc/nanorc that the user can modify.
nanorc documentation at
https://www.nano-editor.org/dist/latest/nanorc.5.html

Provide color highlighting for the uci config files.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6a51794638)
2022-03-24 20:31:10 +02:00
Petr Štetiar
4ac25793f9 ci: use openwrt/gh-action-sdk@v4
In order to use feeds from GH mirror for GH actions, thus saving a lot
of resources being wasted.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit b1355832a0)
2022-03-24 14:06:49 +01:00
Vladimir Ulrich
c1f48576f7 zoneinfo: updated to the latest release
Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit b15721d6d6)
2022-03-21 20:07:40 +02:00
Florian Eckert
68a8c2d8dd glib2: update version to 2.70.4
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 3ace16ed77)
2022-03-21 11:24:08 +01:00
Hannu Nyman
a83b1f64ff liboping: fix compilation with ncurses 6.3
Fix compilation with ncurses 6.3 by adjusting the printf format strings.

Apparently ncurses 6.3 introduced some new formatting tweaks that
broke things.

Fixes #18110

Reference to:
* https://github.com/octo/liboping/issues/62
* https://github.com/octo/liboping/pull/61
* https://salsa.debian.org/debian/liboping/-/blob/debian/debian/patches/fix_HOST_PRINTF_format_string.patch

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit cb4d8ccb27)
2022-03-20 20:55:15 +02:00
1156 changed files with 40787 additions and 15530 deletions

View File

@@ -1,73 +0,0 @@
FROM debian:10
# Configuration version history
# v1.0 - Initial version by Etienne Champetier
# v1.0.1 - Run as non-root, add unzip, xz-utils
# v1.0.2 - Add bzr
# v1.0.3 - Verify usign signatures
# v1.0.4 - Add support for Python3
# v1.0.5 - Add 19.07 public keys, verify keys
# v1.0.6 - Add 21.02 public keys, update Debian image to version 10, add rsync
RUN apt update && apt install -y \
build-essential \
bzr \
curl \
jq \
gawk \
gettext \
git \
libncurses5-dev \
libssl-dev \
python \
python3 \
signify-openbsd \
subversion \
rsync \
time \
unzip \
wget \
xz-utils \
zlib1g-dev \
&& rm -rf /var/lib/apt/lists/*
RUN useradd -c "OpenWrt Builder" -m -d /home/build -s /bin/bash build
USER build
ENV HOME /home/build
# OpenWrt Build System (PGP key for unattended snapshot builds)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/626471F1.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<pgpsign-snapshots@openwrt.org>' | grep '^fpr:::::::::54CC74307A2C6DC9CE618269CD84BCED626471F1:$' \
&& echo '54CC74307A2C6DC9CE618269CD84BCED626471F1:6:' | gpg --import-ownertrust
# OpenWrt Build System (PGP key for 17.01 "Reboot" release builds)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/D52BBB6B.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<pgpsign-17.01@openwrt.org>' | grep '^fpr:::::::::B09BE781AE8A0CD4702FDCD3833C6010D52BBB6B:$' \
&& echo 'B09BE781AE8A0CD4702FDCD3833C6010D52BBB6B:6:' | gpg --import-ownertrust
# OpenWrt Release Builder (18.06 Signing Key)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/17E1CE16.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<openwrt-devel@lists.openwrt.org>' | grep '^fpr:::::::::6768C55E79B032D77A28DA5F0F20257417E1CE16:$' \
&& echo '6768C55E79B032D77A28DA5F0F20257417E1CE16:6:' | gpg --import-ownertrust
# OpenWrt Build System (PGP key for 19.07 release builds)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/2074BE7A.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<pgpsign-19.07@openwrt.org>' | grep '^fpr:::::::::D9C6901F45C9B86858687DFF28A39BC32074BE7A:$' \
&& echo 'D9C6901F45C9B86858687DFF28A39BC32074BE7A:6:' | gpg --import-ownertrust
# OpenWrt Build System (PGP key for 21.02 release builds)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/88CA59E8.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<pgpsign-21.02@openwrt.org>' | grep '^fpr:::::::::667205E379BAF348863A5C6688CA59E88F681580:$' \
&& echo '667205E379BAF348863A5C6688CA59E88F681580:6:' | gpg --import-ownertrust
# untrusted comment: Public usign key for unattended snapshot builds
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/b5043e70f9a75cde' --create-dirs -o /home/build/usign/b5043e70f9a75cde \
&& echo 'd7ac10f9ed1b38033855f3d27c9327d558444fca804c685b17d9dcfb0648228f */home/build/usign/b5043e70f9a75cde' | sha256sum --check
# untrusted comment: Public usign key for 19.07 release builds
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/f94b9dd6febac963' --create-dirs -o /home/build/usign/f94b9dd6febac963 \
&& echo 'b1d09457cfbc36fccfe18382d65c54a2ade3e7fd3902da490a53aa517b512755 */home/build/usign/f94b9dd6febac963' | sha256sum --check
# untrusted comment: Public usign key for 21.02 release builds
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/2f8b0b98e08306bf' --create-dirs -o /home/build/usign/2f8b0b98e08306bf && echo 'd102bdd75421c62490b97f520f9db06aadb44ad408b244755d26e96ea5cd3b7f */home/build/usign/2f8b0b98e08306bf' | sha256sum --check

View File

@@ -1,6 +0,0 @@
# Build/update the docker image
docker pull debian:10
docker build --rm -t docker.io/openwrtorg/packages-cci:latest .
docker tag <IMAGE ID> docker.io/openwrtorg/packages-cci:<VERSION-TAG>
docker push docker.io/openwrtorg/packages-cci

View File

@@ -1,182 +0,0 @@
version: 2.0
jobs:
build:
docker:
- image: docker.io/openwrtorg/packages-cci:v1.0.6
environment:
- SDK_HOST: "downloads.openwrt.org"
- SDK_PATH: "snapshots/targets/ath79/generic"
- SDK_FILE: "openwrt-sdk-ath79-generic_*.Linux-x86_64.tar.xz"
- BRANCH: "master"
steps:
- checkout:
path: ~/openwrt_packages
- run:
name: Check changes / verify commits
working_directory: ~/openwrt_packages
command: |
cat >> $BASH_ENV <<EOF
echo_red() { printf "\033[1;31m\$*\033[m\n"; }
echo_green() { printf "\033[1;32m\$*\033[m\n"; }
echo_blue() { printf "\033[1;34m\$*\033[m\n"; }
EOF
source $BASH_ENV
RET=0
for commit in $(git rev-list HEAD ^origin/$BRANCH); do
echo_blue "=== Checking commit '$commit'"
if git show --format='%P' -s $commit | grep -qF ' '; then
echo_red "Pull request should not include merge commits"
RET=1
fi
author="$(git show -s --format=%aN $commit)"
if echo $author | grep -q '\S\+\s\+\S\+'; then
echo_green "Author name ($author) seems ok"
else
echo_red "Author name ($author) need to be your real name 'firstname lastname'"
RET=1
fi
subject="$(git show -s --format=%s $commit)"
if echo "$subject" | grep -q -e '^[0-9A-Za-z,+/_-]\+: ' -e '^Revert '; then
echo_green "Commit subject line seems ok ($subject)"
else
echo_red "Commit subject line MUST start with '<package name>: ' ($subject)"
RET=1
fi
body="$(git show -s --format=%b $commit)"
sob="$(git show -s --format='Signed-off-by: %aN <%aE>' $commit)"
if echo "$body" | grep -qF "$sob"; then
echo_green "Signed-off-by match author"
else
echo_red "Signed-off-by is missing or doesn't match author (should be '$sob')"
RET=1
fi
done
exit $RET
- run:
name: Download the SDK
working_directory: ~/sdk
command: |
curl "https://$SDK_HOST/$SDK_PATH/sha256sums" -sS -o sha256sums
curl "https://$SDK_HOST/$SDK_PATH/sha256sums.asc" -fs -o sha256sums.asc || true
curl "https://$SDK_HOST/$SDK_PATH/sha256sums.sig" -fs -o sha256sums.sig || true
if [ ! -f sha256sums.asc ] && [ ! -f sha256sums.sig ]; then
echo_red "Missing sha256sums signature files"
exit 1
fi
[ ! -f sha256sums.asc ] || gpg --with-fingerprint --verify sha256sums.asc sha256sums
if [ -f sha256sums.sig ]; then
VERIFIED=
for KEY in ~/usign/*; do
echo "Trying $KEY..."
if signify-openbsd -V -q -p "$KEY" -x sha256sums.sig -m sha256sums; then
echo "...verified"
VERIFIED=1
break
fi
done
if [ -z "$VERIFIED" ]; then
echo_red "Could not verify usign signature"
exit 1
fi
fi
rsync -av "$SDK_HOST::downloads/$SDK_PATH/$SDK_FILE" .
sha256sum -c --ignore-missing sha256sums
- run:
name: Prepare build_dir
working_directory: ~/build_dir
command: |
tar Jxf ~/sdk/$SDK_FILE --strip=1
touch .config
make prepare-tmpinfo scripts/config/conf
./scripts/config/conf --defconfig=.config Config.in
make prereq
rm .config
cat > feeds.conf <<EOF
src-git base https://github.com/openwrt/openwrt.git;$BRANCH
src-link packages $HOME/openwrt_packages
src-git luci https://github.com/openwrt/luci.git;$BRANCH
EOF
cat feeds.conf
./scripts/feeds update -a > /dev/null
make defconfig > /dev/null
# enable BUILD_LOG
sed -i 's/# CONFIG_BUILD_LOG is not set/CONFIG_BUILD_LOG=y/' .config
- run:
name: Install & download source, check package, compile
working_directory: ~/build_dir
command: |
set +o pipefail
PKGS=$(cd ~/openwrt_packages; git diff --diff-filter=d --name-only "origin/$BRANCH..." | grep 'Makefile$' | grep -Ev '/files/|/src/' | awk -F/ '{ print $(NF-1) }')
if [ -z "$PKGS" ] ; then
echo_blue "WARNING: No new or modified packages found!"
exit 0
fi
echo_blue "=== Found new/modified packages: $PKGS"
for PKG in $PKGS ; do
echo_blue "===+ Install: $PKG"
./scripts/feeds install "$PKG"
echo_blue "===+ Download: $PKG"
make "package/$PKG/download" V=s
echo_blue "===+ Check package: $PKG"
make "package/$PKG/check" V=s 2>&1 | tee logtmp
RET=${PIPESTATUS[0]}
if [ $RET -ne 0 ]; then
echo_red "=> Package check failed: $RET)"
exit $RET
fi
badhash_msg="HASH does not match "
badhash_msg+="|HASH uses deprecated hash,"
badhash_msg+="|HASH is missing,"
if grep -qE "$badhash_msg" logtmp; then
echo_red "=> Package HASH check failed"
exit 1
fi
echo_green "=> Package check OK"
done
make \
-f .config \
-f tmp/.packagedeps \
-f <(echo '$(info $(sort $(package-y) $(package-m)))'; echo -en 'a:\n\t@:') \
| tr ' ' '\n' >enabled-package-subdirs.txt
for PKG in $PKGS ; do
if ! grep -m1 -qE "(^|/)$PKG$" enabled-package-subdirs.txt; then
echo_red "===+ Building: $PKG skipped. It cannot be enabled with $SDK_FILE"
continue
fi
echo_blue "===+ Building: $PKG"
make "package/$PKG/compile" -j3 V=s || {
RET=$?
echo_red "===+ Building: $PKG failed, rebuilding with -j1 for human readable error log"
make "package/$PKG/compile" -j1 V=s; exit $RET
}
done
- store_artifacts:
path: ~/build_dir/logs
- store_artifacts:
path: ~/build_dir/bin
workflows:
version: 2
buildpr:
jobs:
- build:
filters:
branches:
ignore: master

View File

@@ -1,13 +1,22 @@
#!/bin/sh
# not enabling `errtrace` and `pipefail` since those are bash specific
set -o errexit # failing commands causes script to fail
set -o nounset # undefined variables causes script to fail
echo "src/gz packages_ci file:///ci" >> /etc/opkg/distfeeds.conf
FINGERPRINT="$(usign -F -p /ci/packages_ci.pub)"
cp /ci/packages_ci.pub "/etc/opkg/keys/$FINGERPRINT"
mkdir -p /var/lock/
opkg update
[ -n "$CI_HELPER" ] || CI_HELPER="/ci/.github/workflows/ci_helpers.sh"
[ -n "${CI_HELPER:=''}" ] || CI_HELPER="/ci/.github/workflows/ci_helpers.sh"
for PKG in /ci/*.ipk; do
tar -xzOf "$PKG" ./control.tar.gz | tar xzf - ./control
tar -xzOf "$PKG" ./control.tar.gz | tar xzf - ./control
# package name including variant
PKG_NAME=$(sed -ne 's#^Package: \(.*\)$#\1#p' ./control)
# package version without release

View File

@@ -11,7 +11,7 @@ jobs:
fail-fast: false
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v3
with:
ref: ${{ github.event.pull_request.head.sha }}
fetch-depth: 0

View File

@@ -22,7 +22,7 @@ jobs:
- arch: mips_24kc
target: ath79-generic
runtime_test: false
- arch: mipsel_24kc
target: mt7621
runtime_test: false
@@ -52,7 +52,7 @@ jobs:
runtime_test: true
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v3
with:
fetch-depth: 0
@@ -68,7 +68,7 @@ jobs:
PKG_ROOTS=$(find . -name Makefile | \
grep -v ".*/src/Makefile" | \
sed -e 's@./\(.*\)/Makefile@\1/@')
CHANGES=$(git diff --diff-filter=d --name-only origin/$BRANCH)
CHANGES=$(git diff --diff-filter=d --name-only origin/$BRANCH...)
for ROOT in $PKG_ROOTS; do
for CHANGE in $CHANGES; do
@@ -86,16 +86,31 @@ jobs:
echo "Building $PACKAGES"
echo "PACKAGES=$PACKAGES" >> $GITHUB_ENV
- name: Generate build keys
run: |
sudo apt-get update
sudo apt-get install -y signify-openbsd
signify-openbsd -G -n -c 'DO NOT USE - OpenWrt packages feed CI' -p packages_ci.pub -s packages_ci.sec
EOF=$(dd if=/dev/urandom bs=15 count=1 status=none | base64)
echo "KEY_BUILD<<$EOF" >> $GITHUB_ENV
cat packages_ci.sec >> $GITHUB_ENV
echo "$EOF" >> $GITHUB_ENV
- name: Build
uses: openwrt/gh-action-sdk@v3
uses: openwrt/gh-action-sdk@v7
env:
ARCH: ${{ matrix.arch }}-${{ env.BRANCH }}
FEEDNAME: packages_ci
INDEX: 1
KEY_BUILD: ${{ env.KEY_BUILD }}
V: s
- name: Move created packages to project dir
run: cp bin/packages/${{ matrix.arch }}/packages_ci/*.ipk . || true
if: always()
run: cp bin/packages/${{ matrix.arch }}/packages_ci/* . || true
- name: Collect metadata
if: always()
run: |
MERGE_ID=$(git rev-parse --short HEAD)
echo "MERGE_ID=$MERGE_ID" >> $GITHUB_ENV
@@ -106,6 +121,7 @@ jobs:
echo "ARCHIVE_NAME=${{matrix.arch}}-PR$PRNUMBER-$MERGE_ID" >> $GITHUB_ENV
- name: Generate metadata
if: always()
run: |
cat << _EOF_ > PKG-INFO
Metadata-Version: 2.1
@@ -132,15 +148,19 @@ jobs:
cat PKG-INFO
- name: Store packages
uses: actions/upload-artifact@v2
if: always()
uses: actions/upload-artifact@v3
with:
name: ${{env.ARCHIVE_NAME}}-packages
path: |
Packages
Packages.*
*.ipk
PKG-INFO
- name: Store logs
uses: actions/upload-artifact@v2
if: always()
uses: actions/upload-artifact@v3
with:
name: ${{env.ARCHIVE_NAME}}-logs
path: |
@@ -148,21 +168,33 @@ jobs:
PKG-INFO
- name: Remove logs
if: always()
run: sudo rm -rf logs/ || true
- name: Check if any packages were built
run: |
if [ -n "$(find . -maxdepth 1 -type f -name '*.ipk' -print -quit)" ]; then
echo "Found *.ipk files"
HAVE_IPKS=true
else
echo "No *.ipk files found"
HAVE_IPKS=false
fi
echo "HAVE_IPKS=$HAVE_IPKS" >> $GITHUB_ENV
- name: Register QEMU
if: ${{ matrix.runtime_test }}
if: ${{ matrix.runtime_test && fromJSON(env.HAVE_IPKS) }}
run: |
sudo docker run --rm --privileged aptman/qus -s -- -p
- name: Build Docker container
if: ${{ matrix.runtime_test }}
if: ${{ matrix.runtime_test && fromJSON(env.HAVE_IPKS) }}
run: |
docker build -t test-container --build-arg ARCH .github/workflows/
docker build --platform linux/${{ matrix.arch }} -t test-container --build-arg ARCH .github/workflows/
env:
ARCH: ${{ matrix.arch }}-${{ env.BRANCH }}
- name: Test via Docker container
if: ${{ matrix.runtime_test }}
if: ${{ matrix.runtime_test && fromJSON(env.HAVE_IPKS) }}
run: |
docker run --rm -v $GITHUB_WORKSPACE:/ci test-container
docker run --platform linux/${{ matrix.arch }} --rm -v $GITHUB_WORKSPACE:/ci test-container

View File

@@ -8,12 +8,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=htop
PKG_VERSION:=3.1.2
PKG_RELEASE:=$(AUTORELEASE)
PKG_VERSION:=3.3.0
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://codeload.github.com/htop-dev/htop/tar.gz/$(PKG_VERSION)?
PKG_HASH:=fe9559637c8f21f5fd531a4c072048a404173806acbdad1359c6b82fd87aa001
PKG_HASH:=1e5cc328eee2bd1acff89f860e3179ea24b85df3ac483433f92a29977b14b045
PKG_LICENSE:=GPL-2.0-or-later
PKG_LICENSE_FILES:=COPYING

View File

@@ -11,11 +11,9 @@ PKG_MAINTAINER:=Federico Capoano <f.capoano@openwisp.io>
PKG_LICENSE:=GPL3.0-or-later
PKG_SOURCE_URL:=https://github.com/openwisp/openwisp-config.git
PKG_MIRROR_HASH:=b1f5682715cc5b5623b2acf49ebb75d8bac1b58094981b61ede3ca392bdfa269
PKG_MIRROR_HASH:=7daa10a9d170e665f33a5555a246b4da2223c2d8d0e8a047edb01701c8886986
PKG_SOURCE_PROTO:=git
PKG_SOURCE_DATE:=2021-12-07
PKG_SOURCE_VERSION:=08df34db29180a0d13c2e357723e8c546523014a
PKGARCH:=all
PKG_SOURCE_VERSION:=1.0.1
include $(INCLUDE_DIR)/package.mk

View File

@@ -0,0 +1,116 @@
# openwisp.org
#
# This is free software, licensed under the GNU General Public License v3.
# See /LICENSE for more information.
include $(TOPDIR)/rules.mk
PKG_NAME:=openwisp-monitoring
PKG_RELEASE:=1
PKG_MAINTAINER:=Federico Capoano <support@openwisp.io>
PKG_LICENSE:=GPL3.0-or-later
PKG_LICENSE_FILES:=LICENSE
PKG_SOURCE_URL:=https://github.com/openwisp/openwrt-openwisp-monitoring.git
PKG_MIRROR_HASH:=ce2ed94d24f68c58320ca700a088471368e1097754be23ad6053842cf0aaa97e
PKG_SOURCE_PROTO:=git
PKG_SOURCE_VERSION:=0.1.1
PKGARCH:=all
include $(INCLUDE_DIR)/package.mk
define Package/openwisp-monitoring
TITLE:=OpenWISP Monitoring agent
CATEGORY:=Administration
SECTION:=admin
SUBMENU:=openwisp
DEPENDS:=+netjson-monitoring +openwisp-config
URL:=http://openwisp.org
endef
define Package/netjson-monitoring
TITLE:=NetJson Monitoring
CATEGORY:=Administration
SECTION:=admin
SUBMENU:=openwisp
DEPENDS:=+libubus-lua +lua-cjson +rpcd +rpcd-mod-iwinfo
URL:=http://openwisp.org
endef
define Build/Compile
endef
define Package/openwisp-monitoring/conffiles
/etc/config/openwisp-monitoring
endef
define Package/netjson-monitoring/install
$(INSTALL_DIR) \
$(1)/usr/sbin \
$(1)/usr/libexec \
$(1)/usr/lib/lua/openwisp-monitoring \
$(1)/etc/openwisp-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/sbin/netjson-monitoring.lua \
$(1)/usr/libexec/netjson-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/netjson-monitoring \
$(1)/usr/sbin/netjson-monitoring
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/dhcp.lua \
$(1)/usr/lib/lua/openwisp-monitoring/dhcp.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/interfaces.lua \
$(1)/usr/lib/lua/openwisp-monitoring/interfaces.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/monitoring.lua \
$(1)/usr/lib/lua/openwisp-monitoring/monitoring.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/utils.lua \
$(1)/usr/lib/lua/openwisp-monitoring/utils.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/neighbors.lua \
$(1)/usr/lib/lua/openwisp-monitoring/neighbors.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/resources.lua \
$(1)/usr/lib/lua/openwisp-monitoring/resources.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/wifi.lua \
$(1)/usr/lib/lua/openwisp-monitoring/wifi.lua
$(CP) $(PKG_BUILD_DIR)/VERSION $(1)/etc/openwisp-monitoring/
endef
define Package/openwisp-monitoring/install
$(INSTALL_DIR) \
$(1)/usr/sbin \
$(1)/etc/init.d \
$(1)/etc/config \
$(1)/etc/openwisp-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/monitoring.agent \
$(1)/usr/sbin/openwisp-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/monitoring.init \
$(1)/etc/init.d/openwisp-monitoring
$(INSTALL_CONF) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/monitoring.config \
$(1)/etc/config/openwisp-monitoring
endef
$(eval $(call BuildPackage,openwisp-monitoring))
$(eval $(call BuildPackage,netjson-monitoring))

View File

@@ -8,12 +8,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=sudo
PKG_VERSION:=1.9.10
PKG_RELEASE:=$(AUTORELEASE)
PKG_VERSION:=1.9.14p3
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://www.sudo.ws/dist
PKG_HASH:=44a1461098e7c7b8e6ac597499c24fb2e43748c0c139a8b4944e57d1349a64f4
PKG_HASH:=a08318b1c4bc8582c004d4cd9ae2903abc549e7e46ba815e41fe81d1c0782b62
PKG_MAINTAINER:=Alexandru Ardelean <ardeleanalex@gmail.com>
@@ -23,6 +23,7 @@ PKG_CPE_ID:=cpe:/a:todd_miller:sudo
PKG_INSTALL:=1
PKG_BUILD_PARALLEL:=1
PKG_USE_MIPS16:=0
include $(INCLUDE_DIR)/package.mk

