feed/packages.git
13 months agonetbird: update to 0.23.9
Oskari Rauta [Fri, 13 Oct 2023 13:23:15 +0000 (16:23 +0300)]
netbird: update to 0.23.9

Changelog:
 - Add Pagination for IdP Users Fetch by @bcmmbaga in #1210
 - Rework peer connection status based on the update channel existence by @surik in #1213
 - Fix nil pointer exception in group delete by @pappz in #1211
 - Fix/key backup in config script by @pappz in #1206

Full changelog: https://github.com/netbirdio/netbird/compare/v0.23.8...v0.23.9

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
13 months agodnsdist: update to 1.8.2
Peter van Dijk [Wed, 11 Oct 2023 10:38:05 +0000 (12:38 +0200)]
dnsdist: update to 1.8.2

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
13 months agoh2o: ABI-breaking patch for CVE-2023-44487
Peter van Dijk [Wed, 11 Oct 2023 09:09:16 +0000 (11:09 +0200)]
h2o: ABI-breaking patch for CVE-2023-44487

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
bump soname

refreh

13 months agorust: update to 1.73.0
Oskari Rauta [Thu, 12 Oct 2023 13:24:31 +0000 (16:24 +0300)]
rust: update to 1.73.0

patches refreshed.
changelog at https://github.com/rust-lang/rust/releases/tag/1.73.0

Also added a configuration ardument and patch
from https://gitweb.gentoo.org/repo/gentoo.git/tree/dev-lang/rust/files/1.72.0-bump-libc-deps-to-0.2.146.patch?id=515b5920046117355d88b3494c74da269ce9b30a
to provide support for building rust on musl hosts.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
rust: add support for musl build hosts

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
13 months agonode: bump to v18.18.1
Hirokazu MORIKAWA [Thu, 12 Oct 2023 04:05:38 +0000 (13:05 +0900)]
node: bump to v18.18.1

Notable Changes

 This release addresses some regressions that appeared in Node.js 18.18.0:

    (Windows) FS can not handle certain characters in file name #48673
    18 and 20 node images give error - Text file busy (after re-build images) nodejs/docker-node#1968
    libuv update in 18.18.0 breaks webpack's thread-loader #49911

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
13 months agopython3-texttable: update to version 1.7.0
Javier Marcet [Thu, 12 Oct 2023 19:43:54 +0000 (21:43 +0200)]
python3-texttable: update to version 1.7.0

Signed-off-by: Javier Marcet <javier@marcet.info>
13 months agopython-websocket-client: update to 1.6.4
Javier Marcet [Thu, 12 Oct 2023 19:44:22 +0000 (21:44 +0200)]
python-websocket-client: update to 1.6.4

- 1.6.4
  - Add support for HTTP 307 and 308 redirect codes

- 1.6.3
  - Fix type hints issues
  - Add support for Python beta release 3.12 in CI
  - Add maintainer email in setup.py

Signed-off-by: Javier Marcet <javier@marcet.info>
13 months agocatatonit: update to 0.2.0
Oskari Rauta [Fri, 13 Oct 2023 13:16:34 +0000 (16:16 +0300)]
catatonit: update to 0.2.0

no functional changes from catatonit 0.1.7, but license change
from GPL-3.0-or-later to GPL-2.0-or-later.

Switch package source to release version from git commit version.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
13 months agopodman: update to 4.7.1
Oskari Rauta [Fri, 13 Oct 2023 13:10:13 +0000 (16:10 +0300)]
podman: update to 4.7.1

Bugfixes

 - Fixed a bug involving non-English locales of Windows where machine installs using user-mode networking were rejected due to erroneous version detection (#20209).
 - Fixed a regression in --env-file handling (#19565).
 - Fixed a bug where podman inspect would fail when stat'ing a device failed.

API
 - The network list compat API endpoint is now much faster (#20035).

Openwrt updates: added patch to allow building with musl-1.2.4
Patch source is from gentoo https://github.com/vimproved/gentoo/blob/c4c349f11a4352be1965726eadfe3a8bd8a6fa9c/app-containers/podman/files/podman-4.5.0-fix-build-with-musl-1.2.4.patch

Issue was discussed by @jefferyto at mattn/go-sqlite3#1177

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
13 months agonginx: fix nginx lua module compilation error
Christian Marangi [Fri, 13 Oct 2023 18:32:41 +0000 (20:32 +0200)]
nginx: fix nginx lua module compilation error

Add pending patch fixing compilation error for missing pcre.h.

This is caused by a bug on their end by trying to add pcre.h even if we
are using the PCRE2 library.

