aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* | | | tailscale: Update to 1.48.1Zephyr Lykos2023-08-24
| | | | | | | | | | | | | | | | Signed-off-by: Zephyr Lykos <git@mochaa.ws>
* | | | net/mosquitto: bump to 2.0.17Karl Palsson2023-08-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a security and bug fix release. Security: - CVE-2023-28366: Fix memory leak in broker when clients send multiple QoS 2 messages with the same message ID, but then never respond to the PUBREC commands. - CVE-2023-0809: Fix excessive memory being allocated based on malicious initial packets that are not CONNECT packets. - CVE-2023-3592: Fix memory leak when clients send v5 CONNECT packets with a will message that contains invalid property types. - Broker will now reject Will messages that attempt to publish to $CONTROL/. - Broker now validates usernames provided in a TLS certificate or TLS-PSK identity are valid UTF-8. - Fix potential crash when loading invalid persistence file. - Library will no longer allow single level wildcard certificates, e.g. *.com Bugfixes of note or relevance to OpenWrt: - Fix bridges with non-matching cleansession/local_cleansession being expired on start after restoring from persistence. Closes #2634. Client library: - Use CLOCK_BOOTTIME when available, to keep track of time. This solves the problem of the client OS sleeping and the client hence not being able to calculate the actual time for keepalive purposes. Closes #2760. Full changelog available at: https://github.com/eclipse/mosquitto/blob/v2.0.16/ChangeLog.txt plus: https://github.com/eclipse/mosquitto/blob/v2.0.17/ChangeLog.txt (2.0.17 fixes regressions from the 2.0.16 release) Signed-off-by: Karl Palsson <karlp@tweak.au>
* | | | v2ray-core: backport upstream Go 1.21 updatesTianling Shen2023-08-23
| | | | | | | | | | | | | | | | | | | | | | | | Fix build for Go 1.21. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | mdio-tools: update to 1.3.0Zhi-Jun You2023-08-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update the mdio-netlink kmod and userspace mdio-tools to version 1.3.0. [v1.3.0] - 2023-07-24 --------------------- Primarily widen the gamut of supported kernel versions, now supporting all kernels from 5.2 and onwards. - mvls: Support for 88E6320/88E6321 - mdio-netlink: Adapt to the upstream C22/C45 refactor. Signed-off-by: Zhi-Jun You <hujy652@protonmail.com>
* | | | bottom: New packageLuca Barbato2023-08-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Bottom is a top/htop workalike with few additional features, written in rust. Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
* | | | natmap: update to 20230820Ray Wang2023-08-23
| | | | | | | | | | | | | | | | Signed-off-by: Ray Wang <r@hev.cc>
* | | | sqm-scripts: Bump to v1.6.0Toke Høiland-Jørgensen2023-08-22
| | | | | | | | | | | | | | | | | | | | | | | | Fixes an issue with DSA switch compatibility Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* | | | Merge pull request #21874 from thess/unbound-SSL-workaroundTed Hess2023-08-21
|\ \ \ \ | | | | | | | | | | Unbound: Silence SSL unexpected eof messages
| * | | | Unbound: Silence SSL unexpected eof messagesTed Hess2023-08-21
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Refs: https://github.com/NLnetLabs/unbound/issues/812 https://github.com/NLnetLabs/unbound/issues/846 This is a backport of: https://github.com/NLnetLabs/unbound/commit/d7e7761 and can be removed with the next release/update of the Unbound package Signed-off-by: Ted Hess <thess@kitschensync.net>
* | | | Merge pull request #21882 from dobo90/adguardhome_0.107.36Hannu Nyman2023-08-21
|\ \ \ \ | | | | | | | | | | adguardhome: update to 0.107.36 and fix compilation with Go 1.21
| * | | | adguardhome: update quic-go to v0.37.6Dobroslaw Kijowski2023-08-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * quic-go v0.36.x cannot be compiled with Go 1.21. Update that AdGuardHome dependency to latest one from v0.37 series. * It fixes following compilation error: go-mod-cache/github.com/quic-go/quic-go@v0.36.2/internal/qtls/go121.go:5:13: cannot use "The version of quic-go you're using can't be built on Go 1.21 yet. For more details, please see https://github. com/quic-go/quic-go/wiki/quic-go-and-Go-versions." (untyped string constant "The version of quic-go you're using can't be built on Go 1.21 yet. Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
