feed/packages.git
23 months agopython3-pytz: bump to version 2022.6
Alexandru Ardelean [Wed, 14 Dec 2022 07:30:28 +0000 (09:30 +0200)]
python3-pytz: bump to version 2022.6

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
23 months agonano: update to 7.1
Hannu Nyman [Thu, 15 Dec 2022 15:54:26 +0000 (17:54 +0200)]
nano: update to 7.1

Update nano editor to version 7.1
* drop the backported upstream fix for 7.0
* drop AUTORELEASE
* disable justify from 'plus'. Rarely needed with OpenWrt

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 89dc1b17e9d8234c8085ffdb4fbe00d0e9093725)

23 months agoMerge pull request #20017 from commodo/stress-ng-update-22.03
Alexandru Ardelean [Wed, 14 Dec 2022 07:31:04 +0000 (09:31 +0200)]
Merge pull request #20017 from commodo/stress-ng-update-22.03

stress-ng: adjust build with xxhash & libegl

23 months agowget: apply upstream fix to avoid nettle linking in nossl
Hannu Nyman [Tue, 13 Dec 2022 15:36:49 +0000 (17:36 +0200)]
wget: apply upstream fix to avoid nettle linking in nossl

Replace my own patch with the upstream solution, which they issued
in response to my bug report.
(Two patches as they overlooked something on the first try.
Reference to https://savannah.gnu.org/bugs/index.php?63431 )

The nettle lib evaluation is now conditional to not having "--disable-ntlm".

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit fd7da3333e98c0d2ef1ed9d7997fe78000474caf)

23 months agowget: update to 1.21.3
Hannu Nyman [Tue, 13 Dec 2022 15:36:25 +0000 (17:36 +0200)]
wget: update to 1.21.3

Update wget to 1.21.3

* Remove patch 100-fix-hsts-time.patch as upstream has issued
  its own version on the fixes

* Add a hack (and fixup autoreconf) to fix an upstream bug that
  forces the nettle library into nossl even if NTLM is disabled.
  Upstream bug filed: https://savannah.gnu.org/bugs/?63431

* Remove old maintainer who has not been active

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit a694130993d9d9eed8689ecdc1d6044dca3dc40e)

23 months agostress-ng: disable xxhash & libegl stressors 20017/head
Alexandru Ardelean [Sat, 3 Dec 2022 19:52:49 +0000 (21:52 +0200)]
stress-ng: disable xxhash & libegl stressors

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
23 months agoMerge pull request #20063 from stangri/openwrt-22.03-pbr
Stan Grishin [Tue, 13 Dec 2022 03:21:16 +0000 (20:21 -0700)]
Merge pull request #20063 from stangri/openwrt-22.03-pbr

[22.03] pbr: detect missing iptables

23 months agosyncthing: update to 1.22.2
Van Waholtz [Mon, 12 Dec 2022 15:08:42 +0000 (23:08 +0800)]
syncthing: update to 1.22.2

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit d22bed1dc3ba056dd3f3a931d22da5fbc5c08b75)

23 months agoMerge pull request #20077 from stangri/openwrt-22.03-simple-adblock
Stan Grishin [Mon, 12 Dec 2022 22:20:07 +0000 (15:20 -0700)]
Merge pull request #20077 from stangri/openwrt-22.03-simple-adblock

[22.03] simple-adblock: bugfix: add dnsmasq.nftset to uci_load_validate

23 months agoMerge pull request #20073 from luizluca/22.03/ruby-3.0.5
Josef Schlehofer [Mon, 12 Dec 2022 22:17:29 +0000 (23:17 +0100)]
Merge pull request #20073 from luizluca/22.03/ruby-3.0.5

ruby: update to 3.0.5

23 months agosimple-adblock: bugfix: add dnsmasq.nftset to uci_load_validate 20077/head
Stan Grishin [Mon, 12 Dec 2022 21:43:00 +0000 (21:43 +0000)]
simple-adblock: bugfix: add dnsmasq.nftset to uci_load_validate

* fixes https://github.com/openwrt/openwrt/issues/11481 thanks to:
* https://github.com/mistepien for reporting
* https://github.com/dave14305 for diagnosing

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit fff884e67f62f0ee16bb95507c782d25a6d91eea)

23 months agoruby: update to 3.0.5 20073/head
Luiz Angelo Daros de Luca [Mon, 12 Dec 2022 17:32:10 +0000 (14:32 -0300)]
ruby: update to 3.0.5

This release includes a security fix.

