Tianling Shen
93cbaacbfb
Merge pull request #22348 from miska/samba4
...
samba4: Update to version 4.18.7
2023-10-11 09:50:42 +08:00
Fabian Lipken
325ecf9fac
python-pycares: bump to 4.4.0
...
Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
2023-10-11 09:49:14 +08:00
Tianling Shen
d2f1665b06
Merge pull request #22343 from jefferyto/python-3.11.6
...
python3: Update to 3.11.6, refresh patches
2023-10-11 09:48:04 +08:00
Tianling Shen
e8597c2a7f
Merge pull request #22345 from muink/patch-1
...
librespeed-go: Reload the daemon after modifying the tls certificate
2023-10-11 09:40:08 +08:00
Facundo Acevedo
482e7170e8
procs: Add new package
...
Procs is a modern, feature-rich alternative to the 'ps' command written in Rust
Signed-off-by: Facundo Acevedo <facevedo@disroot.org>
2023-10-11 09:35:33 +08:00
Philip Prindeville
a02cd494e3
Merge pull request #22203 from pprindeville/perl-text-csv_xs-update-1.52
...
Perl text csv xs update 1.52
2023-10-10 16:02:41 -05:00
Philip Prindeville
d359a32d48
perl-text-csv_xs: Update to 1.52
...
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2023-10-10 14:44:00 -06:00
Nick Hainke
ca057f3e4e
kmod: update to 31
...
Release Notes:
aff617ea87/NEWS (L1)
Signed-off-by: Nick Hainke <vincent@systemli.org>
2023-10-10 15:36:55 +02:00
Nick Hainke
9bd39a33b1
snowflake: update to 2.6.1
...
Release Notes:
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/tags/v2.6.1
Remove upstreamed patches:
- 0001-Bump-minimum-required-version-of-go.patch
- 0002-Update-dependencies.patch
Signed-off-by: Nick Hainke <vincent@systemli.org>
2023-10-10 10:30:28 +02:00
Tianling Shen
503825ef41
cloudreve: Update to 3.8.3
...
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-10-10 10:30:17 +08:00
Anya Lin
fd1d506fff
librespeed-go: Reload the daemon after modifying the tls certificate
...
Make the daemon reload after the tls certificate is updated
Signed-off-by: Anya Lin <hukk1996@gmail.com>
2023-10-10 09:13:14 +08:00
Michal Hrusecky
eb7d756e79
samba4: Update to version 4.18.7
...
Update to the latest stable version in 4.18 series, for details, see
https://www.samba.org/samba/history/samba-4.18.7.html
Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2023-10-09 08:41:46 +02:00
Florian Eckert
a2653fe7ca
Merge pull request #22303 from perrin4869/ddns-scripts/add-samples-to-package
...
ddns-scripts: add samples to package
2023-10-09 08:36:16 +02:00
Sergey Ponomarev
08e3c43607
pppossh: depend on dbclient
...
The package should not only depend on a package dropbear but on the dbclient.
Otherwise the dbclient may be disabled during compilation and the dependency will be not satisfied.
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-09 13:54:25 +08:00
Tianling Shen
303f0ad5ed
dnsproxy: Update to 0.56.0
...
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-10-09 11:38:58 +08:00
Tianling Shen
02b723bec3
v2ray-core: Update to 5.8.0
...
Removed upstreamed patches.
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-10-09 11:38:50 +08:00
Kaveh Dadgar
b1fc3754b3
v2ray-geodata: add package v2ray-geosite-ir
...
"Iran Hosted Domains" is a comprehensive list of Iranian domains and services that are hosted within the country.
Signed-off-by: Kaveh Dadgar <Kavehdadgar666@protonmail.com>
2023-10-09 10:10:25 +08:00
Zephyr Lykos
5cd966ca4f
tailscale: Update to 1.50.1
...
https://github.com/tailscale/tailscale/releases/tag/v1.50.1
Signed-off-by: Zephyr Lykos <git@mochaa.ws>
2023-10-09 10:09:41 +08:00
Oskari Rauta
ff93e4a19d
cni-protocol: update protocol
...
