Commit Graph

10818 Commits

Author SHA1 Message Date
Stan Grishin
6b92b6c6d2 https-dns-proxy: bugfix: crashes on logging from upstream
* update to 2023-10-25 upstream version which fixes the crashes on logging on ath79
* remove no longer needed 030-src-logging.c-fix-crash.patch
* update 010-cmakelists-remove-cflags.patch to work with a new version
* update 020-src-options.c-add-version.patch to work with a new version

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2023-10-26 14:40:37 +00:00
Stan Grishin
adb7f5495e Merge pull request #22447 from stangri/master-curl
curl: prepare for HTTP/3 support
2023-10-26 08:32:56 -06:00
Nick Hainke
2496d74340 snowflake: update to 2.7.0
Release Notes:
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/tags/v2.7.0

Proxy churn is removed and because of that also distinctcounter:
6393af6bab

Signed-off-by: Nick Hainke <vincent@systemli.org>
2023-10-25 18:22:05 +02:00
Tianling Shen
ad8f2b5e8e dnsproxy: Update to 0.56.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-10-25 19:40:20 +08:00
Tianling Shen
0d6bbc3bdd rclone: Update to 1.64.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-10-25 19:40:11 +08:00
Oliver Sedlbauer
01fb59f4e2 modemmanager: check status of report-kernel-event
At mm_report_modem_wait a wait status is set. When attempting to report
an event (via hotplug or during startup) and the DBus is not yet available,
the status in the sysfs cache is set to 'processed' incorrectly, even
if mmcli fails.
This is fixed by aborting the operation and logging an error when
the kernel report fails.

Signed-off-by: Oliver Sedlbauer <osedlbauer@tdt.de>
2023-10-25 09:33:22 +02:00
Oliver Sedlbauer
9ae43c14e8 modemmanager: remove sysfscache after dbus ready
The mm_report_events_from_cache method is called during the startup and
informs the ModemManager of kernel events. Additionally, hotplug scripts
inform the ModemManager of kernel events. Processed events are stored in
the sysfs cache. It is possible for a hotplug script to write to the
sysfs cache while the mm_report_events_from_cache method is still waiting
for the ModemManager to be available on the bus during startup.
This could lead to a misbehavior where modems are not recognized.
To ensure a clean state on startup, the sysfs cache is cleared after the
ModemManager is available, ensuring reliable processing of kernel events.

Signed-off-by: Oliver Sedlbauer <osedlbauer@tdt.de>
2023-10-25 09:33:22 +02:00
Dirk Brenken
81658c5823 travelmate: release 2.1.1
* various vpn/wireguard improvements & fixes
* improved compatibility with new netifd
* added open STA improvements by @brianjmurrell
* closes #22227 #22288 #22357

Signed-off-by: Dirk Brenken dev@brenken.org
Signed-off-by: Dirk Brenken <dev@brenken.org>
2023-10-24 17:27:40 +02:00
Andrew Sim
45170d9b67 transmission: update to 4.0.4
Update Transamission to 4.0.4 stable release
Changelog: https://github.com/transmission/transmission/releases/tag/4.0.4

Signed-off-by: Andrew Sim <andrewsimz@gmail.com>
2023-10-24 13:51:11 +01:00
Josef Schlehofer
4853aa2388 Merge pull request #22492 from douglarek/master
sing-box: update to v1.5.4
2023-10-24 09:43:32 +02:00
Leo Douglas
4be4a791b5 sing-box: update to v1.5.4
changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.5.4

Signed-off-by: Leo Douglas <douglarek@gmail.com>
2023-10-24 10:43:30 +08:00
Stan Grishin
5dd08fe23f https-dns-proxy: bugfix: prevent crashes on IPv6 systems
* update service triggers so that procd_add_raw_trigger is only
  executed on boot and not on other service actions
* remove outdated iface hotplug script

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2023-10-24 02:14:54 +00:00
Tarvi Pillessaar
64f370cabe strongswan: add eap-dynamic plugin
This plugin acts as a proxy that dynamically selects an EAP method that is
supported/preferred by the client. If the original EAP method initiated by
the plugin is rejected with an EAP-NAK message, it will select a different
method that is supported/requested by the client.

For example it is possible to configure eap-tls as preferred
authentication method for your connection while still allow eap-mschapv2.

Signed-off-by: Tarvi Pillessaar <tarvip@gmail.com>
2023-10-23 09:45:46 +03:00
ValdikSS ValdikSS
af58942738 tor: fix daemon reloading
procd requires init script name, not the path to executable

Signed-off-by: ValdikSS ValdikSS <iam@valdikss.org.ru>
2023-10-22 22:57:49 +02:00
Christian Marangi
bb9d02be03 nginx: add option to compile STREAM REAL IP module
Add option to compile STREAM REAL IP module.