- CVE-2021-33621: HTTP response splitting in CGI

For more details:
- https://www.ruby-lang.org/en/news/2022/11/24/ruby-3-0-5-released/

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
23 months agopbr: detect missing iptables 20063/head
Stan Grishin [Mon, 12 Dec 2022 02:52:59 +0000 (02:52 +0000)]
pbr: detect missing iptables

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit a86985879fa117782dc232122819e9bbb93be175)

23 months agoMerge pull request #20053 from stangri/openwrt-22.03-https-dns-proxy
Stan Grishin [Sun, 11 Dec 2022 03:32:12 +0000 (20:32 -0700)]
Merge pull request #20053 from stangri/openwrt-22.03-https-dns-proxy

[22.03] https-dns-proxy: fix restart

23 months agohttps-dns-proxy: fix restart 20053/head
Stan Grishin [Sat, 10 Dec 2022 05:32:20 +0000 (05:32 +0000)]
https-dns-proxy: fix restart

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 75ac50ca895e9e042afe9c4a64a367e3863e471f)

23 months agoMerge pull request #20043 from stangri/openwrt-22.03-https-dns-proxy
Stan Grishin [Sat, 10 Dec 2022 05:02:55 +0000 (22:02 -0700)]
Merge pull request #20043 from stangri/openwrt-22.03-https-dns-proxy

[22.03] https-dns-proxy: add mdns service records

23 months agoMerge pull request #20051 from stangri/openwrt-22.03-simple-adblock
Stan Grishin [Sat, 10 Dec 2022 05:02:15 +0000 (22:02 -0700)]
Merge pull request #20051 from stangri/openwrt-22.03-simple-adblock

[22.03] simple-adblock: support new OISD dnsmasq config

23 months agosimple-adblock: support new OISD dnsmasq config 20051/head
Stan Grishin [Sat, 10 Dec 2022 01:52:58 +0000 (01:52 +0000)]
simple-adblock: support new OISD dnsmasq config

* OISD dnsmasq config files switched from using address= to server=

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 3950f0ce99844425805887a8e312db6c911fe398)

23 months agodnsproxy: Update to 0.46.4
Tianling Shen [Tue, 6 Dec 2022 22:58:42 +0000 (06:58 +0800)]
dnsproxy: Update to 0.46.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 88d33fef91e6bdeb195bf40b80ceb4644334a00b)

23 months agocloudflared: Update to 2022.11.1
Tianling Shen [Tue, 6 Dec 2022 22:58:35 +0000 (06:58 +0800)]
cloudflared: Update to 2022.11.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a1a14c1103e83ec31d437c0893833026d211805d)

23 months agohttps-dns-proxy: add mdns service records 20043/head
Stan Grishin [Wed, 7 Dec 2022 20:59:28 +0000 (20:59 +0000)]
https-dns-proxy: add mdns service records

* add mdns records for started instances
* Makefile: use $(PKG_VERSION) as a value for PKG_SOURCE_DATE instead of
  hard-coding it

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit ee37d0ec863a2254c4bfecd7bb65155e276fed88)

23 months agogithub-ci: error on any shell errors
Alois Klink [Wed, 23 Nov 2022 18:37:01 +0000 (18:37 +0000)]
github-ci: error on any shell errors

Enable `errexit` and `nounset` [POSIX shell options][1]
in `.github/workflows/entrypoint.sh` so that the script fails
if any command within the script fails.

[1]: https://pubs.opengroup.org/onlinepubs/9699919799//utilities/V3_chap02.html#set

Reported-by: Marius Dinu <m95d+git@psihoexpert.ro>
Fixes: https://github.com/openwrt/packages/issues/19953
Signed-off-by: Alois Klink <alois@aloisklink.com>
(cherry picked from commit 18d3c529fa4ab8dafcf6c147cf3cb55792d8ca10)

23 months agoMerge pull request #20033 from peter-stadler/openwrt-22.03
Alexandru Ardelean [Thu, 8 Dec 2022 09:26:21 +0000 (11:26 +0200)]
Merge pull request #20033 from peter-stadler/openwrt-22.03

django: bump version 4.0.8

23 months agodjango: bump version 4.0.8 20033/head
Peter Stadler [Fri, 2 Dec 2022 22:12:55 +0000 (23:12 +0100)]
django: bump version 4.0.8

fix CVE-2022-41323

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
23 months agonatmap: merge "ipv4" and "ipv6" options into single "family" option
Richard Yu [Wed, 7 Dec 2022 07:18:09 +0000 (15:18 +0800)]
natmap: merge "ipv4" and "ipv6" options into single "family" option

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit 190e04caf69746b862dafdff7b16f539f86a7544)

23 months agosnowflake: update to version 2.4.1
Daniel Golle [Mon, 5 Dec 2022 01:18:43 +0000 (01:18 +0000)]
snowflake: update to version 2.4.1

Changes in version v2.4.1 - 2022-12-01
 - Issue 40224: Bug fix in utls roundtripper

Changes in version v2.4.0 - 2022-11-29
 - Fix proxy command line help output
 - Issue 40123: Reduce multicast DNS candidates
 - Add ICE ephemeral ports range setting
 - Reformat using Go 1.19
 - Update CI tests to include latest and minimum Go versions
 - Issue 40184: Use fixed unit for bandwidth logging
 - Update gorilla/websocket to v1.5.0
 - Issue 40175: Server performance improvements
 - Issue 40183: Change snowflake proxy log verbosity
 - Issue 40117: Display proxy NAT type in logs
 - Issue 40198: Add a `orport-srcaddr` server transport option
 - Add gofmt output to CI test
 - Issue 40185:  Change bandwidth type from int to int64 to prevent overflow
 - Add version output support to snowflake
 - Issue 40229: Change regexes for ipv6 addresses to catch url-encoded addresses
 - Issue 40220: Close stale connections in standalone proxy

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f60f11f9277ee30fa0699cdf1aded5a0bc50aac6)

23 months agonatmap: add new package
Richard Yu [Mon, 5 Dec 2022 08:03:51 +0000 (16:03 +0800)]
natmap: add new package

NATMap is a program for opening port behind full cone NAT (NAT-1),
without the need for using UPnP or another port forward settings.

