Commit Graph

10540 Commits

Author SHA1 Message Date
Tianling Shen
7d35ac5c1d v2raya: remove go version hack
This hack was added for Go 1.20 as it did not take minor version.
Now we have Go 1.21, this hack can go away.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-09-30 19:05:11 +08:00
Stan Grishin
5f3879f714 Merge pull request #22242 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: better error reporting when nothing to do
2023-09-29 12:00:16 -06:00
Tianling Shen
c38a05741c v2ray-core: backport upstream Go 1.21 updates
Fix build for Go 1.21.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a8ac5861f6)
2023-09-29 12:33:01 +02:00
Van Waholtz
0aad4266f9 frp: update to 0.51.3
Includes some bug fixes and adds support for GO 1.21.

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 14dd31ef27)
2023-09-29 12:31:01 +02:00
Van Waholtz
70960d4e83 frp: update to 0.51.0
XTCP is incompatible with previous versions since 0.49.0.

Changelog:
https://github.com/fatedier/frp/releases/tag/v0.49.0
https://github.com/fatedier/frp/releases/tag/v0.50.0
https://github.com/fatedier/frp/releases/tag/v0.51.0

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 62901b7895)
2023-09-29 12:30:55 +02:00
Josef Schlehofer
77f62ddb67 kismet: drop the package
This package is no longer maintained in OpenWrt even though it is maintained by upstream.
The last update was done in August 2016 and because we have 2023, drop this package
without replacement.

If anyone from the community wants to step in and retake the maintainership together with the update,
feel free to do it.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 52def58084)
2023-09-29 12:29:10 +02:00
Stan Grishin
55ca07c788 adblock-fast: better error reporting when nothing to do
* also nicer file type output in high verbosity

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit ed6729c251)
2023-09-28 21:33:47 +00:00
Hannu Nyman
1542103dd3 adguardhome: update to v0.107.36
* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.34
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.35
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.36

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

[ Reword commit message ]
Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit d4fa3d0a1a)
2023-09-28 10:54:17 +02:00
Zephyr Lykos
131a043201 tailscale: Update to 1.50.0
Signed-off-by: Zephyr Lykos <git@mochaa.ws>
(cherry picked from commit eeb1e0f057)
2023-09-28 10:51:58 +02:00
Tyler Young
a75e1150f1 tailscale: update to version 1.48.2
Release notes:
https://github.com/tailscale/tailscale/releases/tag/v1.48.2

Signed-off-by: Tyler Young <git@yfh.addy.io>
(cherry picked from commit 992807ca35)
2023-09-28 10:51:51 +02:00
Tyler Young
eced946bd2 tailscale: enable autodect of fw type
Signed-off-by: Tyler Young <git@yfh.addy.io>
(cherry picked from commit 40d5ba9378)
2023-09-28 10:51:38 +02:00
Zephyr Lykos
e7ca549d6e tailscale: Update to 1.48.1
Signed-off-by: Zephyr Lykos <git@mochaa.ws>
(cherry picked from commit a9373d6dd1)
2023-09-28 10:51:30 +02:00
Zephyr Lykos
42e796f8a1 tailscale: Update to 1.48.0
Everything is working on pure upstream code.
Patching is not longer needed.

Added entire /etc/tailscale/ directory to conffiles for persistent ssh
host key & https certificate across sysupgrades.

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
(cherry picked from commit 750faf5942)
2023-09-28 10:51:24 +02:00
Josef Schlehofer
8d1cf768a7 dnscrypt-proxy2: update to version 2.1.5
Fixes compilation with Go 1.21+.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 536569ca62)
2023-09-28 10:50:29 +02:00
Christian Marangi
45b2d3ecd5 apache: move to PCRE2
Move apache to PCRE2 now that PCRE is flagged EOL and won't receive any
security update.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit d14fe0c51c)
2023-09-28 10:42:44 +02:00
Christian Marangi
5abeef2c38 apache: bump to release 2.4.57
Bump apache to release 2.4.57 and refresh patch automatically.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 86f9af41c1)
2023-09-28 10:42:39 +02:00
Stan Grishin
ebfa76314c Merge pull request #22222 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: bugfix: better detect ABP lists
2023-09-27 21:35:51 -06:00
Matthias Schiffer
a7e0076acd openvswitch: disable groff manpage check
The openvswitch build trips over a number of warnings during the
manpage-check step if groff 1.23 is installed on the build host,
resulting in a failed build.

