Commit graph

24908 commits

Author SHA1 Message Date
Tianling Shen
2619b4dc1e
v2raya: Update to 1.5.8.1
1. Switched to use prebuilt web files to get rid of massive Node.js.
2. Increased nofile limitation to avoid "too many open files" error.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d629a6f8b2)
2022-11-13 23:09:36 +08:00
Tianling Shen
5bec58203f
v2rayA: Update to 1.5.7
- Removed an upstreamed patch
- Move logs to /var/log in accordance with FHS 3.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ff8f25cb98)
2022-11-13 23:09:30 +08:00
Tianling Shen
06ff8383bc
v2raya: fix panic in go 1.18
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 7aa127e208)
2022-11-13 23:09:24 +08:00
Tianling Shen
d52b6e2f17
v2rayA: Update to 1.5.6.2
Manually added new env variable `XDG_DATA_HOME` which won't be passed
by procd by default.

Removed upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c7b5e7ed67)
2022-11-13 23:09:19 +08:00
Tianling Shen
21f7aef991
v2raya: init: convert arguments into env variables
Suggested by upstream, to provide forward compatibility.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8465053a58)
2022-11-13 23:09:14 +08:00
Tianling Shen
28b5968ab5
v2rayA: Update to 1.5.5
Breaking changes:
The database has been replaced with boltdb to try to solve the problem
of database corruption.

Note that the data will not be migrated, but the previous data will be
retained. If you need the previous data, just downgrade v2rayA (v1.5.4).

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 21e98e952f)
2022-11-13 23:09:10 +08:00
Tianling Shen
07a54c6a86
v2raya: Update to 1.5.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d48b22fb90)
2022-11-13 23:09:08 +08:00
Tianling Shen
20bfd00c35
v2raya: Update to 1.5.3
- Added missing conffiles
- Refreshed init srcipt to adapt the new arguments
- Renamed package name to lowercase (suggestion from upstream)
- Updated dependencies and license

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 16e453e4ac)
2022-11-13 23:08:56 +08:00
Tianling Shen
6bca9cc98e
v2rayA: Update to 1.5.2
Refreshed init script to adapt new arguments accepted by the program.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 60c917089f)
2022-11-13 23:08:41 +08:00
Tianling Shen
e56960b81e
v2rayA: add new package
v2rayA is a Linux web GUI client of Project V which supports V2Ray,
Xray, Shadowsocks, ShadowsocksR, Trojan and Pingtunnel.

Wiki: https://github.com/v2rayA/v2rayA/wiki

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 90ec599f9e)
2022-11-13 23:08:33 +08:00
Tianling Shen
11d3b49514 xray-core: Update to 1.6.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4194268e3f)
[Update geodata to latest version, based on e5c3c3409]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-11-12 18:49:13 +02:00
Tianling Shen
68426efcd8 xray-core: Update to 1.6.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e606ea7e78)
2022-11-12 18:49:13 +02:00
Tianling Shen
ead837f1cc xray-core: Update to 1.6.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b16b07409f)
2022-11-12 18:49:13 +02:00
Tianling Shen
ee096621de xray-core: Update to 1.6.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a0126b15c5)
[Update geodata to latest version, based on f8c25627eb]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 05d1265cb7)
2022-11-12 18:49:13 +02:00
Tianling Shen
ee4565763e xray-core: Update to 1.5.10
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ddd4082d30)
2022-11-12 18:49:13 +02:00
Jeffery To
5d660d0b6b
syncthing: Update to 1.19.2
Includes patch based on upstream change[1] to fix compilation with Go
1.18.

Fixes https://github.com/openwrt/packages/issues/18267.

