Commit Graph

27865 Commits

Author SHA1 Message Date
Tianling Shen
04eadf8600 dnsproxy: Update to 0.46.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 88d33fef91)
2022-12-09 06:59:53 +08:00
Tianling Shen
f5547cfdea cloudflared: Update to 2022.11.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a1a14c1103)
2022-12-09 06:59:44 +08:00
Stan Grishin
4962ad8e8a https-dns-proxy: add mdns service records
* add mdns records for started instances
* Makefile: use $(PKG_VERSION) as a value for PKG_SOURCE_DATE instead of
  hard-coding it

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit ee37d0ec86)
2022-12-08 21:13:48 +00:00
Alois Klink
4abdc2f333 github-ci: error on any shell errors
Enable `errexit` and `nounset` [POSIX shell options][1]
in `.github/workflows/entrypoint.sh` so that the script fails
if any command within the script fails.

[1]: https://pubs.opengroup.org/onlinepubs/9699919799//utilities/V3_chap02.html#set

Reported-by: Marius Dinu <m95d+git@psihoexpert.ro>
Fixes: https://github.com/openwrt/packages/issues/19953
Signed-off-by: Alois Klink <alois@aloisklink.com>
(cherry picked from commit 18d3c529fa)
2022-12-08 10:56:11 +01:00
Alexandru Ardelean
8506ba5879 Merge pull request #20033 from peter-stadler/openwrt-22.03
django: bump version 4.0.8
2022-12-08 11:26:21 +02:00
Peter Stadler
798fe3f59f django: bump version 4.0.8
fix CVE-2022-41323

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2022-12-08 08:36:15 +01:00
Richard Yu
ce3e9d4b4b natmap: merge "ipv4" and "ipv6" options into single "family" option
Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit 190e04caf6)
2022-12-07 22:29:58 +08:00
Daniel Golle
0393a5c19b snowflake: update to version 2.4.1
Changes in version v2.4.1 - 2022-12-01
 - Issue 40224: Bug fix in utls roundtripper

Changes in version v2.4.0 - 2022-11-29
 - Fix proxy command line help output
 - Issue 40123: Reduce multicast DNS candidates
 - Add ICE ephemeral ports range setting
 - Reformat using Go 1.19
 - Update CI tests to include latest and minimum Go versions
 - Issue 40184: Use fixed unit for bandwidth logging
 - Update gorilla/websocket to v1.5.0
 - Issue 40175: Server performance improvements
 - Issue 40183: Change snowflake proxy log verbosity
 - Issue 40117: Display proxy NAT type in logs
 - Issue 40198: Add a `orport-srcaddr` server transport option
 - Add gofmt output to CI test
 - Issue 40185:  Change bandwidth type from int to int64 to prevent overflow
 - Add version output support to snowflake
 - Issue 40229: Change regexes for ipv6 addresses to catch url-encoded addresses
 - Issue 40220: Close stale connections in standalone proxy

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f60f11f927)
2022-12-06 17:12:57 +01:00
Richard Yu
ec2fbd57ee natmap: add new package
NATMap is a program for opening port behind full cone NAT (NAT-1),
without the need for using UPnP or another port forward settings.

More details can be found at original repo: https://github.com/heiher/natmap

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit e691a25cb3)
2022-12-06 17:12:32 +01:00
Hannu Nyman
f6a6887761 xz: update to 5.2.9
Update xz to version 5.2.9.

Switch back to .bz2 sources, as we already download .bz2 for tools/
No sense to re-download sources as a .xz file.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit c122236552)
2022-12-06 12:08:26 +02:00
Nick Hainke
b1b1281da8 xz: update to 5.2.7
Update to latest version. No release notes available.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 964e59d385)
2022-12-06 12:08:26 +02:00
Nick Hainke
ed99f2f008 xz: update to 5.2.6
Release Notes:
https://git.tukaani.org/?p=xz.git;a=blob;f=NEWS;hb=HEAD

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit d7d39043c3)
2022-12-06 12:08:26 +02:00
Stanislav Petrashov
bdc161a079 tailscale: Update to version 1.32.3
Signed-off-by: Stanislav Petrashov <s@petrashov.ru>
(cherry picked from commit 1ffe60bc85)
2022-12-05 23:09:06 +01:00
Stanislav Petrashov
26dabd3741 tailscale: update to v1.32.0
Signed-off-by: Stanislav Petrashov <s@petrashov.ru>
(cherry picked from commit 9434a2dfb2)
2022-12-05 23:08:59 +01:00
Stan Grishin
023fe97006 Merge pull request #20010 from stangri/openwrt-22.03-pbr
[22.03] pbr: initial commit
2022-12-04 10:51:18 -07:00
Dobroslaw Kijowski
fda81981bd adguardhome: bump to 0.107.18
* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.17
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.18

