Commit Graph

34449 Commits

Author SHA1 Message Date
Peter van Dijk
005600b4e6 pdns-recursor: update to 5.2.5
includes fix for CVE-2025-30192 (which was in 5.2.4)

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2025-08-18 23:39:37 +02:00
John Audia
341006475b libpam: add upstream patch/fix build mold linker
Add backport fixing the build with mold linker and remove the no-mold flag.

See: https://github.com/linux-pam/linux-pam/issues/922 and
https://github.com/linux-pam/linux-pam/pull/928

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc (Intel N150 based box)

Signed-off-by: John Audia <therealgraysky@proton.me>
2025-08-18 23:38:18 +02:00
George Sapkin
9318a5fefb yt-dlp: bump to 2025.08.11
Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.08.11
Signed-off-by: George Sapkin <george@sapk.in>
2025-08-18 23:36:58 +02:00
Roc Lai
c7782e0a92 frp: bump to 0.64.0
Change log is available at https://github.com/fatedier/frp/compare/v0.51.3...v0.64.0

Signed-off-by: Roc Lai <laipeng668@qq.com>
2025-08-17 19:18:01 +03:00
Austin Lane
c536549ee5 libprotobuf-c: Update to v1.5.2
Update libprotobuf-c to version 1.5.2.
Notably, adds support for protobuf >=26

Signed-off-by: Austin Lane <vidplace7@gmail.com>
2025-08-17 19:10:23 +03:00
Nathaniel Wesley Filardo
99393c9ef8 lua-argparse: bump to luarocks' 0.7.1
Bump lua-argparse to the luarocks argparse 0.7.1 release.

Signed-off-by: Nathaniel Wesley Filardo <nwfilardo@gmail.com>
2025-08-17 19:09:11 +03:00
Glenn Strauss
62dbf8c87f lighttpd: update to lighttpd 1.4.81 release hash
https://www.lighttpd.net/2025/8/17/1.4.81/

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2025-08-17 16:30:15 +03:00
Gregory Gullin
a2ed55180b sing-box: update to 1.12.1
changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.12.1

Signed-off-by: Gregory Gullin <garuwex@gmail.com>
2025-08-17 10:28:41 +03:00
W. Michael Petullo
ade9ad4316 sendmail: fix building as non-root user
Buildbot builds started failing with this:

[...]
install -c -o buildbot -g buildbot -m 644 ../../include/libmilter/mfapi.h /builder/shared-workdir/build/sdk/build_dir/target-x86_64_musl/sendmail-8.16.1/ipkg-install/usr/include/libmilter/mfapi.h
install: invalid user 'buildbot'

Extend 010-enable-nonroot-install.patch to remove "-o U -g G" from more
install targets.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
2025-08-17 07:33:45 +03:00
Rosen Penev
8c2f7dc867 coova-chilli: fix compilation with GCC15
No idea how this even worked. cmdsock never got closed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2025-08-16 11:01:23 +03:00
W. Michael Petullo
aa34a44827 krb5: update to 1.22
Upstream list of changes is available at
https://web.mit.edu/kerberos/krb5-1.22/krb5-1.22.html.

Of note is that this release fixes the build with GCC 15.1.  As with
other recent versions, GCC 15.1 transforms some warnings into errors,
and this release remediates those warnings, now errors.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
2025-08-16 11:00:29 +03:00
Eric Fahlgren
c79bed5fd5 owut: update to 2025.08.15
Bug fixes:
    efahl/owut@c6e75716d1 init: fix typo in file name
    efahl/owut@7f97ab67c2 examples: improve docs for writing pre-install scripts
Enhancements:
    efahl/owut@93f2b06b88 owut: utilize upstream limits instead of hardcoded values
    efahl/owut@7a45c412fc owut: improve usability of 'dump' option
    efahl/owut@35720e369a owut: improve age reporting

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
2025-08-16 10:59:26 +03:00
Wei-Ting Yang
6d9d0d2bf8 python-certifi: update to 2025.8.3
Fix CVE-2024-39689.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
2025-08-15 23:24:03 -03:00
Wei-Ting Yang
dc6724fca5 python-certifi: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:certifi:certifi

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
2025-08-15 23:24:03 -03:00
Philip Prindeville
ae8a2d515d isc-dhcpd: quote filenames for safety
Per best practices, we should protect against wildcards in
variable expansions.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2025-08-14 21:43:00 -06:00
Philip Prindeville
824a344a4a isc-dhcp: fix spacing on forced parameters
If there's a "forced_send" option, then put spaces between multiple
parameter codes.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2025-08-14 21:43:00 -06:00
Philip Prindeville
a97218b6c7 isc-dhcp: distinguish between hexstrings and strings
It's a minor difference and they're handled the same, but that
might change as we move to Kea.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2025-08-14 21:43:00 -06:00
Philip Prindeville
3d2a8e3f8c isc-dhcp: clean up 'if' formatting
We don't use a consistent format of bracket-semicolon, so fix it.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2025-08-14 21:43:00 -06:00
Christian Korber
05d604a9fb packages/net-snmp: fix typo
CONFILTS is changed to CONFLICTS to enable condition.

