Commit graph

9267 commits

Author SHA1 Message Date
John Audia
9e5e23737e iperf3: bump to 3.11
Update to latest upstream version

Signed-off-by: John Audia <graysky@archlinux.us>
2022-03-08 16:46:10 -08:00
Yousong Zhou
3623e50e1e shadowsocks-libev: remove now unused file firewall.ss-rules
It was leftover from the previous rewrite of ss-rules.  The built
package has no ref to it so no need to update PKG_RELEASE

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2022-03-08 15:23:55 +08:00
Stan Grishin
0b81af23a4
Merge pull request #18018 from rs/nextdns-1.37.10-master
nextdns: Update to version 1.37.10
2022-03-07 13:35:37 -08:00
Josef Schlehofer
6d15260c0a
Merge pull request #18001 from turris-cz/chrony-conflicts
chrony: add conflict between without NTS and NTS variant
2022-03-07 21:41:48 +01:00
Dirk Brenken
81d468489f
adblock: 4.1.3-6
* remove discontinued sources: shallalist, stalkerware
* fix a logical glitch in startup trigger handling

Signed-off-by: Dirk Brenken <dev@brenken.org>
2022-03-07 21:25:31 +01:00
Olivier Poitrey
0dc33a69de nextdns: Update to version 1.37.10
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2022-03-07 19:48:04 +00:00
Stan Grishin
ae9baa8d7e
Merge pull request #18004 from stangri/master-curl
curl: update to 7.82.0
2022-03-06 23:19:20 -08:00
Jeffery To
c05460c9ad seafile: Remove packages
I believe these packages should be removed (and imported into the
abandoned packages repo[1]) as Seafile Server and Seahub have been
marked as broken for some time, and I do not believe I will have time to
fix or update these packages in the foreseeable future.

[1]: https://github.com/openwrt/packages-abandoned/pull/22

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-06 19:37:45 -08:00
Stan Grishin
38b3a5f857 curl: update to 7.82.0
* changelog: https://curl.se/changes.html#7_82_0

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2022-03-07 02:57:42 +00:00
Yousong Zhou
d86ca89e49 shadowsocks-libev: add note on nftables set restriction
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2022-03-07 10:18:19 +08:00
Zhong Jianxin
2de9035bda shadowsocks-libev: add nft_tcp_extra/nft_udp_extra options
To add extra statement to tcp/udp forward rule, example:

```
config ss_rules 'ss_rules'
    ...
    option nft_tcp_extra 'tcp dport { 80, 443 }' # tcp only forward connections with dport 80 or 443
    option nft_udp_extra 'udp dport { 53 }' # udp only forward connections with dport 53
```

This somewhat restores the old ipt_args functionality.

Signed-off-by: Zhong Jianxin <azuwis@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(Amend README.md a bit)
2022-03-07 10:09:56 +08:00
Josef Schlehofer
487cc8fb26
haproxy: add conflict to packages with SSL or without SSL support
Both packages provide the same packages and should conflict to each
other.

Fixes:
```
Packages 'haproxy' and 'haproxy-nossl' do not conflict while providing same file: /usr/sbin/haproxy
Packages 'haproxy' and 'haproxy-nossl' do not conflict while providing same file: /etc/haproxy.cfg
Packages 'haproxy' and 'haproxy-nossl' do not conflict while providing same file: /etc/init.d/haproxy
```

They should not be installed side by side.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-06 13:06:44 +01:00
Josef Schlehofer
cedc95c862
haproxy: Makefile polishing
- There should be shorter TITLE in Package/haproxy/Default
otherwise it is not shown
- No need to call Build/Prepare/Default
- Remove twice TITLE in non-SSL variant
- Make conffiles more clear
- Remove empty menu for halog

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-06 13:06:39 +01:00
Josef Schlehofer
b898847395
chrony: add conflict between without NTS and NTS variant
Both packages provide the same files:
/usr/bin/chronyc
/usr/sbin/chronyd
/etc/chrony/chrony.conf
/etc/hotplug.d/iface/20-chrony
/etc/init.d/chronyd

They should not be installed side by side.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-06 12:28:21 +01:00
Josef Schlehofer
a504fd9dfa
snort: add conflict with snort3
Both packages provides the same files:
- /usr/bin/u2boat
- /usr/bin/u2spewfoo
- /usr/bin/snort
- /etc/init.d/snort
- /etc/config/snort

