Commit graph

27229 commits

Author SHA1 Message Date
John Audia
90f35f2625
rsync: bump to 3.2.5
With the new OW release approaching, it might be better to get an officially
tagged upstream release in as PR#19087 just contained a fix for CVE-2022-29154
which itself introduced a few bugs.

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit eeaacc9052)
2022-08-15 13:50:39 +02:00
Michal Vasilek
94821d9c07
opendoas: add package
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit ad7d2e5270)
2022-08-14 07:49:50 +02:00
Liangbin Lian
b621a75f36
rclone: fix init script on CIDR format ipaddr
Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit 7af716f12d)
2022-08-13 11:34:55 +02:00
John Audia
dd45bb89cf
rsync: bump to 3.2.4
Bump to latest upstream release.

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit 4876401174)
2022-08-13 11:31:56 +02:00
John Audia
8c85981f83
rsync: fix CVE-2022-29154
The rsync package is vulnerable to CVE-2022-29154[1], which is not yet in a
non-preview release. This commit applies the upstream commit to fix it and
several subsequent commits needed to fix bugs the initial fix introduced[2].

1. https://rsync.samba.org/ftp/rsync/NEWS#SECURITY_FIXES-3.2.5
2. https://bugs.archlinux.org/task/75558

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 2611b86547)
2022-08-13 11:31:33 +02:00
Josef Schlehofer
63d46221bb
python-websockets: update to version 10.3
- Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ce1679a07f)
2022-08-13 07:56:58 +02:00
Pascal Ernster
eaefde9a4a
unbound: update to 1.16.2, fix CVE-2022-30698, CVE-2022-30699
Maintainer: @EricLuehrsen
Compile tested: x86/64
Run tested: x86/64
Description: Update to 1.16.2, fix CVE-2022-30698 and CVE-2022-30699.

Signed-off-by: Pascal Ernster <git@hardfalcon.net>
(cherry picked from commit 2179432991)
2022-08-12 06:10:34 +02:00
Pascal Ernster
2e878763df
unbound: update to 1.16.1
Maintainer: @EricLuehrsen
Compile tested: realtek/rtl838x, x86/64
Run tested: realtek/rtl838x, x86/64
Description: Update to 1.16.1

Signed-off-by: Pascal Ernster <git@hardfalcon.net>
(cherry picked from commit e702a66058)
2022-08-12 06:10:28 +02:00
John Thomson
c5ac15a869
antfs: require kernel version 5.10 to build
ANTFS does not compile with OpenWrt's current testing kernel 5.15,
as it needs to be modified for the Linux 5.12 idmapped mounts changes
2f221d6f7b88 ("attr: handle idmapped mounts")
https://lore.kernel.org/all/20210121131959.646623-1-christian.brauner@ubuntu.com/

Signed-off-by: John Thomson <git@johnthomson.fastmail.com.au>
(cherry picked from commit f043d0a7d8)
2022-08-11 22:13:50 +02:00
Rosen Penev
80a3d7738e
ptunnel-ng: fix compilation with kernel 5.15
Some header change requires to include musl's headers first.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 468863128f)
2022-08-11 22:12:34 +02:00
Rosen Penev
60eff3656c
pingcheck: update to 2022-03-01
Fixes compilation with kernel 5.15.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3bd4564d71)
2022-08-11 22:09:13 +02:00
Rosen Penev
a11f3757fd
libpfring: update to 8.0.0
Fixes compilation with kernel 5.15

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f8f2146b1b)
2022-08-11 22:08:42 +02:00
Yousong Zhou
6df708763e shadowsocks-libev: ss-rules: nft rule cleanup on reload
Remove nft rules file generated by ss-rules if ss-rules was or should be
turned off for by configuration.  Use "fw4 restart" instead of "fw4
reload" to force the runtime rule reloading

Ref: https://github.com/openwrt/packages/pull/17937#issuecomment-1207357037
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 04ee032699)
2022-08-11 10:45:12 +08:00
Yousong Zhou
53952a136a shadowsocks-libev: ss-rules: setup policy rules for udp/ip6
Supersedes: https://github.com/openwrt/packages/pull/18852
Fixes: https://github.com/openwrt/packages/issues/18850
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit a67ad632b6721434a26cacb56b21323c0e7b8f69)
2022-08-11 09:59:26 +08:00
Jo-Philipp Wich
6bede41577 cgi-io: update to latest Git HEAD
901b0f0 main: fix two one-byte overreads in header_value()

