aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* usteer: update to latest versionDavid Bauer2022-03-18
| | | | | | | | | | | | | | f4e120c band-steering: add band-steering component 439acc5 policy: add steer-reject-timeout 648c6f3 policy: make roam-steers client-rejectable 1fa3210 policy: update roam-state after hard-kicks c19c885 policy: move load-kick out of kick meta-function 96ef3a6 ubus: skip neighbors which exceed their assoc limit 86e7297 policy: export below_max_assoc 33a5acd policy: make policy helpers more generic 32fed79 add local_mode config option Signed-off-by: David Bauer <mail@david-bauer.net>
* Merge pull request #17903 from WereCatf/feature_gensioMichael Heimpold2022-03-18
|\ | | | | gensio: Add new package
| * gensio: Add new packageNita Vesa2022-03-18
| | | | | | | | | | | | | | A library to abstract stream I/O like serial port, TCP, telnet, UDP, SSL, IPMI SOL, etc. Signed-off-by: Nita Vesa <werecatf@outlook.com>
* | Merge pull request #18091 from c---/fixcurlwolfsslStan Grishin2022-03-18
|\ \ | | | | | | curl: Fix compiling curl wolfSSL when IPv6 is disabled
| * | curl: Fix compiling curl wolfSSL IPv6 disabledChris Osgood2022-03-18
| | | | | | | | | | | | | | | | | | Fixes #18082 Signed-off-by: Chris Osgood <chris_github@functionalfuture.com>
* | | Mako: Remove packageJeffery To2022-03-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This package (more specifically, the host version) was added for mesa in the video feed[1]; no packages in the packages feed require this package. As mesa will be updated to install Mako using host pip[2], there is no need to continue maintaining the package here. It will be imported into the abandoned packages repo[3]. [1]: https://github.com/openwrt/packages/commit/2e17cb9a1b336f4b53146bdedbc583a03092e424#commitcomment-63047904 [2]: https://github.com/openwrt/video/pull/25 [3]: https://github.com/openwrt/packages-abandoned/pull/26 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | bind: bump to 9.18.1Noah Meyerhans2022-03-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes multiple security issues: * CVE-2022-0667 -- An assertion could occur in resume_dslookup() if the fetch had been shut down earlier * CVE-2022-0635 -- Lookups involving a DNAME could trigger an INSIST when "synth-from-dnssec" was enabled * CVE-2022-0396 -- A synchronous call to closehandle_cb() caused isc__nm_process_sock_buffer() to be called recursively, which in turn left TCP connections hanging in the CLOSE_WAIT state blocking indefinitely when out-of-order processing was disabled. * CVE-2021-25220 -- The rules for acceptance of records into the cache have been tightened to prevent the possibility of poisoning if forwarders send records outside the configured bailiwick Signed-off-by: Noah Meyerhans <frodo@morgul.net>
* | | glib2: fix compilation with Alpine LinuxRosen Penev2022-03-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Patch taken from Alpine Linux git. The problem is missing -lintl linker flag. Placed in a separate directory as the patch interferes with the way libintl is implemented in OpenWrt. Also removed rpath hack, which is not needed as all libraries are static. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | Revert "expat: add host build"Jeffery To2022-03-18
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit ca21bbf2edd64fffd044e0d6caf6975243a3fa4b. 5bf74f2 removed the host build of expat and updated packages to use tools/expat instead. ca21bbf re-added the host build of expat for mesa (actually wayland) in the video feed. Changing wayland to use tools/expat is the proper fix, and there is a PR[1] open with this change. Therefore this commit can and should be reverted. [1]: https://github.com/openwrt/video/pull/24 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | slide-switch: Update to 1.0.0Jeffery To2022-03-17
| | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | cloudflared: Update to 2022.3.2Tianling Shen2022-03-17
| | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | python3: Add Py3Build/InstallBuildDepends recipeJeffery To2022-03-17
| | | | | | | | | | | | | | | | | | | | | | This adds a recipe, Py3Build/InstallBuildDepends, that installs the requirements listed in HOST_PYTHON3_PACKAGE_BUILD_DEPENDS. This allows other (non-Python) packages to install host Python packages by calling this recipe, without having to know the internals of python3-package.mk. This also updates apparmor to call this recipe. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | libextractor: remove ffmpeg pluginRosen Penev2022-03-17