Fixes: f0754531c4d8 ("nginx: move to PCRE2")
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
13 months agoluajit2: update to v2.1-20231006
Javier Marcet [Fri, 13 Oct 2023 11:49:09 +0000 (13:49 +0200)]
luajit2: update to v2.1-20231006

Signed-off-by: Javier Marcet <javier@marcet.info>
13 months agoMerge pull request #22197 from oskarirauta/zsh
Josef Schlehofer [Wed, 11 Oct 2023 16:33:16 +0000 (18:33 +0200)]
Merge pull request #22197 from oskarirauta/zsh

zsh: use libpcre2 instead of libpcre

13 months agoopenblas: bump to version 0.3.24
Alexandru Ardelean [Mon, 9 Oct 2023 13:54:05 +0000 (16:54 +0300)]
openblas: bump to version 0.3.24

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
13 months agodnsproxy: Update to 0.56.1
Tianling Shen [Wed, 11 Oct 2023 14:48:22 +0000 (22:48 +0800)]
dnsproxy: Update to 0.56.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
13 months agoMerge pull request #22339 from jefferyto/rust-build-performance
Tianling Shen [Wed, 11 Oct 2023 13:03:33 +0000 (21:03 +0800)]
Merge pull request #22339 from jefferyto/rust-build-performance

rust: Improve build performance

13 months agopython-setuptools-rust: Set cargo profile from environment variable 22339/head
Jeffery To [Sun, 8 Oct 2023 12:24:38 +0000 (20:24 +0800)]
python-setuptools-rust: Set cargo profile from environment variable

This adds a patch (submitted upstream in
https://github.com/PyO3/setuptools-rust/pull/364), to read the profile
to pass to cargo from an environment variable.

This also updates the Python include files to set the environment
variable based on values from rust-values.mk.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
13 months agorust: Set release profile settings
Jeffery To [Sat, 30 Sep 2023 05:57:43 +0000 (13:57 +0800)]
rust: Set release profile settings

* codegen-units, lto, opt-level - Set to values to optimize binary
  size[1].

* overflow-checks - Enabled because in release mode, integer overflows
  are defined as two's complement wrap[2]. It is highly unlikely that
  any program is intentionally relying on this behaviour; it would be
  better to panic instead of continue execution in this case.

* debug, debug-assertions, panic, rpath - Set to their default (release)
  values, to override any settings made by packages, e.g. ripgrep sets
  debug = 1[3].

[1]: https://github.com/johnthagen/min-sized-rust
[2]: https://huonw.github.io/blog/2016/04/myths-and-legends-about-integer-overflow-in-rust/
[3]: https://github.com/BurntSushi/ripgrep/blob/13.0.0/Cargo.toml#L79-L80

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
13 months agorust: Add option to use sccache
Jeffery To [Mon, 25 Sep 2023 02:00:58 +0000 (10:00 +0800)]
rust: Add option to use sccache

Using sccache makes recompilation of rustc and Rust packages faster.

This also makes the rust package visible in menuconfig, in order for the
sccache options to be accessible.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
13 months agorust: Use make's jobserver when building packages
Jeffery To [Sat, 23 Sep 2023 12:24:37 +0000 (20:24 +0800)]
rust: Use make's jobserver when building packages

This allows cargo to use make's jobserver when building packages, by
marking the cargo command as recursive (with the + prefix[1]) and
setting MAKEFLAGS.

This also:

* Give cargo/x.py the build directory instead of having to change the
  current directory (and opening subshells)

* Set PKG_BUILD_PARALLEL/HOST_BUILD_PARALLEL for Rust packages to enable
  the use of make's jobserver

[1]: https://www.gnu.org/software/make/manual/html_node/POSIX-Jobserver.html

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
13 months agorust: Consolidate cargo environment variables
Jeffery To [Mon, 25 Sep 2023 03:58:12 +0000 (11:58 +0800)]
rust: Consolidate cargo environment variables

This consolidates all environment variables for cargo into:

* CARGO_HOST_CONFIG_VARS / CARGO_PKG_CONFIG_VARS

  These contain all cargo-specific environment variables, i.e. without
  "common" variables like CC.

* CARGO_HOST_VARS / CARGO_PKG_VARS (renamed from CARGO_VARS)

  These contain all environment variables to be passed to cargo.

This also:

* Set the CARGO_BUILD_TARGET environment variable instead of using the
  --target command-line option

* Update Python include files to use CARGO_HOST_CONFIG_VARS /
  CARGO_PKG_CONFIG_VARS

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
13 months agorust: Move CARGO_HOME to $(DL_DIR)/cargo
Jeffery To [Fri, 22 Sep 2023 16:26:20 +0000 (00:26 +0800)]
rust: Move CARGO_HOME to $(DL_DIR)/cargo

As CARGO_HOME mainly functions as a download and source cache[1], moving
it into $(DL_DIR) allows it to persist and be reused between different
buildroots/sdks (when DL_DIR is set to a custom/external location).

[1]: https://doc.rust-lang.org/cargo/guide/cargo-home.html

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
13 months agorust: Move cargo config options into environment variables
Jeffery To [Sun, 1 Oct 2023 18:16:22 +0000 (02:16 +0800)]
rust: Move cargo config options into environment variables

This also:

* Modify the "release" profile in place of adding the "stripped" profile

  Only the profile for target is modified; there are no file size
  constraints for host.

