aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* | | | nginx: update to 1.25.4Jan Klos2024-03-26
| | | | | | | | | | | | | | | | Signed-off-by: Jan Klos <jan@klos.xyz>
* | | | rust: update to 1.77.0krant2024-03-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Restore patch hunk mis-deleted in dccb910 - Refresh patches - Remove --enable-missing-tools configure option deleted in the upstream Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* | | | p910nd: fix running multiple instancesPeca Nesovanovic2024-03-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Compile tested: (ramips, rb760igs, 23.05 snapshot) Run tested: (ramips, rb760igs, 23.05 snapshot, tests done) Description: In case we have multiple device defined in /etc/config/p910nd then init script will try to start multiple instance with same instance name drop instance name as resolution tested on 23.05 snapshot with 2 USB printers Signed-off-by: Peca Nesovanovic <peca.nesovanovic@sattrakt.com>
* | | | clixon: Update to 7.0.0Philip Prindeville2024-03-25
| | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | sing-box: update to 1.8.10brvphoenix2024-03-26
| | | | | | | | | | | | | | | | Signed-off-by: brvphoenix <brvphoenix@gmail.com>
* | | | sing-box: restart if the specified interfaces start upbrvphoenix2024-03-26
| | | | | | | | | | | | | | | | Signed-off-by: brvphoenix <brvphoenix@gmail.com>
* | | | podman: update to v5.0.0Oskari Rauta2024-03-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Major version update to podman - Obsolete patch removed - patch 010-do-not-build-docs.patch refreshed Changelog: https://github.com/containers/podman/releases/tag/v5.0.0 Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | lsd: update to v1.1.1Oskari Rauta2024-03-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes: - hex color parser for themes - adds truncate option - adds --literal flag - adds disable option for permission - upgrades many included sub modules/crates - Fixes literal flags not regocnized - adds and improves icons Full changelogs: - v1.1.0: https://github.com/lsd-rs/lsd/releases/tag/v1.1.0 - v1.1.1: https://github.com/lsd-rs/lsd/releases/tag/v1.1.1 Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | cligen: Update to 7.0.0Philip Prindeville2024-03-25
| | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | perl-cgi: Update to 4.64Philip Prindeville2024-03-25
| | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | psmisc: update to version 23.7Josef Schlehofer2024-03-25
|/ / / | | | | | | | | | | | | | | | | | | Release notes: https://gitlab.com/psmisc/psmisc/-/compare/v23.4...v23.7?from_project_id=334185&straight=false Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | opus: revert to autotoolskrant2024-03-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | Latest update in 6c3db5d has switched build system to Meson, which is broken on several non-SIMD platforms. Turns out, Meson support is not yet stable enough in the upstream, so we revert to autotools and drop meson-related patch. Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* | | irqbalance: update to version 1.9.4Hannu Nyman2024-03-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update irqbalance to version 1.9.4. * refresh version in meson patch * remove EINVAL handling patch as upstream seems to have silenced the log spam for unmanageable IRQs Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | Merge pull request #23681 from jummo/add_ddns_servercowMichael Heimpold2024-03-24
|\ \ \ | | | | | | | | ddns-scripts: Add servercow.de as DDNS provider
| * | | ddns-scripts: Add servercow.de as DDNS providerPatrick Hemmen2024-03-19
| | | | | | | | | | | | | | | | | | | | | | | | Add servercow.de as dynamic DNS provider provider. Signed-off-by: Patrick Hemmen <jummo4@yahoo.de>
* | | | Merge pull request #23716 from stangri/master-https-dns-proxyStan Grishin2024-03-24
|\ \ \ \ | | | | | | | | | | https-dns-proxy: prepare migration to APK
| * | | | https-dns-proxy: prepare migration to APKStan Grishin2024-03-24
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | Merge pull request #23717 from stangri/master-adblock-fastStan Grishin2024-03-24
|\ \ \ \ \ | | | | | | | | | | | | adblock-fast: prepare migration to APK
| * | | | | adblock-fast: prepare migration to APKStan Grishin2024-03-23
| |/ / / / | | | | | | | | | | | | | | | Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | Merge pull request #23715 from stangri/master-nebulaStan Grishin2024-03-24
|\ \ \ \ \ | | | | | | | | | | | | nebula: prepare migration to APK
| * | | | | nebula: prepare migration to APKStan Grishin2024-03-23