Changes to protocol file and it's description.
Works better now and restarts firewall automaticly
when tunnel comes available. More informative/guiding
description.
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-10-09 10:09:22 +08:00
Leo Douglas
bf7ce353b8
sing-box: update to v1.5.2
...
* Enable `with_ech` and `with_dhcp`, just like upstream
* See changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.5.2
Signed-off-by: Leo Douglas <douglarek@gmail.com>
sing-box: ShadowsocksR is marked as deprecated since v1.5.0
Signed-off-by: Leo Douglas <douglarek@gmail.com>
sing-box: remove dhcp by default
Signed-off-by: Leo Douglas <douglarek@gmail.com>
2023-10-09 10:09:04 +08:00
Jeffery To
2aba43afe9
python3: Update to 3.11.6, refresh patches
...
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-10-09 09:20:50 +08:00
Stijn Tintel
af48372e37
kea: bump to 2.4.0
...
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2023-10-08 14:19:18 -07:00
Stijn Tintel
58558c8834
kea: bump to 2.2.1
...
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2023-10-08 14:19:18 -07:00
Nuno Gonçalves
597df3585f
esp2net: add Espressif ESP chip USB-Network proxy
...
Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>
2023-10-08 17:40:50 +01:00
Glenn Strauss
3e9b2d85f0
lighttpd: update to lighttpd 1.4.72 release hash
...
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2023-10-08 20:41:16 +08:00
Jianhui Zhao
e65aed298c
lua-eco: update to 3.0.1
...
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2023-10-08 14:08:00 +03:00
Olivier Poitrey
4e0d43a8d9
nextdns: Update to version 1.41.0
...
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2023-10-08 14:06:57 +03:00
Sergey Ponomarev
fdaf530950
sshtunnel: update version to 5.1
...
Make it depends on ether Dropbear dbclient or OpenSSH client
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
1a92dbcf32
sshtunnel: allow empty port and user
...
A user may have some host configured in the .ssh/config with user and port.
But we anyway have to specify them in the sshtunnel.
The change fixes this
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
9ea6f35194
sshtunnel: add enabled option
...
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
9dd8a62238
sshtunnel: allow empty remoteaddress
...
Just empty or * may have some semantic difference on a server
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
1d9f10a135
sshtunnel: StrictHostKeyChecking for Dropbear
...
The dbclient doesn't support the -o StrictHostKeyChecking but it has it's own -y option:
-y Always accept remote host key if unknown
-y -y Don't perform any remote host key checking (caution)
So we can add these options to make the StrictHostKeyChecking working.
The dbclient will ignore -o StrictHostKeyChecking but use the -y or -yy instead.
The only problem is that the -y flag is also used by the openssh-client:
-y Send log information using the syslog(3) system module. By default this information is sent to stderr.
This is not critical and once the dbclient start to support the StrictHostKeyChecking we can remove the -y flag.
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
f14dae7bc9
sshtunnel: Use -i $IdentityFile instead of -o IdentityFile=$IdentityFile
...
This makes the sshtunnel compatible with Dropbear.
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
714c97b012
sshtunnel: set StrictHostKeyChecking=accept-new by default
...
Without the option the ssh will propt a user to accept the host key.
So a user should perform a connection manualy and accept before useing the sshtunnel.
The accept-new is a reasonable trade off.
Also the LogLevel is INFO by default.
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
2a5f9dbcc7
sshtunnel: uci_sshtunnel use example.com
...
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
41635f946c
sshtunnel: uci_sshtunnel simplify
...
Simplify comment and make it shorter.
Remove triling tab after retrydelay.
Use a full path for IdentityFile because otherwise the uci validation fails with the relative path ~/.ssh
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Daniel Golle
7c8f4a2a1c
exim: update to version 4.96.1
...
This is a security release.
JH/01 Bug 2999: Fix a possible OOB write in the external authenticator, which
could be triggered by externally-supplied input. Found by Trend Micro.
CVE-2023-42115
JH/02 Bug 3000: Fix a possible OOB write in the SPA authenticator, which could
be triggered by externally-controlled input. Found by Trend Micro.