* For host, build with the "release" profile

* For target, build with either the "dev" or "release" profile based on
  CONFIG_DEBUG

There is no environment variable to specify the "strip" option, but
enabling this option is not necessary as the build system will already
strip binaries based on CONFIG_NO_STRIP / CONFIG_USE_STRIP /
CONFIG_USE_SSTRIP.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
13 months agorust: Install to $(STAGING_DIR)/host
Jeffery To [Fri, 22 Sep 2023 16:02:01 +0000 (00:02 +0800)]
rust: Install to $(STAGING_DIR)/host

This allows rustc/cargo/etc to be called without having to set PATH, as
$(STAGING_DIR)/host/bin is already in PATH.

This also fixes CARGO_HOME not being set during Host/Configure and
Host/Compile.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
13 months agorust: Improve Host/Install speed
Jeffery To [Wed, 11 Oct 2023 04:56:20 +0000 (12:56 +0800)]
rust: Improve Host/Install speed

* Compress dist archives with gzip instead of xz; gzip is faster to
  compress and decompress

* Use a for loop instead of calling find to extract archives

* Use libdeflate's gzip to decompress instead of gzip

* Limit search for install scripts to top level of extracted archives

This also runs the install scripts with bash instead of sh, in
accordance with the shebang lines inside the scripts.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
13 months agorust: Cache bootstrap downloads to $(DL_DIR)/rustc
Jeffery To [Sun, 1 Oct 2023 20:52:32 +0000 (04:52 +0800)]
rust: Cache bootstrap downloads to $(DL_DIR)/rustc

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
13 months agorust: Add RUST_HOST_FEATURES for host builds
Jeffery To [Mon, 25 Sep 2023 03:28:45 +0000 (11:28 +0800)]
rust: Add RUST_HOST_FEATURES for host builds

Features to be enabled for host may not be the same as those for target.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
13 months agorust: Use build host Python
Jeffery To [Sat, 30 Sep 2023 08:49:11 +0000 (16:49 +0800)]
rust: Use build host Python

The build system already requires Python to be installed.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
13 months agocurl: Update to version 8.4.0
Michal Hrusecky [Wed, 11 Oct 2023 06:18:45 +0000 (08:18 +0200)]
curl: Update to version 8.4.0

For detailed changes, see https://curl.se/changes.html#8_4_0
Switching to tar.bz2 for the time being as tar.xz is not yet available.
Fixes CVE-2023-38546 and CVE-2023-38545.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
13 months agopython-zope-interface: Update to 6.1, refresh patch
Jeffery To [Mon, 9 Oct 2023 01:21:58 +0000 (09:21 +0800)]
python-zope-interface: Update to 6.1, refresh patch

This also updates the list of dependencies and adds a test.sh script for
the packages feed CI.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
13 months agoMerge pull request #22352 from commodo/stress-ng
Alexandru Ardelean [Wed, 11 Oct 2023 07:06:53 +0000 (10:06 +0300)]
Merge pull request #22352 from commodo/stress-ng

stress-ng: bump to version 0.17.0

13 months agoMerge pull request #22348 from miska/samba4
Tianling Shen [Wed, 11 Oct 2023 01:50:42 +0000 (09:50 +0800)]
Merge pull request #22348 from miska/samba4

samba4: Update to version 4.18.7

13 months agopython-pycares: bump to 4.4.0
Fabian Lipken [Mon, 9 Oct 2023 06:46:12 +0000 (08:46 +0200)]
python-pycares: bump to 4.4.0

Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
13 months agoMerge pull request #22343 from jefferyto/python-3.11.6
Tianling Shen [Wed, 11 Oct 2023 01:48:04 +0000 (09:48 +0800)]
Merge pull request #22343 from jefferyto/python-3.11.6

python3: Update to 3.11.6, refresh patches

13 months agoMerge pull request #22345 from muink/patch-1
Tianling Shen [Wed, 11 Oct 2023 01:40:08 +0000 (09:40 +0800)]
Merge pull request #22345 from muink/patch-1

librespeed-go: Reload the daemon after modifying the tls certificate

13 months agoprocs: Add new package
Facundo Acevedo [Sun, 2 Jul 2023 22:02:43 +0000 (19:02 -0300)]
procs: Add new package

Procs is a modern, feature-rich alternative to the 'ps' command written in Rust

Signed-off-by: Facundo Acevedo <facevedo@disroot.org>
13 months agoMerge pull request #22203 from pprindeville/perl-text-csv_xs-update-1.52
Philip Prindeville [Tue, 10 Oct 2023 21:02:41 +0000 (16:02 -0500)]
Merge pull request #22203 from pprindeville/perl-text-csv_xs-update-1.52

Perl text csv xs update 1.52

13 months agoperl-text-csv_xs: Update to 1.52 22203/head
Philip Prindeville [Sun, 24 Sep 2023 18:48:03 +0000 (12:48 -0600)]
perl-text-csv_xs: Update to 1.52

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
13 months agokmod: update to 31
Nick Hainke [Mon, 2 Oct 2023 07:45:19 +0000 (09:45 +0200)]
kmod: update to 31

Release Notes:
https://github.com/kmod-project/kmod/blob/aff617ea871d0568cc491bd116c0be1e857463bb/NEWS#L1

Signed-off-by: Nick Hainke <vincent@systemli.org>
13 months agostress-ng: bump to version 0.17.00 22352/head
Alexandru Ardelean [Mon, 2 Oct 2023 12:39:30 +0000 (15:39 +0300)]
stress-ng: bump to version 0.17.00

Refreshed 001-disable-extra-stressors.patch
Dropped 002-disable-compiler-test.patch
  - no longer needed since commit https://github.com/ColinIanKing/stress-ng/commit/a24c7f2048548e6e9ded652b0d16a7da37e4edf0

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
13 months agozsh: backport PCRE2 patches and move to it 22197/head
Christian Marangi [Tue, 10 Oct 2023 10:29:49 +0000 (12:29 +0200)]
zsh: backport PCRE2 patches and move to it

Backport PCRE2 patches from upstream and move package to PCRE2 library
as PCRE is EOL and won't receive any security update anymore.