More details can be found at original repo: https://github.com/heiher/natmap

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit e691a25cb3398b83bedc9581ef119382760cfacc)

23 months agoxz: update to 5.2.9
Hannu Nyman [Tue, 6 Dec 2022 08:55:26 +0000 (10:55 +0200)]
xz: update to 5.2.9

Update xz to version 5.2.9.

Switch back to .bz2 sources, as we already download .bz2 for tools/
No sense to re-download sources as a .xz file.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit c1222365526e1fab7f021f2b3a629e859be6b489)

23 months agoxz: update to 5.2.7
Nick Hainke [Tue, 6 Dec 2022 08:55:09 +0000 (10:55 +0200)]
xz: update to 5.2.7

Update to latest version. No release notes available.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 964e59d385ca986fedced9848ffd1a491c123358)

23 months agoxz: update to 5.2.6
Nick Hainke [Tue, 6 Dec 2022 08:54:49 +0000 (10:54 +0200)]
xz: update to 5.2.6

Release Notes:
https://git.tukaani.org/?p=xz.git;a=blob;f=NEWS;hb=HEAD

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit d7d39043c34a5cfd5099a287d27fc7d484ef7b49)

23 months agotailscale: Update to version 1.32.3
Stanislav Petrashov [Sat, 3 Dec 2022 18:49:08 +0000 (19:49 +0100)]
tailscale: Update to version 1.32.3

Signed-off-by: Stanislav Petrashov <s@petrashov.ru>
(cherry picked from commit 1ffe60bc859db3b6b900a9fd6950d53ee1184aa1)

23 months agotailscale: update to v1.32.0
Stanislav Petrashov [Sun, 16 Oct 2022 16:11:11 +0000 (18:11 +0200)]
tailscale: update to v1.32.0

Signed-off-by: Stanislav Petrashov <s@petrashov.ru>
(cherry picked from commit 9434a2dfb2f8d6efa3df4dea46b35eaa423de83a)

23 months agoMerge pull request #20010 from stangri/openwrt-22.03-pbr
Stan Grishin [Sun, 4 Dec 2022 17:51:18 +0000 (10:51 -0700)]
Merge pull request #20010 from stangri/openwrt-22.03-pbr

[22.03] pbr: initial commit

23 months agoadguardhome: bump to 0.107.18
Dobroslaw Kijowski [Wed, 16 Nov 2022 17:12:28 +0000 (18:12 +0100)]
adguardhome: bump to 0.107.18

* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.17
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.18

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit e3dc7537812338a6200b16ba7b218ce5e6745cf4)

23 months agoAdGuardHome: update to v0.107.16
YiZhen Choo [Fri, 7 Oct 2022 15:47:50 +0000 (23:47 +0800)]
AdGuardHome: update to v0.107.16

Signed-off-by: YiZhen Choo <yizhen.c02@gmail.com>
(cherry picked from commit 64dabe2d681f013c834f447496ad57b413790b0b)

23 months agoAdGuardHome: update to v0.107.12
YiZhen Choo [Wed, 7 Sep 2022 16:05:16 +0000 (00:05 +0800)]
AdGuardHome: update to v0.107.12

Signed-off-by: YiZhen Choo <yizhen.c02@gmail.com>
(cherry picked from commit e806d85e46ae563e9fd334972dcb019a88442cbd)

23 months agoAdGuardHome: update to v0.107.11
YiZhen Choo [Fri, 19 Aug 2022 15:31:46 +0000 (23:31 +0800)]
AdGuardHome: update to v0.107.11

Signed-off-by: YiZhen Choo <yizhen.c02@gmail.com>
(cherry picked from commit 79acc3c21f48b5d38f9e43d802d7dcdfee9f6606)

23 months agoMerge pull request #20003 from mhei/22.03-php8-update-8.1.13
Michael Heimpold [Sat, 3 Dec 2022 13:33:14 +0000 (14:33 +0100)]
Merge pull request #20003 from mhei/22.03-php8-update-8.1.13

[22.03] php8: update to 8.1.13

23 months agobtrfs-progs: Update to version 6.0.1
Hauke Mehrtens [Sun, 6 Nov 2022 15:41:40 +0000 (16:41 +0100)]
btrfs-progs: Update to version 6.0.1

This fixes compilation problems with glibc 2.36.

