aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* net-tools: Revert "net-tools: add netstat utiltiy"HEADmasterFlorian Eckert2024-05-08
| | | | | | | This reverts commit d932a867e9445a54e49ecbff4e07bb2d1d0197be as this changes has not been reviewed and must be reverted. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* zerotier: update to 1.14.0Moritz Warning2024-05-07
| | | | | | Includes refreshed patches. Signed-off-by: Moritz Warning <moritzwarning@web.de>
* Merge pull request #24088 from TDT-AG/pr/20240506-net-toolsFlorian Eckert2024-05-07
|\ | | | | net-tools: add netstat utiltiy
| * net-tools: add netstat utiltiyFlorian Eckert2024-05-06
| | | | | | | | | | | | Some user may want or need the full fuctionality of the netstat tool. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | Merge pull request #24089 from TDT-AG/pr/20240506-stunnelFlorian Eckert2024-05-07
|\ \ | | | | | | stunnel: update to version 5.72
| * | stunnel: update to version 5.72Florian Eckert2024-05-06
| |/ | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | strongswan: Add missing declarations in swanctlPhilip Prindeville2024-05-06
| | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | nginx: QUIC: Fix SSL 3.0 deprecated functionSean Khan2024-05-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | `EVP_CIPHER_CTX_cipher()` function was deprecated in OpenSSL 3.0. As per OpenSSL's recommendation (https://www.openssl.org/docs/manmaster/man3/EVP_CIPHER_CTX_get0_cipher.html) switch to using `EVP_CIPHER_CTX_get0_cipher()` instead. With this change and recent commit to nginx-util #23935. We should now be able to build nginx + modules with fully compliant calls to OpenSSL 3.0+ with legacy features disabled. Signed-off-by: Sean Khan <datapronix@protonmail.com> Link: https://github.com/openwrt/packages/pull/24005 Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | Merge pull request #24092 from nmav/tmp-fix-ocserv-ipcalcNikos Mavrogiannopoulos2024-05-06
|\ \ | | | | | | ocserv: set ipcalc explicitly
| * | ocserv: set ipcalc explicitlyNikos Mavrogiannopoulos2024-05-06
|/ / | | | | | | | | | | | | This is a mandatory tool for the test suite, but we do not run it. Fixes compilation. Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
* / openssh-keygen: Make ssh-keygen as an alternative to dropbearkeySergey Ponomarev2024-05-06
|/ | | | | | | | | | | | | | | The DropBear's dropbearkey tool is compatible with OpenSSH ssh-keygen. It was set by default as the /usr/bin/ssh-keygen program since the PR https://github.com/openwrt/openwrt/pull/14174 Now if a user need for a full ssh-keygen the openssh-keygen package should substitute it gracefully as an alternative. Signed-off-by: Sergey Ponomarev <stokito@gmail.com> Link: https://github.com/openwrt/packages/pull/22861 [ wrap to 80 columns ] Link: https://github.com/openwrt/packages/pull/22861 Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* atlas-probe: fix version for APKFlorian Eckert2024-05-06
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* faad2: fix version for APKFlorian Eckert2024-05-06
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* zlog: fix version for APKFlorian Eckert2024-05-06
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* ocserv: updated to 1.3.0Nikos Mavrogiannopoulos2024-05-06
| | | | Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
* speedtest-go: update to 1.7.0TeleostNaCl Dai2024-05-06
| | | | | | Update speedtest-go version to 1.7.0 Signed-off-by: TeleostNaCl Dai <teleostnacl@gmail.com>
* banip: update 0.9.5-5Dirk Brenken2024-05-05
| | | | | | | * fix a processing race condition * it's now possible to disable the icmp/syn/udp safeguards in pre-routing - set the threshold to '0'. Signed-off-by: Dirk Brenken <dev@brenken.org>
* libs: glib2: fix provided pkg-config and always use host toolsChristian Marangi2024-05-05
| | | | | | | | | | | | | For the InstallDev target, the pkg-config should point to the glib2 host tools for glib_compile_resources, gdbus_codegen, glib_genmarshal and glib_mkenums instead of pointing to the targets ones as they are unusable by the host machine (due to crosscompiling) Fix the pkg-config to reference the host tools by replaying the entry and use the prefix_hostpkg variable provided by our pkg-config. Link: https://github.com/openwrt/packages/pull/23881 Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* Merge pull request #24081 from mhei/fix-buildbots-for-gensioMichael Heimpold2024-05-05
