aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* nerdctl: New packageLuca Barbato2023-10-20
| | | | | | | contaiNERD CTL - Docker-compatible CLI for containerd, with support for Compose, Rootless, eStargz, OCIcrypt, IPFS, ... Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
* pdns: update to 4.8.3 and update pdns.conf-distPeter van Dijk2023-10-20
| | | | Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
* docker-compose: Update to version 2.23.0Javier Marcet2023-10-19
| | | | Signed-off-by: Javier Marcet <javier@marcet.info>
* conntrack-tools: update to 1.4.8Nick Hainke2023-10-19
| | | | | | | | | Release Notes: https://marc.info/?l=netfilter&m=169598613909790&w=2 Furthermore, switch to "tar.xz". Signed-off-by: Nick Hainke <vincent@systemli.org>
* Merge pull request #22438 from Ansuel/fix-net-snmpStijn Tintel2023-10-19
|\ | | | | net-snmp: backport patch fixing memory leak for PCRE2
| * net-snmp: backport patch fixing memory leak for PCRE2Christian Marangi2023-10-18
|/ | | | | | | Backport patch fixing memory leak for PCRE2 present upstream. Fixes: #22428 Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* Merge pull request #22371 from IgorBai/patch-3Florian Eckert2023-10-18
|\ | | | | ddns-scripts: add new DDNS provider ipnodns.ru
| * ddns-scripts: add new DDNS provider ipnodns.ruIgor Baidasov2023-10-18
| | | | | | | | Signed-off-by: Igor Baidasov <igorbay@bk.ru>
* | Merge pull request #22427 from Linaro1985/update_mm_1.22.0Florian Eckert2023-10-18
|\ \ | | | | | | modemmanager: bump to 1.22.0
| * | modemmanager: bump to 1.22.0Maxim Anisimov2023-10-18
| | | | | | | | | | | | | | | | | | | | | | | | - switch to builtin plugins - import upstream patch for fixing support of ublox LARA-R6001 / LARA-R6001D modules (see: https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/779) Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
| * | libqmi: bump to 1.34.0Maxim Anisimov2023-10-17
| | | | | | | | | | | | Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
| * | libmbim: bump to 1.30.0Maxim Anisimov2023-10-17
| | | | | | | | | | | | Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
* | | Merge pull request #22422 from stangri/master-https-dns-proxyStan Grishin2023-10-17
|\ \ \
| * | | https-dns-proxy: bugfix: logging crashing instances on ath79Stan Grishin2023-10-17
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | * finally fixes https://github.com/openwrt/packages/issues/19366 * simplify service_triggers * improve output for dnsmasq restart * improve grep/sed dependencies * remove interface hotplug Signed-off-by: Stan Grishin <stangri@melmac.ca>
* / / node: Friday October 13 2023 Security ReleasesHirokazu MORIKAWA2023-10-17
|/ / | | | | | | | | | | | | | | | | | | | | | | | | This is a security release. Notable Changes The following CVEs are fixed in this release: * CVE-2023-44487: nghttp2 Security Release (High) (Depends on shared library provided by OpenWrt) * CVE-2023-45143: undici Security Release (High) * CVE-2023-38552: Integrity checks according to policies can be circumvented (Medium) * CVE-2023-39333: Code injection via WebAssembly export names (Low) More detailed information on each of the vulnerabilities can be found in October 2023 Security Releases blog post. Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
* | Merge pull request #21258 from blocktrron/add-cudy-bdinfoDavid Bauer2023-10-16
|\ \ | | | | | | cudy-bdinfo: add package
| * | cudy-bdinfo: add packageDavid Bauer2023-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This program can be used to obtain information stored on the bdinfo parition found on routers from Shenzhen Cudy Technology. While this tool is not necessary for operation with OpenWrt, it can be helpful to decrypt information generated by the stock firmware as well as to obtain additional device-specific information. Signed-off-by: David Bauer <mail@david-bauer.net>
* | | v2ray-geodata: Update to latest versionTianling Shen2023-10-16
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | Merge pull request #22416 from miska/sambaTianling Shen2023-10-16
|\ \ \ | | | | | | | | samba4: Update to version 4.18.8
| * | | samba4: Update to version 4.18.8Michal Hrusecky2023-10-16
|/ / / | | | | | | | | | | | | | | | | | | | | | Mainly security release, fixing CVE-2023-3961, CVE-2023-4091, CVE-2023-4154, CVE-2023-42669 and CVE-2023-42670. For more details see: https://www.samba.org/samba/history/samba-4.18.8.html Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
* | | Merge pull request #22415 from pprindeville/isc-dhcp-avoid-external-cmdsPhilip Prindeville2023-10-15
|\ \ \ | | | | | | | | isc-dhcpd: Redux of convenience functions avoiding sed/cut
| * | | isc-dhcpd: Redux of convenience functions avoiding sed/cutPhilip Prindeville2023-10-15
| | | | | | | | | | | | | | | | | | | | | | | | Also minimize messing with $IFS. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
| * | | isc-dhcp: Use 'append' instead of manually appendingPhilip Prindeville2023-10-15
|/ / / | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | Merge pull request #22414 from pprindeville/isc-dhcp-no-empty-rangesPhilip Prindeville2023-10-15