View File

@@ -1,6 +1,6 @@
--- a/Makefile.in
+++ b/Makefile.in
@@ -73,7 +73,7 @@ SHELL = @SHELL@
@@ -74,7 +74,7 @@ EGREP = @EGREP@
SED = @SED@
INSTALL = $(SHELL) $(scriptdir)/install-sh -c

View File

@@ -1,17 +1,17 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=syslog-ng
PKG_VERSION:=3.36.1
PKG_RELEASE:=$(AUTORELEASE)
PKG_VERSION:=4.7.1
PKG_RELEASE:=1
PKG_MAINTAINER:=Josef Schlehofer <josef.schlehofer@nic.cz>
PKG_MAINTAINER:=Josef Schlehofer <pepe.schlehofer@gmail.com>
PKG_LICENSE:=LGPL-2.1-or-later GPL-2.0-or-later
PKG_LICENSE_FILES:=COPYING LGPL.txt GPL.txt
PKG_CPE_ID:=cpe:/a:balabit:syslog-ng
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://github.com/syslog-ng/syslog-ng/releases/download/$(PKG_NAME)-$(PKG_VERSION)/
PKG_HASH:=90a25c9767fe749db50f118ddfc92ec71399763d2ecd5ad4f11ff5eea049e60b
PKG_HASH:=5477189a2d12325aa4faebfcf59f5bdd9084234732f0c3ec16dd253847dacf1c
PKG_BUILD_PARALLEL:=1
PKG_INSTALL:=1
@@ -21,6 +21,7 @@ PKG_BUILD_DEPENDS:= \
PKG_CONFIG_DEPENDS:= \
CONFIG_IPV6 \
CONFIG_LIBCURL_ZLIB
include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/nls.mk
@@ -33,7 +34,7 @@ define Package/syslog-ng
CATEGORY:=Administration
TITLE:=A powerful syslog daemon
URL:=https://www.syslog-ng.com/products/open-source-log-management/
DEPENDS:=+libpcre +glib2 +libopenssl +libpthread +librt +zlib +libdbi +libjson-c +libcurl +libuuid
DEPENDS:=+libpcre2 +glib2 +libopenssl +libpthread +librt +libdbi +libjson-c +libcurl +libuuid +SYSLOGNG_LOGROTATE:logrotate +LIBCURL_ZLIB:zlib
endef
define Package/syslog-ng/description
@@ -48,11 +49,39 @@ define Package/syslog-ng/conffiles
/etc/scl.conf
endef
define Package/syslog-ng/config
config SYSLOGNG_LOGROTATE
bool "Logrotate support"
depends on PACKAGE_syslog-ng
default n
help
It adds support for logrotate functionality.
config SYSLOGNG_LOGROTATE_MAXSIZE
string "Maximum size of /var/log/messages log file"
depends on SYSLOGNG_LOGROTATE
default "1M"
help
Log files are rotated when they grow bigger than defined size bytes.
config SYSLOGNG_LOGROTATE_ROTATE_COUNT
int "Maximum rotation count for /var/log/messages log file"
depends on SYSLOGNG_LOGROTATE
default 1
help
Log files are rotated count times before being removed or mailed to
the address specified in a mail directive. If count is 0, old
versions are removed rather than rotated.
endef
define Build/Configure
$(SED) 's,-I/usr/include,,' $(PKG_BUILD_DIR)/configure
$(Build/Configure/Default)
endef
LOGROTATE_MAXSIZE:=$(call qstrip,$(CONFIG_SYSLOGNG_LOGROTATE_MAXSIZE))
LOGROTATE_ROTATE:=$(call qstrip,$(CONFIG_SYSLOGNG_LOGROTATE_ROTATE_COUNT))
CONFIGURE_ARGS += \
--disable-afsnmp \
$(call autoconf_bool,CONFIG_IPV6,ipv6) \
@@ -61,8 +90,9 @@ CONFIGURE_ARGS += \
--disable-sql \
--disable-linux-caps \
--with-jsonc=system \
--enable-cpp=no \
--enable-json=yes \
--enable-http=yes \
$(if $(CONFIG_LIBCURL_ZLIB),--enable-http=yes,--enable-http=no) \
--disable-smtp \
--disable-mqtt \
--disable-redis \
@@ -98,6 +128,14 @@ define Package/syslog-ng/install
$(INSTALL_DIR) $(1)/usr/share/syslog-ng/include/
$(CP) -r ./files/scl $(1)/usr/share/syslog-ng/include/
ifneq ($(strip $(CONFIG_SYSLOGNG_LOGROTATE)),)
$(INSTALL_DIR) $(1)/etc/logrotate.d
sed \
-e 's#@MAXSIZE@#$(LOGROTATE_MAXSIZE)#g' \
-e 's#@ROTATE@#$(LOGROTATE_ROTATE)#g' \
./files/syslog-ng.logrotate > $(1)/etc/logrotate.d/syslog-ng.conf
endif
endef
define Package/syslog-ng/postinst

View File

@@ -1,10 +1,7 @@
#############################################################################
# OpenWrt syslog-ng.conf specific file
# which collects all local logs into a single file called /var/log/messages.
# More details about these settings can be found here:
# https://www.syslog-ng.com/technical-documents/list/syslog-ng-open-source-edition
# Collect all local logs into a single file /var/log/messages.
# See https://www.syslog-ng.com/technical-documents/list/syslog-ng-open-source-edition
@version: 3.36
@version: 4.7
@include "scl.conf"
options {
@@ -13,7 +10,7 @@ options {
keep_hostname(yes); # Enable or disable hostname rewriting.
log_fifo_size(256); # The number of messages that the output queue can store.
log_msg_size(1024); # Maximum length of a message in bytes.
stats_freq(0); # The period between two STATS messages (sent by syslog-ng, containing statistics about dropped logs) in seconds.
stats(freq(0)); # The period between two STATS messages (sent by syslog-ng, containing statistics about dropped logs) in seconds.
flush_lines(0); # How many lines are flushed to a destination at a time.
use_fqdn(no); # Add Fully Qualified Domain Name instead of short hostname.
};
@@ -43,7 +40,7 @@ source s_network {
};
source kernel {
file("/proc/kmsg" program_override("kernel"));
file("/proc/kmsg" program_override("kernel"));
};
destination messages {
@@ -53,15 +50,13 @@ destination messages {
log {
source(src);
source(net);
source(kernel);
source(kernel);
destination(messages);
# uncomment this line to open port 514 to receive messages
#source(s_network);
};
#
# Finally, include any user settings last so that s/he can override or
# Include any user settings last so that s/he can override or
# supplement all "canned" settings inherited from the distribution.
#
@include "/etc/syslog-ng.d/" # Put any customization files in this directory

View File

@@ -0,0 +1,12 @@
/var/log/messages {
compress
copytruncate
delaycompress
notifempty
maxsize @MAXSIZE@
missingok
postrotate
/usr/sbin/syslog-ng-ctl reload > /dev/null
endscript
rotate @ROTATE@
}

View File

@@ -8,12 +8,13 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=zabbix
PKG_VERSION:=5.0.18
PKG_VERSION:=6.4.7
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://cdn.zabbix.com/zabbix/sources/stable/5.0/
PKG_HASH:=7d15c4d683801edc2bdcda3fd94afdf6a7142a1a92aa71f4a9220af8e39d9e0e
PKG_SOURCE_URL:=https://cdn.zabbix.com/zabbix/sources/stable/$(basename $(PKG_VERSION))/ \
https://cdn.zabbix.com/zabbix/sources/oldstable/$(basename $(PKG_VERSION))/
PKG_HASH:=6b4e81f07de4c82c7994871bea51be4d6427683fa9a7fbe112fd7559b3670e49
PKG_MAINTAINER:=Etienne CHAMPETIER <champetier.etienne@gmail.com>
PKG_LICENSE:=GPL-2.0
@@ -24,34 +25,14 @@ PKG_INSTALL:=1
PKG_BUILD_PARALLEL:=1
PKG_CONFIG_DEPENDS:= \
CONFIG_ZABBIX_GNUTLS \
CONFIG_ZABBIX_OPENSSL \
CONFIG_ZABBIX_MYSQL \
CONFIG_ZABBIX_POSTGRESQL
CONFIG_ZABBIX_POSTGRESQL \
CONFIG_ZABBIX_SQLITE
include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/nls.mk
define Package/zabbix-agentd/config
comment "SSL support"
choice
prompt "Selected SSL library"
default ZABBIX_NOSSL
config ZABBIX_OPENSSL
bool "OpenSSL"
config ZABBIX_GNUTLS
bool "GnuTLS"
config ZABBIX_NOSSL
bool "No SSL support"
endchoice
endef
define Package/zabbix-server/config
define Package/zabbix-proxy/config
comment "Database Software"
choice
@@ -64,6 +45,8 @@ choice
config ZABBIX_POSTGRESQL
bool "PostgreSQL"
config ZABBIX_SQLITE
bool "SQLite"
endchoice
endef
@@ -74,12 +57,31 @@ define Package/zabbix/Default
TITLE:=Zabbix
URL:=https://www.zabbix.com/
USERID:=zabbix=53:zabbix=53
DEPENDS += $(ICONV_DEPENDS) +libpcre +zlib +ZABBIX_GNUTLS:libgnutls +ZABBIX_OPENSSL:libopenssl
DEPENDS+=$(ICONV_DEPENDS) +libpcre2 +zlib
endef
define Package/zabbix-agentd
$(call Package/zabbix/Default)
TITLE+= agentd
PROVIDES:=zabbix-agentd
VARIANT:=nossl
DEFAULT_VARIANT:=1
endef
define Package/zabbix-agentd-openssl
$(call Package/zabbix/Default)
TITLE+= agentd (with OpenSSL)
DEPENDS+= +libopenssl
PROVIDES:=zabbix-agentd
VARIANT:=openssl
endef
define Package/zabbix-agentd-gnutls
$(call Package/zabbix/Default)
TITLE+= agentd (with GnuTLS)
DEPENDS+= +libgnutls
PROVIDES:=zabbix-agentd
VARIANT:=gnutls
endef
define Package/zabbix-extra-mac80211
@@ -103,31 +105,136 @@ endef
define Package/zabbix-sender
$(call Package/zabbix/Default)
TITLE+= sender
PROVIDES:=zabbix-sender
VARIANT:=nossl
DEFAULT_VARIANT:=1
endef
define Package/zabbix-sender-openssl
$(call Package/zabbix/Default)
TITLE+= sender (with OpenSSL)
DEPENDS+= +libopenssl
PROVIDES:=zabbix-sender
VARIANT:=openssl
endef
define Package/zabbix-sender-gnutls
$(call Package/zabbix/Default)
TITLE+= sender (with GnuTLS)
DEPENDS+= +libgnutls
PROVIDES:=zabbix-sender
VARIANT:=gnutls
endef
define Package/zabbix-get
$(call Package/zabbix/Default)
TITLE+= get
PROVIDES:=zabbix-get
VARIANT:=nossl
DEFAULT_VARIANT:=1
endef
define Package/zabbix-get-openssl
$(call Package/zabbix/Default)
TITLE+= get (with OpenSSL)
DEPENDS+= +libopenssl
PROVIDES:=zabbix-get
VARIANT:=openssl
endef
define Package/zabbix-get-gnutls
$(call Package/zabbix/Default)
TITLE+= get (with GnuTLS)
DEPENDS+= +libgnutls
PROVIDES:=zabbix-get
VARIANT:=gnutls
endef
define Package/zabbix-server/Default
$(call Package/zabbix/Default)
TITLE+= server
DEPENDS += +ZABBIX_POSTGRESQL:libpq \
+ZABBIX_MYSQL:libmariadbclient \
@(!ZABBIX_SQLITE) \
+libevent2 \
+libevent2-pthreads \
+fping
endef
define Package/zabbix-server
$(call Package/zabbix/Default)
TITLE+= server
DEPENDS += +ZABBIX_POSTGRESQL:libpq +ZABBIX_MYSQL:libmariadbclient +libevent2
$(call Package/zabbix-server/Default)
PROVIDES:=zabbix-server
VARIANT:=nossl
DEFAULT_VARIANT:=1
endef
define Package/zabbix-server-openssl
$(call Package/zabbix-server/Default)
TITLE+= (with OpenSSL)
PROVIDES:=zabbix-server
DEPENDS+= +libopenssl
VARIANT:=openssl
endef
define Package/zabbix-server-gnutls
$(call Package/zabbix-server/Default)
TITLE+= (with GnuTLS)
PROVIDES:=zabbix-server
DEPENDS+= +libgnutls
VARIANT:=gnutls
endef
define Package/zabbix-server-frontend
$(call Package/zabbix/Default)
TITLE+= server-frontend
DEPENDS += +php8 +php8-cgi +ZABBIX_POSTGRESQL:php8-mod-pgsql +ZABBIX_MYSQL:php8-mod-mysqli \
+php8-mod-gd +php8-mod-bcmath +php8-mod-ctype +php8-mod-xmlreader +php8-mod-xmlwriter \
+php8-mod-session +php8-mod-sockets +php8-mod-mbstring +php8-mod-gettext
DEPENDS += +php8 \
+php8-cgi \
+php8-mod-gd \
+php8-mod-bcmath \
+php8-mod-ctype \
+php8-mod-xmlreader \
+php8-mod-xmlwriter \
+php8-mod-session \
+php8-mod-sockets \
+php8-mod-mbstring \
+php8-mod-gettext \
+ZABBIX_POSTGRESQL:php8-mod-pgsql \
+ZABBIX_MYSQL:php8-mod-mysqli \
@(!ZABBIX_SQLITE)
endef
define Package/zabbix-proxy/Default
$(call Package/zabbix/Default)
TITLE+= proxy
DEPENDS += +ZABBIX_POSTGRESQL:libpq \
+ZABBIX_MYSQL:libmariadbclient \
+ZABBIX_SQLITE:libsqlite3 \
+libevent2 \
+libevent2-pthreads \
+fping
endef
define Package/zabbix-proxy
$(call Package/zabbix/Default)
TITLE+= proxy
DEPENDS += +ZABBIX_POSTGRESQL:libpq +ZABBIX_MYSQL:libmariadbclient +libevent2
$(call Package/zabbix-proxy/Default)
PROVIDES:=zabbix-proxy
VARIANT:=nossl
DEFAULT_VARIANT:=1
endef
define Package/zabbix-proxy-openssl
$(call Package/zabbix-proxy/Default)
TITLE+= (with OpenSSL)
PROVIDES:=zabbix-proxy
DEPENDS+= +libopenssl
VARIANT:=openssl
endef
define Package/zabbix-proxy-gnutls
$(call Package/zabbix-proxy/Default)
TITLE+= (with GnuTLS)
PROVIDES:=zabbix-proxy
DEPENDS+= +libgnutls
VARIANT:=gnutls
endef
define Package/zabbix-extra-mac80211/description
@@ -150,17 +257,24 @@ endef
CONFIGURE_ARGS+= \
--enable-agent \
--enable-server \
$(if $(CONFIG_ZABBIX_SQLITE),--disable-server,--enable-server) \
--enable-proxy \
$(call autoconf_bool,CONFIG_IPV6,ipv6) \
--disable-java \
$(if $(CONFIG_ZABBIX_MYSQL),--with-mysql) \
$(if $(CONFIG_ZABBIX_POSTGRESQL),--with-postgresql) \
--with-libevent=$(STAGING_DIR)/usr/include/libevent \
--with-libpcre=$(STAGING_DIR)/usr/include \
--with-zlib=$(STAGING_DIR)/usr/include \
$(if $(CONFIG_ZABBIX_GNUTLS),--with-gnutls="$(STAGING_DIR)/usr") \
$(if $(CONFIG_ZABBIX_OPENSSL),--with-openssl="$(STAGING_DIR)/usr")
$(if $(CONFIG_ZABBIX_SQLITE),--with-sqlite3=$(STAGING_DIR)/usr) \
--with-libevent=$(STAGING_DIR)/usr/include \
--with-libpcre2=$(STAGING_DIR)/usr/include \
--with-zlib=$(STAGING_DIR)/usr/include
ifeq ($(BUILD_VARIANT),openssl)
CONFIGURE_ARGS+= --with-openssl="$(STAGING_DIR)/usr"
endif
ifeq ($(BUILD_VARIANT),gnutls)
CONFIGURE_ARGS+= --with-gnutls="$(STAGING_DIR)/usr"
endif
CONFIGURE_VARS += \
ac_cv_header_sys_sysinfo_h=no
@@ -215,12 +329,20 @@ endef
define Package/zabbix-agentd/conffiles
/etc/zabbix_agentd.conf
endef
Package/zabbix-agentd-openssl/conffiles = $(Package/zabbix-agentd/conffiles)
Package/zabbix-agentd-gnutls/conffiles = $(Package/zabbix-agentd/conffiles)
define Package/zabbix-server/conffiles
/etc/zabbix_server.conf
endef
Package/zabbix-server-openssl/conffiles = $(Package/zabbix-server/conffiles)
Package/zabbix-server-gnutls/conffiles = $(Package/zabbix-server/conffiles)
define Package/zabbix-proxy/conffiles
/etc/zabbix_proxy.conf
endef
Package/zabbix-proxy-openssl/conffiles = $(Package/zabbix-proxy/conffiles)
Package/zabbix-proxy-gnutls/conffiles = $(Package/zabbix-proxy/conffiles)
ifdef CONFIG_PACKAGE_zabbix-extra-mac80211
define Build/Prepare/zabbix-extra-mac80211
@@ -249,6 +371,8 @@ define Package/zabbix-agentd/install
$(call Package/zabbix/install/etc,$(1),agentd)
$(call Package/zabbix/install/init.d,$(1),agentd)
endef
Package/zabbix-agentd-openssl/install = $(Package/zabbix-agentd/install)
Package/zabbix-agentd-gnutls/install = $(Package/zabbix-agentd/install)
define Package/zabbix-extra-mac80211/install
$(call Package/zabbix/install/zabbix.conf.d,$(1),mac80211)
@@ -286,15 +410,21 @@ endef
define Package/zabbix-sender/install
$(call Package/zabbix/install/bin,$(1),sender)
endef
Package/zabbix-sender-openssl/install = $(Package/zabbix-sender/install)
Package/zabbix-sender-gnutls/install = $(Package/zabbix-sender/install)
define Package/zabbix-get/install
$(call Package/zabbix/install/bin,$(1),get)
endef
Package/zabbix-get-openssl/install = $(Package/zabbix-get/install)
Package/zabbix-get-gnutls/install = $(Package/zabbix-get/install)
define Package/zabbix-server/install
$(call Package/zabbix/install/sbin,$(1),server)
$(call Package/zabbix/install/etc,$(1),server)
endef
Package/zabbix-server-openssl/install = $(Package/zabbix-server/install)
Package/zabbix-server-gnutls/install = $(Package/zabbix-server/install)
define Package/zabbix-server-frontend/install
$(INSTALL_DIR) $(1)/www/zabbix
@@ -305,13 +435,25 @@ define Package/zabbix-proxy/install
$(call Package/zabbix/install/sbin,$(1),proxy)
$(call Package/zabbix/install/etc,$(1),proxy)
endef
Package/zabbix-proxy-openssl/install = $(Package/zabbix-proxy/install)
Package/zabbix-proxy-gnutls/install = $(Package/zabbix-proxy/install)
$(eval $(call BuildPackage,zabbix-agentd))
$(eval $(call BuildPackage,zabbix-agentd-openssl))
$(eval $(call BuildPackage,zabbix-agentd-gnutls))
$(eval $(call BuildPackage,zabbix-extra-mac80211))
$(eval $(call BuildPackage,zabbix-extra-network))
$(eval $(call BuildPackage,zabbix-extra-wifi))
$(eval $(call BuildPackage,zabbix-sender))
$(eval $(call BuildPackage,zabbix-sender-openssl))
$(eval $(call BuildPackage,zabbix-sender-gnutls))
$(eval $(call BuildPackage,zabbix-server))
$(eval $(call BuildPackage,zabbix-server-openssl))
$(eval $(call BuildPackage,zabbix-server-gnutls))
$(eval $(call BuildPackage,zabbix-server-frontend))
$(eval $(call BuildPackage,zabbix-proxy))
$(eval $(call BuildPackage,zabbix-proxy-openssl))
$(eval $(call BuildPackage,zabbix-proxy-gnutls))
$(eval $(call BuildPackage,zabbix-get))
$(eval $(call BuildPackage,zabbix-get-openssl))
$(eval $(call BuildPackage,zabbix-get-gnutls))

View File

@@ -35,16 +35,16 @@
##### Active checks related
@@ -151,8 +149,6 @@ Server=127.0.0.1
@@ -164,8 +162,6 @@ Server=127.0.0.1
# Default:
# ServerActive=
-ServerActive=127.0.0.1
-
### Option: Hostname
# Unique, case sensitive hostname.
# Required for active checks and must match hostname as configured on the server.
@@ -162,8 +158,6 @@ ServerActive=127.0.0.1
# List of comma delimited unique, case sensitive hostnames.
# Required for active checks and must match hostnames as configured on the server.
@@ -175,8 +171,6 @@ ServerActive=127.0.0.1
# Default:
# Hostname=
@@ -53,7 +53,7 @@
### Option: HostnameItem
# Item used for generating Hostname if it is undefined. Ignored if Hostname is defined.
# Does not support UserParameters or aliases.
@@ -303,8 +297,8 @@ Hostname=Zabbix server
@@ -326,8 +320,8 @@ Hostname=Zabbix server
# Include=
# Include=/usr/local/etc/zabbix_agentd.userparams.conf

View File

@@ -1,11 +1,11 @@
--- a/src/libs/zbxcommon/str.c
+++ b/src/libs/zbxcommon/str.c
@@ -54,7 +54,7 @@ static const char help_message_footer[]
void version(void)
--- a/src/libs/zbxcommon/misc.c
+++ b/src/libs/zbxcommon/misc.c
@@ -329,7 +329,7 @@ void zbx_help(void)
void zbx_version(void)
{
printf("%s (Zabbix) %s\n", title_message, ZABBIX_VERSION);
- printf("Revision %s %s, compilation time: %s %s\n\n", ZABBIX_REVISION, ZABBIX_REVDATE, __DATE__, __TIME__);
+ printf("Revision %s %s\n\n", ZABBIX_REVISION, ZABBIX_REVDATE);
puts(copyright_message);
#if defined(HAVE_GNUTLS) || defined(HAVE_OPENSSL)
printf("\n");
}

View File

@@ -18,6 +18,7 @@ PKG_HASH:=a6bdd7d1b31266d11c4f4de6c1b748d4607ab0231af5188fc2533d0ae2438fec
PKG_MAINTAINER:=Roger D <rogerdammit@gmail.com>
PKG_LICENSE:=GPL-3.0
PKG_LICENSE_FILES:=COPYING
PKG_CPE_ID:=cpe:/a:gnu:diffutils
PKG_BUILD_PARALLEL:=1
PKG_INSTALL:=1