Patch are backported with minimal change, only the Changelog change is
commented out as it would conflict and makes no sense to adapt for the
purpose of backport patches.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
13 months agosnowflake: update to 2.6.1
Nick Hainke [Fri, 22 Sep 2023 08:21:53 +0000 (10:21 +0200)]
snowflake: update to 2.6.1

Release Notes:
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/tags/v2.6.1

Remove upstreamed patches:
- 0001-Bump-minimum-required-version-of-go.patch
- 0002-Update-dependencies.patch

Signed-off-by: Nick Hainke <vincent@systemli.org>
13 months agocloudreve: Update to 3.8.3
Tianling Shen [Mon, 9 Oct 2023 03:48:10 +0000 (11:48 +0800)]
cloudreve: Update to 3.8.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
13 months agolibrespeed-go: Reload the daemon after modifying the tls certificate 22345/head
Anya Lin [Tue, 10 Oct 2023 01:13:14 +0000 (09:13 +0800)]
librespeed-go: Reload the daemon after modifying the tls certificate

Make the daemon reload after the tls certificate is updated

Signed-off-by: Anya Lin <hukk1996@gmail.com>
13 months agosamba4: Update to version 4.18.7 22348/head
Michal Hrusecky [Mon, 9 Oct 2023 06:41:46 +0000 (08:41 +0200)]
samba4: Update to version 4.18.7

Update to the latest stable version in 4.18 series, for details, see
https://www.samba.org/samba/history/samba-4.18.7.html

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
13 months agoMerge pull request #22303 from perrin4869/ddns-scripts/add-samples-to-package
Florian Eckert [Mon, 9 Oct 2023 06:36:16 +0000 (08:36 +0200)]
Merge pull request #22303 from perrin4869/ddns-scripts/add-samples-to-package

ddns-scripts: add samples to package

13 months agopppossh: depend on dbclient
Sergey Ponomarev [Wed, 20 Sep 2023 14:30:41 +0000 (17:30 +0300)]
pppossh: depend on dbclient

The package should not only depend on a package dropbear but on the dbclient.
Otherwise the dbclient may be disabled during compilation and the dependency will be not satisfied.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
13 months agodnsproxy: Update to 0.56.0
Tianling Shen [Sat, 7 Oct 2023 04:59:43 +0000 (12:59 +0800)]
dnsproxy: Update to 0.56.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
13 months agov2ray-core: Update to 5.8.0
Tianling Shen [Sat, 7 Oct 2023 04:51:06 +0000 (12:51 +0800)]
v2ray-core: Update to 5.8.0

Removed upstreamed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
13 months agov2ray-geodata: add package v2ray-geosite-ir
Kaveh Dadgar [Sat, 7 Oct 2023 19:44:02 +0000 (21:44 +0200)]
v2ray-geodata: add package v2ray-geosite-ir

"Iran Hosted Domains" is a comprehensive list of Iranian domains and services that are hosted within the country.

Signed-off-by: Kaveh Dadgar <Kavehdadgar666@protonmail.com>
13 months agotailscale: Update to 1.50.1
Zephyr Lykos [Fri, 6 Oct 2023 10:55:02 +0000 (18:55 +0800)]
tailscale: Update to 1.50.1

https://github.com/tailscale/tailscale/releases/tag/v1.50.1

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
13 months agocni-protocol: update protocol
Oskari Rauta [Sun, 8 Oct 2023 14:51:50 +0000 (17:51 +0300)]
cni-protocol: update protocol

Changes to protocol file and it's description.
Works better now and restarts firewall automaticly
when tunnel comes available. More informative/guiding
description.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
13 months agosing-box: update to v1.5.2
Leo Douglas [Fri, 29 Sep 2023 11:38:04 +0000 (19:38 +0800)]
sing-box: update to v1.5.2

* Enable `with_ech` and `with_dhcp`, just like upstream
* See changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.5.2

Signed-off-by: Leo Douglas <douglarek@gmail.com>
sing-box: ShadowsocksR is marked as deprecated since v1.5.0

Signed-off-by: Leo Douglas <douglarek@gmail.com>
sing-box: remove dhcp by default

Signed-off-by: Leo Douglas <douglarek@gmail.com>
13 months agopython3: Update to 3.11.6, refresh patches 22343/head
Jeffery To [Mon, 9 Oct 2023 01:18:40 +0000 (09:18 +0800)]
python3: Update to 3.11.6, refresh patches

