aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* | | | | | Merge pull request #20915 from mhei/open-plc-utils-updateMichael Heimpold2023-05-08
|\ \ \ \ \ \ | |/ / / / / |/| | | | | open-plc-utils: update to latest upstream version
| * | | | | open-plc-utils: update to latest upstream versionMichael Heimpold2023-05-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds support for QCA7006AQ chipset identification. Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | | | crowdsec-firewall-bouncer: new upstream release version 0.0.26S. Brusch2023-05-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: S. Brusch <ne20002@gmx.ch> Maintainer: Kerma Gérald <gandalf@gk2.net> Run tested: ipq40xx/generic, Fritzbox 4040, Openwrt 22.03.5 Update crowdsec-firewall-bouncer to latest upstream release version 0.0.26
* | | | | | snort3: update to 3.1.61.0John Audia2023-05-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upstream bump Removed upstreamed patch: 900-fix_build_for_archs_contain_plus.patch[1] 1. https://github.com/snort3/snort3/commit/4de62ca9b9bfea4049ebe373a07076284b121bfe Build system: x86_64 Build-tested: bcm2711/RPi4B Run-tested: bcm2711/RPi4B Signed-off-by: John Audia <therealgraysky@proton.me>
* | | | | | gnutls: update to v3.8.0Antonio Flores2023-05-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes: https://github.com/openwrt/openwrt/issues/12542 The detailed list of changes follows: * Version 3.8.0 (released 2023-02-09) ** libgnutls: Fix a Bleichenbacher oracle in the TLS RSA key exchange. Reported by Hubert Kario (#1050). Fix developed by Alexander Sosedkin. [GNUTLS-SA-2020-07-14, CVSS: medium] [CVE-2023-0361] ** libgnutls: C++ library is now header only. All definitions from gnutlsxx.c have been moved into gnutlsxx.h. Users of the C++ interface have two options: 1. include gnutlsxx.h in their application and link against the C library. (default) 2. include gnutlsxx.h in their application, compile with GNUTLS_GNUTLSXX_NO_HEADERONLY macro defined and link against the C++ library. ** libgnutls: GNUTLS_NO_STATUS_REQUEST flag and %NO_STATUS_REQUEST priority modifier have been added to allow disabling of the status_request TLS extension in the client side. ** libgnutls: TLS heartbeat is disabled by default. The heartbeat extension in TLS (RFC 6520) is not widely used given other implementations dropped support for it. To enable back support for it, supply --enable-heartbeat-support to configure script. ** libgnutls: SRP authentication is now disabled by default. It is disabled because the SRP authentication in TLS is not up to date with the latest TLS standards and its ciphersuites are based on the CBC mode and SHA-1. To enable it back, supply --enable-srp-authentication option to configure script. ** libgnutls: All code has been indented using "indent -ppi1 -linux". CI/CD has been adjusted to catch regressions. This is implemented through devel/indent-gnutls, devel/indent-maybe and .gitlab-ci.yml’s commit-check. You may run devel/indent-gnutls to fix any indentation issues if you make code modifications. ** guile: Guile-bindings removed. They have been extracted into a separate project to reduce complexity and to simplify maintenance, see <https://gitlab.com/gnutls/guile/>. ** minitasn1: Upgraded to libtasn1 version 4.19. ** API and ABI modifications: GNUTLS_NO_STATUS_REQUEST: New flag GNUTLS_SRTP_AEAD_AES_128_GCM: New gnutls_srtp_profile_t enum member GNUTLS_SRTP_AEAD_AES_256_GCM: New gnutls_srtp_profile_t enum member Signed-off-by: Antonio Flores <antflores627@gmail.com>
* | | | | | haproxy: update to v2.6.13Christian Lachner2023-05-07
| |_|_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Update haproxy PKG_VERSION and PKG_HASH - See changes: http://git.haproxy.org/?p=haproxy-2.6.git;a=shortlog Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | | | cloudflared: Update to 2023.5.0Tianling Shen2023-05-07
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | smartdns: bump to 1.2023.42Nick Peng2023-05-07
| |_|/ / |/| | | | | | | | | | | Signed-off-by: Nick Peng <pymumu@gmail.com>
