Commit graph

24446 commits

Author SHA1 Message Date
Josef Schlehofer
4bd6bc41c9
ffmpeg: update to version 4.3.3
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a68e9db8d4)
2022-02-05 10:23:28 +01:00
Michal Vasilek
ac4ecdf85e
tinyionice: add package
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit bb801a5a6f)
2022-02-04 15:36:15 +01:00
Tianling Shen
1a40a0a0b8 yq: Update to 4.18.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c665f0b50c)
2022-02-04 06:28:06 -08:00
Tianling Shen
32e85322c5 yq: Update to 4.17.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 029b37aad0)
2022-02-04 06:28:06 -08:00
Josef Schlehofer
68571069e1
Merge pull request #17737 from JonnyTischbein/telegraf-1.21.3-openwrt_21.02
telegraf: add package version 1.21.3 to openwrt 21.02
2022-02-03 16:24:02 +01:00
Josef Schlehofer
675755537a
apache2: security update to version 2.4.52
Fixes CVEs:
- CVE-2021-44790
- CVE-2021-44224

Refreshed patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 6c6c99ffb5)
2022-02-03 12:57:17 +01:00
Noah Meyerhans
74f9ae0286 bind: bump to 9.18.0
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 127ef1207b)
2022-02-02 09:20:10 -08:00
Stan Grishin
b7374630e1
Merge pull request #17764 from stangri/openwrt-21.02
[21.02] https-dns-proxy: update to 2021-11-22-1
2022-02-02 09:12:45 -08:00
Kerma Gérald
b29655996d crowdsec: update from latest upstream release 1.3.0
Changes (from 1.2.3):
https://github.com/crowdsecurity/crowdsec/compare/v1.2.3...v1.3.0

(cherry picked from commit d2fd1f8346)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-02-02 07:24:22 -08:00
Nick Hainke
3b28c6f389 wg-installer: use babeld add_interface function
With commit 385200443554 ("babeld: add add_interface function") babeld
has a new ubus function allowing to dynamically add an interface.

Before the add_interface function, we were required to reload babeld.
The reload influenced the babeld routing. However, the remove part is
still missing and will be added at a later stage.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 40b87aac95)
2022-02-02 11:10:19 +01:00
Kerma Gérald
1026a1fd4e crowdsec-firewall-bouncer: fix name in initd to start the process
crowdsec rename the binary from crowdsec-firewall-bouncer to cs-firewall-bouncer
the initd need the correct binary name to start the process
the link for github source need also to be fixed (only the information one)
fix the BuildDate
updated copyright

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit d6b116cb43)
2022-02-02 08:09:01 +01:00
Hannu Nyman
9137583d3d nano: Add a plus variant with more features
Nano is by default built as "tiny" with most features disabled.
That is suitable for basic tasks in routers with small flash.

Add a new nano-plus variant that enables selected additional
features in the build config:
 * multiple files (multibuffer)
 * Unicode/utf8
 * justify
 * .nanorc support
 * help
 * also some key bindings get enabled as "tiny" configure option
   is removed.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 85cb71d8d8)
2022-02-01 23:41:59 +02:00
Stan Grishin
2cd8928796 https-dns-proxy: update to 2021-11-22-1
* update to 2021-11-22 upstream source
* update patch file
* update init script to preserve manual entries
	(fixes https://github.com/stangri/source.openwrt.melmac.net/issues/149)
* update init script service_triggers

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 1e5e7ce469)
2022-01-31 22:36:27 +00:00
Nick Hainke
8d8cf26286 dawn: update to 2022-01-17
877e2dc iwinfo: fix get_bandwidth_iwinfo
9ce01ec datastorage: fix multi-SSID
9187665 treewide: improve maintaince
6bf9b6d memory: Tighten up some memory handling to help spot errors
4df0c98 treewide: improve logging

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 7cb73ae3b9)
2022-01-31 15:40:38 +01:00
Josef Schlehofer
f921cc4b74
python-dns: update to version 2.1.0
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 447c6fd57b)
2022-01-31 06:26:58 +01:00
Josef Schlehofer
df7568303b
prosody: update to version 0.11.13
Fixes CVEs:
- CVE-2022-0217
- CVE-2021-37601
- CVE-2021-32918
- CVE-2021-32920
- CVE-2021-32921
- CVE-2021-32917
- CVE-2021-32919

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit dcedbe8027)
2022-01-31 00:05:03 +01:00
Jonathan Pagel
14b623f73f telegraf: Update package to version 1.21.3
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 912bb2c803e7e6d1c0020a59e08fab72d077a7a7)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-01-31 00:00:08 +01:00
Jonathan Pagel
82c35fa92f telegraf: Move config file to /etc/telegraf.conf because
/etc/config is the default uci folder. Also marking it as
configuration file prevents overwriting it on updates.

