Fabrice Fontaine
ee71f6bfdb
net/openssh: fix PKG_CPE_ID
...
openbsd:openssh is a better CPE ID than openssh:openssh as this CPE ID
has the latest CVEs (whereas openssh:openssh has no CVEs):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:openbsd:openssh
Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
(cherry picked from commit 4faf09cfb5 )
2025-08-07 09:25:01 +08:00
George Sapkin
8c5b6dc996
yt-dlp: assign PKG_CPE_ID
...
Link: https://nvd.nist.gov/products/cpe/detail/2739DE26-F16B-478E-A270-32C659C7F2C6?namingFormat=2.2&orderBy=CPEURI&keyword=yt-dlp&status=FINAL
Link: https://github.com/openwrt/packages/issues/8534
Signed-off-by: George Sapkin <george@sapk.in >
(cherry picked from commit 303f7973f7 )
2025-08-07 09:25:01 +08:00
George Sapkin
dc4dee5d30
tailscale: assign PKG_CPE_ID
...
Link: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.2&orderBy=2.2&keyword=cpe%3A2.3%3Aa%3Atailscale%3Atailscale&status=FINAL
Link: https://github.com/openwrt/packages/issues/8534
Signed-off-by: George Sapkin <george@sapk.in >
(cherry picked from commit f6c7871464 )
2025-08-07 09:25:01 +08:00
George Sapkin
c5c0c201ee
adguardhome: assign PKG_CPE_ID
...
Link: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&orderBy=2.3&keyword=cpe%3A2.3%3Aa%3Aadguard%3Aadguardhome
Link: https://github.com/openwrt/packages/issues/8534
Signed-off-by: George Sapkin <george@sapk.in >
(cherry picked from commit fd52fb6e3c )
2025-08-07 09:25:01 +08:00
Tianling Shen
72eba96f43
microsocks: Update to 1.0.5
...
Release note: https://github.com/rofl0r/microsocks/releases/tag/v1.0.5
Removed upstreamed patches.
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
(cherry picked from commit ab4b299591 )
2025-07-29 17:09:50 +08:00
Tianling Shen
f0c296aadc
v2ray-geodata: Update to latest version
...
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
(cherry picked from commit 083f4ce617 )
2025-07-25 13:48:28 +08:00
Gregory Gullin
8f71668a83
sing-box: Update to 1.11.15
...
changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.11.15
Signed-off-by: Gregory Gullin <garuwex@gmail.com >
(cherry picked from commit b9ac3c5e7d )
2025-07-25 13:46:13 +08:00
Anton P.
43df63ce78
sing-box: Update to 1.11.13
...
changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.11.13
Signed-off-by: Anton P. <dragunap@gmail.com >
(cherry picked from commit 24e3f2a4c8 )
2025-07-25 13:46:10 +08:00
Anton P.
e5665a3a9c
sing-box: Update to 1.11.9
...
changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.11.9
Signed-off-by: Anton P. <dragunap@gmail.com >
[line break added after commit title, accidental line removal fixed]
(cherry picked from commit c0a996ddd9 )
2025-07-25 13:46:07 +08:00
Mosney Strange
577564371e
sing-box: Update to 1.11.3
...
Signed-off-by: Mosney Strange <Mosney@users.noreply.github.com >
(cherry picked from commit 2d51880e48 )
2025-07-25 13:46:04 +08:00
Tianling Shen
acaae481ac
btop: Update to 1.4.4
...
Removed upstreamed patch.
Release note: https://github.com/aristocratos/btop/releases/tag/v1.4.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
(cherry picked from commit 062287375c )
2025-07-25 13:44:56 +08:00
Nate Robinson
b0285689a0
btop: add patch to fix download/upload display
...
Uses https://github.com/aristocratos/btop/pull/1156
Signed-off-by: Nate Robinson <nrobinson2000@me.com >
(cherry picked from commit 99bc4798ed )
2025-07-25 13:44:52 +08:00
Austin Lane
a89664e701
python-click: add hostbuild
...
Signed-off-by: Austin Lane <vidplace7@gmail.com >
(cherry picked from commit 117a3a2b1b )
2025-07-24 18:10:15 +03:00
Jan Kardell
2b15fcabbf
sudo: Fix license file
...
Signed-off-by: Jan Kardell <jan.kardell@telliq.com >
(cherry picked from commit 7841c67092 )
2025-07-21 14:45:10 +08:00
Jan Kardell
c5ad64892d
sudo: bump to version 1.9.17p1
...
Fixes: CVE-2025-32462
Fixes: CVE-2025-32463
Signed-off-by: Jan Kardell <jan.kardell@telliq.com >
(cherry picked from commit b153b6a034 )
[rebase upon 23.05 branch]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
2025-07-21 14:45:10 +08:00
Alexandru Ardelean
1b90a4c5e8
sudo: bump to version 1.9.16p2
...