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
13 months agokea: bump to 2.4.0
Stijn Tintel [Sat, 7 Oct 2023 22:47:09 +0000 (01:47 +0300)]
kea: bump to 2.4.0

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
13 months agokea: bump to 2.2.1
Stijn Tintel [Sat, 7 Oct 2023 12:26:07 +0000 (15:26 +0300)]
kea: bump to 2.2.1

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
13 months agoesp2net: add Espressif ESP chip USB-Network proxy
Nuno Gonçalves [Tue, 20 Jun 2023 15:54:16 +0000 (16:54 +0100)]
esp2net: add Espressif ESP chip USB-Network proxy

Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>
13 months agolighttpd: update to lighttpd 1.4.72 release hash
Glenn Strauss [Sat, 7 Oct 2023 06:24:55 +0000 (02:24 -0400)]
lighttpd: update to lighttpd 1.4.72 release hash

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
13 months agolua-eco: update to 3.0.1
Jianhui Zhao [Sun, 8 Oct 2023 08:20:08 +0000 (16:20 +0800)]
lua-eco: update to 3.0.1

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
13 months agonextdns: Update to version 1.41.0
Olivier Poitrey [Sat, 7 Oct 2023 01:30:22 +0000 (01:30 +0000)]
nextdns: Update to version 1.41.0

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
13 months agosshtunnel: update version to 5.1
Sergey Ponomarev [Wed, 20 Sep 2023 14:27:45 +0000 (17:27 +0300)]
sshtunnel: update version to 5.1

Make it depends on ether Dropbear dbclient or OpenSSH client

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
13 months agosshtunnel: allow empty port and user
Sergey Ponomarev [Wed, 21 Jun 2023 17:01:31 +0000 (20:01 +0300)]
sshtunnel: allow empty port and user

A user may have some host configured in the .ssh/config with user and port.
But we anyway have to specify them in the sshtunnel.
The change fixes this

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
13 months agosshtunnel: add enabled option
Sergey Ponomarev [Wed, 21 Jun 2023 16:59:28 +0000 (19:59 +0300)]
sshtunnel: add enabled option

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
13 months agosshtunnel: allow empty remoteaddress
Sergey Ponomarev [Wed, 21 Jun 2023 16:58:48 +0000 (19:58 +0300)]
sshtunnel: allow empty remoteaddress

Just empty or * may have some semantic difference on a server

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
13 months agosshtunnel: StrictHostKeyChecking for Dropbear
Sergey Ponomarev [Sat, 3 Jun 2023 11:23:33 +0000 (14:23 +0300)]
sshtunnel: StrictHostKeyChecking for Dropbear

The dbclient doesn't support the -o StrictHostKeyChecking but it has it's own -y option:
-y    Always accept remote host key if unknown
-y -y Don't perform any remote host key checking (caution)

So we can add these options to make the StrictHostKeyChecking working.
The dbclient will ignore -o StrictHostKeyChecking but use the -y or -yy instead.

The only problem is that the -y flag is also used by the openssh-client:

-y Send log information using the syslog(3) system module.  By default this information is sent to stderr.

This is not critical and once the dbclient start to support the StrictHostKeyChecking we can remove the -y flag.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
13 months agosshtunnel: Use -i $IdentityFile instead of -o IdentityFile=$IdentityFile
Sergey Ponomarev [Sat, 3 Jun 2023 10:23:35 +0000 (13:23 +0300)]
sshtunnel: Use -i $IdentityFile instead of -o IdentityFile=$IdentityFile

This makes the sshtunnel compatible with Dropbear.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
13 months agosshtunnel: set StrictHostKeyChecking=accept-new by default
Sergey Ponomarev [Sat, 3 Jun 2023 10:10:32 +0000 (13:10 +0300)]
sshtunnel: set StrictHostKeyChecking=accept-new by default

Without the option the ssh will propt a user to accept the host key.
So a user should perform a connection manualy and accept before useing the sshtunnel.
The accept-new is a reasonable trade off.

Also the LogLevel is INFO by default.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
13 months agosshtunnel: uci_sshtunnel use example.com
Sergey Ponomarev [Sat, 3 Jun 2023 09:46:03 +0000 (12:46 +0300)]
sshtunnel: uci_sshtunnel use example.com

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
13 months agosshtunnel: uci_sshtunnel simplify
Sergey Ponomarev [Sat, 3 Jun 2023 09:44:19 +0000 (12:44 +0300)]
sshtunnel: uci_sshtunnel simplify

Simplify comment and make it shorter.
Remove triling tab after retrydelay.
Use a full path for IdentityFile because otherwise the uci validation fails with the relative path ~/.ssh

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
13 months agoexim: update to version 4.96.1
Daniel Golle [Fri, 6 Oct 2023 21:38:23 +0000 (23:38 +0200)]
exim: update to version 4.96.1

This is a security release.

