Oskari Rauta [Thu, 16 Dec 2021 00:25:58 +0000 (02:25 +0200)]
podman: update to v3.4.4
list of changes: https://github.com/containers/podman/releases
Added patch for compiling with musl. Patch can be removed on next
release as it is already merged to podman git but not on this release.
Patch moves definition in source so definition is available before it
is being used.
Patch source: https://github.com/containers/podman/pull/12564
Patch re-created with quilt.
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit
5ff3b25509c9c1e5d1d43044fcc22dd19a10d779)
Oskari Rauta [Wed, 24 Nov 2021 23:14:07 +0000 (01:14 +0200)]
podman: update to 3.4.2
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit
b011f3faf8f84d398c197773d711ac0cdde31aa3)
Olivier Poitrey [Thu, 26 Jan 2023 18:45:53 +0000 (18:45 +0000)]
nextdns: Update to version 1.39.4
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
Rafał Miłecki [Wed, 25 Jan 2023 11:34:15 +0000 (12:34 +0100)]
ksmbd: select ASN1 explicitly to reduce dependencies
ksmbd requires ASN.1 grammar compiler so it depends on CONFIG_ASN1. It
should select kmod-asn1-decoder for above reason.
Due to some problems with kmod-asn1-decoder in the past ksmbd was
selecting kmod-nf-nathelper-extra instead. That was affecting network
performance in kernel as each loaded conntrack module adds some overhead
to packets processing.
Fix this unwanted side effect by depending on kmod-asn1-decoder
directly.
Link: http://lists.openwrt.org/pipermail/openwrt-devel/2023-January/040298.html
Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
Dirk Brenken [Fri, 27 Jan 2023 10:19:47 +0000 (11:19 +0100)]
Merge pull request #20406 from realizelol/openwrt-21.02
[21.02] banip: renew tor urls
Chris [Fri, 27 Jan 2023 09:58:06 +0000 (10:58 +0100)]
banip: renew tor urls as previous ones were death.
Signed-off-by: Chris Schulten <bsw.bsw@gmx.de>
Jan Hák [Mon, 12 Dec 2022 14:15:45 +0000 (15:15 +0100)]
knot: update to version 3.2.4
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit
c933a15cebe43e6d35d59281a5414438cd3c1455)
Jan Hák [Tue, 22 Nov 2022 10:25:02 +0000 (11:25 +0100)]
knot: update to version 3.2.3
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit
4370e457c8eabc6c4c3decdb197fccc876f45a19)
Jan Hák [Tue, 1 Nov 2022 13:15:24 +0000 (14:15 +0100)]
knot: update to version 3.2.2
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit
a5913d51c7024b9f62e213541812a0bdd67e2984)
Michael Heimpold [Sun, 22 Jan 2023 22:51:56 +0000 (23:51 +0100)]
Merge pull request #20270 from mhei/21.02-php8-update-8.0.27
[21.02] php8: update to 8.0.27
Hannu Nyman [Sat, 21 Jan 2023 20:09:37 +0000 (22:09 +0200)]
Merge pull request #20358 from hnyman/rtty2102
Rtty2102
Josef Schlehofer [Wed, 18 Jan 2023 06:57:20 +0000 (07:57 +0100)]
atlas-sw-probe: add more binaries
They were added in these commits [1] [2] and if they are not included,
the RIPE Atlas SW Probe does not work correctly.
This should also prevent this from happening in the future as it now. We include all
files with .sh extension file type.
