aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* Werkzeug: update to version 2.2.2Daniel Golle2022-12-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Version 2.2.2 Released 2022-08-08 Fix router to restore the 2.1 strict_slashes == False behaviour whereby leaf-requests match branch rules and vice versa. pallets/werkzeug#2489 Fix router to identify invalid rules rather than hang parsing them, and to correctly parse / within converter arguments. pallets/werkzeug#2489 Update subpackage imports in werkzeug.routing to use the import as syntax for explicitly re-exporting public attributes. pallets/werkzeug#2493 Parsing of some invalid header characters is more robust. pallets/werkzeug#2494 When starting the development server, a warning not to use it in a production deployment is always shown. pallets/werkzeug#2480 LocalProxy.__wrapped__ is always set to the wrapped object when the proxy is unbound, fixing an issue in doctest that would cause it to fail. pallets/werkzeug#2485 Address one ResourceWarning related to the socket used by run_simple. pallets/werkzeug#2421 Version 2.2.1 Released 2022-07-27 Fix router so that /path/ will match a rule /path if strict slashes mode is disabled for the rule. pallets/werkzeug#2467 Fix router so that partial part matches are not allowed i.e. /2df does not match /<int>. pallets/werkzeug#2470 Fix router static part weighting, so that simpler routes are matched before more complex ones. pallets/werkzeug#2471 Restore ValidationError to be importable from werkzeug.routing. pallets/werkzeug#2465 Version 2.2.0 Released 2022-07-23 Deprecated get_script_name, get_query_string, peek_path_info, pop_path_info, and extract_path_info. pallets/werkzeug#2461 Remove previously deprecated code. pallets/werkzeug#2461 Add MarkupSafe as a dependency and use it to escape values when rendering HTML. pallets/werkzeug#2419 Added the werkzeug.debug.preserve_context mechanism for restoring context-local data for a request when running code in the debug console. pallets/werkzeug#2439 Fix compatibility with Python 3.11 by ensuring that end_lineno and end_col_offset are present on AST nodes. pallets/werkzeug#2425 Add a new faster matching router based on a state machine. pallets/werkzeug#2433 Fix branch leaf path masking branch paths when strict-slashes is disabled. pallets/werkzeug#1074 Names within options headers are always converted to lowercase. This matches RFC 6266 that the case is not relevant. pallets/werkzeug#2442 AnyConverter validates the value passed for it when building URLs. pallets/werkzeug#2388 The debugger shows enhanced error locations in tracebacks in Python 3.11. pallets/werkzeug#2407 Added Sans-IO is_resource_modified and parse_cookie functions based on WSGI versions. pallets/werkzeug#2408 Added Sans-IO get_content_length function. pallets/werkzeug#2415 Don’t assume a mimetype for test responses. pallets/werkzeug#2450 Type checking FileStorage accepts os.PathLike. pallets/werkzeug#2418 Version 2.1.2 Released 2022-04-28 The development server does not set Transfer-Encoding: chunked for 1xx, 204, 304, and HEAD responses. pallets/werkzeug#2375 Response HTML for exceptions and redirects starts with <!doctype html> and <html lang=en>. pallets/werkzeug#2390 Fix ability to set some cache_control attributes to False. pallets/werkzeug#2379 Disable keep-alive connections in the development server, which are not supported sufficiently by Python’s http.server. pallets/werkzeug#2397 Version 2.1.1 Released 2022-04-01 ResponseCacheControl.s_maxage converts its value to an int, like max_age. pallets/werkzeug#2364 Version 2.1.0 Released 2022-03-28 Drop support for Python 3.6. pallets/werkzeug#2277 Using gevent or eventlet requires greenlet>=1.0 or PyPy>=7.3.7. werkzeug.locals and contextvars will not work correctly with older versions. pallets/werkzeug#2278 Remove previously deprecated code. pallets/werkzeug#2276 Remove the non-standard shutdown function from the WSGI environ when running the development server. See the docs for alternatives. Request and response mixins have all been merged into the Request and Response classes. The user agent parser and the useragents module is removed. The user_agent module provides an interface that can be subclassed to add a parser, such as ua-parser. By default it only stores the whole