Commit graph

30152 commits

Author SHA1 Message Date
Philip Prindeville
4108ca7aed
Merge pull request #22091 from pprindeville/isc-dhcp-fix-require-parameters-delim
isc-dhcpd: Generate correct delimiter in hex strings
2023-09-17 16:19:31 -06:00
Philip Prindeville
2faa29c550 isc-dhcp: Allow per-subnet domain names
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2023-09-17 14:28:10 -06:00
Philip Prindeville
4590decf5b isc-dhcpd: Generate correct delimiter in hex strings
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2023-09-17 14:28:10 -06:00
Philip Prindeville
a2438c834d
Merge pull request #22132 from pprindeville/perl-text-csv_xs-update-1.51
perl-text-csv_xs: Update to 1.51
2023-09-17 14:25:19 -06:00
Philip Prindeville
2954ac9742
Merge pull request #22131 from pprindeville/perl-cgi-update-4.57
perl-cgi: Update to 4.57
2023-09-17 14:17:08 -06:00
Philip Prindeville
606e7b9f46 perl-text-csv_xs: Update to 1.51
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2023-09-17 13:51:59 -06:00
Philip Prindeville
f459125b97 perl-cgi: Update to 4.57
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2023-09-17 13:44:03 -06:00
Ted Hess
8b2ccd8177
Merge pull request #22128 from BKPepe/ffmpeg
ffmpeg: update to version 5.1.3
2023-09-17 07:13:57 -04:00
Josef Schlehofer
87b2a2bb57 ffmpeg: update to version 5.1.3
Fixes CVEs:
CVE-2022-3964 [1]
CVE-2022-3965 [2]

[1] https://nvd.nist.gov/vuln/detail/CVE-2022-3964
[2] https://nvd.nist.gov/vuln/detail/CVE-2022-3965

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-17 09:46:19 +02:00
Leo Douglas
8a223d4724 iperf3: update to 3.15
see changelog: https://github.com/esnet/iperf/releases/tag/3.15.

Signed-off-by: Leo Douglas <douglarek@gmail.com>
2023-09-17 07:38:54 +02:00
Stan Grishin
6fa542b84c
Merge pull request #22122 from stangri/master-https-dns-proxy
https-dns-proxy: improve boot up start
2023-09-16 18:59:22 -07:00
Stan Grishin
22d21e28a7 https-dns-proxy: improve boot up startup
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2023-09-16 23:45:20 +00:00
Stan Grishin
3653eb3d4a
Merge pull request #22118 from stangri/master-adblock-fast
adblock-fast: bugfix: remove domains on allow
2023-09-16 16:43:31 -07:00
Oskari Rauta
75064f1bf7 aardvark-dns: update to 1.7.0
Changelog: https://github.com/containers/aardvark-dns/compare/v1.6.0...v1.7.0

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-16 21:43:46 +08:00
Oskari Rauta
efb06993d7 netavark: update to 1.7.0
Changelog: https://github.com/containers/netavark/compare/v1.6.0...v1.7.0

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-16 21:43:27 +08:00
Oskari Rauta
56930920a4 podman: update to 4.6.2
patch refreshed.

Changelog:

 - Fixed a performance issue when calculating diff sizes in overlay. The podman system df command should see a significant performance improvement.
 - Fixed a bug where containers in a pod would use the pod restart policy over the set container restart policy.
 - Fixed a bug in the Compat Build endpoint where the pull query parameter did not parse 0/1 as a boolean.
 - Updated the containers/storage library to v1.48.1

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-16 21:43:15 +08:00
Oskari Rauta
7728e1eb39 crun: update to 1.9
Changes:
 - support arbitrary idmapped mounts. Now it is possible to specify a mapping for any type of mount, not only bind mounts.
 - add support for "ridmap" mount option to support recursive idmapped mounts.
 - fix check for oom_score_adj. Write the oom_score_adj file even when the new value is 0.
 - features: Support mountExtensions.
 - correctly handle unknown signal string when it doesn't start with a digit.
 - do not attempt to join again already joined namespace.
 - wasmer: use latest wasix API.
 - refresh libocispec

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-16 21:42:58 +08:00
Oskari Rauta
3d88d18ee2 conmon: update to 2.1.8
Bug fixes:
 - stdio: ignore EIO for terminals
 - ensure console socket buffers are properly sized
 - conmon: drop return after pexit()
 - ctrl: make accept4 failures fatal
 - logging: avoid opening /dev/null for each write
 - oom: restore old OOM score
 - Use default umask 0022

