Commit Graph
30573 Commits
Author SHA1 Message Date
Stijn Tintel af48372e37 kea: bump to 2.4.0
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2023-10-08 14:19:18 -07:00
Stijn Tintel 58558c8834 kea: bump to 2.2.1
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2023-10-08 14:19:18 -07:00
David Bauer 3f7f33d8be cudy-bdinfo: add package
This program can be used to obtain information stored on the bdinfo
parition found on routers from Shenzhen Cudy Technology.

While this tool is not necessary for operation with OpenWrt, it can be
helpful to decrypt information generated by the stock firmware as well
as to obtain additional device-specific information.

Signed-off-by: David Bauer <mail@david-bauer.net>
2023-10-08 23:11:29 +02:00
Nuno Gonçalves 597df3585f esp2net: add Espressif ESP chip USB-Network proxy
Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>
2023-10-08 17:40:50 +01:00
Glenn Strauss 3e9b2d85f0 lighttpd: update to lighttpd 1.4.72 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2023-10-08 20:41:16 +08:00
Jianhui Zhao e65aed298c lua-eco: update to 3.0.1
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2023-10-08 14:08:00 +03:00
Olivier Poitrey 4e0d43a8d9 nextdns: Update to version 1.41.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2023-10-08 14:06:57 +03:00
Sergey Ponomarev fdaf530950 sshtunnel: update version to 5.1
Make it depends on ether Dropbear dbclient or OpenSSH client

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev 1a92dbcf32 sshtunnel: allow empty port and user
A user may have some host configured in the .ssh/config with user and port.
But we anyway have to specify them in the sshtunnel.
The change fixes this

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev 9ea6f35194 sshtunnel: add enabled option
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev 9dd8a62238 sshtunnel: allow empty remoteaddress
Just empty or * may have some semantic difference on a server

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev 1d9f10a135 sshtunnel: StrictHostKeyChecking for Dropbear
The dbclient doesn't support the -o StrictHostKeyChecking but it has it's own -y option:
-y    Always accept remote host key if unknown
-y -y Don't perform any remote host key checking (caution)

So we can add these options to make the StrictHostKeyChecking working.
The dbclient will ignore -o StrictHostKeyChecking but use the -y or -yy instead.

The only problem is that the -y flag is also used by the openssh-client:

-y Send log information using the syslog(3) system module.  By default this information is sent to stderr.

This is not critical and once the dbclient start to support the StrictHostKeyChecking we can remove the -y flag.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev f14dae7bc9 sshtunnel: Use -i $IdentityFile instead of -o IdentityFile=$IdentityFile
This makes the sshtunnel compatible with Dropbear.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev 714c97b012 sshtunnel: set StrictHostKeyChecking=accept-new by default
Without the option the ssh will propt a user to accept the host key.
So a user should perform a connection manualy and accept before useing the sshtunnel.
The accept-new is a reasonable trade off.

Also the LogLevel is INFO by default.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev 2a5f9dbcc7 sshtunnel: uci_sshtunnel use example.com
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev 41635f946c sshtunnel: uci_sshtunnel simplify
Simplify comment and make it shorter.
Remove triling tab after retrydelay.
Use a full path for IdentityFile because otherwise the uci validation fails with the relative path ~/.ssh

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Daniel Golle 7c8f4a2a1c exim: update to version 4.96.1
This is a security release.

JH/01 Bug 2999: Fix a possible OOB write in the external authenticator, which
      could be triggered by externally-supplied input.  Found by Trend Micro.
      CVE-2023-42115

JH/02 Bug 3000: Fix a possible OOB write in the SPA authenticator, which could
      be triggered by externally-controlled input.  Found by Trend Micro.
      CVE-2023-42116

JH/03 Bug 3001: Fix a possible OOB read in the SPA authenticator, which could
      be triggered by externally-controlled input.  Found by Trend Micro.
      CVE-2023-42114

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2023-10-08 03:28:35 +02:00
Luiz Angelo Daros de Luca 36566a99af libvpx: update to 1.13.1
v1.13.0

This release includes more Neon and AVX2 optimizations, adds a new codec
control to set per frame QP, upgrades GoogleTest to v1.12.1, and includes
numerous bug fixes.

v1.13.1

This release contains two security related fixes. One each for VP8 and VP9.

