aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* | | banip: update 0.8.4-3Dirk Brenken2023-05-02
| | | | | | | | | | | | | | | | | | * add the option 'ban_autoallowuplink' to limit the uplink autoallow function: 'subnet' (default), 'ip' or 'disable' Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | sqlite3: Update to 3.41.2Tianling Shen2023-05-02
| | | | | | | | | | | | | | | | | | Fixes: CVE-2021-20227 Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | Merge pull request #20768 from stangri/master-simple-adblockStan Grishin2023-05-01
|\ \ \ | | | | | | | | simple-adblock: implement curl_additional_param compressed_cache_dir
| * | | simple-adblock: implement curl_additional_param compressed_cache_dirStan Grishin2023-04-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * curl_additional_param: to pass additional parameters (like proxy) to curl * compressed_cache_dir: where to store compressed cache in non-volitile memory Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | sing-box: update to 1.2.6Van Waholtz2023-05-01
| | | | | | | | | | | | | | | | Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
* | | | CI: Enable runtime_test for mips_24kcVan Waholtz2023-05-01
| | | | | | | | | | | | | | | | Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
* | | | sedutil: Add new packageJavier Marcet2023-05-01
| | | | | | | | | | | | | | | | | | | | | | | | The Drive Trust Alliance Self Encrypting Drive Utility Signed-off-by: Javier Marcet <javier@marcet.info>
* | | | cache-domains: added pre-test.sh CI stepGerard Ryan2023-05-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Some packages variants have conflicting dependencies with the base packages and the CI test will fail to install before anything can be done by the packages to setup the system for install. This change adds a pre-test.sh that runs before the install so things like the default libustream variant can be swapped out as shown in the updated cache-domains. Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* | | | kea: procd_close_instance doesn't take a parameterPhilip Prindeville2023-05-01
| | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | kea: Update to 2.2.0Philip Prindeville2023-05-01
| | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | getdns: fix compilation with OPENSSL_NO_DEPRECATEDAndre Heider2023-05-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | SSL_get_peer_certificate() is deprecated, OpenSSL v3.0 added SSL_get0_peer_certificate() and SSL_get1_peer_certificate(). Use the latter since the return value is explicitely X509_free()ed here, see [0]. [0] https://www.openssl.org/docs/manmaster/man3/SSL_get_peer_certificate.html Signed-off-by: Andre Heider <a.heider@gmail.com>
* | | | python-hatchling: Update to 1.14.0Jeffery To2023-05-01
| | | | | | | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | python-trove-classifiers: Add new host-only packageJeffery To2023-05-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | From the README: Canonical source for classifiers on PyPI. Classifiers categorize projects per PEP 301. Use this package to validate classifiers in packages for PyPI upload or download. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | python-calver: Add new host-only packageJeffery To2023-05-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | From the README: The calver package is a setuptools extension for automatically defining your Python package version as a calendar version. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | openssh: add respawn and reloading via signalErik Karlsson2023-05-01
| | | | | | | | | | | | | | | | | | | | | | | | Configure the openssh server to respawn. Reload by sending SIGHUP Signed-off-by: Erik Karlsson <erik.karlsson@genexis.eu>
* | | | zoneinfo: adjust to current timezone data file structureHannu Nyman2023-05-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Tweak the package to better match the current file structure in the upstream time zone database. Add missing aliases. Make some clarifications * Combine -northmerica and -southamerica into -america, as all current official America/xxx definitions were already in -northamerica and only the unofficial/deprecated Brazil/xxx, Chile and Argentina were in -southamerica. (Confusingly America/Sao_Paulo was in northamerica, while Brazil was in southamerica.) * Add PROVIDES for the old package names * Add missing top-level dir country/nation alias links. * Define Eire in -europe instead of -core. * Rename -india to -indian, as it contains the Indian ocean islands instead of the actual Asia/Kolkata zone for the mainland India. * Add PROVIDES for the old package name * Add 'Ocean' to all ocean zone titles. * Make all zoneinfo-packages depend on zoneinfo-core, so that zone.tab, the UTC based definitions and the still existing short zone codes are always available. * Clarify menuconfig menu as "Time Zone info" Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | | lighttpd: build fixesGlenn Strauss2023-05-01
| |/ / |/| | | | | | | | Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
* | | samba4: decouple quotas from vfs optionJavier Marcet2023-04-29
| | | | | | | | | | | | Signed-off-by: Javier Marcet <javier@marcet.info>