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit e3dc753781)
2022-12-04 14:56:18 +01:00
YiZhen Choo
aa61ca8bf2 AdGuardHome: update to v0.107.16
Signed-off-by: YiZhen Choo <yizhen.c02@gmail.com>
(cherry picked from commit 64dabe2d68)
2022-12-04 14:56:11 +01:00
YiZhen Choo
acb201a0ab AdGuardHome: update to v0.107.12
Signed-off-by: YiZhen Choo <yizhen.c02@gmail.com>
(cherry picked from commit e806d85e46)
2022-12-04 14:56:08 +01:00
YiZhen Choo
820bcedfd3 AdGuardHome: update to v0.107.11
Signed-off-by: YiZhen Choo <yizhen.c02@gmail.com>
(cherry picked from commit 79acc3c21f)
2022-12-04 14:56:03 +01:00
Michael Heimpold
3352cf56d4 Merge pull request #20003 from mhei/22.03-php8-update-8.1.13
[22.03] php8: update to 8.1.13
2022-12-03 14:33:14 +01:00
Hauke Mehrtens
12bc0789a1 btrfs-progs: Update to version 6.0.1
This fixes compilation problems with glibc 2.36.

Full Changelog:
btrfs-progs-6.0 (2022-10-11)
-----------------------------
   * fi usage: in tabular output, print total size and slack size
   * mkfs:
      * option -O now accepts values from -R to unify the interface (-R will
	continue to work)
      * zone reset and discard is done in parallel on all devices
      * removed option --leafsize, deprecated long time ago
   * corrupt-block: recalculate checksum when changing generation
   * fixes:
      * convert: fix reserved range detection and overlaps
      * mkfs: fix creating files with reserved inode numbers with --rootdir
      * receive: escape filenames in command attributes
      * fix extent buffer leaks after transaction abort
   * experimental:
      * mkfs: support for block-group-tree (kernel 6.1)
      * fsverity in send (protocol v3, WIP)
      * btrfstune -b converts to block-group-tree
   * other:
      * cleanups, refactoring
      * new and updated tests
      * update documentation

btrfs-progs-6.0.1 (2022-11-04)
""""""""""""""""""""""""""""""
   * send: minor speed up for v2 due to increased buffer size
   * resize: invalid command line options fail with error code
   * quota rescan:
      * add long options --status and --wait
      * new option to wait but don't start rescan
   * qgroup show: print path by default, updated format
   * qgroup: new subcommand clear-stale, remove qgroups without their subvolumes
   * experimental:
      * add warnings to commands that have it enabled (mkfs, image, btrfstune)
   * other:
      * documentation, help text, error message updates

btrfs-progs-5.19 (2022-08-16)
-----------------------------
   * send: support protocol version 2
   * fi show: print all missing devices
   * device stats: add tabular output
   * replace: add alias to device group (device replace)
   * check: validate free space tree items
   * fixes:
      * convert: support large filesystems (block count > 32bit)
      * recognize filesystems with verity enabled
      * mkfs and DUP could write out of order, fix it for zoned mode
   * build:
      * optional support for LZO and ZSTD in receive
      * compatibility with glibc 2.36 (mount.h)
      * add fallbacks for new GCC builtins
   * other:
      * corrupt-block: target specific items, offsets
      * documentation updates, new pages from wiki
      * new tests

btrfs-progs-5.19.1 (2022-09-12)
"""""""""""""""""""""""""""""""
   * fix memory leaks (extent buffer, path)
   * check: verify block device size vs item
   * rescue fix-device-size: allow to shrink device item
   * receive: fix crash on wrong pinter free()
   * other:
      * experimental: support for block-group-tree
      * documentation updates
      * new tests

btrfs-progs-5.18 (2022-05-25)
-----------------------------
   * fixes:
      * dump-tree: don't print traling zeros in checksums
      * recognize paused balance as exclusive operation state, allow to start
        device add
      * convert: properly initialize target filesystem label
      * mkfs: don't create free space bitmaps for empty filesystem
   * restore: make lzo support build-time configurable, print supported
     compression in help text
   * update kernel-lib sources
   * other:
      * documentation updates, finish conversion to RST, CHANGES and INSTALL
        could be included into RST
      * fix build detection of experimental mode
      * new tests

btrfs-progs-5.18.1 (2022-06-06)
"""""""""""""""""""""""""""""""
   * fixes:
      * convert: fix self reference of toplevel directory
      * build: make kernel lib headers compatible with C++
   * zoned mode: verify minimum zone size 4MiB
   * libbtrfs: cleanups, merge headers and remove declarations of unexported
     symbols
   * other: documentation updates

