aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* | | | | | | | rsync: bump to 3.2.5John Audia2022-08-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With the new OW release approaching, it might be better to get an officially tagged upstream release in as PR#19087 just contained a fix for CVE-2022-29154 which itself introduced a few bugs. Signed-off-by: John Audia <therealgraysky@proton.me>
* | | | | | | | uvol: fix autopart handling double/float numberDaniel Golle2022-08-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Consider only integer part of free space in megabytes when deciding the boundaries of the to be created partition. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | | | | opendoas: add packageMichal Vasilek2022-08-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
* | | | | | | | tree: update upstream sourceJohn Audia2022-08-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update Makefile to use github mirror of new source url since current one is going to retire. "Notice this site is likely going to be shutdown after over 28 years. I will likely be moving all my code-bases to https://gitlab.com/OldManProgrammer"[1] 1. http://mama.indstate.edu/users/ice/tree Signed-off-by: John Audia <therealgraysky@proton.me>
* | | | | | | | rclone: fix init script on CIDR format ipaddrLiangbin Lian2022-08-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
* | | | | | | | rsync: fix CVE-2022-29154John Audia2022-08-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The rsync package is vulnerable to CVE-2022-29154[1], which is not yet in a non-preview release. This commit applies the upstream commit to fix it and several subsequent commits needed to fix bugs the initial fix introduced[2]. 1. https://rsync.samba.org/ftp/rsync/NEWS#SECURITY_FIXES-3.2.5 2. https://bugs.archlinux.org/task/75558 Signed-off-by: John Audia <therealgraysky@proton.me>
* | | | | | | | Merge pull request #19156 from turris-cz/websocketsJosef Schlehofer2022-08-13
|\ \ \ \ \ \ \ \ | |_|_|/ / / / / |/| | | | | | | python-websockets: update to version 10.3
| * | | | | | | python-websockets: update to version 10.3Josef Schlehofer2022-08-12
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Update copyright Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | / / libwebp: bump to version 1.2.4Alexandru Ardelean2022-08-12
| |_|_|_|/ / |/| | | | | | | | | | | | | | | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | | | | | Merge pull request #19085 from hardfalcon/unbound-1.16.2Josef Schlehofer2022-08-12
|\ \ \ \ \ \ | | | | | | | | | | | | | | unbound: update to 1.16.2, fix CVE-2022-30698, CVE-2022-30699
| * | | | | | unbound: update to 1.16.2, fix CVE-2022-30698, CVE-2022-30699Pascal Ernster2022-08-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: @EricLuehrsen Compile tested: x86/64 Run tested: x86/64 Description: Update to 1.16.2, fix CVE-2022-30698 and CVE-2022-30699. Signed-off-by: Pascal Ernster <git@hardfalcon.net>
* | | | | | | ksmbd-tools: add package with hotplug.d script for auto sharingRafał Miłecki2022-08-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | One of common use cases for SMB3 server in routers is sharing hotplugged drives. Users make many attempts setting that up which often are not optimal. This script handles it in the cleanest way by using: 1. hotplug.d mount subsystem 2. runtime config in the /var/run/config/ It provides a working basic solution that can be later adjusted by modifying provided hotplug script. A pretty much idential solution was part of the samba36 package. It was added in the OpenWrt commit ef1efa756e0d0 ("samba36: add package with hotplug.d script for auto sharing") as an answer for feature required by the Rosinson company. Cc: Jo-Philipp Wich <jo@mein.io> Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* | | | | | | ksmbd-tools: append config from /var/run/config/ for runtime sharesRafał Miłecki2022-08-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Dynamically created shares shouldn't be stored in the /etc/config/ because of: 1. Flash wearing 2. Risk of inconsistent state on reboots With this change all automation/hotplug.d scripts can store runtime in the /var/run/config/samba. It's useful e.g. for USB drives that user wants to be automatically shared. Also: automated scripts should never call "uci [foo] commit" as that could flush incomplete config. This problem also gets solved. Identical feature was added to samba36 in the OpenWrt commit 5a59e2c059866 ("samba36: append config from /var/run/config/ for runtime shares") but wasn't ported to ksmbd until now. Cc: Jo-Philipp Wich <jo@mein.io> Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* | | | | | | Merge pull request #19146 from pprindeville/strongswan-include-mgf1Philip Prindeville2022-08-10
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | strongswan: bundle mgf1 with everything
| * | | | | | | strongswan: bundle mgf1 with everythingPhilip Prindeville2022-08-10
| | |_|_|_|_|/ | |/| | | | | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | | | | shadowsocks-libev: ss-rules: nft rule cleanup on reloadYousong Zhou2022-08-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove nft rules file generated by ss-rules if ss-rules was or should be turned off for by configuration. Use "fw4 restart" instead of "fw4 reload" to force the runtime rule reloading Ref: https://github.com/openwrt/packages/pull/17937#issuecomment-1207357037 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | | | shadowsocks-libev: ss-rules: setup policy rules for udp/ip6Yousong Zhou2022-08-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Supersedes: https://github.com/openwrt/packages/pull/18852 Fixes: https://github.com/openwrt/packages/issues/18850 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | | | Merge pull request #19145 from Thermi/strongswan-5.9.7-model-kdf-dependenciesPhilip Prindeville2022-08-10
