aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
| * | libuhttpd: allow building with OpenSSL 3.0Eneas U de Queiroz2023-02-16
| | | | | | | | | | | | | | | | | | | | | Add -Wno-error=deprecated-declarations to CFLAGS to allow usage of deprecated API. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
| * | boinc: Add compatibility with OpenSSL 3.0Eneas U de Queiroz2023-02-16
| | | | | | | | | | | | | | | | | | This adds a patch from upstream allowing to build with OpenSSL 3.0. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
| * | umurmur: fix compilation with OpenSSL 3.0Eneas U de Queiroz2023-02-16
| | | | | | | | | | | | | | | | | | Remove a call to CRYPTO_mem_ctrl(), which is used only for debugging, Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
| * | squid: bump to release 5.7Eneas U de Queiroz2023-02-16
| | | | | | | | | | | | | | | | | | This is the latest version and brings compatibility with OpenSSL 3.0. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
| * | nsd: bump to 4.6.1Eneas U de Queiroz2023-02-16
| | | | | | | | | | | | | | | | | | | | | | | | This version adds compatibility with OpenSSL 3.0. There's a patch, submitted upstream, to fix building without SSL. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
| * | nginx-util: allow building with OpenSSL 3.0Eneas U de Queiroz2023-02-16
| | | | | | | | | | | | | | | | | | | | | Add -Wno-error=deprecated-declarations to CFLAGS to allow usage of deprecated API. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
| * | gost_engine: add version 3.0.0.1Eneas U de Queiroz2023-02-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With OpenSSL soon to be updated to 3.0, the gost engine will have to be bumped as well. Gost 3.0.0.1 will not build with OpenSSL 1.1. To avoid disruption, this commit detects the OpenSSL version from ENGINES_DIR in include/openssl-engin, and sets the package version accordingly. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* | | knot: update to version 3.2.5Jan Hák2023-02-20
| | | | | | | | | | | | Signed-off-by: Jan Hák <jan.hak@nic.cz>
* | | Merge pull request #20484 from salim-b/patch-1Eneas U de Queiroz2023-02-20
|\ \ \ | | | | | | | | transmission: retrieve boolean config opts using `config_get_bool`
| * | | transmission: retrieve boolean config opts using `config_get_bool`Salim B2023-02-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The tranmission UCI config options - `config_overwrite` - `incomplete_dir_enabled` - `watch_dir_enabled` are all booleans, so we have to retrieve them using `config_get_bool` in order to make sure they are properly interpreted in case the user sets them to a keyword (`true`/`false`, `on`/`off` etc.) and not an integer (`0`/`1`). Signed-off-by: Salim B <git@salim.space>
* | | | Merge pull request #20525 from nxhack/node_16191Eneas U de Queiroz2023-02-20
|\ \ \ \ | |_|_|/ |/| | | node: bump to v16.19.1
| * | | node: bump to v16.19.1Hirokazu MORIKAWA2023-02-17
| | |/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Thursday February 16 2023 Security Releases Notable Changes The following CVEs are fixed in this release: * CVE-2023-23918: Node.js Permissions policies can be bypassed via process.mainModule (High) * CVE-2023-23919: Node.js OpenSSL error handling issues in nodejs crypto library (Medium) * CVE-2023-23936: Fetch API in Node.js did not protect against CRLF injection in host headers (Medium) * CVE-2023-24807: Regular Expression Denial of Service in Headers in Node.js fetch API (Low) * CVE-2023-23920: Node.js insecure loading of ICU data through ICU_DATA environment variable (Low) More detailed information on each of the vulnerabilities can be found in February 2023 Security Releases blog post. Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
* | | Merge pull request #20520 from commodo/django1Alexandru Ardelean2023-02-20
|\ \ \ | | | | | | | | django: bump to version 4.1.7
| * | | django: bump to version 4.1.7Alexandru Ardelean2023-02-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes: https://nvd.nist.gov/vuln/detail/CVE-2023-23969 Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
* | | | Merge pull request #20532 from stangri/master-simple-adblockStan Grishin2023-02-19
|\ \ \ \ | | | | | | | | | | simple-adblock: bugfix: ensure directory for jsonFile is created
| * | | | simple-adblock: bugfix: ensure directory for jsonFile is createdStan Grishin2023-02-19
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | Merge pull request #20521 from mhei/libgpiod-update-1.6.4Michael Heimpold2023-02-19
|\ \ \ \ \ | |/ / / / |/| | | | libgpiod: update to 1.6.4
| * | | | libgpiod: update to 1.6.4Michael Heimpold2023-02-18
| |/ / / | | | | | | | | | | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | Merge pull request #20523 from stangri/master-simple-adblockStan Grishin2023-02-19
|\ \ \ \ | | | | | | | | | | simple-adblock: implement procd_boot_wan_timeout support
