aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
| * | | | | golang: split compile recipe into configure and compileMichael Pratt2022-05-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the default Configure recipe for packages assumes that there is a "configure" script in the source tree directory Go does not have such a script, configure and compile is done with the same script so split the current Compile recipe into both Configure and Compile recipes Signed-off-by: Michael Pratt <mcpratt@pm.me>
* | | | | | libreswan: update to 4.7Lucian Cristian2022-05-30
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | pdns-recursor: update to 4.7.0Peter van Dijk2022-05-30
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
* | | | | | xray-core: Update to 1.5.6Tianling Shen2022-05-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updated geodata to latest version while at it. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | | yq: Update to 4.25.2Tianling Shen2022-05-30
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | | cloudflared: Update to 2022.5.3Tianling Shen2022-05-30
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | | nspr: update to 4.34Lucian Cristian2022-05-30
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | nss: update to 3.78Lucian Cristian2022-05-30
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | Merge pull request #18631 from mhei/php8-updateMichael Heimpold2022-05-30
|\ \ \ \ \ \ | | | | | | | | | | | | | | php8: update to 8.1.6
| * | | | | | php8: update to 8.1.6Michael Heimpold2022-05-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | | | | Merge pull request #18632 from mhei/libxml2-updateMichael Heimpold2022-05-30
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | libxml2: update to 2.9.14
| * | | | | | | libxml2: update to 2.9.14Michael Heimpold2022-05-29
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes CVE-2022-29824. Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* / / / / / / prometheus-node-exporter: fix ubus stationsNick Hainke2022-05-29
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Not every radio has also ubus support. Only query radios with ubus functions. Signed-off-by: Nick Hainke <vincent@systemli.org> [fixup, call ubus.connect() once per scrape] Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* | | | | | i2pd: Update packageR4SAS I2P2022-05-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Update to 2.42.1 * Replace spaces with tabulation in init file Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
* | | | | | Merge pull request #18511 from jefferyto/circleci-add-keysEtienne Champetier2022-05-28
|\ \ \ \ \ \ | | | | | | | | | | | | | | CircleCI: Add 22.03 public keys, 18.06 v2 gpg key, 18.06 usign key
| * | | | | | CircleCI: Add 22.03 public keys, 18.06 v2 gpg key, 18.06 usign keyJeffery To2022-05-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | | | banip: mark as brokenDirk Brenken2022-05-27
| |/ / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | banIP 0.7.x is not compatible with new nft firewall (default in master and 22.03). Mark the package as BROKEN for now. Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | | lua-openssl: update to version 0.8.2-1Maciej Krüger2022-05-26
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Maciej Krüger <mkg20001@gmail.com>
* | | | | | gcc: depend on libzstdW. Michael Petullo2022-05-25
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* | | | | | stubby: restart on trigger interfacesAleksandr V. Piskunov2022-05-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Force restart stubby if any of the trigger interfaces goes up or down. Avoids DoT DNS lookup timeouts when default route changes, in case of multiple upstream interfaces. Signed-off-by: Aleksandr V. Piskunov <aleksandr.v.piskunov@gmail.com>
* | | | | | hfsprogs: update to 540.1.linux3Rosen Penev2022-05-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updates hfsprogs from 2011 to 2013 version. Updated patches to latest Debian ones. Kept custom OpenWrt ones. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | vpnc: Update to 0.5.3+git20220517Andreas Erhard2022-05-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The new version of vpnc supports additional DH groups for improved key exchange security. Signed-off-by: Andreas Erhard <andreas.erhard@i-med.ac.at>
* | | | | | haproxy: Update HAProxy to v2.4.17Christian Lachner2022-05-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Update haproxy download URL and hash Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | | | | python-jsonschema: Update to 4.5.1Javier Marcet2022-05-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | What's Changed: - Extend dynamicRef keyword by @nezhar - Add FORMAT_CHECKER attribute for Validator by @TiborVoelcker - Remove stray double-quote by @lurch - Ensure proper sorting of list in error message by @ssbarnea Signed-off-by: Javier Marcet <javier@marcet.info>