[1] https://github.com/RIPE-NCC/ripe-atlas-software-probe/commit/
70ced29fc3217dd8d61e2b78506b6103ded100aa
[2] https://github.com/RIPE-NCC/ripe-atlas-software-probe/commit/
71a4ff0e68c55464f766ddb9f1dfe21b22e530db
Fixes: https://github.com/openwrt/packages/issues/20338
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit
1a368a54095d67ea2efb25b7a205999650793bee)
Hannu Nyman [Sat, 21 Jan 2023 19:37:18 +0000 (21:37 +0200)]
Merge pull request #20357 from hnyman/wifidog2102
[21.02] wifidog: fix compilation with more recent wolfssl
Hannu Nyman [Sat, 21 Jan 2023 19:30:18 +0000 (21:30 +0200)]
Merge pull request #20356 from hnyman/libuhttpd2102
[21.02] fix libuhttpd
Jianhui Zhao [Sun, 22 May 2022 14:01:18 +0000 (22:01 +0800)]
rtty: update to 8.0.1
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit
0ea357c164d4d265d750459de2ad6a63149fe89e)
(cherry picked from commit
8377e516e90364e26a510dbc1140cc6a1907700b)
Sergey V. Lobanov [Mon, 3 Jan 2022 18:10:50 +0000 (21:10 +0300)]
rtty: add compatibility for wolfssl >= 5.0
NTRU support has been removed in wolfssl 5.0 so it is required to
mask NTRU specific code if wolfssl >= 5.0
Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
(cherry picked from commit
9913c0899a8fb6bfbda33e7a1fd84f2fa6c3ddda)
Jianhui Zhao [Mon, 27 Sep 2021 11:23:34 +0000 (11:23 +0000)]
rtty: update to 8.0.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit
12c5ed9a4c971a5cf314831a1a01d851be976120)
Jianhui Zhao [Mon, 31 May 2021 06:10:29 +0000 (14:10 +0800)]
rtty: update to 7.4.1
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit
110e24ad9c29f2bf7d200322c816a02028ccd6a3)
Jianhui Zhao [Fri, 19 Feb 2021 11:04:10 +0000 (19:04 +0800)]
rtty: update to 7.4.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit
a9a1d8740b3cd9fdffd3ebf7f76dec8224611917)
Rosen Penev [Sat, 21 Jan 2023 19:09:37 +0000 (21:09 +0200)]
wifidog: fix compilation with more recent wolfssl
Needs an extra header. pthread.h is also no longer implicitly included.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit
4605f98b413b4b0433199e4fe6d3685344cbf933)
Sergey V. Lobanov [Mon, 3 Jan 2022 16:41:37 +0000 (19:41 +0300)]
libuhttpd: add compatibility for wolfssl >= 5.0
NTRU support has been removed in wolfssl 5.0 so it is required to
mask NTRU specific code if wolfssl >= 5.0
Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
(cherry picked from commit
9a9f26796bdf4bd6ebe5a9aee9dcb2feee54780f)
Rosen Penev [Mon, 6 Sep 2021 08:55:37 +0000 (01:55 -0700)]
libuhttp: don't build examples
Speeds up compilation and potentially fixes it.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit
21e5a1e7d3e55a0c49af9e5a6c8dee6c0255f507)
Jianhui Zhao [Mon, 7 Jun 2021 02:22:12 +0000 (10:22 +0800)]
libuhttpd: Update to 3.12.1
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit
4c163b0b123d26538710b78f1ef8f4f47bcdbc0b)
Jianhui Zhao [Fri, 4 Jun 2021 12:08:46 +0000 (20:08 +0800)]
libuhttpd: Update to 3.12.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit
756d9e906bfeb713e6b5e3e16939d8eed4f66b9f)
Jianhui Zhao [Thu, 8 Apr 2021 06:58:57 +0000 (14:58 +0800)]
libuhttpd: Update to 3.11.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit
3aa128f00745db22d1f2ed81d3bb3704d6c65780)
Jianhui Zhao [Mon, 1 Mar 2021 09:26:11 +0000 (17:26 +0800)]
libuhttpd: Update to 3.10.1
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit
20328691d3a254c598c9d49e55530190dd97fe16)
Jianhui Zhao [Fri, 26 Feb 2021 16:40:47 +0000 (00:40 +0800)]
libuhttpd: Update to 3.10.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit
a5fbbb9970864934de080940d07d84bf4b0e00b4)
