Commit graph

27303 commits

Author SHA1 Message Date
Peter van Dijk
eed717e6e0
pdns-recursor: update to 4.7.3
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit 8e234be1e7)
2022-09-26 13:30:01 +02:00
Karl Palsson
8df44cb6ef libs/cjson: bump to 1.7.15
This is a bugfix release.
Full release notes available at: https://github.com/DaveGamble/cJSON/releases/tag/v1.7.15

Signed-off-by: Karl Palsson <karlp@etactica.com>
2022-09-26 09:39:15 +00:00
Karl Palsson
44f898f98b pagekite: add patchs for 64bit time
Source: https://github.com/pagekite/libpagekite/pull/78

Signed-off-by: Karl Palsson <karlp@etactica.com>
2022-09-26 09:39:15 +00:00
Karl Palsson
d5aa9d76ea mosquitto: bump to 2.0.15
Changelog: https://mosquitto.org/blog/2022/08/version-2-0-15-released/
Changelog: https://mosquitto.org/blog/2021/11/version-2-0-14-released/

2.0.15 is bigger security and bugfix release.  2.0.14 had a couple of
  minor changes and was skipped for OpenWrt.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2022-09-26 09:39:15 +00:00
Ptilopsis Leucotis
4419a76baf mosquitto: add missing 'persistence' section in config
Section 'Persistence' in 'luci-app-mosquitto' is unusable without 'persistence'
section in config file.

Signed-off-by: Ptilopsis Leucotis <PtilopsisLeucotis@yandex.com>
2022-09-26 09:39:15 +00:00
David Bauer
376f1afddd poemgr: update to latest HEAD
8988247 Makefile: Enable warnings as errors (-Werror)
aea39ca Makefile: Respect the CFLAGS and LDFLAGS that have been passed in
189594f poemgr: Fix compiler warnings in poemgr.c
0e1a8cf pd69104: Avoid self-induced pointer casts
2d53298 uswflex: Remove unused variables and declarations
d345441 poemgr: Reorganize poemgr.h to remove forward declarations
df1a7bc contrib: remove unneccessary functions.sh loading
056a6a9 poemgr: Fix name based profile selection
b8f8f23 poemgr: prolong the power budget detection delay
9e8344a poemgr: configure power_budget to override detected limit

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 255c4e6c80)
2022-09-25 21:25:27 +02:00
Stijn Tintel
1eea84cca3 poemgr: fix conffiles path
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 33927a51c8)
2022-09-25 21:25:27 +02:00
Dirk Brenken
5092dbd147
adblock: update 4.1.4-5
* auto-whitelist ext. dns lookup domain
* add public doh server blocklist source
* whitespace fixes in adblock.sources

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 5603ed9237)
2022-09-25 21:03:07 +02:00
James McGuire
3f9a88d21b
adblock: add lightswitch05 blocklist source
Signed-off-by: James McGuire <jamesm51@gmail.com>
(cherry picked from commit b971cdc79b)
2022-09-25 21:02:47 +02:00
Alexander E. Patrakov
0247d720ea hping3: add new package
The new package would help measuring one-way delays using ICMP type 13
packets. This is important for various scripts that automatically adjust
CAKE shaper bandwidth based on the observed bufferbloat. They need to
understand whether the delay is on the way up or on the way down, so
that they can adjust the bandwidth of the proper part of the shaper.

https://forum.openwrt.org/t/cake-w-adaptive-bandwidth-historic/108848
https://forum.openwrt.org/t/cake-w-adaptive-bandwidth/135379

V2: refreshed patches

Signed-off-by: Alexander E. Patrakov <patrakov@gmail.com>
(cherry picked from commit 688a5413d0)
2022-09-25 02:10:01 -07:00
Michael Heimpold
d6c7e63c93
Merge pull request #19438 from mhei/22.03-squid-libxml2-backport
[22.03] squid: fix compilation with libxml (fixes #19099)
2022-09-25 10:22:17 +02:00
Daniel Golle
be7e4f8e3f snowflake: run snowflake-proxy with procd-ujail
snowflake-proxy doesn't write any files
 => run in read-only rootfs environment

the process needs to read SSL certs but no other files
 => only exposed path is /etc/ssl/certificates (read-only)

running as unpriviledged user with no additional capabilities
 => set no-new-privs bit

By default procd-ujail also isolates the process by executing it in
a separate new IPC and PID namespace.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 0f3d48a378)
Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-09-25 07:59:19 +02:00
Daniel Golle
8c028f4fd1 snowflake: add package
Package Tor's Snowflake system components so users can offer e.g.
a standalone Snowflake proxy on their routers or other devices.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit cf120a7eff)
Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-09-25 07:59:19 +02:00
Michael Heimpold
aaedc165d5 squid: fix compilation with libxml (fixes #19099)
Add a patch which removes a call in Libxml2Parser.cc to 'xmlSetFeature'.
This function belongs to the 'depreciated' API part and is not
available in OpenWrt builds.

