Commit graph

8511 commits

Author SHA1 Message Date
Rui Salvaterra
f573a9937b
tor: bump to 0.4.7.7 stable
The first stable release in the 0.4.7.x series.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 0b50456514)
2022-05-03 17:47:54 +02:00
Rui Salvaterra
c566bd79c9
tor: bump to 0.4.6.10 stable
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 17e78a9790)
2022-05-03 17:47:50 +02:00
Rui Salvaterra
3848847039
tor: bump to 0.4.6.9 stable
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 72974bed43)
2022-05-03 17:47:45 +02:00
Rui Salvaterra
f9d6632e6c
tor: bump to 0.4.6.8 stable
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 2997d2dcf5)
2022-05-03 17:47:41 +02:00
Rui Salvaterra
e963482cc6
tor: bump to 0.4.6.7
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit c12cb0cdde)
2022-05-03 17:47:36 +02:00
Rui Salvaterra
6556cf1030
tor: bump to 0.4.6.6 stable
Run-tested on mvebu/cortexa9 (tor-basic) without issues.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit a45b962eef)
2022-05-03 17:47:27 +02:00
Tianling Shen
64f2b6bf6b rclone: Update to 1.58.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit cf81132418)
2022-05-01 09:21:16 -07:00
Jan Hák
95c0d6633b
knot: update to 3.1.7
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit f30da8c572)
2022-04-28 23:37:30 +02:00
Tianling Shen
587caf22a7 xray-core: Update to 1.5.5
Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 67c0a17fee)
2022-04-25 23:31:00 -07:00
Josef Schlehofer
959860dc47
git: update to version 2.34.3
Fixes:
- CVE-2022-24765

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c77f4f9e1d)
2022-04-25 11:18:43 +02:00
Jeffery To
2a18d4fb3a
Merge pull request #18298 from jamesmacwhite/21.02-ooniprobe-v3.14.2
[21.02] ooniprobe v3.14.2
2022-04-23 01:28:55 +08:00
David Bauer
fe3e0493d1 usteer: update to latest HEAD
f88ac23 local-node: periodically send link-measurement requests
4473c6e measurement: add missing timeout-reset
6d3314c local-node: handle received link-measurement reports
7df969f measurement: generalize measurement handling
bb61f2a local-node: enable link-measurement capability
4458b6f usteer: expose STA link measurement capability

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 0248058f6b)
2022-04-22 02:15:19 +02:00
James White
827c375331 ooniprobe: Update 3.14.2
Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit ddb4ccfeaf)
2022-04-18 07:46:32 +01:00
Jan Pavlinec
04a580232b ooniprobe: update to version 3.10.1
Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit 3f62bd9df1)
Signed-off-by: James White <james@jmwhite.co.uk>
2022-04-18 07:43:35 +01:00
Jan Pavlinec
a33113111f ooniprobe: update to version 3.9.2
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit eda48170ec)
Signed-off-by: James White <james@jmwhite.co.uk>
2022-04-18 07:43:26 +01:00
Jan Pavlinec
9f90da7366 ooniprobe: update to version 3.9.0
Remove getrescources call because it is no longer
required.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 354523d5b5)
Signed-off-by: James White <james@jmwhite.co.uk>
2022-04-18 07:43:18 +01:00
Jan Pavlinec
918ca913b7 ooniprobe: update to version 3.8.0
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit b2921628ab)
Signed-off-by: James White <james@jmwhite.co.uk>
2022-04-18 07:43:11 +01:00
Jan Pavlinec
a11f9a412a ooniprobe: update to version 3.7.0
Changes:
-add Configure stage to prebuild resources

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 17b18d825c)
Signed-off-by: James White <james@jmwhite.co.uk>
2022-04-18 07:43:05 +01:00
Jan Pavlinec
915fed2604 ooniprobe: update to version 3.5.2
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 3b25f4561f)
Signed-off-by: James White <james@jmwhite.co.uk>
2022-04-18 07:42:58 +01:00
Peter van Dijk
216a37d655 pdns-recursor: add patch for CVE-2022-27227
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2022-04-14 18:54:40 -07:00
Peter van Dijk
f618daa55f pdns: add patch for CVE-2022-27227
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2022-04-14 18:54:40 -07:00
Florian Eckert
14d7e1608d keepalived: fix libip6tc dependency
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Rebase commit: nftables is not available
(cherry picked from commit eed4277d5c)
2022-04-08 09:04:35 +02:00
Florian Eckert
3fbe10e598 keepalived: add missing CONFIG_ prefix to PKG_CONFIG_DEPENDS elements
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Rebase commit: nftables is not available
(cherry picked from commit 209bcc649a)
2022-04-08 09:04:10 +02:00
Jeffery To
ef44037b76
Merge pull request #18229 from jamesmacwhite/adguardhome-v0.107.5-21.02
[21.02] Update adguardhome to latest stable v0.107.5
2022-04-08 01:18:04 +08:00
James White
bbb13556dc adguardhome: Update adguardhome to v0.107.5
Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit b08aa72bad)
2022-04-03 09:00:50 +01:00
James White
19e621a432 adguardhome: Bump adguardhome to v0.107.3 stable
Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit 435733a899)
2022-04-03 09:00:41 +01:00
James White
d86d6d02b4 adguardhome: Update to v0.107.2 stable
Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit a02d4f646f)
2022-04-03 09:00:31 +01:00
Olivier Poitrey
9fa3942a8d nextdns: Update to version 1.37.11
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2022-04-02 20:59:22 +00:00
Rosen Penev
fbcaa8bce8 ksmbd-tools: revert update to 3.4.4
This reverts commit 362c8c4df3.