JH/01 Bug 2999: Fix a possible OOB write in the external authenticator, which
      could be triggered by externally-supplied input.  Found by Trend Micro.
      CVE-2023-42115

JH/02 Bug 3000: Fix a possible OOB write in the SPA authenticator, which could
      be triggered by externally-controlled input.  Found by Trend Micro.
      CVE-2023-42116

JH/03 Bug 3001: Fix a possible OOB read in the SPA authenticator, which could
      be triggered by externally-controlled input.  Found by Trend Micro.
      CVE-2023-42114

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
13 months agolibvpx: update to 1.13.1
Luiz Angelo Daros de Luca [Sat, 7 Oct 2023 03:00:07 +0000 (00:00 -0300)]
libvpx: update to 1.13.1

v1.13.0

This release includes more Neon and AVX2 optimizations, adds a new codec
control to set per frame QP, upgrades GoogleTest to v1.12.1, and includes
numerous bug fixes.

v1.13.1

This release contains two security related fixes. One each for VP8 and VP9.

- https://crbug.com/1486441 (CVE-2023-5217)
- Fix bug with smaller width bigger size (CVE-2023-44488)

Fixes #22318

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
13 months agoMerge pull request #22329 from jefferyto/golang-1.21.2
Josef Schlehofer [Sat, 7 Oct 2023 17:34:22 +0000 (19:34 +0200)]
Merge pull request #22329 from jefferyto/golang-1.21.2

golang: Update to 1.21.2

13 months agogolang: Update to 1.21.2 22329/head
Jeffery To [Sat, 7 Oct 2023 12:04:12 +0000 (20:04 +0800)]
golang: Update to 1.21.2

Includes fix for CVE-2023-39323 (cmd/go: line directives allows
arbitrary execution during build).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
13 months agoMerge pull request #22306 from cotequeiroz/python3-rebuild
Jeffery To [Sat, 7 Oct 2023 10:57:01 +0000 (18:57 +0800)]
Merge pull request #22306 from cotequeiroz/python3-rebuild

python3: avoid unnecessary rebuilds

13 months agoMerge pull request #22309 from BKPepe/tor-fw-helper
Jeffery To [Sat, 7 Oct 2023 10:52:07 +0000 (18:52 +0800)]
Merge pull request #22309 from BKPepe/tor-fw-helper

tor-fw-helper: remove it

13 months agoMerge pull request #22311 from stangri/master-adblock-fast
Stan Grishin [Fri, 6 Oct 2023 22:42:32 +0000 (16:42 -0600)]
Merge pull request #22311 from stangri/master-adblock-fast

adblock-fast: bugfix: properly identify hosts-files

13 months agoddns-scripts: add ddns-scripts-utils package 22303/head
Julian Grinblat [Wed, 4 Oct 2023 18:02:50 +0000 (03:02 +0900)]
ddns-scripts: add ddns-scripts-utils package

The samples in the repo are useful for configuring cenrtain aspects of
ddns, and their inclusion is hinted at within their source code

Signed-off-by: Julian Grinblat <julian@dotcore.co.il>
13 months agoMerge pull request #22298 from TDT-AG/pr/20231004-keepalived
Florian Eckert [Fri, 6 Oct 2023 06:34:24 +0000 (08:34 +0200)]
Merge pull request #22298 from TDT-AG/pr/20231004-keepalived

keepalived: update to version 2.2.8

13 months agoMerge pull request #22301 from cotequeiroz/pymysql_sha256
Alexandru Ardelean [Fri, 6 Oct 2023 06:34:00 +0000 (09:34 +0300)]
Merge pull request #22301 from cotequeiroz/pymysql_sha256

pymysql: add meta-package for sha256 support

13 months agoMerge pull request #22273 from ne20002/crowdsec-firewall-bouncer
Tianling Shen [Fri, 6 Oct 2023 05:44:33 +0000 (13:44 +0800)]
Merge pull request #22273 from ne20002/crowdsec-firewall-bouncer

crowdsec-firewall-bouncer: new upstream release version 0.0.28

13 months agoopenssh: bump to 9.5p1
John Audia [Wed, 4 Oct 2023 19:35:03 +0000 (15:35 -0400)]
openssh: bump to 9.5p1

Changelog: https://www.openssh.com/txt/release-9.5

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
13 months agopython-twisted: Update to 23.8.0, rework patches
Jeffery To [Fri, 29 Sep 2023 03:37:08 +0000 (11:37 +0800)]
python-twisted: Update to 23.8.0, rework patches

The package changed to the hatchling build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
13 months agoffmpeg: fix compilation error of ffmpeg-custom
Jan Kratochvil [Wed, 4 Oct 2023 19:51:51 +0000 (03:51 +0800)]
ffmpeg: fix compilation error of ffmpeg-custom

Fixes: #12320
After plain enable of libffmpeg-custom and ffmpeg-custom which adds:
- CONFIG_PACKAGE_libbz2=m
- CONFIG_PACKAGE_libffmpeg-custom=m
- CONFIG_FFMPEG_CUSTOM_GPL=y
- CONFIG_PACKAGE_zlib=m
- CONFIG_PACKAGE_ffmpeg-custom=m