Full Changelog:
btrfs-progs-6.0 (2022-10-11)
-----------------------------
   * fi usage: in tabular output, print total size and slack size
   * mkfs:
      * option -O now accepts values from -R to unify the interface (-R will
continue to work)
      * zone reset and discard is done in parallel on all devices
      * removed option --leafsize, deprecated long time ago
   * corrupt-block: recalculate checksum when changing generation
   * fixes:
      * convert: fix reserved range detection and overlaps
      * mkfs: fix creating files with reserved inode numbers with --rootdir
      * receive: escape filenames in command attributes
      * fix extent buffer leaks after transaction abort
   * experimental:
      * mkfs: support for block-group-tree (kernel 6.1)
      * fsverity in send (protocol v3, WIP)
      * btrfstune -b converts to block-group-tree
   * other:
      * cleanups, refactoring
      * new and updated tests
      * update documentation

btrfs-progs-6.0.1 (2022-11-04)
""""""""""""""""""""""""""""""
   * send: minor speed up for v2 due to increased buffer size
   * resize: invalid command line options fail with error code
   * quota rescan:
      * add long options --status and --wait
      * new option to wait but don't start rescan
   * qgroup show: print path by default, updated format
   * qgroup: new subcommand clear-stale, remove qgroups without their subvolumes
   * experimental:
      * add warnings to commands that have it enabled (mkfs, image, btrfstune)
   * other:
      * documentation, help text, error message updates

btrfs-progs-5.19 (2022-08-16)
-----------------------------
   * send: support protocol version 2
   * fi show: print all missing devices
   * device stats: add tabular output
   * replace: add alias to device group (device replace)
   * check: validate free space tree items
   * fixes:
      * convert: support large filesystems (block count > 32bit)
      * recognize filesystems with verity enabled
      * mkfs and DUP could write out of order, fix it for zoned mode
   * build:
      * optional support for LZO and ZSTD in receive
      * compatibility with glibc 2.36 (mount.h)
      * add fallbacks for new GCC builtins
   * other:
      * corrupt-block: target specific items, offsets
      * documentation updates, new pages from wiki
      * new tests

btrfs-progs-5.19.1 (2022-09-12)
"""""""""""""""""""""""""""""""
   * fix memory leaks (extent buffer, path)
   * check: verify block device size vs item
   * rescue fix-device-size: allow to shrink device item
   * receive: fix crash on wrong pinter free()
   * other:
      * experimental: support for block-group-tree
      * documentation updates
      * new tests

btrfs-progs-5.18 (2022-05-25)
-----------------------------
   * fixes:
      * dump-tree: don't print traling zeros in checksums
      * recognize paused balance as exclusive operation state, allow to start
        device add
      * convert: properly initialize target filesystem label
      * mkfs: don't create free space bitmaps for empty filesystem
   * restore: make lzo support build-time configurable, print supported
     compression in help text
   * update kernel-lib sources
   * other:
      * documentation updates, finish conversion to RST, CHANGES and INSTALL
        could be included into RST
      * fix build detection of experimental mode
      * new tests

btrfs-progs-5.18.1 (2022-06-06)
"""""""""""""""""""""""""""""""
   * fixes:
      * convert: fix self reference of toplevel directory
      * build: make kernel lib headers compatible with C++
   * zoned mode: verify minimum zone size 4MiB
   * libbtrfs: cleanups, merge headers and remove declarations of unexported
     symbols
   * other: documentation updates

btrfs-progs-5.17 (2022-04-26)
-----------------------------
   * check:
      * repair wrong num_devices in superblock
      * recognize overly long xattr names
      * fix wrong total bytes check for seed device
   * auto-repair on read on RAID56
   * property set: unify handling of empty value to mean default, changed meaning
     for property 'compression' to allow reset to default and to set NOCOMPRESS,
     since kernel 5.14
   * fixes:
       * dump-tree: print fs-verity items
       * fix location of system chunk on zoned filesystem
       * do not allow setting seeding flag on a filesystem with dirty log
       * mkfs and subpage support: use sectorsize as nodesize fallback for mixed
 profiles
   * preparatory work for extent tree v2, global roots
   * experimental feature (unstable interface, not built by default,
       do not use for production)
       * btrfstune: option --csum to switch checksum algorithm
   * other:
       * cleanups, refactoring
       * update documentation build, remove asciidocs leftovers
       * update fssum to consider xattrs
       * add fsstress

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 99f5604905da0ba931f3dfa5119bb9823036475b)

23 months agolibgpg-error: copy gpg-error.pc to staging directory
W. Michael Petullo [Fri, 18 Nov 2022 02:40:35 +0000 (20:40 -0600)]
libgpg-error: copy gpg-error.pc to staging directory

Packages like libassuan and libksba would not compile after updating
libgpg-error to 1.46. This was because gpg-error.m4 (and thus the affected
packages' configure scripts) relies on gpgrt-config, which in turn needs
access to gpg-error.pc. This modifies the libgpg-error build process to
copy gpg-error.pc to OpenWrt's staging directory, so that it is available
for subsequent dependent package builds.

Fixes: https://github.com/openwrt/packages/issues/19880
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit a93e0269a10cbca0679ae390d6b89aedbb2435e6)

23 months agognupg: compile with -fcommon
Tjeu Kayim [Thu, 24 Nov 2022 11:08:30 +0000 (12:08 +0100)]
gnupg: compile with -fcommon

This fixes a segfault because gnupg/g10/options.h struct opt
is otherwise not shared between the different compilation units,
resulting in opt.homedir being NULL when passed to make_filename.