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro >
(cherry picked from commit 190b99b1bc )
[rebase upon 23.05 branch]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
2025-07-21 14:45:10 +08:00
Alexandru Ardelean
aae4f69f17
sudo: bump to verison 1.9.15p5
...
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro >
(cherry picked from commit f2a6449b6f )
2025-07-21 14:45:10 +08:00
Alexandru Ardelean
43e7dde6e4
sudo: bump to verison 1.9.15p4
...
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro >
(cherry picked from commit 62f4f97bdb )
2025-07-21 14:45:10 +08:00
Josef Schlehofer
bdcdc0e364
python-uci: update to version 0.10.3 + two patches
...
Release notes:
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.0
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.1
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.2
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.3
Upstream (pyuci developers) removed setup.py,
I bring it back to be able to compile it despite
that we do support building packages, which are
using pyproject.toml, but the thing here is
that their pyproject.toml requires setuptools 74.1.0
[1] [2], but Python 3.11 is using bundled setuptools
and pip [3] [4]. In current version 3.11.13,
there is still outdated version of setuptools, but
it looks like that in the newer version, there will be
new one [5].
Once, there is released Python 3.11.14 and updated
in OpenWrt, these patches can be dropped.
[1] 240180b294/pyproject.toml (L29)
[2] https://setuptools.pypa.io/en/stable/history.html#v74-1-0
[3] c94ab433ca/lang/python/python3-version.mk (L18)
[4] https://github.com/python/cpython/commits/3.11/Lib/ensurepip/_bundled
[5] c96ab19ae4
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
(cherry picked from commit d457c26c0d )
2025-07-18 11:35:55 +02:00
Austin Lane
c75de96989
python-urllib3: add hostbuild
...
Signed-off-by: Austin Lane <vidplace7@gmail.com >
(cherry picked from commit d6c644c5f5 )
2025-07-15 15:06:49 +02:00
Rosen Penev
02f00ef91b
protobuf: don't use shared libraries for host
...
Avoids needing to handle rpath.
Signed-off-by: Rosen Penev <rosenp@gmail.com >
(cherry picked from commit d24229e441 )
2025-07-04 14:05:20 +02:00
Jan Hák
3fcb698a6c
knot-resolver: update to version 5.7.4
...
Knot Resolver 5.7.4 (2024-07-23)
================================
Security
--------
- reduce buffering of transmitted data, especially TCP-based in userspace
Also expose some of the new tweaks in lua:
(require 'ffi').C.the_worker.engine.net.tcp.user_timeout = 1000
(require 'ffi').C.the_worker.engine.net.listen_{tcp,udp}_buflens.{snd,rcv}
Improvements
------------
- add the fresh DNSSEC root key KSK-2024 already, Key ID 38696
Incompatible changes
--------------------
- libknot 3.0.x support is dropped
Upstream last maintained 3.0.x in spring 2022.
Knot Resolver 5.7.3 (2024-05-30)
================================
Improvements
------------
- stats: add separate metrics for IPv6 and IPv4
Bugfixes
--------
- fix NSEC3 records missing in answer for positive wildcard expansion
with the NSEC3 having over-limit iteration count
Knot Resolver 5.7.2 (2024-03-27)
================================
Bugfixes
--------
- fix on 32-bit systems with 64-bit time_t
Signed-off-by: Jan Hák <jan.hak@nic.cz >
(cherry picked from commit 6e208887e3 )
2025-07-04 14:03:21 +02:00
Philip Prindeville
f88b618fe2
named: /var/run/named isn't being created with correct permissions
...
It needs to be group writable or session.key can't be written once
named drops privileges.
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com >
(cherry picked from commit b82574b31c )
2025-07-03 10:27:02 -04:00
Andreas Gnau
9afcbfa747
tang: Refresh patches
...
Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu >
2025-07-02 12:03:12 +02:00
Austin Lane
2de2fc8dee
libulfius: Install library on target
...
Signed-off-by: Austin Lane <vidplace7@gmail.com >
(cherry picked from commit 6c62e0fcfe )
2025-06-18 00:41:46 +02:00
Austin Lane
d8fb5aec90
liborcania: Install library on target
...
Signed-off-by: Austin Lane <vidplace7@gmail.com >
(cherry picked from commit 768b995f98 )
2025-06-17 22:28:02 +02:00
Hannu Nyman
b6f37bc584
nano: update to 8.5
...
Update nano editor to version 8.5.
Upstream has fixed the gnulib related cross-compilation problem,
so remove the config hack that was added at the 8.4 update.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi >
(cherry picked from commit cfdf5fffec )
2025-06-16 19:45:33 +03:00
Tianling Shen
3c65c1752a
btop: add migration for alias command
...
Files in `/etc/profile.d/` are marked as user configs and won't be
replaced to new version when update the package, so add a migration
script for this.
Fixes : #26709
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
(cherry picked from commit ae33358c4f )
2025-06-16 18:31:13 +08:00
Tianling Shen
75e3e5d327
v2ray-geodata: Update to latest version
...