string. The test client returns TestResponse instances and can no longer be treated as a tuple. All data is available as properties on the response. Remove locals.get_ident and related thread-local code from locals, it no longer makes sense when moving to a contextvars-based implementation. Remove the python -m werkzeug.serving CLI. The has_key method on some mapping datastructures; use key in data instead. Request.disable_data_descriptor is removed, pass shallow=True instead. Remove the no_etag parameter from Response.freeze(). Remove the HTTPException.wrap class method. Remove the cookie_date function. Use http_date instead. Remove the pbkdf2_hex, pbkdf2_bin, and safe_str_cmp functions. Use equivalents in hashlib and hmac modules instead. Remove the Href class. Remove the HTMLBuilder class. Remove the invalidate_cached_property function. Use del obj.attr instead. Remove bind_arguments and validate_arguments. Use Signature.bind() and inspect.signature() instead. Remove detect_utf_encoding, it’s built-in to json.loads. Remove format_string, use string.Template instead. Remove escape and unescape. Use MarkupSafe instead. The multiple parameter of parse_options_header is deprecated. pallets/werkzeug#2357 Rely on PEP 538 and PEP 540 to handle decoding file names with the correct filesystem encoding. The filesystem module is removed. pallets/werkzeug#1760 Default values passed to Headers are validated the same way values added later are. pallets/werkzeug#1608 Setting CacheControl int properties, such as max_age, will convert the value to an int. pallets/werkzeug#2230 Always use socket.fromfd when restarting the dev server. pallets/werkzeug#2287 When passing a dict of URL values to Map.build, list values do not filter out None or collapse to a single value. Passing a MultiDict does collapse single items. This undoes a previous change that made it difficult to pass a list, or None values in a list, to custom URL converters. pallets/werkzeug#2249 run_simple shows instructions for dealing with “address already in use” errors, including extra instructions for macOS. pallets/werkzeug#2321 Extend list of characters considered always safe in URLs based on RFC 3986. pallets/werkzeug#2319 Optimize the stat reloader to avoid watching unnecessary files in more cases. The watchdog reloader is still recommended for performance and accuracy. pallets/werkzeug#2141 The development server uses Transfer-Encoding: chunked for streaming responses when it is configured for HTTP/1.1. pallets/werkzeug#2090, pallets/werkzeug#1327, pallets/werkzeug#2091 The development server uses HTTP/1.1, which enables keep-alive connections and chunked streaming responses, when threaded or processes is enabled. pallets/werkzeug#2323 cached_property works for classes with __slots__ if a corresponding _cache_{name} slot is added. pallets/werkzeug#2332 Refactor the debugger traceback formatter to use Python’s built-in traceback module as much as possible. pallets/werkzeug#1753 The TestResponse.text property is a shortcut for r.get_data(as_text=True), for convenient testing against text instead of bytes. pallets/werkzeug#2337 safe_join ensures that the path remains relative if the trusted directory is the empty string. pallets/werkzeug#2349 Percent-encoded newlines (%0a), which are decoded by WSGI servers, are considered when routing instead of terminating the match early. pallets/werkzeug#2350 The test client doesn’t set duplicate headers for CONTENT_LENGTH and CONTENT_TYPE. pallets/werkzeug#2348 append_slash_redirect handles PATH_INFO with internal slashes. pallets/werkzeug#1972, pallets/werkzeug#2338 The default status code for append_slash_redirect is 308 instead of 301. This preserves the request body, and matches a previous change to strict_slashes in routing. pallets/werkzeug#2351 Fix ValueError: I/O operation on closed file. with the test client when following more than one redirect. pallets/werkzeug#2353 Response.autocorrect_location_header is disabled by default. The Location header URL will remain relative, and exclude the scheme and domain, by default. pallets/werkzeug#2352 Request.get_json() will raise a 400 BadRequest error if the Content-Type header is not application/json. This makes a very common source of confusion more visible. pallets/werkzeug#2339 Version 2.0.3 Released 2022-02-07 ProxyFix supports IPv6 addresses. pallets/werkzeug#2262 Type annotation for Response.make_conditional, HTTPException.get_response, and Map.bind_to_environ accepts Request in addition to WSGIEnvironment for the first parameter. pallets/werkzeug#2290 Fix type annotation for Request.user_agent_class. pallets/werkzeug#2273 Accessing LocalProxy.