Jianhui Zhao [Fri, 19 Feb 2021 04:23:56 +0000 (12:23 +0800)]
libuhttpd: Update to 3.9.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit
696d5021da247bb31a2b0dfe0a3a53da9fdb9ab0)
Hannu Nyman [Sat, 21 Jan 2023 10:20:16 +0000 (12:20 +0200)]
nano: update to 7.2
Update nano editor to version 7.2.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit
6a3d2386fa3060d47cc027767926ce26697949d3)
Huangbin Zhan [Sat, 20 Nov 2021 13:56:30 +0000 (21:56 +0800)]
bash: update to 5.1.16
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
(cherry picked from commit
15c6fa3ddda45345948781d395d9ec9a757c7ccc)
Huangbin Zhan [Thu, 11 Nov 2021 08:21:08 +0000 (16:21 +0800)]
bash: add /etc/profile.d/sys_bashrc.sh as conffile
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
(cherry picked from commit
2977360e46c124e4e429ea1da93494a85475bffe)
Rosen Penev [Wed, 21 Jul 2021 03:31:54 +0000 (20:31 -0700)]
bash: update to 5.1.8
Switch to AUTORELEASE for simplicity.
Remove upstream backports.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit
069f1a80b65ebde9d1df7f3a9a468660b1a451d7)
Philip Prindeville [Tue, 2 Mar 2021 21:43:37 +0000 (14:43 -0700)]
bash: fixing missing PARAMS() macro in strtod.c
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit
fd9012836aefc9abd6da8ee1c34119d193d3449d)
Michal Vasilek [Wed, 18 Jan 2023 12:00:54 +0000 (13:00 +0100)]
git: update to 2.34.6
Fixes CVE-2022-23521
Fixes CVE-2022-41903
Fixes CVE-2022-39260
Fixes CVE-2022-39253
Fixes CVE-2022-29187
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit
96e8ff604f5d980360e1ab9c0cdd22269888885c)
Tianling Shen [Mon, 9 Jan 2023 07:08:16 +0000 (15:08 +0800)]
xray-core: Update to 1.7.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit
65ccc4c913a2e737ce8bf37d2e0bcad95c221e61)
Tianling Shen [Mon, 16 Jan 2023 08:26:41 +0000 (16:26 +0800)]
yq: Update to 4.30.8
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit
99d6d25bb5ce31f0a12d230b91c56b0097a7bb58)
Tianling Shen [Sat, 14 Jan 2023 12:51:54 +0000 (20:51 +0800)]
yq: Update to 4.30.7
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit
3c34ef4c991f6257b55e57f8ea08357d0066117e)
Nick Hainke [Sun, 15 Jan 2023 19:13:16 +0000 (20:13 +0100)]
snowflake: update to 2.4.2
Changes in version v2.4.2 - 2023-01-13
- Issue 40208: Enhance help info for capacity flag
- Issue 40232: Update README and fix help output
- Issue 40173: Increase clientIDAddrMapCapacity
- Issue 40177: Manually unlock mutex in ClientMap.SendQueue
- Issue 40177: Have SnowflakeClientConn implement io.WriterTo
- Issue 40179: Reduce turbotunnel queueSize from 2048 to 512
- Issue 40187/40199: Take ownership of buffer in QueuePacketConn QueueIncoming/WriteTo
- Add more tests for URL encoded IPs (safelog)
- Fix server flag name
- Issue 40200: Use multiple parallel KCP state machines in the server
- Add a num-turbotunnel server transport option
- Issue: 40241: Switch default proxy STUN server to stun.l.google.com
Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit
5435ddb8f8f626997202b96d0cc1306c2da03a75)
ValdikSS ValdikSS [Sat, 14 Jan 2023 22:32:19 +0000 (01:32 +0300)]
miredo: add miredo.conf conffile
Keep miredo.conf modified configuration upon upgrades
Signed-off-by: ValdikSS ValdikSS <iam@valdikss.org.ru>
(cherry picked from commit
95acb627f4b6853cd8fa0329f127d52118013e65)
Josef Schlehofer [Sun, 15 Jan 2023 12:18:35 +0000 (13:18 +0100)]
atlas-sw-probe: update to version 5080
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit
12fd3cfe1e2d96f9e5d9c69260cf21e7f6bede45)
Rosen Penev [Sat, 14 Jan 2023 01:08:54 +0000 (17:08 -0800)]
atlas-probe: update to 2.6.3
Switch to git tarballs.