Closes: #22310
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-10-22 14:28:34 +02:00
Josef Schlehofer
5a917a2a1c ooniprobe: remove unused package
This package is not maintained anymore in the OpenWrt packages feed
and since we updated Go to 1.21 version, it is not compiled either.

Let's hope that with removing this package from our feed,
someone will step it and become a maintainer to take care of this package.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-10-22 13:24:22 +02:00
Christian Marangi
db305165c9 shadowsocks-libev: convert to PCRE2
Convert package to PCRE2 by porting a pending patch from a closed PR.

The PR is old but the code never changed and is simple enough to check
the changes. The patch apply directly with no changes (aside from
commenting out the travis CI file)

The PR was never merged as PCRE2 at times was too new and they were
trying to find a better regex lib.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-10-22 13:23:58 +02:00
Stan Grishin
42cc50eec8 adblock-fast: bugfix: allow command
* fix sed to properly purge allowed domains from block-lists
* ensure resolver is restarted on allow command
* reduce pause default/max in attempt to make it work with luci

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2023-10-21 02:27:54 +00:00
Tianling Shen
0449b530ba rclone: Update to 1.64.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-10-20 16:28:20 +08:00
Peter van Dijk
e2b439c487 pdns: update to 4.8.3 and update pdns.conf-dist
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2023-10-20 16:22:44 +08:00
Nick Hainke
af666be21f conntrack-tools: update to 1.4.8
Release Notes:
https://marc.info/?l=netfilter&m=169598613909790&w=2

Furthermore, switch to "tar.xz".

Signed-off-by: Nick Hainke <vincent@systemli.org>
2023-10-19 18:02:22 -07:00
Stan Grishin
6bd2b89d83 curl: prepare for HTTP/3 support
* these changes along with 2 PRs below and using non-standard
  openssl library allow for building curl with HTTP/3 support
* https://github.com/openwrt/packages/pull/22443
* https://github.com/openwrt/packages/pull/22444

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2023-10-18 18:58:07 +00:00
Christian Marangi
9f50361691 net-snmp: backport patch fixing memory leak for PCRE2
Backport patch fixing memory leak for PCRE2 present upstream.

Fixes: #22428
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-10-18 13:26:48 +02:00
Florian Eckert
5f4405112f Merge pull request #22371 from IgorBai/patch-3
ddns-scripts: add new DDNS provider ipnodns.ru
2023-10-18 13:09:43 +02:00
Igor Baidasov
a80fec4850 ddns-scripts: add new DDNS provider ipnodns.ru
Signed-off-by: Igor Baidasov <igorbay@bk.ru>
2023-10-18 12:56:58 +03:00
Florian Eckert
79b814047c Merge pull request #22427 from Linaro1985/update_mm_1.22.0
modemmanager: bump to 1.22.0
2023-10-18 08:49:10 +02:00
Maxim Anisimov
5a81a131b6 modemmanager: bump to 1.22.0
- switch to builtin plugins
- import upstream patch for fixing support of ublox LARA-R6001 / LARA-R6001D modules
  (see: https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/779)

Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
2023-10-18 07:35:44 +03:00
Stan Grishin
38c026250f https-dns-proxy: bugfix: logging crashing instances on ath79
* finally fixes https://github.com/openwrt/packages/issues/19366
* simplify service_triggers
* improve output for dnsmasq restart
* improve grep/sed dependencies
* remove interface hotplug

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2023-10-17 09:46:19 +00:00
Tianling Shen
03a69f84bc v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-10-16 17:14:34 +08:00
Michal Hrusecky
c9c5f62e30 samba4: Update to version 4.18.8
Mainly security release, fixing CVE-2023-3961, CVE-2023-4091,
CVE-2023-4154, CVE-2023-42669 and CVE-2023-42670. For more details see:
https://www.samba.org/samba/history/samba-4.18.8.html

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2023-10-16 07:15:46 +02:00
Philip Prindeville
7b998865ad isc-dhcpd: Redux of convenience functions avoiding sed/cut
Also minimize messing with $IFS.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2023-10-15 22:18:09 -06:00
Philip Prindeville
96e720bb6b isc-dhcp: Use 'append' instead of manually appending
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2023-10-15 22:17:51 -06:00
Philip Prindeville
a6d6475cd5 Merge pull request #22414 from pprindeville/isc-dhcp-no-empty-ranges
isc-dhcp: refuse to add empty DHCP ranges
2023-10-15 22:14:24 -06:00
Leon M. Busch-George
dd2daafc6e isc-dhcp: refuse to add empty DHCP range
ipcalc.sh no longer outputs invalid ranges and fails with an error code in
such cases. React to the error.

Signed-off-by: Leon M. Busch-George <leon@georgemail.eu>
2023-10-15 21:35:14 -06:00
Leon M. Busch-George
3ad482078b isc-dhcp: adapt to new ipcalc paradigm
With #12925, 'BROADCAST' will no longer be set if there is no local
broadcast address (rather than holding the global broadcast address).
Prepare for the merge but stay compatible with the old version of ipcalc.

