Commit graph

29155 commits

Author SHA1 Message Date
Nick Hainke
10424ab9bf gzip: update to 1.12
Release Notes:
https://lists.gnu.org/archive/html/info-gnu/2022-04/msg00003.html

Fixes: CVE-2022-1271
Signed-off-by: Nick Hainke <vincent@systemli.org>
2023-04-26 09:28:44 +03:00
Nick Hainke
37c6617f76 kmod: update to 30
Release Notes:
- https://github.com/kmod-project/kmod/releases/tag/v28
- https://github.com/kmod-project/kmod/releases/tag/v29
- https://github.com/kmod-project/kmod/releases/tag/v30

Signed-off-by: Nick Hainke <vincent@systemli.org>
2023-04-26 09:27:36 +03:00
Luiz Angelo Daros de Luca
786b3b9e9c yaml: only build static library
Do not build shared libraries to avoid host programs to dynamic link
libraries at non-standard paths.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2023-04-25 14:48:17 -03:00
Luiz Angelo Daros de Luca
39c14b859a ruby: statically link extensions into host ruby
Ruby uses extensions (.so files) that might also depend on other
libraries. When the linker builds an executable, it will refer to the
path it found the library, including those in the stagging dir. However,
when it links a shared library (like ruby exts), it will let that
dependency to be resolved at runtime.

During host and target build, ruby build script runs ruby scripts. When
it loads a ext that depends on another library, it will, by default,
look for the system libraries to satisfy that, breaking the build when
it fails. Setting LD_LIBRARY_PATH to the stagging lib dir is a valid
workaround.

Ruby can also be built statically linking all exts into ruby executable.
That will make the linker point to the stagging library path, fixing the
issue. It was used in the past but, at some point, ruby broke it. Now it
is working as expected.

Closes #20839

While at it, clean up excluded extensions not used by host ruby.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2023-04-25 14:48:17 -03:00
Jeffery To
a35431f2bf python: Update find stdlib script
This updates the python3-find-stdlib-depends.sh script for these
changes:

* The gdbm (dbm.gnu) package was merged into the dbm package in
  78f6c2c5ad.

* The uuid module was split into a separate package in
  4e05541782.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-25 07:49:53 +03:00
Jeffery To
743204ff2d python-idna: Update to 3.4
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-25 07:48:47 +03:00
Jeffery To
36587eced2 python-zope-interface: Update to 6.0, refresh patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-25 07:48:14 +03:00
Jeffery To
977d8e5a6f python-pyasn1: Update to 0.5.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-25 07:47:33 +03:00
Glen Huang
e36a55c9ed openssh: preserve authorized_keys
The root user is usually the user that clients ssh into with, so in most
cases its authorized_keys determines what clients are allowed to ssh
into this device. Without preserving this file, they could potentially
be locked out after upgrading.

Signed-off-by: Glen Huang <me@glenhuang.com>
2023-04-25 07:23:01 +03:00
Philip Prindeville
7016a4546b
Merge pull request #20836 from hgl/strongswan-deps
strongswan: add missing PKG_MOD_AVAILABLE
2023-04-24 11:49:52 -06:00
Glen Huang
0436897323 strongswan: add missing PKG_MOD_AVAILABLE
Without these charon will warn with messages like:

plugin 'kdf': failed to load - kdf_plugin_create not found and no plugin file available
plugin 'drbg': failed to load - drbg_plugin_create not found and no plugin file available

Signed-off-by: Glen Huang <me@glenhuang.com>
2023-04-24 22:40:18 +08:00
Philip Prindeville
6a3e5464ca
Merge pull request #20832 from hgl/strongswan
strongswan: enable nonce unconditionally
2023-04-24 08:34:55 -06:00
Glen Huang
e67eb58312 strongswan: enable nonce unconditionally
Without nonce, charon won't start, so it's not an optional plugin. I
asked one of the strongSwan maintainers (ecdsa), and he confirmed this:

> It definitely has to be enabled unconditionally. The only other
> provider for the NONCE_GEN plugin feature is in charon-tkm, so
> completely irrelevant on OpenWrt

Signed-off-by: Glen Huang <me@glenhuang.com>
2023-04-24 15:51:28 +08:00
John Audia
fbbe30622a snort3: update to 3.1.60.0
Upstream bump