- https://crbug.com/1486441 (CVE-2023-5217)
- Fix bug with smaller width bigger size (CVE-2023-44488)

Fixes #22318

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2023-10-07 16:59:57 -07:00
Josef Schlehofer e6e164996d Merge pull request #22329 from jefferyto/golang-1.21.2
golang: Update to 1.21.2
2023-10-07 19:34:22 +02:00
Jeffery To a8374204bb golang: Update to 1.21.2
Includes fix for CVE-2023-39323 (cmd/go: line directives allows
arbitrary execution during build).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-10-07 20:04:12 +08:00
Jeffery To f53a2ea2fb Merge pull request #22306 from cotequeiroz/python3-rebuild
python3: avoid unnecessary rebuilds
2023-10-07 18:57:01 +08:00
Jeffery To 1dce408385 Merge pull request #22309 from BKPepe/tor-fw-helper
tor-fw-helper: remove it
2023-10-07 18:52:07 +08:00
Stan Grishin 7d0557fad4 Merge pull request #22311 from stangri/master-adblock-fast
adblock-fast: bugfix: properly identify hosts-files
2023-10-06 16:42:32 -06:00
Julian Grinblat 565fda4105 ddns-scripts: add ddns-scripts-utils package
The samples in the repo are useful for configuring cenrtain aspects of
ddns, and their inclusion is hinted at within their source code

Signed-off-by: Julian Grinblat <julian@dotcore.co.il>
2023-10-06 18:08:59 +09:00
Florian Eckert 71cb7ad0a4 Merge pull request #22298 from TDT-AG/pr/20231004-keepalived
keepalived: update to version 2.2.8
2023-10-06 08:34:24 +02:00
Alexandru Ardelean 3b9abf7836 Merge pull request #22301 from cotequeiroz/pymysql_sha256
pymysql: add meta-package for sha256 support
2023-10-06 09:34:00 +03:00
Tianling Shen 72d2a78487 Merge pull request #22273 from ne20002/crowdsec-firewall-bouncer
crowdsec-firewall-bouncer: new upstream release version 0.0.28
2023-10-06 13:44:33 +08:00
John Audia 6dc86d46da openssh: bump to 9.5p1
Changelog: https://www.openssh.com/txt/release-9.5

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
2023-10-05 14:37:59 -07:00
Jeffery To 00841f9873 python-twisted: Update to 23.8.0, rework patches
The package changed to the hatchling build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-10-05 14:37:27 -07:00
Jan Kratochvil e429c11b04 ffmpeg: fix compilation error of ffmpeg-custom
Fixes: #12320

After plain enable of libffmpeg-custom and ffmpeg-custom which adds:
- CONFIG_PACKAGE_libbz2=m
- CONFIG_PACKAGE_libffmpeg-custom=m
- CONFIG_FFMPEG_CUSTOM_GPL=y
- CONFIG_PACKAGE_zlib=m
- CONFIG_PACKAGE_ffmpeg-custom=m

I get on v22.03.5 compilation error:
```
cp -fpR /.../openwrt-git/build_dir/target-mips_24kc_musl/ffmpeg-custom/ffmpeg-5.1/ipkg-install/usr/bin/ffmpeg /.../openwrt-git/build_dir/target-mips_24kc_musl/ffmpeg-custom/ffmpeg-5.1/ipkg-mips_24kc/ffmpeg-custom/usr/bin/
cp: cannot stat '/.../openwrt-git/build_dir/target-mips_24kc_musl/ffmpeg-custom/ffmpeg-5.1/ipkg-install/usr/bin/ffmpeg': No such file or directory
make[2]: *** [Makefile:756: /.../openwrt-git/bin/packages/mips_24kc/packages/ffmpeg-custom_5.1-1_mips_24kc.ipk] Error 1
```