* | | | banip: release 0.8.5-1Dirk Brenken2023-05-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add support for external allowlist URLs to reference additional IPv4/IPv6 feeds, set 'ban_allowurl' accordingly * make download retries in case of an error configurable, set 'ban_fetchretry' accordingly (default 5) * small fixes * readme update * LuCI update (separate commit) Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | libxml2: remove - moved to OpenWrt main repoHannu Nyman2023-05-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove libxml2 that was moved into the main OpenWrt repo. Commit in OpenWrt: 9b0b46985c112c664354dc745d8cfb313166744b Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | | gperf: remove - moved to OpenWrt main repoHannu Nyman2023-05-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove gperf that was moved into the main OpenWrt repo. Commit in OpenWrt: 2070a2ca27bdb2b1e4e1587274e192e42f247516 Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | | nginx: fix compilation error for nginx-fullChristian Marangi2023-05-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix compilation error for stream module not converted to use the PACKAGE config flag and a missing required dependency for the DAV ext module. Drop additional config for STREAM module since they are now included and built by default. Fixes: 65a676ed56fb ("nginx: introduce support for dynamic modules") Fixes: #20906 Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | | Merge pull request #20925 from jefferyto/python-hatchling-1.14.1Tianling Shen2023-05-06
|\ \ \ \ | | | | | | | | | | python-hatchling: Update to 1.14.1
| * | | | python-hatchling: Update to 1.14.1Jeffery To2023-05-04
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | rtl_433: update to 22.11Robert Högberg2023-05-06
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Robert Högberg <robert.hogberg@gmail.com>
* | | | | uwsgi: make LuCI workGlen Huang2023-05-05
| |_|/ / |/| | | | | | | | | | | | | | | | | | | LuCI is no longer powered by lua, but ucode Signed-off-by: Glen Huang <me@glenhuang.com>
* | | | Merge pull request #20912 from stangri/master-pbrStan Grishin2023-05-04
|\ \ \ \ | | | | | | | | | | pbr: update to 1.1.1-1
| * | | | pbr: update to 1.1.1-1Stan Grishin2023-05-01
| | |/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | *** MAKEFILE *** * remove libubus dependency as it was causing issues https://forum.openwrt.org/t/policy-based-routing-pbr-package-discussion/140639/318 * move firewall hotplug directory/file creation out of default section into pbr and pbr-iptables packages sections in preparation for dropping it from pbr * fix no new line after output when uninstalling packages *** UCI-DEFAULTS *** * only add firewall include to firewall config if the include file exists * add shellcheck exception to netifd uci-defaults file *** SCRIPTS *** * more informative logging for firewall and iface hotplug scripts * more informative logging for firewall include script *** SERVICE *** * introduce lock-file to prevent package starting on external events if it hasn't been auto- or manually started before * use the `ip`, not `ip-full` command to prevent errors on OpenWrt 21.02 * parse firewall WAN zone to append list of interfaces * append error and warning "arrays" with new messages * used shared memory to store the service output/logging messages * improve is_ovpn function to filter out false positives when interface names started with `tun` * introduce is_valid_ovpn to find OpenVPN tunnels where the device name in OpenVPN config matches the device name in network config * introduce opkg_get_version to compare versions of principal and luci packages * better code to obtain AdGuardHome version with betas installed * optimize code and add better logging for errors when inserting policies with iptables * optimize code and add better logging for errors when inserting policies with nft * bugfix: insert policies in all specified protocols * bugfix: support using physical devices in policies in nft mode * bugfix: use iptPrefix, not nftPrefix in iptables commands * implement Tor support in nft mode * bugfix: fix spelling for User File Syntax error * restart service fully (instead of quick reload) for OpenVPN interface events, as the order/number of supported interfaces * more verbose output (showing handles) of status in nft mode * improve `icmp_interface`, `ignored_interface`, `supported_interface` validation regexes * improve `interface`, validation regex Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | banip: update 0.8.4-5Dirk Brenken2023-05-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fix remaining small issues * standardize log wording * polished up for branch 23.x Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | banip: update 0.8.4-4Dirk Brenken2023-05-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add housekeeping to the autoallow function, only the current uplink will be held * fix small issues * cosmetics Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | mwan3: bump PKG_VERSION to 2.11.6Anna Tikhomirova2023-05-04
| | | | | | | | | | | | | | | | Signed-off-by: Anna Tikhomirova <vamp@vampik.ru>
