Commit Graph

31001 Commits

Author SHA1 Message Date
Fabrice Fontaine
ee71f6bfdb net/openssh: fix PKG_CPE_ID
openbsd:openssh is a better CPE ID than openssh:openssh as this CPE ID
has the latest CVEs (whereas openssh:openssh has no CVEs):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:openbsd:openssh

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 4faf09cfb5)
2025-08-07 09:25:01 +08:00
George Sapkin
8c5b6dc996 yt-dlp: assign PKG_CPE_ID
Link: https://nvd.nist.gov/products/cpe/detail/2739DE26-F16B-478E-A270-32C659C7F2C6?namingFormat=2.2&orderBy=CPEURI&keyword=yt-dlp&status=FINAL
Link: https://github.com/openwrt/packages/issues/8534
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 303f7973f7)
2025-08-07 09:25:01 +08:00
George Sapkin
dc4dee5d30 tailscale: assign PKG_CPE_ID
Link: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.2&orderBy=2.2&keyword=cpe%3A2.3%3Aa%3Atailscale%3Atailscale&status=FINAL
Link: https://github.com/openwrt/packages/issues/8534
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit f6c7871464)
2025-08-07 09:25:01 +08:00
George Sapkin
c5c0c201ee adguardhome: assign PKG_CPE_ID
Link: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&orderBy=2.3&keyword=cpe%3A2.3%3Aa%3Aadguard%3Aadguardhome
Link: https://github.com/openwrt/packages/issues/8534
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit fd52fb6e3c)
2025-08-07 09:25:01 +08:00
Tianling Shen
72eba96f43 microsocks: Update to 1.0.5
Release note: https://github.com/rofl0r/microsocks/releases/tag/v1.0.5

Removed upstreamed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ab4b299591)
2025-07-29 17:09:50 +08:00
Tianling Shen
f0c296aadc v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 083f4ce617)
2025-07-25 13:48:28 +08:00
Gregory Gullin
8f71668a83 sing-box: Update to 1.11.15
changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.11.15

Signed-off-by: Gregory Gullin <garuwex@gmail.com>
(cherry picked from commit b9ac3c5e7d)
2025-07-25 13:46:13 +08:00
Anton P.
43df63ce78 sing-box: Update to 1.11.13
changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.11.13

Signed-off-by: Anton P. <dragunap@gmail.com>
(cherry picked from commit 24e3f2a4c8)
2025-07-25 13:46:10 +08:00
Anton P.
e5665a3a9c sing-box: Update to 1.11.9
changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.11.9

Signed-off-by: Anton P. <dragunap@gmail.com>
[line break added after commit title, accidental line removal fixed]
(cherry picked from commit c0a996ddd9)
2025-07-25 13:46:07 +08:00
Mosney Strange
577564371e sing-box: Update to 1.11.3
Signed-off-by: Mosney Strange <Mosney@users.noreply.github.com>
(cherry picked from commit 2d51880e48)
2025-07-25 13:46:04 +08:00
Tianling Shen
acaae481ac btop: Update to 1.4.4
Removed upstreamed patch.

Release note: https://github.com/aristocratos/btop/releases/tag/v1.4.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 062287375c)
2025-07-25 13:44:56 +08:00
Nate Robinson
b0285689a0 btop: add patch to fix download/upload display
Uses https://github.com/aristocratos/btop/pull/1156

Signed-off-by: Nate Robinson <nrobinson2000@me.com>
(cherry picked from commit 99bc4798ed)
2025-07-25 13:44:52 +08:00
Austin Lane
a89664e701 python-click: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit 117a3a2b1b)
2025-07-24 18:10:15 +03:00
Jan Kardell
2b15fcabbf sudo: Fix license file
Signed-off-by: Jan Kardell <jan.kardell@telliq.com>
(cherry picked from commit 7841c67092)
2025-07-21 14:45:10 +08:00
Jan Kardell
c5ad64892d sudo: bump to version 1.9.17p1
Fixes: CVE-2025-32462
Fixes: CVE-2025-32463