| * | | | simple-adblock: implement procd_boot_wan_timeout supportStan Grishin2023-02-19
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | * implement procd_boot_wan_timeout support * update config with oisd ABPlus and domains lists Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | Merge pull request #20511 from stangri/master-simple-adblockStan Grishin2023-02-18
|\ \ \ \ | | | | | | | | | | simple-adblock: update to 1.9.4-1
| * | | | simple-adblock: update to 1.9.4-1Stan Grishin2023-02-16
| | |/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * update default config for new oisd.nl lists * conf.update file to migrate oisd.nl lists to the new format * introduce AdBlockPlus lists support (new oisd.nl format) * longer wait for WAN up/gateway detection * make load_environemnt only execute once to suppress duplicate warnings/errors PS. While I was testing this, oisd.nl has brought back the old domains lists as well, so this version supports both as I'm unclear as to why the "big" ABPlus list is only 6.2Mb where as the "big" domains list is whopping 19.9Mb. Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | Merge pull request #20491 from dibdot/banIPDirk Brenken2023-02-18
|\ \ \ \ | | | | | | | | | | banip: release 0.8.0 (nft rewrite)
| * | | | banip: release 0.8.0 (nft rewrite)Dirk Brenken2023-02-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - complete rewrite of banIP to support nftables - all sets are handled in a separate nft table/namespace 'banIP' - for incoming blocking it uses the inet input hook, for outgoing blocking it uses the inet forward hook - full IPv4 and IPv6 support - supports nft atomic set loading - supports blocking by ASN numbers and by iso country codes - 42 preconfigured external feeds are available, plus local allow- and blocklist - supports local allow- and blocklist (IPv4, IPv6, CIDR notation or domain names) - auto-add the uplink subnet to the local allowlist - provides a small background log monitor to ban unsuccessful login attempts in real-time - the logterms for the log monitor service can be freely defined via regex - auto-add unsuccessful LuCI, nginx, Asterisk or ssh login attempts to the local blocklist - fast feed processing as they are handled in parallel as background jobs - per feed it can be defined whether the input chain or the forward chain should be blocked (default: both chains) - automatic blocklist backup & restore, the backups will be used in case of download errors or during startup - automatically selects one of the following download utilities with ssl support: aria2c, curl, uclient-fetch or wget - supports a 'allowlist only' mode, this option restricts internet access from/to a small number of secure websites/IPs - provides comprehensive runtime information - provides a detailed set report - provides a set search engine for certain IPs - feed parsing by fast & flexible regex rulesets - minimal status & error logging to syslog, enable debug logging to receive more output - procd based init system support (start/stop/restart/reload/status/report/search) - procd network interface trigger support - ability to add new banIP feeds on your own - add a readme with all available options/feeds to customize your installation to your needs - a new LuCI frontend will be available in due course Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | adblock: update 4.1.5-6Dirk Brenken2023-02-18
| |_|/ / |/| | | | | | | | | | | | | | | | | | | * adapted changed oisd downloads (again), fixed #20516 Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | kcptun: update to version 20230207Dengfeng Liu2023-02-17
| | | | | | | | | | | | | | | | | | | | | | | | add support for port-range dailer, port-range listener Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
* | | | podman: update 4.4.1Oskari Rauta2023-02-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | patch refreshed. Changes - Added the podman-systemd.unit man page, which can also be displayed using man quadlet (#17349). - Documented journald identifiers used in the journald backend for the podman events command. Bugfixes - Fixed a bug where the default handling of pids-limit was incorrect. - Fixed a bug where parallel calls to make docs crashed (#17322). - Fixed a regression in the podman kube play command where existing resources got mistakenly removed. Full list of changes: [Release notes](https://github.com/containers/podman/blob/main/RELEASE_NOTES.md) Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | cloudreve: Update to 3.7.1Tianling Shen2023-02-16
| |/ / |/| | | | | | | | | | | | | | Dropped architectures that are no longer supported by upstream. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | gg: Update to 0.2.18Tianling Shen2023-02-16
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | dnsproxy: Update to 0.47.0Tianling Shen2023-02-16