* | | | mwan3: fix addition of routes to mwan3_connected ipsetAnna Tikhomirova2023-05-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Addition of routes to mwan3_connected ipset is broken. The ipset name was changed from mwan3_connected_v4/6 to mwan3_connected_ipv4/6, but this change was not reflected in mwan3rtmon. Signed-off-by: Anna Tikhomirova <vamp@vampik.ru> * Update commit message Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | mwan3: bump PKG_VERSION to 2.11.5Anna Tikhomirova2023-05-04
| | | | | | | | | | | | | | | | Signed-off-by: Anna Tikhomirova <vamp@vampik.ru>
* | | | mwan3: fix addition of iptables rules for mwan3 sticky rulesAnna Tikhomirova2023-05-04
| |/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Addition of iptables rules for mwan3 sticky rules is broken, resulting in non-working sticky rules. The required parameters for the function 'mwan3_set_sticky_iptables' were passed in the wrong order. Signed-off-by: Anna Tikhomirova <vamp@vampik.ru> * Update commit message * Quoting function arguments Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | tailscale: update to 1.40.0Zephyr Lykos2023-05-03
| | | | | | | | | | | | Signed-off-by: Zephyr Lykos <git@mochaa.ws>
* | | banip: update 0.8.4-3Dirk Brenken2023-05-02
| | | | | | | | | | | | | | | | | | * add the option 'ban_autoallowuplink' to limit the uplink autoallow function: 'subnet' (default), 'ip' or 'disable' Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | sqlite3: Update to 3.41.2Tianling Shen2023-05-02
| | | | | | | | | | | | | | | | | | Fixes: CVE-2021-20227 Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | Merge pull request #20768 from stangri/master-simple-adblockStan Grishin2023-05-01
|\ \ \ | | | | | | | | simple-adblock: implement curl_additional_param compressed_cache_dir
| * | | simple-adblock: implement curl_additional_param compressed_cache_dirStan Grishin2023-04-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * curl_additional_param: to pass additional parameters (like proxy) to curl * compressed_cache_dir: where to store compressed cache in non-volitile memory Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | sing-box: update to 1.2.6Van Waholtz2023-05-01
| | | | | | | | | | | | | | | | Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
* | | | CI: Enable runtime_test for mips_24kcVan Waholtz2023-05-01
| | | | | | | | | | | | | | | | Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
* | | | sedutil: Add new packageJavier Marcet2023-05-01
| | | | | | | | | | | | | | | | | | | | | | | | The Drive Trust Alliance Self Encrypting Drive Utility Signed-off-by: Javier Marcet <javier@marcet.info>
* | | | cache-domains: added pre-test.sh CI stepGerard Ryan2023-05-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Some packages variants have conflicting dependencies with the base packages and the CI test will fail to install before anything can be done by the packages to setup the system for install. This change adds a pre-test.sh that runs before the install so things like the default libustream variant can be swapped out as shown in the updated cache-domains. Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* | | | kea: procd_close_instance doesn't take a parameterPhilip Prindeville2023-05-01
| | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | kea: Update to 2.2.0Philip Prindeville2023-05-01
| | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | getdns: fix compilation with OPENSSL_NO_DEPRECATEDAndre Heider2023-05-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | SSL_get_peer_certificate() is deprecated, OpenSSL v3.0 added SSL_get0_peer_certificate() and SSL_get1_peer_certificate(). Use the latter since the return value is explicitely X509_free()ed here, see [0]. [0] https://www.openssl.org/docs/manmaster/man3/SSL_get_peer_certificate.html Signed-off-by: Andre Heider <a.heider@gmail.com>
* | | | python-hatchling: Update to 1.14.0Jeffery To2023-05-01
| | | | | | | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | python-trove-classifiers: Add new host-only packageJeffery To2023-05-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | From the README: Canonical source for classifiers on PyPI. Classifiers categorize projects per PEP 301. Use this package to validate classifiers in packages for PyPI upload or download. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | python-calver: Add new host-only packageJeffery To2023-05-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | From the README: The calver package is a setuptools extension for automatically defining your Python package version as a calendar version. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | openssh: add respawn and reloading via signalErik Karlsson2023-05-01
