Dirk Brenken [Fri, 7 Jul 2023 18:03:08 +0000 (20:03 +0200)]
banip: update 0.8.9-2
* fix a corner case backup issue with empty feed downloads
Signed-off-by: Dirk Brenken <dev@brenken.org>
Dirk Brenken [Fri, 7 Jul 2023 16:28:21 +0000 (18:28 +0200)]
banip: release 0.8.9-1
* added HTTP ETag or entity tag support to download only ressources that have been updated on the server side,
to save bandwith and speed up banIP reloads
* added 4 new feeds: binarydefense, bruteforceblock, etcompromised, ipblackhole (see readme)
* updated the readme
Signed-off-by: Dirk Brenken <dev@brenken.org>
Peter van Dijk [Mon, 3 Jul 2023 08:11:46 +0000 (10:11 +0200)]
pdns-recursor: update to 4.9.0
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
Josef Schlehofer [Fri, 7 Jul 2023 12:05:48 +0000 (14:05 +0200)]
Merge pull request #21496 from Ansuel/add-mtools
net-mtools: Add new package to debug multicast setups
Javier Marcet [Sat, 1 Jul 2023 18:32:53 +0000 (20:32 +0200)]
nyx: fix python 3.11 compatibility
Signed-off-by: Javier Marcet <javier@marcet.info>
Christian Marangi [Tue, 4 Jul 2023 04:52:52 +0000 (06:52 +0200)]
net-mtools: Add new package to debug multicast setups
Add new package to debug multicast setups. This is required to use
kselftests script for network testing.
net-mtools is used instead of mtools as it does conflicts with another
package that is also called mtools.
Some additional patch from Vladimir Oltean are added to make the tool
works on kernel selftests scripts.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Christian Marangi [Wed, 5 Jul 2023 00:32:56 +0000 (02:32 +0200)]
nginx: don't install all module for FULL variant
We currently have a more or less circular dependency with nginx ssl and
full variant.
FULL variant depends on every nginx module. Every nginx module depends
on nginx-ssl.
Since nginx-full depends on an nginx module, nginx-ssl is installed as
module depends on it and then the installation fails as nginx-full
conflicts with nginx-ssl.
nginx-full in it's meaning is nginx built with every config selected and
it should not have module as dependency. In fact an user should always
install them separetly as while other things, local modification to the
nginx config file are required to include the just installed module.
To fix this circular dependency problem, drop the dependency of every
nginx module for FULL variant.
Fixes: #21300
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Tiago Gaspar [Sun, 2 Jul 2023 17:14:10 +0000 (18:14 +0100)]
nginx: add quic modue
This commit adds support for http/3. This is an experimental version
and isn't fully supported because nginx is being built with the regular
OpenSSL and the regular one doesn't support quic.
Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
Tiago Gaspar [Sun, 2 Jul 2023 17:11:28 +0000 (18:11 +0100)]
nginx: update to 1.25.1
Update nginx to 1.25.1.
*) Feature: the "http2" directive, which enables HTTP/2 on a per-server
basis; the "http2" parameter of the "listen" directive is now
deprecated.
*) Change: HTTP/2 server push support has been removed.
*) Change: the deprecated "ssl" directive is not supported anymore.
*) Bugfix: in HTTP/3 when using OpenSSL.
Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
[ improve commit title and add nginx changelog ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Javier Marcet [Fri, 30 Jun 2023 14:21:19 +0000 (16:21 +0200)]
nginx: add support for MaxMind GeoIP2 databases
Signed-off-by: Javier Marcet <javier@marcet.info>
Christian Lachner [Sat, 24 Jun 2023 07:17:06 +0000 (09:17 +0200)]
liburing: Update to v2.4
- Updated download URL and hash
- Switched to downloading bz2 archives to save bandwidth
Signed-off-by: Christian Lachner <gladiac@gmail.com>
Javier Marcet [Sat, 1 Jul 2023 18:55:30 +0000 (20:55 +0200)]
python-docker: Update to 6.1.3
Signed-off-by: Javier Marcet <javier@marcet.info>
Javier Marcet [Sun, 21 May 2023 13:08:03 +0000 (15:08 +0200)]
python-docker: Update to 6.1.2
Signed-off-by: Javier Marcet <javier@marcet.info>
Christian Lachner [Tue, 4 Jul 2023 06:09:39 +0000 (08:09 +0200)]
haproxy: update to v2.8.1
- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog
Signed-off-by: Christian Lachner <gladiac@gmail.com>
Tianling Shen [Tue, 4 Jul 2023 08:04:54 +0000 (16:04 +0800)]
rclone: Update to 1.63.0
While at it fixed a typo error of license files variable.