btrfs-progs-5.17 (2022-04-26)
-----------------------------
   * check:
      * repair wrong num_devices in superblock
      * recognize overly long xattr names
      * fix wrong total bytes check for seed device
   * auto-repair on read on RAID56
   * property set: unify handling of empty value to mean default, changed meaning
     for property 'compression' to allow reset to default and to set NOCOMPRESS,
     since kernel 5.14
   * fixes:
       * dump-tree: print fs-verity items
       * fix location of system chunk on zoned filesystem
       * do not allow setting seeding flag on a filesystem with dirty log
       * mkfs and subpage support: use sectorsize as nodesize fallback for mixed
	 profiles
   * preparatory work for extent tree v2, global roots
   * experimental feature (unstable interface, not built by default,
       do not use for production)
       * btrfstune: option --csum to switch checksum algorithm
   * other:
       * cleanups, refactoring
       * update documentation build, remove asciidocs leftovers
       * update fssum to consider xattrs
       * add fsstress

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 99f5604905)
2022-12-03 12:55:05 +01:00
W. Michael Petullo
7e75519ac1 libgpg-error: copy gpg-error.pc to staging directory
Packages like libassuan and libksba would not compile after updating
libgpg-error to 1.46. This was because gpg-error.m4 (and thus the affected
packages' configure scripts) relies on gpgrt-config, which in turn needs
access to gpg-error.pc. This modifies the libgpg-error build process to
copy gpg-error.pc to OpenWrt's staging directory, so that it is available
for subsequent dependent package builds.

Fixes: https://github.com/openwrt/packages/issues/19880

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit a93e0269a1)
2022-12-03 12:54:14 +01:00
Tjeu Kayim
c38abeb951 gnupg: compile with -fcommon
This fixes a segfault because gnupg/g10/options.h struct opt
is otherwise not shared between the different compilation units,
resulting in opt.homedir being NULL when passed to make_filename.

$ gpg1 -i

gpg: signal 11 caught ... exiting
Segmentation fault

(gdb) bt
    #0  0x00007f17bb2185e2 in strlen (s=s@entry=0x0) at src/string/strlen.c:17
    #1  0x0000000000460ea0 in make_filename (first_part=first_part@entry=0x0) at gnupg-1.4.23/util/fileutil.c:174
    #2  0x000000000040ee42 in keydb_add_resource (url=url@entry=0x46bfe3 "secring.gpg", flags=flags@entry=4, secret=secret@entry=1)
        at gnupg-1.4.23/g10/keydb.c:238
    #3  0x00000000004062ee in main (argc=<optimized out>, argv=<optimized out>) at gnupg-1.4.23/g10/gpg.c:3323

Signed-off-by: Tjeu Kayim <15987676+TjeuKayim@users.noreply.github.com>
(cherry picked from commit f4058c1c18)
2022-12-03 12:53:37 +01:00
Josh Powers
6d14306a6f privoxy: fix postinst missing $
fixes: #19949

Signed-off-by: Josh Powers <powersj@fastmail.com>
(cherry picked from commit 46e4def61f)
2022-12-03 12:53:14 +01:00
Josh Powers
7c1b94bb13 privoxy: correctly format /etc/services additions
This adds the missing protocol (e.g. /tcp and /udp) to the entry in
/etc/services. If the entry already exists, it will add the /tcp to it.
Otherwise, it will look and add the tcp and udp entries if either is
missing.

fixes: openwrt#19665

Signed-off-by: Josh Powers <powersj@fastmail.com>
(cherry picked from commit 95edfa723c)
2022-12-03 12:53:09 +01:00
Stanislav Petrashov
a505d6f26a golang: update to v1.19.3
Signed-off-by: Stanislav Petrashov <s@petrashov.ru>
(cherry picked from commit 440dcd8d34)
2022-12-03 12:51:39 +01:00
Stanislav Petrashov
e0238d3091 golang: update to v1.19.2
Includes fixes for security vulnerabilities:
 * [CVE-2022-27664](https://github.com/advisories/GHSA-69cg-p879-7622) net/http: handle server errors after sending GOAWAY
 * [CVE-2022-32190](https://github.com/golang/go/issues/54385) net/url: JoinPath does not strip relative path components in all circumstances
 * [CVE-2022-2879](https://github.com/golang/go/issues/54853) archive/tar: unbounded memory consumption when reading headers
 * [CVE-2022-2880](https://github.com/golang/go/issues/54663) net/http/httputil: ReverseProxy should not forward unparseable query parameters
 * [CVE-2022-41715](https://github.com/golang/go/issues/55949) regexp/syntax: limit memory used by parsing regexps