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 443c6c1c17)
2022-08-10 23:54:32 +02:00
Michael Heimpold
2726fbb00f
Merge pull request #19137 from mhei/22.03-php8-update-8.1.9
[22.03] php8: update to 8.1.9
2022-08-10 20:20:20 +02:00
Michal Kowalski
81601471e0 watchcat: fix broken ping invocation for no-address-family configuration
Fix for issue #19010

Signed-off-by: John Kohl <jtk.git@bostonpog.org>
Signed-off-by: Michal Kowalski <18610805+kofec@users.noreply.github.com>
(cherry picked from commit 406adc5363)
2022-08-10 08:04:23 +02:00
Tianling Shen
5343d6a093 yq: Update to 4.27.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 82a45b28b7)
2022-08-09 21:38:56 +03:00
Michael Heimpold
a4933fc0a2 php8: update to 8.1.9
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 55e06d66fa)
2022-08-08 15:35:50 +02:00
Alexandru Ardelean
01d88e6d63
Merge pull request #19117 from commodo/squashfs-tools-zstd-22.03
[22.03] squashfs-tools: enable zstd compression by default
2022-08-08 11:36:43 +03:00
Jan Hoffmann
0fd2eb51af
python-paho-mqtt: add missing dependency
The uuid module has been split out into a separate package with the
update to Python 3.10.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>
(cherry picked from commit 52ae0a2018)
2022-08-07 00:23:03 +02:00
Josef Schlehofer
d31488cf3a
Merge pull request #19120 from autobakterie/libgpg-error_1-45_22-03
libgpg-error: update to 1.45
2022-08-06 20:03:58 +02:00
Martin Moreno
cd36b6eb8b
sslh: update to v1.22c
Change notes:
	Updated Makefile package version and hash.
	Added libpcre2 dependency
	Removed USELIBPCRE make flag (no longer optional within sslh)
	Updated patch 001 to work with new sslh Makefile

Signed-off-by: Martin Moreno <fett3270@yahoo.com>
(cherry picked from commit 9b90bb37ee)
2022-08-06 19:45:41 +02:00
Šimon Bořek
1eb7076056
luajit: patch: PPC/e500 SPE: use soft float instead of failing
makes LuaJit builds for mpc85xx targets with SPE ISA extension
enabled possible

Quoting inner commit message:

This allows building LuaJit for systems with Power ISA SPE
extension[^1] support by using soft float on LuaJit side.

While e500 CPU cores support SPE instruction set extension
allowing them to perform floating point arithmetic natively,
this isn't required. They can function with software floating
point to integer arithmetic translation as well,
just like FPU-less PowerPC CPUs without SPE support.

Therefore I see no need to prevent them from running LuaJit
explicitly.

[^1]: https://www.nxp.com/docs/en/reference-manual/SPEPEM.pdf

Signed-off-by: Pali Rohár <pali@kernel.org>
Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
(cherry picked from commit a4a484fbca)
2022-08-06 19:42:44 +02:00
W. Michael Petullo
b169fd0262
libgpg-error: update to 1.45
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit c4842bdd20)
2022-08-06 15:48:15 +02:00
Alexandru Ardelean
8694f7f953 squashfs-tools: enable zstd compression by default
Requested via:
  https://github.com/openwrt/packages/issues/19111

PKG_RELEASE is set to AUTORELEASE, so no need to bump.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit f0d45ba340)
2022-08-05 14:32:45 +03:00
Daniel Golle
5c987e57d2
cryptsetup: fix library paths by calling autoreconf
Use PKG_FIXUP:=autoreconf when building cryptsetup to prevent
accidental linkage against host libraries.

Fixes: #19011
Reported-by: @dreirund
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit ad0ac5198d)
2022-08-04 13:48:21 +02:00
John Audia
79d1abd4c3
ffmpeg: update to 5.1
Bump to latest upstream version, manually rebased: 050-glibc.patch

Tested using:
ffmpeg -f lavfi -i testsrc=duration=10:size=1280x720:rate=30 testsrc.mpg

Resulting mpg was good.

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 5436f78d31)
2022-08-04 13:47:48 +02:00
Boris Krasnovskiy
cec18eb0d0
chrony: Avoid building unused gnutls and ca dependencies
Avoid building unused gnutls and ca dependencies

Signed-off-by: Boris Krasnovskiy <borkra@gmail.com>
(cherry picked from commit 089eabedf9)
2022-08-04 13:47:36 +02:00
Boris Krasnovskiy
7727beb713
gensio: Avoid building unused python and libstdcpp dependecies
Avoid building unused python and libstdcpp dependecies

Signed-off-by: Boris Krasnovskiy <borkra@gmail.com>
(cherry picked from commit 0c245fda70)
2022-08-04 13:47:31 +02:00
Boris Krasnovskiy
51ccd07614
gnutls: Avoid building unused gnutls dependency
Avoid building unused gnutls dependency