View File

@@ -1,30 +1,31 @@
#
# Copyright (C) 2008 OpenWrt.org
# Copyright (C) 2002-2003 Erik Andersen <andersen@uclibc.org>
# Copyright (C) 2004 Manuel Novoa III <mjn3@uclibc.org>
# Copyright (C) 2005-2006 Felix Fietkau <nbd@nbd.name>
# Copyright (C) 2006-2014 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
# General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
include $(TOPDIR)/rules.mk
define Package/gcc/description
Build a native toolchain for compiling on target
device.
endef
define Package/gcc
SECTION:=devel
CATEGORY:=Development
TITLE:=gcc
MAINTAINER:=Noble Pepper <gccmaintain@noblepepper.com>
DEPENDS:= +binutils +libstdcpp @!arc
MENU:=1
endef
PKG_NAME:=gcc
# PKG_VERSION=7.3.0
PKG_VERSION=7.4.0
PKG_RELEASE:=7
GCC_VERSION:=$(call qstrip,$(CONFIG_GCC_VERSION))
PKG_VERSION:=$(firstword $(subst +, ,$(GCC_VERSION)))
PKG_RELEASE:=$(AUTORELEASE)
GCC_DIR:=$(PKG_NAME)-$(PKG_VERSION)
PKG_SOURCE_URL:=@GNU/gcc/gcc-$(PKG_VERSION)
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
PKG_INSTALL:=1
@@ -33,13 +34,30 @@ PKG_BUILD_PARALLEL:=1
PKG_CPE_ID:=cpe:/a:gnu:gcc
ifeq ($(PKG_VERSION),7.3.0)
PKG_HASH:=832ca6ae04636adbb430e865a1451adf6979ab44ca1c8374f61fba65645ce15c
endif
ifeq ($(PKG_VERSION),7.4.0)
PKG_HASH:=eddde28d04f334aec1604456e536416549e9b1aa137fc69204e65eb0c009fe51
ifeq ($(PKG_VERSION),8.4.0)
PKG_HASH:=e30a6e52d10e1f27ed55104ad233c30bd1e99cfb5ff98ab022dc941edd1b2dd4
endif
ifeq ($(PKG_VERSION),10.3.0)
PKG_HASH:=64f404c1a650f27fc33da242e1f2df54952e3963a49e06e73f6940f3223ac344
endif
ifeq ($(PKG_VERSION),11.2.0)
PKG_HASH:=d08edc536b54c372a1010ff6619dd274c0f1603aa49212ba20f7aa2cda36fa8b
endif
PATCH_DIR=./patches/$(GCC_VERSION)
include $(INCLUDE_DIR)/package.mk
define Package/gcc
SECTION:=devel
CATEGORY:=Development
TITLE:=gcc
MAINTAINER:=W. Michael Petullo <mike@flyn.org>
DEPENDS:= +binutils +libstdcpp +libzstd @!arc
MENU:=1
endef
define Package/gcc/config
source "$(SOURCE)/Config.in"
@@ -62,13 +80,12 @@ ifeq ($(CONFIG_INCLUDE_STATIC_LINK_SPEC),y)
REMOVE_STATIC_SPEC=rm /usr/lib/$(PKG_NAME)/$(REAL_GNU_TARGET_NAME)/$(PKG_VERSION)/specs
endif
include $(INCLUDE_DIR)/package.mk
TARGET_LANGUAGES:="c,c++"
BUGURL=https://dev.openwrt.org/
PKGVERSION=OpenWrt GCC $(PKG_VERSION)
TARGET_CPPFLAGS += -D_GLIBCXX_INCLUDE_NEXT_C_HEADERS
# not using sstrip here as this fucks up the .so's somehow
# not using sstrip here as this messes up the .so's somehow
STRIP:=$(TOOLCHAIN_DIR)/bin/$(TARGET_CROSS)strip
RSTRIP:= \
NM="$(TOOLCHAIN_DIR)/bin/$(TARGET_CROSS)nm" \
@@ -81,6 +98,7 @@ ifneq ($(CONFIG_SOFT_FLOAT),y)
ARM_FLOAT_OPTION:= --with-float=hard
endif
endif
GMPSRC=gmp-6.1.0
define Download/gmp
@@ -110,7 +128,7 @@ $(eval $(call Download,mpfr))
define Build/Prepare
$(PKG_UNPACK)
# we have to download and unpack additional stuff before patching
# we have to download and unpack additional stuff before patching
tar -C $(PKG_BUILD_DIR) -xvjf $(DL_DIR)/$(GMPSRC).tar.bz2
ln -sf $(PKG_BUILD_DIR)/$(GMPSRC) $(PKG_BUILD_DIR)/gmp
tar -C $(PKG_BUILD_DIR) -xvzf $(DL_DIR)/$(MPCSRC).tar.gz
@@ -125,7 +143,7 @@ define Build/Prepare
cp $(PKG_BUILD_DIR)/config.sub $(PKG_BUILD_DIR)/mpc/
endef
CONFIGURE_ARGS += CXXFLAGS_FOR_TARGET="-g -O2 -D_GLIBCXX_INCLUDE_NEXT_C_HEADERS"
CONFIGURE_ARGS += CXXFLAGS_FOR_TARGET="-g -O2 -D_GLIBCXX_INCLUDE_NEXT_C_HEADERS"
define Build/Configure
(cd $(PKG_BUILD_DIR); rm -f config.cache; \

View File

@@ -1,77 +0,0 @@
commit 31285a20390a5e53a74a2a71d1b5c82f366ddd5a
Author: Felix Fietkau <nbd@openwrt.org>
Date: Tue May 6 11:49:05 2014 +0000
gcc: revert an upstream patch that is causing a regression on powerpc
https://forum.openwrt.org/viewtopic.php?pid=232494#p232494
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 40709
Revert of:
commit 275035b56823b26d5fb7e90fad945b998648edf2
Author: bergner <bergner@138bc75d-0d04-0410-961f-82ee72b054a4>
Date: Thu Sep 5 14:09:07 2013 +0000
PR target/58139
* reginfo.c (choose_hard_reg_mode): Scan through all mode classes
looking for widest mode.
git-svn-id: svn+ssh://gcc.gnu.org/svn/gcc/trunk@202286 138bc75d-0d04-0410-961f-82ee72b054a4
--- a/gcc/reginfo.c
+++ b/gcc/reginfo.c
@@ -637,35 +637,40 @@ choose_hard_reg_mode (unsigned int regno
mode = GET_MODE_WIDER_MODE (mode))
if ((unsigned) hard_regno_nregs[regno][mode] == nregs
&& HARD_REGNO_MODE_OK (regno, mode)
- && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode))
- && GET_MODE_SIZE (mode) > GET_MODE_SIZE (found_mode))
+ && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode)))
found_mode = mode;
+ if (found_mode != VOIDmode)
+ return found_mode;
+
for (mode = GET_CLASS_NARROWEST_MODE (MODE_FLOAT);
mode != VOIDmode;
mode = GET_MODE_WIDER_MODE (mode))
if ((unsigned) hard_regno_nregs[regno][mode] == nregs
&& HARD_REGNO_MODE_OK (regno, mode)
- && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode))
- && GET_MODE_SIZE (mode) > GET_MODE_SIZE (found_mode))
+ && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode)))
found_mode = mode;
+ if (found_mode != VOIDmode)
+ return found_mode;
+
for (mode = GET_CLASS_NARROWEST_MODE (MODE_VECTOR_FLOAT);
mode != VOIDmode;
mode = GET_MODE_WIDER_MODE (mode))
if ((unsigned) hard_regno_nregs[regno][mode] == nregs
&& HARD_REGNO_MODE_OK (regno, mode)
- && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode))
- && GET_MODE_SIZE (mode) > GET_MODE_SIZE (found_mode))
+ && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode)))
found_mode = mode;
+ if (found_mode != VOIDmode)
+ return found_mode;
+
for (mode = GET_CLASS_NARROWEST_MODE (MODE_VECTOR_INT);
mode != VOIDmode;
mode = GET_MODE_WIDER_MODE (mode))
if ((unsigned) hard_regno_nregs[regno][mode] == nregs
&& HARD_REGNO_MODE_OK (regno, mode)
- && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode))
- && GET_MODE_SIZE (mode) > GET_MODE_SIZE (found_mode))
+ && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode)))
found_mode = mode;
if (found_mode != VOIDmode)

View File

@@ -1,42 +0,0 @@
@@ -0,0 +1,45 @@
--- a/gcc/configure
+++ b/gcc/configure
@@ -29036,19 +29036,6 @@ $as_echo "#define ENABLE_DEFAULT_SSP 1"
fi
-# Test for <sys/sdt.h> on the target.
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking sys/sdt.h in the target C library" >&5
-$as_echo_n "checking sys/sdt.h in the target C library... " >&6; }
-have_sys_sdt_h=no
-if test -f $target_header_dir/sys/sdt.h; then
- have_sys_sdt_h=yes
-
-$as_echo "#define HAVE_SYS_SDT_H 1" >>confdefs.h
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $have_sys_sdt_h" >&5
-$as_echo "$have_sys_sdt_h" >&6; }
# Check if TFmode long double should be used by default or not.
# Some glibc targets used DFmode long double, but with glibc 2.4
--- a/gcc/configure.ac
+++ b/gcc/configure.ac
@@ -5787,16 +5787,6 @@ if test x$enable_default_ssp = xyes ; th
fi
AC_SUBST([enable_default_ssp])
-# Test for <sys/sdt.h> on the target.
-GCC_TARGET_TEMPLATE([HAVE_SYS_SDT_H])
-AC_MSG_CHECKING(sys/sdt.h in the target C library)
-have_sys_sdt_h=no
-if test -f $target_header_dir/sys/sdt.h; then
- have_sys_sdt_h=yes
- AC_DEFINE(HAVE_SYS_SDT_H, 1,
- [Define if your target C library provides sys/sdt.h])
-fi
-AC_MSG_RESULT($have_sys_sdt_h)
# Check if TFmode long double should be used by default or not.
# Some glibc targets used DFmode long double, but with glibc 2.4

View File

@@ -0,0 +1,24 @@
commit 81cc26c706b2bc8c8c1eb1a322e5c5157900836e
Author: Felix Fietkau <nbd@openwrt.org>
Date: Sun Oct 19 21:45:51 2014 +0000
gcc: do not assume that the Mac OS X filesystem is case insensitive
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 42973
--- a/include/filenames.h
+++ b/include/filenames.h
@@ -44,11 +44,6 @@ extern "C" {
# define IS_DIR_SEPARATOR(c) IS_DOS_DIR_SEPARATOR (c)
# define IS_ABSOLUTE_PATH(f) IS_DOS_ABSOLUTE_PATH (f)
#else /* not DOSish */
-# if defined(__APPLE__)
-# ifndef HAVE_CASE_INSENSITIVE_FILE_SYSTEM
-# define HAVE_CASE_INSENSITIVE_FILE_SYSTEM 1
-# endif
-# endif /* __APPLE__ */
# define HAS_DRIVE_SPEC(f) (0)
# define IS_DIR_SEPARATOR(c) IS_UNIX_DIR_SEPARATOR (c)
# define IS_ABSOLUTE_PATH(f) IS_UNIX_ABSOLUTE_PATH (f)

View File

@@ -0,0 +1,14 @@
diff -u --recursive gcc-10.3.0-vanilla/gcc/real.h gcc-10.3.0/gcc/real.h
--- gcc-10.3.0-vanilla/gcc/real.h 2021-04-08 06:56:28.561746620 -0500
+++ gcc-10.3.0/gcc/real.h 2022-05-18 17:04:32.076412174 -0500
@@ -77,8 +77,10 @@
+ (REAL_VALUE_TYPE_SIZE%HOST_BITS_PER_WIDE_INT ? 1 : 0)) /* round up */
/* Verify the guess. */
+#ifndef __LP64__
extern char test_real_width
[sizeof (REAL_VALUE_TYPE) <= REAL_WIDTH * sizeof (HOST_WIDE_INT) ? 1 : -1];
+#endif
/* Calculate the format for CONST_DOUBLE. We need as many slots as
are necessary to overlay a REAL_VALUE_TYPE on them. This could be

View File

@@ -12,7 +12,7 @@ Date: Tue Feb 26 16:16:33 2013 +0000
--- a/gcc/Makefile.in
+++ b/gcc/Makefile.in
@@ -3121,18 +3121,10 @@ doc/gcc.info: $(TEXI_GCC_FILES)
@@ -3285,18 +3285,10 @@ doc/gcc.info: $(TEXI_GCC_FILES)
doc/gccint.info: $(TEXI_GCCINT_FILES)
doc/cppinternals.info: $(TEXI_CPPINT_FILES)

View File

@@ -5,7 +5,7 @@ instructions.
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -3098,6 +3098,12 @@ mips_emit_call_insn (rtx pattern, rtx or
@@ -3132,6 +3132,12 @@ mips_emit_call_insn (rtx pattern, rtx or
emit_insn (gen_update_got_version ());
}

View File

@@ -0,0 +1,13 @@
--- a/gcc/gcc.c
+++ b/gcc/gcc.c
@@ -875,7 +875,9 @@ proper position among the other output f
#endif
#ifndef LINK_SSP_SPEC
-#ifdef TARGET_LIBC_PROVIDES_SSP
+#if DEFAULT_LIBC == LIBC_MUSL
+#define LINK_SSP_SPEC "-lssp_nonshared"
+#elif defined(TARGET_LIBC_PROVIDES_SSP)
#define LINK_SSP_SPEC "%{fstack-protector|fstack-protector-all" \
"|fstack-protector-strong|fstack-protector-explicit:}"
#else

View File

@@ -10,7 +10,7 @@ Signed-off-by: Felix Fietkau <nbd@nbd.name>
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -19790,7 +19790,7 @@ mips_option_override (void)
@@ -20041,7 +20041,7 @@ mips_option_override (void)
flag_pcc_struct_return = 0;
/* Decide which rtx_costs structure to use. */

View File

@@ -8,7 +8,7 @@ Date: Mon Oct 19 23:26:09 2009 +0000
--- a/libgcc/Makefile.in
+++ b/libgcc/Makefile.in
@@ -920,11 +920,12 @@ $(libgcov-driver-objects): %$(objext): $
@@ -929,11 +929,12 @@ $(libgcov-driver-objects): %$(objext): $
# Static libraries.
libgcc.a: $(libgcc-objects)
@@ -22,7 +22,7 @@ Date: Mon Oct 19 23:26:09 2009 +0000
-rm -f $@
objects="$(objects)"; \
@@ -945,7 +946,7 @@ all: libunwind.a
@@ -957,7 +958,7 @@ all: libunwind.a
endif
ifeq ($(enable_shared),yes)
@@ -31,7 +31,7 @@ Date: Mon Oct 19 23:26:09 2009 +0000
ifneq ($(LIBUNWIND),)
all: libunwind$(SHLIB_EXT)
libgcc_s$(SHLIB_EXT): libunwind$(SHLIB_EXT)
@@ -1151,6 +1152,10 @@ install-shared:
@@ -1163,6 +1164,10 @@ install-shared:
chmod 644 $(DESTDIR)$(inst_libdir)/libgcc_eh.a
$(RANLIB) $(DESTDIR)$(inst_libdir)/libgcc_eh.a

View File

@@ -0,0 +1,28 @@
commit 7edc8ca5456d9743dd0075eb3cc5b04f4f24c8cc
Author: Imre Kaloz <kaloz@openwrt.org>
Date: Wed Feb 2 19:34:36 2011 +0000
add armv4 fixup patches
SVN-Revision: 25322
--- a/gcc/config/arm/linux-eabi.h
+++ b/gcc/config/arm/linux-eabi.h
@@ -91,10 +91,15 @@
#define MUSL_DYNAMIC_LINKER \
"/lib/ld-musl-arm" MUSL_DYNAMIC_LINKER_E "%{mfloat-abi=hard:hf}%{mfdpic:-fdpic}.so.1"
+/* For armv4 we pass --fix-v4bx to linker to support EABI */
+#undef TARGET_FIX_V4BX_SPEC
+#define TARGET_FIX_V4BX_SPEC " %{mcpu=arm8|mcpu=arm810|mcpu=strongarm*"\
+ "|march=armv4|mcpu=fa526|mcpu=fa626:--fix-v4bx}"
+
/* At this point, bpabi.h will have clobbered LINK_SPEC. We want to
use the GNU/Linux version, not the generic BPABI version. */
#undef LINK_SPEC
-#define LINK_SPEC EABI_LINK_SPEC \
+#define LINK_SPEC EABI_LINK_SPEC TARGET_FIX_V4BX_SPEC \
LINUX_OR_ANDROID_LD (LINUX_TARGET_LINK_SPEC, \
LINUX_TARGET_LINK_SPEC " " ANDROID_LINK_SPEC)

View File

@@ -0,0 +1,54 @@
commit dcfc40358b5a3cae7320c17f8d1cebd5ad5540cd
Author: Felix Fietkau <nbd@openwrt.org>
Date: Sun Feb 12 20:25:47 2012 +0000
gcc 4.6: port over the missing patch 850-use_shared_libgcc.patch to prevent libgcc crap from leaking into every single binary
SVN-Revision: 30486
--- a/gcc/config/arm/linux-eabi.h
+++ b/gcc/config/arm/linux-eabi.h
@@ -132,10 +132,6 @@
"%{Ofast|ffast-math|funsafe-math-optimizations:crtfastmath.o%s} " \
LINUX_OR_ANDROID_LD (GNU_USER_TARGET_ENDFILE_SPEC, ANDROID_ENDFILE_SPEC)
-/* Use the default LIBGCC_SPEC, not the version in linux-elf.h, as we
- do not use -lfloat. */
-#undef LIBGCC_SPEC
-
/* Clear the instruction cache from `beg' to `end'. This is
implemented in lib1funcs.S, so ensure an error if this definition
is used. */
--- a/gcc/config/linux.h
+++ b/gcc/config/linux.h
@@ -66,6 +66,10 @@ see the files COPYING3 and COPYING.RUNTI
builtin_version ("CRuntime_Musl"); \
} while (0)
+#ifndef LIBGCC_SPEC
+#define LIBGCC_SPEC "%{static|static-libgcc:-lgcc}%{!static:%{!static-libgcc:-lgcc_s}}"
+#endif
+
/* Determine which dynamic linker to use depending on whether GLIBC or
uClibc or Bionic or musl is the default C library and whether
-muclibc or -mglibc or -mbionic or -mmusl has been passed to change
--- a/libgcc/mkmap-symver.awk
+++ b/libgcc/mkmap-symver.awk
@@ -136,5 +136,5 @@ function output(lib) {
else if (inherit[lib])
printf("} %s;\n", inherit[lib]);
else
- printf ("\n local:\n\t*;\n};\n");
+ printf ("\n\t*;\n};\n");
}
--- a/gcc/config/rs6000/linux.h
+++ b/gcc/config/rs6000/linux.h
@@ -62,6 +62,9 @@
#undef CPP_OS_DEFAULT_SPEC
#define CPP_OS_DEFAULT_SPEC "%(cpp_os_linux)"
+#undef LIBGCC_SPEC
+#define LIBGCC_SPEC "%{!static:%{!static-libgcc:-lgcc_s}} -lgcc"
+
#undef LINK_SHLIB_SPEC
#define LINK_SHLIB_SPEC "%{shared:-shared} %{!shared: %{static:-static}} \
%{static-pie:-static -pie --no-dynamic-linker -z text}"

View File

@@ -0,0 +1,11 @@
--- a/gcc/config/rs6000/rs6000-logue.c
+++ b/gcc/config/rs6000/rs6000-logue.c
@@ -348,7 +348,7 @@ rs6000_savres_strategy (rs6000_stack_t *
/* Define cutoff for using out-of-line functions to save registers. */
if (DEFAULT_ABI == ABI_V4 || TARGET_ELF)
{
- if (!optimize_size)
+ if (1)
{
strategy |= SAVE_INLINE_FPRS | REST_INLINE_FPRS;
strategy |= SAVE_INLINE_GPRS | REST_INLINE_GPRS;

View File

@@ -0,0 +1,11 @@
--- a/libgcc/crtstuff.c
+++ b/libgcc/crtstuff.c
@@ -152,7 +152,7 @@ call_ ## FUNC (void) \
#endif
#if !defined(USE_TM_CLONE_REGISTRY) && defined(OBJECT_FORMAT_ELF)
-# define USE_TM_CLONE_REGISTRY 1
+# define USE_TM_CLONE_REGISTRY 0
#elif !defined(USE_TM_CLONE_REGISTRY)
# define USE_TM_CLONE_REGISTRY 0
#endif

View File

@@ -0,0 +1,9 @@
--- a/libgcc/config/mips/t-mips16
+++ b/libgcc/config/mips/t-mips16
@@ -43,3 +43,6 @@ SYNC_CFLAGS = -mno-mips16
# Version these symbols if building libgcc.so.
SHLIB_MAPFILES += $(srcdir)/config/mips/libgcc-mips16.ver
+
+CRTSTUFF_T_CFLAGS += -mno-mips16
+CRTSTUFF_T_CFLAGS_S += -mno-mips16