__class__ and __doc__ on an unbound proxy returns the fallback value instead of a method object. pallets/werkzeug#2188 Redirects with the test client set RAW_URI and REQUEST_URI correctly. pallets/werkzeug#2151 Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* MarkupSafe: update to version 2.1.1Daniel Golle2022-12-22
| | | | | | | | Version 2.1.1 Released 2022-03-14 Avoid ambiguous regex matches in striptags. pallets/markupsafe#293 Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* libsoup3: update to 3.2.2W. Michael Petullo2022-12-22
| | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* libsoup: update to 2.74.3W. Michael Petullo2022-12-22
| | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* openldap: update to 2.6.3W. Michael Petullo2022-12-22
| | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* quota: update to 4.09W. Michael Petullo2022-12-22
| | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* hwloc: update to 2.8.0W. Michael Petullo2022-12-22
| | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* pigeonhole: update to 0.5.19W. Michael Petullo2022-12-22
| | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* lxc: Remove AUTORELEASEHauke Mehrtens2022-12-22
| | | | | | The previous version used PKG_RELEASE:=3. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* lxc: Fix compilation with glibc 2.36Hauke Mehrtens2022-12-22
| | | | | | | | | | | Backport patches from upstream lxc master to fix compilation against glibc 2.36. The changes were added in these pull requests: https://github.com/lxc/lxc/pull/4179 https://github.com/lxc/lxc/pull/4181 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* snort3: update to 3.1.50.0John Audia2022-12-22
| | | | | | | | | | Upstream bump Build system: x86_64 Build-tested: bcm2711/RPi4B Run-tested: bcm2711/RPi4B Signed-off-by: John Audia <therealgraysky@proton.me>
* snort3: update to 3.1.49.0John Audia2022-12-22
| | | | | | | | | | Upstream bump Build system: x86_64 Build-tested: bcm2711/RPi4B Run-tested: bcm2711/RPi4B Signed-off-by: John Audia <therealgraysky@proton.me>
* snort3: minor tweaks to local.luaJohn Audia2022-12-22
| | | | | | | | | * Use Boolean true for enable inline mode which is more intuitive that older '' * Add skeleton section for openappid since it has been merged[1] 1. https://github.com/openwrt/packages/commit/2d4e7d5fd343652d0852337184d56522ef5af83d Signed-off-by: John Audia <therealgraysky@proton.me>
* motion: add gettext as host dependencyRobert N2022-12-22
| | | | Signed-off-by: Robert N <nrobert13@gmail.com>
* luasec: update to 1.2.0W. Michael Petullo2022-12-22
| | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* node: bump to v16.19.0Hirokazu MORIKAWA2022-12-22
| | | | | | | | | Notable Changes *OpenSSL 1.1.1s *Root certificates updated to NSS 3.85 *Time zone update to 2022f Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
* luaexpat: update to 1.5.1W. Michael Petullo2022-12-22
| | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* nfdump: update to 1.6.25W. Michael Petullo2022-12-22
| | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* vips: update to 8.13.3W. Michael Petullo2022-12-22
| | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* Merge pull request #20158 from stangri/master-pbrStan Grishin2022-12-22
|\ | | | | pbr: bugfix: Makefile, rt_tables fix
| * pbr: bugfix: Makefile, rt_tables fixStan Grishin2022-12-22
|/ | | | Signed-off-by: Stan Grishin <stangri@melmac.ca>
* uacme: Remove deprecated $(AUTORELEASE)Antti Seppälä2022-12-22
| | | | Signed-off-by: Antti Seppälä <a.seppala@gmail.com>
* uacme: Use UCI to configure firewall instead of iptablesAntti Seppälä2022-12-22
| | | | | | | | | Use UCI to add temporary incoming firewall rule to accept http traffic for challenge verification. This should make uacme compatible with OpenWrt's fw3/4 implementation. Signed-off-by: Antti Seppälä <a.seppala@gmail.com>
* docker-compose: Update to version 2.14.2Javier Marcet2022-12-22