This does not work with the kmod in tree.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-04-01 12:17:28 -07:00
Moritz Warning
7157e9b4d6 zerotier: revert to 1.8.4
This reverts commit 89cea2a6e7.
Zerotier 1.8.6 is broken on ipq806x.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-03-30 19:39:07 -07:00
Tianling Shen
915018e39a rclone: Update to 1.58.0
Added missing call for rclone-config.

Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 546af5266b)
2022-03-27 21:44:33 +03:00
Daniel Golle
cd3dc69d6b
gnunet-fuse: update to 0.16.0
Only notable change since 0.14.0 is that pthread_mutexattr_setkind_np()
is now no longer used.
pthread_mutexattr_setkind_np() is deprecated and non-standard.
The standard version is called pthread_mutexattr_settype()

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commits
 05eac1796d gnunet-fuse: update to version 0.14.0
 d59731ba61 gnunet-fuse: update to 0.16.0
)
2022-03-26 21:31:54 +00:00
Daniel Golle
add708f030
gnunet: update to version 0.16.2
Sync GNUnet package with master branch.
This is a new major release. It breaks protocol compatibility with the
0.15.x versions. Please be aware that Git master is thus henceforth
(and has been for a while) INCOMPATIBLE with the 0.15.x GNUnet network,
and interactions between old and new peers will result in issues.
0.15.x peers will be able to communicate with Git master or 0.16.x
peers, but some services - in particular GNS - will not be compatible.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commits
 deafd6cf3f gnunet: update to v0.14.1
 746bb95552 gnunet: update to version 0.15.3
 23b5b516ae gnunet: fix compilation with big endian
 c3c6a2ff1d gnunet: several improvements
 23f722f905 gnunet: packaging fixes
 2f8e696189 gnunet: update to 0.16.1
 f951f61005 gnunet: improve init script
 033744ac59 gnunet: update to 0.16.2
 65f5f850f3 gnunet: work-around sysupgrade restore missing file ownerships
)
2022-03-26 21:31:49 +00:00
Andy Walsh
7deecb5d9f samba4: update to 4.14.12
* update to 4.14.12
* fixes: CVE-2021-44142, CVE-2022-0336

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry picked from commit 1fa70d6a3c)
2022-03-25 12:12:07 +01:00
Andy Walsh
71734db270 samba4: update to 4.14.11; fix AD_DC build
* update to 4.14.11
* fix AD_DC build
* add vfs_widelinks to defaults
* refresh patches
* fixes: #16697, #17692
* fixes: CVE-2016-2124, CVE-2020-25717, CVE-2020-25718, CVE-2020-25719, CVE-2020-25721, CVE-2020-25722, CVE-2021-3738, CVE-2021-23192

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry picked from commit 7730a65d30)
[Do not add dependency to python3-markdown and python3-dns]
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2022-03-25 12:11:03 +01:00
Daniel Golle
951ef67479
netatalk: update to version 3.1.13
Please update to this latest release as soon as possible as this
releases fixes the following major security issues: CVE-2021-31439,
CVE-2022-23121, CVE-2022-23122, CVE-2022-23123, CVE-2022-23124,
CVE-2022-23125 and CVE-2022-0194.

Local patch '010-gcc10.patch' has been applied upstream and was hence
removed.

For a summary of news and a detailed list of changes see the
ReleaseNotes[1].

[1]: https://netatalk.sourceforge.io/3.1/ReleaseNotes3.1.13.html
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-24 17:50:40 +00:00
Tianling Shen
c2aeec5ef1
xray-core: Update to 1.5.4
Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f8fa16f40d)
2022-03-21 23:34:07 +08:00
David Bauer
762794d143 usteer: add package
This commits adds the new usteer package to the packages feed.

usteer is a daemon for steering wireless clients across frequency
bands as well as between multiple access points on a network.

