aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* rust: Install to $(STAGING_DIR)/hostJeffery To2023-10-11
| | | | | | | | | | This allows rustc/cargo/etc to be called without having to set PATH, as $(STAGING_DIR)/host/bin is already in PATH. This also fixes CARGO_HOME not being set during Host/Configure and Host/Compile. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* rust: Improve Host/Install speedJeffery To2023-10-11
| | | | | | | | | | | | | | | | * Compress dist archives with gzip instead of xz; gzip is faster to compress and decompress * Use a for loop instead of calling find to extract archives * Use libdeflate's gzip to decompress instead of gzip * Limit search for install scripts to top level of extracted archives This also runs the install scripts with bash instead of sh, in accordance with the shebang lines inside the scripts. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* rust: Cache bootstrap downloads to $(DL_DIR)/rustcJeffery To2023-10-11
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* rust: Add RUST_HOST_FEATURES for host buildsJeffery To2023-10-11
| | | | | | Features to be enabled for host may not be the same as those for target. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* rust: Use build host PythonJeffery To2023-10-11
| | | | | | The build system already requires Python to be installed. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* curl: Update to version 8.4.0Michal Hrusecky2023-10-11
| | | | | | | | For detailed changes, see https://curl.se/changes.html#8_4_0 Switching to tar.bz2 for the time being as tar.xz is not yet available. Fixes CVE-2023-38546 and CVE-2023-38545. Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
* python-zope-interface: Update to 6.1, refresh patchJeffery To2023-10-11
| | | | | | | This also updates the list of dependencies and adds a test.sh script for the packages feed CI. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* Merge pull request #22352 from commodo/stress-ngAlexandru Ardelean2023-10-11
|\ | | | | stress-ng: bump to version 0.17.0
| * stress-ng: bump to version 0.17.00Alexandru Ardelean2023-10-10
| | | | | | | | | | | | | | | | Refreshed 001-disable-extra-stressors.patch Dropped 002-disable-compiler-test.patch - no longer needed since commit https://github.com/ColinIanKing/stress-ng/commit/a24c7f2048548e6e9ded652b0d16a7da37e4edf0 Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
* | Merge pull request #22348 from miska/samba4Tianling Shen2023-10-11
|\ \ | | | | | | samba4: Update to version 4.18.7
| * | samba4: Update to version 4.18.7Michal Hrusecky2023-10-09
| | | | | | | | | | | | | | | | | | | | | Update to the latest stable version in 4.18 series, for details, see https://www.samba.org/samba/history/samba-4.18.7.html Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
* | | python-pycares: bump to 4.4.0Fabian Lipken2023-10-11
| | | | | | | | | | | | Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
* | | Merge pull request #22343 from jefferyto/python-3.11.6Tianling Shen2023-10-11
|\ \ \ | | | | | | | | python3: Update to 3.11.6, refresh patches
| * | | python3: Update to 3.11.6, refresh patchesJeffery To2023-10-09
| | | | | | | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | Merge pull request #22345 from muink/patch-1Tianling Shen2023-10-11
|\ \ \ \ | | | | | | | | | | librespeed-go: Reload the daemon after modifying the tls certificate
| * | | | librespeed-go: Reload the daemon after modifying the tls certificateAnya Lin2023-10-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Make the daemon reload after the tls certificate is updated Signed-off-by: Anya Lin <hukk1996@gmail.com>
* | | | | procs: Add new packageFacundo Acevedo2023-10-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Procs is a modern, feature-rich alternative to the 'ps' command written in Rust Signed-off-by: Facundo Acevedo <facevedo@disroot.org>
* | | | | Merge pull request #22203 from pprindeville/perl-text-csv_xs-update-1.52Philip Prindeville2023-10-10
|\ \ \ \ \ | | | | | | | | | | | | Perl text csv xs update 1.52
| * | | | | perl-text-csv_xs: Update to 1.52Philip Prindeville2023-10-10
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | | | kmod: update to 31Nick Hainke2023-10-10
| |_|_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release Notes: https://github.com/kmod-project/kmod/blob/aff617ea871d0568cc491bd116c0be1e857463bb/NEWS#L1 Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | | snowflake: update to 2.6.1Nick Hainke2023-10-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release Notes: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/tags/v2.6.1 Remove upstreamed patches: - 0001-Bump-minimum-required-version-of-go.patch - 0002-Update-dependencies.patch Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | | cloudreve: Update to 3.8.3Tianling Shen2023-10-10
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | Merge pull request #22303 from perrin4869/ddns-scripts/add-samples-to-packageFlorian Eckert2023-10-09
|\ \ \ \ \ | |_|_|_|/ |/| | | | ddns-scripts: add samples to package
| * | | | ddns-scripts: add ddns-scripts-utils packageJulian Grinblat2023-10-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The samples in the repo are useful for configuring cenrtain aspects of ddns, and their inclusion is hinted at within their source code Signed-off-by: Julian Grinblat <julian@dotcore.co.il>
* | | | | pppossh: depend on dbclientSergey Ponomarev2023-10-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The package should not only depend on a package dropbear but on the dbclient. Otherwise the dbclient may be disabled during compilation and the dependency will be not satisfied. Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* | | | | dnsproxy: Update to 0.56.0Tianling Shen2023-10-09
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | v2ray-core: Update to 5.8.0Tianling Shen2023-10-09
| |_|/ / |/| | | | | | | | | | | | | | | | | | | Removed upstreamed patches. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | v2ray-geodata: add package v2ray-geosite-irKaveh Dadgar2023-10-09
| | | | | | | | | | | | | | | | | | | | "Iran Hosted Domains" is a comprehensive list of Iranian domains and services that are hosted within the country. Signed-off-by: Kaveh Dadgar <Kavehdadgar666@protonmail.com>