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Jeffery To [Mon, 3 Jul 2023 06:41:18 +0000 (14:41 +0800)]
python-typing-extensions: Update to 4.7.1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Javier Marcet [Sat, 1 Jul 2023 18:51:17 +0000 (20:51 +0200)]
python-dotenv: update to v1.0.0
- 1.0.0:
- What's Changed:
- Handle situations where the cwd does not exist.
- Add python-decouple as a related project
- Drop support for python 3.7, add python 3.12-dev
- 0.21.1:
- Added:
- Use Python 3.11 non-beta in CI
- Modernize variables code
- Modernize main.py and parser.py code
- Improve conciseness of cli.py and init.py
- Improve error message for get and list commands when env file
can't be opened
- Updated Licence to align with BSD OSI template
Signed-off-by: Javier Marcet <javier@marcet.info>
Tianling Shen [Mon, 3 Jul 2023 14:05:28 +0000 (22:05 +0800)]
dnsproxy: Update to 0.51.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Philip Prindeville [Mon, 3 Jul 2023 03:27:08 +0000 (21:27 -0600)]
Merge pull request #21483 from pprindeville/acpica-unix-update-
20230628
acpica-unix: Update to
20230628
Philip Prindeville [Mon, 3 Jul 2023 02:54:15 +0000 (20:54 -0600)]
acpica-unix: Update to
20230628
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
Javier Marcet [Fri, 30 Jun 2023 03:18:51 +0000 (05:18 +0200)]
docker-compose: Update to version 2.19.1
Signed-off-by: Javier Marcet <javier@marcet.info>
Javier Marcet [Sat, 1 Jul 2023 18:43:28 +0000 (20:43 +0200)]
python-websocket-client: update to 1.6.1
- 1.6.1
- Fix Dispatcher keyboard interrupt. Should solve reconnect loop
with rel
- 1.6.0
- Fix teardown issue when ping thread is not properly ended
- Fix double ping wait time on first ping
- Minor typehints improvements
- 1.5.3
- Add logic to avoid error in the case where content-length header
does not exist, bug introduced in 1.5.2
- Fix wsdump.py script typing, bug introduced in 1.5.2
- 1.5.2
- Add typehints
- Fix pytype errors
- Fix args passed to logging function
- Standardize PEP 3101 formatting
- Add more verbose exception for unsuccessful handshake
Signed-off-by: Javier Marcet <javier@marcet.info>
Javier Marcet [Sat, 1 Jul 2023 18:20:05 +0000 (20:20 +0200)]
python-stem: update to v1.8.2
Signed-off-by: Javier Marcet <javier@marcet.info>
Oskari Rauta [Sun, 28 May 2023 06:33:08 +0000 (09:33 +0300)]
libwebsockets: Fix -Werror=enum-int-mismatch in lws_tls_server_abort_connection()
with gcc 13 libwebsockets fails with -Werror=enum-int-mismatch with both
SSL variants. These 2 patches work out that issue. Problem is mentioned
as a issue in openwrt/packages#20949 and instead of overriding issue
with appropriate CFLAGS, this approach was suggested for me as it's
been made as a PR (for openssl) at warmcat/libwebsockets#2824
Second patch for mbedtls, was made by me using same approach
as was used of openssl.
Eventually these propably will be merged into libwebsockets mainstream.
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
W. Michael Petullo [Fri, 30 Jun 2023 18:22:07 +0000 (13:22 -0500)]
grilo-plugins: update to 0.3.16
This drops the opensubtitles plugin, because it is not yet compatible
with libsoup3.