I get on v22.03.5 compilation error:
```
cp -fpR /.../openwrt-git/build_dir/target-mips_24kc_musl/ffmpeg-custom/ffmpeg-5.1/ipkg-install/usr/bin/ffmpeg /.../openwrt-git/build_dir/target-mips_24kc_musl/ffmpeg-custom/ffmpeg-5.1/ipkg-mips_24kc/ffmpeg-custom/usr/bin/
cp: cannot stat '/.../openwrt-git/build_dir/target-mips_24kc_musl/ffmpeg-custom/ffmpeg-5.1/ipkg-install/usr/bin/ffmpeg': No such file or directory
make[2]: *** [Makefile:756: /.../openwrt-git/bin/packages/mips_24kc/packages/ffmpeg-custom_5.1-1_mips_24kc.ipk] Error 1
```

It is because configure is missing `ffmpeg` in its `Programs:` section:
```
( cd /.../openwrt-git/build_dir/target-mips_24kc_musl/ffmpeg-custom/ffmpeg-5.1; CFLAGS="-Os -pipe -mno-branch-likely -mips32r2 -mtune=24kc -fno-caller-saves -fno-plt -fhonour-copts -Wno-error=unused-but-set-variable -Wno-error=unused-result -msoft-float -mips16 -minterlink-mips16 -fmacro-prefix-map=/.../openwrt-git/build_dir/target-mips_24kc_musl/ffmpeg-custom/ffmpeg-5.1=ffmpeg-5.1 -Wformat -Werror=format-security -fstack-protector -D_FORTIFY_SOURCE=1 -Wl,-z,now -Wl,-z,relro -I/.../openwrt-git/staging_dir/toolchain-mips_24kc_gcc-11.2.0_musl/usr/include -I/.../openwrt-git/staging_dir/toolchain-mips_24kc_gcc-11.2.0_musl/include/fortify -I/.../openwrt-git/staging_dir/toolchain-mips_24kc_gcc-11.2.0_musl/include -DPIC -fpic" LDFLAGS="-L/.../openwrt-git/staging_dir/toolchain-mips_24kc_gcc-11.2.0_musl/usr/lib -L/.../openwrt-git/staging_dir/toolchain-mips_24kc_gcc-11.2.0_musl/lib -znow -zrelro" ./configure --enable-cross-compile --cross-prefix="mips-openwrt-linux-musl-" --arch="mips" --cpu=24kc --target-os=linux --prefix="/usr" --pkg-config="pkg-config" --enable-shared --enable-static --enable-pthreads --enable-zlib --disable-doc --disable-debug --disable-lzma --disable-vaapi --disable-vdpau --disable-outdevs --disable-altivec --disable-vsx --disable-power8 --disable-armv5te --disable-armv6 --disable-armv6t2 --disable-fast-unaligned --disable-runtime-cpudetect --disable-x86asm --enable-small --enable-gpl --disable-programs --disable-avfilter --disable-swresample --disable-swscale --disable-everything                                                                                                                                                                                                                                                                                      --disable-postproc )
install prefix            /usr
source path               .
C compiler                mips-openwrt-linux-musl-gcc
C library
host C compiler           gcc
host C library            glibc
ARCH                      mips (24kc)
big-endian                yes
runtime cpu detection     no
MIPS FPU enabled          no
MIPS DSP R1 enabled       no
MIPS DSP R2 enabled       no
MIPS MSA enabled          no
LOONGSON MMI enabled      no
debug symbols             no
strip symbols             yes
optimize for size         yes
optimizations             yes
static                    yes
shared                    yes
postprocessing support    no
network support           yes
threading support         pthreads
safe bitstream reader     yes
texi2html enabled         no
perl enabled              yes
pod2man enabled           yes
makeinfo enabled          yes
makeinfo supports HTML    no
xmllint enabled           yes

External libraries:
alsa                    iconv
bzlib                   zlib

External libraries providing hardware acceleration:
cuda_llvm               v4l2_m2m

Libraries:
avcodec                 avformat
avdevice                avutil

Programs:

Enabled decoders:

Enabled encoders:

Enabled hwaccels:

Enabled parsers:

Enabled demuxers:

Enabled muxers:

Enabled protocols:

Enabled filters:

Enabled bsfs:

Enabled indevs:

Enabled outdevs:

License: GPL version 2 or later
```

Signed-off-by: Jan Kratochvil <jan@jankratochvil.net>
13 months agopymysql: add meta-package for sha256 support 22301/head
Eneas U de Queiroz [Wed, 4 Oct 2023 11:54:15 +0000 (08:54 -0300)]
pymysql: add meta-package for sha256 support

Replace the PYTHON3_PYMYSQL_SHA_PASSWORD_SUPPORT option, which is
causing circular dependencies, with a meta-package that installs both
python3-pymysql and python3-cryptography.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
13 months agoadblock-fast: bugfix: properly identify hosts-files 22311/head
Stan Grishin [Thu, 5 Oct 2023 14:51:51 +0000 (14:51 +0000)]
adblock-fast: bugfix: properly identify hosts-files

* escape dots in grep command to properly identify hosts files

Signed-off-by: Stan Grishin <stangri@melmac.ca>
13 months agotor-fw-helper: remove it 22309/head
Josef Schlehofer [Thu, 5 Oct 2023 12:16:07 +0000 (14:16 +0200)]
tor-fw-helper: remove it

This package does not receive any update since 2015. [1]
It seems unmaintained and most likely not used at all.