| | | | Signed-off-by: Javier Marcet <javier@marcet.info>
* Merge pull request #20150 from ysc3839/natmap-fixTianling Shen2022-12-22
|\ | | | | natmap: add forward_port option
| * natmap: add forward_port optionRichard Yu2022-12-21
| | | | | | | | | | | | | | The bind port (-b) can be used with forward port (-p), so expose this option in config file. Signed-off-by: Richard Yu <yurichard3839@gmail.com>
* | python3: fix ssl support by removing libressl patchesNick Hainke2022-12-21
|/ | | | | | | | | | Remove libressl specific patches. With commit ("tools/libressl: update to 3.7.0") they are no longer needed, rather they cause python3 to be compiled without working ssl-support. Fixes: #20107 Suggested-by: Andre Heider <a.heider@gmail.com> Signed-off-by: Nick Hainke <vincent@systemli.org>
* emailrelay: update to v2.4.1Sergey Ponomarev2022-12-20
| | | | | | | The patch seems not needed anymore. Also remove deprecated PKG_RELEASE:=$(AUTORELEASE) Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* unbound: fix local_subnet for IPv6 addresses that contain a portMark Mentovai2022-12-20
| | | | | | | | | | | This prevents a forwarding server named like ::1@5453 from being added to unbound.conf as a forward-host instead of the correct forward-addr. forward-host requires the name to be resolved, which is impossible in the absence of another nameserver. Thus, forwarding-only configurations referencing only the IPv6 loopback address with a port number were broken. Signed-off-by: Mark Mentovai <mark@mentovai.com>
* perl-mail-spamassassin: update to version 4.0.0Daniel Golle2022-12-20
| | | | | | | Apache SpamAssassin -- Version 4.0.0 See https://lwn.net/Articles/918145/ for details Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* postgresql: update to version 14.6Daniel Golle2022-12-20
| | | | | | | | This release contains a variety of fixes from 14.5. See https://www.postgresql.org/docs/release/14.6/ for details. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* gawk: update to version 5.2.1Daniel Golle2022-12-20
| | | | | | | | | | | | | | | | | | | | | | | | | | Changes from 5.2.0 to 5.2.1 --------------------------- 1. Infrastructure upgrades: PMA version Avon 8. 2. Issues related to the sign of NaN and Inf values on RiscV have been fixed; gawk now gives identical results on that platform as it does on others. 3. A few issues with the debugger have been fixed. 4. More subtle issues with untyped array elements being passed to functions have been fixed. 5. The rwarray extension's readall() function has had some bugs fixed. 6. The PMA allocator is now supported on FreeBSD, OpenBSD and Linux on S/390x. Is is now supported also on both Intel and M1 macOS systems. 7. There have been several minor code cleanups and bug fixes. See the ChangeLog for details. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* cni-plugins: update to version 1.1.1Daniel Golle2022-12-20
| | | | | | For details see https://github.com/containernetworking/plugins/releases Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* cni: update to version 1.1.2Daniel Golle2022-12-20
| | | | | | For details see https://github.com/containernetworking/cni/releases Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* ccid: update to version 1.5.1Daniel Golle2022-12-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 1.5.1 - 14 November 2022, Ludovic Rousseau Add support of Access IS ATR220 with idProduct: 0x0184 Alcor Link AK9567 Alcor Link AK9572 BLUTRONICS TAURUS NFC CHERRY SmartTerminal ST-1144 CREATOR CRT-603(CZ1) CCR Dexon Tecnologias Digitais LTDA DXToken ESMART Reader ER433x ICC ESMART Reader ER773x Dual & 1S Flight system consulting Incredist Ledger Nano S Ledger Nano S Plus Ledger Nano SP Ledger Nano X SafeNet eToken Fusion Sensyl SSC-NFC Reader Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR configure.ac: add --enable-strict option Fix a problem with AUTO PPS readers and ATR convention inverse cards examples/scardcontrol: - add support of 6A xx error codes - check WinSCard error early - parse wLcdLayout & bEntryValidationCondition macOS: log non sensitive strings as "%{public}s" Some other minor improvements What's Changed Fix debug logging of lang in ccid.c in LudovicRousseau/CCID#96 Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* cryptsetup: update to version 2.6.0Daniel Golle2022-12-20