$ gpg1 -i

gpg: signal 11 caught ... exiting
Segmentation fault

(gdb) bt
    #0  0x00007f17bb2185e2 in strlen (s=s@entry=0x0) at src/string/strlen.c:17
    #1  0x0000000000460ea0 in make_filename (first_part=first_part@entry=0x0) at gnupg-1.4.23/util/fileutil.c:174
    #2  0x000000000040ee42 in keydb_add_resource (url=url@entry=0x46bfe3 "secring.gpg", flags=flags@entry=4, secret=secret@entry=1)
        at gnupg-1.4.23/g10/keydb.c:238
    #3  0x00000000004062ee in main (argc=<optimized out>, argv=<optimized out>) at gnupg-1.4.23/g10/gpg.c:3323

Signed-off-by: Tjeu Kayim <15987676+TjeuKayim@users.noreply.github.com>
(cherry picked from commit f4058c1c18138ae1011abfe0e7aca74659834b21)

23 months agoprivoxy: fix postinst missing $
Josh Powers [Mon, 21 Nov 2022 17:32:37 +0000 (10:32 -0700)]
privoxy: fix postinst missing $

fixes: #19949

Signed-off-by: Josh Powers <powersj@fastmail.com>
(cherry picked from commit 46e4def61f6b670daac1725df8f3fc4475fe5450)

23 months agoprivoxy: correctly format /etc/services additions
Josh Powers [Wed, 26 Oct 2022 01:54:43 +0000 (19:54 -0600)]
privoxy: correctly format /etc/services additions

This adds the missing protocol (e.g. /tcp and /udp) to the entry in
/etc/services. If the entry already exists, it will add the /tcp to it.
Otherwise, it will look and add the tcp and udp entries if either is
missing.

fixes: openwrt#19665

Signed-off-by: Josh Powers <powersj@fastmail.com>
(cherry picked from commit 95edfa723c9e7b1b99361a86022b9b20ac6f8ead)

23 months agogolang: update to v1.19.3
Stanislav Petrashov [Wed, 23 Nov 2022 21:06:14 +0000 (22:06 +0100)]
golang: update to v1.19.3

Signed-off-by: Stanislav Petrashov <s@petrashov.ru>
(cherry picked from commit 440dcd8d34d139e4e80fff51b7799e41d8f1196e)

23 months agogolang: update to v1.19.2
Stanislav Petrashov [Thu, 20 Oct 2022 20:18:19 +0000 (22:18 +0200)]
golang: update to v1.19.2

Includes fixes for security vulnerabilities:
 * [CVE-2022-27664](https://github.com/advisories/GHSA-69cg-p879-7622) net/http: handle server errors after sending GOAWAY
 * [CVE-2022-32190](https://github.com/golang/go/issues/54385) net/url: JoinPath does not strip relative path components in all circumstances
 * [CVE-2022-2879](https://github.com/golang/go/issues/54853) archive/tar: unbounded memory consumption when reading headers
 * [CVE-2022-2880](https://github.com/golang/go/issues/54663) net/http/httputil: ReverseProxy should not forward unparseable query parameters
 * [CVE-2022-41715](https://github.com/golang/go/issues/55949) regexp/syntax: limit memory used by parsing regexps

Addresses the build failure:
* https://github.com/openwrt/packages/pull/19613

Signed-off-by: Stanislav Petrashov <s@petrashov.ru>
(cherry picked from commit 0ad7a2fe1841a46107b88026a3b95b54571afb88)

23 months agopbr: initial commit 20010/head
Stan Grishin [Mon, 31 Oct 2022 23:08:01 +0000 (23:08 +0000)]
pbr: initial commit

* The makefile produces the nft and iptables capable `pbr` package
  and the `pbr-iptables` package for legacy setups
* This replaces `vpnbypass` and `vpn-policy-routing` packages
* I'm soliciting feedback on this package and my intention is to
  update the version to 1.0.0 before this is merged, but I need the
  feedback on this and luci-app-pbr before then.

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 47eca64cb82a5459668fc14df9422e365c8343b6)

23 months agoMerge pull request #19994 from stangri/openwrt-22.03-simple-adblock
Stan Grishin [Fri, 2 Dec 2022 19:19:27 +0000 (12:19 -0700)]
Merge pull request #19994 from stangri/openwrt-22.03-simple-adblock

[22.03] simple-adblock: localizable error/warning messages

23 months agoborgbackup: add package for 1.2.2
Julien Malik [Sat, 26 Nov 2022 14:24:05 +0000 (15:24 +0100)]
borgbackup: add package for 1.2.2

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 2ad61a4529a5f600da47c071bb1bf2ce7462c14c)

23 months agopython-pyfuse3: add package for 3.2.2
Julien Malik [Sat, 26 Nov 2022 14:24:05 +0000 (15:24 +0100)]
python-pyfuse3: add package for 3.2.2

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 17f58b94a745a9f058182822d420ed65b3730437)

23 months agopython-trio: add package for 0.22.0
Julien Malik [Sat, 26 Nov 2022 14:24:05 +0000 (15:24 +0100)]
python-trio: add package for 0.22.0

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 07e29c3782f5eb4fb0e3cc3cdf587c77eafb96e6)

23 months agopython-sniffio: add package for 1.3.0
Julien Malik [Sat, 26 Nov 2022 14:24:04 +0000 (15:24 +0100)]
python-sniffio: add package for 1.3.0

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit f35f4dace76761048ab43edd91ca6c44123ff6ac)