|\ | | | | gensio: add patch with workaround for buildbots (refs #24047)
| * gensio: add patch with workaround for buildbots (refs #24047)Michael Heimpold2024-05-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This should solve the issue found on the buildbots: -snip- ... checking consistency of all components of python development environment... yes ./configure: line 24172: test: =: unary operator expected checking for pam_start in -lpam... (cached) no ... -snap- For still unknown reason, AX_PYTHON_DEVEL from the included m4 file is not used which would set the variable the correct way. Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | rust: Update to 1.78.0Tianling Shen2024-05-05
|/ | | | | | | - Switch back to .gz tarball - Replace local bootstrap cache hack with upstreamed option Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* rtty: update to 8.1.2Jianhui Zhao2024-05-04
| | | | Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
* lua-eco: update to 3.5.0Jianhui Zhao2024-05-04
| | | | | | | MQTT code refactoring has been done since 3.5.0 that mqtt.so no longer exists. Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
* flashrom: strip leading whitespace from PROGRAMMER_ARGSFederico Capoano2024-05-04
| | | | | | Newer version of meson do not allow empty arguments. Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
* uspot: update to Git HEAD (2024-05-03)Thibaut VARÈNE2024-05-04
| | | | | | | | | | | | | | 5e2d15a110bb treewide: remove tip_mode e2dbdef4cf1e treewide: rename spotfilter -> uspotfilter ef0f5291365b uspot/uspotfilter: implement disconnect_delay 92d3356d3fb3 update README Update the package Makefile to reflect the changes from the following above-listed commit: e2dbdef4cf1e treewide: rename spotfilter -> uspotfilter Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
* nano: update to 8.0Hannu Nyman2024-05-03
| | | | | | Update nano editor to version 8.0 Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* v2ray-core: Update to 5.16.0Tianling Shen2024-05-03
| | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* alist: Update to 3.34.0Tianling Shen2024-05-03
| | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* dnsproxy: Update to 0.71.1Tianling Shen2024-05-03
| | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* speedtest-go: add new packageTeleostNaCl Dai2024-05-03
| | | | | | | | This is a Command Line Interface (CLI) and pure Go API to test internet speed using speedtest.net. Its upstream is https://github.com/showwin/speedtest-go Signed-off-by: TeleostNaCl Dai <teleostnacl@gmail.com>
* Merge pull request #24064 from G-M0N3Y-2503/docker-updateTianling Shen2024-05-03
|\ | | | | Docker: Update to 26.1.0
| * docker: Update to 26.1.0Gerard Ryan2024-05-02
| | | | | | | | | | | | * Removed unnecessary GO lang variables Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
| * dockerd: Update to 26.1.0Gerard Ryan2024-05-02
| | | | | | | | | | | | * Removed unnecessary GO lang variables Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
| * containerd: Update to 1.7.15Gerard Ryan2024-05-02
| | | | | | | | | | | | | | * Explicitly list GO_PKG_INSTALL_EXTRA * Removed unnecessary GO lang variables Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* | v2ray-geodata: Update to latest versionTianling Shen2024-05-03
| | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | xray-core: Update to 1.8.11Tianling Shen2024-05-03
|/ | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* gnutls: Update to version 3.8.5Pascal Ernster2024-05-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | All patches automatically refreshed. The most important changes are two "medium" CVEs fixed in GnuTLS 3.8.4: - CVE-2024-28834 / GNUTLS-SA-2023-12-04 A vulnerability was found that the deterministic ECDSA code leaks bit-length of random nonce which allows for full recovery of the private key used after observing a few hundreds to a few thousands of signatures on known messages, due to the application of lattice techniques. The issue was reported in the issue tracker as [#1516](https://gitlab.com/gnutls/gnutls/-/issues/1516). - CVE-2024-28835 / GNUTLS-SA-2024-01-23 When validating a