aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* | | | | | nextdns: Update to version 1.32.1Olivier Poitrey2021-04-30
| |_|_|_|/ |/| | | | | | | | | | | | | | Signed-off-by: Olivier Poitrey <rs@nextdns.io>
* | | | | Merge pull request #15547 from dibdot/adblockDirk Brenken2021-04-30
|\ \ \ \ \ | | | | | | | | | | | | adblock: update to 4.1.2
| * | | | | adblock: update to 4.1.2Dirk Brenken2021-04-30
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * preserve DNS cache after adblock processing (unbound & bind) * fix redirect issue with oisd basic url * cosmetics Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | icu: add ABI_VERSIONHirokazu MORIKAWA2021-04-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | To prevent inconsistencies in the coming version (69.1). Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
* | | | | attendedsysupgrade-common: update to 2021Paul Spooren2021-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Use $(COMMITCOUNT) * Use SPDX * Use CA (ucert) public key * Update repo link * Update maintainer email * Format description Signed-off-by: Paul Spooren <mail@aparcar.org>
* | | | | Merge pull request #15543 from mhei/php8-updateMichael Heimpold2021-04-30
|\ \ \ \ \ | | | | | | | | | | | | php8: update to 8.0.5
| * | | | | php8: update to 8.0.5Michael Heimpold2021-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also update opcache makefile patch. Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | | | bind: bump to 9.17.12Noah Meyerhans2021-04-29
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes the following security issues: * CVE-2021-25215 - named crashed when a DNAME record placed in the ANSWER section during DNAME chasing turned out to be the final answer to a client query. * CVE-2021-25214 - Insufficient IXFR checks could result in named serving a zone without an SOA record at the apex, leading to a RUNTIME_CHECK assertion failure when the zone was subsequently refreshed. This has been fixed by adding an owner name check for all SOA records which are included in a zone transfer. Signed-off-by: Noah Meyerhans <frodo@morgul.net>
* | | / / knxd: pumb to upstream version 0.14.51Othmar Truniger2021-04-28
| |_|/ / |/| | | | | | | | | | | Signed-off-by: Othmar Truniger <github@truniger.ch>
* | | | adguardhome: bump to 0.106.0Dobroslaw Kijowski2021-04-28
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | * Full changelog available at: * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.0 * Add build time LDFLAG introduced in commit [1]. [1]: https://github.com/AdguardTeam/AdGuardHome/commit/1d07afb30ee9ff00de72182200b7e1c6d1606d77#diff-82ef468ec5547f1ed424776755a7f87dfec4eba9838d2c2ac02c9881bb67d737R67 Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
* | | libupm: Disable node.js supportHirokazu MORIKAWA2021-04-28
| | | | | | | | | | | | | | | | | | Library for node.js will be disabled temporarily due to difficulty in supporting the latest node.js. Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
* | | Merge pull request #15516 from ja-pa/engineio-socketio-updateRosen Penev2021-04-27
|\ \ \ | | | | | | | | python-engineio & python-socketio: package update
| * | | python-socketio: update to version 5.2.1Jan Pavlinec2021-04-26
| | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
| * | | python-engineio: update to version 4.1.0Jan Pavlinec2021-04-26
| | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | net-tools: bump to 2.10Aleksander Jan Bajkowski2021-04-27
| | | | | | | | | | | | | | | | Signed-off-by: Aleksander Jan Bajkowski <A.Bajkowski@stud.elka.pw.edu.pl>
* | | | libmraa: Disable node.js supportHirokazu MORIKAWA2021-04-27
| | | | | | | | | | | | | | | | | | | | | | | | Library for node.js will be disabled temporarily due to difficulty in supporting the latest node.js. Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
* | | | Merge pull request #15525 from 1715173329/xrayJosef Schlehofer2021-04-28
|\ \ \ \ | | | | | | | | | | xray-core: remove PROVIDES
| * | | | xray-core: use `$(INSTALL_DATA)` to install configuration filesTianling Shen2021-04-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Using `$(INSTALL_CONF)` will cause the program has no access to configurations file when someone enabled the selinux support. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
| * | | | xray-core: remove PROVIDESTianling Shen2021-04-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Xray now is no longer planning to keep compatibility with original v2ray. Remove PROVIDES before it is totally broken. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | libedit: update to version 20210419-3.1Jan Hak2021-04-28