Misc changes:
 - cli: log parsing errors to stderr
 - Changes to build conmon for riscv64
 - Changes to build conmon for ppc64le
 - Fix close_other_fds on FreeBSD

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-16 21:42:34 +08:00
Stan Grishin
bce310bfcd adblock-fast: bugfix: remove domains on allow
* fix sed command to properly remove allowed domains from block-file

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2023-09-16 13:13:49 +00:00
Stan Grishin
6105cb2752
Merge pull request #22109 from BKPepe/curl-update
curl: update to version 8.3.0
2023-09-16 03:25:03 -07:00
Josef Schlehofer
bb4c3b5a20 bandwidthd: drop this package
This package is not maintained by upstream anymore as they replace it by Ntopng 3. [1]
Upstream repository is archived and read only since February 2022 [2]

[1] https://community.nethserver.org/t/bandwidthd-for-nethserver-7/4071/18
[2] https://github.com/NethServer/bandwidthd

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-16 12:17:22 +02:00
Josef Schlehofer
07c0a5eab8 curl: update to version 8.3.0
Release notes:
https://curl.se/changes.html#8_3_0

Fixes:
CVE-2023-38039 [1]

[1] https://curl.se/docs/CVE-2023-38039.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-16 11:23:06 +02:00
Martin Schiller
d42a6758b9 ovpn-dco: fix package dependencies
We have to add an "IPV6:" in front of the kmod-udptunnel6 to fix
redundant dependencies with the openvpn-* packages.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2023-09-16 17:03:03 +08:00
Olivier Poitrey
66b72b6db3 nextdns: Update to version 1.40.1
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2023-09-15 23:41:21 +08:00
Tianling Shen
c1fbf1f419
Merge pull request #22104 from douglarek/zt
zerotier: update to 1.12.2
2023-09-15 23:41:05 +08:00
Josef Schlehofer
536569ca62 dnscrypt-proxy2: update to version 2.1.5
Fixes compilation with Go 1.21+.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-15 10:23:20 +02:00
Josef Schlehofer
c43599b0c8 syslog-ng: update to version 4.3.1
Makefile changes:
- Since version 4.3.0, there is required to use pcre2 instead of pcre
Reference: https://github.com/syslog-ng/syslog-ng/pull/4537

- Disable c++ support by default to avoid picking libstdcpp dependency
Reference: https://github.com/syslog-ng/syslog-ng/pull/4484

Config changes:
- Bump version in config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-15 09:27:40 +02:00
Leo Douglas
0343dffefa
zerotier: update to 1.12.2
see changelog: https://github.com/zerotier/ZeroTierOne/releases/tag/1.12.2.

Signed-off-by: Leo Douglas <douglarek@gmail.com>
2023-09-15 10:17:57 +08:00
Leo Douglas
b76a0d6aa6 sing-box: update to 1.4.3
see changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.4.3

Signed-off-by: Leo Douglas <douglarek@gmail.com>
2023-09-15 09:50:14 +08:00
Tyler Young
ccde8d18a1 tailscale: set nftables as default
This changes the default firewall method used by Tailscale to nftables.
The 'autodetection' mode is only supported by arm64 and amd64 for now[1].
This causes mips devices to not do proper detection and incorrectly default back to
iptables.

I added a fw_mode variable to the tailscale.conf file that could be
set to iptables for easy conversion for someone still using iptables.
I was able to test on an older mips device and my current aarch64
without issues.

Also a few readme updates to bring it up to the current status.

1. dc7aa98b76/util/linuxfw/linuxfw_unsupported.go (L4C58-L4C58)

Signed-off-by: Tyler Young <git@yfh.addy.io>
2023-09-15 09:49:47 +08:00
John Audia
633950a384 snort3: update to 3.1.70.0
Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.1.70.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2023 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.12
           Using LuaJIT version 2.1.0-beta3
           Using OpenSSL 3.0.10 1 Aug 2023
           Using libpcap version 1.10.4 (with TPACKET_V3)
           Using PCRE version 8.45 2021-06-15
           Using ZLIB version 1.2.13
           Using Hyperscan version 5.4.2 2023-09-07