It is because configure is missing `ffmpeg` in its `Programs:` section:
```
( cd /.../openwrt-git/build_dir/target-mips_24kc_musl/ffmpeg-custom/ffmpeg-5.1; CFLAGS="-Os -pipe -mno-branch-likely -mips32r2 -mtune=24kc -fno-caller-saves -fno-plt -fhonour-copts -Wno-error=unused-but-set-variable -Wno-error=unused-result -msoft-float -mips16 -minterlink-mips16 -fmacro-prefix-map=/.../openwrt-git/build_dir/target-mips_24kc_musl/ffmpeg-custom/ffmpeg-5.1=ffmpeg-5.1 -Wformat -Werror=format-security -fstack-protector -D_FORTIFY_SOURCE=1 -Wl,-z,now -Wl,-z,relro -I/.../openwrt-git/staging_dir/toolchain-mips_24kc_gcc-11.2.0_musl/usr/include -I/.../openwrt-git/staging_dir/toolchain-mips_24kc_gcc-11.2.0_musl/include/fortify -I/.../openwrt-git/staging_dir/toolchain-mips_24kc_gcc-11.2.0_musl/include -DPIC -fpic" LDFLAGS="-L/.../openwrt-git/staging_dir/toolchain-mips_24kc_gcc-11.2.0_musl/usr/lib -L/.../openwrt-git/staging_dir/toolchain-mips_24kc_gcc-11.2.0_musl/lib -znow -zrelro" ./configure --enable-cross-compile --cross-prefix="mips-openwrt-linux-musl-" --arch="mips" --cpu=24kc --target-os=linux --prefix="/usr" --pkg-config="pkg-config" --enable-shared --enable-static --enable-pthreads --enable-zlib --disable-doc --disable-debug --disable-lzma --disable-vaapi --disable-vdpau --disable-outdevs --disable-altivec --disable-vsx --disable-power8 --disable-armv5te --disable-armv6 --disable-armv6t2 --disable-fast-unaligned --disable-runtime-cpudetect --disable-x86asm --enable-small --enable-gpl --disable-programs --disable-avfilter --disable-swresample --disable-swscale --disable-everything                                                                                                                                                                                                                                                                                      --disable-postproc )
install prefix            /usr
source path               .
C compiler                mips-openwrt-linux-musl-gcc
C library
host C compiler           gcc
host C library            glibc
ARCH                      mips (24kc)
big-endian                yes
runtime cpu detection     no
MIPS FPU enabled          no
MIPS DSP R1 enabled       no
MIPS DSP R2 enabled       no
MIPS MSA enabled          no
LOONGSON MMI enabled      no
debug symbols             no
strip symbols             yes
optimize for size         yes
optimizations             yes
static                    yes
shared                    yes
postprocessing support    no
network support           yes
threading support         pthreads
safe bitstream reader     yes
texi2html enabled         no
perl enabled              yes
pod2man enabled           yes
makeinfo enabled          yes
makeinfo supports HTML    no
xmllint enabled           yes

External libraries:
alsa                    iconv
bzlib                   zlib

External libraries providing hardware acceleration:
cuda_llvm               v4l2_m2m

Libraries:
avcodec                 avformat
avdevice                avutil

Programs:

Enabled decoders:

Enabled encoders:

Enabled hwaccels:

Enabled parsers:

Enabled demuxers:

Enabled muxers:

Enabled protocols:

Enabled filters:

Enabled bsfs:

Enabled indevs:

Enabled outdevs:

License: GPL version 2 or later
```

Signed-off-by: Jan Kratochvil <jan@jankratochvil.net>
2023-10-05 14:37:03 -07:00
Eneas U de Queiroz 79b173a0c5 pymysql: add meta-package for sha256 support
Replace the PYTHON3_PYMYSQL_SHA_PASSWORD_SUPPORT option, which is
causing circular dependencies, with a meta-package that installs both
python3-pymysql and python3-cryptography.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2023-10-05 15:52:07 -03:00
Stan Grishin 13a88d0b79 adblock-fast: bugfix: properly identify hosts-files
* escape dots in grep command to properly identify hosts files

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2023-10-05 14:52:28 +00:00
Josef Schlehofer c980086b1e tor-fw-helper: remove it
This package does not receive any update since 2015. [1]
It seems unmaintained and most likely not used at all.