| | | | | | | | | | | | This was removed upstream. It also doesn't build with ffmpeg 5.0 Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | bind: fix warnings about unknown optionsPhilip Prindeville2022-03-17
| | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | Merge pull request #18066 from TDT-AG/pr/20220315-collectdFlorian Eckert2022-03-17
|\ \ | | | | | | collectd: update smart plugin
| * | collectd: smart: add patch to check udev_enumerate_scan_devices return valueFlorian Eckert2022-03-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The function udev_enumarte_scan_devices returns a value less than 0 on failure. If this is the case then we terminate the read for this smart information. This change was already send upstream. And could be delete in feature collectd versions. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | collectd: remove not needed fixFlorian Eckert2022-03-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This was not a real fix but a workaround. It is no longer clear to me why this was necessary. Deleting the patch restores the upstream behaviour of the collected for the smart plugin. I have tested it and on my system the hard disk to be monitored is recognised. root@system ~ # cat /sys/class/block/sda/uevent MAJOR=8 MINOR=0 DEVNAME=sda DEVTYPE=disk Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | Merge pull request #17940 from TDT-AG/pr/20220225-mwan3Florian Eckert2022-03-17
|\ \ \ | |/ / |/| | mwan3: update to version 2.11.0
| * | mwan3: update version to 2.11.0Florian Eckert2022-03-14
| | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | mwan3: dump iptables and ipset command for debuggingFlorian Eckert2022-03-14
| | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | mwan3: unify error messagesFlorian Eckert2022-03-14
| | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | mwan3: add sleep to release ipset referenceFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | | | | | | | | | It turns out that under high system load, ipsets cannot be deleted. This is because there is still a reference in iptables. A short sleep should give the system time to clean this up. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | mwan3: remove not needed ipset del cmdFlorian Eckert2022-03-14
| | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | mwan3: Split ipsets into separate ipv4 and ipv6 setsFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Nft does not directly support ipsets, nft sets must be used instead. The mwan3 uses ipsets for certain tasks. They can be combinded. So called an ipset of ipsets. This list type is not available in nft. So that mwan3 could be ported to nft in the feature, the ipset handling should be split. So we have for each ipset an iptables rule. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | mwan3: use mwan3_push_update function for mwan3_delete_iface_iptablesFlorian Eckert2022-03-14
| | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | mwan3: remove ipset generation from mwan3_set_general_iptablesFlorian Eckert2022-03-14
| | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | mwan3: use sticky ipset generation mwan3_push_update patternFlorian Eckert2022-03-14
| | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | mwan3: do not create dynamic ipset for IPv6 if not supportedFlorian Eckert2022-03-14
| | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | mwan3: do not add mwan3_custom_v6 set if ipv6 is not availableFlorian Eckert2022-03-14
| | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | mwan3: use also ipset restore for connected ipv4 setsFlorian Eckert2022-03-14
| | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | mwan3: move command definitions to common.shFlorian Eckert2022-03-14
| | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | mwan3: update iptables dependenciesFlorian Eckert2022-03-14
| | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | vim: remove vim/hostRosen Penev2022-03-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The only use of it is for xxd. tools/xxd was added in base so this can go. https://github.com/openwrt/openwrt/commit/c4dd2441e7 added it. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | Merge pull request #18079 from TDT-AG/pr/20220316-libqmi-libmbimFlorian Eckert2022-03-17
|\ \ \ | | | | | | | | ibqmi/libmbim: fix configure warning on unrecognized options