|\ \ \ | | | | | | | | isc-dhcp: refuse to add empty DHCP ranges
| * | | isc-dhcp: refuse to add empty DHCP rangeLeon M. Busch-George2023-10-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | ipcalc.sh no longer outputs invalid ranges and fails with an error code in such cases. React to the error. Signed-off-by: Leon M. Busch-George <leon@georgemail.eu>
| * | | isc-dhcp: adapt to new ipcalc paradigmLeon M. Busch-George2023-10-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With #12925, 'BROADCAST' will no longer be set if there is no local broadcast address (rather than holding the global broadcast address). Prepare for the merge but stay compatible with the old version of ipcalc. Signed-off-by: Leon M. Busch-George <leon@georgemail.eu>
* | | | rust: fix build with glibc, ARM and hard floatsDrew Young2023-10-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Patch the target triple for Rust with glibc to include hard floating point support. The GNU target triple used elsewhere does not include hard float support, instead `-mfloat-abi=hard` is passed separately. For Rust it must be included in the target triple. This was already being done for musl, this commit adds the same patching for glibc. Without this patch Rust compilation fails with an error like this (abbreviated to fit the line length): ld: error: libstd.so uses VFP register arguments, ... does not ld: failed to merge target specific data of file ... Signed-off-by: Drew Young <dyoung@viridiparente.com>
* | | | golang: Update to 1.21.3Jeffery To2023-10-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Includes fix for CVE-2023-39325 (net/http, x/net/http2: rapid stream resets can cause excessive work). Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | nghttp2: fix CVE-2023-44487Hirokazu MORIKAWA2023-10-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | update to v1.57.0 CVE-2023-44487 : HTTP/2 Rapid Reset Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
* | | | prometheus-node-exporter-lua: bump package versionIvan Mironov2023-10-15
| | | | | | | | | | | | | | | | Signed-off-by: Ivan Mironov <mironov.ivan@gmail.com>
* | | | prometheus-node-exporter-lua: add basic hwmon exporterIvan Mironov2023-10-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This collector supports following metrics: * node_hwmon_temp_celsius * node_hwmon_pwm and following auxiliary mappings: * node_hwmon_chip_names * node_hwmon_sensor_label Tested on: * Banana Pi BPI-r3 / OpenWrt 23.05.0-rc2 * TP-Link Archer C7 v5 / OpenWrt 22.03.5 Signed-off-by: Ivan Mironov <mironov.ivan@gmail.com>
* | | | Merge pull request #20007 from dhewg/prometheus-node-exporter-ucodeEtienne Champetier2023-10-15
|\ \ \ \ | | | | | | | | | | prometheus-node-exporter-ucode: add new package
| * | | | prometheus-node-exporter-ucode: add new packageAndre Heider2023-08-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a port of prometheus-node-exporter-lua to ucode. Signed-off-by: Andre Heider <a.heider@gmail.com>
| * | | | rpcd-mod-wireguard: add new packageAndre Heider2023-08-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The rpcd wireguard plugin provides essential functions similar to the `wg` tool. It uses the embeddable-wg-library [0], which describes itself as: "This is a mini single-file library, meant to be embedded directly into the source code of your program. Copy wireguard.c and wireguard.h into your project. They should build with any C89 compiler. There are no dependencies except libc" The plugin does exactly that and therefor inherits the LGPL license. At this point it provides the following functions: 'wireguard' "status":{} "genkey":{} "genpsk":{} "pubkey":{"private":"String"} Examples: $ ubus call wireguard status { "wg0": { "ifindex": 12, "public_key": "<base64 encoded public key>", "listen_port": 1234, "peers": { "<base64 encoded public peer key>": { "allowed_ips": [ "192.168.1.123/32" ], "last_handshake": 0, "rx_bytes": 0, "tx_bytes": 0 }, "<another base64 encoded public peer key>": { "endpoint": "<ip:port>", "allowed_ips": [ "192.168.1.124/32" ], "last_handshake": 1676287619, "rx_bytes": 8731604, "tx_bytes": 88333652 } } } } $ ubus call wireguard genpsk { "preshared": "EKQJ3XI/6xLoifAoGb5bNA39De1tiwZ3x7h8OS2zKkE=" } $ ubus call wireguard genkey { "private": "IFyGkfXlO+WO8DMO3cqhaDZ8rBfioP5pVnAoQlEpXnI=", "public": "uF2O6/ZXZjKnUnxBnldElBYIXfpyvvtUnZfKP+BSBSI=" } $ ubus call wireguard pubkey '{"private":"IFyGkfXlO+WO8DMO3cqhaDZ8rBfioP5pVnAoQlEpXnI="}' { "public": "uF2O6/ZXZjKnUnxBnldElBYIXfpyvvtUnZfKP+BSBSI=" } Size comparison: 52436 /usr/bin/wg 18544 /usr/lib/rpcd/wireguard.so [0] https://git.zx2c4.com/wireguard-tools/tree/contrib/embeddable-wg-library Signed-off-by: Andre Heider <a.heider@gmail.com>
* | | | | Merge pull request #22404 from vgaetera/openconnect-pfsNikos Mavrogiannopoulos2023-10-15
|\ \ \ \ \ | | | | | | | | | | | | openconnect: add support for option --pfs
| * | | | | openconnect: add support for option --pfsVladislav Grigoryev2023-10-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add support for the OpenConnect option `--pfs`. Designed to require perfect forward secrecy. Signed-off-by: Vladislav Grigoryev <vg.aetera@gmail.com>