[1] https://gitweb.torproject.org/tor-fw-helper.git/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-10-05 14:16:07 +02:00
Oskari Rauta a7f837c98b zsh: use autoreconf PKG_FIXUP to configure
In preparation to PCRE2 fixup, use autoreconf PKG_FIXUP as a better
configure system instead of configure script. This is needed to reduce
upcoming patch to migrate to PCRE2 library.

To correctly use autoreconf it's needed to declare empty
PKG_REMOVE_FILES.

zsh include custom macro in the default aclocal.m4
When autoreconf PKG_FIXUP is used, if PKG_REMOVE_FILES is not defined,
it's set to remove the file aclocal.m4 by default resulting in problem
with the custom macro AC_PROG_LN.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
[ split to 2 commit, add PKG_REMOVE_FILES, reword commit description ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-10-05 12:57:17 +02:00
Michael Heimpold c5f6865165 Merge pull request #22289 from mhei/mmc-utils-update
mmc-utils: update to latest upstream revision
2023-10-05 07:24:44 +02:00
Michael Heimpold be750f8188 Merge pull request #22290 from mhei/php8-update-to-8.2.11
php8: update to 8.2.11
2023-10-05 07:24:27 +02:00
Eneas U de Queiroz c230d7bd7f python3: avoid unnecessary rebuilds
Move the order in which BuildPackage is called, so that the libpython
package is built ahead of the module packages, to avoid forcing a
clean-build of the package when 'make package/python3/compile' is called
a second time without changes.

The library must be built first, so that when the buildsystem checks for
ABI version changes using libpython3.version, its timestamp should be
older than the dependent package's STAMP_PREPARED file.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2023-10-04 16:52:27 -03:00
Josef Schlehofer 4dd49d7c3c syslog-ng: update to version 4.4.0
- Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.4.0

- Bump version in config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-10-04 18:02:13 +02:00
Florian Eckert 09f20658d9 keepalived: add notify_up and notify_down for virtual server
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-10-04 17:01:04 +02:00
Florian Eckert 5462d06ba8 keepalived: add PING_CHECK to real_server
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-10-04 17:00:42 +02:00
Florian Eckert 5bfbc58983 keepalived: update to version 2.2.8
See release-notes:
https://www.keepalived.org/release-notes/Release-2.2.8.html

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-10-04 16:59:46 +02:00
Hannu Nyman e483d052f3 Merge pull request #22295 from 1715173329/wget
wget: Update to 1.21.4
2023-10-04 14:38:20 +03:00
Tianling Shen 54593c0ba9 wget: Update to 1.21.4
Removed upstreamed patches and unneeded autoreconf.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-10-04 13:03:51 +08:00
Jan Kratochvil 2227198d74 ffmpeg: bump PKG_RELEASE
Suggested by @neheb.

Signed-off-by: Jan Kratochvil <jan@jankratochvil.net>
2023-10-03 21:29:00 -07:00
Jan Kratochvil 62f01d7b36 ffmpeg: Add avi muxer
Otherwise one cannot produce *.avi containers needed for some H.264
camera codecs.

Signed-off-by: Jan Kratochvil <jan@jankratochvil.net>
2023-10-03 21:29:00 -07:00
Amnon Paz 2a4d2e8c9d lua-openssl: Update to version 0.8.5-1
Signed-off-by: Amnon Paz <pazamnon@gmail.com>
2023-10-03 17:17:38 -07:00
John Audia 63993c5af9 ncdu: update to 1.19
Upstream bump

Build system: x86_64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
2023-10-03 17:16:28 -07:00
Jeffery To 78bcdd0fd1 python-packaging: Update to 23.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-10-03 16:55:10 -07:00
Dirk Brenken 00cad2980c banip: release 0.9.1-1
* drop packets silently on input and forwardwan chains or actively reject the traffic, set 'ban_blocktype' accordingly
* optimized banIP boot/reload handling
* removed pppoe quirk in device detection
* small fixes and optimizations

Signed-off-by: Dirk Brenken <dev@brenken.org>
2023-10-03 21:34:49 +02:00
Michael Heimpold 51a7d7850d mmc-utils: update to latest upstream revision
This also requires updating our patch for fortify-ing.
We now also pass the version as define during compilation.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2023-10-03 20:39:45 +02:00