Addresses the build failure:
* https://github.com/openwrt/packages/pull/19613

Signed-off-by: Stanislav Petrashov <s@petrashov.ru>
(cherry picked from commit 0ad7a2fe18)
2022-12-03 12:51:33 +01:00
Stan Grishin
b90c80aae4 pbr: initial commit
* The makefile produces the nft and iptables capable `pbr` package
  and the `pbr-iptables` package for legacy setups
* This replaces `vpnbypass` and `vpn-policy-routing` packages
* I'm soliciting feedback on this package and my intention is to
  update the version to 1.0.0 before this is merged, but I need the
  feedback on this and luci-app-pbr before then.

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 47eca64cb8)
2022-12-03 02:38:02 +00:00
Stan Grishin
e5083a9dba Merge pull request #19994 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: localizable error/warning messages
2022-12-02 12:19:27 -07:00
Julien Malik
6b21bd34f3 borgbackup: add package for 1.2.2
Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 2ad61a4529)
2022-12-02 11:26:09 +01:00
Julien Malik
5a7ecd11e0 python-pyfuse3: add package for 3.2.2
Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 17f58b94a7)
2022-12-02 11:26:04 +01:00
Julien Malik
bdf7a73cb5 python-trio: add package for 0.22.0
Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 07e29c3782)
2022-12-02 11:26:00 +01:00
Julien Malik
e2b1c2cd4f python-sniffio: add package for 1.3.0
Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit f35f4dace7)
2022-12-02 11:25:55 +01:00
Julien Malik
e029bdb32c python-outcome: add package for 1.2.0
Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 750facea90)
2022-12-02 11:25:50 +01:00
Julien Malik
dd9ff1b6c5 python-async-generator: add package for 1.10
Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 8fe1dab371)
2022-12-02 11:25:46 +01:00
Julien Malik
f0a0937011 python-exceptiongroup: add package for 1.0.4
Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit a19f331b06)
2022-12-02 11:25:37 +01:00
Julien Malik
0310a6edf4 python-sortedcontainers: add package for 2.4.0
Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 69655222fc)
2022-12-02 11:25:31 +01:00
Julien Malik
c5877bd654 xxhash: add package for 0.8.1
Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit dcbb2cf3d5)
2022-12-02 11:25:24 +01:00
Liangbin Lian
452681ea7f samba4: support both user map and valid users on same time
Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit e04e523a01)
2022-12-02 17:50:54 +08:00
Glenn Strauss
6de7a04c42 lighttpd: lighttpd.conf vars, comments, guidance
lighttpd.conf variables, documentation comments, configuration guidance

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit c862b524fb)
2022-12-02 09:57:21 +01:00
Glenn Strauss
bc6431a94a lighttpd: print stderr trace if validation fails
lighttpd.init validate_conf(): print stderr trace if validation fails

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 38ffa02e42)
2022-12-02 09:57:17 +01:00
Michael Heimpold
cf8ce7a4e2 php8: update to 8.1.13
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 056051da49)
2022-12-01 21:15:25 +01:00
Tianling Shen
e057ed8827 v2raya: backports upstream fixes and add 3 new options
It may take a long time waiting for a new tag, so backport these
important bug fixes for now.

While at it, added 3 new options provided by upstream, and deprecated
the usage of `$(AUTORELEASE)`.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 17362ce57c)
2022-12-01 01:44:19 +08:00
Tianling Shen
fe96d64b81 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 664ecae4e6)
2022-12-01 01:44:14 +08:00
Tianling Shen
a8858d1e3f xray-core: Update to 1.6.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b3e453f335)
2022-12-01 01:44:09 +08:00
Tianling Shen
85a0f22ca4 yq: Update to 4.30.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 255d19a007)
2022-12-01 01:44:04 +08:00
Maxim Anisimov
f19180a1d8 libqmi: bump to 1.30.8
Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit 0b0d8163d5)
2022-11-30 13:03:00 +01:00
Stan Grishin
6cf7648bd9 simple-adblock: localizable error/warning messages
* store all error/warning messages with the error text id so that
  they can be made localizable for the luci app

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 8047d2ccb7)
2022-11-29 22:41:55 +00:00
Stan Grishin
a99116f200 Merge pull request #19988 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: bugfix: detect dnsmasq ipset support
2022-11-29 14:41:13 -07:00
Stan Grishin
d59f56bb66 Merge pull request #19986 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: improve performance on restart
2022-11-29 14:40:58 -07:00