| * | | libmbim: remove unknown configure optionFlorian Eckert2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The configure option --enable-more-warnings and --without-udev are not recognized by configure. Buildlog: configure: WARNING: unrecognized options: --disable-nls, --enable-more-warnings, --without-udev Therefore this unkown configure options are removed with this commit. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | libqmi: remove unknown configure optionFlorian Eckert2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The configure option --enable-more-warnings is not recognized by configure. Buildlog: configure: WARNING: unrecognized options: --disable-nls, --enable-more-warnings Therefore this configure option is removed with this commit. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | Merge pull request #18070 from mhei/libxml2-updateMichael Heimpold2022-03-17
|\ \ \ \ | | | | | | | | | | libxml2: update to 2.9.13
| * | | | libxml2: update to 2.9.13Michael Heimpold2022-03-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes CVE-2022-23308. Also switch to GNOME as download source and xz tarball. Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | | openssh: update to 8.9p1Michal Vasilek2022-03-16
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
* | | | | libarchive: add conflict to bsdtar/bsdtar-noopensslJosef Schlehofer2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes: Packages 'bsdtar' and 'bsdtar-noopenssl' do not conflict while providing same file: /usr/bin/bsdtar Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | libudev-zero: backport latest changes to fix blocking on devices scanFlorian Eckert2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This change added the latest upstream changes since version 1.0.0. When using the smart plugin from collectd, there are problems with the function udev_enumerate_scan_devices. This function is blocked and no longer returns. Backporting the latest fixes from libudev-zero solves the problem. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | | cloudflared: add new packageTianling Shen2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Contains the command-line client for Cloudflare Tunnel, a tunneling daemon that proxies traffic from the Cloudflare network to your origins. Docs: https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/install-and-setup/tunnel-guide Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | haproxy: Update HAProxy to v2.4.15Christian Lachner2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Update haproxy download URL and hash Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | | | python3-paramiko: update to version 2.10.1Javier Marcet2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 2.10.1: - [Bug]: (CVE-2022-24302) Creation of new private key files using PKey subclasses was subject to a race condition between file creation & mode modification, which could be exploited by an attacker with knowledge of where the Paramiko-using code would write out such files. - This has been patched by using os.open and os.fdopen to ensure new files are opened with the correct mode immediately. We’ve left the subsequent explicit chmod in place to minimize any possible disruption, though it may get removed in future backwards- incompatible updates. - Thanks to Jan Schejbal for the report & feedback on the solution, and to Jeremy Katz at Tidelift for coordinating the disclosure. 2.10.0: - [Feature] Add support for OpenSSH’s Windows agent as a fallback when Putty/WinPageant isn’t available or functional. Reported by @benj56 with patches/PRs from @lewgordon and Patrick Spendrin. - [Feature] Add support for the %C token when parsing SSH config files. Foundational PR submitted by @jbrand42. - [Bug] Significantly speed up low-level read/write actions on SFTPFile objects by using bytearray/memoryview. This is unlikely to change anything for users of the higher level methods like SFTPClient.get or SFTPClient.getfo, but users of SFTPClient.open will likely see orders of magnitude improvements for files larger than a few megabytes in size. - Thanks to @jkji for the original report and to Sevastian Tchernov for the patch. - [Support] Add six explicitly to install-requires; it snuck into active use at some point but has only been indicated by transitive dependency on bcrypt until they somewhat-recently dropped it. This will be short-lived until we drop Python 2 support. Thanks to Sondre Lillebø Gundersen for catch & patch. Signed-off-by: Javier Marcet <javier@marcet.info>