| | | | | | | | | Update to new major release of cryptsetup. For details, please see the release notes[1]. [1]: https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.6/v2.6.0-ReleaseNotes Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* lvm2: update LVM2 to 2.03.17 and DM to 1.02.187Daniel Golle2022-12-20
| | | | | | | | | | | | | | | | | | | | | | | | | | Version 2.03.17 - 10th November 2022 ==================================== Add new options (--fs, --fsmode) for FS handling when resizing LVs. Fix 'lvremove -S|--select LV' to not also remove its historical LV right away. Fix lv_active field type to binary so --select and --binary applies properly. Switch to use mallinfo2 and use it only with glibc. Error out in lvm shell if using a cmd argument not supported in the shell. Fix lvm shell's lastlog command to report previous pre-command failures. Extend VDO and VDOPOOL without flushing and locking fs. Add --valuesonly option to lvmconfig to print only values without keys. Updates configure with recent autoconf tooling. Fix lvconvert --test --type vdo-pool execution. Add json_std output format for more JSON standard compliant version of output. Fix vdo_slab_size_mb value for converted VDO volume. Fix many corner cases in device_id, including handling of S/N duplicates. Fix various issues in lvmdbusd. libdm changes: Version 1.02.187 - 10th November 2022 ===================================== Add DM_REPORT_GROUP_JSON_STD for more JSON standard compliant output format. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* libowfat: update to version 0.33Daniel Golle2022-12-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove no longer needed downstream patches. Changes since 0.32: add byte_start, byte_starts add a man page for byte_equal_notimingattack buffer_seek is no longer limited to the current buffer contents add automated way to run unit test: make check add parse.h add bytestream abstraction for parsing data from a buffer or a file add compiler.h to abstract gcc attributes add fmt_strm_malloc add cross references to open_* and mmap_* man pages add fmt_strm_alloca and fmt_strm_malloc man pages add buffer_init_allocbuf, buffer_init_read, buffer_init_write, buffer_init_read_allocbuf, buffer_init_write_allocbuf fix buffer overread for len=0 in scan_longn (Martin Castillo) add iob_write2 with sendfile callback so caller can use OpenSSL's SSL_sendfile Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* exfatprogs: update to version 1.2.0Daniel Golle2022-12-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | CHANGES: * fsck.exfat: Keep traveling files even if there is a corrupted directory entry set. * fsck.exfat: Introduce the option "b" to recover a boot sector even if an exFAT filesystem is not found. * fsck.exfat: Introduce the option "s" to create files in "/LOST+FOUND", which have clusters allocated but was not belonged to any files. * fsck.exfat: Rename '.' and '..' entry name to the one user want. NEW FEATURES: * fsck.exfat: Repair corruptions of an exFAT filesystem. Please refer to fsck.exfat manpage to see what kind of corruptions can be repaired. * exfat2img: Dump metadata of an exFAT filesystem. Please refer to exfat2img manpage to see how to use it. BUG FIXES: * fsck.exfat: Fix an infinite loop while traveling files. * tune.exfat: Fix bitmap entry corruption when adding new volume lablel. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* Merge pull request #20108 from stangri/master-pbrStan Grishin2022-12-19
|\ | | | | pbr: update to 1.0.1-1
| * pbr: update to 1.0.1-1Stan Grishin2022-12-19
| | | | | | | | | | | | | | | | | | | | * add more error/warning messages * better return statements from ips/nftset functions * better error/warning handling when inserting policies * comment out unnecessary nft set/ipst clean ups * shellchecked status functions Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | Merge pull request #20099 from tohojo/fix-flent-pkgToke Høiland-Jørgensen2022-12-19
|\ \ | | | | | | flent: fixup flent package