| * | | | adguardhome: update to v0.107.36Hannu Nyman2023-08-21
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Full changelog available at: * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.34 * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.35 * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.36 Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi> [ Reword commit message ] Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
* / / / tailscale: Update to 1.48.0Zephyr Lykos2023-08-21
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | Everything is working on pure upstream code. Patching is not longer needed. Added entire /etc/tailscale/ directory to conffiles for persistent ssh host key & https certificate across sysupgrades. Signed-off-by: Zephyr Lykos <git@mochaa.ws>
* | | yq: Update to 4.35.1Tianling Shen2023-08-20
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | tunneldigger-broker: update to v0.4.0Perry Melange2023-08-20
| | | | | | | | | | | | | | | | | | Include new hook script to build Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>
* | | tunneldigger-broker: add rate-limit hookPerry Melange2023-08-20
| | | | | | | | | | | | Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>
* | | tunneldigger-broker: add option to isolate bridge portsPerry Melange2023-08-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add new option to a config bridge section to indicate if a bridge port added to the bridge should be isolated or not. The default is 0 (no isolation). example config bridge option interface 'br-mybridge1446' option mtu '1446' option isolate '1' # default '0' Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>
* | | tunneldigger-broker: update lib functionsPerry Melange2023-08-20
| | | | | | | | | | | | | | | | | | Use config_foreach instead of config_cb Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>
* | | tunneldigger-broker: update config file and init for v0.4.0Perry Melange2023-08-20
| | | | | | | | | | | | Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>
* | | rust: correct mistake in previous host-build fixJonas Jelonek2023-08-19
| |/ |/| | | | | | | | | | | | | | | | | | | Fixes the commit 105fa3920e which was intended to make rust/host build on aarch64 darwin working again. However, the fix contains a mistake because it sets RUSTC_TARGET_ARCH instead of RUSTC_HOST_ARCH. Thus, the fix doesn't work. This properly sets the correct variable RUSTC_HOST_ARCH. Fixes: 105fa3920e ("rust: fix host build on aarch64 darwin") Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
* | syncthing: disable quic to support GO 1.21Van Waholtz2023-08-18
| | | | | | | | Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
* | syncthing: update to 1.23.7Van Waholtz2023-08-18
| | | | | | | | Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
* | sing-box: update to 1.4.0-beta.5Van Waholtz2023-08-18
| | | | | | | | | | | | Add support for GO 1.21. Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
* | lua-eco: update to 2.4.0Jianhui Zhao2023-08-18
| | | | | | | | Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
* | libyang: update to 2.1.80Lucian Cristian2023-08-17
| | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | python-trove-classifiers: Update to 2023.8.7Jeffery To2023-08-17
| | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-psycopg2: Update to 2.9.7, update list of dependenciesJeffery To2023-08-17
| | | | | | | | | | | | This also adds a source package (python-psycopg2-src). Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-msgpack: Update to 1.0.5, add host Cython dependencyJeffery To2023-08-17
| | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-psutil: Update to 5.9.5, replace patchJeffery To2023-08-17
| | | | | | | | | | | | | | | | | | | | | | 100_add_cross_platform_build_ability.patch was submitted upstream in https://github.com/giampaolo/psutil/pull/2068, but that pull request was closed without being merged. This replaces that patch with a simpler version that only updates setup.py, leaving the run-time library code unchanged. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-more-itertools: Update to 10.1.0Jeffery To2023-08-17
| | | | | | | | | | | | The package has changed to the flit-core build backend. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-markdown: Update to 3.4.4, update list of dependenciesJeffery To2023-08-17
| | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-distro: Update to 1.8.0Jeffery To2023-08-17
| | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | frr: updat to 9.0Lucian Cristian2023-08-17
| | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | frp: update to 0.51.3Van Waholtz2023-08-17
| | | | | | | | | | | | Includes some bug fixes and adds support for GO 1.21. Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
* | rust: fix host build on aarch64 darwinJonas Jelonek2023-08-17
| | | | | | | | | | | | | | | | | | | | | | | | rust/host failed to compile on macOS running on Apple Silicon M1 Pro because the host target triple is autogenerated to be 'arm64-unknown-linux-'. Rust doesn't have such a target triple, thus the build failes because there are no pre-built artifacts for bootstrapping. Fix this by setting RUSTC_HOST_ARCH to 'aarch64-apple-darwin' in case our host is HOST_ARCH=arm64 and HOST_OS=darwin. Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
* | Merge pull request #21839 from mhei/php8-fix-riscv64Michael Heimpold2023-08-17
|\ \ | | | | | | php8: fix linking on riscv64 platform (again)
| * | php8: fix linking on riscv64 platform (again)Michael Heimpold2023-08-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The initial fix was done in a2e76e497. Later we could revert it with 5779ae4c5 since a global fix in gcc was deployed. But now, PHP itself applied a workaround/fix in 8.2.8, so that we now require the initial fix again. Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | Merge pull request #21828 from stangri/master-simple-adblockStan Grishin2023-08-16
|\ \ \ | |/ / |/| | simple-adblock: bugfixes for uci_load_validate
| * | simple-adblock: bugfixes for uci_load_validateStan Grishin2023-08-15
| |/ | | | | | | | | | | | | * fix validation for force_dns_port when missing in config * fix validation for dns_instance when * or - are used Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | Merge pull request #21766 from TDT-AG/pr/20230808-modemmanagerFlorian Eckert2023-08-16
|\ \ | | | | | | modemmanager: setting allowed and preferred mode
| * | modemmanager: add setting for allowed and preferred modeFlorian Eckert2023-08-09
| | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | modemmanager: remove unneeded teardown error reportingFlorian Eckert2023-08-09
| | | | | | | | | | | | | | | | | | | | | Teardown error reporting is not needed, bacause it overrides init error reporting. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | modemmanager: fix white spacesFlorian Eckert2023-08-09
| | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | python3-ble2mqtt: update to 0.1.8Quintin Hill2023-08-16
| | | | | | | | | | | | Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
* | | python3-dbus-fast: update to 1.91.2Quintin Hill2023-08-16
| | | | | | | | | | | | | | | | | | The patch is no longer required as host setuptools is now new enough. Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
* | | python3-aio-mqtt-mod: update to 0.3.4Quintin Hill2023-08-16
| | | | | | | | | | | | | | | | | | python3-openssl is now optional. Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
* | | dnslookup: Update to 1.9.2Tianling Shen2023-08-16
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | dnsproxy: Update to 0.54.0Tianling Shen2023-08-16
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | qemu: enable host support for armsr/armv8Mathew McBride2023-08-16
| |/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As of OpenWrt main branch commit e505873e65f72 ("armsr: armv8: enable KVM host") [merged 2023-08-15], armsr/armv8 has KVM host support. We can now enable QEMU host for this target. For example, you can run OpenWrt armsr/armv8 as a guest like so: qemu-system-aarch64 -nographic -M virt -cpu host --enable-kvm \ -bios u-boot.bin -smp 1 -m 1024 \ -drive file=openwrt-armsr-armv8-generic-ext4-combined.img,format=raw,index=0,media=disk A compatible u-boot.bin can be obtained from u-boot-qemu_armv8/u-boot.bin that is built with the armsr target and available from downloads.openwrt.org. Signed-off-by: Mathew McBride <matt@traverse.com.au>
* | tgt: update to 1.0.87Maxim Storchak2023-08-15
| | | | | | | | Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
Powered by cgit, Themed by Ted Yin.