Signed-off-by: Christian Korber <ck@dev.tdt.de>
2025-08-14 22:42:02 +03:00
Wei-Ting Yang
23646be59e python-urllib3: update to 2.0.7
Fix CVE-2023-45803 and CVE-2023-43804.

Full changelogs:
- https://github.com/urllib3/urllib3/releases/tag/v2.0.5
- https://github.com/urllib3/urllib3/releases/tag/2.0.6
- https://github.com/urllib3/urllib3/releases/tag/2.0.7

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
2025-08-14 15:48:28 +02:00
Josef Schlehofer
3686cbe417 python3: update to version 3.11.13
Release notes:
https://docs.python.org/release/3.11.13/whatsnew/changelog.html#python-3-11-13

Fixes CVEs:
CVE 2024-12718
CVE 2025-4138
CVE 2025-4330
CVE 2025-4517

Patch refreshed

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-08-14 15:48:04 +02:00
Til Kaiser
1afc4f5436 mstflint: update to 4.33.0
This commit updates the mstflint package to
the latest 4.33.0 release.

Obsolete patches have been removed,
as they are now included in this version.

Signed-off-by: Til Kaiser <mail@tk154.de>
2025-08-14 21:10:56 +08:00
Liu Yu
418131400e kea: fix kea.init error handling
kea.init returned 0 for invalid service names.
Print an error to stderr and return 1 to indicate failure.

Signed-off-by: Liu Yu <f78fk@live.com>
2025-08-14 21:09:34 +08:00
Liu Yu
ba33ab9370 kea: update to 2.6.4
Upstream changelog:
https://downloads.isc.org/isc/kea/2.6.4/Kea-2.6.4-ReleaseNotes.txt

Signed-off-by: Liu Yu <f78fk@live.com>
2025-08-14 21:09:34 +08:00
Tianling Shen
651d18f623 cloudflared: Update to 2025.8.0
Release note: https://github.com/cloudflare/cloudflared/releases/tag/2025.8.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-08-14 21:07:33 +08:00
Alexandru Ardelean
12738a8eec django: allow test.sh only for python3-django package
No idea how this worked before.
But the '/usr/bin/django-admin' is available only for python3-django

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-08-14 15:10:10 +03:00
Alexandru Ardelean
52620adeed python-requests: bump to version 2.32.4
This change updates the Python requests package to version 2.32.4

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-08-14 15:10:10 +03:00
Alexandru Ardelean
2c2c7a9de4 numpy: bump to version 2.3.2
This change bumps numpy to 2.3.2

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-08-14 15:10:10 +03:00
Alexandru Ardelean
eecc9a97db django-restframework: bump to version 3.16.1
This change updates django-restframework to 3.16.1

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-08-14 15:10:10 +03:00
Alexandru Ardelean
0f0c757a6e squashfs-tools: bump to version 4.7
This updates squashfs-tools to version 4.7

Tweaked build option flags.

Need to backport patch from upstream to fix compiler error for pid_t type.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-08-14 15:09:43 +03:00
Bjørn Mork
2749f0a3af dbus: fix ujail configuration
Running dbus as an unprivileged user fails for two reasons: Cannot write pid file
and cannot read the installed policies:

 Tue Aug  5 17:12:41 2025 daemon.info dbus-daemon[8568]: jail: exec-ing /usr/bin/dbus-daemon
 Tue Aug  5 17:12:41 2025 daemon.info dbus-daemon[8585]: Encountered error 'Failed to open "/etc/dbus-1/system.d/org.freedesktop.ModemManager1.conf": Permission denied' while parsing '/etc/dbus-1/system.d/org.freedesktop.ModemManager1.conf'
 Tue Aug  5 17:12:41 2025 daemon.err dbus-daemon[8568]: dbus-daemon[8585]: Encountered error 'Failed to open "/etc/dbus-1/system.d/org.freedesktop.ModemManager1.conf": Permission denied' while parsing '/etc/dbus-1/system.d/org.freedesktop.ModemManager1.conf'
 Tue Aug  5 17:12:41 2025 daemon.warn dbus-daemon[8585]: Failed to start message bus: Failed to open "/var/run/dbus.pid": Permission denied
 Tue Aug  5 17:12:41 2025 daemon.err dbus-daemon[8568]: dbus-daemon[8585]: Failed to start message bus: Failed to open "/var/run/dbus.pid": Permission denied
 Tue Aug  5 17:12:41 2025 daemon.info dbus-daemon[8568]: jail: jail (8585) exited with exit: 1

Fix by dropping the pid file when running unprivileged and changing the owner
of the installed policies.