| * | flent: Integrate flent-tools into the flent packageToke Høiland-Jørgensen2022-12-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Now that we're packaging flent itself, there's no reason to have a completely separate flent-tools package. So integrate the flent-tools package specification into the main flent package so it's always kept in sync. Also add a dependency from flent itself on flent-tools, as the shell versions of those utilities that Flent uses when running tests doesn't work on the busybox shell included with openwrt. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
| * | flent: Rename and update packageToke Høiland-Jørgensen2022-12-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update the Flent package and move it to net/, renaming it to just 'flent' instead of python3-flent (it's not a library, having the python3- prefix makes no sense). Also add python3-defusedxml as a dependency to protect against XML bombs if using the one of the backends that use XML-RPC, and trim the dependencies to those used directly by Flent. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* | | Merge pull request #20103 from graysky2/libdaq3Florian Eckert2022-12-19
|\ \ \ | | | | | | | | libdaq3: update to 3.0.10
| * | | libdaq3: update to 3.0.10John Audia2022-12-18
| | | | | | | | | | | | | | | | | | | | | | | | Upstream bump Signed-off-by: John Audia <therealgraysky@proton.me>
* | | | mwan3: make mwan3.user executableFlorian Eckert2022-12-19
| |_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a fix for the the following change: https://github.com/openwrt/packages/commit/3d824ea288d907a31729c3629e884ea122c30da0 Before the change, it was only possible to execute a shell script. To remove this restriction, a binary or other script language can now also be used for 'mwan3.user'. Unfortunately, the old shell script was not executable for older mwan3 version. During a sysupgrade with config transfer, this 'mwan3.user' script could not be executed for newer mwan3 versions. To fix this, the calling script checks whether the 'mwan3.user' is executable, and if not, this executable bit is now set. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | tor: bump to 0.4.7.12 stableRui Salvaterra2022-12-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Quoting the changelog: Changes in version 0.4.7.12 - 2022-12-06 This version contains a major change that is a new key for moria1. Also, new metrics are exported on the MetricsPort for the congestion control subsystem. o Directory authority changes (moria1): - Rotate the relay identity key and v3 identity key for moria1. They have been online for more than a decade and refreshing keys periodically is good practice. Advertise new ports too, to avoid confusion. Closes ticket 40722. o Minor feature (Congestion control metrics): - Add additional metricsport relay metrics for congestion control. Closes ticket 40724. o Minor features (fallbackdir): - Regenerate fallback directories generated on December 06, 2022. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2022/12/06. o Minor bugfixes (cpuworker, relay): - Fix an off by one overload calculation on the number of CPUs being used by our thread pool. Fixes bug 40719; bugfix on 0.3.5.1-alpha. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* | | tor: bump to 0.4.7.11 stableRui Salvaterra2022-12-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Quoting the changelog: Changes in version 0.4.7.11 - 2022-11-10 This version contains several major fixes aimed at helping defend against network denial of service. It is also extending drastically the MetricsPort for relays to help us gather more internal data to investigate performance and attacks. We strongly recommend to upgrade to this version especially for Exit relays in order to help the network defend against this ongoing DDoS. o Directory authority changes (dizum, Faravahar): - Change dizum IP address. Closes ticket 40687. - Remove Faravahar until its operator, Sina, set it back up online outside of Team Cymru network. Closes ticket 40688. o Major bugfixes (geoip data): - IPFire informed us on August 12th that databases generated after (including) August 10th did not have proper ARIN network allocations. We are updating the database to use the one generated on August 9th, 2022. Fixes bug 40658; bugfix on 0.4.5.13. o Major bugfixes (onion service): - Set a much higher circuit build timeout for opened client rendezvous circuit. Before this, tor would time them out very quickly leading to unnecessary retries meaning more load on the network. Fixes bug 40694; bugfix on 