So they should be in conflict.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-04 16:28:58 +01:00
Maarten Aertsen
baa97e7fdf mdnsresponder: Fix nullpointer dereference while parsing interface list
This patch was backported from https://github.com/IETF-Hackathon/mDNSResponder/commit/1fb07b9524b4afed3a826c087db4dc48a7bfdb8

Signed-off-by: Maarten Aertsen <maarten@rtsn.nl>
2022-03-04 06:28:53 -08:00
Stijn Tintel
bc09311c38 strongswan: add missing dependencies
Fix the following build failures by adding the missing dependencies:

Package strongswan-mod-connmark is missing dependencies for the following libraries:
libip4tc.so.2

Package strongswan-mod-forecast is missing dependencies for the following libraries:
libip4tc.so.2

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2022-03-04 06:28:08 -08:00
Rosen Penev
160deb4465 tcpproxy: fix Wformat warning
snprintf call requires one more byte for NULL termunator.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-03-03 14:21:24 -08:00
Tianling Shen
39a804e99b
dnsproxy: Update to 0.41.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-03-03 21:51:43 +08:00
Christian Lachner
ff56783b1c haproxy: Update HAProxy to v2.4.14
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2022-03-02 16:35:24 -08:00
Etienne Champetier
68fb9c62a5 sqm-scripts: switch back to iptables
Following recent dependency rework, we can switch
between iptables-legacy and iptables-nft, and they both
PROVIDES iptables. Make it easier for user that want/need to
stick to firewall3/iptables-legacy to do so.

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2022-03-02 17:26:23 -05:00
Yousong Zhou
c99cfc3ea3 shadowsocks-libev: update README.md
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2022-03-01 02:19:35 +00:00
Yousong Zhou
fdaf2de2ae shadowsocks-libev: convert to using nft
It will be mostly implemented with ucode templates installed at
/usr/share/ss-rules and called from init script.  The generated nftables
rules will be stored at /etc/nftables.d/

Incompatible changes were introduced as described in the README.md file

 - Netfilter ipset was replaced with nftables sets
 - UCI options ipt_args and dst_forward_recentrst of section ss_rules
   are now deprecated.  The former does not apply to nftables.  The
   later not yet implemented with nftables.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2022-03-01 10:06:48 +08:00
Yousong Zhou
e60310eb2e shadowsocks-libev: ss-rules: request presence of nat table
ss-rules with iptables needs presence of netfilter nat table to work.
ss-rules works before without explicitly requesting it as a dependency
because it's present by default on a pre-firewall4/nftables OpenWrt
install.  We request it explicitly now to make life easier in case
people would like to try ss-rules/iptables on firewall4/nftables enabled
OpenWrt system

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2022-03-01 10:06:48 +08:00
Chao Liu
b7171d5382 kcptun: bump to v20210922
Signed-off-by: Chao Liu <git@expiron.dev>
2022-02-28 14:09:34 -08:00
Tianling Shen
ca4324aee0 gg: Update to 0.2.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-02-28 11:43:53 -08:00
Rosen Penev
ece80b55eb samba: add ppc64 support
Needed for QoriQ target

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-02-28 05:33:05 -08:00
Rosen Penev
97cbb3d20a samplicator: fix Wformat warning
Wrong type.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-02-28 11:24:56 +01:00
Nikos Mavrogiannopoulos
465ddb4dd1 ocserv: updated to 1.1.6
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-25 23:33:45 +01:00
Nikos Mavrogiannopoulos
54360ea2f1 openconnect: updated to 8.20
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-25 23:30:17 +01:00
Matthew Hagan
98a551a208 geoipupdate: update to 4.9.0
Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
2022-02-23 23:57:59 -08:00
Van Waholtz
df88c57811 frp: update to 0.39.0
Signed-off-by: Van Waholtz <vanwaholtz@gmail.com>
2022-02-23 22:31:45 -08:00
Van Waholtz
5c93d6475b frp: add service_trigger
Signed-off-by: Van Waholtz <vanwaholtz@gmail.com>
2022-02-23 22:31:45 -08:00
Van Waholtz
30d8431b71 frpc: add anonymous proxy config support
Signed-off-by: Van Waholtz <vanwaholtz@gmail.com>
2022-02-23 22:31:45 -08:00
Alexandru Ardelean
a9170cf860 tcpreplay: bump to version 4.4.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-02-23 17:24:04 -08:00
Oleg Derevenetz
933b60b5b1 bwping: update to version 2.5
Signed-off-by: Oleg Derevenetz <oleg-derevenetz@yandex.ru>
2022-02-23 17:15:22 -08:00
Sergey V. Lobanov
6f1e8ab67c shorewall-core: fix build on macos
shorewall-core macos build fails due to:
1. MacOS bash is too old (3.x), but shorewall-core requires bash>4
This patch uses OpenWrt tools/bash built for macos (bash 5.x)

