Noteworthy changes in version 2.4.8 (2025-05-14)
------------------------------------------------
* gpg: Fix a verification DoS due to a malicious subkey in the
keyring. [T7527]
* gpg: Fix a regression in 2.4.7 for generating a key from card.
[T7457]
* gpg: Fix --quick-add-key for Weierstrass ECC with usage given.
[T7506]
* gpg: Fully implement the group key flag. [rGedd01d8fc4]
* gpg: Make combination of show-only-fpr-mbox and show-unusable-uid
work. [rGeb2a90d343]
* gpgsm: Do not return an error code when importing a certificate
with an empty subject. [T7171]
* scd: Accept P15 cards with a zero-length label. [rG18b4ebb28a]
* keyboxd: Use case-insensitive search for mail addresses. [T7576]
* gpgconf: Fix reload and kill of keyboxd. [T7569]
* w32: Fix posssible lockup due to lost select results.
[rG9448d01d61]
Release-info: https://dev.gnupg.org/T7428
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 3017332949)
As a replacement for this project despite it was resurrected,
it is not maintained.
We added stress-ng [1], which is regularly updated and
gets new features and there is no reason to have two packages
in this repository.
[1] fba6bb9489 ("stress-ng: add")
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 74aaf9c131)
Enable building cryptsetup-reencrypt, integritysetup and veritysetup,
add new binary packages for integritysetup and veritysetup.
Changes since version 2.7.4
~~~~~~~~~~~~~~~~~~~~~~~~~~~
* Fix possible online reencryption data corruption (only in 2.7.x).
In some situations (initializing a suspended device-mapper device),
cryptsetup disabled direct-io device access. This caused unsafe
online reencryption operations that could lead to data corruption.
The code now adds strict checks (and aborts the operation) and
changes direct-io detection code to prevent data corruption.
* Fix a clang compilation error in SSH token plugin.
As clang linker treats missing symbols as errors, the linker phase
for the SSH token failed as the optional cryptsetup_token_buffer_free
was not defined.
* Fix crypto backend initialization in crypt_format_luks2_opal API call.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit befdf8a5b2)
A recent change (00d420e80) removed the `output` function, which textfile.lua was
using to output metrics. So use the underlying output handle instead
Signed-off-by: Rob Hoelz <rob@hoelz.ro>
(cherry picked from commit 86e20d37a8)
netclass collector scrape time goes from 230ms to 170ms
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 00d420e801)
Request only 'interfaces' status, as we don't use 'connected' and
'policies' status. On my router with 5 wans / 2 tracking IPs per wan,
scrape time goes from 1.90s to 1.30s (still pretty slow but better)
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit caeb4c1834)
With valid 'cert'/'key' config, prometheus-node-exporter-lua
will respond to https instead of http on 'listen_port'.
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 73f9b9ab79)
hostapd exposes the `hostapd-auth` ubus object. In both
hostapd_ubus_stations.lua and hostapd_stations.lua this object is
incorrectly matched as if it were a wifi phy such as `hostapd.phy0-ap0`.
Using the literal period to find interfaces (^hostapd%.) instead of the
pattern-matching period (hostapd.) fixes this.
fix formatting consistency
Signed-off-by: Michael Payne <10254938+mikepayne02@users.noreply.github.com>
[fix version conflict]
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 28c085f7c3)
Description:
1. Avoid error on nil value by skipping over it
2. Adds a newline to error messages
Signed-off-by: Amos Shapira <amos.shapira@gmail.com>
[bump version]
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit bb43d5f28e)
Update nano editor to version 8.5.
Upstream has fixed the gnulib related cross-compilation problem,
so remove the config hack that was added at the 8.4 update.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit cfdf5fffec)
This patch was introduced by me in commit
62513dc576 ("mc: fix mouse handling")
and that commit backported patch from master branch and it that time,
there was not any release, which included it.
Since 4.8.2.5 update, we are still rebasing it, no need to do that.
Fixes: eb0c3b534a ("mc: update to 4.8.25")
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit fa01e8adfc)
If nls.mk is not included and BUILD_NLS is set compilation
will fail with various undefined references to the libiconv
library. So this commit includes the missing nls.mk.
Signed-off-by: Til Kaiser <mail@tk154.de>
(cherry picked from commit d8f2960e14)
The custom Build/Compile definition was overriding the default OpenWrt build logic,
causing issues when compiling with fPIC.
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 57d860a6aa)
This commit updates the mstflint package to the latest
4.30.0 release. It also drops the zlib dependency because
libsqlite3 and libxml2 already depend on it.
Signed-off-by: Til Kaiser <mail@tk154.de>
(cherry picked from commit e337b588a4)
Adjust .json names to match the plugin names: use '-' instead of '_'
Fix commits 033c19a and e36b727 that used a filename differing
from the plugin name used in OpenWrt. That prevented package compilation
to find and include the .json files that were left out of the package.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit beb0de663c)
Based on ethtool-lua library, add interface statistics to the
prometheus-node-exporter.
As closely as possible, the behaviour of the implementation at
400c397993/collector/ethtool_linux.go (L208)
is replicated.
Signed-off-by: Kevin Jilissen <info@kevinjilissen.nl>
[squash commits, bump version, fix permission, use untyped, rename to ethtool]
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 9f94448b71)
Fix compilation with gcc 14 by applying the -std=c17 flag, as suggested
by lededev in 2d3f68cc8c (commitcomment-153860241)
(also -c23 seems to work ok with gcc14, but that seems to break gcc13)
Remove the previous autoreconf fix attempt.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 02c134e2ba)
PKG_FIXUP:=autoreconf introduced in this commit[1] to fix builds with GCC 14
does not play well with GCC 13. Apply it conditionally.
I build some coreutils packages under GCC 13 and again under GCC 14 and both
completed successfully.
Build system: x86/64
Build-tested: x86/64
Fixes https://github.com/openwrt/packages/issues/26175
1. b1a648e1ff
Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 716cb3deac)
This fixes the build on GCC 14 and solves issue https://github.com/openwrt/packages/issues/26175
Maintainer: hnyman
Compile tested: x86/64, QEMU Standard PC (Q35 + ICH9, 2009), r29064-696ad7b1aa09
Compile tested: ath79/generic, TP-Link Archer C7 v4, r29064-696ad7b1aa09
Compile tested: realtek/rtl838x, Netgear GS108T v3, r29064-696ad7b1aa09
Run tested: x86/64, QEMU Standard PC (Q35 + ICH9, 2009), r29064-696ad7b1aa09, booted and used for 7h without issues
Run tested: ath79/generic, TP-Link Archer C7 v4, r29064-696ad7b1aa09, booted and used for 7h without issues
Run tested: realtek/rtl838x, Netgear GS108T v3, r29064-696ad7b1aa09, booted and used for 7h without issues
Signed-off-by: Pascal Ernster <git@hardfalcon.net>
(cherry picked from commit b1a648e1ff)
Adjust the dependency to the virtual coreutils main package in
each app to be selective. Otherwise you need to first select the
main coreutils before the actuall apps can be selected. That has
prevented other applications from depending on just one individual
coreutils app, as they have needed to depend also on the empty main
coreutils package.
Reference to discussion in:
https://github.com/openwrt/luci/issues/7605
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 82852a9f15)