| |/ / / / | | | | | | | | | | | | | | | Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | Merge pull request #23714 from stangri/master-pbrStan Grishin2024-03-24
|\ \ \ \ \ | | | | | | | | | | | | pbr: prepare migration to APK
| * | | | | pbr: prepare migration to APKStan Grishin2024-03-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * remove dependencies/references to opkg * simplify wan/wan6 discovery Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | | nnn: update to version 4.9Josef Schlehofer2024-03-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Release notes: https://github.com/jarun/nnn/compare/v4.4...v4.9 - Refresh patch to fix offset Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | | knot-resolver: Update to version 5.7.1Michal Hrusecky2024-03-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Fixes CVE-2023-50868 and CVE-2023-50387 - Also, the resolver has not been called 'Knot DNS Resolver' for quite some time, so fix that, too. Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
* | | | | | knot-resolver: enable dnstap module build by defaultŠimon Bořek2024-03-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 'dnstap' module will be built but not loaded by default at runtime (configuration must be provided for it to be loaded). It is still possible to disable dnstap build manually using menuconfig. "The dnstap module supports logging DNS requests and responses to a unix socket in dnstap format using fstrm framing library. This logging is useful if you need effectively log all DNS traffic."[^1] Adds dependency on 'protobuf', 'protobuf-c', 'libfstrm'. Listed packages are available from OpenWrt packages, have uncomplicated manifests and while 'protobuf-c' doesn't have a maintainer since spring 2020, all the packages (including 'protobuf-c') seem to be maintained - the last updates of all of them in autumn 2021. As stated by Vladimír Čunát from Knot Resolver team they build dnstap while packaging for majority of standard Linux distributions. Therefore this change brings us closer to expected default. [^1]: https://knot-resolver.readthedocs.io/en/stable/modules-dnstap.html Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
* | | | | | knot-resolver: do not overwrite -Ddnstap=enabled configurationŠimon Bořek2024-03-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It was possible to enable dnstap in menuconfig, but the configuration only added dependencies while leaving dnstap module build disabled. Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
* | | | | | snort3: Fix compilation with GCC 13Hauke Mehrtens2024-03-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes a compile problem with GCC 13. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* | | | | | gost_engine: Update to version 3.0.3Hauke Mehrtens2024-03-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This version contains minor bugfixes. It fixes a compile problem with GCC 13. Changes: https://github.com/gost-engine/engine/compare/v3.0.1...v3.0.3 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* | | | | | imagemagick: update to 7.1.1.29krant2024-03-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Don't ignore version suffix (upstream 7.1.1-29 becomes 7.1.1.29) - Avoid superfluous libstdcpp dependency Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* | | | | | giflib: update to 5.2.2krant2024-03-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Drop upstreamed CVE patches. Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* | | | | | openvpn: update to 2.6.10Ivan Pavlov2024-03-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a bugfix release containing several security fixes specific to the Windows platform. Bug fixes --------- - Windows: if the win-dco driver is used (default) and the GUI requests use of a proxy server, the connection would fail. Disable DCO in this case. - Compression: minor bugfix in checking option consistency vs. compiled-in algorithm support - systemd unit files: remove obsolete syslog.target Security fixes -------------- - CVE-2024-27459: Windows: fix a possible stack overflow in the interactive service component which might lead to a local privilege escalation. - CVE-2024-24974: Windows: disallow access to the interactive service pipe from remote computers. - CVE-2024-27903: Windows: disallow loading of plugins from untrusted installation paths, which could be used to attack openvpn.exe via a malicious plugin. For details refer to https://github.com/OpenVPN/openvpn/blob/v2.6.10/Changes.rst Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
