aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* python-charset-normalizer: Update to 3.3.0Jeffery To2023-10-03
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* prometheus-node-exporter-lua: drop bmx6 packageJosef Schlehofer2023-10-03
| | | | | | | | | In the OpenWrt routing feed, package bmx6 and luci-app-bmx6 were removed because the LuCI app was vulnerable to several CVEs, as found by dependabot. It has been reporting it for a few months and has even created an issue. These two packages are not maintained in OpenWrt as well in upstream. Users should switch to the bmx7 package. Fixes: 9fb9d9343ea27d6dbb5008ece10c0c843dd2c781 ("bmx6: drop package") in the routing feed Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* python-bcrypt: Update to 4.0.1, add myself as maintainerJeffery To2023-10-02
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-pyopenssl: Update to 23.2.0Jeffery To2023-10-02
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* netavark: update to 1.8.0Oskari Rauta2023-10-02
| | | | | | | | | | | | changelog: - iptables: improve error when ip6?tables commands are missing - docs: Convert markdown with go-md2man instead of mandown - iptables: drop invalid packages - bump rust edition to 2021 - Add ACCEPT rules in firewall for bridge network with internal dns - Add vrf support for bridges Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* aardvark-dns: update to 1.8.0Oskari Rauta2023-10-02
| | | | | | | changes: - dependency updates Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* netbird: update to 0.23.6Oskari Rauta2023-10-02
| | | | | | | A lot of changes since previous packaged openwrt version of netbird, changes available at: https://github.com/netbirdio/netbird/releases Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* lua-eco: update to 3.0.0Jianhui Zhao2023-10-02
| | | | Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
* irssi: update to 1.4.4Fabian Lipken2023-10-01
| | | | | | | | update to 1.4.4 switch to meson remove obsolete patch Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
* podman: update to 4.7.0Oskari Rauta2023-10-01
| | | | | | A lot of changes. Changelog available at https://github.com/containers/podman/releases/tag/v4.7.0 Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* crun: update to 1.9.2Oskari Rauta2023-10-01
| | | | | | | | | | | | | changelog 1.9.2: - cgroup: reset the inherited cpu affinity after moving to cgroup. Old kernels do that automatically, but new kernels remember the affinity that was set before the cgroup move, so we need to reset it in order to honor the cpuset configuration. changelog 1.9.1: - utils: ignore ENOTSUP when chmod a symlink. It fixes a problem on Linux 6.6 that always refuses chmod on a symlink. - build: fix build on CentOS 7 - linux: add new fallback when mount fails with EBUSY, so that there is not an additional tmpfs mount if not needed. - utils: improve error message when a directory cannot be created as a component of the path is already existing as a non directory. Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* exim: apply hotfix for some ZDI reported vulnerabilitiesDaniel Golle2023-10-01
| | | | | | | Apply preliminary hotfix for some (three?) of the 0-day vulnerabilities reported by ZDI. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* Merge pull request #22254 from Ansuel/net-snmp-pcre2Stijn Tintel2023-09-30
|\ | | | | net-snmp: move to PCRE2 library
| * net-snmp: move to PCRE2 libraryChristian Marangi2023-09-30
|/ | | | | | | | | | Add upstream patch adding support for pcre2 and update dependency to require libpcre2 instead of libpcre. --with-pcre2-8 is now needed to exclude support for pcre and only require pcre2 as net-snmp still use and try to use pcre by default. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* Merge pull request #22241 from stangri/master-adblock-fastStan Grishin2023-09-29
|\ | | | | adblock-fast: better error reporting when nothing to do
| * adblock-fast: better error reporting when nothing to doStan Grishin2023-09-28
| | | | | | | | | | | | * also nicer file type output in high verbosity Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | kismet: drop the packageJosef Schlehofer2023-09-29
|/ | | | | | | | | | | This package is no longer maintained in OpenWrt even though it is maintained by upstream. The last update was done in August 2016 and because we have 2023, drop this package without replacement. If anyone from the community wants to step in and retake the maintainership together with the update, feel free to do it. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* openthread-br: fix actually buildingRosen Penev2023-09-28
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* mdnsresponder: move libdns_sd into own directoryRosen Penev2023-09-28