According to my understanding, this call can be removed safely since
it disables the feature "substitute entities" which is disabled by default.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 3ec47dc85c)
2022-09-24 09:42:16 +02:00
Martin Hübner
e563fe3836 gatling: add package gatling
Gatling is a high-performance webserver from fefe. It gives a
fairly decent feature-set at really small size. And its fast.

Co-authored-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Martin Hübner <martin.hubner@web.de>
(cherry picked from commit 83ff83e320)
2022-09-23 14:52:55 -07:00
Tianling Shen
81c0688405 gg: Update to 0.2.11
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2a0ee392ae)
2022-09-23 13:42:57 -07:00
Tianling Shen
40106c7dc6 yq: Update to 4.27.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit fca4f1b830)
2022-09-23 13:42:51 -07:00
Tianling Shen
05d1265cb7 xray-core: Update to 1.6.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a0126b15c5)
[Update geodata to latest version, based on f8c25627eb]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-09-23 13:42:41 -07:00
Glenn Strauss
8a2bd27540 lighttpd: update to lighttpd 1.4.67 release hash
* update to lighttpd 1.4.67 release hash

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit f750089d26)
2022-09-23 13:42:20 -07:00
Rosen Penev
4df5d1348a tang: update directory
There's no more cache.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b847cfb93f89114d7a714b57af67198abadf9fa4)
2022-09-22 16:06:30 -07:00
Rosen Penev
f50dc54f24 Revert "jose: remove libjose"
This reverts commit 02d6c8346c.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 09781a8a65fa6624db55867f6918e9b4c03d7a32)
2022-09-22 16:06:30 -07:00
Rosen Penev
9550d45fd4 Revert "jose: fix static library usage"
This reverts commit c61b70918b.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f5d3b820c529de94f2a55e078e8f5f2ff87755e9)
2022-09-22 16:06:30 -07:00
Michal Vasilek
5a02ae2fe8
knot-resolver: update to 5.5.3
* fixes CVE-2022-40188

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 5d2fd88693)
2022-09-23 00:43:20 +02:00
Tianling Shen
88257a87a5 libtorrent-rasterbar: Update to 2.0.7
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c741bf64cd)
2022-09-22 01:21:32 -07:00
Michael Heimpold
765fd399d1
Merge pull request #19418 from mhei/22.03-libxml2-update-2.10.2
[22.03] libxml2: update to 2.10.2
2022-09-21 17:25:12 +02:00
Stan Grishin
4fb657737d
Merge pull request #19381 from stangri/openwrt-22.03-curl
[22.03] curl: update to 7.85.0
2022-09-20 15:04:44 -07:00
Hannu Nyman
1c5168cca1
Merge pull request #19415 from G-M0N3Y-2503/docker-update-22.03
[22.03] Docker: Update to v20.10.18
2022-09-20 22:27:30 +03:00
Gerard Ryan
954dd3b901 dockerd: Update to v20.10.18
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-09-20 21:28:42 +10:00
Gerard Ryan
a2defb8a68 docker: Update to v20.10.18
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-09-20 21:28:42 +10:00
Gerard Ryan
78949c659b libnetwork: Update to 0dde5c8 for Docker v20.10.18
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-09-20 21:28:42 +10:00
Gerard Ryan
3ffff095c6 containerd: Update to v1.6.8 for Docker v20.10.18
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-09-20 21:28:42 +10:00
Gerard Ryan
3ef01e4dd9 runc: Update to v1.1.4 for Docker v20.10.18
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-09-20 21:28:42 +10:00
Michael Heimpold
1e329ed5e9 libxml2: update to 2.10.2
This fixes:
- CVE-2022-2309

Release Notes:
- https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.0
- https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.1
- https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.2

Also drop removed docbook compile switch.
Disable PKG_FIXUP to allow backporting.

Signed-off-by: Nick Hainke <vincent@systemli.org>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit dc21121cf9c1c51649f0ffdaffd26326e53b4f45)
2022-09-20 07:59:57 +02:00
Michael Heimpold
91d060fd94
Merge pull request #19412 from mhei/22.03-php-8.1.10
[22.03] php8: update to 8.1.10
2022-09-20 07:51:48 +02:00
Michael Heimpold
74d181312d php8: update to 8.1.10
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 026a672ad1)
2022-09-19 21:35:35 +02:00
Rosen Penev
d86df0df5d jose: fix static library usage
When libjose is built statically, it must use --whole-archive as it uses
GCC's constructor attribute to initialize itself.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c61b70918b)
2022-09-18 23:19:57 -07:00
Dirk Brenken
fd5ba61549
adblock: update 4.1.4-3
* unbound: fix domain search regression

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e80d0236e3)
2022-09-18 09:10:52 +02:00
Eneas U de Queiroz
dfaa4bad50 uacme: add libev dependency to uacme-ualpn
The dependency has a PACKAGE_uacme-ualpn condition so that libev won't
be unnecessarily built if uacme-ualpn is not selected.