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | strongswan: try to model kdf optional dependencies
| * | | | | | | strongswan: try to model kdf optional dependenciesNoel Kuntze2022-08-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Noel Kuntze <noel.kuntze@thermi.consulting>
* | | | | | | | cgi-io: update to latest Git HEADJo-Philipp Wich2022-08-10
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 901b0f0 main: fix two one-byte overreads in header_value() Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* | | | | | | Merge pull request #19128 from pprindeville/strongswan-update-5.9.7Philip Prindeville2022-08-10
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | strongswan: Update to 5.9.7
| * | | | | | | strongswan: Update to 5.9.7Philip Prindeville2022-08-08
| | |/ / / / / | |/| | | | | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | | | | Merge pull request #19084 from jtkohl/watchcat-ping-bugfixFlorian Eckert2022-08-10
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | watchcat: fix broken ping invocation for no-address-family configuration
| * | | | | | | watchcat: fix broken ping invocation for no-address-family configurationMichal Kowalski2022-08-01
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix for issue #19010 Signed-off-by: John Kohl <jtk.git@bostonpog.org> Signed-off-by: Michal Kowalski <18610805+kofec@users.noreply.github.com>
* | | | | | | Merge pull request #19125 from hirnpfirsich/masterEtienne Champetier2022-08-08
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | prometheus-node-exporter-lua: add realtek-poe exporter
| * | | | | | | prometheus-node-exporter-lua: add realtek-poe exporterGregor Michels2022-08-08
| | |/ / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | exposes PoE metrics obtained from realtek-poe # HELP realtek_poe_switch_info information about the poe controller # TYPE realtek_poe_switch_info gauge realtek_poe_switch_info{mcu="ST Micro ST32F100 Microcontroller",firmware="v22.4"} 1 # HELP realtek_poe_switch_budget_watts overall power budget # TYPE realtek_poe_switch_budget_watts gauge realtek_poe_switch_budget_watts 77 # HELP realtek_poe_switch_consumption_watts overall power consumption # TYPE realtek_poe_switch_consumption_watts gauge realtek_poe_switch_consumption_watts 5 # HELP realtek_poe_port_priority poe priority of port # TYPE realtek_poe_port_priority gauge realtek_poe_port_priority{device="lan1"} 1 realtek_poe_port_priority{device="lan2"} 1 [...] # HELP realtek_poe_port_consumption_watts per port power consumption # TYPE realtek_poe_port_consumption_watts gauge realtek_poe_port_consumption_watts{device="lan1"} 0 realtek_poe_port_consumption_watts{device="lan2"} 0 [...] # HELP realtek_poe_port_state per port poe state # TYPE realtek_poe_port_state gauge realtek_poe_port_state{device="lan1",state="Disabled"} 0 realtek_poe_port_state{device="lan1",state="Searching"} 1 [...] (states: Disabled, Searching, Delivering power, Fault, Other fault, Requesting power) # HELP realtek_poe_port_mode per port poe mode # TYPE realtek_poe_port_mode gauge realtek_poe_port_mode{device="lan1",mode="PoE"} 0 realtek_poe_port_mode{device="lan1",mode="PoE+"} 1 [...] (modes: PoE, Legacy, pre-PoE+, PoE+) Signed-off-by: Gregor Michels <hirnpfirsich@brainpeach.de>
* | | | | | | Merge pull request #19130 from mhei/php8-update-8.1.9Michael Heimpold2022-08-08
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | php8: update to 8.1.9
| * | | | | | | php8: update to 8.1.9Michael Heimpold2022-08-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | | | | | Merge pull request #19114 from commodo/squashfs-tools-zstdAlexandru Ardelean2022-08-08
|\ \ \ \ \ \ \ \ | |_|/ / / / / / |/| | | | | | | squashfs-tools: enable zstd compression by default
| * | | | | | | squashfs-tools: enable zstd compression by defaultAlexandru Ardelean2022-08-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Requested via: https://github.com/openwrt/packages/issues/19111 PKG_RELEASE is set to AUTORELEASE, so no need to bump. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | | | | | | | Merge pull request #18628 from mcb30/openconnect-proxyNikos Mavrogiannopoulos2022-08-07
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | OpenConnect proxy support
| * | | | | | | | openconnect: Allow reconnect timeout to be specifiedMichael Brown2022-08-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Michael Brown <mbrown@fensystems.co.uk>
| * | | | | | | | openconnect: Support use of a proxy serverMichael Brown2022-08-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Allow connection via a proxy server (required on some sites where direct outbound HTTP(S) access is not permitted). Signed-off-by: Michael Brown <mbrown@fensystems.co.uk>
* | | | | | | | | prometheus-node-exporter-lua: fix hostapd stationsNick Hainke2022-08-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We can only utilize statistics from interfaces having ubus interface. Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | | | | | | Merge pull request #18834 from jpds/prometheus-selinux-collectorEtienne Champetier2022-08-07
|\ \ \ \ \ \ \ \ \ | |/ / / / / / / / |/| | | | | | | | prometheus-node-exporter-lua: Added selinux.lua.