| | | | | | Prevents conflicts with avahi, which is better maintained. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* Merge pull request #22221 from stangri/master-adblock-fastStan Grishin2023-09-27
|\ | | | | adblock-fast: bugfix: better detect ABP lists
| * adblock-fast: bugfix: better detect ABP listsStan Grishin2023-09-26
| | | | | | | | | | | | | | | | | | | | | | | | * bugfix: better detect ABP lists * update Makefile with BUSYBOX features dependencies * update the type of dnsmasq_instance setting * add error message when file type can't be detected * add reporting when file type can't be detected * bugfix: include URL on errors related to URL processing/parsing * rename resolver function to resolver_config to better reflect its use Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | python-cryptography: Update to 41.0.4Jeffery To2023-09-27
| | | | | | | | | | | | | | | | | | | | This includes a patch to update the version of ouroboros (Rust crate) used, to fix RUSTSEC-2023-0042[1]. Upstream has switch from ouroboros to self_cell so this patch should only be necessary for cryptography 41. [1]: https://rustsec.org/advisories/RUSTSEC-2023-0042.html Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python: Add environment variables to build Rust extensionsJeffery To2023-09-27
| | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-setuptools-rust: Add new host-only packageJeffery To2023-09-27
| | | | | | | | | | | | | | | | | | From the README: setuptools-rust is a plugin for setuptools to build Rust Python extensions implemented with PyO3 or rust-cpython. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-semantic-version: Add new host-only packageJeffery To2023-09-27
| | | | | | | | | | | | | | | | | | From the README: This small python library provides a few tools to handle SemVer in Python. It follows strictly the 2.0.0 version of the SemVer scheme. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-typing-extensions: Update to 4.8.0Jeffery To2023-09-27
| | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-trove-classifiers: Update to 2023.9.19Jeffery To2023-09-27
| | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-setuptools: Update to 68.2.2Jeffery To2023-09-27
| | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | stunnel: update version to 5.71Florian Eckert2023-09-27
| | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | bind: bump to 9.18.19Noah Meyerhans2023-09-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes CVEs: CVE-2023-3341 - Previously, sending a specially crafted message over the control channel could cause the packet-parsing code to run out of available stack memory, causing named to terminate unexpectedly. CVE-2023-4236 - A flaw in the networking code handling DNS-over-TLS queries could cause named to terminate unexpectedly due to an assertion failure under significant DNS-over-TLS query load. Signed-off-by: Noah Meyerhans <frodo@morgul.net>
* | tailscale: Update to 1.50.0Zephyr Lykos2023-09-27
| | | | | | | | Signed-off-by: Zephyr Lykos <git@mochaa.ws>
* | apache: move to PCRE2Christian Marangi2023-09-27
| | | | | | | | | | | | | | Move apache to PCRE2 now that PCRE is flagged EOL and won't receive any security update. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | apache: bump to release 2.4.57Christian Marangi2023-09-27
| | | | | | | | | | | | Bump apache to release 2.4.57 and refresh patch automatically. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | libwebp: bump to version 1.3.2Alexandru Ardelean2023-09-27
| | | | | | | | | | | | | | | | | | | | From https://github.com/webmproject/libwebp/releases/tag/v1.3.2 - 9/13/2023: version 1.3.2 This is a binary compatible release. * security fix for lossless decoder (chromium: #1479274, CVE-2023-4863) Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
* | linuxptp: Bump to version 4.1Wojciech Dubowik2023-09-27
| | | | | | | | | | | | | | | | | | From release notes: "This release is the first of our regular quarterly releases. It includes a new feature (multi-domain synchronization for phc2sys) and several minor bug fixes. Users are encouraged to upgrade." Signed-off-by: Wojciech Dubowik <Wojciech.Dubowik@westermo.com>
* | snort3: update to 3.1.71.0John Audia2023-09-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Build system: x86/64 Build-tested: x86/64/AMD Cezanne Run-tested: x86/64/AMD Cezanne ,,_ -*> Snort++ <*- o" )~ Version 3.1.71.0 '''' By Martin Roesch & The Snort Team http://snort.org/contact#team Copyright (C) 2014-2023 Cisco and/or its affiliates. All rights reserved. Copyright (C) 1998-2013 Sourcefire, Inc., et al. Using DAQ version 3.0.12 Using LuaJIT version 2.1.0-beta3 Using OpenSSL 3.0.11 19 Sep 2023 Using libpcap version 1.10.4 (with TPACKET_V3) Using PCRE version 8.45 2021-06-15 Using ZLIB version 1.2.13 Using Hyperscan version 5.4.2 2023-09-23 Signed-off-by: John Audia <therealgraysky@proton.me>
* | Merge pull request #22187 from mhei/php8-pecl-redis-update-to-6.0.0Michael Heimpold2023-09-27