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jan Hak <jan.hak@nic.cz>
* | | | | zerotier: update to 1.6.5Moritz Warning2021-04-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Minor ZeroTier update. Refreshed patches. Signed-off-by: Moritz Warning <moritzwarning@web.de>
* | | | | Merge pull request #15517 from 1715173329/yqJosef Schlehofer2021-04-28
|\ \ \ \ \ | | | | | | | | | | | | yq: Update to 4.7.1
| * | | | | yq: Update to 4.7.1Tianling Shen2021-04-26
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | | Merge pull request #15515 from ja-pa/gitlab-runner-13.11.0Josef Schlehofer2021-04-28
|\ \ \ \ \ \ | | | | | | | | | | | | | | gitlab-runner: update to version 13.11.0
| * | | | | | gitlab-runner: update to version 13.11.0Jan Pavlinec2021-04-26
| | |_|/ / / | |/| | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | | | Merge pull request #15514 from ja-pa/redis-6.2.2Josef Schlehofer2021-04-28
|\ \ \ \ \ \ | |_|_|/ / / |/| | | | | redis: update to version 6.2.2
| * | | | | redis: update to version 6.2.2Jan Pavlinec2021-04-26
| |/ / / / | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | | uvol: fix emmitting ubus event when removing UBI volumeDaniel Golle2021-04-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In case a volume which is down is removed, no ubus event needs to be fired. Don't try. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | auc: compare versions using dpkg/opkg's verrevcmpDaniel Golle2021-04-26
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | Using strcmp() to compare a version string doesn't work well. Use verrevcmp() function from opkg instead. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | net/mosquitto: port is optional in root configKarl Palsson2021-04-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | From mosquitto 2.x, port became optional and deprecated in the config, and it was recommended that listeners be used instead. Drop the hard requirement in our config conversion script. Reported in: https://github.com/openwrt/packages/issues/15506 Signed-off-by: <karlp@etactica.com>
* | | | net/mosquitto: fix log_type conversion in configKarl Palsson2021-04-26
|/ / / | | | | | | | | | | | | | | | As reported in: https://github.com/openwrt/packages/issues/15506 Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | dbus: fix new cmake buildRosen Penev2021-04-25
| | | | | | | | | | | | | | | | | | CMake was using the wrong paths. Fix them up. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | h2o: only install one copy of the .soPeter van Dijk2021-04-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I noticed that the package contained 3 identical copies of the lib: root@52170cbc2408:/# ls -ali /usr/lib/libh2o* 162653 -rwxr-xr-x 1 root root 348857 Apr 25 11:50 /usr/lib/libh2o-evloop.so 162660 -rwxr-xr-x 1 root root 348857 Apr 25 11:50 /usr/lib/libh2o-evloop.so.0.13 162661 -rwxr-xr-x 1 root root 348857 Apr 25 11:50 /usr/lib/libh2o-evloop.so.0.13.6 so this commit fixes that: root@472ad3a8404e:/# ls -ali /usr/lib/libh2o* 289858 lrwxrwxrwx 1 root root 21 Apr 25 12:43 /usr/lib/libh2o-evloop.so -> libh2o-evloop.so.0.13 289859 lrwxrwxrwx 1 root root 23 Apr 25 12:43 /usr/lib/libh2o-evloop.so.0.13 -> libh2o-evloop.so.0.13.6 289860 -rw-r--r-- 1 root root 348857 Apr 25 12:41 /usr/lib/libh2o-evloop.so.0.1 Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
* | | h2o: remove useless ruby dependencyPeter van Dijk2021-04-25
| | | | | | | | | | | | | | | | | | | | | | | | h2o is the library dnsdist uses to offer DNS over HTTPS to clients. dnsdist is the only user of h2o in this tree. While h2o can depend on Ruby (to build mruby support), this is disabled in the OpenWRT build of h2o. Hence, the Ruby dependency is unnecessary, and removing it saves a few megabytes of disk space. Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
* | | Merge pull request #15511 from PowerDNS/unbound-htppsMirko Vogt2021-04-25
|\ \ \ | | | | | | | | unbound: fix typo in assist name of https-dns-proxy
| * | | unbound: fix typo in assist name of https-dns-proxyPeter van Dijk2021-04-25
|/ / / | | | | | | | | | | | | | | | I left the old version in, in case users have configs that already correct for this error. Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
* | | Merge pull request #15507 from hswong3i/master-SQUID_enable-ssl-crtdRosen Penev2021-04-25
|\ \ \ | | | | | | | | squid: Enable dynamic SSL certificate generation