23 months agopython-outcome: add package for 1.2.0
Julien Malik [Sat, 26 Nov 2022 14:24:04 +0000 (15:24 +0100)]
python-outcome: add package for 1.2.0

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 750facea90aafb75c5937259671369a83e43881a)

23 months agopython-async-generator: add package for 1.10
Julien Malik [Sat, 26 Nov 2022 14:24:04 +0000 (15:24 +0100)]
python-async-generator: add package for 1.10

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 8fe1dab3715197409192fedfedc0b5f6956781f3)

23 months agopython-exceptiongroup: add package for 1.0.4
Julien Malik [Sat, 26 Nov 2022 14:24:04 +0000 (15:24 +0100)]
python-exceptiongroup: add package for 1.0.4

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit a19f331b068ba9f5fab60f149acdd9805ccdb390)

23 months agopython-sortedcontainers: add package for 2.4.0
Julien Malik [Sat, 26 Nov 2022 14:24:03 +0000 (15:24 +0100)]
python-sortedcontainers: add package for 2.4.0

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 69655222fcedb299054bfdff8cf7acf24de4cefa)

23 months agoxxhash: add package for 0.8.1
Julien Malik [Sat, 26 Nov 2022 14:24:03 +0000 (15:24 +0100)]
xxhash: add package for 0.8.1

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit dcbb2cf3d58758c86ba31ece78fa48c33d7ecda9)

23 months agosamba4: support both user map and valid users on same time
Liangbin Lian [Thu, 24 Nov 2022 10:05:50 +0000 (18:05 +0800)]
samba4: support both user map and valid users on same time

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit e04e523a01f5144a60541e6468a9f4451f26c8ab)

23 months agolighttpd: lighttpd.conf vars, comments, guidance
Glenn Strauss [Wed, 30 Nov 2022 03:22:14 +0000 (22:22 -0500)]
lighttpd: lighttpd.conf vars, comments, guidance

lighttpd.conf variables, documentation comments, configuration guidance

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit c862b524fb879f416705e85fa31539472aeff2d8)

23 months agolighttpd: print stderr trace if validation fails
Glenn Strauss [Sun, 27 Nov 2022 20:39:24 +0000 (15:39 -0500)]
lighttpd: print stderr trace if validation fails

lighttpd.init validate_conf(): print stderr trace if validation fails

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 38ffa02e422bac544eee9578830a8b6a49265be1)

23 months agophp8: update to 8.1.13 20003/head
Michael Heimpold [Mon, 28 Nov 2022 06:43:50 +0000 (07:43 +0100)]
php8: update to 8.1.13

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 056051da496078ebaa45d25d6fe6cbb392a60ec1)

23 months agov2raya: backports upstream fixes and add 3 new options
Tianling Shen [Mon, 28 Nov 2022 18:32:01 +0000 (02:32 +0800)]
v2raya: backports upstream fixes and add 3 new options

It may take a long time waiting for a new tag, so backport these
important bug fixes for now.

While at it, added 3 new options provided by upstream, and deprecated
the usage of `$(AUTORELEASE)`.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 17362ce57c88da583c039d81b800b3edad5a6053)

23 months agov2ray-geodata: Update to latest version
Tianling Shen [Mon, 28 Nov 2022 16:22:24 +0000 (00:22 +0800)]
v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 664ecae4e6379928aae0527b96b65ffe0199049d)

23 months agoxray-core: Update to 1.6.5
Tianling Shen [Mon, 28 Nov 2022 16:19:15 +0000 (00:19 +0800)]
xray-core: Update to 1.6.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b3e453f33517747ef9fb48536cced4e42f7abc99)

23 months agoyq: Update to 4.30.5
Tianling Shen [Mon, 28 Nov 2022 16:18:21 +0000 (00:18 +0800)]
yq: Update to 4.30.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 255d19a007ab9a0dbefab88f0be934f6cffe5ed5)

23 months agolibqmi: bump to 1.30.8
Maxim Anisimov [Mon, 12 Sep 2022 07:16:37 +0000 (10:16 +0300)]
libqmi: bump to 1.30.8

Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit 0b0d8163d53efdfd6abd7d9cbb57a770273c5319)

23 months agosimple-adblock: localizable error/warning messages 19994/head
Stan Grishin [Tue, 29 Nov 2022 22:37:53 +0000 (22:37 +0000)]
simple-adblock: localizable error/warning messages

* store all error/warning messages with the error text id so that
  they can be made localizable for the luci app

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 8047d2ccb716ac90f267cc2ceb3723c15c375bd2)

23 months agoMerge pull request #19988 from stangri/openwrt-22.03-simple-adblock
Stan Grishin [Tue, 29 Nov 2022 21:41:13 +0000 (14:41 -0700)]
Merge pull request #19988 from stangri/openwrt-22.03-simple-adblock

[22.03] simple-adblock: bugfix: detect dnsmasq ipset support

23 months agoMerge pull request #19986 from stangri/openwrt-22.03-https-dns-proxy
Stan Grishin [Tue, 29 Nov 2022 21:40:58 +0000 (14:40 -0700)]
Merge pull request #19986 from stangri/openwrt-22.03-https-dns-proxy

[22.03] https-dns-proxy: improve performance on restart

23 months agolibrespeed-go: add new package
Tianling Shen [Tue, 22 Nov 2022 08:57:37 +0000 (16:57 +0800)]
librespeed-go: add new package

Go backend for LibreSpeed.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a157e382df81ba1d40ba275730d7adf627508004)

23 months agosimple-adblock: bugfix: detect dnsmasq ipset support 19988/head
Stan Grishin [Mon, 28 Nov 2022 04:37:42 +0000 (04:37 +0000)]
simple-adblock: bugfix: detect dnsmasq ipset support

* Fixes https://github.com/openwrt/packages/issues/19978, thank you
  @parona-source for the report/patch!

