Commit graph

30172 commits

Author SHA1 Message Date
Hirokazu MORIKAWA
3d11e5c197 mg: switch pcre to pcre2
Switch pcre to pcre2
https://github.com/openwrt/packages/issues/22006

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2023-09-21 19:16:10 -07:00
Darryl Sokoloski
41c9155a80 netifyd: Updated to v4.4.7
Bug Fixes

- Fixed mbedTLS crashes and TLS handshake errors when the nDPI-bundled libgcrypt "lite" version conflicts with the system version (via libcurl).
- Fixed linking order issue with libini.
- Fixed non-portable static linking warning with libndpi.
- Write flows to sockets regardless if "add_flows" is true.
- Fixed compilation error if _DIRENT_HAVE_D_RECLEN isn't defined.
- Fixed Agent path.
- [OpenWrt] Switch to "grep -E" as "egrep" is deprecated.
- Fixed possible ndAddr crash: return a const reference for cached strings.

Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
2023-09-22 09:23:26 +08:00
Josef Schlehofer
e3ab95185c czmq: drop libpcre dependency
It seems like the libpcre dependency was added by mistake.
While checking in the source code of czmq (Makefile.am, CMakeLists.txt),
I see there are several dependencies, but there isn't PCRE.

Fixes: 936a48a ("czmq: add new package")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-21 15:48:29 -07:00
Josef Schlehofer
29a9a6a4a7 msmtp: update to version 1.8.24
Release notes:
ef62463e4dX

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-22 00:26:35 +02:00
Jeffery To
77cebb0d03 python3-networkx: Update to 3.1, rename source package
This renames the source package to python-networkx to match other Python
packages.

This also updates the list of dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-09-22 00:25:02 +02:00
Jeffery To
0ea5e63b15 setools: Update to 4.4.3
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-09-21 07:55:20 +02:00
Hirokazu MORIKAWA
8635545409 node: bump to v18.18.0
Update to v18.18.0

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2023-09-21 08:42:41 +08:00
Tianling Shen
962aa1ab84
Merge pull request #22134 from jefferyto/rust-cargo-rustflags
rust: Set rustflags by environment variable
2023-09-21 08:41:55 +08:00
Matthias Schiffer
ac897e05dd
fastd: update repository URL
I've changed my username to neocturne.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2023-09-20 21:01:01 +02:00
Matthias Schiffer
1df594bc01
libuecc: update repository URL
I've changed my username to neocturne.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2023-09-20 21:00:32 +02:00
Josef Schlehofer
6a8d3565f0 bind: update to version 9.18.18
Release notes:
https://downloads.isc.org/isc/bind9/9.18.18/doc/arm/html/notes.html#notes-for-bind-9-18-18
https://downloads.isc.org/isc/bind9/9.18.17/doc/arm/html/notes.html#notes-for-bind-9-18-17

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-20 06:23:25 -07:00
Oskari Rauta
8b3bf5bb88 slirp4netns: update to 1.2.2
v1.2.2 changes:
 - Enabled reproducible builds

v1.2.1 changes:
 - sandbox: Add support for escaping resolv.conf symlinks. This fixes usage in WSL environments which symlinks /etc/resolv.conf under a shared location under /mnt.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-20 00:17:20 +02:00
Jan Hák
2a6dc24882 knot: update to version 3.3.1
Signed-off-by: Jan Hák <jan.hak@nic.cz>
2023-09-19 13:13:56 +02:00
Tianling Shen
1b75de7e5c
rclone: Update to 1.64.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-09-19 09:58:18 +08:00
Hannu Nyman
87a9305ddd collectd: remove target dependency from cpufreq plugin
We currently have more package architectures supporting
CPU frequency scaling than earlier, and the package architecture
vs. CPU target SDK matching does not fully reflect that.
(E.g. aarch64_cortex-a53 is currently using bcm27xx/bcm2710)

Simplify things by removing the target dependency and let the plugin
be built for all architectures.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2023-09-18 22:13:41 +03:00
Florian Eckert
aca50a5af7
Merge pull request #22130 from oskarirauta/dockerd
dockerd: busybox compatibility
2023-09-18 11:46:17 +02:00
Florian Eckert
cfe941d578
Merge pull request #22126 from oskarirauta/podman
podman: depend on catatonit
2023-09-18 08:05:08 +02:00
Jeffery To
37762abcb4
rust: Set rustflags by environment variable
In order to use $(RUSTC_TARGET_ARCH) in HOST_BUILD_DIR, the line to
include rust-values.mk in the Rust makefile was moved in
f489e019ac, causing it to be included
before package.mk is included.

This had the side effect of preventing "-lssp_nonshared" from being
added to RUSTC_LDFLAGS, because PKG_SSP is indirectly set by package.mk
(package.mk includes hardening.mk, hardening.mk sets PKG_SSP).

There is a deeper issue; it is the Rust package's PKG_SSP value that
causes RUSTC_LDFLAGS to be set and written to the Cargo config file. For
packages that use Rust to build, their PKG_SSP value does not affect the
linker flag.