* | | | | | python3-paramiko: update to version 2.11.0Javier Marcet2022-05-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 2.11.0: - [Feature] Add SSH config token expansion (eg %h, %p) when parsing ProxyJump directives. Patch courtesy of Bruno Inec. - [Support] (via #2011) Apply unittest skipIf to tests currently using SHA1 in their critical path, to avoid failures on systems starting to disable SHA1 outright in their crypto backends (eg RHEL 9). Report & patch via Paul Howarth. - [Support] Update camelCase method calls against the threading module to be snake_case; this and related tweaks should fix some deprecation warnings under Python 3.10. Thanks to Karthikeyan Singaravelan for the report, @Narendra-Neerukonda for the patch, and to Thomas Grainger and Jun Omae for patch workshopping. - [Support] Recent versions of Cryptography have deprecated Blowfish algorithm support; in lieu of an easy method for users to remove it from the list of algorithms Paramiko tries to import and use, we’ve decided to remove it from our “preferred algorithms” list. This will both discourage use of a weak algorithm, and avoid warnings. Credit for report/patch goes to Mike Roest. 2.10.5: - [Bug] Windows-native SSH agent support as merged in 2.10 could encounter Errno 22 OSError exceptions in some scenarios (eg server not cleanly closing a relevant named pipe). This has been worked around and should be less problematic. Reported by Danilo Campana Fuchs and patched by Jun Omae. - [Bug] OpenSSH 7.7 and older has a bug preventing it from understanding how to perform SHA2 signature verification for RSA certificates (specifically certs - not keys), so when we added SHA2 support it broke all clients using RSA certificates with these servers. This has been fixed in a manner similar to what OpenSSH’s own client does: a version check is performed and the algorithm used is downgraded if needed. Reported by Adarsh Chauhan, with fix suggested by Jun Omae. - [Bug] Align signature verification algorithm with OpenSSH re: zero-padding signatures which don’t match their nominal size/length. This shouldn’t affect most users, but will help Paramiko-implemented SSH servers handle poorly behaved clients such as PuTTY. Thanks to Jun Omae for catch & patch. Signed-off-by: Javier Marcet <javier@marcet.info>
* | | | | | docker-compose: Update to version 2.5.1Javier Marcet2022-05-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | What's Changed: - Fix relative paths on envfile label by @ulyssessouza - down: Reject all arguments by @Jille - Clarify what default work dir is when multiple compose files by @quite - compose down exit=0 if nothing to remove by @ndeloof - cp command: copy to all containers of a service as default behaviour by @glours - Fix extra space printed with --no-log-prefix option by @jan4843 - bump compose-go to 1.2.5 by @ndeloof New Contributors: - @Jille made their first contribution - @quite made their first contribution - @jan4843 made their first contribution Signed-off-by: Javier Marcet <javier@marcet.info>
* | | | | | dnslookup: Update to 1.7.0Tianling Shen2022-05-25
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | | dnsproxy: Update to 0.43.0Tianling Shen2022-05-25
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | | Merge pull request #18605 from rsalvaterra/ocNikos Mavrogiannopoulos2022-05-24
|\ \ \ \ \ \ | | | | | | | | | | | | | | openconnect: three misc fixes
| * | | | | | openconnect: make sure OpenSSL is built with DTLS supportRui Salvaterra2022-05-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Otherwise, OpenConnect will fail to connect with DTLS. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
| * | | | | | openconnect: don't bother loading the tun moduleRui Salvaterra2022-05-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If it exists (if it isn't built-in), it will be loaded automatically at boot. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
| * | | | | | openconnect: drop the dependency on resolveipRui Salvaterra2022-05-23
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We have nslookup and awk, let's use them. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* | / / / / dnsproxy: Update to 0.42.4Tianling Shen2022-05-23
| |/ / / / |/| | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | samba4: fix build on macosSergey V. Lobanov2022-05-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit fixes two issues on macos: 1. Added a patch to fix 'echo -n' issue with MacOS shell (backported from upstream) 2. Redefined sys.platform='linux' for target build if build host is MacOS (otherwise, build script tries to use MacOS logic for OpenWrt(Linux) target build) Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