| | | | | | | | | | | | | | | | | | | | | | | | Configure the openssh server to respawn. Reload by sending SIGHUP Signed-off-by: Erik Karlsson <erik.karlsson@genexis.eu>
* | | | zoneinfo: adjust to current timezone data file structureHannu Nyman2023-05-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Tweak the package to better match the current file structure in the upstream time zone database. Add missing aliases. Make some clarifications * Combine -northmerica and -southamerica into -america, as all current official America/xxx definitions were already in -northamerica and only the unofficial/deprecated Brazil/xxx, Chile and Argentina were in -southamerica. (Confusingly America/Sao_Paulo was in northamerica, while Brazil was in southamerica.) * Add PROVIDES for the old package names * Add missing top-level dir country/nation alias links. * Define Eire in -europe instead of -core. * Rename -india to -indian, as it contains the Indian ocean islands instead of the actual Asia/Kolkata zone for the mainland India. * Add PROVIDES for the old package name * Add 'Ocean' to all ocean zone titles. * Make all zoneinfo-packages depend on zoneinfo-core, so that zone.tab, the UTC based definitions and the still existing short zone codes are always available. * Clarify menuconfig menu as "Time Zone info" Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | | lighttpd: build fixesGlenn Strauss2023-05-01
| |/ / |/| | | | | | | | Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
* | | samba4: decouple quotas from vfs optionJavier Marcet2023-04-29
| | | | | | | | | | | | Signed-off-by: Javier Marcet <javier@marcet.info>
* | | python-eventlet: bump to version 0.33.3Stepan Henek2023-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | old eventlet is not working well with python3.10 ``` root@turris:~# python3 Python 3.10.9 (main, Feb 9 2023, 10:37:45) [GCC 11.2.0] on linux Type "help", "copyright", "credits" or "license" for more information. >>> import eventlet Traceback (most recent call last): File "<stdin>", line 1, in <module> File "/usr/lib/python3.10/site-packages/eventlet/__init__.py", line 17, in <module> File "/usr/lib/python3.10/site-packages/eventlet/convenience.py", line 7, in <module> File "/usr/lib/python3.10/site-packages/eventlet/green/socket.py", line 4, in <module> File "/usr/lib/python3.10/site-packages/eventlet/green/_socket_nodns.py", line 11, in <module> File "/usr/lib/python3.10/site-packages/eventlet/greenio/__init__.py", line 3, in <module> File "/usr/lib/python3.10/site-packages/eventlet/greenio/base.py", line 32, in <module> File "/usr/lib/python3.10/site-packages/eventlet/timeout.py", line 166, in wrap_is_timeout TypeError: cannot set 'is_timeout' attribute of immutable type 'TimeoutError' ``` see 0.33.3 release notes for details - https://eventlet.net/doc/changelog.html#id1 Signed-off-by: Stepan Henek <stepan.henek@nic.cz>
* | | restic: update to 0.15.2Tom Stöveken2023-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: Tom Stöveken <tom@naaa.de> Compile tested: SDK for OpenWrt 22.03.4 Run tested: x86/64 @ Intel(R) Celeron(R) CPU N3160 @ 1.60GHz, OpenWrt 22.03.4 Description: Updated to version 0.15.2 Signed-off-by: Tom Stöveken <tom@naaa.de>
* | | banip: update 0.8.4-2Dirk Brenken2023-04-28
| | | | | | | | | | | | | | | | | | | | | * fix domain lookup function (parse banIP config vars) * update readme Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | libreswan: update to 4.10Nick Hainke2023-04-27
| | | | | | | | | | | | | | | | | | | | | | | | Release Notes: https://github.com/libreswan/libreswan/releases/tag/v4.10 Fixes: CVE-2023-23009 Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | nginx: rename nginx-all-module to nginx-fullChristian Marangi2023-04-27
| | | | | | | | | | | | | | | | | | | | | Rename nginx-all-module to nginx-full to follow pattern used by other package and other projects. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | nginx: update to 1.24.0 and update headers-more moduleChristian Marangi2023-04-27
| | | | | | | | | | | | | | | | | | | | | Update nginx to 1.24.0 and update headers-more module to fix compilation error. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | nginx: update lua module to latest openresty versionChristian Marangi2023-04-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update lua module to latest openrestry version. Additional config are required to correctly use it. Switch it to luajit from liblua as this is what is currently supported for the module since plain lua support was dropped from the module. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Powered by cgit, Themed by Ted Yin.