Signed-off-by: W. Michael Petullo <mike@flyn.org>
W. Michael Petullo [Fri, 30 Jun 2023 18:21:51 +0000 (13:21 -0500)]
grilo: update to 0.3.16
Signed-off-by: W. Michael Petullo <mike@flyn.org>
Jeffery To [Mon, 26 Jun 2023 05:00:05 +0000 (13:00 +0800)]
python-hatchling: Update to 1.18.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Jeffery To [Mon, 26 Jun 2023 05:38:11 +0000 (13:38 +0800)]
python-pluggy: Update to 1.2.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Van Waholtz [Sat, 1 Jul 2023 09:24:49 +0000 (17:24 +0800)]
sing-box: update to 1.3.0
Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
Salem Huang [Sun, 25 Jun 2023 16:43:29 +0000 (00:43 +0800)]
netbird: update to 0.21.7
1. Release notes:
https://github.com/netbirdio/netbird/releases/tag/v0.21.2
https://github.com/netbirdio/netbird/releases/tag/v0.21.3
https://github.com/netbirdio/netbird/releases/tag/v0.21.4
https://github.com/netbirdio/netbird/releases/tag/v0.21.5
https://github.com/netbirdio/netbird/releases/tag/v0.21.6
https://github.com/netbirdio/netbird/releases/tag/v0.21.7
2. Update GO_PKG_LDFLAGS, because of https://github.com/netbirdio/netbird/commit/
292ee260ad564d1e65199b1cb3430b0cd7ba9646
3. Define the configuration file.
Signed-off-by: Salem Huang <solohoh@hotmail.com>
Jeffery To [Wed, 28 Jun 2023 17:54:50 +0000 (01:54 +0800)]
python-markupsafe: Update to 2.1.3, add host build
The host build will be used for mako (to be added later).
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Jeffery To [Mon, 26 Jun 2023 05:59:56 +0000 (13:59 +0800)]
python-service-identity: Update to 23.1.0
This adds new build dependencies as the package switched to
pyproject.toml-based builds.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Jeffery To [Wed, 28 Jun 2023 17:22:03 +0000 (01:22 +0800)]
python-libmodbus: Update to 0.6.2
This also adds a source package (python3-libmodbus-src).
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Robert Högberg [Wed, 28 Jun 2023 17:23:39 +0000 (19:23 +0200)]
inadyn: update to 2.11.0
Signed-off-by: Robert Högberg <robert.hogberg@gmail.com>
Philip Prindeville [Tue, 27 Jun 2023 21:56:03 +0000 (15:56 -0600)]
strongswan: Update to 5.9.11
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
W. Michael Petullo [Wed, 28 Jun 2023 13:09:55 +0000 (08:09 -0500)]
vala: add self as maintainer of unmaintained package
Signed-off-by: W. Michael Petullo <mike@flyn.org>
W. Michael Petullo [Sun, 25 Jun 2023 20:36:28 +0000 (15:36 -0500)]
vala: patch to circumvent apparent pkgconf bug
There is an apparent bug in pkgconf 1.9 that broke building the OpenWrt
Vala package. This adds a patch to circumvent the bug. For the related
discussion, see:
https://github.com/openwrt/packages/issues/21359
The pkgconf bug appears similar to the one discussed here:
https://github.com/pkgconf/pkgconf/issues/268
Signed-off-by: W. Michael Petullo <mike@flyn.org>
Dirk Brenken [Fri, 30 Jun 2023 05:28:16 +0000 (07:28 +0200)]
adblock: update to 4.1.5-8
* adapt adguard_tracking source changes
Signed-off-by: Dirk Brenken <dev@brenken.org>
Robert Högberg [Sun, 11 Jun 2023 21:55:23 +0000 (23:55 +0200)]
minidlna: update to 1.3.3
Fixes CVE-2023-33476:
ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable
to Buffer Overflow. The vulnerability is caused by incorrect
validation logic when handling HTTP requests using chunked transport
encoding. This results in other code later using attacker-controlled
chunk values that exceed the length of the allocated buffer,
resulting in out-of-bounds read/write.