[1]: e30898ddb3

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4b7ff2df5e)
(cherry picked from commit 961c73ca7c)
2022-11-10 12:33:56 +01:00
Josef Schlehofer
90b2aa9371
golang: update to version 1.18.8
Fixes following CVEs:
- CVE-2022-32189 (version 1.18.5 [1]]
- CVE-2022-27664 (version 1.18.6 [2])
- CVE-2022-32190 (version 1.18.6 [2])
- CVE-2022-2879 (version 1.18.7 [3])
- CVE-2022-2880 (version 1.18.7 [3])
- CVE-2022-41715 (version 1.18.7 [3])
- CVE-2022-41716 (version 1.18.8 [4])

and refreshed patch

[1] https://groups.google.com/g/golang-announce/c/YqYYG87xB10
[2] https://groups.google.com/g/golang-announce/c/x49AQzIVX-s
[3] https://groups.google.com/g/golang-announce/c/xtuG5faxtaU
[4] https://groups.google.com/g/golang-announce/c/mbHY1UY3BaM

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c33c2d8869)
2022-11-10 09:16:14 +01:00
Josef Schlehofer
b4c70db428
ffmpeg: libffmpeg-full package should provide libffmpeg package, too
The previous solution overwrote the provide from ``define
Package/libffmpeg/Default``, but that's not what was wanted.
Thus libffmpeg-full should provide three packages libffmpeg,
libffmpeg-mini and libffmpeg-audio-dec

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c333c0e522)
2022-11-09 15:13:12 +01:00
Jeffery To
aeeb0d7515
golang: Update to 1.18.4
Includes fixes for:

* CVE-2022-1705: net/http: improper sanitization of Transfer-Encoding
  header
* CVE-2022-1962: go/parser: stack exhaustion in all Parse* functions
* CVE-2022-28131: encoding/xml: stack exhaustion in Decoder.Skip
* CVE-2022-30630: io/fs: stack exhaustion in Glob
* CVE-2022-30631: compress/gzip: stack exhaustion in Reader.Read
* CVE-2022-30632: path/filepath: stack exhaustion in Glob
* CVE-2022-30633: encoding/xml: stack exhaustion in Unmarshal
* CVE-2022-30635: encoding/gob: stack exhaustion in Decoder.Decode
* CVE-2022-32148: net/http/httputil: NewSingleHostReverseProxy - omit
  X-Forwarded-For not working

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 60168651a2)
2022-11-09 14:46:06 +01:00
Jeffery To
2e6b8f0165
golang: Update to 1.18.3
Includes fix for CVE-2022-30634 (crypto/rand: Read hangs when passed
buffer larger than 1<<32 - 1).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 112cf09031)
2022-11-09 14:46:02 +01:00
Jeffery To
d53bb3ccc5
golang: Update to 1.18.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 659f87d5d4)
2022-11-09 14:45:58 +01:00
Jeffery To
a084693cf1
golang: Update to 1.18.1
Includes fixes for:
* CVE-2022-24675 - encoding/pem: stack overflow
* CVE-2022-28327 - crypto/elliptic: generic P-256 panic when scalar has
  too many leading zeroes

This also adds -buildvcs=false to omit VCS information in Go programs.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8c0477a895)
2022-11-09 14:45:54 +01:00
Jeffery To
2c9cc2c9fb
golang: Update to 1.18, update patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 478666b00b)
2022-11-09 14:45:44 +01:00
Josef Schlehofer
6f98c3dba8 golang: update to version 1.17.13
Fixes:
CVE-2022-32189

Release notes:
https://groups.google.com/g/golang-announce/c/YqYYG87xB10?pli=1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-11-09 14:31:49 +01:00
Magnus Kessler
1a94de24a5
tailscale: update to version 1.24.2
Signed-off-by: Magnus Kessler <Magnus.Kessler@gmx.net>
(cherry picked from commit b557e9f0d1)
2022-11-07 12:48:21 +01:00
Wes Morgan
9e96244194
tailscale: update to 1.18.2
Signed-off-by: Wes Morgan <git@wesmorgan.me>
(cherry picked from commit efb908b032)
2022-11-07 12:47:45 +01:00
Josef Schlehofer
934831644d
pulseadio: fix conffiles for pulseadio-daemon-avahi package
Fixes: 60ac7dd751 ("pulseaudio: simplify
and rework Makefile")

Reported-by: Hannu Nyman <hannu.nyman@iki.fi>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 7ae66ec7ca)
2022-11-05 21:22:11 +01:00
Josef Schlehofer
ae4c51d946
pulseaudio: change homepage URLs to freedesktop.org
The previous used domain http(s)://pulseaudio.org redirects to
https://www.freedesktop.org/wiki/Software/PulseAudio/