Remove PKG_USE_MIPS16:=0, as it is not necessary when not using the
libev that is bundled with uacme.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 1642b68d45)
2022-09-17 16:36:06 -07:00
Olivier Poitrey
ed56ca2aac nextdns: Update to version 1.37.11
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
(cherry picked from commit b665a6d683)
2022-09-17 12:56:55 -07:00
Michal Vasilek
219b0a1e58
python-flask-socketio: update to 5.3.1
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 7fd9d010a2)
2022-09-16 14:45:33 +02:00
Stan Grishin
c4d8769c8a curl: update to 7.85.0
* https://curl.se/changes.html#7_85_0
* add GitHub to PKG_SOURCE_URL

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 03a32717bc)
2022-09-15 21:00:05 +00:00
Dirk Brenken
20da9e28b3
adblock: update 4.1.4-2
* some more cleanups, forgotten with the last update
* optimized unbound syntax ('always_nxdomain' & 'always_transparent')
* optimized oisd download sources (use wilcard variants which are much smaller)
* removed superfluous version information/function

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 54f493ed9d)
2022-09-15 14:57:00 +02:00
Dirk Brenken
aaf90f333e
adblock: update 4.1.4
* dnsmasq upstream has changed the code for domain handling
  and recommends the 'local' syntax for large blocklists
* remove pipefail command, see #19043 for reference
* removed the unused 'adb_dnsinotify' parameter
* removed the 'adb_maxqueue' parameter,
  the queue size will be automatically set by the number of cpu cores
* various cleanups, mostly shellcheck related

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 254b3d9380)
2022-09-15 14:56:49 +02:00
Michal Vasilek
6b13e6e67d
yt-dlp: update to 2022.9.1
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit b1031b07a2)
2022-09-15 08:22:56 +02:00
Jan Hák
78d60b3c08
knot: update to version 3.2.1
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 023df0992a)
2022-09-15 08:22:30 +02:00
Šimon Bořek
b3373efe5a
python3: backport and fix target musl libc detection
Patch 030:
Backported from Python main branch[^1] for Python to distinguish between glibc and musl libc SOABI.

Patch 131:
Changes PLATFORM_TRIPLET -gnu/-musl suffix detection (performed by the backported patch)
to be based on the target OS instead of the building OS.

See included patches for more detailed descriptions.

Specifically this fixes cross-compilation for mpc8548 CPUs with SPE instructions[^2] enabled.

[^1]: merged to python:main as https://github.com/python/cpython/pull/24502 'bpo-43112: detect musl as a separate SOABI'
[^2]: https://www.nxp.com/docs/en/reference-manual/SPEPEM.pdf

Co-authored-by: Pali Rohár <pali@kernel.org>
Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
(cherry picked from commit 992fcd1bd8)
2022-09-15 08:22:23 +02:00
Stan Grishin
e4f01cad33
Merge pull request #19350 from stangri/openwrt-22.03-aria2
[22.03] aria2: Fix aria2.init start issue
2022-09-13 03:56:34 +03:00
Naraku J
cd3d6156fe aria2: Fix aria2.init start issue
Re-mount '$config_file' inside the '$config_dir' will cause aria2 process unable to start.

Signed-off-by: Naraku J <74468372+Narakuku@users.noreply.github.com>
(cherry picked from commit 3eba8468e1)
2022-09-12 19:34:12 +00:00
Rafał Miłecki
f8fec60bdc ksmbd-tools: add package with hotplug.d script for auto sharing
One of common use cases for SMB3 server in routers is sharing hotplugged
drives. Users make many attempts setting that up which often are not
optimal.

This script handles it in the cleanest way by using:
1. hotplug.d mount subsystem
2. runtime config in the /var/run/config/

It provides a working basic solution that can be later adjusted by
modifying provided hotplug script.

A pretty much idential solution was part of the samba36 package. It was
added in the OpenWrt commit ef1efa756e0d0 ("samba36: add package with
hotplug.d script for auto sharing") as an answer for feature required by
the Rosinson company.

Cc: Jo-Philipp Wich <jo@mein.io>
Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(cherry picked from commit d0406d4c95)
2022-09-10 16:04:37 +02:00
Rafał Miłecki
1a05246164 ksmbd-tools: append config from /var/run/config/ for runtime shares
Dynamically created shares shouldn't be stored in the /etc/config/
because of:
1. Flash wearing
2. Risk of inconsistent state on reboots

With this change all automation/hotplug.d scripts can store runtime in
the /var/run/config/samba. It's useful e.g. for USB drives that user
wants to be automatically shared.

Also: automated scripts should never call "uci [foo] commit" as that
could flush incomplete config. This problem also gets solved.

Identical feature was added to samba36 in the OpenWrt commit
5a59e2c059866 ("samba36: append config from /var/run/config/ for runtime
shares") but wasn't ported to ksmbd until now.

Cc: Jo-Philipp Wich <jo@mein.io>
Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(cherry picked from commit c9cba61989)
2022-09-10 16:00:56 +02:00