Signed-off-by: Robert Högberg <robert.hogberg@gmail.com>
Jeffery To [Wed, 28 Jun 2023 16:22:11 +0000 (00:22 +0800)]
python-gnupg: Update to 0.5.0
This also removes the dependency on gnupg as there are two packages for
gpg, gnupg and gnupg2; this library should work with either one.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Jeffery To [Wed, 28 Jun 2023 18:41:39 +0000 (02:41 +0800)]
python-werkzeug: Update to 2.3.6
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
John Thomson [Fri, 21 Oct 2022 03:49:42 +0000 (13:49 +1000)]
coova-chilli: fix kernel >= 5.17 compile
Signed-off-by: John Thomson <git@johnthomson.fastmail.com.au>
John Audia [Tue, 27 Jun 2023 12:22:04 +0000 (08:22 -0400)]
snort3: update to 3.1.64.0
Upstream bump
Signed-off-by: John Audia <therealgraysky@proton.me>
John Audia [Wed, 28 Jun 2023 16:30:13 +0000 (12:30 -0400)]
libdaq3: update to 3.0.11
Upstream bump
Signed-off-by: John Audia <therealgraysky@proton.me>
Christian Marangi [Thu, 29 Jun 2023 16:24:53 +0000 (18:24 +0200)]
netsniff-ng: backport patch fixing wrong args handling with musl
Backport a patch from upstream fixing wrong args handling with musl.
Before this patch non args must be passed at the end of the command due
to a musl limitation.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Philip Prindeville [Tue, 27 Jun 2023 21:48:38 +0000 (15:48 -0600)]
Merge pull request #21410 from pprindeville/isc-dhcp-dont-require-pools
isc-dhcp: don't require subnet pools
Jeffery To [Mon, 26 Jun 2023 06:06:46 +0000 (14:06 +0800)]
python-setuptools: Update to 68.0.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Jeffery To [Mon, 26 Jun 2023 06:28:51 +0000 (14:28 +0800)]
python-packages: Take over maintainership from Daniel Golle
This was requested in
https://github.com/openwrt/packages/pull/21227#issuecomment-
1567676980.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Jan Hák [Mon, 26 Jun 2023 11:07:06 +0000 (13:07 +0200)]
knot: update to version 3.2.8
Signed-off-by: Jan Hák <jan.hak@nic.cz>
Noah Meyerhans [Mon, 26 Jun 2023 03:02:35 +0000 (20:02 -0700)]
bind: bump to 9.18.16
Fixes CVEs:
- CVE-2023-2828: The overmem cleaning process has been improved, to
prevent the cache from significantly exceeding the configured
max-cache-size limit.
- CVE-2023-2911: A query that prioritizes stale data over lookup
triggers a fetch to refresh the stale data in cache. If the fetch is
aborted for exceeding the recursion quota, it was possible for named
to enter an infinite callback loop and crash due to stack overflow.
The complete list of changes is available in the upstream release
notes at
https://ftp.isc.org/isc/bind9/cur/9.18/doc/arm/html/notes.html#notes-for-bind-9-18-16
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
Tianling Shen [Sun, 25 Jun 2023 09:04:14 +0000 (17:04 +0800)]
Merge pull request #21405 from jefferyto/selinux-update
selinux: Update selinux packages to 3.5, setools to 4.4.2, reorganize packages
John Thomson [Fri, 21 Oct 2022 04:01:24 +0000 (14:01 +1000)]
libpfring: update to 8.4.0
Release notes:
https://github.com/ntop/PF_RING/releases/tag/8.4.0
Signed-off-by: John Thomson <git@johnthomson.fastmail.com.au>
John Thomson [Sat, 22 Oct 2022 09:04:38 +0000 (19:04 +1000)]
xr_usb_serial_common: bump to 2023-03-31
Fix 6.1 kernel compile
git log --oneline ecc6eb.. -- xr_usb_serial_common-1a/
90ad530166f0 Support Linux 6.1
af618e2eded6 #45 Fix some warnings
Signed-off-by: John Thomson <git@johnthomson.fastmail.com.au>
Jeffery To [Sat, 24 Jun 2023 12:20:47 +0000 (20:20 +0800)]
Merge pull request #21366 from zhanhb/haproxy
haproxy: update to v2.8.0
Dirk Brenken [Sat, 24 Jun 2023 11:09:40 +0000 (13:09 +0200)]
banip: update 0.8.8-2
* process local lists in strict sequential order to prevent possible race conditions
* support ranges in the IP search, too
* fix some minor search issues
Signed-off-by: Dirk Brenken <dev@brenken.org>
Huangbin Zhan [Wed, 14 Jun 2023 04:19:28 +0000 (12:19 +0800)]
haproxy: update to v2.8.0
- New major LTS release (https://www.mail-archive.com/haproxy@formilux.org/msg43600.html)
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
Tianling Shen [Thu, 22 Jun 2023 06:27:18 +0000 (14:27 +0800)]
vsftpd: fix compilation with musl 1.2.4
musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.
Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Remi Gacogne [Mon, 19 Jun 2023 07:48:08 +0000 (09:48 +0200)]
dnsdist: Move the configuration to Config.in
Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
Remi Gacogne [Tue, 13 Jun 2023 15:48:27 +0000 (17:48 +0200)]
dnsdist: Split in two packages `dnsdist` and `dnsdist-full`
`dnsdist-full` has all optional features enabled, but is a big package
in term of both flash and memory footprint.
`dnsdist` only keeps the features that make the most sense
on embeded devices, but can also be customised to match the
user's needs, up to the point where it matches `dnsdist-full`.
Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
Tianling Shen [Mon, 19 Jun 2023 09:25:04 +0000 (17:25 +0800)]
gitlab-runner: Update to 16.0.2
* Added test.sh script
* Fixed build with riscv64
* Passed package version via go ldflags
* Refreshed patches
* Removed useless test binaries from package
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Remi Gacogne [Wed, 14 Jun 2023 13:22:03 +0000 (15:22 +0200)]
h2o: Reduce the size of the default HTTP2 buffer
The initial value takes 80kB of memory for each HTTP/2 connection
which is a lot on small devices. Using 8kB instead saves a fair
amount of memory without sacrificing performance.
Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
Remi Gacogne [Wed, 14 Jun 2023 13:19:58 +0000 (15:19 +0200)]
h2o: Do not initialize the mime types map at startup
The map takes a fair amount of memory and the only consumer of this
library, dnsdist, does not need it.
Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
Remi Gacogne [Wed, 14 Jun 2023 13:18:29 +0000 (15:18 +0200)]
h2o: Build libh2o-evloop without yaml support
The only package using this library, dnsdist, does not require it
so let's save space and PSS memory.
Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
Wojciech Dubowik [Thu, 15 Jun 2023 14:08:16 +0000 (16:08 +0200)]
linuxptp: Update to 4.0
Major changes since version 3.1.1:
* Officially supports the 2019 version of IEEE 1588
* Improved unicast messaging
* Enhanced G.8275.2 profile
* More flexible Pulse Per Second (PPS) handling
* Virtual clock support
* Power profile support
* VLAN over bond support.
* Parallel Redundancy Protocol (PRP) trailer handling.
* Non-privileged read-only monitoring port.
* New statistics reporting.
[V2]
* reset package release
* adapt license name to the new format
Signed-off-by: Wojciech Dubowik <Wojciech.Dubowik@westermo.com>
Marius Dinu [Fri, 16 Jun 2023 12:59:44 +0000 (15:59 +0300)]
tvheadend: add dependency on gettext (host)
Gettext is a prerequisite to build OpenWrt according to:
https://openwrt.org/docs/guide-developer/toolchain/install-buildsystem
but github automated tests fail without this explicit dependency:
2023-06-19T08:02:45.1940511Z checking for py module gzip ... ok
2023-06-19T08:02:45.1968662Z checking for /builder/staging_dir/host/bin/pkg-config ...ok
2023-06-19T08:02:45.1998491Z ERROR: no gettext binaries found
2023-06-19T08:02:45.1999746Z checking for xgettext ... fail
2023-06-19T08:02:45.2008403Z make[2]: *** [Makefile:263: /builder/build_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/tvheadend-2023-06-05/.configured_a17fb5ef857664f03cd0ce37cc5ea591] Error 1
Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
Marius Dinu [Mon, 12 Jun 2023 07:47:03 +0000 (10:47 +0300)]
tvheadend: update to 2023-06-05
Update to git master 2023-06-05 and removed unneeded compatibility patch.
Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
Tianling Shen [Thu, 22 Jun 2023 05:22:08 +0000 (13:22 +0800)]
Merge pull request #21419 from QuintinHill/ble2mqtt-install-fix
python-ble2mqtt: fix installation of python program
Hirokazu MORIKAWA [Thu, 15 Jun 2023 06:49:25 +0000 (15:49 +0900)]
c-ares: bump to 1.19.1
This is a security and bugfix release.
Security
o CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
o CVE-2023-31147. Moderate. Insufficient randomness in generation of DNS
query IDs
o CVE-2023-31130. Moderate. Buffer Underwrite in ares_inet_net_pton()
o CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE during cross
compilation
Fixing libcares.pc
The pkg-config file libcares.pc in version 1.19.1 has been changed to be unsuitable for OpenWrt
and causes build errors with Openwrt packages that use libcares.
For this reason, libcares.pc was replaced.
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
Jeffery To [Wed, 21 Jun 2023 17:02:07 +0000 (01:02 +0800)]
Merge pull request #21147 from cottsay/openelp
openelp: Add new package
Tianling Shen [Wed, 21 Jun 2023 12:47:19 +0000 (20:47 +0800)]
cloudflared: Update to 2023.6.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
W. Michael Petullo [Tue, 20 Jun 2023 13:53:34 +0000 (08:53 -0500)]
shared-mime-info: update to 2.2
Signed-off-by: W. Michael Petullo <mike@flyn.org>
Tianling Shen [Wed, 21 Jun 2023 11:12:20 +0000 (19:12 +0800)]
Merge pull request #21421 from nxhack/node_18161
node: June 20 2023 Security Releases
Dirk Brenken [Wed, 21 Jun 2023 08:53:19 +0000 (10:53 +0200)]
banip: release 0.8.8-1
* Support MAC-/IPv4/IPv6 ranges in CIDR notation
* Support concatenation of local MAC addresses with IPv4/IPv6 addresses, e.g. to enforce dhcp assignments (see readme)
* small fixes & cosmetics
* update readme
Signed-off-by: Dirk Brenken <dev@brenken.org>
Nuno Gonçalves [Tue, 20 Jun 2023 16:49:40 +0000 (17:49 +0100)]
gl-mifi-mcu: remove package as it is device specific and I can't test it anymore
Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>
Florian Eckert [Wed, 21 Jun 2023 06:51:06 +0000 (08:51 +0200)]
Merge pull request #21378 from TDT-AG/pr/
20230615-modemmanager
modemmanager: do not cache virtual device events
Hirokazu MORIKAWA [Wed, 21 Jun 2023 02:27:48 +0000 (11:27 +0900)]
node: June 20 2023 Security Releases
Update to v18.16.1
The following CVEs are fixed in this release:
* CVE-2023-30581: mainModule.__proto__ Bypass Experimental Policy Mechanism (High)
* CVE-2023-30585: Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium)
* CVE-2023-30588: Process interuption due to invalid Public Key information in x509 certificates (Medium)
* CVE-2023-30589: HTTP Request Smuggling via Empty headers separated by CR (Medium)
* CVE-2023-30590: DiffieHellman does not generate keys after setting a private key (Medium)
* OpenSSL Security Releases (Depends on shared library provided by OpenWrt)
* OpenSSL security advisory 28th March.
* OpenSSL security advisory 20th April.
* OpenSSL security advisory 30th May
* c-ares vulnerabilities: (Depends on shared library provided by OpenWrt)
* GHSA-9g78-jv2r-p7vc
* GHSA-8r8p-23f3-64c2
* GHSA-54xr-f67r-4pc4
* GHSA-x6mf-cxr9-8q6v
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
Quintin Hill [Tue, 20 Jun 2023 21:39:58 +0000 (22:39 +0100)]
python-ble2mqtt: fix installation of python program
This was broken when the init script was added in
408502ee0.
Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
Nuno Gonçalves [Sun, 28 May 2023 21:06:35 +0000 (22:06 +0100)]
gl-mifi-mcu: make compatible with newer kernel (fix #21198)
Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>
Stan Grishin [Tue, 20 Jun 2023 15:58:05 +0000 (09:58 -0600)]
Merge pull request #21411 from stangri/master-https-dns-proxy
https-dns-proxy: update to 2023-05-25-2
Scott K Logan [Tue, 23 May 2023 20:14:13 +0000 (13:14 -0700)]
openelp: Add new package
OpenELP is an open source EchoLink proxy for Linux and Windows. It aims
to be efficient and maintain a small footprint, while still implementing
all of the features present in the official EchoLink proxy.
Signed-off-by: Scott K Logan <logans@cottsay.net>
Tianling Shen [Tue, 20 Jun 2023 05:11:16 +0000 (13:11 +0800)]
v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Tianling Shen [Tue, 20 Jun 2023 05:11:04 +0000 (13:11 +0800)]
xray-core: update to 1.8.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Jeffery To [Fri, 9 Jun 2023 12:27:58 +0000 (20:27 +0800)]
semodule-utils: Update to 3.5, reorganize package
* Add separate packages for each tool (semodule-*)
* Update the semodule-utils package as a meta-package that installs all
tools, keeping it functionally the same as the current semodule-utils
package
* Remove host build (not used by any other package)
* Update package titles, descriptions, and license files
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Jeffery To [Fri, 9 Jun 2023 04:41:13 +0000 (12:41 +0800)]
selinux-python: Update to 3.5, reorganize package
* Added packages:
* python3-seobject
Contains the seobject.py library file which was previously included
in selinux-semanage
* selinux-sepolicy
Contains the sepolicy and sepolgen tools which were previously
included in python3-sepolicy
* selinux-sepolgen-ifgen
Contains the sepolgen-ifgen tool which was previously included in
selinux-audit2allow
* selinux-python
A meta-package to install all tools
* Change the python3-sepolgen data_dir from /usr/share/sepolgen to
/etc/sepolgen (updated 0001-sepolgen-adjust-data_dir.patch), and add
the directory to conffiles
By default, the sepolgen-ifgen tool writes to a file named
"interface_info" in the data directory, to be read by the audit2allow
tool. The header comment in the perm_map file also suggests that the
file is customizable.
The best place for these files would be in /var/lib, but /etc is more
appropriate than /usr.
* Remove gui files from python3-sepolicy (0003-sepolicy-no-gui.patch)
* Fix ModuleNotFoundError raised by sepolicy
(0004-sepolicy-fix-get_os_version-except.patch)
Patch has been submitted upstream:
https://lore.kernel.org/selinux/
20230619063217.
3165462-1-jeffery.to@gmail.com/
* Update package titles, descriptions, and dependencies
* Use Py3Package to build Python bytecode and source packages
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Stan Grishin [Tue, 20 Jun 2023 02:02:45 +0000 (02:02 +0000)]
https-dns-proxy: update to 2023-05-25-2
bugfix: proper mdns object creation
bugfix: prevent fw errors by allowing custom interfaces in config
Signed-off-by: Stan Grishin <stangri@melmac.ca>
Philip Prindeville [Tue, 20 Jun 2023 01:29:17 +0000 (19:29 -0600)]
isc-dhcp: don't require subnet pools
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
Philip Prindeville [Tue, 20 Jun 2023 01:28:14 +0000 (19:28 -0600)]
Merge pull request #21402 from pprindeville/dhcpd-send-forced-options
isc-dhcp: force sending unrequested parameters
Philip Prindeville [Sun, 18 Jun 2023 02:09:48 +0000 (20:09 -0600)]
isc-dhcp: force sending unrequested parameters
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
Eneas U de Queiroz [Mon, 12 Jun 2023 11:31:25 +0000 (08:31 -0300)]
alpine: disable parallel build
Parallel build does not work because it may reach a point where OSTYPE
might be needed before it is actually built. They appear to run
parallel to each other:
echo slx > OSTYPE
[...]
cat: OSTYPE: No such file or directory
sh: line 1: test: too many arguments
cat: OSTYPE: No such file or directory
Already built for -- you must do "make clean" first
make[6]: *** [Makefile:706: rebuild] Error 1
make[6]: *** Waiting for unfinished jobs....