Signed-off-by: Leon M. Busch-George <leon@georgemail.eu>
2023-10-15 21:33:15 -06:00
Nikos Mavrogiannopoulos
f1c7d1742c Merge pull request #22404 from vgaetera/openconnect-pfs
openconnect: add support for option --pfs
2023-10-15 12:01:34 +02:00
Vladislav Grigoryev
4af0378ef9 openconnect: add support for option --pfs
Add support for the OpenConnect option `--pfs`.
Designed to require perfect forward secrecy.

Signed-off-by: Vladislav Grigoryev <vg.aetera@gmail.com>
2023-10-14 15:30:15 +03:00
Oskari Rauta
53dc7146f4 netbird: update to 0.23.9
Changelog:
 - Add Pagination for IdP Users Fetch by @bcmmbaga in #1210
 - Rework peer connection status based on the update channel existence by @surik in #1213
 - Fix nil pointer exception in group delete by @pappz in #1211
 - Fix/key backup in config script by @pappz in #1206

Full changelog: https://github.com/netbirdio/netbird/compare/v0.23.8...v0.23.9

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-10-14 17:29:30 +08:00
Peter van Dijk
b19f8a822b dnsdist: update to 1.8.2
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2023-10-14 11:26:02 +08:00
Christian Marangi
32d53eae35 nginx: fix nginx lua module compilation error
Add pending patch fixing compilation error for missing pcre.h.

This is caused by a bug on their end by trying to add pcre.h even if we
are using the PCRE2 library.

Fixes: f0754531c4 ("nginx: move to PCRE2")
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-10-13 20:35:42 +02:00
Tianling Shen
da5ac5da83 dnsproxy: Update to 0.56.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-10-11 22:48:22 +08:00
Jeffery To
0dfc1b508d rust: Use make's jobserver when building packages
This allows cargo to use make's jobserver when building packages, by
marking the cargo command as recursive (with the + prefix[1]) and
setting MAKEFLAGS.

This also:

* Give cargo/x.py the build directory instead of having to change the
  current directory (and opening subshells)

* Set PKG_BUILD_PARALLEL/HOST_BUILD_PARALLEL for Rust packages to enable
  the use of make's jobserver

[1]: https://www.gnu.org/software/make/manual/html_node/POSIX-Jobserver.html

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-10-11 15:50:24 +08:00
Jeffery To
9db7284d58 rust: Consolidate cargo environment variables
This consolidates all environment variables for cargo into:

* CARGO_HOST_CONFIG_VARS / CARGO_PKG_CONFIG_VARS

  These contain all cargo-specific environment variables, i.e. without
  "common" variables like CC.

* CARGO_HOST_VARS / CARGO_PKG_VARS (renamed from CARGO_VARS)

  These contain all environment variables to be passed to cargo.

This also:

* Set the CARGO_BUILD_TARGET environment variable instead of using the
  --target command-line option

* Update Python include files to use CARGO_HOST_CONFIG_VARS /
  CARGO_PKG_CONFIG_VARS

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-10-11 15:50:23 +08:00
Michal Hrusecky
5167111691 curl: Update to version 8.4.0
For detailed changes, see https://curl.se/changes.html#8_4_0
Switching to tar.bz2 for the time being as tar.xz is not yet available.
Fixes CVE-2023-38546 and CVE-2023-38545.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2023-10-11 09:17:21 +02:00
Tianling Shen
93cbaacbfb Merge pull request #22348 from miska/samba4
samba4: Update to version 4.18.7
2023-10-11 09:50:42 +08:00
Tianling Shen
e8597c2a7f Merge pull request #22345 from muink/patch-1
librespeed-go: Reload the daemon after modifying the tls certificate
2023-10-11 09:40:08 +08:00
Nick Hainke
9bd39a33b1 snowflake: update to 2.6.1
Release Notes:
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/tags/v2.6.1

Remove upstreamed patches:
- 0001-Bump-minimum-required-version-of-go.patch
- 0002-Update-dependencies.patch

Signed-off-by: Nick Hainke <vincent@systemli.org>
2023-10-10 10:30:28 +02:00
Tianling Shen
503825ef41 cloudreve: Update to 3.8.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-10-10 10:30:17 +08:00
Anya Lin
fd1d506fff librespeed-go: Reload the daemon after modifying the tls certificate
Make the daemon reload after the tls certificate is updated

Signed-off-by: Anya Lin <hukk1996@gmail.com>
2023-10-10 09:13:14 +08:00
Michal Hrusecky
eb7d756e79 samba4: Update to version 4.18.7
Update to the latest stable version in 4.18 series, for details, see
https://www.samba.org/samba/history/samba-4.18.7.html

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2023-10-09 08:41:46 +02:00