* | | python-eventlet: bump to version 0.33.3Stepan Henek2023-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | old eventlet is not working well with python3.10 ``` root@turris:~# python3 Python 3.10.9 (main, Feb 9 2023, 10:37:45) [GCC 11.2.0] on linux Type "help", "copyright", "credits" or "license" for more information. >>> import eventlet Traceback (most recent call last): File "<stdin>", line 1, in <module> File "/usr/lib/python3.10/site-packages/eventlet/__init__.py", line 17, in <module> File "/usr/lib/python3.10/site-packages/eventlet/convenience.py", line 7, in <module> File "/usr/lib/python3.10/site-packages/eventlet/green/socket.py", line 4, in <module> File "/usr/lib/python3.10/site-packages/eventlet/green/_socket_nodns.py", line 11, in <module> File "/usr/lib/python3.10/site-packages/eventlet/greenio/__init__.py", line 3, in <module> File "/usr/lib/python3.10/site-packages/eventlet/greenio/base.py", line 32, in <module> File "/usr/lib/python3.10/site-packages/eventlet/timeout.py", line 166, in wrap_is_timeout TypeError: cannot set 'is_timeout' attribute of immutable type 'TimeoutError' ``` see 0.33.3 release notes for details - https://eventlet.net/doc/changelog.html#id1 Signed-off-by: Stepan Henek <stepan.henek@nic.cz>
* | | restic: update to 0.15.2Tom Stöveken2023-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: Tom Stöveken <tom@naaa.de> Compile tested: SDK for OpenWrt 22.03.4 Run tested: x86/64 @ Intel(R) Celeron(R) CPU N3160 @ 1.60GHz, OpenWrt 22.03.4 Description: Updated to version 0.15.2 Signed-off-by: Tom Stöveken <tom@naaa.de>
* | | banip: update 0.8.4-2Dirk Brenken2023-04-28
| | | | | | | | | | | | | | | | | | | | | * fix domain lookup function (parse banIP config vars) * update readme Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | libreswan: update to 4.10Nick Hainke2023-04-27
| | | | | | | | | | | | | | | | | | | | | | | | Release Notes: https://github.com/libreswan/libreswan/releases/tag/v4.10 Fixes: CVE-2023-23009 Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | nginx: rename nginx-all-module to nginx-fullChristian Marangi2023-04-27
| | | | | | | | | | | | | | | | | | | | | Rename nginx-all-module to nginx-full to follow pattern used by other package and other projects. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | nginx: update to 1.24.0 and update headers-more moduleChristian Marangi2023-04-27
| | | | | | | | | | | | | | | | | | | | | Update nginx to 1.24.0 and update headers-more module to fix compilation error. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | nginx: update lua module to latest openresty versionChristian Marangi2023-04-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update lua module to latest openrestry version. Additional config are required to correctly use it. Switch it to luajit from liblua as this is what is currently supported for the module since plain lua support was dropped from the module. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | nginx: introduce support for dynamic modulesChristian Marangi2023-04-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Start building sub package that provide dynamic modules. Each module needs to be loaded using load_modules. Refer to nginx documentation on how to use this. This should result in lower memory usage as only used module are loaded. Also fix the uci-default scripts to add the required ubus module for luci module. -fvisibility=hidden is needed to be dropped to correctly support loading dynamic modules. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | nginx-util: add support for loading dynamic module in uci templateChristian Marangi2023-04-27
| | | | | | | | | | | | | | | | | | | | | Add support for loading dynamic module in uci template by adding .module file in module.d directory. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | acme: remove redundant postinstGlen Huang2023-04-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | opkg runs uci-defaults if a package installs one, in acme-common's case that's identical to postinst. prerm shouldn't be run a image builder, so it's unnecessary to check IPKG_INSTROOT Signed-off-by: Glen Huang <me@glenhuang.com>
* | | iperf3: update to 3.13Nick Hainke2023-04-26
| | | | | | | | | | | | | | | | | | | | | Release Notes: https://software.es.net/iperf/news.html#iperf-3-13-released Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | pcre2: only build static library for hostTianling Shen2023-04-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix potential linking issue: ``` /mnt/snapshot/staging_dir/hostpkg/bin/swig: error while loading shared libraries: libpcre2-8.so.0: cannot open shared object file: No such file or directory error: command '/mnt/snapshot/staging_dir/hostpkg/bin/swig' failed with exit code 127 ``` Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | librespeed-go: update file permissions for ujailTianling Shen2023-04-26
| | | | | | | | | | | | | | | | | | | | | This fixes "permission denied" error when access files as a normal user. Reported-by: Anya Lin <hukk1996@gmail.com> Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | iperf: update to 2.1.9Nick Hainke2023-04-26
| | | | | | | | | | | | | | | | | | | | | Changelog can be found here: https://sourceforge.net/projects/iperf2/files/ Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | gzip: update to 1.12Nick Hainke2023-04-26
| | | | | | | | | | | | | | | | | | | | | | | | Release Notes: https://lists.gnu.org/archive/html/info-gnu/2022-04/msg00003.html Fixes: CVE-2022-1271 Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | kmod: update to 30Nick Hainke2023-04-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | Release Notes: - https://github.com/kmod-project/kmod/releases/tag/v28 - https://github.com/kmod-project/kmod/releases/tag/v29 - https://github.com/kmod-project/kmod/releases/tag/v30 Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | yaml: only build static libraryLuiz Angelo Daros de Luca2023-04-25