Remove upstreamed patches and add OpenSSL patch.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit
3eace67a3001b68052c81a18ee361dc7597cf71a)
Tianling Shen [Wed, 11 Jan 2023 03:39:33 +0000 (11:39 +0800)]
golang: Update to 1.18.10
go1.18.10 (released 2023-01-10) includes fixes to cgo, the compiler,
the linker, and the crypto/x509, net/http, and syscall packages.
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Michael Heimpold [Wed, 11 Jan 2023 21:14:59 +0000 (22:14 +0100)]
php8: update to 8.0.27
This fixes:
- CVE-2022-31631
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Tianling Shen [Sun, 1 Jan 2023 08:33:26 +0000 (16:33 +0800)]
libtorrent-rasterbar: Update to 2.0.8
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit
991c2d452cd12bd49c65a945a966f09223542c4b)
Philip Prindeville [Wed, 28 Dec 2022 08:21:34 +0000 (01:21 -0700)]
bind: update to version 9.18.10
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit
07f528b33121c5b26b868b6a72700e4029fe8f81)
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
Josef Schlehofer [Wed, 28 Dec 2022 10:49:18 +0000 (11:49 +0100)]
Merge pull request #20168 from
1715173329/my/2102-adg
[openwrt-21.02] adguardhome: update to v0.107.21
Josef Schlehofer [Wed, 28 Dec 2022 10:47:15 +0000 (11:47 +0100)]
Merge pull request #20155 from paper42/libarchive-cve-21
[21.02] libarchive: update to 3.5.3, fix CVE-2022-36227
Tianling Shen [Tue, 27 Dec 2022 08:42:00 +0000 (16:42 +0800)]
xray-core: Update to 1.7.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit
9a7926339bba3e5d3830e2674021365f65bc83dd)
[Updated geodata to latest version, based on
ea969a117a2a94]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Tianling Shen [Sat, 24 Dec 2022 03:23:26 +0000 (11:23 +0800)]
rclone: Update to 1.61.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit
822d44e8f8637c028b66cdf0ae84869699c24788)
Tianling Shen [Sun, 25 Dec 2022 07:01:03 +0000 (15:01 +0800)]
xray-core: Update to 1.6.6-2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit
4afc17e6e0784bd507994c0e53e13a5aa21af2d6)
Tianling Shen [Sun, 25 Dec 2022 06:58:12 +0000 (14:58 +0800)]
yq: Update to 4.30.6
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit
071e97949f75de5a7dc1d19c48663e01f0c02a00)
Hirokazu MORIKAWA [Sat, 24 Dec 2022 02:35:08 +0000 (11:35 +0900)]
node: bump to v14.21.2
Notable changes
* CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)
* OpenSSL 1.1.1s
* Root certificates updated to NSS 3.85
* Time zone update to 2022f
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
YiZhen Choo [Thu, 15 Dec 2022 18:28:38 +0000 (02:28 +0800)]
AdGuardHome: update to v0.107.21
Signed-off-by: YiZhen Choo <yizhen.c02@gmail.com>
(cherry picked from commit
60ae1e56378e7e614918f6ecda52f92ab6e18c73)
Dobroslaw Kijowski [Wed, 16 Nov 2022 17:12:28 +0000 (18:12 +0100)]
adguardhome: bump to 0.107.18
* Full changelog available at:
* https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.17
* https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.18
Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit
e3dc7537812338a6200b16ba7b218ce5e6745cf4)
James White [Mon, 30 May 2022 08:04:53 +0000 (09:04 +0100)]
adguardhome: Increase init start value to avoid network race conditions
Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit
cd4c7b3ac32838fa8987095bc1ecef2d7c6007b5)
YiZhen Choo [Fri, 7 Oct 2022 15:47:50 +0000 (23:47 +0800)]
AdGuardHome: update to v0.107.16
Signed-off-by: YiZhen Choo <yizhen.c02@gmail.com>
(cherry picked from commit
64dabe2d681f013c834f447496ad57b413790b0b)
YiZhen Choo [Wed, 7 Sep 2022 16:05:16 +0000 (00:05 +0800)]
AdGuardHome: update to v0.107.12
Signed-off-by: YiZhen Choo <yizhen.c02@gmail.com>
(cherry picked from commit
e806d85e46ae563e9fd334972dcb019a88442cbd)
YiZhen Choo [Fri, 19 Aug 2022 15:31:46 +0000 (23:31 +0800)]
AdGuardHome: update to v0.107.11
Signed-off-by: YiZhen Choo <yizhen.c02@gmail.com>
(cherry picked from commit
79acc3c21f48b5d38f9e43d802d7dcdfee9f6606)
Michal Vasilek [Thu, 22 Dec 2022 12:05:51 +0000 (13:05 +0100)]
libarchive: add missing CONFLICT
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
Michal Vasilek [Thu, 22 Dec 2022 10:16:29 +0000 (11:16 +0100)]
libarchive: fix CVE-2022-36227
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
Michal Vasilek [Thu, 22 Dec 2022 10:16:02 +0000 (11:16 +0100)]
libarchive: update to 3.5.3
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
Rosen Penev [Sun, 19 Sep 2021 07:52:57 +0000 (00:52 -0700)]
libarchive: update to 3.5.2
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit
537f743c492bac2385db19fd26bd3924d8e6ea04)
rebased to remove AUTORELEASE
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
Alexandru Ardelean [Wed, 21 Dec 2022 17:53:26 +0000 (19:53 +0200)]
Merge pull request #20144 from turris-cz/openwrt-21.02/python3-update
[21.02] python3: update to version 3.9.16
Josef Schlehofer [Tue, 20 Dec 2022 22:59:44 +0000 (23:59 +0100)]
python3: update to version 3.9.16
Release notes:
https://www.python.org/downloads/release/python-3916/
Fixes:
CVE-2022-43680
CVE-2022-37454
CVE-2022-45061
CVE-2022-42919
CVE-2015-20107
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Daniel Golle [Mon, 5 Dec 2022 01:18:43 +0000 (01:18 +0000)]
snowflake: update to version 2.4.1
Changes in version v2.4.1 - 2022-12-01
- Issue 40224: Bug fix in utls roundtripper
Changes in version v2.4.0 - 2022-11-29
- Fix proxy command line help output
- Issue 40123: Reduce multicast DNS candidates
- Add ICE ephemeral ports range setting
- Reformat using Go 1.19
- Update CI tests to include latest and minimum Go versions
- Issue 40184: Use fixed unit for bandwidth logging
- Update gorilla/websocket to v1.5.0
- Issue 40175: Server performance improvements
- Issue 40183: Change snowflake proxy log verbosity
- Issue 40117: Display proxy NAT type in logs
- Issue 40198: Add a `orport-srcaddr` server transport option
- Add gofmt output to CI test
- Issue 40185: Change bandwidth type from int to int64 to prevent overflow
- Add version output support to snowflake
- Issue 40229: Change regexes for ipv6 addresses to catch url-encoded addresses
- Issue 40220: Close stale connections in standalone proxy
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit
f60f11f9277ee30fa0699cdf1aded5a0bc50aac6)
Michal Vasilek [Thu, 15 Dec 2022 10:18:00 +0000 (11:18 +0100)]
apr-util: disable parallel build
Build reliably fails with -j20
crypto/apr_passwd.c:200:1: fatal error: error closing -: Broken pipe
200 | }
| ^
compilation terminated.