2. install.sh detects Darwin using uname and changes install logic,
but it fails in case of cross-platform build
This patch uses fakeuname/host tool to avoid Darwin detection

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-02-23 17:13:16 -08:00
Sergey V. Lobanov
d865f898b6 shorewall: fix build on macos
shorewall macos build fails due to:
1. MacOS bash is too old (3.x), but shorewall requires bash>4
This patch uses OpenWrt tools/bash built for macos (bash 5.x)

2. install.sh detects Darwin using uname and changes install logic,
but it fails in case of cross-platform build
This patch uses fakeuname/host tool to avoid Darwin detection

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-02-23 17:13:04 -08:00
Sergey V. Lobanov
166f82f3c2 shorewall6-lite: fix build on macos
shorewall6-lite macos build fails due to:
1. MacOS bash is too old (3.x), but shorewall6-lite requires bash>4
This patch uses OpenWrt tools/bash built for macos (bash 5.x)

2. install.sh detects Darwin using uname and changes install logic,
but it fails in case of cross-platform build
This patch uses fakeuname/host tool to avoid Darwin detection

3. fakeuname does not work in install.sh because install.sh
redefines PATH.
This patch removes PATH=... from install.sh on macos

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-02-23 17:12:50 -08:00
Sergey V. Lobanov
dca9828479 shorewall6: fix build on macos
shorewall6 macos build fails due to:
1. MacOS bash is too old (3.x), but shorewall6 requires bash>4
This patch uses OpenWrt tools/bash built for macos (bash 5.x)

2. install.sh detects Darwin using uname and changes install logic,
but it fails in case of cross-platform build
This patch uses fakeuname/host tool to avoid Darwin detection

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-02-23 17:12:40 -08:00
Sergey V. Lobanov
5da4196dc5 shorewall-lite: fix build on macos
shorewall-lite macos build fails due to:

1. MacOS bash is too old (3.x), but shorewall-lite requires bash>4
This patch uses OpenWrt tools/bash built for macos (bash 5.x)

2. install.sh detects Darwin using uname and changes install logic,
but it fails in case of cross-platform build
This patch uses fakeuname/host tool to avoid Darwin detection

3. fakeuname does not work in install.sh because install.sh
redefines PATH.
This patch removes PATH=... from install.sh on macos

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-02-23 17:12:28 -08:00
R4SAS I2P
c08bb2df62 i2pd: Update package
* Update to 2.41.0
* Added use AUTORELEASE

Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
2022-02-23 17:11:44 -08:00
Jo-Philipp Wich
e871318002 htpdate: drop www.freebsd.org from default server list
The FreeBSD project stopped publishing HTTP date headers and seeks to
limit further resource taxing by distributed htpdate clients using the
www.freebsd.org host as default time source.

Fixes: #17924
Reported-by: Allan Jude <allanjude@freebsd.org>
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-02-22 23:28:55 +01:00
George Iv
3c651c6c95 yggdrasil: bump to 0.4.3
Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
2022-02-21 11:24:32 -08:00
Daniel Golle
23f722f905
gnunet: packaging fixes
* include gnunet-service-zonemaster-monitor in gnunet-gns package
 * rename namestore-heap back to namestore-flat

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-02-20 16:36:23 +00:00
David Bauer
a6f2d72288 usteer: update to latest git head
98247d1 usteer: track RRM and BSS-TM support per connection
6ec60fc ubus: add BSS-transition-management support
f462de0 local-node: fetch bss-transition-management support
c5242dd ubus: add supported beacon-measurement modes
0dd47b1 local-node: convert kick-dely to absolute time
96976ba readme: add initial README

Signed-off-by: David Bauer <mail@david-bauer.net>
2022-02-19 22:36:51 +01:00
Christian Lachner
c48a375d9e haproxy: Update HAProxy to v2.4.13
- Update haproxy download URL and hash
- Updated upstream patches