Signed-off-by: Jan Kardell <jan.kardell@telliq.com>
(cherry picked from commit b153b6a034)
[rebase upon 23.05 branch]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-07-21 14:45:10 +08:00
Alexandru Ardelean
1b90a4c5e8 sudo: bump to version 1.9.16p2
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 190b99b1bc)
[rebase upon 23.05 branch]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-07-21 14:45:10 +08:00
Alexandru Ardelean
aae4f69f17 sudo: bump to verison 1.9.15p5
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit f2a6449b6f)
2025-07-21 14:45:10 +08:00
Alexandru Ardelean
43e7dde6e4 sudo: bump to verison 1.9.15p4
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 62f4f97bdb)
2025-07-21 14:45:10 +08:00
Josef Schlehofer
bdcdc0e364 python-uci: update to version 0.10.3 + two patches
Release notes:
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.0
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.1
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.2
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.3

Upstream (pyuci developers) removed setup.py,
I bring it back to be able to compile it despite
that we do support building packages, which are
using pyproject.toml, but the thing here is
that their pyproject.toml requires setuptools 74.1.0
[1] [2], but Python 3.11 is using bundled setuptools
and pip [3] [4]. In current version 3.11.13,
there is still outdated version of setuptools, but
it looks like that in the newer version, there will be
new one [5].

Once, there is released Python 3.11.14 and updated
in OpenWrt, these patches can be dropped.

[1] 240180b294/pyproject.toml (L29)
[2] https://setuptools.pypa.io/en/stable/history.html#v74-1-0
[3] c94ab433ca/lang/python/python3-version.mk (L18)
[4] https://github.com/python/cpython/commits/3.11/Lib/ensurepip/_bundled
[5] c96ab19ae4

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d457c26c0d)
2025-07-18 11:35:55 +02:00
Austin Lane
c75de96989 python-urllib3: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit d6c644c5f5)
2025-07-15 15:06:49 +02:00
Rosen Penev
02f00ef91b protobuf: don't use shared libraries for host
Avoids needing to handle rpath.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d24229e441)
2025-07-04 14:05:20 +02:00
Jan Hák
3fcb698a6c knot-resolver: update to version 5.7.4
Knot Resolver 5.7.4 (2024-07-23)
================================

Security
--------
- reduce buffering of transmitted data, especially TCP-based in userspace
  Also expose some of the new tweaks in lua:
   (require 'ffi').C.the_worker.engine.net.tcp.user_timeout = 1000
   (require 'ffi').C.the_worker.engine.net.listen_{tcp,udp}_buflens.{snd,rcv}

Improvements
------------
- add the fresh DNSSEC root key KSK-2024 already, Key ID 38696

Incompatible changes
--------------------
- libknot 3.0.x support is dropped
  Upstream last maintained 3.0.x in spring 2022.

Knot Resolver 5.7.3 (2024-05-30)
================================

Improvements
------------
- stats: add separate metrics for IPv6 and IPv4

Bugfixes
--------
- fix NSEC3 records missing in answer for positive wildcard expansion
  with the NSEC3 having over-limit iteration count

Knot Resolver 5.7.2 (2024-03-27)
================================

Bugfixes
--------
- fix on 32-bit systems with 64-bit time_t

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 6e208887e3)
2025-07-04 14:03:21 +02:00
Philip Prindeville
f88b618fe2 named: /var/run/named isn't being created with correct permissions
It needs to be group writable or session.key can't be written once
named drops privileges.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit b82574b31c)
2025-07-03 10:27:02 -04:00
Andreas Gnau
9afcbfa747 tang: Refresh patches
Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>
2025-07-02 12:03:12 +02:00
Austin Lane
2de2fc8dee libulfius: Install library on target
Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit 6c62e0fcfe)
2025-06-18 00:41:46 +02:00
Austin Lane
d8fb5aec90 liborcania: Install library on target
Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit 768b995f98)
2025-06-17 22:28:02 +02:00
Hannu Nyman
b6f37bc584 nano: update to 8.5
Update nano editor to version 8.5.

Upstream has fixed the gnulib related cross-compilation problem,
so remove the config hack that was added at the 8.4 update.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit cfdf5fffec)
2025-06-16 19:45:33 +03:00
Tianling Shen
3c65c1752a btop: add migration for alias command
Files in `/etc/profile.d/` are marked as user configs and won't be
replaced to new version when update the package, so add a migration
script for this.