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit
bd9e119d68fba792a1f760525540c0e0cf10e63f)
Hannu Nyman [Thu, 15 Dec 2022 15:54:26 +0000 (17:54 +0200)]
nano: update to 7.1
Update nano editor to version 7.1
* drop the backported upstream fix for 7.0
* drop AUTORELEASE
* disable justify from 'plus'. Rarely needed with OpenWrt
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit
89dc1b17e9d8234c8085ffdb4fbe00d0e9093725)
Luiz Angelo Daros de Luca [Mon, 12 Dec 2022 17:32:10 +0000 (14:32 -0300)]
ruby: update to 3.0.5
This release includes a security fix.
- CVE-2021-33621: HTTP response splitting in CGI
For more details:
- https://www.ruby-lang.org/en/news/2022/11/24/ruby-3-0-5-released/
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
Josef Schlehofer [Fri, 9 Dec 2022 10:53:45 +0000 (11:53 +0100)]
Merge pull request #20038 from
1715173329/g1189
[openwrt-21.02] golang: Update to 1.18.9
Alois Klink [Wed, 23 Nov 2022 18:37:01 +0000 (18:37 +0000)]
github-ci: error on any shell errors
Enable `errexit` and `nounset` [POSIX shell options][1]
in `.github/workflows/entrypoint.sh` so that the script fails
if any command within the script fails.
[1]: https://pubs.opengroup.org/onlinepubs/
9699919799//utilities/V3_chap02.html#set
Reported-by: Marius Dinu <m95d+git@psihoexpert.ro>
Fixes: https://github.com/openwrt/packages/issues/19953
Signed-off-by: Alois Klink <alois@aloisklink.com>
(cherry picked from commit
18d3c529fa4ab8dafcf6c147cf3cb55792d8ca10)
Daniel Golle [Thu, 6 Oct 2022 15:48:23 +0000 (16:48 +0100)]
snowflake: update to version 2.3.1
03b2b56f Fix broker race condition
36f03dfd Record proxy type for proxy relay stats
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit
15fdb5fa166c1d41236c519821cad6e92fbb8e68)
Josef Schlehofer [Wed, 7 Dec 2022 21:08:42 +0000 (22:08 +0100)]
Merge pull request #19445 from PolynomialDivision/21-02-snowflake
[21.02] snowflake: add package
Tianling Shen [Wed, 7 Dec 2022 17:39:32 +0000 (01:39 +0800)]
golang: Update to 1.18.9
go1.18.9 (released 2022-12-06) includes security fixes to the net/http
and os packages, as well as bug fixes to cgo, the compiler, the runtime,
and the crypto/x509 and os/exec packages.
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Alexandru Ardelean [Wed, 7 Dec 2022 08:01:48 +0000 (10:01 +0200)]
django: reset PKG_RELEASE to 1
Omitted during review.
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
Alexandru Ardelean [Wed, 7 Dec 2022 07:55:58 +0000 (09:55 +0200)]
Merge pull request #20034 from peter-stadler/openwrt-21.02
django: bump version 3.2.16
Liangbin Lian [Thu, 24 Nov 2022 10:05:50 +0000 (18:05 +0800)]
samba4: support both user map and valid users on same time
Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit
e04e523a01f5144a60541e6468a9f4451f26c8ab)
Peter Stadler [Fri, 2 Dec 2022 22:14:38 +0000 (23:14 +0100)]
django: bump version 3.2.16
fix CVE-2022-41323
Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
Josef Schlehofer [Sun, 4 Dec 2022 17:46:50 +0000 (18:46 +0100)]
Merge pull request #19997 from TDT-AG/pr/owrt-21.02-fix-libqmi-build
libqmi: fix build regressions
Maxim Anisimov [Mon, 12 Sep 2022 07:16:37 +0000 (10:16 +0300)]
libqmi: bump to 1.30.8
Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit
0b0d8163d53efdfd6abd7d9cbb57a770273c5319)
Aleksander Morgado [Wed, 4 May 2022 11:36:28 +0000 (13:36 +0200)]
libqmi: bump to 1.30.6
Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit
45e8d072ee2d52b5d8f0b053d706ce6a2ae06aae)
(cherry picked from commit
b8a8dd53c7996f289aefbcd4fb0d4747f7f8bb48)
Maxim Anisimov [Tue, 29 Mar 2022 08:38:57 +0000 (11:38 +0300)]
libqmi: polish Makefile
PKG_VERSION replaced by PKG_SOURCE_VERSION.