certificate chain with more then 16 certificates GnuTLS applications crash with an assertion failure. The issue was reported in the issue tracker as [#1527](https://gitlab.com/gnutls/gnutls/-/issues/1527) and [#1525](https://gitlab.com/gnutls/gnutls/-/issues/1525). Augmented copy/extract from upstream's NEWS file since GnuTLS 3.8.3: - Version 3.8.5 (released 2024-04-04) - libgnutls: Due to majority of usages and implementations of RSA decryption with PKCS#1 v1.5 padding being incorrect, leaving them vulnerable to Marvin attack, the RSAES-PKCS1-v1_5 is being deprecated (encryption and decryption) and will be disabled in the future. A new option `allow-rsa-pkcs1-encrypt` has been added into the system-wide library configuration which allows to enable/disable the RSAES-PKCS1-v1_5. Currently, the RSAES-PKCS1-v1_5 is enabled by default. - libgnutls: Added support for RIPEMD160 and PBES1-DES-SHA1 for backward compatibility with GCR. - libgnutls: A couple of memory related issues have been fixed in RSA PKCS#1 v1.5 decryption error handling and deterministic ECDSA with earlier versions of GMP. These were a regression introduced in the 3.8.4 release. See [#1535](https://gitlab.com/gnutls/gnutls/-/issues/1535) and [!1827](https://gitlab.com/gnutls/gnutls/-/merge_requests/1827). - build: Fixed a bug where building gnutls statically failed due to a duplicate definition of `nettle_rsa_compute_root_tr()`. - API and ABI modifications: - `GNUTLS_PKCS_PBES1_DES_SHA1`: New enum member of `gnutls_pkcs_encrypt_flags_t`. - Version 3.8.4 (released 2024-03-18) - libgnutls: RSA-OAEP encryption scheme is now supported To use it with an unrestricted RSA private key, one would need to initialize a `gnutls_x509_spki_t` object with necessary parameters for RSA-OAEP and attach it to the private key. It is also possible to import restricted private keys if they are stored in PKCS#8 format. - libgnutls: Fix side-channel in the deterministic ECDSA. Reported by George Pantelakis ([#1516](https://gitlab.com/gnutls/gnutls/-/issues/1516)). [GNUTLS-SA-2023-12-04, CVSS: medium] [CVE-2024-28834] - libgnutls: Fixed a bug where certtool crashed when verifying a certificate chain with more than 16 certificates. Reported by William Woodruff ([#1525](https://gitlab.com/gnutls/gnutls/-/issues/1525)) and yixiangzhike ([#1527](https://gitlab.com/gnutls/gnutls/-/issues/1527)). [GNUTLS-SA-2024-01-23, CVSS: medium] [CVE-2024-28835] - libgnutls: Compression libraries are now loaded dynamically as needed instead of all being loaded during gnutls library initialization. As a result, the library initialization should be faster. - build: The gnutls library can now be linked with the static library of GMP. Note that in order for this to work libgmp.a needs to be compiled with -fPIC and libhogweed in Nettle also has to be linked to the static library of GMP. This can be used to prevent custom memory allocators from being overriden by other applications. - API and ABI modifications: - `gnutls_x509_spki_get_rsa_oaep_params`: New function. - `gnutls_x509_spki_set_rsa_oaep_params`: New function. - `GNUTLS_PK_RSA_OAEP`: New enum member of `gnutls_pk_algorithm_t`. Signed-off-by: Pascal Ernster <git@hardfalcon.net>
* nextdns: Update to version 1.43.3Olivier Poitrey2024-05-01
| | | | Signed-off-by: Olivier Poitrey <rs@nextdns.io>
* banip: update 0.9.5-4Dirk Brenken2024-05-01
| | | | | | | * optimized adding suspicious IPs to Sets in the log monitor * re-added ipblackhole feed Signed-off-by: Dirk Brenken <dev@brenken.org>
* hyperscan: fix broken build w/ external toolchainJohn Audia2024-04-30
| | | | | | | | | | | | | | | | | If building with the project external toolchain, the gcc check fails to set the correct value for TUNE_FLAG to allow the min supported SSSE3 compiler support test to pass. This patch hacks the file to set to the correct value. Links to upstream bug reports: https://github.com/openwrt/openwrt/issues/15216 https://github.com/intel/hyperscan/issues/431 Build system: x86/64 (build system toolchain and x86/64 w/ external toolchain (18-Apr-2024 snapshot) Build-tested: x86/64/AMD Cezanne Run-tested: x86/64/AMD Cezanne Signed-off-by: John Audia <therealgraysky@proton.me>
* frr: fix host build error on macOSGeorgi Valkov2024-04-30