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit cc10774e6e3799ac86af83d8c35c6a37fd73c15a)

23 months agohttps-dns-proxy: improve performance on restart 19986/head
Stan Grishin [Mon, 28 Nov 2022 21:12:07 +0000 (21:12 +0000)]
https-dns-proxy: improve performance on restart

* instead of doing stop/start which involves restarting dnsmasq twice,
  kill the existing service instances on restart instead

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit e6d746a0baa184db3caf7a088179356c798a96d3)

2 years agopdns-recursor: update to 4.7.4
Peter van Dijk [Fri, 25 Nov 2022 13:19:24 +0000 (14:19 +0100)]
pdns-recursor: update to 4.7.4

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit 7bcc02e7c92171044a0aeabd9d988189c6b849b1)

2 years agoliburing: Update to v2.3
Christian Lachner [Tue, 22 Nov 2022 07:14:45 +0000 (08:14 +0100)]
liburing: Update to v2.3

- Updated download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
(cherry picked from commit f01ebf5f335dc0ca7f2448e24f7f2b1b7326ebc5)

2 years agoliburing: Update to v2.2
Christian Lachner [Fri, 8 Jul 2022 05:32:19 +0000 (07:32 +0200)]
liburing: Update to v2.2

- Updated download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
(cherry picked from commit 3f82f9a0023080ffb74d7d3d75a65eb384c64ce7)

2 years agoices: Update to 2.0.3
Tilman Vogel [Mon, 21 Nov 2022 14:09:43 +0000 (15:09 +0100)]
ices: Update to 2.0.3

This fixes a timing issue causing a playlist to be streamed as-fast-as-
possible until memory exhaustion, finally crashing ices and making it
basically useless.

This problem occurred in  the timing code in src/common/timing/ and is
probably related to libc header changes because ices 2.0.2 worked up until
OpenWrt 21.02.3 (at least) but failed in OpenWrt 22.03.2.

Signed-off-by: Tilman Vogel <tilman.vogel@web.de>
(cherry picked from commit 4e2b09bd95c796456d6a3961bed59d97aa516ee0)

2 years agogphoto2: update to 2.5.28
Rosen Penev [Wed, 16 Nov 2022 01:19:51 +0000 (17:19 -0800)]
gphoto2: update to 2.5.28

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit dc3ab606d561e47f1469f97242919ee241885056)

2 years agolibgphoto2: update to 2.5.30
Rosen Penev [Wed, 16 Nov 2022 01:11:39 +0000 (17:11 -0800)]
libgphoto2: update to 2.5.30

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8f3a4366f01cfa0e8562d42aec06669dac09d466)

2 years agosyncthing: update to 1.22.1
Van Waholtz [Mon, 24 Oct 2022 14:02:05 +0000 (22:02 +0800)]
syncthing: update to 1.22.1

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 4d5c427922fa59e078bbd5f3f55346e569de49a2)

2 years agosyncthing: update to 1.20.1
Michal Vasilek [Thu, 5 May 2022 12:32:41 +0000 (14:32 +0200)]
syncthing: update to 1.20.1

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit b48482fdf85ca8c5cc4d6f198f4c5ab7f4c40f1d)

2 years agosyncthing: add stdiscosrv and strelaysrv
Van Waholtz [Mon, 24 Oct 2022 14:02:05 +0000 (22:02 +0800)]
syncthing: add stdiscosrv and strelaysrv

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 9d17ba1a9387efdc08e236d4eaa937eb103472f4)

2 years agotvheadend: update to git master 2022-11-20
Marius Dinu [Mon, 21 Nov 2022 10:42:59 +0000 (12:42 +0200)]
tvheadend: update to git master 2022-11-20

- EPG database switched from v2 to v3. This commit updates OpenWrt init script to use the new database file.
- EPG database symlink created by OpenWrt config option is overwritten with a real file by tvheadend.
  The latest tvheadend commit included here fixes that.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit bf279120190c6064af07721690405649d4e41cc1)

2 years agoknot: update to version 3.2.3
Jan Hák [Tue, 22 Nov 2022 10:25:02 +0000 (11:25 +0100)]
knot: update to version 3.2.3

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 4370e457c8eabc6c4c3decdb197fccc876f45a19)

2 years agocloudflared: Update to 2022.11.0
Tianling Shen [Tue, 22 Nov 2022 06:40:31 +0000 (14:40 +0800)]
cloudflared: Update to 2022.11.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 804ab5540e13075564841658d23d3549667e06d7)

2 years agoMerge pull request #19957 from stangri/openwrt-22.03-https-dns-proxy
Stan Grishin [Tue, 22 Nov 2022 21:19:10 +0000 (14:19 -0700)]
Merge pull request #19957 from stangri/openwrt-22.03-https-dns-proxy