| | | | | | | | | | | | | | | | | | | | | Do not build shared libraries to avoid host programs to dynamic link libraries at non-standard paths. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* | | ruby: statically link extensions into host rubyLuiz Angelo Daros de Luca2023-04-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Ruby uses extensions (.so files) that might also depend on other libraries. When the linker builds an executable, it will refer to the path it found the library, including those in the stagging dir. However, when it links a shared library (like ruby exts), it will let that dependency to be resolved at runtime. During host and target build, ruby build script runs ruby scripts. When it loads a ext that depends on another library, it will, by default, look for the system libraries to satisfy that, breaking the build when it fails. Setting LD_LIBRARY_PATH to the stagging lib dir is a valid workaround. Ruby can also be built statically linking all exts into ruby executable. That will make the linker point to the stagging library path, fixing the issue. It was used in the past but, at some point, ruby broke it. Now it is working as expected. Closes #20839 While at it, clean up excluded extensions not used by host ruby. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* | | python: Update find stdlib scriptJeffery To2023-04-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This updates the python3-find-stdlib-depends.sh script for these changes: * The gdbm (dbm.gnu) package was merged into the dbm package in 78f6c2c5ad2fd3de8a33a1cddb02204177cf60ad. * The uuid module was split into a separate package in 4e05541782edeb06b51d691dadf52648df24c940. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | python-idna: Update to 3.4Jeffery To2023-04-25
| | | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | python-zope-interface: Update to 6.0, refresh patchJeffery To2023-04-25
| | | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | python-pyasn1: Update to 0.5.0Jeffery To2023-04-25
| | | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | openssh: preserve authorized_keysGlen Huang2023-04-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | The root user is usually the user that clients ssh into with, so in most cases its authorized_keys determines what clients are allowed to ssh into this device. Without preserving this file, they could potentially be locked out after upgrading. Signed-off-by: Glen Huang <me@glenhuang.com>
* | | Merge pull request #20836 from hgl/strongswan-depsPhilip Prindeville2023-04-24
|\ \ \ | | | | | | | | strongswan: add missing PKG_MOD_AVAILABLE
| * | | strongswan: add missing PKG_MOD_AVAILABLEGlen Huang2023-04-24
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | Without these charon will warn with messages like: plugin 'kdf': failed to load - kdf_plugin_create not found and no plugin file available plugin 'drbg': failed to load - drbg_plugin_create not found and no plugin file available Signed-off-by: Glen Huang <me@glenhuang.com>
* | | Merge pull request #20832 from hgl/strongswanPhilip Prindeville2023-04-24
|\ \ \ | |_|/ |/| | strongswan: enable nonce unconditionally
| * | strongswan: enable nonce unconditionallyGlen Huang2023-04-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Without nonce, charon won't start, so it's not an optional plugin. I asked one of the strongSwan maintainers (ecdsa), and he confirmed this: > It definitely has to be enabled unconditionally. The only other > provider for the NONCE_GEN plugin feature is in charon-tkm, so > completely irrelevant on OpenWrt Signed-off-by: Glen Huang <me@glenhuang.com>
* | | snort3: update to 3.1.60.0John Audia2023-04-24
| | | | | | | | | | | | | | | | | | Upstream bump Signed-off-by: John Audia <therealgraysky@proton.me>
* | | banip: release 0.8.4-1Dirk Brenken2023-04-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add support for a custom feeds file (/etc/banip/banip.custom.feeds). Add new or edit existing banIP feeds on your own with the integrated custom feed editor (LuCI-component * add a new option 'ban_blockpolicy' to overrule the default bblock policy (block all chains), see readme for details * change the feed file format and add a new ipthreat feed, see readme * refine (debug) logging * multiple small fixes and improvements * readme update * luci update (separate commit) Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | qemu: add zstd optionVladimir Ermakov2023-04-23
| | | | | | | | | | | | Signed-off-by: Vladimir Ermakov <vooon341@gmail.com>
* | | qemu: update to 8.0.0Vladimir Ermakov2023-04-23
| | | | | | | | | | | | | | | | | | | | | | | | - Update version to 8.0.0 - Refresh patches - Update configure opttions to disable libdw Signed-off-by: Vladimir Ermakov <vooon341@gmail.com>
* | | ksmbd-tools: update to 3.4.8 releaseAndrew Sim2023-04-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: https://github.com/cifsd-team/ksmbd-tools/releases/tag/3.4.8 Maintainer: nobody Compile tested: Mediatek filogic, Asus TUF AX4200, lastest master Run tested: Mediatek filogic, Asus TUF AX4200, lastest master Signed-off-by: Andrew Sim <andrewsimz@gmail.com>
Powered by cgit, Themed by Ted Yin.