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2022-02-17 19:29:30 -08:00
Lucian Cristian
58aa97cb8f uacme: proper ualpn integration
ualpn works only with openssl and gnutls, so default build will not have this included

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-02-17 19:29:24 -08:00
Tianling Shen
125da0f2f4 dnsproxy: Update to 0.41.2
Fixed typo error: `AUTORELESE` -> `AUTORELEASE`.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-02-17 19:28:01 -08:00
Lucian Cristian
ce5755cc0b uacme: pack ualpn.sh
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-02-16 22:16:46 -08:00
Lucian Cristian
7f5dc09e5d frr: branch update, mips64 fix
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-02-16 22:15:41 -08:00
Josef Schlehofer
cb3eb63f77
Merge pull request #17850 from BKPepe/unbound
unbound: update to version 1.15.0
2022-02-16 09:15:45 +01:00
Luiz Angelo Daros de Luca
4e0d54f4d2 openvpn-easy-rsa: make it reproducible
The "build" script was replacing a ~DATE~ with current date.
Now it uses $(SOURCE_DATE_EPOCH).

Fixes #17848

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2022-02-15 16:41:50 -08:00
Rosen Penev
3ffd540b04 ksmbd-tools: update to 3.4.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-02-14 19:50:14 -08:00
Jeffery To
b3869e1e46 obfs4proxy: Update to 0.0.13
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-02-14 17:16:54 -08:00
Etienne Champetier
66b7c19992 phantap: switch to nftables
e80be64 Remove disable_eap_hack
b066ce2 Switch to nftables / firewall4
4d88b0b Do not harcode build flags

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2022-02-12 23:20:54 -05:00
Sergey V. Lobanov
ac62437099 ipvsadm: fix build on macos
ipvsadm build fails on macos due to libipvs Makefiles uses system
`ar` that is not compatible with the objectes generated by OpenWrt
GCC Toolchain.

This commit adds patch to allow ar redefining
This commit modifes an old patch (removing CC=gcc is not required
due to it is redefinable)

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-02-12 15:18:06 -08:00
Nicholas Smith
8a878440bf modemmanager: bump to 1.18.4 with patch
The included patch corrects an issue preventing udev rules from
being parsed correctly. [1][2]

This patch should not be needed after the next release. [3]

More information:
[1] e9f254ba3f
[2] https://lists.freedesktop.org/archives/modemmanager-devel/2021-December/009024.html
[3] https://lists.freedesktop.org/archives/modemmanager-devel/2021-December/009022.html

Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
2022-02-11 11:58:42 -08:00
Josef Schlehofer
2abe98e134
unbound: update to version 1.15.0
Refresh patch

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-02-11 17:11:44 +01:00
Rucke Teg
f2a8fc48c5 openssh-server: manually set path to passwd binary
In the build environment the autotools finds the `passwd` binary in
/usr/bin. But in the target image it is available under /bin instead.
Manually set the path to `passwd` binary to `/bin/passwd`

Signed-off-by: Rucke Teg <rucketeg@protonmail.com>
2022-02-10 21:10:08 -08:00
Rucke Teg
fb113c5a70 openssh-server: change sshd.failsafe
There is no need to remove root password from /etc/shadow as the
password in the file is blank anyway in the failsafe mode.

Signed-off-by: Rucke Teg <rucketeg@protonmail.com>
2022-02-10 21:10:08 -08:00
Tiago Gaspar
5482b98940 jool: update default config
Update the default configuration files to match the upstream example
ones.


Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
2022-02-10 19:32:38 -08:00
Tianling Shen
b8b1305e74 dnsproxy: Update to 0.41.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-02-10 15:58:04 -08:00
Chip Lee
68704969ce mbusd: Repair UCI config file about parity
in mbusd, parity must be N, E or O, can't be y.