CVE-2023-42116
JH/03 Bug 3001: Fix a possible OOB read in the SPA authenticator, which could
be triggered by externally-controlled input. Found by Trend Micro.
CVE-2023-42114
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2023-10-08 03:28:35 +02:00
Luiz Angelo Daros de Luca
36566a99af
libvpx: update to 1.13.1
...
v1.13.0
This release includes more Neon and AVX2 optimizations, adds a new codec
control to set per frame QP, upgrades GoogleTest to v1.12.1, and includes
numerous bug fixes.
v1.13.1
This release contains two security related fixes. One each for VP8 and VP9.
- https://crbug.com/1486441 (CVE-2023-5217)
- Fix bug with smaller width bigger size (CVE-2023-44488)
Fixes #22318
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2023-10-07 16:59:57 -07:00
Josef Schlehofer
e6e164996d
Merge pull request #22329 from jefferyto/golang-1.21.2
...
golang: Update to 1.21.2
2023-10-07 19:34:22 +02:00
Jeffery To
a8374204bb
golang: Update to 1.21.2
...
Includes fix for CVE-2023-39323 (cmd/go: line directives allows
arbitrary execution during build).
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-10-07 20:04:12 +08:00
Jeffery To
f53a2ea2fb
Merge pull request #22306 from cotequeiroz/python3-rebuild
...
python3: avoid unnecessary rebuilds
2023-10-07 18:57:01 +08:00
Jeffery To
1dce408385
Merge pull request #22309 from BKPepe/tor-fw-helper
...
tor-fw-helper: remove it
2023-10-07 18:52:07 +08:00
Stan Grishin
7d0557fad4
Merge pull request #22311 from stangri/master-adblock-fast
...
adblock-fast: bugfix: properly identify hosts-files
2023-10-06 16:42:32 -06:00
Julian Grinblat
565fda4105
ddns-scripts: add ddns-scripts-utils package
...
The samples in the repo are useful for configuring cenrtain aspects of
ddns, and their inclusion is hinted at within their source code
Signed-off-by: Julian Grinblat <julian@dotcore.co.il>
2023-10-06 18:08:59 +09:00
Florian Eckert
71cb7ad0a4
Merge pull request #22298 from TDT-AG/pr/20231004-keepalived
...
keepalived: update to version 2.2.8
2023-10-06 08:34:24 +02:00
Alexandru Ardelean
3b9abf7836
Merge pull request #22301 from cotequeiroz/pymysql_sha256
...
pymysql: add meta-package for sha256 support
2023-10-06 09:34:00 +03:00
Tianling Shen
72d2a78487
Merge pull request #22273 from ne20002/crowdsec-firewall-bouncer
...
crowdsec-firewall-bouncer: new upstream release version 0.0.28
2023-10-06 13:44:33 +08:00
John Audia
6dc86d46da
openssh: bump to 9.5p1
...
Changelog: https://www.openssh.com/txt/release-9.5
Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne
Signed-off-by: John Audia <therealgraysky@proton.me>
2023-10-05 14:37:59 -07:00
Jeffery To
00841f9873
python-twisted: Update to 23.8.0, rework patches
...
The package changed to the hatchling build backend.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-10-05 14:37:27 -07:00
Jan Kratochvil
e429c11b04
ffmpeg: fix compilation error of ffmpeg-custom
...