This change enforces to use HTTPS everywhere for homepage URLs

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 00e3918069)
2022-11-05 21:21:57 +01:00
Josef Schlehofer
d285ac95ad
pulseaudio: use AUTORELEASE variable
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 364054fbe7)
2022-11-05 21:21:45 +01:00
Josef Schlehofer
c9f7d98c91
pulseaudio: daemons should conflict to each other
It should not be possible to install pulseaudio-daemon and
pulseadio-daemon-avahi at the same time as they have the same files.
Let's avoid that situation by adding conflict.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5a5bb15949)
2022-11-05 21:21:21 +01:00
Josef Schlehofer
f65a718a12
pulseaudio: simplify and rework Makefile
There were two conffiles sections and both of them were same, but for
different variants. We can have just one conffile section and use it also
for the other variant.

The same applies for the install section for different variants.
- We have two install sections, but we call the first one with the same
  files and then add something more for the second variant.

- While at it to make it easier, let's change those three rows for
  copying packages into the single one to make sure that I did not miss
anything. Also, we create a directory first and then move files.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 60ac7dd751)
2022-11-05 21:21:17 +01:00
Szabolcs Hubai
159944ac6c mpd: depend the full variant on pulseaudio instead of pulseaudio-daemon
The full variant of mpd depends on pulseaudio-daemon, so it was not
possible to use the other pulseaudio variant with avahi.

Both pulseaudio daemons provides package pulseaudio, so users can choose
which variant suits them best.
Let's change the dependency to pulseaudio.

Fixes: #19187
Fixes: 2ed62adc59 ("mpd: enable pulseaudio in full package")
Signed-off-by: Szabolcs Hubai <szab.hu@gmail.com>
(cherry picked from commit abe35e89f6)
2022-11-05 18:57:00 +01:00
Tianling Shen
02bf1fd5b3 rclone: Update to 1.60.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 90e037b5e5)
2022-11-03 20:27:12 -07:00
Tianling Shen
b89d0299bc yq: Update to 4.29.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d1f2b96b7e)
2022-11-03 20:27:00 -07:00
Scott Roberts
6711badf07
zabbix: add variants for SSL support
opkg does not offer ssl varients:
zabbix-agentd
zabbix-sender
zabbix-get
zabbix-proxy
zabbix-server

resolve this by adding ssl varients.

Signed-off-by: Scott Roberts <ttocsr@gmail.com>
(cherry picked from commit cd48d03f01)
(cherry picked from commit e0502e477c)
2022-11-01 11:02:21 +01:00
Rosen Penev
f90a7c92da
coova-chili: fix compilation with kernel 5.10
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit eba4abb65d)
2022-10-29 11:59:21 +02:00
Rosen Penev
1c2258e95f
ptunnel-ng: fix compilation with kernel 5.15
Some header change requires to include musl's headers first.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 468863128f)
2022-10-29 06:47:58 +02:00
Rosen Penev
1793655e61
libpfring: update to 8.0.0
Fixes compilation with kernel 5.15

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f8f2146b1b)
2022-10-29 06:45:23 +02:00
Rosen Penev
a91983bb2f
coova-chilli: update to 1.6
Remove usptreamed patches.

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c05077a499)
2022-10-29 06:40:47 +02:00
Rosen Penev
29cffa947d
xtables-addons: update to 3.19
Fixes compilation with kernel 5.15.

Fixed changed binary name.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e5af506795)
(cherry picked from commit 4a5633b6b5)
2022-10-29 05:57:55 +02:00
Josef Schlehofer
4f101b38b0
ffmpeg: add conflicts and provides
Motivation of this change is that full variants provides the mini
variant and as well audio-dec package, thus you can not install both as
it fails with the following output:

Collected errors:
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavcodec.so.58
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavcodec.so.58.91.100
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavdevice.so.58
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavdevice.so.58.10.100
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavformat.so.58
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavformat.so.58.45.100
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavutil.so.56
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavutil.so.56.51.100
	But that file is already provided by package  * libffmpeg-full
 * opkg_install_cmd: Cannot install package libffmpeg-audio-dec.