This sets rustflags with the RUSTFLAGS environment variable, instead of
writing the value to the Cargo config file, allowing PKG_SSP from the
package being built to be used and for the package being built to modify
the rustflags used.

This also:

* Fix "-lssp_nonshared" being added to TARGET_CFLAGS instead of
  RUSTC_LDFLAGS, when CONFIG_PKG_CC_STACKPROTECTOR_STRONG is set.

* Remove the use of $(RUSTC_TARGET_ARCH) in HOST_BUILD_DIR and move the
  include line for rust-values.mk back to after package.mk.

  Since the host build directory was moved under the target build
  directory in efdbac38dc, it is no longer
  necessary to separate build directories with RUSTC_TARGET_ARCH;
  $(BUILD_DIR) already separates build directories by target.

* Add BUILDONLY:=1, as the Rust package does not build a target package.

* Install the Cargo config file as "config.toml" instead of "config", as
  this is the preferred form[1].

* Rename RUST_CFLAGS to RUSTC_CFLAGS and CONFIG_HOST_SUFFIX to
  RUSTC_HOST_SUFFIX, for consistency.

* Allow CARGO_VARS to be set before rust-values.mk is included.

[1]: https://doc.rust-lang.org/cargo/reference/config.html#hierarchical-structure

Fixes: f489e019ac ("rust: compile host package per target")
Fixes: 83785a7ce0 ("rust-lang: Add the rust language support")
Fixes: https://github.com/openwrt/packages/issues/22133

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-09-18 09:30:56 +08:00
Philip Prindeville
4108ca7aed
Merge pull request #22091 from pprindeville/isc-dhcp-fix-require-parameters-delim
isc-dhcpd: Generate correct delimiter in hex strings
2023-09-17 16:19:31 -06:00
Philip Prindeville
2faa29c550 isc-dhcp: Allow per-subnet domain names
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2023-09-17 14:28:10 -06:00
Philip Prindeville
4590decf5b isc-dhcpd: Generate correct delimiter in hex strings
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2023-09-17 14:28:10 -06:00
Philip Prindeville
a2438c834d
Merge pull request #22132 from pprindeville/perl-text-csv_xs-update-1.51
perl-text-csv_xs: Update to 1.51
2023-09-17 14:25:19 -06:00
Philip Prindeville
2954ac9742
Merge pull request #22131 from pprindeville/perl-cgi-update-4.57
perl-cgi: Update to 4.57
2023-09-17 14:17:08 -06:00
Philip Prindeville
606e7b9f46 perl-text-csv_xs: Update to 1.51
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2023-09-17 13:51:59 -06:00
Philip Prindeville
f459125b97 perl-cgi: Update to 4.57
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2023-09-17 13:44:03 -06:00
Oskari Rauta
9596937de3 dockerd: busybox compatibility
build hosts with busybox fail with long options on rm
command. Short versions are supported by all, so this
makes it script compatible with busybox hosts as well.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-17 16:36:30 +03:00
Ted Hess
8b2ccd8177
Merge pull request #22128 from BKPepe/ffmpeg
ffmpeg: update to version 5.1.3
2023-09-17 07:13:57 -04:00
Josef Schlehofer
87b2a2bb57 ffmpeg: update to version 5.1.3
Fixes CVEs:
CVE-2022-3964 [1]
CVE-2022-3965 [2]

[1] https://nvd.nist.gov/vuln/detail/CVE-2022-3964
[2] https://nvd.nist.gov/vuln/detail/CVE-2022-3965

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-17 09:46:19 +02:00
Leo Douglas
8a223d4724 iperf3: update to 3.15
see changelog: https://github.com/esnet/iperf/releases/tag/3.15.

Signed-off-by: Leo Douglas <douglarek@gmail.com>
2023-09-17 07:38:54 +02:00
Oskari Rauta
500e484f61 podman: depend on catatonit
podman still seems to use catatonit with
rootless containers. It seems that it is
possible to use alternatives, such as tini,
but maybe go the same way they went on mainstream.

This PR just adds catatonit to depends.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-17 06:55:26 +03:00
Stan Grishin
6fa542b84c
Merge pull request #22122 from stangri/master-https-dns-proxy
https-dns-proxy: improve boot up start
2023-09-16 18:59:22 -07:00
Stan Grishin
22d21e28a7 https-dns-proxy: improve boot up startup
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2023-09-16 23:45:20 +00:00
Stan Grishin
3653eb3d4a
Merge pull request #22118 from stangri/master-adblock-fast
adblock-fast: bugfix: remove domains on allow
2023-09-16 16:43:31 -07:00
Oskari Rauta
75064f1bf7 aardvark-dns: update to 1.7.0
Changelog: https://github.com/containers/aardvark-dns/compare/v1.6.0...v1.7.0

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-16 21:43:46 +08:00
Oskari Rauta
efb06993d7 netavark: update to 1.7.0
Changelog: https://github.com/containers/netavark/compare/v1.6.0...v1.7.0

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-16 21:43:27 +08:00
Oskari Rauta
56930920a4 podman: update to 4.6.2
patch refreshed.