Simplify for collection selection.
Removed unneeded python3/host dep.
Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit
ff5837ee8f483bb425d33b18c1185586507d495c)
(cherry picked from commit
94b824423bc0f668a2f607497d26cc00f47e521e)
Maxim Anisimov [Sat, 26 Mar 2022 09:04:26 +0000 (12:04 +0300)]
libqmi: switch to meson build tools
Using https://gitlab.freedesktop.org/mobile-broadband/libqmi.git to download the source code.
Enabled lto and additional gcc flags for perfomance and less size.
Added support for selecting qmi message collection.
Selected basic qmi message collection by default (modemmanager requires it).
Modified to use meson as upstream has abandoned autotools.
Removed BUILD_PARALLEL options. These are default with ninja/meson.
Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit
f7cbd445408756b7a44764080063a9a4158988ed)
(cherry picked from commit
1683d7c96373948d4c25266f9aaedcf85f13695e)
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Update meson include dir for branch openwrt-21.02.
Florian Eckert [Wed, 30 Nov 2022 09:38:03 +0000 (10:38 +0100)]
Revert "libqmi: bump to 1.30.8"
The libqmi version 1.30.8 uses meson. In order to cherry-pick the
last changes cleanly, this commit must first be reverted.
This reverts commit
0cccbcb0c76f2d2fe74fc0acae02c69aee0d8c52.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Glenn Strauss [Wed, 30 Nov 2022 03:22:14 +0000 (22:22 -0500)]
lighttpd: lighttpd.conf vars, comments, guidance
lighttpd.conf variables, documentation comments, configuration guidance
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit
c862b524fb879f416705e85fa31539472aeff2d8)
Glenn Strauss [Sun, 27 Nov 2022 20:39:24 +0000 (15:39 -0500)]
lighttpd: print stderr trace if validation fails
lighttpd.init validate_conf(): print stderr trace if validation fails
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit
38ffa02e422bac544eee9578830a8b6a49265be1)
Tianling Shen [Mon, 28 Nov 2022 18:32:01 +0000 (02:32 +0800)]
v2raya: backports upstream fixes and add 3 new options
It may take a long time waiting for a new tag, so backport these
important bug fixes for now.
While at it, added 3 new options provided by upstream, and deprecated
the usage of `$(AUTORELEASE)`.
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit
17362ce57c88da583c039d81b800b3edad5a6053)
Tianling Shen [Mon, 28 Nov 2022 16:19:15 +0000 (00:19 +0800)]
xray-core: Update to 1.6.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit
b3e453f33517747ef9fb48536cced4e42f7abc99)
[updated geodata, based on
664ecae4e63799]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Tianling Shen [Mon, 28 Nov 2022 16:18:21 +0000 (00:18 +0800)]
yq: Update to 4.30.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit
255d19a007ab9a0dbefab88f0be934f6cffe5ed5)
Peter Stadler [Thu, 28 Oct 2021 08:36:00 +0000 (10:36 +0200)]
uwsgi: bump version and use less workarounds
* adopt pypi name and line numbers in patches
* remove custom tar command and patch for using python3 (changed upstream)
Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
(cherry picked from commit
545629e38601846b4b79bc3ac932355f0621d750)
Tianling Shen [Tue, 22 Nov 2022 08:57:37 +0000 (16:57 +0800)]
librespeed-go: add new package
Go backend for LibreSpeed.