Signed-off-by: Boris Krasnovskiy <borkra@gmail.com>
(cherry picked from commit 32f4d46f51)
2022-08-04 13:47:27 +02:00
Michal Vasilek
bf519e9bc4
fail2ban: fix patch for python 3.10
89d5d2e091 only patched importing
MutableMapping from collections, but importing Mapping has to be patched
too

Closes: #18681
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 4bd2169e73)
2022-08-04 13:47:03 +02:00
Alexandru Ardelean
3c5270c9d9 django: bump to version 4.0.6
Fixes https://nvd.nist.gov/vuln/detail/CVE-2022-34265

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit b0ddec3161)
2022-08-03 20:33:42 +02:00
ZiMing Mo
8fdc92b86d rclone: update to 1.59.0
Release note: https://rclone.org/changelog/#v1-59-0-2022-07-09

Signed-off-by: ZiMing Mo <msylgj@immortalwrt.org>
(cherry picked from commit 05df1fe4f1)
2022-08-03 20:33:21 +02:00
Hannu Nyman
77afaaa479 nano: update to 6.4
Update nano editor to version 6.4.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 0aed202180)
2022-08-02 21:02:38 +03:00
Stan Grishin
72abf7e9f4
Merge pull request #19058 from stangri/openwrt-22.03-curl
[22.03] curl: switch default SSL to mbedTLS
2022-07-26 23:20:01 -06:00
Rosen Penev
d385ac5045 curl: switch default SSL to mbedTLS
The decision to switch the default to wolfSSL was taken because of
hostapd back from when curl was in base. Unfortunately, not only is
wolfSSL bigger but it has also been causing issues recently. There's
also no relation between hostapd and curl.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0a65e4c6fa)
2022-07-26 17:44:34 +00:00
Stan Grishin
a3f1e1265c
Merge pull request #18917 from stangri/openwrt-22.03-nebula
[22.03] nebula: update to 1.6.0
2022-07-26 10:59:46 -06:00
Jonathan Pagel
910a8a0759 telegraf: Update to version 1.23.3
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 281d156a35)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-07-25 18:38:03 -07:00
Jan Hák
ce619701b2
knot: update to 3.1.8
- Release notes:
https://www.knot-dns.cz/2022-04-28-version-318.html

- Refreshed patch to avoid offset

Signed-off-by: Jan Hák <jan.hak@nic.cz>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[added commit message, refresh patch]
(cherry picked from commit db12181940)
2022-07-25 16:49:15 +02:00
Gerard Ryan
93d53a56dc dockerd: Update to v20.10.17
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-07-24 17:35:39 -07:00
Gerard Ryan
17758cf81c docker: Update to v20.10.17
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-07-24 17:35:39 -07:00
Gerard Ryan
90bbda1b5c libnetwork: Update to f6ccccb for Docker v20.10.17
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-07-24 17:35:39 -07:00
Gerard Ryan
0f2e46afe0 containerd: Update to v1.6.6 for Docker v20.10.17
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-07-24 17:35:39 -07:00
Gerard Ryan
f238e8f7c3 runc: Update to v1.1.2 for Docker v20.10.17
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-07-24 17:35:39 -07:00
Nick Hainke
c85111226e dawn: update to 2022-07-24
edca4d2 network: rework network status callbacks

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 28ca76d29b)
2022-07-24 13:12:04 +02:00
Nick Hainke
944a896e53 dawn: update to 2022-07-22
10fb043 network: dump detail on ping pong received

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 1f60c23296)
2022-07-22 21:54:58 +02:00
David Bauer
0902a5fc0f usteer: update to latest HEAD
9059b9a ubus: derive RSSI from measurement report

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 7967abfae0)
2022-07-21 19:40:51 +02:00
Stijn Tintel
71db92ef62 usteer: bump to git HEAD
5be6819 policy: allow disabling load balancing
  80b0b65 main: disable load balancing by default
  fca4b87 policy: improve readability
  73c424b usteer: add option for probe steering
  87de1ab main: disable probe steering by default

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit d0878c8504)
2022-07-21 19:40:51 +02:00
Nick Hainke
c90aaa1ec7 dawn: update to 2022-07-21
bb362db datastorage: fix ap_array_unlink_entry always returns NULL
47e98ef network: ping pong keepalive for tcp connections
eba0354 network: add timeout for client connections

In the dawn config the con_timeout needs to be added:
  option con_timeout '60'

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 204fd77bbc)
2022-07-21 18:45:27 +02:00