| * | | squid: Enable dynamic SSL certificate generationWong Hoi Sing Edison2021-04-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: @neheb / @BKPepe / @zhanhb Compile tested: ipq806x, generic, netgear_r7800, master Run tested: ipq806x, generic, netgear_r7800, openwrt-19.07 Description: Squid now only support HTTPS proxy in TCP tunnel mode (e.g. `ssl_bump splice all`): https_port 3128 ssl-bump tls-cert=/etc/squid/squid.pem generate-host-certificates=on ssl_bump splice all In order to operate in SSL Bump mode, we need to compile with `--enable-ssl-crtd` for following configuration: https_port 3128 ssl-bump tls-cert=/etc/squid/squid.pem generate-host-certificates=on sslcrtd_program /usr/lib/squid/security_file_certgen -s /car/cache/squid/ssl_db -M 4MB ssl_bump stare all ssl_bump bump all This PR switch the `SQUID_enable-ssl-crtd` into `default y`, therefore default enable SSL Bump mode. Signed-off-by: Wong Hoi Sing Edison <hswong3i@pantarei-design.com>
* | | | conntrack-tools: add a patch to fix endianness issueTao Gong2021-04-24
| | | | | | | | | | | | | | | | Signed-off-by: Tao Gong <gongtao0607@gmail.com>
* | | | coremark: bump to 2021-03-12Aleksander Jan Bajkowski2021-04-24
|/ / / | | | | | | | | | Signed-off-by: Aleksander Jan Bajkowski <A.Bajkowski@stud.elka.pw.edu.pl>
* | | ksmbd: update to 3.3.9Rosen Penev2021-04-24
| | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | ksmbd-tools: update to 3.3.9Rosen Penev2021-04-24
| | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | uacme: add use_auto_stagingLeonardo Mörlein2021-04-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Staging certificates have the advantage that their retry limits are loose. Therefore they can be obtained quickly when automatic retries are used. Unfortunately they can not be used for deployments because their CA is not accepted by clients. Production certificates do not have this limitation, but their retry limits are strict. For production certificates, automatic retries can only be performed a few times per hour. This makes automatic obtainment of certificates tenacious. With use_auto_staging=1, the advantages of the two certificate types are combined. Uacme will first obtain a staging certificate. When the staging certificate is successfully obtained, uacme will switch and obtain a production certificate. Since the staging certificate has already been successfully obtained, we can ensure that the production certificate is successfully obtained in the first attempt. This means that "retries" are performed on the staging certificate and the production certificate is obtained in the first attempt. In summary, this feature enables fast obtaining of production certificates when automatic retries are used. By default, this feature is set to use_auto_staging=0, which means that uacme will behave as before by default. Signed-off-by: Leonardo Mörlein <git@irrelefant.net>
* | | uacme: do not override production state dir variableLeonardo Mörlein2021-04-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With this commit, issue_cert() can be called multiple times alternating between staging and production certificates within a script. Before this commit, the production state dir was stored in $STATE_DIR. But in the case of $use_staging=1, this variable was overwritten in issue_cert() with $STAGING_STATE_DIR. This made it impossible to call issue_cert() with $use_staging=0 afterwards. Now the production state dir is stored in $PRODUCTION_STATE_DIR. This way it is not overridden anymore and issue_cert() can be called multiple times alternating with production and staging. Signed-off-by: Leonardo Mörlein <git@irrelefant.net>
* | | Merge pull request #15466 from cotequeiroz/muttRosen Penev2021-04-24
|\ \ \ | | | | | | | | mutt: don't use host mailpath definition
| * | | mutt: don't use host mailpath definitionEneas U de Queiroz2021-04-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Use configure --with-mailpath=/var/mail instead of letting it guess the value base on the host path. If configure can't find it, the package will fail to build. The path was taken from the current bot build. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* | | | fwknop: Remove unnecessary get_bool() function.Oldřich Jedlička2021-04-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | The get_bool() functionality was already merged to lib/functions.sh, so it is redundant in the init script. Remove it. Signed-off-by: Oldřich Jedlička <oldium.pro@gmail.com>
* | | | gummiboot: add new packageOskari Rauta2021-04-24
| | | | | | | | | | | | | | | | Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | gnu-efi: add new packageOskari Rauta2021-04-24
| | | | | | | | | | | | | | | | Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | Merge pull request #15505 from gstrauss/lighttpd-1.4.59-2Rosen Penev2021-04-24
|\ \ \ \ | | | | | | | | | | lighttpd: patches from upstream
Powered by cgit, Themed by Ted Yin.