* | | | | | Merge pull request #22393 from jefferyto/maturin-1.3.0Tianling Shen2023-10-15
|\ \ \ \ \ \ | | | | | | | | | | | | | | maturin: Update to 1.3.0, build as Python (host-only) package
| * | | | | | maturin: Update to 1.3.0, build as Python (host-only) packageJeffery To2023-10-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Python packages that use maturin to build do not call the maturin program directly; they use the maturin build backend[1]. This build backend is a Python library provided with maturin that interfaces with the maturin program. This changes the maturin package to use the Python build process so that the build backend is installed correctly. This also renames the source package to python-maturin and moves it into the lang/python directory. [1]: https://www.maturin.rs/#source-distribution Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | | | Merge pull request #21005 from joelpet/prometheus-node-exporter-thermalEtienne Champetier2023-10-14
|\ \ \ \ \ \ \ | |_|_|_|_|_|/ |/| | | | | | prometheus-node-exporter-lua: Add thermal collector
| * | | | | | prometheus-node-exporter-lua: Add thermal collectorJoel Pettersson2023-06-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Joel Pettersson <me@joelpet.se>
* | | | | | | netbird: update to 0.23.9Oskari Rauta2023-10-14
| |_|/ / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: - Add Pagination for IdP Users Fetch by @bcmmbaga in #1210 - Rework peer connection status based on the update channel existence by @surik in #1213 - Fix nil pointer exception in group delete by @pappz in #1211 - Fix/key backup in config script by @pappz in #1206 Full changelog: https://github.com/netbirdio/netbird/compare/v0.23.8...v0.23.9 Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | | | dnsdist: update to 1.8.2Peter van Dijk2023-10-14
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
* | | | | | h2o: ABI-breaking patch for CVE-2023-44487Peter van Dijk2023-10-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com> bump soname refreh
* | | | | | rust: update to 1.73.0Oskari Rauta2023-10-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | patches refreshed. changelog at https://github.com/rust-lang/rust/releases/tag/1.73.0 Also added a configuration ardument and patch from https://gitweb.gentoo.org/repo/gentoo.git/tree/dev-lang/rust/files/1.72.0-bump-libc-deps-to-0.2.146.patch?id=515b5920046117355d88b3494c74da269ce9b30a to provide support for building rust on musl hosts. Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com> rust: add support for musl build hosts Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | | | node: bump to v18.18.1Hirokazu MORIKAWA2023-10-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Notable Changes This release addresses some regressions that appeared in Node.js 18.18.0: (Windows) FS can not handle certain characters in file name #48673 18 and 20 node images give error - Text file busy (after re-build images) nodejs/docker-node#1968 libuv update in 18.18.0 breaks webpack's thread-loader #49911 Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
* | | | | | python3-texttable: update to version 1.7.0Javier Marcet2023-10-14
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Javier Marcet <javier@marcet.info>
* | | | | | python-websocket-client: update to 1.6.4Javier Marcet2023-10-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - 1.6.4 - Add support for HTTP 307 and 308 redirect codes - 1.6.3 - Fix type hints issues - Add support for Python beta release 3.12 in CI - Add maintainer email in setup.py Signed-off-by: Javier Marcet <javier@marcet.info>
* | | | | | catatonit: update to 0.2.0Oskari Rauta2023-10-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | no functional changes from catatonit 0.1.7, but license change from GPL-3.0-or-later to GPL-2.0-or-later. Switch package source to release version from git commit version. Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | | | podman: update to 4.7.1Oskari Rauta2023-10-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bugfixes - Fixed a bug involving non-English locales of Windows where machine installs using user-mode networking were rejected due to erroneous version detection (#20209). - Fixed a regression in --env-file handling (#19565). - Fixed a bug where podman inspect would fail when stat'ing a device failed. API - The network list compat API endpoint is now much faster (#20035). Openwrt updates: added patch to allow building with musl-1.2.4 Patch source is from gentoo https://github.com/vimproved/gentoo/blob/c4c349f11a4352be1965726eadfe3a8bd8a6fa9c/app-containers/podman/files/podman-4.5.0-fix-build-with-musl-1.2.4.patch Issue was discussed by @jefferyto at mattn/go-sqlite3#1177 Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | | | nginx: fix nginx lua module compilation errorChristian Marangi2023-10-13
| |/ / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add pending patch fixing compilation error for missing pcre.h. This is caused by a bug on their end by trying to add pcre.h even if we are using the PCRE2 library. Fixes: f0754531c4d8 ("nginx: move to PCRE2") Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>