* | | | | glib2: update to 2.70.5Rosen Penev2022-05-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Enabled glib_checks to fix podman. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | rtty: update to 8.0.1Jianhui Zhao2022-05-22
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
* | | | | acme: switch from iptables to nftToke Høiland-Jørgensen2022-05-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Use nft instead of iptables to open port 80 in the firewall when getting a cert. Since nft doesn't allow deleting a rule by its contents, capture and save the handle when creating the rule, and use that to delete. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* | | | | audit: remove host buildEneas U de Queiroz2022-05-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The audit package in the packages feed share the same sources as the libaudit package in the base repo. libaudit performs a host build, used only by libsemanage in base. There is no package depending on 'audit/host', so we can remove it to avoid possible confusion. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* | | | | audit: avoid interferece with base libaudit buildEneas U de Queiroz2022-05-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Both audit in the packages feed and libaudito from the base repo use the same sources. Have 'audit' use a different build directory than 'libaudit' package to avoid interference between them. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* | | | | audit: Fix compilation with kernel 5.15Eneas U de Queiroz2022-05-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Linux 5.15 does not have the linux/ipx.h header. The patch is a partial cherry-pick (skipped ChangeLog) of upstream commit 6b09724c6 ("Make IPX packet interpretation dependent on the ipx header file existing"). Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* | | | | openconnect: fix OpenSSL build without deprecated APIRui Salvaterra2022-05-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Backport a patch in order to allow building OpenConnect against OpenSSL 1.1.x without the need for deprecated API (further fixes will be required for OpenSSL 3.x, though). Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* | | | | libcoap: make sure `libcoap-3-notls.so` is installedLeo Soares2022-05-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit fixes an issue where the `libcoap-3-notls.so` is not installed, in some cases leaving the target's root with no library and just a broken link from `libcoap-3.so` to `libcoap-3-notls.so`. Signed-off-by: Leo Soares <leo@hyper.ag>
* | | | | wifi-presence: Add config for process user/groupAdam Williams2022-05-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | On systems using seccomp, the hostapd socket files will be owned by the 'network' user/group ([source][0]). In this case, if wifi-presence is run as root/root, then it does not have permissions to open the hostapd socket files. This was discussed in awilliams/wifi-presence#3. This change allows the process user/group to be specified in /etc/config/wifi-presence. If no explicit user/group is set, then the init script will use the owner of the socket files in /var/run/hostapd/ to determine the appropriate process user/group. [0]: https://github.com/openwrt/openwrt/blob/ec6293febc244d187e71a6e54f44920be679cde4/package/network/services/hostapd/files/wpad.init#L35-L36 Signed-off-by: Adam Williams <pwnfactory@gmail.com>
* | | | | Merge pull request #18586 from flyn-org/openldapFlorian Eckert2022-05-20
|\ \ \ \ \ | | | | | | | | | | | | openldap: drop use of HTTP in favor of HTTPS
| * | | | | openldap: drop use of HTTP in favor of HTTPSW. Michael Petullo2022-05-20
|/ / / / / | | | | | | | | | | | | | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* | | | | Merge pull request #18494 from nemesisdesign/masterFlorian Eckert2022-05-20
|\ \ \ \ \ | | | | | | | | | | | | openwisp-config: update to 1.0.0
| * | | | | openwisp-config: update to 1.0.0Federico Capoano2022-05-18
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
* | | | | | bluez: Update to 5.64, update/refresh patchesJeffery To2022-05-19
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | | frr: drop elfutils/host dependencyStijn Tintel2022-05-19
| |_|_|/ / |/| | | | | | | | | | | | | | | | | | | | | | | | The elfutils package moved to tools and elfutils/host no longer exists. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | | stunnel: update to version 5.64Florian Eckert2022-05-19
| |_|_|/ |/| | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Powered by cgit, Themed by Ted Yin.