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit
a157e382df81ba1d40ba275730d7adf627508004)
Maxim Anisimov [Sat, 26 Mar 2022 08:45:59 +0000 (11:45 +0300)]
libmbim: switch to meson build tools
Using https://gitlab.freedesktop.org/mobile-broadband/libmbim.git to download the source code.
Enabled lto and additional gcc flags for perfomance and less size.
Modified to use meson as upstream has abandoned autotools.
Removed BUILD_PARALLEL options. These are default with ninja/meson.
Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit
fea19c23994dcc84332dfaeb9d585df46a847b10)
Tianling Shen [Mon, 14 Nov 2022 10:17:46 +0000 (18:17 +0800)]
sqlite3: Update to 3.40.0
1. Added a new option for SQLITE3_COLUMN_METADATA.
2. Minor cleanup Makefile and fixed 2 typo errors.
Fixes: CVE-2022-35737
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit
a4a0f0793bf7016d813b67a413ee4010917270c0)
Marius Dinu [Tue, 21 Dec 2021 19:56:08 +0000 (21:56 +0200)]
sqlite: update to v3.37 (2021-11-27)
Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit
b2309dc25e5080bfb49d21e1a4bd751460c9465d)
Jan Hoffmann [Thu, 4 Feb 2021 19:41:50 +0000 (20:41 +0100)]
sqlite3: add option for batch-atomic write support
This allows to build SQLite with support for the batch-atomic write
optimization. It makes use of atomic write support provided by the
underlying file system. Currently, this is only supported on F2FS. It
it does not work with overlayfs.
Signed-off-by: Jan Hoffmann <jan@3e8.eu>
(cherry picked from commit
4bc7ba7fe82563dd64db57317c52824039ab8209)
Josef Schlehofer [Wed, 23 Nov 2022 13:31:56 +0000 (14:31 +0100)]
libmbim: fix hash for 1.26.4 tarball
This corrects the hash by using sha256sum for downloaded tarball from
freedesktop. After that, package libmbim was successfully compiled.
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Ivan Pavlov [Thu, 23 Jun 2022 03:06:44 +0000 (06:06 +0300)]
xtables-addons: update to 3.21
updated to kernel 5.10.121+ changes
Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
(cherry picked from commit
69e4ed4b6f2e0fe33367ea13871d5ac227aaf922)
Nick Hainke [Wed, 1 Jun 2022 06:27:59 +0000 (08:27 +0200)]
xtables-addons: update to 3.20
866bc7f Xtables-addons 3.20
aa70669 doc: move changelog to rST
d7de2a9 doc: remove old changelog entries
d7e49a8 build: bump supported kernel version to 5.17
966fa43 extensions: replace PDE_DATA
Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit
c3141dc16aaf6ec0d9262a921a41a69e96241be8)
Eneas U de Queiroz [Wed, 11 May 2022 22:37:12 +0000 (19:37 -0300)]
audit: remove host build
The audit package in the packages feed share the same sources as the
libaudit package in the base repo. libaudit performs a host build, used
only by libsemanage in base.
There is no package depending on 'audit/host', so we can remove it to
avoid possible confusion.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit
1d54defb0fe7a964a19e3aa36e35a8159bcc2262)
Eneas U de Queiroz [Wed, 11 May 2022 22:08:13 +0000 (19:08 -0300)]
audit: avoid interferece with base libaudit build
Both audit in the packages feed and libaudito from the base repo use the
same sources.
Have 'audit' use a different build directory than 'libaudit' package to
avoid interference between them.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit
c0f26f4980cfb6d2abb1b1548530cee41c5f92aa)
Aleksander Morgado [Wed, 4 May 2022 11:35:54 +0000 (13:35 +0200)]
libmbim: bump to 1.26.4
Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit
1d2ef5abbbdff8528ec225d4bc499643bc29ea12)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[only version bump]