[1] https://gitweb.torproject.org/tor-fw-helper.git/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
13 months agozsh: use autoreconf PKG_FIXUP to configure
Oskari Rauta [Wed, 4 Oct 2023 21:46:57 +0000 (23:46 +0200)]
zsh: use autoreconf PKG_FIXUP to configure

In preparation to PCRE2 fixup, use autoreconf PKG_FIXUP as a better
configure system instead of configure script. This is needed to reduce
upcoming patch to migrate to PCRE2 library.

To correctly use autoreconf it's needed to declare empty
PKG_REMOVE_FILES.

zsh include custom macro in the default aclocal.m4
When autoreconf PKG_FIXUP is used, if PKG_REMOVE_FILES is not defined,
it's set to remove the file aclocal.m4 by default resulting in problem
with the custom macro AC_PROG_LN.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
[ split to 2 commit, add PKG_REMOVE_FILES, reword commit description ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
13 months agoMerge pull request #22289 from mhei/mmc-utils-update
Michael Heimpold [Thu, 5 Oct 2023 05:24:44 +0000 (07:24 +0200)]
Merge pull request #22289 from mhei/mmc-utils-update

mmc-utils: update to latest upstream revision

13 months agoMerge pull request #22290 from mhei/php8-update-to-8.2.11
Michael Heimpold [Thu, 5 Oct 2023 05:24:27 +0000 (07:24 +0200)]
Merge pull request #22290 from mhei/php8-update-to-8.2.11

php8: update to 8.2.11

13 months agopython3: avoid unnecessary rebuilds 22306/head
Eneas U de Queiroz [Wed, 4 Oct 2023 19:19:07 +0000 (16:19 -0300)]
python3: avoid unnecessary rebuilds

Move the order in which BuildPackage is called, so that the libpython
package is built ahead of the module packages, to avoid forcing a
clean-build of the package when 'make package/python3/compile' is called
a second time without changes.

The library must be built first, so that when the buildsystem checks for
ABI version changes using libpython3.version, its timestamp should be
older than the dependent package's STAMP_PREPARED file.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
13 months agosyslog-ng: update to version 4.4.0
Josef Schlehofer [Wed, 4 Oct 2023 10:26:54 +0000 (12:26 +0200)]
syslog-ng: update to version 4.4.0

- Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.4.0

- Bump version in config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
13 months agokeepalived: add notify_up and notify_down for virtual server 22298/head
Florian Eckert [Thu, 10 Nov 2022 14:04:11 +0000 (15:04 +0100)]
keepalived: add notify_up and notify_down for virtual server

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
13 months agokeepalived: add PING_CHECK to real_server
Florian Eckert [Thu, 10 Nov 2022 14:11:04 +0000 (15:11 +0100)]
keepalived: add PING_CHECK to real_server

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
13 months agokeepalived: update to version 2.2.8
Florian Eckert [Mon, 17 Jul 2023 06:48:41 +0000 (08:48 +0200)]
keepalived: update to version 2.2.8

See release-notes:
https://www.keepalived.org/release-notes/Release-2.2.8.html

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
13 months agoMerge pull request #22295 from 1715173329/wget
Hannu Nyman [Wed, 4 Oct 2023 11:38:20 +0000 (14:38 +0300)]
Merge pull request #22295 from 1715173329/wget

wget: Update to 1.21.4

13 months agowget: Update to 1.21.4 22295/head
Tianling Shen [Wed, 4 Oct 2023 02:31:50 +0000 (10:31 +0800)]
wget: Update to 1.21.4

Removed upstreamed patches and unneeded autoreconf.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
13 months agoffmpeg: bump PKG_RELEASE
Jan Kratochvil [Wed, 4 Oct 2023 02:13:20 +0000 (10:13 +0800)]
ffmpeg: bump PKG_RELEASE

Suggested by @neheb.

Signed-off-by: Jan Kratochvil <jan@jankratochvil.net>
13 months agoffmpeg: Add avi muxer
Jan Kratochvil [Tue, 3 Oct 2023 04:46:43 +0000 (12:46 +0800)]
ffmpeg: Add avi muxer

Otherwise one cannot produce *.avi containers needed for some H.264
camera codecs.

Signed-off-by: Jan Kratochvil <jan@jankratochvil.net>
13 months agolua-openssl: Update to version 0.8.5-1
Amnon Paz [Tue, 26 Sep 2023 20:01:39 +0000 (23:01 +0300)]
lua-openssl: Update to version 0.8.5-1

Signed-off-by: Amnon Paz <pazamnon@gmail.com>
13 months agoncdu: update to 1.19
John Audia [Sun, 1 Oct 2023 14:30:44 +0000 (10:30 -0400)]
ncdu: update to 1.19

Upstream bump

Build system: x86_64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
13 months agopython-packaging: Update to 23.2
Jeffery To [Tue, 3 Oct 2023 14:59:58 +0000 (22:59 +0800)]
python-packaging: Update to 23.2

Signed-off-by: Jeffery To <jeffery.to@gmail.com>