[22.03] https-dns-proxy: update Makefile package descrition

2 years agoooniprobe: Update to 3.16.5
Tianling Shen [Wed, 16 Nov 2022 09:12:13 +0000 (17:12 +0800)]
ooniprobe: Update to 3.16.5

Fix build with Go 1.19.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1c6570dcc7c4ce9843b763e8863baf92277fa008)

2 years agounbound: update to 1.17.0
Eric Luehrsen [Sat, 19 Nov 2022 22:24:27 +0000 (17:24 -0500)]
unbound: update to 1.17.0

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit 6bc0293a73f5a1d86a951ebd4c00cbc7b09e4529)

2 years agolibrespeed-cli: rename binary to librespeed-cli
Michal Vasilek [Mon, 21 Nov 2022 12:49:20 +0000 (13:49 +0100)]
librespeed-cli: rename binary to librespeed-cli

upstream names the binary librespeed-cli and this avoids a conflict with
python3-speedtest-cli

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit c2ad338b0f0fb5df4c84770fa6408f18bd347671)

2 years agorclone: Update to 1.60.1
Tianling Shen [Mon, 21 Nov 2022 11:06:31 +0000 (19:06 +0800)]
rclone: Update to 1.60.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 88a1535d00e1047041cb9328a6f6eac310af1714)

2 years agogg: Update to 0.2.15
Tianling Shen [Mon, 21 Nov 2022 11:06:11 +0000 (19:06 +0800)]
gg: Update to 0.2.15

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit fec75efd8bd4c201e183a460a72e508a9728aaff)

2 years agosqlite3: Update to 3.40.0
Tianling Shen [Mon, 14 Nov 2022 10:17:46 +0000 (18:17 +0800)]
sqlite3: Update to 3.40.0

1. Added a new option for SQLITE3_COLUMN_METADATA.
2. Minor cleanup Makefile and fixed 2 typo errors.

Fixes: CVE-2022-35737
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a4a0f0793bf7016d813b67a413ee4010917270c0)

2 years agohttps-dns-proxy: update Makefile package descrition 19957/head
Stan Grishin [Tue, 22 Nov 2022 01:14:13 +0000 (01:14 +0000)]
https-dns-proxy: update Makefile package descrition

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 0765fb0790e41d9fbee7e22a7e33022dc943d3fd)

2 years agoxray-core: Update to 1.6.4
Tianling Shen [Fri, 18 Nov 2022 11:18:56 +0000 (19:18 +0800)]
xray-core: Update to 1.6.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d36c34f9847d20450f61c955ccab745a5c90e90f)

2 years agonextdns: Update to version 1.38.0
Olivier Poitrey [Wed, 16 Nov 2022 16:04:35 +0000 (16:04 +0000)]
nextdns: Update to version 1.38.0

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
(cherry picked from commit 1acf423ef5891eb88c8e2bbdf8dad7896b8db398)

2 years agoMerge pull request #19901 from stangri/openwrt-22.03-simple-adblock
Stan Grishin [Sun, 20 Nov 2022 05:26:03 +0000 (22:26 -0700)]
Merge pull request #19901 from stangri/openwrt-22.03-simple-adblock

[22.03] simple-adblock: update to 1.9.3-1

2 years agonano: update to 7.0
Hannu Nyman [Thu, 17 Nov 2022 16:17:29 +0000 (18:17 +0200)]
nano: update to 7.0

Update nano to version 7.0.

Add a patch to fix the plus variant.
Upstream discussion and patch in
https://savannah.gnu.org/bugs/?63372

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 4a89a577a71adffc6cbad99971b4c064193b3566)

2 years agobcp38: migrate to nftables
Stefan Brusch [Tue, 15 Nov 2022 15:26:38 +0000 (16:26 +0100)]
bcp38: migrate to nftables

Signed-off-by: Stefan Brusch <ne20002@gmx.ch>
(cherry picked from commit 471ffdd98c3a543e4935c3e76ac19301ac16c52d)

2 years agoyq: Update to 4.30.4
Tianling Shen [Wed, 16 Nov 2022 11:57:19 +0000 (19:57 +0800)]
yq: Update to 4.30.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8762261112c8235f7f85a6f57dbf342cf17093b9)

2 years agofrp: update to 0.45.0
van waholtz [Wed, 16 Nov 2022 11:24:13 +0000 (19:24 +0800)]
frp: update to 0.45.0

Signed-off-by: van waholtz <brvphoenix@gmail.com>
2 years agoariang: update to 1.3.2
van waholtz [Wed, 16 Nov 2022 11:10:02 +0000 (19:10 +0800)]
ariang: update to 1.3.2

Signed-off-by: van waholtz <brvphoenix@gmail.com>
2 years agoRevert "openthread-br: new package"
Stijn Tintel [Tue, 15 Nov 2022 14:39:07 +0000 (16:39 +0200)]
Revert "openthread-br: new package"

The PR to add openthread-br in master isn't merged yet, as it has draft
status. This was merged prematurely. Revert.

This reverts commit 27dd30aadb0b9ae1b7e710e0ea479f6fbe142918.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>