Fixes : #12320
After plain enable of libffmpeg-custom and ffmpeg-custom which adds:
- CONFIG_PACKAGE_libbz2=m
- CONFIG_PACKAGE_libffmpeg-custom=m
- CONFIG_FFMPEG_CUSTOM_GPL=y
- CONFIG_PACKAGE_zlib=m
- CONFIG_PACKAGE_ffmpeg-custom=m
I get on v22.03.5 compilation error:
```
cp -fpR /.../openwrt-git/build_dir/target-mips_24kc_musl/ffmpeg-custom/ffmpeg-5.1/ipkg-install/usr/bin/ffmpeg /.../openwrt-git/build_dir/target-mips_24kc_musl/ffmpeg-custom/ffmpeg-5.1/ipkg-mips_24kc/ffmpeg-custom/usr/bin/
cp: cannot stat '/.../openwrt-git/build_dir/target-mips_24kc_musl/ffmpeg-custom/ffmpeg-5.1/ipkg-install/usr/bin/ffmpeg': No such file or directory
make[2]: *** [Makefile:756: /.../openwrt-git/bin/packages/mips_24kc/packages/ffmpeg-custom_5.1-1_mips_24kc.ipk] Error 1
```
It is because configure is missing `ffmpeg` in its `Programs:` section:
```
( cd /.../openwrt-git/build_dir/target-mips_24kc_musl/ffmpeg-custom/ffmpeg-5.1; CFLAGS="-Os -pipe -mno-branch-likely -mips32r2 -mtune=24kc -fno-caller-saves -fno-plt -fhonour-copts -Wno-error=unused-but-set-variable -Wno-error=unused-result -msoft-float -mips16 -minterlink-mips16 -fmacro-prefix-map=/.../openwrt-git/build_dir/target-mips_24kc_musl/ffmpeg-custom/ffmpeg-5.1=ffmpeg-5.1 -Wformat -Werror=format-security -fstack-protector -D_FORTIFY_SOURCE=1 -Wl,-z,now -Wl,-z,relro -I/.../openwrt-git/staging_dir/toolchain-mips_24kc_gcc-11.2.0_musl/usr/include -I/.../openwrt-git/staging_dir/toolchain-mips_24kc_gcc-11.2.0_musl/include/fortify -I/.../openwrt-git/staging_dir/toolchain-mips_24kc_gcc-11.2.0_musl/include -DPIC -fpic" LDFLAGS="-L/.../openwrt-git/staging_dir/toolchain-mips_24kc_gcc-11.2.0_musl/usr/lib -L/.../openwrt-git/staging_dir/toolchain-mips_24kc_gcc-11.2.0_musl/lib -znow -zrelro" ./configure --enable-cross-compile --cross-prefix="mips-openwrt-linux-musl-" --arch="mips" --cpu=24kc --target-os=linux --prefix="/usr" --pkg-config="pkg-config" --enable-shared --enable-static --enable-pthreads --enable-zlib --disable-doc --disable-debug --disable-lzma --disable-vaapi --disable-vdpau --disable-outdevs --disable-altivec --disable-vsx --disable-power8 --disable-armv5te --disable-armv6 --disable-armv6t2 --disable-fast-unaligned --disable-runtime-cpudetect --disable-x86asm --enable-small --enable-gpl --disable-programs --disable-avfilter --disable-swresample --disable-swscale --disable-everything --disable-postproc )
install prefix /usr
source path .
C compiler mips-openwrt-linux-musl-gcc
C library
host C compiler gcc
host C library glibc
ARCH mips (24kc)
big-endian yes
runtime cpu detection no
MIPS FPU enabled no
MIPS DSP R1 enabled no
MIPS DSP R2 enabled no
MIPS MSA enabled no
LOONGSON MMI enabled no
debug symbols no
strip symbols yes
optimize for size yes
optimizations yes
static yes
shared yes
postprocessing support no
network support yes
threading support pthreads
safe bitstream reader yes
texi2html enabled no
perl enabled yes
pod2man enabled yes
makeinfo enabled yes
makeinfo supports HTML no
xmllint enabled yes
External libraries:
alsa iconv
bzlib zlib
External libraries providing hardware acceleration:
cuda_llvm v4l2_m2m
Libraries:
avcodec avformat
avdevice avutil
Programs:
Enabled decoders:
Enabled encoders:
Enabled hwaccels:
Enabled parsers:
Enabled demuxers:
Enabled muxers:
Enabled protocols:
Enabled filters:
Enabled bsfs:
Enabled indevs:
Enabled outdevs:
License: GPL version 2 or later
```
Signed-off-by: Jan Kratochvil <jan@jankratochvil.net>
2023-10-05 14:37:03 -07:00