* | | | | | docker-compose: Update to version 2.26.0Javier Marcet2024-03-23
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Javier Marcet <javier@marcet.info>
* | | | | | netbird: update to 0.26.3jiangslee2024-03-23
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: jiangslee <jiangsili@qq.com>
* | | | | | tailscale: Update to 1.62.0Zephyr Lykos2024-03-23
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | https://github.com/tailscale/tailscale/releases/tag/v1.62.0 Signed-off-by: Zephyr Lykos <git@mochaa.ws>
* | | | | Merge pull request #23684 from stangri/master-pbrStan Grishin2024-03-22
|\ \ \ \ \ | |/ / / / |/| | | | pbr: update to 1.1.4-5
| * | | | pbr: update to 1.1.4-5Stan Grishin2024-03-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This update includes the following changes: 1. Makefile * update copyright * attempt to implement the proper variants to avoid luci-app dependency on both variants * quietly stop service on uninstall 2. Config-file * add the list of dnsmasq instances to target in supported dnsmasq modes * for default pbr variant, set the `resolver_set` to `dnsmasq.nftset` * for iptables pbr variant, set the `resolver_set` to `dnsmasq.ipset` * add the `nft_file_support` (disabled by default) * introduce `procd_boot_delay` to delay service start on boot * introduce the following nft set creation options: * nft_set_auto_merge * nft_set_counter * nft_set_flags_interval * nft_set_flags_timeout * nft_set_gc_interval * nft_set_policy * nft_set_timeout * add the pbr.user.wg_server_and_client custom user script to allow running wg server and client at the same time * add the "Ignore Local Requests" sample policy 3. Hotplug firewall/interface scripts * better logged messages 4. The pbr and pbr-iptables uci defaults script * use functions from the init script * improve vpn-policy-routing migration 5. The pbr-netifd uci defaults script * use functions from the init script * improve uci operations 6. Introduce the firewall.include file 7. Improve pbr.user.aws custom user script 8. Improve pbr.user.netflix custom user script 9. Introduce pbr.user.wg_server_and_client custom user script 10. Update the init file: * refactor some code to allow the init script file to be sourced by the uci defaults scripts and the luci rpcd script for shared functions * add support for `nft_file_mode` in which service prepares the fw4-compatible atomic nft/include file for faster operations on service reload * improve Tor support (nft mode only) * implement support for nft set options * update validation functions for new options/parameters Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | opus: update to 1.5.1krant2024-03-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Switch to Meson build system - Update patch with Meson build fixes Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* | | | | tgt: update to 1.0.91Maxim Storchak2024-03-22
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
* | | | | libstrophe: update to 0.13.1krant2024-03-22
| | | | | | | | | | | | | | | | | | | | Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* | | | | minisatip: update to 1.3.4krant2024-03-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Configure option 'dvbaes' renamed to 'dvbca' Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* | | | | minizip: update to 4.0.5krant2024-03-22
| | | | | | | | | | | | | | | | | | | | Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* | | | | squid: update to 6.8krant2024-03-22
| | | | | | | | | | | | | | | | | | | | Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* | | | | libdeflate: update to 1.19krant2024-03-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Use proper tarball URL. Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* | | | | hwdata: update to 0.380krant2024-03-22
| | | | | | | | | | | | | | | | | | | | Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* | | | | mpg123: update to 1.32.5krant2024-03-22
| | | | | | | | | | | | | | | | | | | | Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* | | | | unrar: update to 7.0.7krant2024-03-22
| | | | | | | | | | | | | | | | | | | | Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* | | | | git-lfs: update to 3.5.1krant2024-03-22
| | | | | | | | | | | | | | | | | | | | Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* | | | | git: update to 2.44.0krant2024-03-22
| | | | | | | | | | | | | | | | | | | | Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* | | | | erlang: update to 26.2.3krant2024-03-22
| | | | | | | | | | | | | | | | | | | | Signed-off-by: krant <aleksey.vasilenko@gmail.com>