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Jeffery To [Fri, 9 Jun 2023 05:28:11 +0000 (13:28 +0800)]
selinux-python: Add default sections for Python and util packages
This also moves the python3-selinux dependency from the default section
into each util package.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Jeffery To [Fri, 9 Jun 2023 05:16:13 +0000 (13:16 +0800)]
selinux-python: Order package sections alphabetically
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Jeffery To [Thu, 8 Jun 2023 08:45:07 +0000 (16:45 +0800)]
python3-libsemanage: Update to 3.5, rename source/target package
* Rename:
* Source package from python3-libsemanage to python-semanage
* Target package from python3-libsemanage to python3-semanage
* Update dependents with new target package name
* Update package title, license files, and dependencies
* Remove Build/InstallDev (files not used by any other package)
* Use Py3Package to build Python bytecode and source packages
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Jeffery To [Thu, 8 Jun 2023 07:34:09 +0000 (15:34 +0800)]
python3-libselinux: Update to 3.5, rename source/target package
* Rename:
* Source package from python3-libselinux to python-selinux
* Target package from python3-libselinux to python3-selinux
* Update dependents with new target package name
* Remove patches:
* 010-setup-py-custom-cc.patch: LDSHARED is already set as part of
$(PYTHON3_VARS)
* 020-Make-use-of-variables-when-defining-libdir-and-inclu.patch: This
package doesn't install the libselinux.pc file
* Update package title and dependencies
* Remove Build/InstallDev (files not used by any other package)
* Use Py3Package to build Python bytecode and source packages
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Jeffery To [Fri, 9 Jun 2023 09:54:20 +0000 (17:54 +0800)]
setools: Update to 4.4.2, reorganize package
* Add separate packages for each tool (setools-*) and a package for the
Python bindings (python3-setools)
* Update the setools package as a meta-package that installs all tools,
keeping it functionally the same as the current setools package
* Remove gui tool (apol) and Python binding (setoolsgui)
* Simplify 030-remove-host-paths.patch (libraries installed by
Build/InstallDev are placed in $(STAGING_DIR)/usr/lib only)
* Update package titles, descriptions, license, and dependencies
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Tianling Shen [Mon, 19 Jun 2023 06:44:12 +0000 (14:44 +0800)]
cloudflared: Update to 2023.6.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Hirokazu MORIKAWA [Sat, 17 Jun 2023 00:52:25 +0000 (09:52 +0900)]
libuv: bump to 1.45.0
1.45.0
* linux: introduce io_uring support
* src: add new metrics APIs
* unix,win: give thread pool threads an 8 MB stack
* win,unix: change execution order of timers
1.44.2
* loop: better align order-of-events behavior between platforms
* zos: fix fs event not fired if the watched file is moved/removed/recreated
* win: Fix pipe resource leak if closed during connect (and other bugs)
* zos: don't error when killing a zombie process
* macos: avoid posix_spawnp() cwd bug
* kqueue: skip EVFILT_PROC events when invalidating events for an fd.
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
Facundo Acevedo [Fri, 9 Jun 2023 23:47:59 +0000 (20:47 -0300)]
arp-whisper: Add new package
arp-whisper listens to ARP requests on a network interface and responds
to them based on a list of IP-MAC address mappings defined in a
configuration file
Signed-off-by: Facundo Acevedo <facevedo@disroot.org>
Hannu Nyman [Sat, 17 Jun 2023 15:58:13 +0000 (18:58 +0300)]
collectd: handle renaming ipq807x as qualcommax
The 'ipq807x' target was renamed to be 'qualcommax' (and ipq807x was
set as subtarget). Adjust plugin target dependencies to this renaming.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Robert Marko [Sat, 17 Jun 2023 06:47:39 +0000 (08:47 +0200)]
mhz: add new package
mhz is a tool for mathematically calculating the current CPU frequency, it
has proven to be a really good help while developing CPU frequency scaling
solutions as it allows to independently prove that scaling actually works.
Now that the author has added a license we can package it for the all to
use.
Signed-off-by: Robert Marko <robimarko@gmail.com>
Oskari Rauta [Sun, 11 Jun 2023 11:13:30 +0000 (14:13 +0300)]
fatresize: bump release
use newer git commit, fixes problem with manually
specified sizes.
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>