| * | | | | | | | prometheus-node-exporter-lua: Added selinux.lua.Jonathan Davies2022-07-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jonathan Davies <jpds@protonmail.com>
* | | | | | | | | Merge pull request #19126 from PolynomialDivision/update-gnutlsNikos Mavrogiannopoulos2022-08-07
|\ \ \ \ \ \ \ \ \ | |_|_|/ / / / / / |/| | | | | | | | gnutls: update to 3.7.7
| * | | | | | | | gnutls: update to 3.7.7Nick Hainke2022-08-07
|/ / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - libgnutls: Fixed double free during verification of pkcs7 signatures. Reported by Jaak Ristioja (#1383). [GNUTLS-SA-2022-07-07, CVSS: medium] [CVE-2022-2509] - libgnutls: gnutls_hkdf_expand now only accepts LENGTH argument less than or equal to 255 times hash digest size, to comply with RFC 5869 2.3. - libgnutls: Length limit for TLS PSK usernames has been increased from 128 to 65535 characters (#1323). - libgnutls: AES-GCM encryption function now limits plaintext length to 2^39-256 bits, according to SP800-38D 5.2.1.1. - libgnutls: New block cipher functions have been added to transparently handle padding. gnutls_cipher_encrypt3 and gnutls_cipher_decrypt3 can be used in combination of GNUTLS_CIPHER_PADDING_PKCS7 flag to automatically add/remove padding if the length of the original plaintext is not a multiple of the block size. - libgnutls: New function for manual FIPS self-testing. API and ABI modifications: - gnutls_fips140_run_self_tests: New function - gnutls_cipher_encrypt3: New function - gnutls_cipher_decrypt3: New function - gnutls_cipher_padding_flags_t: New enum Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | | | | | yq: Update to 4.27.2Tianling Shen2022-08-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | | | | mxml: update to 3.3.1Espen Jürgensen2022-08-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>
* | | | | | | | luajit: patch: PPC/e500 SPE: use soft float instead of failingŠimon Bořek2022-08-06
| |/ / / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | makes LuaJit builds for mpc85xx targets with SPE ISA extension enabled possible Quoting inner commit message: This allows building LuaJit for systems with Power ISA SPE extension[^1] support by using soft float on LuaJit side. While e500 CPU cores support SPE instruction set extension allowing them to perform floating point arithmetic natively, this isn't required. They can function with software floating point to integer arithmetic translation as well, just like FPU-less PowerPC CPUs without SPE support. Therefore I see no need to prevent them from running LuaJit explicitly. [^1]: https://www.nxp.com/docs/en/reference-manual/SPEPEM.pdf Signed-off-by: Pali Rohár <pali@kernel.org> Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
* | | | | | | Merge pull request #19104 from janh/python-paho-mqtt-depends-uuidAlexandru Ardelean2022-08-05
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | python-paho-mqtt: add missing dependency
| * | | | | | | python-paho-mqtt: add missing dependencyJan Hoffmann2022-08-03
| | |_|_|_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The uuid module has been split out into a separate package with the update to Python 3.10. Signed-off-by: Jan Hoffmann <jan@3e8.eu>
* | | | | | | kea: bump to 2.0.3Stijn Tintel2022-08-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | | | | squeezelite: update to 1.9.9-1403Rosen Penev2022-08-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | Merge pull request #19083 from pprindeville/drop-parallel-support-non-x86Philip Prindeville2022-08-04
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | lcdproc: don't enable LPT support on non-x86 architectures
| * | | | | | | lcdproc: don't enable LPT support on non-x86 architecturesPhilip Prindeville2022-08-03
| | |_|/ / / / | |/| | | | | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | | | | Merge pull request #18781 from paper42/fail2ban-py310Josef Schlehofer2022-08-04
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | fail2ban: fix patch for python 3.10
| * | | | | | | fail2ban: fix patch for python 3.10Michal Vasilek2022-06-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 89d5d2e091c8da10a1c963158a6de92b05079116 only patched importing MutableMapping from collections, but importing Mapping has to be patched too Closes: #18681 Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
* | | | | | | | Merge pull request #19021 from borkra/fix_dependenciesEneas U de Queiroz2022-08-03
|\ \ \ \ \ \ \ \ | |_|_|/ / / / / |/| | | | | | | Avoid building unused package dependencies
Powered by cgit, Themed by Ted Yin.