Signed-off-by: Chip Lee <chplee@gmail.com>
2022-02-10 15:02:06 -08:00
Dirk Brenken
067d133601
Merge pull request #17829 from neheb/6
banip: make reproducible
2022-02-10 16:34:24 +01:00
Dirk Brenken
721a310897
Merge pull request #17828 from neheb/5
adblock: make reproducible
2022-02-10 16:33:49 +01:00
Jan Hák
4de863e418 knot: update to 3.1.6
Signed-off-by: Jan Hák <jan.hak@nic.cz>
2022-02-09 16:04:51 -08:00
Stijn Tintel
289a751530
Merge pull request #17827 from skingry/snmpd_init_order
net-snmp: move start order from 50 to 99
2022-02-09 19:28:59 +02:00
David Bauer
bcf4e90f0c usteer: update to latest git head
6aebb75 local-node: check correct field
f42bf29 gitignore: add .orig files
3c0cd98 local-node: save latest bss-transition-response
1dc69d7 ubus: add get_connected_clients
04ef308 local-node: save beacon-reports
b0dab90 measurement: add handling of measurements
76ccae6 node: add methods to access nodes by bssid
3b51bfb local-node: obtain channel + op-class
c7830b5 policy: add min_snr_kick_delay
e36967f local-node: handle BSS transition queries
022635c policy: don't track roam_scan_done
742236f policy: fix incurrect handling of scan-requests with disabled timeout
9a78412 policy: add roam-scan timeout
7e999e0 policy: don't select better candidate with bad signal
3c1dd51 policy: export snr_to_signal to other source files
1c5a738 ubus: only request beacon-report for current SSID
5610ace config: make remote_node_timeout configurable
918b809 policy: only select candidates with better load
55e98d8 sta: uniform disconnect state handling
806e647 sta: remove duplicate code
2ccb99e policy: remove redundant candidate evaluation
bbf133f policy: fix not selecting better candidate on request

Signed-off-by: David Bauer <mail@david-bauer.net>
2022-02-09 11:43:26 +01:00
Alexandru Ardelean
3ebd7e7e5f tcpreplay: bump to version 4.4.0
Also need to use musl-fts when building with musl now.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-02-08 14:18:51 -08:00
Rosen Penev
59dcbb741a banip: make reproducible
Timestamp needs to be removed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-02-07 22:02:26 -08:00
Rosen Penev
5d095a1366 adblock: make reproducible
Need to get rid of the timestamp.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-02-07 22:00:12 -08:00
Seth Kingry
7b1bfb181a
net-snmp: move start order from 50 to 99
Signed-off-by: Seth Kingry <sjkingry@gmail.com>
2022-02-08 00:36:36 -05:00
Noah Meyerhans
6a0a55a5ed bind: support compile-time exclusion of DNS-over-HTTPS support
DoH is enabled by default, but disabling it removes the need to link
against libnghttp2, which may be desirable more constrained
environments.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2022-02-07 21:31:54 -08:00
R4SAS I2P
b9000cf231 i2pd: add service reload support
Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
2022-02-07 21:29:08 -08:00
Tianling Shen
71de776796 gg: Update to 0.2.2
Updated PKG_LICENSE_FILES according to upstream change.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-02-07 09:42:41 -08:00
Florian Eckert
493bf98d69
Merge pull request #17785 from TDT-AG/pr/20220204-stunnel
stunnel: update version to 5.62
2022-02-07 09:12:40 +01:00
Florian Eckert
9dbcfadf88
Merge pull request #17784 from TDT-AG/pr/20220204-keepalived
keepalived: update version to 2.2.7
2022-02-07 09:12:28 +01:00
Stan Grishin
88265c4fb9 https-dns-proxy: init script refactoring
* consolidate dnsmasq config manipulation into one function
* more elegant code for PROCD data processing (Thanks @jow-!)

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2022-02-06 06:00:03 +00:00
Tianling Shen
c7b5e7ed67 v2rayA: Update to 1.5.6.2
Manually added new env variable `XDG_DATA_HOME` which won't be passed
by procd by default.

Removed upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-02-04 08:28:41 -08:00
Tianling Shen
8465053a58 v2raya: init: convert arguments into env variables
Suggested by upstream, to provide forward compatibility.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-02-04 08:28:41 -08:00
Tianling Shen
d8d261fe2d xray-core: Update to 1.5.3
Removed outdated `alterId` in sample config.