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | conmon: update to 2.1.6Oskari Rauta2023-02-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bug fixes - Fix OOM watcher for cgroupv2 oom_kill events Misc - Use --detach instead of -d - ctrl: drop fifo perms to 0660 [Release notes](https://github.com/containers/conmon/releases/tag/v2.1.6) Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | irqbalance: Add upstream fix for AARCH64 irq name parsingHannu Nyman2023-02-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add upstream fix for AARCH64 irq name parsing. > On arm64 SoCs like TI's K3 SoC and few other SoCs, > IRQ names don't get parsed correct due to which they > end up being classified into wrong class. Fix this by > considering last token to contain IRQ name always. The fix seems to enable e.g. RT3200 to notice a few more interrupts and start balancing them. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | adblock: update 4.1.5-5Dirk Brenken2023-02-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * adapted changed oisd namings / download locations oisd_big (old: oisd_full), oisd_small (old: oisdb_basic) * added antipopads as new sources * removed broken energized source * fixed readme Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | Merge pull request #20481 from ttytyper/hamlib-init-configFlorian Eckert2023-02-15
|\ \ \ | | | | | | | | hamlib: Added init script and config files
| * | | hamlib: Added newline at end of init script and configJesper Henriksen2023-02-13
| | | | | | | | | | | | | | | | Signed-off-by: Jesper Henriksen <mail-openwrt@jesper.io>
| * | | hamlib: Added init and config filesJesper Henriksen2023-02-12
| | | | | | | | | | | | | | | | Signed-off-by: Jesper Henriksen <mail-openwrt@jesper.io>
* | | | uvol: switch to /sys/class/ubiDaniel Golle2023-02-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Instead of /sys/devices/virtual/ubi which will no longer be available in future kernels, switch to /sys/class/ubi. While at it fix unrelated arithmetic syntax error by guarding the affected expression to not run on an empty string. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | Merge pull request #20425 from autobakterie/flask_jinja_update_maintainerJosef Schlehofer2023-02-14
|\ \ \ \ | |_|_|/ |/| | | Flask, Jinja2: update maintainer
| * | | Jinja2: pass maintainership to Michal VasílekŠimon Bořek2023-02-14
| | | | | | | | | | | | | | | | Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
| * | | Flask: pass maintainership to Michal VasílekŠimon Bořek2023-02-14
| | | | | | | | | | | | | | | | Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
| * | | Jinja2: get rid of deprecated AUTORELEASEŠimon Bořek2023-02-14
| | | | | | | | | | | | | | | | Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
| * | | Flask: get rid of deprecated AUTORELEASEŠimon Bořek2023-02-14
|/ / / | | | | | | | | | Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
* / / restic: update to 0.15.1Tom Stöveken2023-02-12
|/ / | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: Tom Stöveken <tom@naaa.de> Compile tested: SDK for OpenWrt 22.03.3 Run tested: x86/64 @ Intel(R) Celeron(R) CPU N3160 @ 1.60GHz, OpenWrt 22.03.3 Description: Updated to version 0.15.1 changed PKG_RELEASE:=2 due to deprecated value AUTORELEASE, squashed commits and then changed PKG_RELEASE:=1 because upgrading the whole main PKG_VERSION (the major version item) should reset this to 1 Signed-off-by: Tom Stöveken <tom@naaa.de>
* | python-websocket-client: update to 1.5.1Javier Marcet2023-02-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - 1.5.1 - Fix logic bug that can cause disconnects - 1.5.0 - Refactor and improve ping/pong logic to resolve several issues, including an infinite loop issue during reconnect - Fix issue where `skip_utf8_validation = True` is ignored - Fix issue where sslopt `is_ssl` is ignored - Downgrade "websocket connected" message from logging.warning to logging.info - Update github actions to newer versions (669fe1b) Signed-off-by: Javier Marcet <javier@marcet.info>
* | hamlib: update to 4.5.4Jesper Henriksen2023-02-12
|/ | | | Signed-off-by: Jesper Henriksen <mail-openwrt@jesper.io>
* gsocket: upstream update to 1.4.39Ralf Kaiser2023-02-11
| | | | Signed-off-by: Ralf Kaiser <skyper@thc.org>
* docker-compose: Update to version 2.16.0Javier Marcet2023-02-11
| | | | Signed-off-by: Javier Marcet <javier@marcet.info>
* Merge pull request #20349 from turris-cz/unbound-1171Josef Schlehofer2023-02-10
|\ | | | | unbound: update to version 1.17.1
| * unbound: update to version 1.17.1Josef Schlehofer2023-02-10
| | | | | | | | | | | | | | - Refreshed one patch - Removed deprecated AUTORELEASE Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | sing-box: add new packageVan Waholtz2023-02-10
| | | | | | | | Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
Powered by cgit, Themed by Ted Yin.