Let's change it to:
Installing libffmpeg-audio-dec (4.3.4-1) to root...
Collected errors:
 * check_conflicts_for: The following packages conflict with libffmpeg-audio-dec:
 * check_conflicts_for:         libffmpeg-full *
 * opkg_install_cmd: Cannot install package libffmpeg-audio-dec.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 9693bd47c5)
2022-10-28 13:49:11 +02:00
Christian Marangi
18aa13a251
atlas-probe: fix SIGSEGV error on 32bit system
Changes to time_t cause SIGSEGV error on 32bit system and cause ripe
atlas malfunction. (registration successful but no traffic)
Also introduce minor patch to fix some compilation warning.

While at it move PKG_RELEASE to AUTORELEASE macro.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 14c5dfe4c1)
2022-10-27 16:04:15 +02:00
Josef Schlehofer
85b8f7c981
libwebsockets: fix recursive dependency
While running `make menuconfig`, it was discovered then there is a
recursive dependency like this:
tmp/.config-package.in:59138:error: recursive dependency detected!
tmp/.config-package.in:59138:	symbol PACKAGE_libwebsockets-openssl is selected by PACKAGE_libwebsockets-mbedtls
tmp/.config-package.in:59122:	symbol PACKAGE_libwebsockets-mbedtls depends on PACKAGE_libwebsockets-openssl

It is not possible with the recently added conflicts that two packages
(OpenSSL and full variant, which uses OpenSSL as well), which are almost the same
provides the same named package libwebsockets as their conflict - Mbed
TLS.

Fixes: 676c5c72b5 ("libwebsockets: OpenSSL
and mbedTLS variants should conflict")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a4e8cbb89a)
2022-10-27 14:24:59 +02:00
Josef Schlehofer
1222d44448
libwebsockets: OpenSSL and mbedTLS variants should conflict
They provide the same files, but they don't conflict to each other, this
means that users can install them side by side.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 676c5c72b5)
2022-10-25 14:29:35 +02:00
Josef Schlehofer
19cb57bf12
libwebsockets: full variant provides OpenSSL
For some time, it is not possible to install ttyd and mosquitto-ssl at the
same time, so let's solve it that libwebsockets-full provides
libwebsockets-openssl. This allows to install ttyd and mosquitto at
the same time.

Also, we need to add conflict, because we should not have installed
libwebsockets-openssl and libwebsockets-full at the same time as they
provides the same files.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 77e682a11c)
2022-10-25 14:29:32 +02:00
Josef Schlehofer
480833d673
lighttpd: backport patch to fix dummy Sec-WebSocket-Key
It was requested in https://gitlab.nic.cz/turris/os/packages/-/issues/873

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit de49362d35)
2022-10-25 14:05:48 +02:00
Michal Hrusecky
fadd38f27d
mariadb: Drop unused rundir fix socket dir perms
We had been creating "rundir" but it was never used, probably leftover
from some removed function. At the same time, we were setting quite
strict rights to the socket directory (while comments sugested
otherwise).

Signed-off-by: Michal Hrusecky <michal@hrusecky.net>
(cherry picked from commit 8f6831b64b)
2022-10-25 06:47:43 +02:00
Josef Schlehofer
a341405111
Merge pull request #19667 from miska/mariadb-21.02
[21.02] mariadb: Update to the latest version 10.4.26
2022-10-23 09:44:53 +02:00
Josef Schlehofer
f00b449d17 python3: update to version 3.9.15
Release notes:
- https://www.python.org/downloads/release/python-3915/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-10-21 15:34:02 -07:00
Michal Hrusecky
eb2a5c0981
mariadb: Update to the latest version 10.4.26
Keeping the major version, bumping just a minor version. It includes
various bug fixes and security fixes.  For details, see:

* https://mariadb.com/kb/en/mariadb-10426-release-notes/
* https://mariadb.com/kb/en/mariadb-10425-release-notes/
* https://mariadb.com/kb/en/mariadb-10424-release-notes/
* https://mariadb.com/kb/en/mariadb-10423-release-notes/

While at it, also switching to AUTORELEASE and refreshing patches.

Signed-off-by: Michal Hrusecky <michal@hrusecky.net>
2022-10-21 23:55:50 +02:00