View File

@@ -0,0 +1,146 @@
commit 99368862e44740ff4fd33760893f04e14f9dbdf1
Author: Felix Fietkau <nbd@openwrt.org>
Date: Tue Jul 31 00:52:27 2007 +0000
Port the mbsd_multi patch from freewrt, which adds -fhonour-copts. This will emit warnings in packages that don't use our target cflags properly
SVN-Revision: 8256
This patch brings over a feature from MirBSD:
* -fhonour-copts
If this option is not given, it's warned (depending
on environment variables). This is to catch errors
of misbuilt packages which override CFLAGS themselves.
This patch was authored by Thorsten Glaser <tg at mirbsd.de>
with copyright assignment to the FSF in effect.
--- a/gcc/c-family/c-opts.c
+++ b/gcc/c-family/c-opts.c
@@ -107,6 +107,9 @@ static dump_flags_t original_dump_flags;
/* Whether any standard preincluded header has been preincluded. */
static bool done_preinclude;
+/* Check if a port honours COPTS. */
+static int honour_copts = 0;
+
static void handle_OPT_d (const char *);
static void set_std_cxx98 (int);
static void set_std_cxx11 (int);
@@ -455,6 +458,12 @@ c_common_handle_option (size_t scode, co
flag_no_builtin = !value;
break;
+ case OPT_fhonour_copts:
+ if (c_language == clk_c) {
+ honour_copts++;
+ }
+ break;
+
case OPT_fconstant_string_class_:
constant_string_class_name = arg;
break;
@@ -1168,6 +1177,47 @@ c_common_init (void)
return false;
}
+ if (c_language == clk_c) {
+ char *ev = getenv ("GCC_HONOUR_COPTS");
+ int evv;
+ if (ev == NULL)
+ evv = -1;
+ else if ((*ev == '0') || (*ev == '\0'))
+ evv = 0;
+ else if (*ev == '1')
+ evv = 1;
+ else if (*ev == '2')
+ evv = 2;
+ else if (*ev == 's')
+ evv = -1;
+ else {
+ warning (0, "unknown GCC_HONOUR_COPTS value, assuming 1");
+ evv = 1; /* maybe depend this on something like MIRBSD_NATIVE? */
+ }
+ if (evv == 1) {
+ if (honour_copts == 0) {
+ error ("someone does not honour COPTS at all in lenient mode");
+ return false;
+ } else if (honour_copts != 1) {
+ warning (0, "someone does not honour COPTS correctly, passed %d times",
+ honour_copts);
+ }
+ } else if (evv == 2) {
+ if (honour_copts == 0) {
+ error ("someone does not honour COPTS at all in strict mode");
+ return false;
+ } else if (honour_copts != 1) {
+ error ("someone does not honour COPTS correctly, passed %d times",
+ honour_copts);
+ return false;
+ }
+ } else if (evv == 0) {
+ if (honour_copts != 1)
+ inform (UNKNOWN_LOCATION, "someone does not honour COPTS correctly, passed %d times",
+ honour_copts);
+ }
+ }
+
return true;
}
--- a/gcc/c-family/c.opt
+++ b/gcc/c-family/c.opt
@@ -1590,6 +1590,9 @@ C++ ObjC++ Optimization Alias(fexception
fhonor-std
C++ ObjC++ WarnRemoved
+fhonour-copts
+C ObjC C++ ObjC++ RejectNegative
+
fhosted
C ObjC
Assume normal C execution environment.
--- a/gcc/common.opt
+++ b/gcc/common.opt
@@ -1660,6 +1660,9 @@ fguess-branch-probability
Common Report Var(flag_guess_branch_prob) Optimization
Enable guessing of branch probabilities.
+fhonour-copts
+Common RejectNegative
+
; Nonzero means ignore `#ident' directives. 0 means handle them.
; Generate position-independent code for executables if possible
; On SVR4 targets, it also controls whether or not to emit a
--- a/gcc/doc/invoke.texi
+++ b/gcc/doc/invoke.texi
@@ -8171,6 +8171,17 @@ This option is only supported for C and
@option{-Wall} and by @option{-Wpedantic}, which can be disabled with
@option{-Wno-pointer-sign}.
+@item -fhonour-copts
+@opindex fhonour-copts
+If @env{GCC_HONOUR_COPTS} is set to 1, abort if this option is not
+given at least once, and warn if it is given more than once.
+If @env{GCC_HONOUR_COPTS} is set to 2, abort if this option is not
+given exactly once.
+If @env{GCC_HONOUR_COPTS} is set to 0 or unset, warn if this option
+is not given exactly once.
+The warning is quelled if @env{GCC_HONOUR_COPTS} is set to @samp{s}.
+This flag and environment variable only affect the C language.
+
@item -Wstack-protector
@opindex Wstack-protector
@opindex Wno-stack-protector
--- a/gcc/opts.c
+++ b/gcc/opts.c
@@ -2318,6 +2318,9 @@ common_handle_option (struct gcc_options
/* Currently handled in a prescan. */
break;
+ case OPT_fhonour_copts:
+ break;
+
case OPT_Werror:
dc->warning_as_error_requested = value;
break;

View File

@@ -0,0 +1,22 @@
Author: Jo-Philipp Wich <jow@openwrt.org>
Date: Sat Apr 21 03:02:39 2012 +0000
gcc: add patch to make the getenv() spec function nonfatal if requested environment variable is unset
SVN-Revision: 31390
--- a/gcc/gcc.c
+++ b/gcc/gcc.c
@@ -9396,8 +9396,10 @@ getenv_spec_function (int argc, const ch
}
if (!value)
- fatal_error (input_location,
- "environment variable %qs not defined", varname);
+ {
+ warning (input_location, "environment variable %qs not defined", varname);
+ value = "";
+ }
/* We have to escape every character of the environment variable so
they are not interpreted as active spec characters. A

View File

@@ -0,0 +1,111 @@
From da45b3fde60095756f5f6030f6012c23a3d34429 Mon Sep 17 00:00:00 2001
From: Andrew McDonnell <bugs@andrewmcdonnell.net>
Date: Fri, 3 Oct 2014 19:09:00 +0930
Subject: Add .note.GNU-stack section
See http://lists.busybox.net/pipermail/uclibc/2014-October/048671.html
Below copied from https://gcc.gnu.org/ml/gcc-patches/2014-09/msg02430.html
Re: [Patch, MIPS] Add .note.GNU-stack section
From: Steve Ellcey <sellcey at mips dot com>
On Wed, 2014-09-10 at 10:15 -0700, Eric Christopher wrote:
>
>
> On Wed, Sep 10, 2014 at 9:27 AM, <pinskia@gmail.com> wrote:
> This works except you did not update the assembly files in
> libgcc or glibc. We (Cavium) have the same patch in our tree
> for a few released versions.
> Mind just checking yours in then Andrew?
> Thanks!
> -eric
I talked to Andrew about what files he changed in GCC and created and
tested this new patch. Andrew also mentioned changing some assembly
files in glibc but I don't see any use of '.section .note.GNU-stack' in
any assembly files in glibc (for any platform) so I wasn't planning on
creating a glibc to add them to mips glibc assembly language files.
OK to check in this patch?
Steve Ellcey
sellcey@mips.com
2014-09-26 Steve Ellcey <sellcey@mips.com>
---
gcc/config/mips/mips.c | 3 +++
libgcc/config/mips/crti.S | 4 ++++
libgcc/config/mips/crtn.S | 3 +++
libgcc/config/mips/mips16.S | 4 ++++
libgcc/config/mips/vr4120-div.S | 4 ++++
5 files changed, 18 insertions(+)
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -22881,6 +22881,9 @@ mips_asm_file_end (void)
#define TARGET_ASM_FILE_END mips_asm_file_end
+#undef TARGET_ASM_FILE_END
+#define TARGET_ASM_FILE_END file_end_indicate_exec_stack
+
struct gcc_target targetm = TARGET_INITIALIZER;
#include "gt-mips.h"
--- a/libgcc/config/mips/crti.S
+++ b/libgcc/config/mips/crti.S
@@ -24,6 +24,10 @@ see the files COPYING3 and COPYING.RUNTI
/* An executable stack is *not* required for these functions. */
#include "gnustack.h"
+
+/* An executable stack is *not* required for these functions. */
+ .section .note.GNU-stack,"",%progbits
+
/* 4 slots for argument spill area. 1 for cpreturn, 1 for stack.
Return spill offset of 40 and 20. Aligned to 16 bytes for n32. */
--- a/libgcc/config/mips/crtn.S
+++ b/libgcc/config/mips/crtn.S
@@ -24,6 +24,9 @@ see the files COPYING3 and COPYING.RUNTI
/* An executable stack is *not* required for these functions. */
#include "gnustack.h"
+/* An executable stack is *not* required for these functions. */
+ .section .note.GNU-stack,"",%progbits
+
/* 4 slots for argument spill area. 1 for cpreturn, 1 for stack.
Return spill offset of 40 and 20. Aligned to 16 bytes for n32. */
--- a/libgcc/config/mips/mips16.S
+++ b/libgcc/config/mips/mips16.S
@@ -51,6 +51,10 @@ see the files COPYING3 and COPYING.RUNTI
values using the soft-float calling convention, but do the actual
operation using the hard floating point instructions. */
+/* An executable stack is *not* required for these functions. */
+ .section .note.GNU-stack,"",%progbits
+ .previous
+
#if defined _MIPS_SIM && (_MIPS_SIM == _ABIO32 || _MIPS_SIM == _ABIO64)
/* This file contains 32-bit assembly code. */
--- a/libgcc/config/mips/vr4120-div.S
+++ b/libgcc/config/mips/vr4120-div.S
@@ -29,6 +29,10 @@ see the files COPYING3 and COPYING.RUNTI
-mfix-vr4120. div and ddiv do not give the correct result when one
of the operands is negative. */
+/* An executable stack is *not* required for these functions. */
+ .section .note.GNU-stack,"",%progbits
+ .previous
+
.set nomips16
#define DIV \

View File

@@ -0,0 +1,67 @@
From dda6b050cd74a352670787a294596a9c56c21327 Mon Sep 17 00:00:00 2001
From: Yousong Zhou <yszhou4tech@gmail.com>
Date: Fri, 4 May 2018 18:20:53 +0800
Subject: [PATCH] gotools: fix compilation when making cross compiler
libgo is "the runtime support library for the Go programming language.
This library is intended for use with the Go frontend."
gccgo will link target files with libgo.so which depends on libgcc_s.so.1, but
the linker will complain that it cannot find it. That's because shared libgcc
is not present in the install directory yet. libgo.so was made without problem
because gcc will emit -lgcc_s when compiled with -shared option. When gotools
were being made, it was supplied with -static-libgcc thus no link option was
provided. Check LIBGO in gcc/go/gcc-spec.c for how gccgo make a builtin spec
for linking with libgo.so
- GccgoCrossCompilation, https://github.com/golang/go/wiki/GccgoCrossCompilation
- Cross-building instructions, http://www.eglibc.org/archives/patches/msg00078.html
When 3-pass GCC compilation is used, shared libgcc runtime libraries will be
available after gcc pass2 completed and will meet the gotools link requirement
at gcc pass3
---
gotools/Makefile.am | 4 +++-
gotools/Makefile.in | 4 +++-
2 files changed, 6 insertions(+), 2 deletions(-)
--- a/gotools/Makefile.am
+++ b/gotools/Makefile.am
@@ -26,6 +26,7 @@ PWD_COMMAND = $${PWDCMD-pwd}
STAMP = echo timestamp >
libgodir = ../$(target_noncanonical)/libgo
+libgccdir = ../$(target_noncanonical)/libgcc
LIBGODEP = $(libgodir)/libgo.la
LIBGOTOOL = $(libgodir)/libgotool.a
@@ -41,7 +42,8 @@ GOCFLAGS = $(CFLAGS_FOR_TARGET)
GOCOMPILE = $(GOCOMPILER) $(GOCFLAGS)
AM_GOCFLAGS = -I $(libgodir)
-AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs
+AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs \
+ -L $(libgccdir) -L $(libgccdir)/.libs -lgcc_s
GOLINK = $(GOCOMPILER) $(GOCFLAGS) $(AM_GOCFLAGS) $(LDFLAGS) $(AM_LDFLAGS) -o $@
libgosrcdir = $(srcdir)/../libgo/go
--- a/gotools/Makefile.in
+++ b/gotools/Makefile.in
@@ -337,6 +337,7 @@ mkinstalldirs = $(SHELL) $(toplevel_srcd
PWD_COMMAND = $${PWDCMD-pwd}
STAMP = echo timestamp >
libgodir = ../$(target_noncanonical)/libgo
+libgccdir = ../$(target_noncanonical)/libgcc
LIBGODEP = $(libgodir)/libgo.la
LIBGOTOOL = $(libgodir)/libgotool.a
@NATIVE_FALSE@GOCOMPILER = $(GOC)
@@ -346,7 +347,8 @@ LIBGOTOOL = $(libgodir)/libgotool.a
GOCFLAGS = $(CFLAGS_FOR_TARGET)
GOCOMPILE = $(GOCOMPILER) $(GOCFLAGS)
AM_GOCFLAGS = -I $(libgodir)
-AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs
+AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs \
+ -L $(libgccdir) -L $(libgccdir)/.libs -lgcc_s
GOLINK = $(GOCOMPILER) $(GOCFLAGS) $(AM_GOCFLAGS) $(LDFLAGS) $(AM_LDFLAGS) -o $@
libgosrcdir = $(srcdir)/../libgo/go
cmdsrcdir = $(libgosrcdir)/cmd

View File

@@ -0,0 +1,114 @@
From a6219e8e0719b14f474b0dcaa7bde2f4e57474f9 Mon Sep 17 00:00:00 2001
From: Jakub Jelinek <jakub@redhat.com>
Date: Wed, 17 Nov 2021 13:45:53 +0100
Subject: [PATCH] ranger: Fix up fold_using_range::range_of_address [PR103255]
If on &base->member the offset isn't constant or isn't zero and
-fdelete-null-pointer-checks and not -fwrapv-pointer and base has a range
that doesn't include NULL, we return the range of the base.
Usually it isn't a big deal, because for most pointers we just use
varying, range_zero and range_nonzero ranges and nothing beyond that,
but if a pointer is initialized from a constant, we actually track the
exact range and in that case this causes miscompilation.
As discussed on IRC, I think doing something like:
offset_int off2;
if (off_cst && off.is_constant (&off2))
{
tree cst = wide_int_to_tree (sizetype, off2 / BITS_PER_UNIT);
// adjust range r with POINTER_PLUS_EXPR cst
if (!range_includes_zero_p (&r))
return true;
}
// Fallback
r = range_nonzero (TREE_TYPE (gimple_assign_rhs1 (stmt)));
return true;
could work, given that most of the pointer ranges are just the simple ones
perhaps it is too much for little benefit.
2021-11-17 Jakub Jelinek <jakub@redhat.com>
PR tree-optimization/103255
* gimple-range.cc (fold_using_range::range_of_address): Return
range_nonzero rather than unadjusted base's range. Formatting fixes.
* gcc.c-torture/execute/pr103255.c: New test.
(cherry picked from commit c39cb6bf835ca12e590eaa6f90222e51be207c50)
---
gcc/gimple-range.cc | 16 +++++---
.../gcc.c-torture/execute/pr103255.c | 41 +++++++++++++++++++
2 files changed, 52 insertions(+), 5 deletions(-)
create mode 100644 gcc/testsuite/gcc.c-torture/execute/pr103255.c
--- a/gcc/gimple-range.cc
+++ b/gcc/gimple-range.cc
@@ -491,14 +491,20 @@ gimple_ranger::range_of_address (irange
}
/* If &X->a is equal to X, the range of X is the result. */
if (off_cst && known_eq (off, 0))
- return true;
+ return true;
else if (flag_delete_null_pointer_checks
&& !TYPE_OVERFLOW_WRAPS (TREE_TYPE (expr)))
{
- /* For -fdelete-null-pointer-checks -fno-wrapv-pointer we don't
- allow going from non-NULL pointer to NULL. */
- if(!range_includes_zero_p (&r))
- return true;
+ /* For -fdelete-null-pointer-checks -fno-wrapv-pointer we don't
+ allow going from non-NULL pointer to NULL. */
+ if (!range_includes_zero_p (&r))
+ {
+ /* We could here instead adjust r by off >> LOG2_BITS_PER_UNIT
+ using POINTER_PLUS_EXPR if off_cst and just fall back to
+ this. */
+ r = range_nonzero (TREE_TYPE (gimple_assign_rhs1 (stmt)));
+ return true;
+ }
}
/* If MEM_REF has a "positive" offset, consider it non-NULL
always, for -fdelete-null-pointer-checks also "negative"
--- /dev/null
+++ b/gcc/testsuite/gcc.c-torture/execute/pr103255.c
@@ -0,0 +1,41 @@
+/* PR tree-optimization/103255 */
+
+struct H
+{
+ unsigned a;
+ unsigned b;
+ unsigned c;
+};
+
+#if __SIZEOF_POINTER__ >= 4
+#define ADDR 0x400000
+#else
+#define ADDR 0x4000
+#endif
+#define OFF 0x20
+
+int
+main ()
+{
+ struct H *h = 0;
+ unsigned long o;
+ volatile int t = 1;
+
+ for (o = OFF; o <= OFF; o += 0x1000)
+ {
+ struct H *u;
+ u = (struct H *) (ADDR + o);
+ if (t)
+ {
+ h = u;
+ break;
+ }
+ }
+
+ if (h == 0)
+ return 0;
+ unsigned *tt = &h->b;
+ if ((__SIZE_TYPE__) tt != (ADDR + OFF + __builtin_offsetof (struct H, b)))
+ __builtin_abort ();
+ return 0;
+}

View File

@@ -0,0 +1,24 @@
commit 81cc26c706b2bc8c8c1eb1a322e5c5157900836e
Author: Felix Fietkau <nbd@openwrt.org>
Date: Sun Oct 19 21:45:51 2014 +0000
gcc: do not assume that the Mac OS X filesystem is case insensitive
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 42973
--- a/include/filenames.h
+++ b/include/filenames.h
@@ -44,11 +44,6 @@ extern "C" {
# define IS_DIR_SEPARATOR(c) IS_DOS_DIR_SEPARATOR (c)
# define IS_ABSOLUTE_PATH(f) IS_DOS_ABSOLUTE_PATH (f)
#else /* not DOSish */
-# if defined(__APPLE__)
-# ifndef HAVE_CASE_INSENSITIVE_FILE_SYSTEM
-# define HAVE_CASE_INSENSITIVE_FILE_SYSTEM 1
-# endif
-# endif /* __APPLE__ */
# define HAS_DRIVE_SPEC(f) (0)
# define IS_DIR_SEPARATOR(c) IS_UNIX_DIR_SEPARATOR (c)
# define IS_ABSOLUTE_PATH(f) IS_UNIX_ABSOLUTE_PATH (f)

View File

@@ -1,14 +1,13 @@
--- a/gcc/real.h
+++ b/gcc/real.h
@@ -70,9 +70,10 @@ struct GTY(()) real_value {
@@ -77,8 +77,10 @@ struct GTY(()) real_value {
+ (REAL_VALUE_TYPE_SIZE%HOST_BITS_PER_WIDE_INT ? 1 : 0)) /* round up */
/* Verify the guess. */
+#ifndef __LP64__
extern char test_real_width
[sizeof (REAL_VALUE_TYPE) <= REAL_WIDTH * sizeof (HOST_WIDE_INT) ? 1 : -1];
-
+#endif
/* Calculate the format for CONST_DOUBLE. We need as many slots as
are necessary to overlay a REAL_VALUE_TYPE on them. This could be
as many as four (32-bit HOST_WIDE_INT, 128-bit REAL_VALUE_TYPE).

View File

@@ -0,0 +1,35 @@
commit 098bd91f5eae625c7d2ee621e10930fc4434e5e2
Author: Luka Perkov <luka@openwrt.org>
Date: Tue Feb 26 16:16:33 2013 +0000
gcc: don't build documentation
This closes #13039.
Signed-off-by: Luka Perkov <luka@openwrt.org>
SVN-Revision: 35807
--- a/gcc/Makefile.in
+++ b/gcc/Makefile.in
@@ -3355,18 +3355,10 @@ doc/gcc.info: $(TEXI_GCC_FILES)
doc/gccint.info: $(TEXI_GCCINT_FILES)
doc/cppinternals.info: $(TEXI_CPPINT_FILES)
-doc/%.info: %.texi
- if [ x$(BUILD_INFO) = xinfo ]; then \
- $(MAKEINFO) $(MAKEINFOFLAGS) -I . -I $(gcc_docdir) \
- -I $(gcc_docdir)/include -o $@ $<; \
- fi
+doc/%.info:
# Duplicate entry to handle renaming of gccinstall.info
-doc/gccinstall.info: $(TEXI_GCCINSTALL_FILES)
- if [ x$(BUILD_INFO) = xinfo ]; then \
- $(MAKEINFO) $(MAKEINFOFLAGS) -I $(gcc_docdir) \
- -I $(gcc_docdir)/include -o $@ $<; \
- fi
+doc/gccinstall.info:
doc/cpp.dvi: $(TEXI_CPP_FILES)
doc/gcc.dvi: $(TEXI_GCC_FILES)

View File

@@ -0,0 +1,46 @@
From ea650cae26da4a8fc04f0c4666f4dd776d0b5fc0 Mon Sep 17 00:00:00 2001
From: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
Date: Sun, 14 Nov 2021 21:54:25 -0800
Subject: [PATCH] configure: define TARGET_LIBC_GNUSTACK on musl
musl only uses PT_GNU_STACK to set default thread stack size and has no
executable stack support[0], so there is no reason not to emit the
.note.GNU-stack section on musl builds.
[0]: https://lore.kernel.org/all/20190423192534.GN23599@brightrain.aerifal.cx/T/#u
gcc/ChangeLog:
* configure: Regenerate.
* configure.ac: define TARGET_LIBC_GNUSTACK on musl
Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
---
gcc/configure | 3 +++
gcc/configure.ac | 3 +++
2 files changed, 6 insertions(+)
--- a/gcc/configure
+++ b/gcc/configure
@@ -30954,6 +30954,9 @@ fi
# Check if the target LIBC handles PT_GNU_STACK.
gcc_cv_libc_gnustack=unknown
case "$target" in
+ mips*-*-linux-musl*)
+ gcc_cv_libc_gnustack=yes
+ ;;
mips*-*-linux*)
if test $glibc_version_major -gt 2 \
--- a/gcc/configure.ac
+++ b/gcc/configure.ac
@@ -6788,6 +6788,9 @@ fi
# Check if the target LIBC handles PT_GNU_STACK.
gcc_cv_libc_gnustack=unknown
case "$target" in
+ mips*-*-linux-musl*)
+ gcc_cv_libc_gnustack=yes
+ ;;
mips*-*-linux*)
GCC_GLIBC_VERSION_GTE_IFELSE([2], [31], [gcc_cv_libc_gnustack=yes], )
;;

View File

@@ -0,0 +1,20 @@
Fix https://gcc.gnu.org/bugzilla/show_bug.cgi?id=84790.
MIPS16 functions have a static assembler prologue which clobbers
registers v0 and v1. Add these register clobbers to function call
instructions.
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -3132,6 +3132,12 @@ mips_emit_call_insn (rtx pattern, rtx or
emit_insn (gen_update_got_version ());
}
+ if (TARGET_MIPS16 && TARGET_USE_GOT)
+ {
+ clobber_reg (&CALL_INSN_FUNCTION_USAGE (insn), MIPS16_PIC_TEMP);
+ clobber_reg (&CALL_INSN_FUNCTION_USAGE (insn), MIPS_PROLOGUE_TEMP (word_mode));
+ }
+
if (TARGET_MIPS16
&& TARGET_EXPLICIT_RELOCS
&& TARGET_CALL_CLOBBERED_GP)

View File

@@ -0,0 +1,13 @@
--- a/gcc/gcc.c
+++ b/gcc/gcc.c
@@ -978,7 +978,9 @@ proper position among the other output f
#endif
#ifndef LINK_SSP_SPEC
-#ifdef TARGET_LIBC_PROVIDES_SSP
+#if DEFAULT_LIBC == LIBC_MUSL
+#define LINK_SSP_SPEC "-lssp_nonshared"
+#elif defined(TARGET_LIBC_PROVIDES_SSP)
#define LINK_SSP_SPEC "%{fstack-protector|fstack-protector-all" \
"|fstack-protector-strong|fstack-protector-explicit:}"
#else