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
(cherry picked from commit 7d6535737c )
2025-06-16 18:31:13 +08:00
Tianling Shen
daba53947d
v2ray-geodata: Update to latest version
...
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
(cherry picked from commit ed12bfe13c )
2025-06-16 18:31:13 +08:00
Tianling Shen
4b2429557d
v2ray-geodata: Update to latest version
...
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
(cherry picked from commit a91d278804 )
2025-06-16 18:31:13 +08:00
Liangbin Lian
2855313b1f
transmission: add syscalls to seccomp filter
...
Add missing syscalls found with `/etc/init.d/transmission trace`.
fix crash on boot on x86_64 platform
Signed-off-by: Liangbin Lian <jjm2473@gmail.com >
(cherry picked from commit d827297546 )
2025-06-07 15:08:43 +02:00
Serhii Ivanov
c6576f049e
transmissision: remove build dependency on nodejs
...
Have no idea why such dependency was added.
No documentation from transmission that they need
such dependency on build time. On the other hand
saves vast of time during build
Signed-off-by: Serhii Ivanov <icegood1980@gmail.com >
(cherry picked from commit a06829b0a2 )
2025-06-07 15:08:37 +02:00
Peter van Dijk
d6c912fc8e
dnsdist: update to 1.9.10
...
fixes CVE-2025-30193
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com >
(cherry picked from commit ec30d1e4f6 )
2025-06-03 19:07:55 +02:00
Tianling Shen
840f3ac55a
netavark: revert lock cargo dependencies
...
Now we have rust 1.85.0.
This reverts commit aba78031f5 .
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
2025-05-29 17:51:52 +08:00
Jonathan McCrohan
66b5dfadcb
rust: update to 1.85.0
...
Fixes podman build breakage which was caused by podman depending on
netavark, which in turn depends on rust-iptables.
rust-iptables requires rust 1.85.0 since commit 75825cd
75825cd9c1
Signed-off-by: Jonathan McCrohan <jmccrohan@gmail.com >
(cherry picked from commit c675028528 )
[refresh patches]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
2025-05-29 17:51:12 +08:00
hingbong lo
8af896d25c
rust: update to 1.84.0
...
Signed-off-by: hingbong lo <hingbonglo@gmail.com >
(cherry picked from commit aff8367c7a )
2025-05-29 17:22:01 +08:00
Noah Meyerhans
f1673cee7e
bind: bump to 9.18.37
...
Signed-off-by: Noah Meyerhans <frodo@morgul.net >
2025-05-21 21:00:04 -04:00
Noah Meyerhans
72561be263
bind: bump to 9.18.36
...
Signed-off-by: Noah Meyerhans <frodo@morgul.net >
2025-05-20 08:01:53 +02:00
Michael Heimpold
afcbfee140
php8: update to 8.2.28
...
This fixes:
- CVE-2025-1217
- CVE-2025-1219
- CVE-2025-1734
- CVE-2025-1736
- CVE-2025-1861
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.2.28
Signed-off-by: Michael Heimpold <mhei@heimpold.de >
2025-05-18 18:00:04 +02:00
Tianling Shen
c010fa5dd1
btop: Update to 1.4.3
...
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
(cherry picked from commit 5082f94791 )
2025-05-13 14:27:03 +08:00
Tianling Shen
b2f0bbe07c
yq: Update to 4.45.1
...
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
(cherry picked from commit 35eb372aa5 )
2025-05-13 14:26:57 +08:00
Tianling Shen
6d9afba45b
yq: Update to 4.44.6
...
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
(cherry picked from commit 649ff95b1e )
2025-05-13 14:24:35 +08:00
Tianling Shen
6c2cca222f
yq: Update to 4.44.5
...
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
(cherry picked from commit 6945c7bb65 )
2025-05-13 14:24:33 +08:00
Peter van Dijk
be13825169
dnsdist: update to 1.9.9
...
fixes CVE-2025-30194
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com >
2025-05-08 22:06:31 +03:00
Tianling Shen
24ef56349f
perl-ack: Update to 3.8.2
...
ack would always set a return code of 1 if -c was used. Now it properly
returns 1 if no files match, and 0 if any files match.
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
(cherry picked from commit b6b9cd38fa )
2025-05-04 20:39:19 +08:00
Tianling Shen
bfcd45bcb4
ack: Update to 3.8.0
...
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
(cherry picked from commit 0c0d897b47 )
2025-05-04 20:39:14 +08:00
Tianling Shen
30cb4250d8
btop: Update to 1.4.2
...
Update alias command.
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
(cherry picked from commit 8df8700a13 )
2025-05-04 20:38:55 +08:00
Tianling Shen
1fcd857ca5
btop: Update to 1.4.1
...
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
(cherry picked from commit 0e5cc7de57 )
2025-05-04 20:38:34 +08:00
Tianling Shen
c4add161e3
v2raya: Update to 2.2.6.7
...
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
(cherry picked from commit aad793b6f4 )
2025-04-22 22:18:33 +08:00