Signed-off-by: John Audia <therealgraysky@proton.me>
2023-04-24 05:08:17 +08:00
Dirk Brenken
c5d9b3ded2
banip: release 0.8.4-1
* add support for a custom feeds file (/etc/banip/banip.custom.feeds). Add new or edit existing banIP feeds on your own with the integrated custom feed editor (LuCI-component
* add a new option 'ban_blockpolicy' to overrule the default bblock policy (block all chains), see readme for details
* change the feed file format and add a new ipthreat feed, see readme
* refine (debug) logging
* multiple small fixes and improvements
* readme update
* luci update (separate commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2023-04-23 22:03:09 +02:00
Vladimir Ermakov
6035e4884d qemu: add zstd option
Signed-off-by: Vladimir Ermakov <vooon341@gmail.com>
2023-04-23 18:35:39 +08:00
Vladimir Ermakov
65d052d9b8 qemu: update to 8.0.0
- Update version to 8.0.0
- Refresh patches
- Update configure opttions to disable libdw

Signed-off-by: Vladimir Ermakov <vooon341@gmail.com>
2023-04-23 18:35:39 +08:00
Andrew Sim
837c0f7f1c ksmbd-tools: update to 3.4.8 release
Changelog: https://github.com/cifsd-team/ksmbd-tools/releases/tag/3.4.8

Maintainer: nobody
Compile tested: Mediatek filogic, Asus TUF AX4200, lastest master
Run tested: Mediatek filogic, Asus TUF AX4200, lastest master

Signed-off-by: Andrew Sim <andrewsimz@gmail.com>
2023-04-23 16:02:14 +08:00
Kirill Fertikov
d1ad585ca9 shadowsocks-libev: ACL support
Link: https://github.com/openwrt/packages/pull/20647
Signed-off-by: Kirill Fertikov <kirill.fertikov@gmail.com>
[indentation fix]
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2023-04-23 13:54:08 +08:00
Philip Prindeville
9569c7c03f
Merge pull request #20857 from pprindeville/strongswan-drop-local_gateway
strongswan: local_gateway unused in swanctl.init
2023-04-22 22:58:28 -06:00
Philip Prindeville
5f3840c765 strongswan: local_gateway unused in swanctl.init
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2023-04-22 18:20:38 -06:00
Javier Marcet
b607e19398 docker-compose: Update to version 2.17.3
Signed-off-by: Javier Marcet <javier@marcet.info>
2023-04-23 07:32:34 +08:00
Tianling Shen
066a09754b
Merge pull request #20845 from jefferyto/ci-local-feed
CI: Add local feed for CI-built packages
2023-04-22 07:36:39 +08:00
Paul Fertser
0c10c224be treewide: remove AUTORELEASE
Automatically compute and substitute current values for all
$(AUTORELEASE) instances as this feature is deprecated and shouldn't be
used.

The following temporary change was made to the core:

diff --git a/rules.mk b/rules.mk
index 57d7995d4fa8..f16367de87a8 100644
--- a/rules.mk
+++ b/rules.mk
@@ -429,7 +429,7 @@ endef
 abi_version_str = $(subst -,,$(subst _,,$(subst .,,$(1))))

 COMMITCOUNT = $(if $(DUMP),0,$(call commitcount))
-AUTORELEASE = $(if $(DUMP),0,$(call commitcount,1))
+AUTORELEASE = $(if $(DUMP),0,$(shell sed -i "s/\$$(AUTORELEASE)/$(call commitcount,1)/" $(CURDIR)/Makefile))

 all:
 FORCE: ;

And this command used to fix affected packages:

for i in $(cd feeds/packages; git grep -l PKG_RELEASE:=.*AUTORELEASE | \
                              sed 's^.*/\([^/]*\)/Makefile^\1^';);
do
  make package/$i/download
done

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
2023-04-21 22:46:58 +02:00
Hirokazu MORIKAWA
018fcf3ccd icu: bump to 73.1
Description:
It updates to CLDR 43 locale data with various additions and corrections.
ICU 73 improves Japanese and Korean short-text line breaking, reduces C++ memory use in date formatting, and promotes the Java person name formatter from tech preview to draft.
ICU 73 and CLDR 43 are minor releases, mostly focused on bug fixes and small enhancements. (The fall CLDR/ICU releases will update to Unicode 15.1 which is planned for September.)
ICU 73 updates to the time zone data version 2023c (2023-mar). Note that pre-1970 data for a number of time zones has been removed, as has been the case in the upstream tzdata release since 2021b.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2023-04-21 11:34:15 +08:00
Luca Barbato
1f9baddd43 rust: update to 1.69.0
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
2023-04-21 06:09:47 +08:00
Christian Marangi
8b144f0dc3
nginx: split DAV_EXT from standard nginx DAV config
Split DAV_EXT from standard nginx DAV config as additional WebDAV
methods are provided by an external module.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-04-20 07:45:30 +02:00
Florian Eckert
e14a7073b6
Merge pull request #20846 from johnfzc/sscep-license
scep: fix license
2023-04-20 08:16:34 +02:00
Peter van Dijk
8686e69765 pdns-recursor: update to 4.8.4
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2023-04-19 17:57:01 +02:00
Peter van Dijk
b74c966c7c pdns: update to 4.7.4
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2023-04-19 17:55:26 +02:00
Josef Schlehofer
abad1526fd
Merge pull request #20824 from jefferyto/newt-0.52.23
newt: Update to 0.52.23
2023-04-19 17:55:05 +02:00
John Marrett
e51fb51c58 scep: fix license
Signed-off-by: John Marrett <johnf@zioncluster.ca>
2023-04-19 08:52:04 -04:00
Jeffery To
e9bb948402
CI: Add local feed for CI-built packages
To test each package, the CI-built target package (ipk) file is
installed, but currently the target package's dependencies are installed
from the standard opkg feeds.