View File

@@ -0,0 +1,21 @@
commit ecf7671b769fe96f7b5134be442089f8bdba55d2
Author: Felix Fietkau <nbd@nbd.name>
Date: Thu Aug 4 20:29:45 2016 +0200
gcc: add a patch to generate better code with Os on mips
Also happens to reduce compressed code size a bit
Signed-off-by: Felix Fietkau <nbd@nbd.name>
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -20041,7 +20041,7 @@ mips_option_override (void)
flag_pcc_struct_return = 0;
/* Decide which rtx_costs structure to use. */
- if (optimize_size)
+ if (0 && optimize_size)
mips_cost = &mips_rtx_cost_optimize_size;
else
mips_cost = &mips_rtx_cost_data[mips_tune];

View File

@@ -0,0 +1,33 @@
commit 8570c4be394cff7282f332f97da2ff569a927ddb
Author: Imre Kaloz <kaloz@openwrt.org>
Date: Wed Feb 2 20:06:12 2011 +0000
fixup arm soft-float symbols
SVN-Revision: 25325
--- a/libgcc/config/arm/t-linux
+++ b/libgcc/config/arm/t-linux
@@ -1,6 +1,10 @@
LIB1ASMSRC = arm/lib1funcs.S
LIB1ASMFUNCS = _udivsi3 _divsi3 _umodsi3 _modsi3 _dvmd_lnx _clzsi2 _clzdi2 \
- _ctzsi2 _arm_addsubdf3 _arm_addsubsf3
+ _ctzsi2 _arm_addsubdf3 _arm_addsubsf3 \
+ _arm_negdf2 _arm_muldivdf3 _arm_cmpdf2 _arm_unorddf2 \
+ _arm_fixdfsi _arm_fixunsdfsi _arm_truncdfsf2 \
+ _arm_negsf2 _arm_muldivsf3 _arm_cmpsf2 _arm_unordsf2 \
+ _arm_fixsfsi _arm_fixunssfsi
# Just for these, we omit the frame pointer since it makes such a big
# difference.
--- a/gcc/config/arm/linux-elf.h
+++ b/gcc/config/arm/linux-elf.h
@@ -58,8 +58,6 @@
%{shared:-lc} \
%{!shared:%{profile:-lc_p}%{!profile:-lc}}"
-#define LIBGCC_SPEC "%{mfloat-abi=soft*:-lfloat} -lgcc"
-
#define GLIBC_DYNAMIC_LINKER "/lib/ld-linux.so.2"
#define LINUX_TARGET_LINK_SPEC "%{h*} \

View File

@@ -0,0 +1,44 @@
commit c96312958c0621e72c9b32da5bc224ffe2161384
Author: Felix Fietkau <nbd@openwrt.org>
Date: Mon Oct 19 23:26:09 2009 +0000
gcc: create a proper libgcc_pic.a static library for relinking (4.3.3+ for now, backport will follow)
SVN-Revision: 18086
--- a/libgcc/Makefile.in
+++ b/libgcc/Makefile.in
@@ -930,11 +930,12 @@ $(libgcov-driver-objects): %$(objext): $
# Static libraries.
libgcc.a: $(libgcc-objects)
+libgcc_pic.a: $(libgcc-s-objects)
libgcov.a: $(libgcov-objects)
libunwind.a: $(libunwind-objects)
libgcc_eh.a: $(libgcc-eh-objects)
-libgcc.a libgcov.a libunwind.a libgcc_eh.a:
+libgcc.a libgcov.a libunwind.a libgcc_eh.a libgcc_pic.a:
-rm -f $@
objects="$(objects)"; \
@@ -958,7 +959,7 @@ all: libunwind.a
endif
ifeq ($(enable_shared),yes)
-all: libgcc_eh.a libgcc_s$(SHLIB_EXT)
+all: libgcc_eh.a libgcc_pic.a libgcc_s$(SHLIB_EXT)
ifneq ($(LIBUNWIND),)
all: libunwind$(SHLIB_EXT)
libgcc_s$(SHLIB_EXT): libunwind$(SHLIB_EXT)
@@ -1164,6 +1165,10 @@ install-shared:
chmod 644 $(DESTDIR)$(inst_libdir)/libgcc_eh.a
$(RANLIB) $(DESTDIR)$(inst_libdir)/libgcc_eh.a
+ $(INSTALL_DATA) libgcc_pic.a $(mapfile) $(DESTDIR)$(inst_libdir)/
+ chmod 644 $(DESTDIR)$(inst_libdir)/libgcc_pic.a
+ $(RANLIB) $(DESTDIR)$(inst_libdir)/libgcc_pic.a
+
$(subst @multilib_dir@,$(MULTIDIR),$(subst \
@shlib_base_name@,libgcc_s,$(subst \
@shlib_slibdir_qual@,$(MULTIOSSUBDIR),$(SHLIB_INSTALL))))

View File

@@ -0,0 +1,28 @@
commit 7edc8ca5456d9743dd0075eb3cc5b04f4f24c8cc
Author: Imre Kaloz <kaloz@openwrt.org>
Date: Wed Feb 2 19:34:36 2011 +0000
add armv4 fixup patches
SVN-Revision: 25322
--- a/gcc/config/arm/linux-eabi.h
+++ b/gcc/config/arm/linux-eabi.h
@@ -91,10 +91,15 @@
#define MUSL_DYNAMIC_LINKER \
"/lib/ld-musl-arm" MUSL_DYNAMIC_LINKER_E "%{mfloat-abi=hard:hf}%{mfdpic:-fdpic}.so.1"
+/* For armv4 we pass --fix-v4bx to linker to support EABI */
+#undef TARGET_FIX_V4BX_SPEC
+#define TARGET_FIX_V4BX_SPEC " %{mcpu=arm8|mcpu=arm810|mcpu=strongarm*"\
+ "|march=armv4|mcpu=fa526|mcpu=fa626:--fix-v4bx}"
+
/* At this point, bpabi.h will have clobbered LINK_SPEC. We want to
use the GNU/Linux version, not the generic BPABI version. */
#undef LINK_SPEC
-#define LINK_SPEC EABI_LINK_SPEC \
+#define LINK_SPEC EABI_LINK_SPEC TARGET_FIX_V4BX_SPEC \
LINUX_OR_ANDROID_LD (LINUX_TARGET_LINK_SPEC, \
LINUX_TARGET_LINK_SPEC " " ANDROID_LINK_SPEC)

View File

@@ -0,0 +1,54 @@
commit dcfc40358b5a3cae7320c17f8d1cebd5ad5540cd
Author: Felix Fietkau <nbd@openwrt.org>
Date: Sun Feb 12 20:25:47 2012 +0000
gcc 4.6: port over the missing patch 850-use_shared_libgcc.patch to prevent libgcc crap from leaking into every single binary
SVN-Revision: 30486
--- a/gcc/config/arm/linux-eabi.h
+++ b/gcc/config/arm/linux-eabi.h
@@ -132,10 +132,6 @@
"%{Ofast|ffast-math|funsafe-math-optimizations:crtfastmath.o%s} " \
LINUX_OR_ANDROID_LD (GNU_USER_TARGET_ENDFILE_SPEC, ANDROID_ENDFILE_SPEC)
-/* Use the default LIBGCC_SPEC, not the version in linux-elf.h, as we
- do not use -lfloat. */
-#undef LIBGCC_SPEC
-
/* Clear the instruction cache from `beg' to `end'. This is
implemented in lib1funcs.S, so ensure an error if this definition
is used. */
--- a/gcc/config/linux.h
+++ b/gcc/config/linux.h
@@ -66,6 +66,10 @@ see the files COPYING3 and COPYING.RUNTI
builtin_version ("CRuntime_Musl"); \
} while (0)
+#ifndef LIBGCC_SPEC
+#define LIBGCC_SPEC "%{static|static-libgcc:-lgcc}%{!static:%{!static-libgcc:-lgcc_s}}"
+#endif
+
/* Determine which dynamic linker to use depending on whether GLIBC or
uClibc or Bionic or musl is the default C library and whether
-muclibc or -mglibc or -mbionic or -mmusl has been passed to change
--- a/libgcc/mkmap-symver.awk
+++ b/libgcc/mkmap-symver.awk
@@ -136,5 +136,5 @@ function output(lib) {
else if (inherit[lib])
printf("} %s;\n", inherit[lib]);
else
- printf ("\n local:\n\t*;\n};\n");
+ printf ("\n\t*;\n};\n");
}
--- a/gcc/config/rs6000/linux.h
+++ b/gcc/config/rs6000/linux.h
@@ -62,6 +62,9 @@
#undef CPP_OS_DEFAULT_SPEC
#define CPP_OS_DEFAULT_SPEC "%(cpp_os_linux)"
+#undef LIBGCC_SPEC
+#define LIBGCC_SPEC "%{!static:%{!static-libgcc:-lgcc_s}} -lgcc"
+
#undef LINK_SHLIB_SPEC
#define LINK_SHLIB_SPEC "%{shared:-shared} %{!shared: %{static:-static}} \
%{static-pie:-static -pie --no-dynamic-linker -z text}"

View File

@@ -0,0 +1,22 @@
commit 64661de100da1ec1061ef3e5e400285dce115e6b
Author: Felix Fietkau <nbd@openwrt.org>
Date: Sun May 10 13:16:35 2015 +0000
gcc: add some size optimization patches
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 45664
--- a/libgcc/config/t-libunwind
+++ b/libgcc/config/t-libunwind
@@ -2,8 +2,7 @@
HOST_LIBGCC2_CFLAGS += -DUSE_GAS_SYMVER
-LIB2ADDEH = $(srcdir)/unwind-sjlj.c $(srcdir)/unwind-c.c \
- $(srcdir)/unwind-compat.c $(srcdir)/unwind-dw2-fde-compat.c
+LIB2ADDEH = $(srcdir)/unwind-sjlj.c $(srcdir)/unwind-c.c
LIB2ADDEHSTATIC = $(srcdir)/unwind-sjlj.c $(srcdir)/unwind-c.c
# Override the default value from t-slibgcc-elf-ver and mention -lunwind

View File

@@ -0,0 +1,11 @@
--- a/gcc/config/rs6000/rs6000-logue.c
+++ b/gcc/config/rs6000/rs6000-logue.c
@@ -348,7 +348,7 @@ rs6000_savres_strategy (rs6000_stack_t *
/* Define cutoff for using out-of-line functions to save registers. */
if (DEFAULT_ABI == ABI_V4 || TARGET_ELF)
{
- if (!optimize_size)
+ if (1)
{
strategy |= SAVE_INLINE_FPRS | REST_INLINE_FPRS;
strategy |= SAVE_INLINE_GPRS | REST_INLINE_GPRS;

View File

@@ -0,0 +1,11 @@
--- a/libgcc/crtstuff.c
+++ b/libgcc/crtstuff.c
@@ -152,7 +152,7 @@ call_ ## FUNC (void) \
#endif
#if !defined(USE_TM_CLONE_REGISTRY) && defined(OBJECT_FORMAT_ELF)
-# define USE_TM_CLONE_REGISTRY 1
+# define USE_TM_CLONE_REGISTRY 0
#elif !defined(USE_TM_CLONE_REGISTRY)
# define USE_TM_CLONE_REGISTRY 0
#endif

View File

@@ -0,0 +1,9 @@
--- a/libgcc/config/mips/t-mips16
+++ b/libgcc/config/mips/t-mips16
@@ -43,3 +43,6 @@ SYNC_CFLAGS = -mno-mips16
# Version these symbols if building libgcc.so.
SHLIB_MAPFILES += $(srcdir)/config/mips/libgcc-mips16.ver
+
+CRTSTUFF_T_CFLAGS += -mno-mips16
+CRTSTUFF_T_CFLAGS_S += -mno-mips16

View File

@@ -0,0 +1,146 @@
commit 99368862e44740ff4fd33760893f04e14f9dbdf1
Author: Felix Fietkau <nbd@openwrt.org>
Date: Tue Jul 31 00:52:27 2007 +0000
Port the mbsd_multi patch from freewrt, which adds -fhonour-copts. This will emit warnings in packages that don't use our target cflags properly
SVN-Revision: 8256
This patch brings over a feature from MirBSD:
* -fhonour-copts
If this option is not given, it's warned (depending
on environment variables). This is to catch errors
of misbuilt packages which override CFLAGS themselves.
This patch was authored by Thorsten Glaser <tg at mirbsd.de>
with copyright assignment to the FSF in effect.
--- a/gcc/c-family/c-opts.c
+++ b/gcc/c-family/c-opts.c
@@ -107,6 +107,9 @@ static dump_flags_t original_dump_flags;
/* Whether any standard preincluded header has been preincluded. */
static bool done_preinclude;
+/* Check if a port honours COPTS. */
+static int honour_copts = 0;
+
static void handle_OPT_d (const char *);
static void set_std_cxx98 (int);
static void set_std_cxx11 (int);
@@ -469,6 +472,12 @@ c_common_handle_option (size_t scode, co
flag_no_builtin = !value;
break;
+ case OPT_fhonour_copts:
+ if (c_language == clk_c) {
+ honour_copts++;
+ }
+ break;
+
case OPT_fconstant_string_class_:
constant_string_class_name = arg;
break;
@@ -1196,6 +1205,47 @@ c_common_init (void)
return false;
}
+ if (c_language == clk_c) {
+ char *ev = getenv ("GCC_HONOUR_COPTS");
+ int evv;
+ if (ev == NULL)
+ evv = -1;
+ else if ((*ev == '0') || (*ev == '\0'))
+ evv = 0;
+ else if (*ev == '1')
+ evv = 1;
+ else if (*ev == '2')
+ evv = 2;
+ else if (*ev == 's')
+ evv = -1;
+ else {
+ warning (0, "unknown GCC_HONOUR_COPTS value, assuming 1");
+ evv = 1; /* maybe depend this on something like MIRBSD_NATIVE? */
+ }
+ if (evv == 1) {
+ if (honour_copts == 0) {
+ error ("someone does not honour COPTS at all in lenient mode");
+ return false;
+ } else if (honour_copts != 1) {
+ warning (0, "someone does not honour COPTS correctly, passed %d times",
+ honour_copts);
+ }
+ } else if (evv == 2) {
+ if (honour_copts == 0) {
+ error ("someone does not honour COPTS at all in strict mode");
+ return false;
+ } else if (honour_copts != 1) {
+ error ("someone does not honour COPTS correctly, passed %d times",
+ honour_copts);
+ return false;
+ }
+ } else if (evv == 0) {
+ if (honour_copts != 1)
+ inform (UNKNOWN_LOCATION, "someone does not honour COPTS correctly, passed %d times",
+ honour_copts);
+ }
+ }
+
return true;
}
--- a/gcc/c-family/c.opt
+++ b/gcc/c-family/c.opt
@@ -1663,6 +1663,9 @@ C++ ObjC++ Optimization Alias(fexception
fhonor-std
C++ ObjC++ WarnRemoved
+fhonour-copts
+C ObjC C++ ObjC++ RejectNegative
+
fhosted
C ObjC
Assume normal C execution environment.
--- a/gcc/common.opt
+++ b/gcc/common.opt
@@ -1698,6 +1698,9 @@ fguess-branch-probability
Common Var(flag_guess_branch_prob) Optimization
Enable guessing of branch probabilities.
+fhonour-copts
+Common RejectNegative
+
; Nonzero means ignore `#ident' directives. 0 means handle them.
; Generate position-independent code for executables if possible
; On SVR4 targets, it also controls whether or not to emit a
--- a/gcc/doc/invoke.texi
+++ b/gcc/doc/invoke.texi
@@ -9055,6 +9055,17 @@ This option is only supported for C and
@option{-Wall} and by @option{-Wpedantic}, which can be disabled with
@option{-Wno-pointer-sign}.
+@item -fhonour-copts
+@opindex fhonour-copts
+If @env{GCC_HONOUR_COPTS} is set to 1, abort if this option is not
+given at least once, and warn if it is given more than once.
+If @env{GCC_HONOUR_COPTS} is set to 2, abort if this option is not
+given exactly once.
+If @env{GCC_HONOUR_COPTS} is set to 0 or unset, warn if this option
+is not given exactly once.
+The warning is quelled if @env{GCC_HONOUR_COPTS} is set to @samp{s}.
+This flag and environment variable only affect the C language.
+
@item -Wstack-protector
@opindex Wstack-protector
@opindex Wno-stack-protector
--- a/gcc/opts.c
+++ b/gcc/opts.c
@@ -2448,6 +2448,9 @@ common_handle_option (struct gcc_options
/* Currently handled in a prescan. */
break;
+ case OPT_fhonour_copts:
+ break;
+
case OPT_Werror:
dc->warning_as_error_requested = value;
break;

View File

@@ -0,0 +1,22 @@
Author: Jo-Philipp Wich <jow@openwrt.org>
Date: Sat Apr 21 03:02:39 2012 +0000
gcc: add patch to make the getenv() spec function nonfatal if requested environment variable is unset
SVN-Revision: 31390
--- a/gcc/gcc.c
+++ b/gcc/gcc.c
@@ -10100,8 +10100,10 @@ getenv_spec_function (int argc, const ch
}
if (!value)
- fatal_error (input_location,
- "environment variable %qs not defined", varname);
+ {
+ warning (input_location, "environment variable %qs not defined", varname);
+ value = "";
+ }
/* We have to escape every character of the environment variable so
they are not interpreted as active spec characters. A

View File

@@ -0,0 +1,168 @@
From c0c62fa4256f805389f16ebfc4a60cf789129b50 Mon Sep 17 00:00:00 2001
From: BangLang Huang <banglang.huang@foxmail.com>
Date: Wed, 9 Nov 2016 10:36:49 +0800
Subject: [PATCH] libffi: fix MIPS softfloat build issue
Backported from github.com/libffi/libffi#272
Signed-off-by: BangLang Huang <banglang.huang@foxmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
---
libffi/src/mips/n32.S | 17 +++++++++++++++++
libffi/src/mips/o32.S | 17 +++++++++++++++++
2 files changed, 34 insertions(+)
--- a/libffi/src/mips/n32.S
+++ b/libffi/src/mips/n32.S
@@ -107,6 +107,16 @@ loadregs:
REG_L t6, 3*FFI_SIZEOF_ARG($fp) # load the flags word into t6.
+#ifdef __mips_soft_float
+ REG_L a0, 0*FFI_SIZEOF_ARG(t9)
+ REG_L a1, 1*FFI_SIZEOF_ARG(t9)
+ REG_L a2, 2*FFI_SIZEOF_ARG(t9)
+ REG_L a3, 3*FFI_SIZEOF_ARG(t9)
+ REG_L a4, 4*FFI_SIZEOF_ARG(t9)
+ REG_L a5, 5*FFI_SIZEOF_ARG(t9)
+ REG_L a6, 6*FFI_SIZEOF_ARG(t9)
+ REG_L a7, 7*FFI_SIZEOF_ARG(t9)
+#else
and t4, t6, ((1<<FFI_FLAG_BITS)-1)
REG_L a0, 0*FFI_SIZEOF_ARG(t9)
beqz t4, arg1_next
@@ -193,6 +203,7 @@ arg7_next:
arg8_doublep:
l.d $f19, 7*FFI_SIZEOF_ARG(t9)
arg8_next:
+#endif
callit:
# Load the function pointer
@@ -214,6 +225,7 @@ retint:
b epilogue
retfloat:
+#ifndef __mips_soft_float
bne t6, FFI_TYPE_FLOAT, retdouble
jal t9
REG_L t4, 4*FFI_SIZEOF_ARG($fp)
@@ -272,6 +284,7 @@ retstruct_f_d:
s.s $f0, 0(t4)
s.d $f2, 8(t4)
b epilogue
+#endif
retstruct_d_soft:
bne t6, FFI_TYPE_STRUCT_D_SOFT, retstruct_f_soft
@@ -429,6 +442,7 @@ ffi_closure_N32:
REG_S a6, A6_OFF2($sp)
REG_S a7, A7_OFF2($sp)
+#ifndef __mips_soft_float
# Store all possible float/double registers.
s.d $f12, F12_OFF2($sp)
s.d $f13, F13_OFF2($sp)
@@ -438,6 +452,7 @@ ffi_closure_N32:
s.d $f17, F17_OFF2($sp)
s.d $f18, F18_OFF2($sp)
s.d $f19, F19_OFF2($sp)
+#endif
# Call ffi_closure_mips_inner_N32 to do the real work.
LA t9, ffi_closure_mips_inner_N32
@@ -458,6 +473,7 @@ cls_retint:
b cls_epilogue
cls_retfloat:
+#ifndef __mips_soft_float
bne v0, FFI_TYPE_FLOAT, cls_retdouble
l.s $f0, V0_OFF2($sp)
b cls_epilogue
@@ -500,6 +516,7 @@ cls_retstruct_f_d:
l.s $f0, V0_OFF2($sp)
l.d $f2, V1_OFF2($sp)
b cls_epilogue
+#endif
cls_retstruct_small2:
REG_L v0, V0_OFF2($sp)
--- a/libffi/src/mips/o32.S
+++ b/libffi/src/mips/o32.S
@@ -82,13 +82,16 @@ sixteen:
ADDU $sp, 4 * FFI_SIZEOF_ARG # adjust $sp to new args
+#ifndef __mips_soft_float
bnez t0, pass_d # make it quick for int
+#endif
REG_L a0, 0*FFI_SIZEOF_ARG($sp) # just go ahead and load the
REG_L a1, 1*FFI_SIZEOF_ARG($sp) # four regs.
REG_L a2, 2*FFI_SIZEOF_ARG($sp)
REG_L a3, 3*FFI_SIZEOF_ARG($sp)
b call_it
+#ifndef __mips_soft_float
pass_d:
bne t0, FFI_ARGS_D, pass_f
l.d $f12, 0*FFI_SIZEOF_ARG($sp) # load $fp regs from args
@@ -130,6 +133,7 @@ pass_f_d:
# bne t0, FFI_ARGS_F_D, call_it
l.s $f12, 0*FFI_SIZEOF_ARG($sp) # load $fp regs from args
l.d $f14, 2*FFI_SIZEOF_ARG($sp) # passing double and float
+#endif
call_it:
# Load the function pointer
@@ -158,14 +162,23 @@ retfloat:
bne t2, FFI_TYPE_FLOAT, retdouble
jalr t9
REG_L t0, SIZEOF_FRAME + 4*FFI_SIZEOF_ARG($fp)
+#ifndef __mips_soft_float
s.s $f0, 0(t0)
+#else
+ REG_S v0, 0(t0)
+#endif
b epilogue
retdouble:
bne t2, FFI_TYPE_DOUBLE, noretval
jalr t9
REG_L t0, SIZEOF_FRAME + 4*FFI_SIZEOF_ARG($fp)
+#ifndef __mips_soft_float
s.d $f0, 0(t0)
+#else
+ REG_S v1, 4(t0)
+ REG_S v0, 0(t0)
+#endif
b epilogue
noretval:
@@ -261,9 +274,11 @@ $LCFI7:
li $13, 1 # FFI_O32
bne $16, $13, 1f # Skip fp save if FFI_O32_SOFT_FLOAT
+#ifndef __mips_soft_float
# Store all possible float/double registers.
s.d $f12, FA_0_0_OFF2($fp)
s.d $f14, FA_1_0_OFF2($fp)
+#endif
1:
# Call ffi_closure_mips_inner_O32 to do the work.
la t9, ffi_closure_mips_inner_O32
@@ -281,6 +296,7 @@ $LCFI7:
li $13, 1 # FFI_O32
bne $16, $13, 1f # Skip fp restore if FFI_O32_SOFT_FLOAT
+#ifndef __mips_soft_float
li $9, FFI_TYPE_FLOAT
l.s $f0, V0_OFF2($fp)
beq $8, $9, closure_done
@@ -288,6 +304,7 @@ $LCFI7:
li $9, FFI_TYPE_DOUBLE
l.d $f0, V0_OFF2($fp)
beq $8, $9, closure_done
+#endif
1:
REG_L $3, V1_OFF2($fp)
REG_L $2, V0_OFF2($fp)