|\ \ | | | | | | php8-pecl-redis: update to 6.0.1
| * | php8-pecl-redis: update to 6.0.1Michael Heimpold2023-09-25
| | | | | | | | | | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | Merge pull request #22194 from neocturne/ovs-masterMatthias Schiffer2023-09-27
|\ \ \ | | | | | | | | openvswitch: disable groff manpage check
| * | | openvswitch: disable groff manpage checkMatthias Schiffer2023-09-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The openvswitch build trips over a number of warnings during the manpage-check step if groff 1.23 is installed on the build host, resulting in a failed build. As this check is optional, and we don't even install the manpages, simply override the groff configure check to never detect groff. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* | | | modemmanger: bump PKG_RELEASEFlorian Eckert2023-09-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The PKG_RELEASE was not incremented during the last merge, the commit shows that it is incremented by one, but this was already done during the last change. Very strange. Hence this commit which increments PKG_RELEASE by one. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | Merge pull request #21993 from osedl/pr/20230901-modemmanager-hardcoded-protoFlorian Eckert2023-09-27
|\ \ \ \ | | | | | | | | | | modemmanager: Remove hardcoded proto check
| * | | | modemmanager: Remove hardcoded proto checkOliver Sedlbauer2023-09-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Modified the code to correctly determine modem availability based on the sysfs path provided in the 'device' option, instead of relying on the 'proto' value. This ensures proper configuration for custom-made protos that do not match the "modemmanager" identifier. Signed-off-by: Oliver Sedlbauer <osedlbauer@tdt.de>
* | | | | tunneldigger: set PKG_SOURCE_DATEMatthias Schiffer2023-09-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | opkg requires monotonically increasing version numbers to know which version of a package is newer. As git commit IDs do not satisfy this condition, PKG_SOURCE_DATE must be set to the date of the referenced commit, resulting in the complete version number '2021-03-08-4f72b305-1'. As the source date also becomes part of the paths inside the download archive, the source hash must be updated as well. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* | | | | tunneldigger: add group option to UCI configMatthias Schiffer2023-09-27
| |_|_|/ |/| | | | | | | | | | | | | | | | | | | The group can be used for policy routing and similar purposes. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* | | | Merge pull request #22158 from TDT-AG/pr/20230920-mwan3Florian Eckert2023-09-26
|\ \ \ \ | | | | | | | | | | mwan3: update ubus and status view
| * | | | mwan3: refactoring mwan3_report_iface_status outputFlorian Eckert2023-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The tracking and interface status was mixed up in the report. To fix this, the interface status and the tracking status are now used directly. The online, uptime and error information are appended to the status line if needed. If certain routing tables and routing rules are missing, the error number is also given. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | mwan3: also show tracker state via ubusFlorian Eckert2023-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The tracker state is not shown via ubus. Only if the tracker was in active state, then the boolean running was set or not. By adding the tracking state to the ubus information we could also evaluate the state of the tracker. To remain compatible, the runnig flag of the tracker is not removed, which in fact displays the same information, but only if the tracker is in state 'active' or not. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | mwan3: rename tracking state from 'not enabled' to 'disabled'Florian Eckert2023-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The expression 'disabled' is more meaningful than 'not enabled' and can therefore be better processed in the ubus output, since it is only one word. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | mwan3: remove notracking in mwan3track ubus statusFlorian Eckert2023-09-20
| | |/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The function 'get_mwan3_status' is reading the internal state from the tracker via the status file. Do not use the state 'notracking' status anymore. If the mwan3track is not running always return 'unknown' and not 'notracking'. There is already an other function that evaluates the external state of the tracker. We have now the following states of the tracker: internal (mwan3track): - offline - online - diconnecting - connecting - disabled - unknown external (via pgrep and config): - paused - active - down - not enabled Signed-off-by: Florian Eckert <fe@dev.tdt.de>