Signed-off-by: David Bauer <mail@david-bauer.net>
2022-03-21 01:30:58 +01:00
Moritz Warning
89cea2a6e7 zerotier: update to 1.8.6
* remove upstreamed gcc10 and cerrno patches
* disable SSO and OIDC as it needs Rust/Cargo support

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-03-21 00:25:10 +01:00
Moritz Warning
f7554858ec zerotier: update to 1.8.4
Also remove patch to fix uClibc-ng,
since it is not in openwrt anymore.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-03-21 00:25:10 +01:00
Moritz Warning
7673192a9c zerotier: update to 1.8.3
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-03-21 00:25:10 +01:00
Moritz Warning
56c4570589 zerotier: update to 1.8.2
Update und switch back to release source package.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-03-21 00:25:10 +01:00
Oskari Rauta
614b4e003a zerotier: update to 1.8.1
Release notes:

1.8.0
 - Upgrade json.hpp dependency to version 3.10.2
 - Check if DNS servers need to be applied on macOS
 - Set MAC address before bringing up Linux TAP link
 - Stop binding to temporary IPv6 addresses
 - Fix for mistakenly using v6 source addresses for v4 routes on some platforms
 - Fix for MacOS MTU capping issue on feth devices
 - Implement a workaround for one potential source of a "coma" bug, which can occur if buggy NATs/routers stop allowing the service to communicate on a given port. ZeroTier now reassigns a new secondary port if it's offline for a while unless a secondary port is manually specified in local.conf. Working around crummy buggy routers is an ongoing effort.
 - A completely rewritten desktop UI for Mac and Windows!

1.8.1
 - Fix an issue that could cause clobbering of MacOS IP route settings on restart.
 - Added additional hardening against address impersonation on networks (also in 1.6.6).
 - MacOS IPv6 no longer binds to temporary addresses as these can cause interruptions if they expire.
 - Remove support for REALLY ancient 1.1.6 or earlier network controllers.
 - Fix numerous UI issues from 1.8.0 (never fully released).

Changed to git as source and added $(AUTORELEASE)

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2022-03-21 00:25:10 +01:00
Chao Liu
52fcc9bf62 zerotier: add respawn procd param
Signed-off-by: Chao Liu <git@expiron.dev>
2022-03-21 00:25:10 +01:00
Moritz Warning
1e1d5f5d65 zerotier: add option to copy config
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-03-21 00:25:10 +01:00
Liangbin Lian
748d87c88e zerotier: fix cross compile in macOS
zerotier's Makefile use `uname` to detect target when cross compile
uname should always be 'linux'

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
2022-03-21 00:25:10 +01:00
Josef Schlehofer
ac99fde549
haproxy: update to version 2.2.22
Fixes:
CVE-2022-0711

Changelog:
https://git.haproxy.org/?p=haproxy-2.2.git;a=blob;f=CHANGELOG;h=bfc5d6495e39ace56581663ce820e6909039a286;hb=bfc5d6495e39ace56581663ce820e6909039a286

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-18 21:00:56 +01:00
Chris Osgood
f01cf663b6 curl: Fix compiling curl wolfSSL IPv6 disabled
Fixes #18082

Signed-off-by: Chris Osgood <chris_github@functionalfuture.com>
(cherry picked from commit 4eb08bacf3)
2022-03-18 17:54:32 +01:00
Noah Meyerhans
185c5e365e bind: bump to 9.18.1
Fixes multiple security issues:

 * CVE-2022-0667 -- An assertion could occur in resume_dslookup() if the
                    fetch had been shut down earlier
 * CVE-2022-0635 -- Lookups involving a DNAME could trigger an INSIST when
                    "synth-from-dnssec" was enabled
 * CVE-2022-0396 -- A synchronous call to closehandle_cb() caused
                    isc__nm_process_sock_buffer() to be called recursively,
                    which in turn left TCP connections hanging in the CLOSE_WAIT
                    state blocking indefinitely when out-of-order processing was
                    disabled.
 * CVE-2021-25220 -- The rules for acceptance of records into the cache
                     have been tightened to prevent the possibility of
                     poisoning if forwarders send records outside the
                     configured bailiwick

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 4c6ea5379c)
2022-03-18 08:25:18 -07:00
Stan Grishin
44e763c62e
Merge pull request #18010 from stangri/openwrt-21.02-curl
[21.02] curl: update to 7.82.0
2022-03-14 14:29:14 -07:00