0.3.5.1-alpha. o Major bugfixes (OSX): - Fix coarse-time computation on Apple platforms (like Mac M1) where the Mach absolute time ticks do not correspond directly to nanoseconds. Previously, we computed our shift value wrong, which led us to give incorrect timing results. Fixes bug 40684; bugfix on 0.3.3.1-alpha. o Major bugfixes (relay): - Improve security of our DNS cache by randomly clipping the TTL value. TROVE-2021-009. Fixes bug 40674; bugfix on 0.3.5.1-alpha. o Minor feature (Mac and iOS build): - Change how combine_libs works on Darwin like platforms to make sure we don't include any `__.SYMDEF` and `__.SYMDEF SORTED` symbols on the archive before we repack and run ${RANLIB} on the archive. This fixes a build issue with recent Xcode versions on Mac Silicon and iOS. Closes ticket 40683. o Minor feature (metrics): - Add various congestion control counters to the MetricsPort. Closes ticket 40708. o Minor feature (performance): - Bump the maximum amount of CPU that can be used from 16 to 128. Note that NumCPUs torrc option overrides this hardcoded maximum. Fixes bug 40703; bugfix on 0.3.5.1-alpha. o Minor feature (relay): - Make an hardcoded value for the maximum of per CPU tasks into a consensus parameter. - Two new consensus parameters are added to control the wait time in queue of the onionskins. One of them is the torrc MaxOnionQueueDelay options which supersedes the consensus parameter. Closes ticket 40704. o Minor feature (relay, DoS): - Apply circuit creation anti-DoS defenses if the outbound circuit max cell queue size is reached too many times. This introduces two new consensus parameters to control the queue size limit and number of times allowed to go over that limit. Closes ticket 40680. o Minor feature (relay, metrics): - Add DoS defenses counter to MetricsPort. - Add congestion control RTT reset counter to MetricsPort. - Add counters to the MetricsPort how many connections, per type, are currently opened and how many were created. - Add relay flags from the consensus to the MetricsPort. - Add total number of opened circuits to MetricsPort. - Add total number of streams seen by an Exit to the MetricsPort. - Add traffic stats as in number of read/written bytes in total. - Related to ticket 40194. o Minor features (fallbackdir): - Regenerate fallback directories generated on November 10, 2022. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2022/11/10. o Minor bugfixes (authorities, sandbox): - Allow to write file my-consensus-<flavor-name> to disk when sandbox is activated. Fixes bug 40663; bugfix on 0.3.5.1-alpha. o Minor bugfixes (dirauth): - Directory authorities stop voting a consensus "Measured" weight for relays with the Authority flag. Now these relays will be considered unmeasured, which should reserve their bandwidth for their dir auth role and minimize distractions from other roles. In place of the "Measured" weight, they now include a "MeasuredButAuthority" weight (not used by anything) so the bandwidth authority's opinion on this relay can be recorded for posterity. Lastly, remove the AuthDirDontVoteOnDirAuthBandwidth torrc option which never worked right. Fixes bugs 40698 and 40700; bugfix on 0.4.7.2-alpha. o Minor bugfixes (onion service client): - A collapsing onion service circuit should be seen as an "unreachable" error so it can be retried. Fixes bug 40692; bugfix on 0.3.5.1-alpha. o Minor bugfixes (onion service): - Make the service retry a rendezvous if the circuit is being repurposed for measurements. Fixes bug 40696; bugfix on 0.3.5.1-alpha. o Minor bugfixes (relay overload statistics): - Count total create cells vs dropped create cells properly, when assessing if our fraction of dropped cells is too high. We only count non-client circuits in the denominator, but we would include client circuits in the numerator, leading to surprising log lines claiming that we had dropped more than 100% of incoming create cells. Fixes bug 40673; bugfix on 0.4.7.1-alpha. o Code simplification and refactoring (bridges): - Remove unused code related to ExtPort connection ID. Fixes bug 40648; bugfix on 0.3.5.1-alpha. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* | | smcroute: update to 2.5.6Alexey Smirnov2022-12-19
| | | | | | | | | | | | Signed-off-by: Alexey Smirnov <s.alexey@gmail.com>
Powered by cgit, Themed by Ted Yin.