| | | | | | | | | | | | | | | Fixes: lib/command_graph.c:16:1: error: argument to 'section' attribute is not valid for this target: mach-o section specifier requires a segment and section separated by a comma DEFINE_MTYPE_STATIC(LIB, CMD_TOKENS, "Command Tokens"); ^ ./lib/memory.h:139:2: note: expanded from macro 'DEFINE_MTYPE_STATIC' DEFINE_MTYPE_ATTR(group, name, static, desc) \ ^ ./lib/memory.h:109:26: note: expanded from macro 'DEFINE_MTYPE_ATTR' __attribute__((section(".data.mtypes"))) = { { \ [1] https://github.com/FRRouting/frr/pull/6032 [2] https://github.com/FRRouting/frr/pull/15890 Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
* libideviceactivation: add package from gitGeorgi Valkov2024-04-30
| | | | | | | | | Manage the activation of Apple iOS devices There have been no releases since 2020-06-16. Use the latest git 6925d58ef7994168fb9585aa6f48421149982329 Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
* ideviceinstaller: add package from gitGeorgi Valkov2024-04-30
| | | | | | | | | Manage apps and app archives on iOS devices There have been no releases since 2020-06-16. Use the latest git 22872c3571b8d2646a9fbb74ec1d7e186941053d Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
* ifuse: add package from gitGeorgi Valkov2024-04-30
| | | | | | | | | Fuse filesystem access to iOS devices There have been no releases since 2020-06-16. Use the latest git 814a0e38050850937debd697fcfe6eca3de1b66f Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
* idevicerestore: update to the latest git versionGeorgi Valkov2024-04-30
| | | | | | | There have been no releases since 2020-06-16. Update to the latest git 6d40d0ab626eb0ffee4f005b7fdc915bc561deb9 Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
* libirecovery: update to 1.2.0Georgi Valkov2024-04-30
| | | | | | Switched to GitHub tarballs as they are now available. Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
* usbmuxd: update to the latest git versionGeorgi Valkov2024-04-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There have been no releases since 2020-06-16. Update to the latest git 360619c5f721f93f0b9d8af1a2df0b926fbcf281 Fix: --version did not print the version. [1] changes to mode 3 CDC NCM by default. Revert back to mode 1: Originally mode 1 was used, where a tethered iPhone appears as an Ethernet interface, handled by the ipheth driver. This has been the default for many years and is known to work on iPhone 3G, 4S, 7 Plus, 11 and newer. Since [2] ipheth supports CDC NCM in mode 1, and configures the iPhone to use it. In mode 3, the Ethernet interface is handled by kmod-usb-net-cdc-ncm. This driver has better performance, but now the iPhone does not provide DHCP or Internet connectivity, so we should revert to mode 1. Analysing the network traffic, shows that both the iPhone and OpenWRT are DHCP clients. The iPhone does not act as a DHCP server. I can set a static IP on OpenWRT and lease 172.20.10.1 to the iPhone. Then I can ping the iPhone and I have IPv4 connectivity. However the iPhone does not provide Internet connectivity to OpenWRT. Maybe in mode 3, the iPhone is a client meant to receive Internet over USB and therefore it is not a gateway? Attempts to switch old iPhones, such as 3G and 4S to mode 3 fail. They remain in mode 1 and work correctly using the ipheth driver. Comparison, tested on iPhone 7 Plus and 11 - mode 1 eth0 kmod-usb-net-ipheth 264 Mbit/s DHCP server, Internet - mode 3 usb0 kmod-usb-net-cdc-ncm 304 Mbit/s DHCP client, no Internet [1] https://github.com/libimobiledevice/usbmuxd/commit/c7a0dd9b82633ea347497626282e3051a469ef50 [2] https://github.com/openwrt/openwrt/commit/680f8738d02a1876ae4cd11aacf9cd56e520fadf Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
* libimobiledevice: update to the latest git versionGeorgi Valkov2024-04-30
| | | | | | | There have been no releases since 2020-06-16. Update to the latest git 5f083426b4ede24b2576f3a56eaf8ac3632c02f7 Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
* libusbmuxd: update to 2.1.0Georgi Valkov2024-04-30
| | | | | | Switched to GitHub tarballs as they are now available. Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
* libimobiledevice-glue: add package 1.2.0Georgi Valkov2024-04-30
| | | | | | A library with common code used by the libimobiledevice project. Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
Powered by cgit, Themed by Ted Yin.