View File

@@ -0,0 +1,67 @@
From dda6b050cd74a352670787a294596a9c56c21327 Mon Sep 17 00:00:00 2001
From: Yousong Zhou <yszhou4tech@gmail.com>
Date: Fri, 4 May 2018 18:20:53 +0800
Subject: [PATCH] gotools: fix compilation when making cross compiler
libgo is "the runtime support library for the Go programming language.
This library is intended for use with the Go frontend."
gccgo will link target files with libgo.so which depends on libgcc_s.so.1, but
the linker will complain that it cannot find it. That's because shared libgcc
is not present in the install directory yet. libgo.so was made without problem
because gcc will emit -lgcc_s when compiled with -shared option. When gotools
were being made, it was supplied with -static-libgcc thus no link option was
provided. Check LIBGO in gcc/go/gcc-spec.c for how gccgo make a builtin spec
for linking with libgo.so
- GccgoCrossCompilation, https://github.com/golang/go/wiki/GccgoCrossCompilation
- Cross-building instructions, http://www.eglibc.org/archives/patches/msg00078.html
When 3-pass GCC compilation is used, shared libgcc runtime libraries will be
available after gcc pass2 completed and will meet the gotools link requirement
at gcc pass3
---
gotools/Makefile.am | 4 +++-
gotools/Makefile.in | 4 +++-
2 files changed, 6 insertions(+), 2 deletions(-)
--- a/gotools/Makefile.am
+++ b/gotools/Makefile.am
@@ -26,6 +26,7 @@ PWD_COMMAND = $${PWDCMD-pwd}
STAMP = echo timestamp >
libgodir = ../$(target_noncanonical)/libgo
+libgccdir = ../$(target_noncanonical)/libgcc
LIBGODEP = $(libgodir)/libgo.la
LIBGOTOOL = $(libgodir)/libgotool.a
@@ -41,7 +42,8 @@ GOCFLAGS = $(CFLAGS_FOR_TARGET)
GOCOMPILE = $(GOCOMPILER) $(GOCFLAGS)
AM_GOCFLAGS = -I $(libgodir)
-AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs
+AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs \
+ -L $(libgccdir) -L $(libgccdir)/.libs -lgcc_s
GOLINK = $(GOCOMPILER) $(GOCFLAGS) $(AM_GOCFLAGS) $(LDFLAGS) $(AM_LDFLAGS) -o $@
libgosrcdir = $(srcdir)/../libgo/go
--- a/gotools/Makefile.in
+++ b/gotools/Makefile.in
@@ -337,6 +337,7 @@ mkinstalldirs = $(SHELL) $(toplevel_srcd
PWD_COMMAND = $${PWDCMD-pwd}
STAMP = echo timestamp >
libgodir = ../$(target_noncanonical)/libgo
+libgccdir = ../$(target_noncanonical)/libgcc
LIBGODEP = $(libgodir)/libgo.la
LIBGOTOOL = $(libgodir)/libgotool.a
@NATIVE_FALSE@GOCOMPILER = $(GOC)
@@ -346,7 +347,8 @@ LIBGOTOOL = $(libgodir)/libgotool.a
GOCFLAGS = $(CFLAGS_FOR_TARGET)
GOCOMPILE = $(GOCOMPILER) $(GOCFLAGS)
AM_GOCFLAGS = -I $(libgodir)
-AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs
+AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs \
+ -L $(libgccdir) -L $(libgccdir)/.libs -lgcc_s
GOLINK = $(GOCOMPILER) $(GOCFLAGS) $(AM_GOCFLAGS) $(LDFLAGS) $(AM_LDFLAGS) -o $@
libgosrcdir = $(srcdir)/../libgo/go
cmdsrcdir = $(libgosrcdir)/cmd

View File

@@ -0,0 +1,45 @@
commit 9c6e71079b46ad5433165feaa2001450f2017b56
Author: Przemysław Buczkowski <prem@prem.moe>
Date: Mon Aug 16 13:16:21 2021 +0100
GCC: Patch for Apple Silicon compatibility
This patch fixes a linker error occuring when compiling
the cross-compiler on macOS and ARM64 architecture.
Adapted from:
https://github.com/richfelker/musl-cross-make/issues/116#issuecomment-823612404
Change-Id: Ia3ee98a163bbb62689f42e2da83a5ef36beb0913
Reviewed-on: https://review.haiku-os.org/c/buildtools/+/4329
Reviewed-by: John Scipione <jscipione@gmail.com>
Reviewed-by: Adrien Destugues <pulkomandy@gmail.com>
--- a/gcc/config/aarch64/aarch64.h
+++ b/gcc/config/aarch64/aarch64.h
@@ -1236,7 +1236,7 @@ extern const char *aarch64_rewrite_mcpu
#define MCPU_TO_MARCH_SPEC_FUNCTIONS \
{ "rewrite_mcpu", aarch64_rewrite_mcpu },
-#if defined(__aarch64__)
+#if defined(__aarch64__) && ! defined(__APPLE__)
extern const char *host_detect_local_cpu (int argc, const char **argv);
#define HAVE_LOCAL_CPU_DETECT
# define EXTRA_SPEC_FUNCTIONS \
--- a/gcc/config/host-darwin.c
+++ b/gcc/config/host-darwin.c
@@ -22,6 +22,8 @@
#include "coretypes.h"
#include "diagnostic-core.h"
#include "config/host-darwin.h"
+#include "hosthooks.h"
+#include "hosthooks-def.h"
/* Yes, this is really supposed to work. */
/* This allows for a pagesize of 16384, which we have on Darwin20, but should
@@ -79,3 +81,5 @@ darwin_gt_pch_use_address (void *addr, s
return ret;
}
+
+const struct host_hooks host_hooks = HOST_HOOKS_INITIALIZER;

View File

@@ -0,0 +1,73 @@
From: Jonathan Wakely <jwakely@redhat.com>
Date: Fri, 7 Jan 2022 15:21:03 +0000 (+0000)
Subject: libstdc++: Add -nostdinc++ for c++17 sources [PR100017]
X-Git-Tag: releases/gcc-11.3.0~445
X-Git-Url: https://gcc.gnu.org/git/?p=gcc.git;a=commitdiff_plain;h=01a70ccd723eb9a479186fe37c972b0d0f8676cf
libstdc++: Add -nostdinc++ for c++17 sources [PR100017]
When building a build!=host compiler, the just-built gcc can't be used
to build the target libstdc++ (because it is built for the host triplet,
not the build triplet). The top-level configure.ac sets up the build
flags for libstdc++ (and other "raw_cxx" libs) like this:
GCC_TARGET_TOOL(c++ for libstdc++, RAW_CXX_FOR_TARGET, CXX,
[gcc/xgcc -shared-libgcc -B$$r/$(HOST_SUBDIR)/gcc -nostdinc++ -L$$r/$(TARGET_SUBDIR)/libstdc++-v3/src -L$$r/$(TARGET_SUBDIR)/libstdc++-v3/src/.libs -L$$r/$(TARGET_SUBDIR)/libstdc++-v3/libsupc++/.libs],
c++)
The -nostdinc++ flag is only used for the IN-TREE-TOOL, i.e. when using
the just-built gcc/xgcc compiler. This means that the cross-compiler
used to build libstdc++ will add its own libstdc++ headers to the
include path. That results in the #include <cfenv> in
src/c++17/floating_to_chars.cc and src/c++17/floating_from_chars.cc
doing #include_next <fenv.h> and finding the libstdc++ fenv.h wrapper
from the host compiler. Because that has the same include guard as the
<fenv.h> in the libstdc++ we're trying to build, we never reach the
underlying <fenv.h> from libc. That results in several errors of the
form:
error: 'fenv_t' has not been declared in '::'
The most correct fix would be to add -nostdinc++ to the
RAW_CXX_FOR_TARGET variable in configure.ac, or the
RAW_CXX_TARGET_EXPORTS variable in Makefile.tpl.
Another solution would be to make the libstdc++ <fenv.h> wrapper use
_GLIBCXX_INCLUDE_NEXT_C_HEADERS like our <stdlib.h> and other C header
wrappers.
For now though, the simplest and safest solution is to just add
-nostdinc++ to the CXXFLAGS used for src/c++17/*.cc, which is what this
does.
libstdc++-v3/ChangeLog:
PR libstdc++/100017
* src/c++17/Makefile.am (AM_CXXFLAGS): Add -nostdinc++.
* src/c++17/Makefile.in: Regenerate.
(cherry picked from commit 4fde88e5dd152fe866a97b12e0f8229970d15cb3)
---
--- a/libstdc++-v3/src/c++17/Makefile.am
+++ b/libstdc++-v3/src/c++17/Makefile.am
@@ -79,7 +79,7 @@ endif
# OPTIMIZE_CXXFLAGS on the compile line so that -O2 can be overridden
# as the occasion calls for it.
AM_CXXFLAGS = \
- -std=gnu++17 \
+ -std=gnu++17 -nostdinc++ \
$(glibcxx_lt_pic_flag) $(glibcxx_compiler_shared_flag) \
$(XTEMPLATE_FLAGS) $(VTV_CXXFLAGS) \
$(WARN_CXXFLAGS) $(OPTIMIZE_CXXFLAGS) $(CONFIG_CXXFLAGS) \
--- a/libstdc++-v3/src/c++17/Makefile.in
+++ b/libstdc++-v3/src/c++17/Makefile.in
@@ -455,7 +455,7 @@ libc__17convenience_la_SOURCES = $(sourc
# OPTIMIZE_CXXFLAGS on the compile line so that -O2 can be overridden
# as the occasion calls for it.
AM_CXXFLAGS = \
- -std=gnu++17 \
+ -std=gnu++17 -nostdinc++ \
$(glibcxx_lt_pic_flag) $(glibcxx_compiler_shared_flag) \
$(XTEMPLATE_FLAGS) $(VTV_CXXFLAGS) \
$(WARN_CXXFLAGS) $(OPTIMIZE_CXXFLAGS) $(CONFIG_CXXFLAGS) \

View File

@@ -1,28 +0,0 @@
commit 1877bc9d8f2be143fbe530347a945850d0ecd234
Author: Steven Barth <cyrus@openwrt.org>
Date: Mon Jun 22 10:31:07 2015 +0000
gcc/musl: rework SSP-support
Make musl provide libssp_nonshared.a and make GCC link it unconditionally
if musl is used. This should be a no-op if SSP is disabled and seems to be
the only reliable way of dealing with SSP over all packages due to the mess
that is linkerflags handling in packages.
Signed-off-by: Steven Barth <steven@midlink.org>
SVN-Revision: 46108
--- a/gcc/gcc.c
+++ b/gcc/gcc.c
@@ -861,7 +861,9 @@ proper position among the other output f
#endif
#ifndef LINK_SSP_SPEC
-#ifdef TARGET_LIBC_PROVIDES_SSP
+#if DEFAULT_LIBC == LIBC_MUSL
+#define LINK_SSP_SPEC "-lssp_nonshared"
+#elif defined(TARGET_LIBC_PROVIDES_SSP)
#define LINK_SSP_SPEC "%{fstack-protector|fstack-protector-all" \
"|fstack-protector-strong|fstack-protector-explicit:}"
#else

View File

@@ -1,34 +0,0 @@
From: ktkachov <ktkachov@138bc75d-0d04-0410-961f-82ee72b054a4>
Date: Wed, 22 Apr 2015 14:20:01 +0000 (+0000)
Subject: unwind fix for musl
X-Git-Url: https://gcc.gnu.org/git/?p=gcc.git;a=commitdiff_plain;h=a2e31d0681d8a47389b8a3552622fbd9827bcef4
unwind fix for musl
On behalf of szabolcs.nagy@arm.com
2015-04-22 Gregor Richards <gregor.richards@uwaterloo.ca>
Szabolcs Nagy <szabolcs.nagy@arm.com>
* unwind-dw2-fde-dip.c (USE_PT_GNU_EH_FRAME): Define it on
Linux if target provides dl_iterate_phdr.
git-svn-id: svn+ssh://gcc.gnu.org/svn/gcc/trunk@222328 138bc75d-0d04-0410-961f-82ee72b054a4
---
--- a/libgcc/unwind-dw2-fde-dip.c
+++ b/libgcc/unwind-dw2-fde-dip.c
@@ -65,6 +65,12 @@
#if !defined(inhibit_libc) && defined(HAVE_LD_EH_FRAME_HDR) \
&& defined(TARGET_DL_ITERATE_PHDR) \
+ && defined(__linux__)
+# define USE_PT_GNU_EH_FRAME
+#endif
+
+#if !defined(inhibit_libc) && defined(HAVE_LD_EH_FRAME_HDR) \
+ && defined(TARGET_DL_ITERATE_PHDR) \
&& (defined(__DragonFly__) || defined(__FreeBSD__))
# define ElfW __ElfN
# define USE_PT_GNU_EH_FRAME

View File

@@ -0,0 +1,14 @@
diff -u --recursive gcc-8.4.0-vanilla/gcc/real.h gcc-8.4.0/gcc/real.h
--- gcc-8.4.0-vanilla/gcc/real.h 2020-03-04 02:30:01.000000000 -0600
+++ gcc-8.4.0/gcc/real.h 2022-05-18 17:02:22.708820427 -0500
@@ -70,8 +70,10 @@
+ (REAL_VALUE_TYPE_SIZE%HOST_BITS_PER_WIDE_INT ? 1 : 0)) /* round up */
/* Verify the guess. */
+#ifndef __LP64__
extern char test_real_width
[sizeof (REAL_VALUE_TYPE) <= REAL_WIDTH * sizeof (HOST_WIDE_INT) ? 1 : -1];
+#endif
/* Calculate the format for CONST_DOUBLE. We need as many slots as
are necessary to overlay a REAL_VALUE_TYPE on them. This could be

View File

@@ -0,0 +1,35 @@
commit 098bd91f5eae625c7d2ee621e10930fc4434e5e2
Author: Luka Perkov <luka@openwrt.org>
Date: Tue Feb 26 16:16:33 2013 +0000
gcc: don't build documentation
This closes #13039.
Signed-off-by: Luka Perkov <luka@openwrt.org>
SVN-Revision: 35807
--- a/gcc/Makefile.in
+++ b/gcc/Makefile.in
@@ -3204,18 +3204,10 @@ doc/gcc.info: $(TEXI_GCC_FILES)
doc/gccint.info: $(TEXI_GCCINT_FILES)
doc/cppinternals.info: $(TEXI_CPPINT_FILES)
-doc/%.info: %.texi
- if [ x$(BUILD_INFO) = xinfo ]; then \
- $(MAKEINFO) $(MAKEINFOFLAGS) -I . -I $(gcc_docdir) \
- -I $(gcc_docdir)/include -o $@ $<; \
- fi
+doc/%.info:
# Duplicate entry to handle renaming of gccinstall.info
-doc/gccinstall.info: $(TEXI_GCCINSTALL_FILES)
- if [ x$(BUILD_INFO) = xinfo ]; then \
- $(MAKEINFO) $(MAKEINFOFLAGS) -I $(gcc_docdir) \
- -I $(gcc_docdir)/include -o $@ $<; \
- fi
+doc/gccinstall.info:
doc/cpp.dvi: $(TEXI_CPP_FILES)
doc/gcc.dvi: $(TEXI_GCC_FILES)

View File

@@ -0,0 +1,20 @@
Fix https://gcc.gnu.org/bugzilla/show_bug.cgi?id=84790.
MIPS16 functions have a static assembler prologue which clobbers
registers v0 and v1. Add these register clobbers to function call
instructions.
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -3102,6 +3102,12 @@ mips_emit_call_insn (rtx pattern, rtx or
emit_insn (gen_update_got_version ());
}
+ if (TARGET_MIPS16 && TARGET_USE_GOT)
+ {
+ clobber_reg (&CALL_INSN_FUNCTION_USAGE (insn), MIPS16_PIC_TEMP);
+ clobber_reg (&CALL_INSN_FUNCTION_USAGE (insn), MIPS_PROLOGUE_TEMP (word_mode));
+ }
+
if (TARGET_MIPS16
&& TARGET_EXPLICIT_RELOCS
&& TARGET_CALL_CLOBBERED_GP)

View File

@@ -0,0 +1,13 @@
--- a/gcc/gcc.c
+++ b/gcc/gcc.c
@@ -868,7 +868,9 @@ proper position among the other output f
#endif
#ifndef LINK_SSP_SPEC
-#ifdef TARGET_LIBC_PROVIDES_SSP
+#if DEFAULT_LIBC == LIBC_MUSL
+#define LINK_SSP_SPEC "-lssp_nonshared"
+#elif defined(TARGET_LIBC_PROVIDES_SSP)
#define LINK_SSP_SPEC "%{fstack-protector|fstack-protector-all" \
"|fstack-protector-strong|fstack-protector-explicit:}"
#else

View File

@@ -0,0 +1,21 @@
commit ecf7671b769fe96f7b5134be442089f8bdba55d2
Author: Felix Fietkau <nbd@nbd.name>
Date: Thu Aug 4 20:29:45 2016 +0200
gcc: add a patch to generate better code with Os on mips
Also happens to reduce compressed code size a bit
Signed-off-by: Felix Fietkau <nbd@nbd.name>
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -19847,7 +19847,7 @@ mips_option_override (void)
flag_pcc_struct_return = 0;
/* Decide which rtx_costs structure to use. */
- if (optimize_size)
+ if (0 && optimize_size)
mips_cost = &mips_rtx_cost_optimize_size;
else
mips_cost = &mips_rtx_cost_data[mips_tune];

View File

@@ -0,0 +1,11 @@
--- a/gcc/config/arm/arm.h
+++ b/gcc/config/arm/arm.h
@@ -155,7 +155,7 @@ extern tree arm_fp16_type_node;
/* Thumb-1 only. */
#define TARGET_THUMB1_ONLY (TARGET_THUMB1 && !arm_arch_notm)
-#define TARGET_LDRD (arm_arch5e && ARM_DOUBLEWORD_ALIGN \
+#define TARGET_LDRD (arm_arch6 && ARM_DOUBLEWORD_ALIGN \
&& !TARGET_THUMB1)
#define TARGET_CRC32 (arm_arch_crc)

View File

@@ -0,0 +1,33 @@
commit 8570c4be394cff7282f332f97da2ff569a927ddb
Author: Imre Kaloz <kaloz@openwrt.org>
Date: Wed Feb 2 20:06:12 2011 +0000
fixup arm soft-float symbols
SVN-Revision: 25325
--- a/libgcc/config/arm/t-linux
+++ b/libgcc/config/arm/t-linux
@@ -1,6 +1,10 @@
LIB1ASMSRC = arm/lib1funcs.S
LIB1ASMFUNCS = _udivsi3 _divsi3 _umodsi3 _modsi3 _dvmd_lnx _clzsi2 _clzdi2 \
- _ctzsi2 _arm_addsubdf3 _arm_addsubsf3
+ _ctzsi2 _arm_addsubdf3 _arm_addsubsf3 \
+ _arm_negdf2 _arm_muldivdf3 _arm_cmpdf2 _arm_unorddf2 \
+ _arm_fixdfsi _arm_fixunsdfsi _arm_truncdfsf2 \
+ _arm_negsf2 _arm_muldivsf3 _arm_cmpsf2 _arm_unordsf2 \
+ _arm_fixsfsi _arm_fixunssfsi
# Just for these, we omit the frame pointer since it makes such a big
# difference.
--- a/gcc/config/arm/linux-elf.h
+++ b/gcc/config/arm/linux-elf.h
@@ -58,8 +58,6 @@
%{shared:-lc} \
%{!shared:%{profile:-lc_p}%{!profile:-lc}}"
-#define LIBGCC_SPEC "%{mfloat-abi=soft*:-lfloat} -lgcc"
-
#define GLIBC_DYNAMIC_LINKER "/lib/ld-linux.so.2"
#define LINUX_TARGET_LINK_SPEC "%{h*} \

View File

@@ -0,0 +1,44 @@
commit c96312958c0621e72c9b32da5bc224ffe2161384
Author: Felix Fietkau <nbd@openwrt.org>
Date: Mon Oct 19 23:26:09 2009 +0000
gcc: create a proper libgcc_pic.a static library for relinking (4.3.3+ for now, backport will follow)
SVN-Revision: 18086
--- a/libgcc/Makefile.in
+++ b/libgcc/Makefile.in
@@ -923,11 +923,12 @@ $(libgcov-driver-objects): %$(objext): $
# Static libraries.
libgcc.a: $(libgcc-objects)
+libgcc_pic.a: $(libgcc-s-objects)
libgcov.a: $(libgcov-objects)
libunwind.a: $(libunwind-objects)
libgcc_eh.a: $(libgcc-eh-objects)
-libgcc.a libgcov.a libunwind.a libgcc_eh.a:
+libgcc.a libgcov.a libunwind.a libgcc_eh.a libgcc_pic.a:
-rm -f $@
objects="$(objects)"; \
@@ -948,7 +949,7 @@ all: libunwind.a
endif
ifeq ($(enable_shared),yes)
-all: libgcc_eh.a libgcc_s$(SHLIB_EXT)
+all: libgcc_eh.a libgcc_pic.a libgcc_s$(SHLIB_EXT)
ifneq ($(LIBUNWIND),)
all: libunwind$(SHLIB_EXT)
libgcc_s$(SHLIB_EXT): libunwind$(SHLIB_EXT)
@@ -1154,6 +1155,10 @@ install-shared:
chmod 644 $(DESTDIR)$(inst_libdir)/libgcc_eh.a
$(RANLIB) $(DESTDIR)$(inst_libdir)/libgcc_eh.a
+ $(INSTALL_DATA) libgcc_pic.a $(mapfile) $(DESTDIR)$(inst_libdir)/
+ chmod 644 $(DESTDIR)$(inst_libdir)/libgcc_pic.a
+ $(RANLIB) $(DESTDIR)$(inst_libdir)/libgcc_pic.a
+
$(subst @multilib_dir@,$(MULTIDIR),$(subst \
@shlib_base_name@,libgcc_s,$(subst \
@shlib_slibdir_qual@,$(MULTIOSSUBDIR),$(SHLIB_INSTALL))))