* | | | | mtr: bump version to 0.95, split package for JSON and non-JSON variantsMarc Egerton2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As per the discussion in PR #18047, split the MTR package into two, one with jansson enabled for JSON output, and one without. This commit also bumps the version to 0.95. Since the MTR project website does not seem to be updated with builds any longer, switch to GitHub Codeload instead. Also enable PKG_FIXUP:=autoreconf so that MTRs bootstrap.sh process is executed properly. Signed-off-by: Marc Egerton <marc@malloc.me>
* | | | | zerotier: update to 1.8.6Moritz Warning2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * remove upstreamed gcc10 and cerrno patches * disable SSO and OIDC as it needs Rust/Cargo support Signed-off-by: Moritz Warning <moritzwarning@web.de>
* | | | | sudo: bump to version 1.9.10Alexandru Ardelean2022-03-16
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | | | | docker-compose: Update to version 2.3.3Javier Marcet2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | What's Changed: - use plain text progress when ansi=never is set by @ndeloof - build full compose model from resources, then filter by services by @ndeloof - add run with dependencies e2e test by @glours - add support for device_cgroup_rules by @ndeloof - composeService to use dockerCli's In/Out/Err streams by @ndeloof - fix generated YAML missing an "examples" section, and update cli-docs-tool to v0.4.0 by @thaJeztah Signed-off-by: Javier Marcet <javier@marcet.info>
* | | | | chicken-scheme: add conflict and small Makefile polishingJosef Schlehofer2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - No need to explicitly state two times section and category since this is already done in define Package/chicken-scheme/Default - Also add TITLE to Default - Add conflict between chicken-scheme-interpreter and chicken-scheme-full They both provide the same files: /usr/lib/libchicken.so /usr/lib/chicken/11/chicken.time.import.so /usr/lib/chicken/11/chicken.fixnum.import.so /usr/lib/chicken/11/chicken.internal.import.so /usr/lib/chicken/11/chicken.tcp.import.so /usr/lib/chicken/11/chicken.continuation.import.so /usr/lib/chicken/11/chicken.port.import.so /usr/lib/chicken/11/chicken.random.import.so /usr/lib/chicken/11/chicken.compiler.user-pass.import.so /usr/lib/chicken/11/chicken.process-context.import.so /usr/lib/chicken/11/chicken.bitwise.import.so /usr/lib/chicken/11/srfi-4.import.so /usr/lib/chicken/11/chicken.load.import.so /usr/lib/chicken/11/chicken.blob.import.so /usr/lib/chicken/11/chicken.time.posix.import.so /usr/lib/chicken/11/chicken.file.posix.import.so /usr/lib/chicken/11/chicken.flonum.import.so /usr/lib/chicken/11/chicken.condition.import.so /usr/lib/chicken/11/chicken.pretty-print.import.so /usr/lib/chicken/11/types.db /usr/lib/chicken/11/chicken.foreign.import.so /usr/lib/chicken/11/chicken.repl.import.so /usr/lib/chicken/11/chicken.pathname.import.so /usr/lib/chicken/11/chicken.sort.import.so /usr/lib/chicken/11/chicken.keyword.import.so /usr/lib/chicken/11/chicken.process.signal.import.so /usr/lib/chicken/11/chicken.platform.import.so /usr/lib/chicken/11/chicken.base.import.so /usr/lib/chicken/11/chicken.syntax.import.so /usr/lib/chicken/11/chicken.file.import.so /usr/lib/chicken/11/chicken.memory.import.so /usr/lib/chicken/11/chicken.gc.import.so /usr/lib/chicken/11/chicken.io.import.so /usr/lib/chicken/11/chicken.memory.representation.import.so /usr/lib/chicken/11/chicken.process.import.so /usr/lib/chicken/11/chicken.plist.import.so /usr/lib/chicken/11/chicken.string.import.so /usr/lib/chicken/11/chicken.errno.import.so /usr/lib/chicken/11/chicken.format.import.so /usr/lib/chicken/11/chicken.eval.import.so /usr/lib/chicken/11/chicken.irregex.import.so /usr/lib/chicken/11/chicken.process-context.posix.import.so /usr/lib/chicken/11/chicken.read-syntax.import.so /usr/lib/chicken/11/chicken.csi.import.so /usr/lib/chicken/11/chicken.locative.import.so /usr/bin/csi Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | python-asn1crypto: drop packageAlexandru Ardelean2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I can't seem to see any package that needs it. This was added for cryptography, since it was needed up to version 2.7 asn1-crypto doesn't have a user since commit 9d892e3cf88bd7c5f2c61117df2f3c2fd6c0e960 So, remove it. Abandoned packaged PR: https://github.com/openwrt/packages-abandoned/pull/23 Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
Powered by cgit, Themed by Ted Yin.