Fixes: f238d6dd09 ("dbus: run as regular user rather than as root")
Signed-off-by: Bjørn Mork <bjorn@mork.no>
2025-08-14 10:58:04 +02:00
Rosen Penev
8b84b03b94 gkrellmd: update to 2.4.0
Fixes compilation with GCC15.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2025-08-14 12:00:01 +08:00
Rosen Penev
7648e25568 perl-file-rsyncp: update to 0.76
Fix compilation with GCC15.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2025-08-14 11:59:36 +08:00
Fabian Lipken
79c293e91c python-pycares: bump to 4.10.0
python-pycares: bump from version 4.8.0 to 4.10.0

Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
2025-08-14 11:58:43 +08:00
Tianling Shen
0ec95bd1f4 lttng-tools: fix build with libxml 2.14
Backport a pending patch to fix build with libxml 2.14.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-08-13 14:17:00 +08:00
Alexandru Ardelean
ba6ce219c5 openblas: bump to version 0.3.30
This change updates the version to 0.3.30
Added patch to fix x86 builds.

Also sent upstream:
   https://github.com/OpenMathLib/OpenBLAS/pull/5418

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-08-13 09:03:20 +03:00
Stan Grishin
e810f0afae pbr: update to 1.1.8-34
* bugfix: json init was destroying procd_triggers and screwing boot up
  fixes https://github.com/openwrt/packages/issues/27194
* improvement: explicit printf calls in get_text

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-08-12 13:31:42 -07:00
Alexandru Ardelean
1e391d0520 sudo: bump to version 1.9.17p2
This change bumps sudo to version 1.9.17p2

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-08-12 20:56:54 +02:00
Rosen Penev
39d0a49c0d tcpreplay: compile as gnu11
Fixes compilation under GCC15.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2025-08-12 11:37:06 +03:00
Philip Prindeville
808d025126 isc-dhcp: fix build issues with stricter compilers
The new gcc in the toolchain is failing K&R style prototypes. There
are also some function pointers passed as parameters that didn't
have prototypes so were causing incompatible pointer clashes.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2025-08-11 17:51:51 -06:00
Florian Eckert
f9f7e388ba net-snmp: fix recursive dependency
Fixes recursive dependency during 'make menuconfig'

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-08-11 14:44:37 +02:00
Rosen Penev
f34e6fb265 krb5: build as C11
Fixes compilation with GCC 15.

The upstream patch fixing compilation is way too huge to backport.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2025-08-11 17:13:06 +08:00
Fabian Lipken
08a431f446 fx: update to 39.0.1
update fx from version 36.0.3 to 39.0.1

Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
2025-08-11 17:12:37 +08:00
Rosen Penev
8f0f27e24f unixodbc: compile as gnu11
Fixes compilation with GCC15. Properly fixing this is too convoluted.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2025-08-11 17:12:05 +08:00
Rosen Penev
9bb8db08d0 libyaml-cpp: fix pkgconfig file
This avoids leaking OS paths.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2025-08-11 17:11:25 +08:00
Rosen Penev
0f743e07c1 rsyslog: update to 8.2506.0
Fixes compilation with GCC15.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2025-08-11 17:10:46 +08:00
Rosen Penev
4112edb940 make: fix compilation with GCC15
Extra define is neede.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2025-08-11 10:33:29 +02:00
Javier Marcet
7f0b734e92 docker-compose: Update to version 2.39.2
Release notes:
https://github.com/docker/compose/releases/tag/v2.39.2

Signed-off-by: Javier Marcet <javier@marcet.info>
2025-08-11 16:21:59 +08:00
Florian Eckert
b0845b93ff net-snmp: bump PKG_RELEASE
Bump PKG_RELEASE by one.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-08-11 08:13:44 +02:00
Christian Korber
035c279d56 net-snmp: save pid to file
This commit saves the pid to a file in '/var/run'.

Signed-off-by: Christian Korber <ck@dev.tdt.de>
2025-08-11 08:13:44 +02:00