View File

@@ -50,5 +50,5 @@ Date: Sun Feb 12 20:25:47 2012 +0000
+#define LIBGCC_SPEC "%{!static:%{!static-libgcc:-lgcc_s}} -lgcc"
+
#undef LINK_SHLIB_SPEC
#define LINK_SHLIB_SPEC "%{shared:-shared} %{!shared: %{static:-static}}"
#define LINK_SHLIB_SPEC "%{shared:-shared} %{!shared: %{static:-static}} \
%{static-pie:-static -pie --no-dynamic-linker -z text}"

View File

@@ -0,0 +1,22 @@
commit 64661de100da1ec1061ef3e5e400285dce115e6b
Author: Felix Fietkau <nbd@openwrt.org>
Date: Sun May 10 13:16:35 2015 +0000
gcc: add some size optimization patches
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 45664
--- a/libgcc/config/t-libunwind
+++ b/libgcc/config/t-libunwind
@@ -2,8 +2,7 @@
HOST_LIBGCC2_CFLAGS += -DUSE_GAS_SYMVER
-LIB2ADDEH = $(srcdir)/unwind-sjlj.c $(srcdir)/unwind-c.c \
- $(srcdir)/unwind-compat.c $(srcdir)/unwind-dw2-fde-compat.c
+LIB2ADDEH = $(srcdir)/unwind-sjlj.c $(srcdir)/unwind-c.c
LIB2ADDEHSTATIC = $(srcdir)/unwind-sjlj.c $(srcdir)/unwind-c.c
# Override the default value from t-slibgcc-elf-ver and mention -lunwind

View File

@@ -0,0 +1,11 @@
--- a/gcc/config/rs6000/rs6000.c
+++ b/gcc/config/rs6000/rs6000.c
@@ -24780,7 +24780,7 @@ rs6000_savres_strategy (rs6000_stack_t *
/* Define cutoff for using out-of-line functions to save registers. */
if (DEFAULT_ABI == ABI_V4 || TARGET_ELF)
{
- if (!optimize_size)
+ if (1)
{
strategy |= SAVE_INLINE_FPRS | REST_INLINE_FPRS;
strategy |= SAVE_INLINE_GPRS | REST_INLINE_GPRS;

View File

@@ -0,0 +1,11 @@
--- a/libgcc/crtstuff.c
+++ b/libgcc/crtstuff.c
@@ -152,7 +152,7 @@ call_ ## FUNC (void) \
#endif
#if !defined(USE_TM_CLONE_REGISTRY) && defined(OBJECT_FORMAT_ELF)
-# define USE_TM_CLONE_REGISTRY 1
+# define USE_TM_CLONE_REGISTRY 0
#endif
/* We do not want to add the weak attribute to the declarations of these

View File

@@ -0,0 +1,9 @@
--- a/libgcc/config/mips/t-mips16
+++ b/libgcc/config/mips/t-mips16
@@ -43,3 +43,6 @@ SYNC_CFLAGS = -mno-mips16
# Version these symbols if building libgcc.so.
SHLIB_MAPFILES += $(srcdir)/config/mips/libgcc-mips16.ver
+
+CRTSTUFF_T_CFLAGS += -mno-mips16
+CRTSTUFF_T_CFLAGS_S += -mno-mips16

View File

@@ -17,7 +17,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
--- a/gcc/c-family/c-opts.c
+++ b/gcc/c-family/c-opts.c
@@ -108,6 +108,9 @@ static int class_dump_flags;
@@ -107,6 +107,9 @@ static dump_flags_t original_dump_flags;
/* Whether any standard preincluded header has been preincluded. */
static bool done_preinclude;
@@ -27,7 +27,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
static void handle_OPT_d (const char *);
static void set_std_cxx98 (int);
static void set_std_cxx11 (int);
@@ -456,6 +459,12 @@ c_common_handle_option (size_t scode, co
@@ -459,6 +462,12 @@ c_common_handle_option (size_t scode, co
flag_no_builtin = !value;
break;
@@ -40,7 +40,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
case OPT_fconstant_string_class_:
constant_string_class_name = arg;
break;
@@ -1084,6 +1093,47 @@ c_common_init (void)
@@ -1125,6 +1134,47 @@ c_common_init (void)
return false;
}
@@ -80,7 +80,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
+ }
+ } else if (evv == 0) {
+ if (honour_copts != 1)
+ inform (0, "someone does not honour COPTS correctly, passed %d times",
+ inform (UNKNOWN_LOCATION, "someone does not honour COPTS correctly, passed %d times",
+ honour_copts);
+ }
+ }
@@ -90,7 +90,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
--- a/gcc/c-family/c.opt
+++ b/gcc/c-family/c.opt
@@ -1412,6 +1412,9 @@ C++ ObjC++ Optimization Alias(fexception
@@ -1469,6 +1469,9 @@ C++ ObjC++ Optimization Alias(fexception
fhonor-std
C++ ObjC++ Ignore Warn(switch %qs is no longer supported)
@@ -102,7 +102,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
Assume normal C execution environment.
--- a/gcc/common.opt
+++ b/gcc/common.opt
@@ -1510,6 +1510,9 @@ fguess-branch-probability
@@ -1551,6 +1551,9 @@ fguess-branch-probability
Common Report Var(flag_guess_branch_prob) Optimization
Enable guessing of branch probabilities.
@@ -114,7 +114,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
; On SVR4 targets, it also controls whether or not to emit a
--- a/gcc/opts.c
+++ b/gcc/opts.c
@@ -1954,6 +1954,9 @@ common_handle_option (struct gcc_options
@@ -2073,6 +2073,9 @@ common_handle_option (struct gcc_options
opts, opts_set, loc, dc);
break;
@@ -126,7 +126,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
opts->x_warn_larger_than = value != -1;
--- a/gcc/doc/invoke.texi
+++ b/gcc/doc/invoke.texi
@@ -6572,6 +6572,17 @@ This option is only supported for C and
@@ -7013,6 +7013,17 @@ This option is only supported for C and
@option{-Wall} and by @option{-Wpedantic}, which can be disabled with
@option{-Wno-pointer-sign}.

View File

@@ -7,7 +7,7 @@ Date: Sat Apr 21 03:02:39 2012 +0000
--- a/gcc/gcc.c
+++ b/gcc/gcc.c
@@ -9281,8 +9281,10 @@ getenv_spec_function (int argc, const ch
@@ -9347,8 +9347,10 @@ getenv_spec_function (int argc, const ch
value = varname;
if (!value)

View File

@@ -48,9 +48,9 @@ sellcey@mips.com
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -22567,6 +22567,9 @@ mips_promote_function_mode (const_tree t
#undef TARGET_CUSTOM_FUNCTION_DESCRIPTORS
#define TARGET_CUSTOM_FUNCTION_DESCRIPTORS 2
@@ -22640,6 +22640,9 @@ mips_starting_frame_offset (void)
#undef TARGET_STARTING_FRAME_OFFSET
#define TARGET_STARTING_FRAME_OFFSET mips_starting_frame_offset
+#undef TARGET_ASM_FILE_END
+#define TARGET_ASM_FILE_END file_end_indicate_exec_stack

View File

@@ -0,0 +1,168 @@
From c0c62fa4256f805389f16ebfc4a60cf789129b50 Mon Sep 17 00:00:00 2001
From: BangLang Huang <banglang.huang@foxmail.com>
Date: Wed, 9 Nov 2016 10:36:49 +0800
Subject: [PATCH] libffi: fix MIPS softfloat build issue
Backported from github.com/libffi/libffi#272
Signed-off-by: BangLang Huang <banglang.huang@foxmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
---
libffi/src/mips/n32.S | 17 +++++++++++++++++
libffi/src/mips/o32.S | 17 +++++++++++++++++
2 files changed, 34 insertions(+)
--- a/libffi/src/mips/n32.S
+++ b/libffi/src/mips/n32.S
@@ -107,6 +107,16 @@ loadregs:
REG_L t6, 3*FFI_SIZEOF_ARG($fp) # load the flags word into t6.
+#ifdef __mips_soft_float
+ REG_L a0, 0*FFI_SIZEOF_ARG(t9)
+ REG_L a1, 1*FFI_SIZEOF_ARG(t9)
+ REG_L a2, 2*FFI_SIZEOF_ARG(t9)
+ REG_L a3, 3*FFI_SIZEOF_ARG(t9)
+ REG_L a4, 4*FFI_SIZEOF_ARG(t9)
+ REG_L a5, 5*FFI_SIZEOF_ARG(t9)
+ REG_L a6, 6*FFI_SIZEOF_ARG(t9)
+ REG_L a7, 7*FFI_SIZEOF_ARG(t9)
+#else
and t4, t6, ((1<<FFI_FLAG_BITS)-1)
REG_L a0, 0*FFI_SIZEOF_ARG(t9)
beqz t4, arg1_next
@@ -193,6 +203,7 @@ arg7_next:
arg8_doublep:
l.d $f19, 7*FFI_SIZEOF_ARG(t9)
arg8_next:
+#endif
callit:
# Load the function pointer
@@ -214,6 +225,7 @@ retint:
b epilogue
retfloat:
+#ifndef __mips_soft_float
bne t6, FFI_TYPE_FLOAT, retdouble
jal t9
REG_L t4, 4*FFI_SIZEOF_ARG($fp)
@@ -272,6 +284,7 @@ retstruct_f_d:
s.s $f0, 0(t4)
s.d $f2, 8(t4)
b epilogue
+#endif
retstruct_d_soft:
bne t6, FFI_TYPE_STRUCT_D_SOFT, retstruct_f_soft
@@ -429,6 +442,7 @@ ffi_closure_N32:
REG_S a6, A6_OFF2($sp)
REG_S a7, A7_OFF2($sp)
+#ifndef __mips_soft_float
# Store all possible float/double registers.
s.d $f12, F12_OFF2($sp)
s.d $f13, F13_OFF2($sp)
@@ -438,6 +452,7 @@ ffi_closure_N32:
s.d $f17, F17_OFF2($sp)
s.d $f18, F18_OFF2($sp)
s.d $f19, F19_OFF2($sp)
+#endif
# Call ffi_closure_mips_inner_N32 to do the real work.
LA t9, ffi_closure_mips_inner_N32
@@ -458,6 +473,7 @@ cls_retint:
b cls_epilogue
cls_retfloat:
+#ifndef __mips_soft_float
bne v0, FFI_TYPE_FLOAT, cls_retdouble
l.s $f0, V0_OFF2($sp)
b cls_epilogue
@@ -500,6 +516,7 @@ cls_retstruct_f_d:
l.s $f0, V0_OFF2($sp)
l.d $f2, V1_OFF2($sp)
b cls_epilogue
+#endif
cls_retstruct_small2:
REG_L v0, V0_OFF2($sp)
--- a/libffi/src/mips/o32.S
+++ b/libffi/src/mips/o32.S
@@ -82,13 +82,16 @@ sixteen:
ADDU $sp, 4 * FFI_SIZEOF_ARG # adjust $sp to new args
+#ifndef __mips_soft_float
bnez t0, pass_d # make it quick for int
+#endif
REG_L a0, 0*FFI_SIZEOF_ARG($sp) # just go ahead and load the
REG_L a1, 1*FFI_SIZEOF_ARG($sp) # four regs.
REG_L a2, 2*FFI_SIZEOF_ARG($sp)
REG_L a3, 3*FFI_SIZEOF_ARG($sp)
b call_it
+#ifndef __mips_soft_float
pass_d:
bne t0, FFI_ARGS_D, pass_f
l.d $f12, 0*FFI_SIZEOF_ARG($sp) # load $fp regs from args
@@ -130,6 +133,7 @@ pass_f_d:
# bne t0, FFI_ARGS_F_D, call_it
l.s $f12, 0*FFI_SIZEOF_ARG($sp) # load $fp regs from args
l.d $f14, 2*FFI_SIZEOF_ARG($sp) # passing double and float
+#endif
call_it:
# Load the function pointer
@@ -158,14 +162,23 @@ retfloat:
bne t2, FFI_TYPE_FLOAT, retdouble
jalr t9
REG_L t0, SIZEOF_FRAME + 4*FFI_SIZEOF_ARG($fp)
+#ifndef __mips_soft_float
s.s $f0, 0(t0)
+#else
+ REG_S v0, 0(t0)
+#endif
b epilogue
retdouble:
bne t2, FFI_TYPE_DOUBLE, noretval
jalr t9
REG_L t0, SIZEOF_FRAME + 4*FFI_SIZEOF_ARG($fp)
+#ifndef __mips_soft_float
s.d $f0, 0(t0)
+#else
+ REG_S v1, 4(t0)
+ REG_S v0, 0(t0)
+#endif
b epilogue
noretval:
@@ -261,9 +274,11 @@ $LCFI7:
li $13, 1 # FFI_O32
bne $16, $13, 1f # Skip fp save if FFI_O32_SOFT_FLOAT
+#ifndef __mips_soft_float
# Store all possible float/double registers.
s.d $f12, FA_0_0_OFF2($fp)
s.d $f14, FA_1_0_OFF2($fp)
+#endif
1:
# Call ffi_closure_mips_inner_O32 to do the work.
la t9, ffi_closure_mips_inner_O32
@@ -281,6 +296,7 @@ $LCFI7:
li $13, 1 # FFI_O32
bne $16, $13, 1f # Skip fp restore if FFI_O32_SOFT_FLOAT
+#ifndef __mips_soft_float
li $9, FFI_TYPE_FLOAT
l.s $f0, V0_OFF2($fp)
beq $8, $9, closure_done
@@ -288,6 +304,7 @@ $LCFI7:
li $9, FFI_TYPE_DOUBLE
l.d $f0, V0_OFF2($fp)
beq $8, $9, closure_done
+#endif
1:
REG_L $3, V1_OFF2($fp)
REG_L $2, V0_OFF2($fp)

View File

@@ -34,33 +34,34 @@ at gcc pass3
+libgccdir = ../$(target_noncanonical)/libgcc
LIBGODEP = $(libgodir)/libgo.la
if NATIVE
@@ -38,7 +39,8 @@ endif
GOCFLAGS = $(CFLAGS_FOR_TARGET)
LIBGOTOOL = $(libgodir)/libgotool.a
@@ -41,7 +42,8 @@ GOCFLAGS = $(CFLAGS_FOR_TARGET)
GOCOMPILE = $(GOCOMPILER) $(GOCFLAGS)
AM_GOCFLAGS = -I $(libgodir)
-AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs
+AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs \
+ -L $(libgccdir) -L $(libgccdir)/.libs -lgcc_s
GOLINK = $(GOCOMPILER) $(GOCFLAGS) $(AM_GOCFLAGS) $(LDFLAGS) $(AM_LDFLAGS) -o $@
cmdsrcdir = $(srcdir)/../libgo/go/cmd
libgosrcdir = $(srcdir)/../libgo/go
--- a/gotools/Makefile.in
+++ b/gotools/Makefile.in
@@ -252,13 +252,15 @@ mkinstalldirs = $(SHELL) $(toplevel_srcd
@@ -263,6 +263,7 @@ mkinstalldirs = $(SHELL) $(toplevel_srcd
PWD_COMMAND = $${PWDCMD-pwd}
STAMP = echo timestamp >
libgodir = ../$(target_noncanonical)/libgo
+libgccdir = ../$(target_noncanonical)/libgcc
LIBGODEP = $(libgodir)/libgo.la
LIBGOTOOL = $(libgodir)/libgotool.a
@NATIVE_FALSE@GOCOMPILER = $(GOC)
# Use the compiler we just built.
@@ -271,7 +272,8 @@ LIBGOTOOL = $(libgodir)/libgotool.a
@NATIVE_TRUE@GOCOMPILER = $(GOC_FOR_TARGET) $(XGCC_FLAGS_FOR_TARGET)
GOCOMPILE = $(GOCOMPILER) $(GOCFLAGS)
AM_GOCFLAGS = -I $(libgodir)
-AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs
+AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs \
+ -L $(libgccdir) -L $(libgccdir)/.libs -lgcc_s
GOLINK = $(GOCOMPILER) $(GOCFLAGS) $(AM_GOCFLAGS) $(LDFLAGS) $(AM_LDFLAGS) -o $@
cmdsrcdir = $(srcdir)/../libgo/go/cmd
go_cmd_go_files = \
libgosrcdir = $(srcdir)/../libgo/go
cmdsrcdir = $(libgosrcdir)/cmd

View File

@@ -1,32 +0,0 @@
commit b050f87d13b5dc7ed82feb9a90f4529de58bdf25
Author: Felix Fietkau <nbd@openwrt.org>
Date: Wed Feb 19 19:20:10 2014 +0000
gcc: prevent the use of LDRD/STRD on ARMv5TE
These instructions are for 64-bit load/store. On ARMv5TE, the CPU
requires addresses to be aligned to 64-bit. When misaligned, behavior is
undefined (effectively either loads the same word twice on LDRD, or
corrupts surrounding memory on STRD).
On ARMv6 and newer, unaligned access is safe.
Removing these instructions for ARMv5TE is necessary, because GCC
ignores alignment information in pointers and does unsafe optimizations
that have shown up as bugs in various places.
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39638
--- a/gcc/config/arm/arm.h
+++ b/gcc/config/arm/arm.h
@@ -150,7 +150,7 @@ extern tree arm_fp16_type_node;
/* Thumb-1 only. */
#define TARGET_THUMB1_ONLY (TARGET_THUMB1 && !arm_arch_notm)
-#define TARGET_LDRD (arm_arch5e && ARM_DOUBLEWORD_ALIGN \
+#define TARGET_LDRD (arm_arch6 && ARM_DOUBLEWORD_ALIGN \
&& !TARGET_THUMB1)
#define TARGET_CRC32 (arm_arch_crc)

View File

@@ -1,18 +0,0 @@
commit d8c570a1531035c3e26bcd94741e5f5b9c36b5d9
Author: Felix Fietkau <nbd@openwrt.org>
Date: Mon Mar 5 00:51:01 2012 +0000
gcc: do not emit references to _savegpr_* and _restgpr_* on powerpc, as they are tricky to deal with wrt. libgcc. they cannot be linked dynamically
SVN-Revision: 30814
--- a/gcc/config/rs6000/rs6000.c
+++ b/gcc/config/rs6000/rs6000.c
@@ -26981,7 +26981,7 @@ rs6000_savres_strategy (rs6000_stack_t *
/* Define cutoff for using out-of-line functions to save registers. */
if (DEFAULT_ABI == ABI_V4 || TARGET_ELF)
{
- if (!optimize_size)
+ if (1)
{
strategy |= SAVE_INLINE_FPRS | REST_INLINE_FPRS;
strategy |= SAVE_INLINE_GPRS | REST_INLINE_GPRS;

View File

@@ -1,22 +0,0 @@
commit 565988ab47bd9b96b50608564aee2104aeb4b7ae
Author: Felix Fietkau <nbd@nbd.name>
Date: Tue Dec 13 14:20:49 2016 +0100
gcc: rip out transactional memory related bloat from crtbegin
Slightly improves compression for each executable, saving about 4k from
the default ar71xx rootfs
Signed-off-by: Felix Fietkau <nbd@nbd.name>
--- a/libgcc/crtstuff.c
+++ b/libgcc/crtstuff.c
@@ -152,7 +152,7 @@ call_ ## FUNC (void) \
#endif
#if !defined(USE_TM_CLONE_REGISTRY) && defined(OBJECT_FORMAT_ELF)
-# define USE_TM_CLONE_REGISTRY 1
+# define USE_TM_CLONE_REGISTRY 0
#endif
/* We do not want to add the weak attribute to the declarations of these

View File

@@ -1,30 +0,0 @@
commit 9dc38e48f7a6f88b7ac7bfaced91f53660204e46
Author: Florian Fainelli <florian@openwrt.org>
Date: Fri Apr 5 12:36:06 2013 +0000
toolchain/gcc: .init and .fini need to pick one ISA
The .init and .fini sections are built by concatenating code
fragments. Putting mips16 code in the middle of a mips32 code block
doesn't work. Make gcc built the magic crt stuff in no-mips16 mode.
This is specific to 4.6-linaro but is probably portable to other gcc
flavors. Adding this to the t-libgcc-mips16 makefile fragment is a
hack not suitable for pushing upstream, but there is no mips/t-linux
or mips/t-uclibc and I am not going to touch gcc/configure for two
lines.
Signed-off-by: Jay Carlson <nop@nop.com>
Signed-off-by: Florian Fainelli <florian@openwrt.org>
SVN-Revision: 36200
--- a/libgcc/config/mips/t-mips16
+++ b/libgcc/config/mips/t-mips16
@@ -43,3 +43,6 @@ SYNC_CFLAGS = -mno-mips16
# Version these symbols if building libgcc.so.
SHLIB_MAPFILES += $(srcdir)/config/mips/libgcc-mips16.ver
+
+CRTSTUFF_T_CFLAGS += -mno-mips16
+CRTSTUFF_T_CFLAGS_S += -mno-mips16

View File

@@ -1,33 +0,0 @@
commit 548d9a008ff265e9eaa3c7e0e6e301c6bd5645e6
Author: Felix Fietkau <nbd@openwrt.org>
Date: Fri Dec 12 17:01:57 2014 +0000
gcc: don't clobber stamp-bits with a symlink to itself
Several versions of gcc have an issue in libstdc++v3 where the build may
clobber stamp-bits with a link to itself. This doesn't manifest itself
on all systems. On several Ubuntu systems, this doesn't appear to be a
problem, but it is an issue on Fedora 16 systems.
To fix the issue, we'll simply filter out stamp-bits from the symlinks
to be generated.
Note: gcc 4.4.7 is unaffected by this issue, so no fix is necessary
there.
Signed-off-by: John Szakmeister <john@szakmeister.net>
SVN-Revision: 43669
--- a/libstdc++-v3/include/Makefile.in
+++ b/libstdc++-v3/include/Makefile.in
@@ -1474,7 +1474,7 @@ stamp-bits: ${bits_headers}
@$(STAMP) stamp-bits
stamp-bits-sup: stamp-bits ${bits_sup_headers}
- @-cd ${bits_builddir} && $(LN_S) $? . 2>/dev/null
+ @-cd ${bits_builddir} && $(LN_S) $(filter-out stamp-bits,$?) . 2>/dev/null
@$(STAMP) stamp-bits-sup
stamp-c_base: ${c_base_headers}