As this check is optional, and we don't even install the manpages, simply
override the groff configure check to never detect groff.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit db34f33cc7)
2023-09-27 18:15:23 +02:00
Matthias Schiffer
d5fb69c024 tunneldigger: set PKG_SOURCE_DATE
opkg requires monotonically increasing version numbers to know which
version of a package is newer. As git commit IDs do not satisfy this
condition, PKG_SOURCE_DATE must be set to the date of the referenced
commit, resulting in the complete version number '2021-03-08-4f72b305-1'.

As the source date also becomes part of the paths inside the download
archive, the source hash must be updated as well.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit 0a3e5dd122)
2023-09-27 18:15:16 +02:00
Matthias Schiffer
3ceb8b3660 tunneldigger: add group option to UCI config
The group can be used for policy routing and similar purposes.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit 21dd77f6c4)
2023-09-27 18:15:08 +02:00
Stan Grishin
6d3ff6df7f adblock-fast: bugfix: better detect ABP lists
* bugfix: better detect ABP lists
* update Makefile with BUSYBOX features dependencies
* update the type of dnsmasq_instance setting
* add error message when file type can't be detected
* add reporting when file type can't be detected
* bugfix: include URL on errors related to URL processing/parsing
* rename resolver function to resolver_config to better reflect its use

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit cfe85fbde3)
2023-09-26 22:52:38 +00:00
Leo Douglas
6526d607db iperf3: update to 3.15
see changelog: https://github.com/esnet/iperf/releases/tag/3.15.

Signed-off-by: Leo Douglas <douglarek@gmail.com>
(cherry picked from commit 8a223d4724)
2023-09-26 11:37:11 +02:00
Leo Douglas
ce194e20dc zerotier: update to 1.12.2
see changelog: https://github.com/zerotier/ZeroTierOne/releases/tag/1.12.2.

Signed-off-by: Leo Douglas <douglarek@gmail.com>
(cherry picked from commit 0343dffefa)
2023-09-25 22:32:17 +08:00
S. Brusch
862e2fa22b crowdsec: new upstream release version 1.5.4
Update crowdsec to latest upstream release version 1.5.4

Signed-off-by: S. Brusch <ne20002@gmx.ch>

Maintainer: Kerma Gérald <gandalf@gk2.net>
Build tested: package build checked, no run test due to limited space

Description: update to latest version of upstream
(cherry picked from commit 7528bf7682)
2023-09-25 22:31:51 +08:00
Dengfeng Liu
5760c525a6 apfree-wifidog: Update to v6.08.1950
Fixed some memory leak bug

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 5b3e517be4)
2023-09-25 22:30:53 +08:00
Dengfeng Liu
7972badcfd xfrpc: update to version 2.9.644
Release notes:
https://github.com/liudf0716/xfrpc/releases/tag/2.9.644

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
2023-09-25 00:52:33 +08:00
Michal Hrusecky
8a940b9a55 samba4: update to 4.18.6
Fixes various security issues. For detailed history see:

* https://www.samba.org/samba/history/samba-4.18.6.html
* https://www.samba.org/samba/history/samba-4.18.5.html
* https://www.samba.org/samba/history/samba-4.18.4.html
* https://www.samba.org/samba/history/samba-4.18.3.html
* https://www.samba.org/samba/history/samba-4.18.2.html
* https://www.samba.org/samba/history/samba-4.18.1.html

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2023-09-23 19:15:01 -07:00
Matthias Schiffer
9e7f093dbb fastd: update repository URL
I've changed my username to neocturne.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit ac897e05dd)
2023-09-20 21:57:00 +02:00
Olivier Poitrey
596d983e08 nextdns: Update to version 1.40.1
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
(cherry picked from commit 66b72b6db3)
2023-09-20 10:47:06 +08:00
Tianling Shen
d2ede154d2 rclone: Update to 1.64.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1b75de7e5c)
2023-09-20 10:43:02 +08:00
Jan Hák
065d953ad6 knot: update to version 3.3.1
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 2a6dc24882)
2023-09-20 00:25:41 +02:00
Lucian Cristian
d2f2d7f556 libreswan: update to 4.12
fix CVE-2023-38710, CVE-2023-38711, CVE-2023-38712

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 5a1b878010)
2023-09-20 00:20:01 +02:00
Marius Dinu
7ed0b22bbe transmission: add copy_file_range syscall to seccomp
Fixes this crash:

root@RPi3OpenWrt:/# grep -i seccomp /var/log/audit/audit.log
type=SECCOMP msg=audit(1689503903.597:16): auid=4294967295 uid=224 gid=1012 ses=4294967295 pid=1752 comm="transmission-da" exe="/usr/bin/transmission-daemon" sig=31 arch=c00000b7 syscall=285 compat=0 ip=0x7fa3b0eefc code=0x80000000
root@RPi3OpenWrt:/# ausyscall 285
copy_file_range
root@RPi3OpenWrt:/#

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit f0926b44f4)
2023-09-17 17:38:40 +01:00
Marius Dinu
4a94edb066 transmission: add ftruncate syscall to seccomp
Fixes many crashes.