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit abb33331e532b1de40adea6553589770b3e9ddb9)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-01-30 23:59:33 +01:00
Jonathan Pagel
989aecf2bb telegraf: Add package for telegraf
Telegraf is a plugin-driven agent for collecting and sending metrics
and events. It supports various inputs (including prometheus
endpoints) and is able to send data into InfluxDB.
https://www.influxdata.com/time-series-platform/telegraf/

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 0781a15c932187788a69d9a3eb005062fb8eaf7b)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-01-30 23:59:25 +01:00
Bernd Kuhls
299684dd5c
ffmpeg: update to 4.3.2
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
(cherry picked from commit 900a146de3)
2022-01-29 11:30:18 +01:00
Josef Schlehofer
213aaa1f32
clamav: update to version 0.104.2
Backported upstream pending pull request to fix following error:

CMake Error at /foo/staging_dir/host/share/cmake-3.19/Modules/FindPackageHandleStandardArgs.cmake:218 (message):
  Could NOT find CURSES (missing: CURSES_LIBRARY)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit eddbb64bc9)
2022-01-28 17:35:19 +01:00
Lucian Cristian
9c476ee993
clamav: update to 0.104.0
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 44eb2ae619)
2022-01-28 14:16:35 +01:00
Hirokazu MORIKAWA
2941963033 node: January 10th 2022 Security Releases
Update to v14.18.3

January 10th 2022 Security Releases:
Improper handling of URI Subject Alternative Names (Medium)(CVE-2021-44531)
Certificate Verification Bypass via String Injection (Medium)(CVE-2021-44532)
Incorrect handling of certificate subject and issuer fields (Medium)(CVE-2021-44533)
Prototype pollution via console.table properties (Low)(CVE-2022-21824)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 8278998e48)
2022-01-25 09:50:18 +01:00
Josef Schlehofer
fc835bcaac
tvheadend: fix conffiles section
The previous one was wrong, and it did not work. It could be checked
inside compiled package in control.tar.gz that there was missing
``conffiles`` file with content `/etc/config/tvheadend`

It is also possible to verify that the config is not overwritten on the router
by running ``opkg install tvheadend --force-reinstall``

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 752d1ffc28)
2022-01-25 09:00:53 +01:00
Glenn Strauss
48bf1a0d0d
lighttpd: update to lighttpd 1.4.64 release hash
remove long-deprecated modules

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 3badd76668)
2022-01-24 15:19:03 +01:00
Glenn Strauss
82339309f5
lighttpd: update to lighttpd 1.4.63 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 35dff58b3a)
2022-01-24 15:18:59 +01:00
Glenn Strauss
527f2b920f
lighttpd: update to lighttpd 1.4.62 release hash
depend on libpcre2 instead of libpcre

also remove patches incorporated upstream into lighttpd 1.4.62

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit ddecac45c8)
2022-01-24 15:18:54 +01:00
Josef Schlehofer
4f990b7cd6
tvheadend: fix typo in uriparser
Fixes: 0449c109e7 ("tvheadend: disable
uriparser")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5879260515)
2022-01-24 12:25:45 +01:00
Michael Heimpold
aa2c1a9937
Merge pull request #17677 from mhei/21.02-php8-update
[21.02] php8: update to 8.0.15
2022-01-24 07:45:04 +01:00
Nick Hainke
aeb8aad5c0 wg-installer: fix multiple namespaces
Add flag "--lookup-default-namespace" to signal that wg-installer should
look already established wireguard sessions in the default namespace.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 94efdcf02a)
2022-01-23 18:09:51 +01:00
Michael Heimpold
e29f386508 php8: update to 8.0.15
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-01-22 21:24:37 +01:00
Josef Schlehofer
d7c78f83be
tvheadend: disable uriparser
This avoids to add liburiparser as dependency.