Changelog:

 - Fixed a performance issue when calculating diff sizes in overlay. The podman system df command should see a significant performance improvement.
 - Fixed a bug where containers in a pod would use the pod restart policy over the set container restart policy.
 - Fixed a bug in the Compat Build endpoint where the pull query parameter did not parse 0/1 as a boolean.
 - Updated the containers/storage library to v1.48.1

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-16 21:43:15 +08:00
Oskari Rauta
7728e1eb39 crun: update to 1.9
Changes:
 - support arbitrary idmapped mounts. Now it is possible to specify a mapping for any type of mount, not only bind mounts.
 - add support for "ridmap" mount option to support recursive idmapped mounts.
 - fix check for oom_score_adj. Write the oom_score_adj file even when the new value is 0.
 - features: Support mountExtensions.
 - correctly handle unknown signal string when it doesn't start with a digit.
 - do not attempt to join again already joined namespace.
 - wasmer: use latest wasix API.
 - refresh libocispec

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-16 21:42:58 +08:00
Oskari Rauta
3d88d18ee2 conmon: update to 2.1.8
Bug fixes:
 - stdio: ignore EIO for terminals
 - ensure console socket buffers are properly sized
 - conmon: drop return after pexit()
 - ctrl: make accept4 failures fatal
 - logging: avoid opening /dev/null for each write
 - oom: restore old OOM score
 - Use default umask 0022

Misc changes:
 - cli: log parsing errors to stderr
 - Changes to build conmon for riscv64
 - Changes to build conmon for ppc64le
 - Fix close_other_fds on FreeBSD

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-16 21:42:34 +08:00
Stan Grishin
bce310bfcd adblock-fast: bugfix: remove domains on allow
* fix sed command to properly remove allowed domains from block-file

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2023-09-16 13:13:49 +00:00
Stan Grishin
6105cb2752
Merge pull request #22109 from BKPepe/curl-update
curl: update to version 8.3.0
2023-09-16 03:25:03 -07:00
Josef Schlehofer
bb4c3b5a20 bandwidthd: drop this package
This package is not maintained by upstream anymore as they replace it by Ntopng 3. [1]
Upstream repository is archived and read only since February 2022 [2]

[1] https://community.nethserver.org/t/bandwidthd-for-nethserver-7/4071/18
[2] https://github.com/NethServer/bandwidthd

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-16 12:17:22 +02:00
Josef Schlehofer
07c0a5eab8 curl: update to version 8.3.0
Release notes:
https://curl.se/changes.html#8_3_0

Fixes:
CVE-2023-38039 [1]

[1] https://curl.se/docs/CVE-2023-38039.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-16 11:23:06 +02:00
Martin Schiller
d42a6758b9 ovpn-dco: fix package dependencies
We have to add an "IPV6:" in front of the kmod-udptunnel6 to fix
redundant dependencies with the openvpn-* packages.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2023-09-16 17:03:03 +08:00
Olivier Poitrey
66b72b6db3 nextdns: Update to version 1.40.1
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2023-09-15 23:41:21 +08:00
Tianling Shen
c1fbf1f419
Merge pull request #22104 from douglarek/zt
zerotier: update to 1.12.2
2023-09-15 23:41:05 +08:00
Josef Schlehofer
536569ca62 dnscrypt-proxy2: update to version 2.1.5
Fixes compilation with Go 1.21+.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-15 10:23:20 +02:00
Josef Schlehofer
c43599b0c8 syslog-ng: update to version 4.3.1
Makefile changes:
- Since version 4.3.0, there is required to use pcre2 instead of pcre
Reference: https://github.com/syslog-ng/syslog-ng/pull/4537

- Disable c++ support by default to avoid picking libstdcpp dependency
Reference: https://github.com/syslog-ng/syslog-ng/pull/4484

Config changes:
- Bump version in config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-15 09:27:40 +02:00
Leo Douglas
0343dffefa
zerotier: update to 1.12.2
see changelog: https://github.com/zerotier/ZeroTierOne/releases/tag/1.12.2.

Signed-off-by: Leo Douglas <douglarek@gmail.com>
2023-09-15 10:17:57 +08:00
Leo Douglas
b76a0d6aa6 sing-box: update to 1.4.3
see changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.4.3

Signed-off-by: Leo Douglas <douglarek@gmail.com>
2023-09-15 09:50:14 +08:00
Tyler Young
ccde8d18a1 tailscale: set nftables as default
This changes the default firewall method used by Tailscale to nftables.
The 'autodetection' mode is only supported by arm64 and amd64 for now[1].
This causes mips devices to not do proper detection and incorrectly default back to
iptables.

I added a fw_mode variable to the tailscale.conf file that could be
set to iptables for easy conversion for someone still using iptables.
I was able to test on an older mips device and my current aarch64
without issues.

Also a few readme updates to bring it up to the current status.

1. dc7aa98b76/util/linuxfw/linuxfw_unsupported.go (L4C58-L4C58)

Signed-off-by: Tyler Young <git@yfh.addy.io>
2023-09-15 09:49:47 +08:00