Signed-off-by: John Audia <therealgraysky@proton.me>
2023-09-14 23:46:46 +02:00
Jeffery To
e309346104 python-setuptools: Update to 68.2.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-09-14 21:38:03 +08:00
Jeffery To
21eb9b7456 python-build: Update to 1.0.3
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-09-14 21:37:51 +08:00
Tianling Shen
701368824e
Merge pull request #22095 from jefferyto/rust-arch-depends
rust: Move RUST_ARCH_DEPENDS into rust-values.mk
2023-09-14 21:28:06 +08:00
Peter van Dijk
e25bb510de dnsdist: update to 1.8.1
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2023-09-13 12:39:34 +08:00
Jeffery To
985738b399
rust: Move RUST_ARCH_DEPENDS into rust-values.mk
This allows other packages access to RUST_ARCH_DEPENDS by including
rust-values.mk, instead of rust-package.mk which also sets
Build/Compile.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-09-13 04:27:11 +08:00
Florian Eckert
a56e111c49 mwan3: fix mwan3_connected ubus output
During the renameing of mwan3_connected_v4 to mwan3_connected_ipv4 and
mwan3_connected_v6 to mwan3_connected_ipv6 the adjustment in the ubus
call was forgotten. This commit fixes this.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-09-12 16:03:18 +02:00
Carsten Schuette
d9acb54dc4 dawn: Add PKG_BUILD_FLAGS:=no-lto because lto causes strange SegFaults
Signed-off-by: Carsten Schuette <schuettecarsten@googlemail.com>
2023-09-11 09:01:26 +02:00
Carsten Schuette
6c5c99d206 dawn: Update to 2023-05-14
Signed-off-by: Carsten Schuette <schuettecarsten@googlemail.com>
2023-09-11 09:01:26 +02:00
Tianling Shen
9cab7fc6f7
Merge pull request #22083 from jefferyto/golang-1.21.1
golang: Update to 1.21.1
2023-09-11 09:55:32 +08:00
Jeffery To
d9a999521e
golang: Update to 1.21.1
Includes fixes for:

* CVE-2023-39318: html/template: improper handling of HTML-like comments
  within script contexts

* CVE-2023-39319: html/template: improper handling of special tags
  within script contexts

* CVE-2023-39320: cmd/go: go.mod toolchain directive allows arbitrary
  execution

* CVE-2023-39321 and CVE-2023-39322: crypto/tls: panic when processing
  partial post-handshake message in QUICConn.HandleData

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-09-11 03:57:45 +08:00
Alexandru Ardelean
b2fc84a21b
Merge pull request #21935 from G10h4ck/libssh-mbedtls
libssh: compile against MbedTLS instead of OpenSSL
2023-09-10 20:07:49 +03:00
Alexandru Ardelean
4359bac7c1
Merge pull request #21958 from graysky2/ncdu
ncdu: update to 1.18.1
2023-09-10 20:04:42 +03:00
Alexandru Ardelean
1de5a85a93
Merge pull request #21856 from AuthorReflex/ovpn-2.6.6
openvpn: update to 2.6.6
2023-09-10 20:04:08 +03:00
Alexandru Ardelean
9ca55bf34f
Merge pull request #22072 from commodo/python-updates1
chardet,numpy,django: bump versions
2023-09-10 20:02:01 +03:00
Alexandru Ardelean
cac6c53d2e
Merge pull request #22043 from jefferyto/python-crcmod-package-section
python-crcmod: Fix package section
2023-09-10 16:18:35 +03:00
Alexandru Ardelean
28d5ed0da9
Merge pull request #22067 from robimarko/dbus
dbus: update to 1.14.10 and take ower maintainership
2023-09-10 16:18:06 +03:00
Alexandru Ardelean
46523843b9
Merge pull request #22030 from BKPepe/retake-packages
treewide: take maintainership from Karel
2023-09-10 16:17:11 +03:00
Alexandru Ardelean
681651db4f
Merge pull request #22039 from jefferyto/xmltodict-0.13.0
xmltodict: Update to 0.13.0, rename source package
2023-09-10 16:14:59 +03:00
Alexandru Ardelean
d94a5cf585
Merge pull request #22038 from jefferyto/ruamel-yaml-0.17.32
ruamel-yaml: Update to 0.17.32, rename source package
2023-09-10 16:14:41 +03:00