Package tvheadend is missing dependencies for the following libraries:
liburiparser.so.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 0449c109e7)
2022-01-22 14:37:57 +01:00
Jeffery To
c7f25b25df python3: Update to 3.9.10, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-01-20 20:48:55 -08:00
Nick Hainke
b9bfe1ef15 wg-installer: remove unused dependency
Remove the dependency "coreutils-realpath" from
wg-installer-server-hotplug-olsrd.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit fab86eb626)
2022-01-20 22:22:53 +01:00
Nick Hainke
9a836f4307 wg-installer: create wireguard key if it does not exist
Check if the key exists which is given by
    option wg_key '/etc/wgserver/wg.key'

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 324fa79d7c)
2022-01-20 15:12:22 +01:00
Nick Hainke
317ba6a43e wg-installer: install cronjob
Install a cronjob that removes unused wireguard interfaces every 10
minutes.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 432a965689)
2022-01-20 13:57:46 +01:00
Nick Hainke
a430932a7d wg-installer: check if a key is already inserted
Check if a peer is already existing with a given public key. Introduce a
response code for signaling why the server rejected the request.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit da48bc3792)
2022-01-20 13:57:46 +01:00
Nick Hainke
0aaa90629c wg-installer: rework code
Use shellcheck to rework the code. Use "export" to return variables from
a function call. Further, fix typos.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 69c81790d1)
2022-01-20 13:57:46 +01:00
Nick Hainke
dea64c08ea wg-installer: cosmetic changes
Use "ip addr" instead of "ip addres" or "ip a".

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 38a9a3e0dc)
2022-01-20 13:57:46 +01:00
Josef Schlehofer
444b64e36c
cryptsetup: update to version 2.4.3
Fixes: CVE-2021-4122

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a2427edf76)
2022-01-19 11:20:07 +01:00
Josef Schlehofer
a259a4aaaa
git: update to version 2.34.1
- Refreshed patches

- Release notes 2.34.0:
2ae0a9cb82/Documentation/RelNotes/2.34.0.txt

- Release notes 2.34.1:
2ae0a9cb82/Documentation/RelNotes/2.34.1.txt

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 042bf16072)
2022-01-19 11:20:01 +01:00
Kerma Gérald
0cdffbaf95 crowdsec: update from upstream latest release 1.2.3
update from latest upstream release 1.2.3
updated copyright

(cherry picked from commit de41b63ca4)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-18 18:06:54 -08:00
Moritz Warning
031fbb16a3 smcroute: update to 2.5.5
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-01-17 21:08:50 -08:00
Moritz Warning
fcf1633351 smcroute: update to 2.5.4
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-01-17 21:08:50 -08:00
Jeffery To
0a250df810
Merge pull request #17619 from erdoukki/21.02-2to3
[21.02] 2to3: add package host tool
2022-01-17 19:10:26 +08:00
Nick Hainke
c7470d1d8e wg-installer: switch to ubus call for olsrd hotplug
Use ubus ipc calls to add and remove interfaces.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit b89eb0115f)
2022-01-17 09:42:06 +01:00
Nick Hainke
8c3ce87fd2 wg-installer: rework iproute2 commands
- Use ip address add instead of ip a a
- Directly add broadcast address

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit fea27cec05)
2022-01-17 09:42:06 +01:00
Kerma Gérald
3f88edfa54 2to3: add package host tool
2to3 is a Python program that reads Python 2.x source code and applies a
  series of fixers to transform it into valid Python 3.x code. The standard
  library contains a rich set of fixers that will handle almost all code. 2to3
  supporting library lib2to3 is, however, a flexible and generic library, so it
  is possible to write your own fixers for 2to3. lib2to3 could also be adapted
  to custom applications in which Python code needs to be edited automatically.

This tool is necessary for fail2ban package because of issue
  https://github.com/openwrt/packages/issues/17311
  https://github.com/openwrt/packages/pull/17341

Simple 2to3.py script from Debian, thanks to Matthias Klose <doko@ubuntu.com>
From: https://salsa.debian.org/cpython-team/python3-defaults

(cherry picked from commit 2f91e1c9c5)
Co-authored-by: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-15 20:53:30 +01:00
Paul Spooren
bb09bc37b2 CI: fix runtime testing for non master branch
The runtime testing always ran on master branch aka snapshots since the
branch wasn't passed over to the container execution!

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit f535d77090)
2022-01-15 11:30:59 +01:00
R4SAS I2P
bbd3d70cd4
i2pd: Update to 2.40.0 and update package sources
* Updating i2pd package to 2.40.0
* Rewrite Makefile
* Remove usage of PKG_INSTALL (package's make install)
* Rewrite init.rc configuration and script
* Remove '--service' option from init, which only sets datadir to /var/lib/i2pd
* Use '--datadir' option in init, otherwise datadir changing via uci is not works
* Update patch for i2pd.conf

Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
(cherry picked from commit ac27fffff9)
2022-01-15 09:02:21 +01:00