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-02-04 08:28:20 -08:00
Florian Eckert
d7b73fb195 stunnel: update version to 5.62
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-02-04 08:16:33 +01:00
Florian Eckert
792d745a59 keepalived: update version to 2.2.7
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-02-04 08:14:42 +01:00
Hannu Nyman
f21774629c
Merge pull request #17671 from tohojo/sqm-nft
sqm-scripts: Change iptables dependency to iptables-nft
2022-02-03 20:00:09 +02:00
Florian Eckert
cb4719789c
Merge pull request #17748 from neheb/8
xinetd: fix bad printf formats
2022-02-03 09:16:28 +01:00
Stan Grishin
b59938c86e
Merge pull request #17762 from stangri/master-https-dns-proxy
https-dns-proxy: update to 2021-11-22-1
2022-02-02 09:12:20 -08:00
James White
435733a899 adguardhome: Bump adguardhome to v0.107.3 stable
Signed-off-by: James White <james@jmwhite.co.uk>
2022-02-02 07:25:37 -08:00
Josef Schlehofer
6c6c99ffb5 apache2: security update to version 2.4.52
Fixes CVEs:
- CVE-2021-44790
- CVE-2021-44224

Refreshed patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-02-02 07:24:59 -08:00
Philip Prindeville
2b00697f08 strongswan: Update to 5.9.5
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-02-01 23:24:46 -08:00
Toke Høiland-Jørgensen
698af2eb99 sqm-scripts: Change iptables dependency to iptables-nft
There's only one of the shaper scripts (simple.qos) that uses iptables, and
it should be fine with iptables-nft for compatibility with the new default
nft-based firewall. Confusingly, we still need the iptables-mod-ipopt
package to get the DSCP match module; we never used CONNMARK, though, so
drop the iptables-mod-conntrack-extra dependency while we're at it.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2022-02-01 23:30:17 +01:00
Nick Hainke
40b87aac95 wg-installer: use babeld add_interface function
With commit 385200443554 ("babeld: add add_interface function") babeld
has a new ubus function allowing to dynamically add an interface.

Before the add_interface function, we were required to reload babeld.
The reload influenced the babeld routing. However, the remove part is
still missing and will be added at a later stage.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-02-01 22:32:30 +01:00
Noah Meyerhans
127ef1207b bind: bump to 9.18.0
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2022-02-01 09:09:17 -08:00
Andy Walsh
1fa70d6a3c samba4: update to 4.14.12
* update to 4.14.12
* fixes: CVE-2021-44142, CVE-2022-0336

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2022-02-01 07:20:56 -05:00
Sergey V. Lobanov
0528707fd7 chaosvpn: fix build on macos
chaosvpn Makefile detects Darwin (macos) and changes compilation
flags for macos target, but OpenWrt is always Linux so build fails.
This patch redefines OS=Linux to use Linux compilation flags.

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-31 18:37:30 -08:00
Stan Grishin
1e5e7ce469 https-dns-proxy: update to 2021-11-22-1
* update to 2021-11-22 upstream source
* update patch file
* update init script to preserve manual entries
	(fixes https://github.com/stangri/source.openwrt.melmac.net/issues/149)
* update init script service_triggers

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2022-01-31 22:15:04 +00:00
Sergey V. Lobanov
43372343ee nut: fix build on macos
nut build fails on macos due to:
1. configure script can not use AR env var due to OpenWrt build
system provides only executable name (e.g. aarch64-openwrt-linux-musl-gcc-ar)
but configure script checks if AR has '/'. As a result, configure
script ignores AR env var and uses system `ar` but macos `ar` is
not compatible with the objects generated by OpenWrt GCC toolchain.

This commit explicitly sets ac_cv_path_AR=$(TARGET_AR) to use
OpenWrt toolchain AR.

2. configure script detects if build host is macos and adds
macosx_ups driver as a build target, but this driver can not be
build with OpenWrt toolchain because OpenWrt is Linux.

This commit explicitly disables macosx_ups driver using configure
flag --without-macosx_ups

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-31 13:57:36 -08:00
Sergey V. Lobanov
f01baee526 softethervpn: fix build on macos
host-compile fails on macos due to several reasons:
1. host-compile Makefile always selected for linux
2. macos host cc (clang) fails due to implicit-function-declaration
3. ar and ranlib tools are hardcoded in softethervpn Makefiles

All three issues are fixed by this patch

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-31 13:57:22 -08:00
Rosen Penev
e87e3406ee bridge-utils: update to 1.7.1
Added missing limits header for PATH_MAX.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-01-31 07:08:39 -08:00
Rosen Penev
31a8112c51 linuxptp: fix bad formats with ppc64 and mips64
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-01-31 07:04:17 -08:00