* | | | tailscale: Update to 1.50.1Zephyr Lykos2023-10-09
| | | | | | | | | | | | | | | | | | | | | | | | https://github.com/tailscale/tailscale/releases/tag/v1.50.1 Signed-off-by: Zephyr Lykos <git@mochaa.ws>
* | | | cni-protocol: update protocolOskari Rauta2023-10-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes to protocol file and it's description. Works better now and restarts firewall automaticly when tunnel comes available. More informative/guiding description. Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | sing-box: update to v1.5.2Leo Douglas2023-10-09
| |_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Enable `with_ech` and `with_dhcp`, just like upstream * See changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.5.2 Signed-off-by: Leo Douglas <douglarek@gmail.com> sing-box: ShadowsocksR is marked as deprecated since v1.5.0 Signed-off-by: Leo Douglas <douglarek@gmail.com> sing-box: remove dhcp by default Signed-off-by: Leo Douglas <douglarek@gmail.com>
* | | kea: bump to 2.4.0Stijn Tintel2023-10-08
| | | | | | | | | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | kea: bump to 2.2.1Stijn Tintel2023-10-08
| | | | | | | | | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | esp2net: add Espressif ESP chip USB-Network proxyNuno Gonçalves2023-10-08
| | | | | | | | | | | | Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>
* | | lighttpd: update to lighttpd 1.4.72 release hashGlenn Strauss2023-10-08
| | | | | | | | | | | | Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
* | | lua-eco: update to 3.0.1Jianhui Zhao2023-10-08
| | | | | | | | | | | | Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
* | | nextdns: Update to version 1.41.0Olivier Poitrey2023-10-08
| | | | | | | | | | | | Signed-off-by: Olivier Poitrey <rs@nextdns.io>
* | | sshtunnel: update version to 5.1Sergey Ponomarev2023-10-08
| | | | | | | | | | | | | | | | | | Make it depends on ether Dropbear dbclient or OpenSSH client Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* | | sshtunnel: allow empty port and userSergey Ponomarev2023-10-08
| | | | | | | | | | | | | | | | | | | | | | | | A user may have some host configured in the .ssh/config with user and port. But we anyway have to specify them in the sshtunnel. The change fixes this Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* | | sshtunnel: add enabled optionSergey Ponomarev2023-10-08
| | | | | | | | | | | | Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* | | sshtunnel: allow empty remoteaddressSergey Ponomarev2023-10-08
| | | | | | | | | | | | | | | | | | Just empty or * may have some semantic difference on a server Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* | | sshtunnel: StrictHostKeyChecking for DropbearSergey Ponomarev2023-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The dbclient doesn't support the -o StrictHostKeyChecking but it has it's own -y option: -y Always accept remote host key if unknown -y -y Don't perform any remote host key checking (caution) So we can add these options to make the StrictHostKeyChecking working. The dbclient will ignore -o StrictHostKeyChecking but use the -y or -yy instead. The only problem is that the -y flag is also used by the openssh-client: -y Send log information using the syslog(3) system module. By default this information is sent to stderr. This is not critical and once the dbclient start to support the StrictHostKeyChecking we can remove the -y flag. Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* | | sshtunnel: Use -i $IdentityFile instead of -o IdentityFile=$IdentityFileSergey Ponomarev2023-10-08
| | | | | | | | | | | | | | | | | | This makes the sshtunnel compatible with Dropbear. Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* | | sshtunnel: set StrictHostKeyChecking=accept-new by defaultSergey Ponomarev2023-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Without the option the ssh will propt a user to accept the host key. So a user should perform a connection manualy and accept before useing the sshtunnel. The accept-new is a reasonable trade off. Also the LogLevel is INFO by default. Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* | | sshtunnel: uci_sshtunnel use example.comSergey Ponomarev2023-10-08
| | | | | | | | | | | | Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* | | sshtunnel: uci_sshtunnel simplifySergey Ponomarev2023-10-08
| | | | | | | | | | | | | | | | | | | | | | | | Simplify comment and make it shorter. Remove triling tab after retrydelay. Use a full path for IdentityFile because otherwise the uci validation fails with the relative path ~/.ssh Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* | | exim: update to version 4.96.1Daniel Golle2023-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a security release. JH/01 Bug 2999: Fix a possible OOB write in the external authenticator, which could be triggered by externally-supplied input. Found by Trend Micro. CVE-2023-42115 JH/02 Bug 3000: Fix a possible OOB write in the SPA authenticator, which could be triggered by externally-controlled input. Found by Trend Micro. CVE-2023-42116 JH/03 Bug 3001: Fix a possible OOB read in the SPA authenticator, which could be triggered by externally-controlled input. Found by Trend Micro. CVE-2023-42114 Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | libvpx: update to 1.13.1Luiz Angelo Daros de Luca2023-10-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | v1.13.0 This release includes more Neon and AVX2 optimizations, adds a new codec control to set per frame QP, upgrades GoogleTest to v1.12.1, and includes numerous bug fixes. v1.13.1 This release contains two security related fixes. One each for VP8 and VP9. - https://crbug.com/1486441 (CVE-2023-5217) - Fix bug with smaller width bigger size (CVE-2023-44488) Fixes #22318 Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* | | Merge pull request #22329 from jefferyto/golang-1.21.2Josef Schlehofer2023-10-07
|\ \ \ | | | | | | | | golang: Update to 1.21.2
| * | | golang: Update to 1.21.2Jeffery To2023-10-07
|/ / / | | | | | | | | | | | | | | | | | | Includes fix for CVE-2023-39323 (cmd/go: line directives allows arbitrary execution during build). Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Powered by cgit, Themed by Ted Yin.