Fixes #22071.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit a037254588)
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2023-09-17 17:38:40 +01:00
Leonid Bogdanov
29bf6ffe38 transmission: Fix env variables passing
It's not possible to configure custom Transmission web home as corresponding
env var gets overwritten by the command that sets CA bundle env var.

Signed-off-by: Leonid Bogdanov <leonidbogdanov86@gmail.com>
(cherry picked from commit c662aefd9a)
2023-09-17 17:38:40 +01:00
Stan Grishin
93ebbfed0a https-dns-proxy: improve boot up startup
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 22d21e28a7)
2023-09-16 23:52:40 +00:00
Stan Grishin
4c203973a6 Merge pull request #22119 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: bugfix: remove domains on allow
2023-09-16 16:43:37 -07:00
Stan Grishin
aa0b130fe2 Merge pull request #22117 from stangri/openwrt-23.05-curl
[23.05] curl: update to version 8.3.0
2023-09-16 16:43:22 -07:00
Stan Grishin
0d6f18a7d8 adblock-fast: bugfix: remove domains on allow
* fix sed command to properly remove allowed domains from block-file

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit bce310bfcd)
2023-09-16 13:15:14 +00:00
Eric Luehrsen
a49722f43b unbound: update to 1.18.0
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit 03f70dcfd5)
2023-09-16 12:59:33 +02:00
Ted Hess
78434151e1 Unbound: Silence SSL unexpected eof messages
Refs: https://github.com/NLnetLabs/unbound/issues/812
      https://github.com/NLnetLabs/unbound/issues/846

This is a backport of: https://github.com/NLnetLabs/unbound/commit/d7e7761
and can be removed with the next release/update of the Unbound package

Signed-off-by: Ted Hess <thess@kitschensync.net>
(cherry picked from commit 2a71e17ca1)
2023-09-16 12:59:16 +02:00
Josef Schlehofer
853109dd65 curl: update to version 8.3.0
Release notes:
https://curl.se/changes.html#8_3_0

Fixes:
CVE-2023-38039 [1]

[1] https://curl.se/docs/CVE-2023-38039.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 07c0a5eab8)
2023-09-16 10:26:07 +00:00
Josef Schlehofer
51acc2633b treewide: change my no longer used email
Since February 2023, I decided to no longer work with Turris, I mean CZ.NIC company
due to some reasons how the development goes and since that day my work address is not
available and not sure if there is some redirect to someone else, but if anyone wants to
reach me, use my email address, where they can find me.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1e1b2051db)
2023-09-16 12:24:30 +02:00
Sibren Vasse
016424fc11 openssh: update to 9.4p1
Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>
(cherry picked from commit 7fb8e823b9)
2023-09-15 15:52:25 +02:00
Philip Prindeville
bb3247d1b2 openssh: add server config subdirectory
Most distros allow dropping site configuration files into
/etc/sshd_config.d/ so that you don't have to tweak the main
server configuration file.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit ead95a26b6)
2023-09-15 15:52:15 +02:00
Sibren Vasse
45b07c0b47 openssh: update to 9.3p2
Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>
(cherry picked from commit 731f0d70a8)
2023-09-15 15:52:06 +02:00
Florian Eckert
09f044f981 mwan3: fix mwan3_connected ubus output
During the renameing of mwan3_connected_v4 to mwan3_connected_ipv4 and
mwan3_connected_v6 to mwan3_connected_ipv6 the adjustment in the ubus
call was forgotten. This commit fixes this.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a56e111c49)
2023-09-12 16:07:14 +02:00
Christian Lachner
0daa650931 haproxy: update to v2.8.3
- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2023-09-07 16:41:52 +02:00
Tianling Shen
c92b5ece16 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a0c6ba40d9)
2023-09-06 11:11:58 +08:00
Tianling Shen
c088a64511 v2raya: Update to 2.2.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 058413daa4)
2023-09-06 11:11:53 +08:00