Fixes: #26709
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ae33358c4f)
2025-06-16 18:31:13 +08:00
Tianling Shen
75e3e5d327 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 7d6535737c)
2025-06-16 18:31:13 +08:00
Tianling Shen
daba53947d v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ed12bfe13c)
2025-06-16 18:31:13 +08:00
Tianling Shen
4b2429557d v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a91d278804)
2025-06-16 18:31:13 +08:00
Liangbin Lian
2855313b1f transmission: add syscalls to seccomp filter
Add missing syscalls found with `/etc/init.d/transmission trace`.

fix crash on boot on x86_64 platform

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit d827297546)
2025-06-07 15:08:43 +02:00
Serhii Ivanov
c6576f049e transmissision: remove build dependency on nodejs
Have no idea why such dependency was added.
No documentation from transmission that they need
such dependency on build time. On the other hand
saves vast of time during build

Signed-off-by: Serhii Ivanov <icegood1980@gmail.com>
(cherry picked from commit a06829b0a2)
2025-06-07 15:08:37 +02:00
Peter van Dijk
d6c912fc8e dnsdist: update to 1.9.10
fixes CVE-2025-30193

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit ec30d1e4f6)
2025-06-03 19:07:55 +02:00
Tianling Shen
840f3ac55a netavark: revert lock cargo dependencies
Now we have rust 1.85.0.

This reverts commit aba78031f5.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-05-29 17:51:52 +08:00
Jonathan McCrohan
66b5dfadcb rust: update to 1.85.0
Fixes podman build breakage which was caused by podman depending on
netavark, which in turn depends on rust-iptables.

rust-iptables requires rust 1.85.0 since commit 75825cd
75825cd9c1

Signed-off-by: Jonathan McCrohan <jmccrohan@gmail.com>
(cherry picked from commit c675028528)
[refresh patches]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-05-29 17:51:12 +08:00
hingbong lo
8af896d25c rust: update to 1.84.0
Signed-off-by: hingbong lo <hingbonglo@gmail.com>
(cherry picked from commit aff8367c7a)
2025-05-29 17:22:01 +08:00
Noah Meyerhans
f1673cee7e bind: bump to 9.18.37
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2025-05-21 21:00:04 -04:00
Noah Meyerhans
72561be263 bind: bump to 9.18.36
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2025-05-20 08:01:53 +02:00
Michael Heimpold
afcbfee140 php8: update to 8.2.28
This fixes:
    - CVE-2025-1217
    - CVE-2025-1219
    - CVE-2025-1734
    - CVE-2025-1736
    - CVE-2025-1861

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.2.28

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-05-18 18:00:04 +02:00
Tianling Shen
c010fa5dd1 btop: Update to 1.4.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5082f94791)
2025-05-13 14:27:03 +08:00
Tianling Shen
b2f0bbe07c yq: Update to 4.45.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 35eb372aa5)
2025-05-13 14:26:57 +08:00
Tianling Shen
6d9afba45b yq: Update to 4.44.6
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 649ff95b1e)
2025-05-13 14:24:35 +08:00
Tianling Shen
6c2cca222f yq: Update to 4.44.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 6945c7bb65)
2025-05-13 14:24:33 +08:00
Peter van Dijk
be13825169 dnsdist: update to 1.9.9
fixes CVE-2025-30194

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2025-05-08 22:06:31 +03:00
Tianling Shen
24ef56349f perl-ack: Update to 3.8.2
ack would always set a return code of 1 if -c was used. Now it properly
returns 1 if no files match, and 0 if any files match.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b6b9cd38fa)
2025-05-04 20:39:19 +08:00
Tianling Shen
bfcd45bcb4 ack: Update to 3.8.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0c0d897b47)
2025-05-04 20:39:14 +08:00
Tianling Shen
30cb4250d8 btop: Update to 1.4.2
Update alias command.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8df8700a13)
2025-05-04 20:38:55 +08:00
Tianling Shen
1fcd857ca5 btop: Update to 1.4.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0e5cc7de57)
2025-05-04 20:38:34 +08:00
Tianling Shen
c4add161e3 v2raya: Update to 2.2.6.7
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit aad793b6f4)
2025-04-22 22:18:33 +08:00