View File

@@ -1,181 +0,0 @@
commit 331735a357a73c7b8adc205241ac3cc6543d985e
Author: Felix Fietkau <nbd@openwrt.org>
Date: Tue Nov 17 12:38:22 2015 +0000
gcc: add a patch to 5.x that supports translation of __FILE__ paths
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 47490
Forward ported from attachment to https://gcc.gnu.org/bugzilla/show_bug.cgi?id=47047
--- a/gcc/c-family/c-opts.c
+++ b/gcc/c-family/c-opts.c
@@ -588,6 +588,10 @@ c_common_handle_option (size_t scode, co
add_path (xstrdup (arg), SYSTEM, 0, true);
break;
+ case OPT_iremap:
+ add_cpp_remap_path (arg);
+ break;
+
case OPT_iwithprefix:
add_prefixed_path (arg, SYSTEM);
break;
--- a/gcc/c-family/c.opt
+++ b/gcc/c-family/c.opt
@@ -1825,6 +1825,10 @@ iquote
C ObjC C++ ObjC++ Joined Separate MissingArgError(missing path after %qs)
-iquote <dir> Add <dir> to the end of the quote include path.
+iremap
+C ObjC C++ ObjC++ Joined Separate
+-iremap <src:dst> Convert <src> to <dst> if it occurs as prefix in __FILE__.
+
iwithprefix
C ObjC C++ ObjC++ Joined Separate
-iwithprefix <dir> Add <dir> to the end of the system include path.
--- a/gcc/doc/cpp.texi
+++ b/gcc/doc/cpp.texi
@@ -4272,6 +4272,7 @@ Refer to the GCC manual for full documen
@c man begin SYNOPSIS
cpp [@option{-D}@var{macro}[=@var{defn}]@dots{}] [@option{-U}@var{macro}]
[@option{-I}@var{dir}@dots{}] [@option{-iquote}@var{dir}@dots{}]
+ [@option{-iremap}@var{src}:@var{dst}]
[@option{-M}|@option{-MM}] [@option{-MG}] [@option{-MF} @var{filename}]
[@option{-MP}] [@option{-MQ} @var{target}@dots{}]
[@option{-MT} @var{target}@dots{}]
--- a/gcc/doc/cppopts.texi
+++ b/gcc/doc/cppopts.texi
@@ -220,6 +220,12 @@ extensions @samp{.i}, @samp{.ii} or @sam
extensions that GCC uses for preprocessed files created by
@option{-save-temps}.
+@item -iremap @var{src}:@var{dst}
+@opindex iremap
+Replace the prefix @var{src} in __FILE__ with @var{dst} at expansion time.
+This option can be specified more than once. Processing stops at the first
+match.
+
@item -fdirectives-only
@opindex fdirectives-only
When preprocessing, handle directives, but do not expand macros.
--- a/gcc/doc/invoke.texi
+++ b/gcc/doc/invoke.texi
@@ -11871,6 +11871,12 @@ by @option{-fplugin=@var{name}} instead
@option{-fplugin=@var{path}/@var{name}.so}. This option is not meant
to be used by the user, but only passed by the driver.
+@item -iremap @var{src}:@var{dst}
+@opindex iremap
+Replace the prefix @var{src} in __FILE__ with @var{dst} at expansion time.
+This option can be specified more than once. Processing stops at the first
+match.
+
@item -L@var{dir}
@opindex L
Add directory @var{dir} to the list of directories to be searched
--- a/libcpp/include/cpplib.h
+++ b/libcpp/include/cpplib.h
@@ -820,6 +820,9 @@ extern void cpp_set_lang (cpp_reader *,
/* Set the include paths. */
extern void cpp_set_include_chains (cpp_reader *, cpp_dir *, cpp_dir *, int);
+/* Provide src:dst pair for __FILE__ remapping. */
+extern void add_cpp_remap_path (const char *);
+
/* Call these to get pointers to the options, callback, and deps
structures for a given reader. These pointers are good until you
call cpp_finish on that reader. You can either edit the callbacks
--- a/libcpp/macro.c
+++ b/libcpp/macro.c
@@ -227,6 +227,64 @@ static const char * const monthnames[] =
"Jul", "Aug", "Sep", "Oct", "Nov", "Dec"
};
+static size_t remap_pairs;
+static char **remap_src;
+static char **remap_dst;
+
+void
+add_cpp_remap_path (const char *arg)
+{
+ const char *arg_dst;
+ size_t len;
+
+ arg_dst = strchr(arg, ':');
+ if (arg_dst == NULL)
+ {
+ fprintf(stderr, "Invalid argument for -iremap\n");
+ exit(1);
+ }
+
+ len = arg_dst - arg;
+ ++arg_dst;
+
+ remap_src = (char **) xrealloc(remap_src, sizeof(char *) * (remap_pairs + 1));
+ remap_dst = (char **) xrealloc(remap_dst, sizeof(char *) * (remap_pairs + 1));
+
+ remap_src[remap_pairs] = (char *) xmalloc(len + 1);
+ memcpy(remap_src[remap_pairs], arg, len);
+ remap_src[remap_pairs][len] = '\0';
+ remap_dst[remap_pairs] = xstrdup(arg_dst);
+ ++remap_pairs;
+}
+
+static const char *
+cpp_remap_file (const char *arg, char **tmp_name)
+{
+ char *result;
+ size_t i, len;
+
+ for (i = 0; i < remap_pairs; ++i)
+ {
+ len = strlen (remap_src[i]);
+ if (strncmp (remap_src[i], arg, len))
+ continue;
+ if (arg[len] == '\0')
+ return xstrdup (remap_dst[i]);
+ if (arg[len] != '/')
+ continue;
+ arg += len;
+ len = strlen (remap_dst[i]);
+ result = (char *) xmalloc (len + strlen (arg) + 1);
+ memcpy(result, remap_dst[i], len);
+ strcpy(result + len, arg);
+ *tmp_name = result;
+
+ return result;
+ }
+
+ return arg;
+}
+
/* Helper function for builtin_macro. Returns the text generated by
a builtin macro. */
const uchar *
@@ -290,6 +348,7 @@ _cpp_builtin_macro_text (cpp_reader *pfi
{
unsigned int len;
const char *name;
+ char *tmp_name = NULL;
uchar *buf;
if (node->value.builtin == BT_FILE)
@@ -301,6 +360,7 @@ _cpp_builtin_macro_text (cpp_reader *pfi
if (!name)
abort ();
}
+ name = cpp_remap_file (name, &tmp_name);
len = strlen (name);
buf = _cpp_unaligned_alloc (pfile, len * 2 + 3);
result = buf;
@@ -308,6 +368,7 @@ _cpp_builtin_macro_text (cpp_reader *pfi
buf = cpp_quote_string (buf + 1, (const unsigned char *) name, len);
*buf++ = '"';
*buf = '\0';
+ free (tmp_name);
}
break;

View File

@@ -1,42 +0,0 @@
--- a/libitm/beginend.cc
+++ b/libitm/beginend.cc
@@ -431,7 +431,7 @@ GTM::gtm_transaction_cp::save(gtm_thread
// Save everything that we might have to restore on restarts or aborts.
jb = tx->jb;
undolog_size = tx->undolog.size();
- memcpy(&alloc_actions, &tx->alloc_actions, sizeof(alloc_actions));
+ alloc_actions = tx->alloc_actions;
user_actions_size = tx->user_actions.size();
id = tx->id;
prop = tx->prop;
@@ -449,7 +449,7 @@ GTM::gtm_transaction_cp::commit(gtm_thre
// commits of nested transactions. Allocation actions must be committed
// before committing the snapshot.
tx->jb = jb;
- memcpy(&tx->alloc_actions, &alloc_actions, sizeof(alloc_actions));
+ tx->alloc_actions = alloc_actions;
tx->id = id;
tx->prop = prop;
}
@@ -485,7 +485,7 @@ GTM::gtm_thread::rollback (gtm_transacti
prop = cp->prop;
if (cp->disp != abi_disp())
set_abi_disp(cp->disp);
- memcpy(&alloc_actions, &cp->alloc_actions, sizeof(alloc_actions));
+ alloc_actions = cp->alloc_actions;
nesting = cp->nesting;
}
else
--- a/libitm/method-ml.cc
+++ b/libitm/method-ml.cc
@@ -138,7 +138,9 @@ struct ml_mg : public method_group
// This store is only executed while holding the serial lock, so relaxed
// memory order is sufficient here. Same holds for the memset.
time.store(0, memory_order_relaxed);
- memset(orecs, 0, sizeof(atomic<gtm_word>) * L2O_ORECS);
+ void *p = orecs;
+ memset(p, 0, sizeof(atomic<gtm_word>) * L2O_ORECS);
+
}
};

View File

@@ -16,6 +16,7 @@ PKG_HASH:=ef9c7e61822b7cb8356e6e9e1dca58d9556f3200d78acab35e4347e9d4c2bbaf
PKG_MAINTAINER:=Rosen Penev <rosenp@gmail.com>
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=COPYING
PKG_CPE_ID:=cpe:/a:pkgconf:pkgconf
PKG_INSTALL:=1

View File

@@ -2,7 +2,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=miredo
PKG_VERSION:=1.2.6
PKG_RELEASE:=2
PKG_RELEASE:=3
PKG_SOURCE:=miredo-$(PKG_VERSION).tar.xz
PKG_SOURCE_URL:=https://www.remlab.net/files/miredo/
@@ -36,6 +36,10 @@ define Package/miredo/description
IPv6 connectivity even from behind NAT devices.
endef
define Package/miredo/conffiles
/etc/miredo/miredo.conf
endef
CONFIGURE_ARGS+= \
--enable-shared \
--enable-static \

View File

@@ -20,7 +20,7 @@ define KernelPackage/fs-antfs
TITLE:=AVM NTFS Read/Write Driver
FILES:=$(PKG_BUILD_DIR)/antfs.ko
AUTOLOAD:=$(call AutoLoad,30,antfs,1)
DEPENDS:=+kmod-nls-base
DEPENDS:=+kmod-nls-base @LINUX_5_10
endef
define KernelPackage/fs-antfs/description

View File

@@ -15,6 +15,7 @@ PKG_SOURCE_DATE:=2021-07-13
PKG_MIRROR_HASH:=811a4b0bbefe14cf4a74dbb3d45f5ae147f50f1d67dbb6f0fe3e5a9888adf49a
PKG_MAINTAINER:=Michel Promonet <michel.promonet@free.fr>
PKG_CPE_ID:=cpe:/o:v4l2loopback_project:v4l2loopback
include $(INCLUDE_DIR)/package.mk

View File

@@ -56,7 +56,7 @@ configure() {
if [ "$GO_INSTALL_ALL" != 1 ]; then
code="$(printf '%s\n' "$files" | grep '\.\(c\|cc\|cpp\|go\|h\|hh\|hpp\|proto\|s\)$')"
testdata="$(printf '%s\n' "$files" | grep '/testdata/')"
gomod="$(printf '%s\n' "$files" | grep '/go\.\(mod\|sum\)$')"
gomod="$(printf '%s\n' "$files" | grep '/go\.\(mod\|sum\|work\)$')"
for pattern in $GO_INSTALL_EXTRA; do
extra="$(printf '%s\n' "$extra"; printf '%s\n' "$files" | grep -e "$pattern")"

View File

@@ -107,10 +107,10 @@ GO_HOST_CUSTOM_LDFLAGS= \
GO_HOST_INSTALL_ARGS= \
-v \
-ldflags "all=$(GO_HOST_DEFAULT_LDFLAGS)" \
$(if $(filter $(GO_HOST_ENABLE_PIE),1),-buildmode pie) \
$(if $(GO_HOST_GCFLAGS),-gcflags "$(GO_HOST_GCFLAGS)") \
$(if $(GO_HOST_CUSTOM_LDFLAGS),-ldflags "$(GO_HOST_CUSTOM_LDFLAGS) $(GO_HOST_DEFAULT_LDFLAGS)") \
$(if $(GO_HOST_TAGS),-tags "$(GO_HOST_TAGS)")
$(if $(GO_HOST_ENABLE_PIE),-buildmode pie) \
$(if $(strip $(GO_HOST_GCFLAGS)),-gcflags "$(GO_HOST_GCFLAGS)") \
$(if $(strip $(GO_HOST_CUSTOM_LDFLAGS)),-ldflags "$(GO_HOST_CUSTOM_LDFLAGS) $(GO_HOST_DEFAULT_LDFLAGS)") \
$(if $(strip $(GO_HOST_TAGS)),-tags "$(GO_HOST_TAGS)")
define GoHost/Host/Configure
$(GO_GENERAL_BUILD_CONFIG_VARS) \

View File

@@ -32,7 +32,7 @@ include $(GO_INCLUDE_DIR)/golang-values.mk
#
# * Files in any 'testdata' directory
#
# * go.mod and go.sum, in any directory
# * go.mod, go.sum and go.work, in any directory
#
# e.g. GO_PKG_INSTALL_EXTRA:=example.toml marshal_test.toml
#
@@ -198,9 +198,11 @@ GO_PKG_TARGET_VARS= \
GOOS="$(GO_OS)" \
GOARCH="$(GO_ARCH)" \
GO386="$(GO_386)" \
GOAMD64="$(GO_AMD64)" \
GOARM="$(GO_ARM)" \
GOMIPS="$(GO_MIPS)" \
GOMIPS64="$(GO_MIPS64)" \
GOPPC64="$(GO_PPC64)" \
CGO_ENABLED=1 \
CC="$(TARGET_CC)" \
CXX="$(TARGET_CXX)" \
@@ -236,17 +238,18 @@ GO_PKG_CUSTOM_LDFLAGS= \
GO_PKG_INSTALL_ARGS= \
-v \
-buildvcs=false \
-trimpath \
-ldflags "all=$(GO_PKG_DEFAULT_LDFLAGS)" \
$(if $(GO_PKG_DEFAULT_GCFLAGS),-gcflags "all=$(GO_PKG_DEFAULT_GCFLAGS)") \
$(if $(GO_PKG_DEFAULT_ASMFLAGS),-asmflags "all=$(GO_PKG_DEFAULT_ASMFLAGS)") \
$(if $(filter $(GO_PKG_ENABLE_PIE),1),-buildmode pie) \
$(if $(strip $(GO_PKG_DEFAULT_GCFLAGS)),-gcflags "all=$(GO_PKG_DEFAULT_GCFLAGS)") \
$(if $(strip $(GO_PKG_DEFAULT_ASMFLAGS)),-asmflags "all=$(GO_PKG_DEFAULT_ASMFLAGS)") \
$(if $(GO_PKG_ENABLE_PIE),-buildmode pie) \
$(if $(filter $(GO_ARCH),arm),-installsuffix "v$(GO_ARM)") \
$(if $(filter $(GO_ARCH),mips mipsle),-installsuffix "$(GO_MIPS)") \
$(if $(filter $(GO_ARCH),mips64 mips64le),-installsuffix "$(GO_MIPS64)") \
$(if $(GO_PKG_GCFLAGS),-gcflags "$(GO_PKG_GCFLAGS) $(GO_PKG_DEFAULT_GCFLAGS)") \
$(if $(GO_PKG_CUSTOM_LDFLAGS),-ldflags "$(GO_PKG_CUSTOM_LDFLAGS) $(GO_PKG_DEFAULT_LDFLAGS)") \
$(if $(GO_PKG_TAGS),-tags "$(GO_PKG_TAGS)")
$(if $(strip $(GO_PKG_GCFLAGS)),-gcflags "$(GO_PKG_GCFLAGS) $(GO_PKG_DEFAULT_GCFLAGS)") \
$(if $(strip $(GO_PKG_CUSTOM_LDFLAGS)),-ldflags "$(GO_PKG_CUSTOM_LDFLAGS) $(GO_PKG_DEFAULT_LDFLAGS)") \
$(if $(strip $(GO_PKG_TAGS)),-tags "$(GO_PKG_TAGS)")
define GoPackage/Build/Configure
$(GO_GENERAL_BUILD_CONFIG_VARS) \

View File

@@ -29,7 +29,8 @@ unexport \
GOOS \
GOPATH \
GOROOT \
GOTMPDIR
GOTMPDIR \
GOWORK
# Unmodified:
# GOINSECURE
# GOPRIVATE
@@ -58,8 +59,10 @@ unexport \
unexport \
GOARM \
GO386 \
GOAMD64 \
GOMIPS \
GOMIPS64 \
GOPPC64 \
GOWASM
# Special-purpose environment variables:
@@ -74,6 +77,7 @@ unexport \
# From https://pkg.go.dev/runtime#hdr-Environment_Variables
unexport \
GOGC \
GOMEMLIMIT \
GOMAXPROCS \
GORACE \
GOTRACEBACK
@@ -86,13 +90,12 @@ unexport \
# CC_FOR_${GOOS}_${GOARCH}
# CXX_FOR_${GOOS}_${GOARCH}
# From https://golang.org/doc/install/source#environment
# From https://go.dev/doc/install/source#environment
unexport \
GOHOSTOS \
GOHOSTARCH \
GOPPC64
GOHOSTARCH
# From https://golang.org/src/make.bash
# From https://go.dev/src/make.bash
unexport \
GO_GCFLAGS \
GO_LDFLAGS \
@@ -101,16 +104,16 @@ unexport \
GOBUILDTIMELOGFILE \
GOROOT_BOOTSTRAP
# From https://golang.org/doc/go1.9#parallel-compile
# From https://go.dev/doc/go1.9#parallel-compile
unexport \
GO19CONCURRENTCOMPILATION
# From https://golang.org/src/cmd/dist/build.go
# From https://go.dev/src/cmd/dist/build.go
unexport \
BOOT_GO_GCFLAGS \
BOOT_GO_LDFLAGS
# From https://golang.org/src/cmd/dist/buildtool.go
# From https://go.dev/src/cmd/dist/buildtool.go
unexport \
GOBOOTSTRAP_TOOLEXEC
@@ -152,6 +155,9 @@ ifeq ($(GO_ARCH),386)
# -fno-plt: causes "unexpected GOT reloc for non-dynamic symbol" errors
GO_CFLAGS_TO_REMOVE:=-fno-plt
else ifeq ($(GO_ARCH),amd64)
GO_AMD64:=v1
else ifeq ($(GO_ARCH),arm)
GO_TARGET_FPU:=$(word 2,$(subst +,$(space),$(call qstrip,$(CONFIG_CPU_TYPE))))
@@ -183,6 +189,9 @@ else ifneq ($(filter $(GO_ARCH),mips64 mips64le),)
GO_MIPS64:=softfloat
endif
else ifeq ($(GO_ARCH),ppc64)
GO_PPC64:=power8
endif
@@ -193,7 +202,7 @@ GO_ARCH_DEPENDS:=@(aarch64||arm||i386||i686||mips||mips64||mips64el||mipsel||pow
# ASLR/PIE
# From https://golang.org/src/cmd/internal/sys/supported.go
# From https://go.dev/src/cmd/internal/sys/supported.go
GO_PIE_SUPPORTED_OS_ARCH:= \
android_386 android_amd64 android_arm android_arm64 \
linux_386 linux_amd64 linux_arm linux_arm64 \
@@ -209,7 +218,7 @@ GO_PIE_SUPPORTED_OS_ARCH:= \
\
linux_ppc64le linux_riscv64 linux_s390x
# From https://golang.org/src/cmd/go/internal/work/init.go
# From https://go.dev/src/cmd/go/internal/work/init.go
go_pie_install_suffix=$(if $(filter $(1),aix_ppc64 windows_386 windows_amd64 windows_arm),,shared)
ifneq ($(filter $(GO_HOST_OS_ARCH),$(GO_PIE_SUPPORTED_OS_ARCH)),)

View File

@@ -7,8 +7,8 @@
include $(TOPDIR)/rules.mk
GO_VERSION_MAJOR_MINOR:=1.17
GO_VERSION_PATCH:=8
GO_VERSION_MAJOR_MINOR:=1.19
GO_VERSION_PATCH:=13
PKG_NAME:=golang
PKG_VERSION:=$(GO_VERSION_MAJOR_MINOR)$(if $(GO_VERSION_PATCH),.$(GO_VERSION_PATCH))
@@ -20,7 +20,7 @@ GO_SOURCE_URLS:=https://dl.google.com/go/ \
PKG_SOURCE:=go$(PKG_VERSION).src.tar.gz
PKG_SOURCE_URL:=$(GO_SOURCE_URLS)
PKG_HASH:=2effcd898140da79a061f3784ca4f8d8b13d811fb2abe9dad2404442dabbdf7a
PKG_HASH:=ccf36b53fb0024a017353c3ddb22c1f00bc7a8073c6aac79042da24ee34434d3
PKG_MAINTAINER:=Jeffery To <jeffery.to@gmail.com>
PKG_LICENSE:=BSD-3-Clause
@@ -65,7 +65,7 @@ HOST_GO_VALID_OS_ARCH:= \
\
linux_ppc64 linux_ppc64le \
linux_mips linux_mipsle linux_mips64 linux_mips64le \
linux_riscv64 linux_s390x \
linux_loong64 linux_riscv64 linux_s390x \
\
openbsd_mips64
@@ -262,10 +262,11 @@ $(eval $(call GoCompiler/AddProfile,Package,$(PKG_BUILD_DIR),$(PKG_GO_PREFIX),$(
PKG_GO_ZBOOTSTRAP_MODS:= \
s/defaultGO386 = `[^`]*`/defaultGO386 = `$(or $(GO_386),sse2)`/; \
s/defaultGOAMD64 = `[^`]*`/defaultGOAMD64 = `$(or $(GO_AMD64),v1)`/; \
s/defaultGOARM = `[^`]*`/defaultGOARM = `$(or $(GO_ARM),5)`/; \
s/defaultGOMIPS = `[^`]*`/defaultGOMIPS = `$(or $(GO_MIPS),hardfloat)`/; \
s/defaultGOMIPS64 = `[^`]*`/defaultGOMIPS64 = `$(or $(GO_MIPS64),hardfloat)`/; \
s/defaultGOPPC64 = `[^`]*`/defaultGOPPC64 = `power8`/;
s/defaultGOPPC64 = `[^`]*`/defaultGOPPC64 = `$(or $(GO_PPC64),power8)`/;
PKG_GO_ZBOOTSTRAP_PATH:=$(PKG_BUILD_DIR)/src/internal/buildcfg/zbootstrap.go
@@ -290,10 +291,9 @@ PKG_GO_LDFLAGS= \
-extldflags '$(patsubst -z%,-Wl$(comma)-z$(comma)%,$(TARGET_LDFLAGS))' \
$(if $(CONFIG_NO_STRIP)$(CONFIG_DEBUG),,-s -w)
# setting -trimpath is not necessary here because the paths inside the
# compiler binary are relative to GOROOT_FINAL (PKG_GO_ROOT), which is
# static / not dependent on the build environment
PKG_GO_INSTALL_ARGS= \
-buildvcs=false \
-trimpath \
-ldflags "all=$(PKG_GO_LDFLAGS)" \
$(if $(PKG_GO_GCFLAGS),-gcflags "all=$(PKG_GO_GCFLAGS)") \
$(if $(PKG_GO_ASMFLAGS),-asmflags "all=$(PKG_GO_ASMFLAGS)") \

Some files were not shown because too many files have changed in this diff Show More