There are cases when the CI-built target packages should be
installed/tested together:

* If a pull request contains several new packages that depend on each
  other, the test step will fail as the new dependencies cannot be found
  in the current packages feed.

* If a pull request upgrades a source package that builds several target
  packages that depend on each other, the test step may fail due to the
  version/ABI mismatch between a newer target package and the older
  dependencies installed from the packages feed.

This sets up a local feed for the CI-built packages so that dependencies
are also installed from the same set of packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-19 13:43:24 +08:00
Glenn Strauss
7fda9563de lighttpd: adjust packages for built-in modules
(.so is no longer built, but package still contains config files)

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2023-04-19 11:48:48 +08:00
Glenn Strauss
ae5135a913 lighttpd: fix package DEPENDS syntax
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
Co-authored-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-04-19 11:48:48 +08:00
Tianling Shen
c1019c64ea
xray-core: Update to 1.8.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-04-19 04:12:30 +08:00
Tianling Shen
9ff57568f5
dnsproxy: Update to 0.49.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-04-19 04:11:52 +08:00
Josef Schlehofer
9959c3c007
Merge pull request #20826 from jefferyto/obfs4proxy-0.0.14
obfs4proxy: Update to 0.0.14
2023-04-18 16:51:55 +02:00
Josef Schlehofer
ccd3459128
Merge pull request #20827 from jefferyto/slang2-2.3.3
slang2: Update to 2.3.3, refresh patches
2023-04-18 16:39:32 +02:00
Peter van Dijk
39a7b4f69e dnsdist: update to 1.8.0
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2023-04-18 16:38:08 +02:00
Othmar Truniger
f8ae64cf96 knxd: bump to new upstream release 0.14.58
Signed-off-by: Othmar Truniger <github@truniger.ch>
2023-04-18 17:31:42 +03:00
Christian Marangi
0d8fc4124c
znc: add push external module
Add push external module. This is very useful for an IRC Bounder as this
module permits to register various services and receive a push
notification on the registered service.

One example is attaching a telegram bot and receive notification on your
phone when an user tags you in one of the connected channels.

Bump and drop AUTORELEASE from PKG_RELEASE since we are adding a new
module.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-04-17 18:52:16 +02:00
Christian Marangi
b1d68f3c97
znc: drop playback patch and reference from github repository
We currently inclde the playback external module with a separate patch.
This is ugly and can be better handled.

Add required changes to download the external module from his own github
repository. Then create a link in the znc modules to reference the cpp
source.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-04-17 18:52:12 +02:00
Tianling Shen
8674af1b0a
v2ray-core: Update to 5.4.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-04-17 23:27:11 +08:00
Jeffery To
47d67e43bf
slang2: Update to 2.3.3, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-17 22:24:57 +08:00
Jeffery To
0759341cd8
obfs4proxy: Update to 0.0.14
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-17 22:05:51 +08:00
Carlos Miguel Ferreira
80edc718bf boost: Updates package to version 1.82.0
This commit updates boost to version 1.82.0

A new header-only library is available:
- MySql: a C++11 client for the MySQL database server, based on
Boost.Asio, from Ruben Perez. [1]

More info about Boost 1.82.0 can be found at the usual place [2].

[1]: https://www.boost.org/doc/libs/1_82_0/libs/mysql/doc/html/index.html
[2]: https://www.boost.org/users/history/version_1_82_0.html

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>
2023-04-17 16:06:56 +03:00
Jeffery To
ce086321a0
newt: Update to 0.52.23
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-17 20:05:06 +08:00
Nuno Gonçalves
61c3a9a3b9 nmap: refresh patch
Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>
2023-04-17 09:49:07 +01:00
Michael Heimpold
8043007879 php8: update to 8.2.5
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2023-04-16 16:39:10 +03:00