feed/packages.git
11 months agonginx: don't install all module for FULL variant 21502/head
Christian Marangi [Wed, 5 Jul 2023 00:32:56 +0000 (02:32 +0200)]
nginx: don't install all module for FULL variant

We currently have a more or less circular dependency with nginx ssl and
full variant.

FULL variant depends on every nginx module. Every nginx module depends
on nginx-ssl.

Since nginx-full depends on an nginx module, nginx-ssl is installed as
module depends on it and then the installation fails as nginx-full
conflicts with nginx-ssl.

nginx-full in it's meaning is nginx built with every config selected and
it should not have module as dependency. In fact an user should always
install them separetly as while other things, local modification to the
nginx config file are required to include the just installed module.

To fix this circular dependency problem, drop the dependency of every
nginx module for FULL variant.

Fixes: #21300
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
11 months agonginx: add quic modue
Tiago Gaspar [Sun, 2 Jul 2023 17:14:10 +0000 (18:14 +0100)]
nginx: add quic modue

This commit  adds support for http/3. This is an experimental version
and isn't fully supported because nginx is being built with the regular
OpenSSL and the regular one doesn't support quic.

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
11 months agonginx: update to 1.25.1
Tiago Gaspar [Sun, 2 Jul 2023 17:11:28 +0000 (18:11 +0100)]
nginx: update to 1.25.1

Update nginx to 1.25.1.

    *) Feature: the "http2" directive, which enables HTTP/2 on a per-server
       basis; the "http2" parameter of the "listen" directive is now
       deprecated.

    *) Change: HTTP/2 server push support has been removed.

    *) Change: the deprecated "ssl" directive is not supported anymore.

    *) Bugfix: in HTTP/3 when using OpenSSL.

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
[ improve commit title and add nginx changelog ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
11 months agonginx: add support for MaxMind GeoIP2 databases
Javier Marcet [Fri, 30 Jun 2023 14:21:19 +0000 (16:21 +0200)]
nginx: add support for MaxMind GeoIP2 databases

Signed-off-by: Javier Marcet <javier@marcet.info>
11 months agoliburing: Update to v2.4
Christian Lachner [Sat, 24 Jun 2023 07:17:06 +0000 (09:17 +0200)]
liburing: Update to v2.4

- Updated download URL and hash
- Switched to downloading bz2 archives to save bandwidth

Signed-off-by: Christian Lachner <gladiac@gmail.com>
11 months agopython-docker: Update to 6.1.3
Javier Marcet [Sat, 1 Jul 2023 18:55:30 +0000 (20:55 +0200)]
python-docker: Update to 6.1.3

Signed-off-by: Javier Marcet <javier@marcet.info>
11 months agopython-docker: Update to 6.1.2
Javier Marcet [Sun, 21 May 2023 13:08:03 +0000 (15:08 +0200)]
python-docker: Update to 6.1.2

Signed-off-by: Javier Marcet <javier@marcet.info>
11 months agohaproxy: update to v2.8.1
Christian Lachner [Tue, 4 Jul 2023 06:09:39 +0000 (08:09 +0200)]
haproxy: update to v2.8.1

- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>
11 months agorclone: Update to 1.63.0 21497/head
Tianling Shen [Tue, 4 Jul 2023 08:04:54 +0000 (16:04 +0800)]
rclone: Update to 1.63.0

While at it fixed a typo error of license files variable.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
11 months agopython-typing-extensions: Update to 4.7.1
Jeffery To [Mon, 3 Jul 2023 06:41:18 +0000 (14:41 +0800)]
python-typing-extensions: Update to 4.7.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
11 months agopython-dotenv: update to v1.0.0
Javier Marcet [Sat, 1 Jul 2023 18:51:17 +0000 (20:51 +0200)]
python-dotenv: update to v1.0.0

- 1.0.0:

  - What's Changed:
    - Handle situations where the cwd does not exist.
    - Add python-decouple as a related project
    - Drop support for python 3.7, add python 3.12-dev

- 0.21.1:

  - Added:
    - Use Python 3.11 non-beta in CI
    - Modernize variables code
    - Modernize main.py and parser.py code
    - Improve conciseness of cli.py and init.py
    - Improve error message for get and list commands when env file
    can't be opened
    - Updated Licence to align with BSD OSI template

Signed-off-by: Javier Marcet <javier@marcet.info>
11 months agodnsproxy: Update to 0.51.0
Tianling Shen [Mon, 3 Jul 2023 14:05:28 +0000 (22:05 +0800)]
dnsproxy: Update to 0.51.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
11 months agoMerge pull request #21483 from pprindeville/acpica-unix-update-20230628
Philip Prindeville [Mon, 3 Jul 2023 03:27:08 +0000 (21:27 -0600)]
Merge pull request #21483 from pprindeville/acpica-unix-update-20230628

acpica-unix: Update to 20230628

11 months agoacpica-unix: Update to 20230628 21483/head
Philip Prindeville [Mon, 3 Jul 2023 02:54:15 +0000 (20:54 -0600)]
acpica-unix: Update to 20230628

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
11 months agodocker-compose: Update to version 2.19.1
Javier Marcet [Fri, 30 Jun 2023 03:18:51 +0000 (05:18 +0200)]
docker-compose: Update to version 2.19.1

Signed-off-by: Javier Marcet <javier@marcet.info>
11 months agopython-websocket-client: update to 1.6.1
Javier Marcet [Sat, 1 Jul 2023 18:43:28 +0000 (20:43 +0200)]
python-websocket-client: update to 1.6.1

- 1.6.1
  - Fix Dispatcher keyboard interrupt. Should solve reconnect loop
  with rel

- 1.6.0
  - Fix teardown issue when ping thread is not properly ended
  - Fix double ping wait time on first ping
  - Minor typehints improvements

- 1.5.3
  - Add logic to avoid error in the case where content-length header
  does not exist, bug introduced in 1.5.2
  - Fix wsdump.py script typing, bug introduced in 1.5.2

- 1.5.2
  - Add typehints
  - Fix pytype errors
  - Fix args passed to logging function
  - Standardize PEP 3101 formatting
  - Add more verbose exception for unsuccessful handshake

Signed-off-by: Javier Marcet <javier@marcet.info>
11 months agopython-stem: update to v1.8.2
Javier Marcet [Sat, 1 Jul 2023 18:20:05 +0000 (20:20 +0200)]
python-stem: update to v1.8.2

Signed-off-by: Javier Marcet <javier@marcet.info>
11 months agolibwebsockets: Fix -Werror=enum-int-mismatch in lws_tls_server_abort_connection()
Oskari Rauta [Sun, 28 May 2023 06:33:08 +0000 (09:33 +0300)]
libwebsockets: Fix -Werror=enum-int-mismatch in lws_tls_server_abort_connection()

with gcc 13 libwebsockets fails with -Werror=enum-int-mismatch with both
SSL variants. These 2 patches work out that issue. Problem is mentioned
as a issue in openwrt/packages#20949 and instead of overriding issue
with appropriate CFLAGS, this approach was suggested for me as it's
been made as a PR (for openssl) at warmcat/libwebsockets#2824

Second patch for mbedtls, was made by me using same approach
as was used of openssl.

Eventually these propably will be merged into libwebsockets mainstream.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
11 months agogrilo-plugins: update to 0.3.16
W. Michael Petullo [Fri, 30 Jun 2023 18:22:07 +0000 (13:22 -0500)]
grilo-plugins: update to 0.3.16

This drops the opensubtitles plugin, because it is not yet compatible
with libsoup3.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
11 months agogrilo: update to 0.3.16
W. Michael Petullo [Fri, 30 Jun 2023 18:21:51 +0000 (13:21 -0500)]
grilo: update to 0.3.16

Signed-off-by: W. Michael Petullo <mike@flyn.org>
11 months agopython-hatchling: Update to 1.18.0
Jeffery To [Mon, 26 Jun 2023 05:00:05 +0000 (13:00 +0800)]
python-hatchling: Update to 1.18.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
11 months agopython-pluggy: Update to 1.2.0
Jeffery To [Mon, 26 Jun 2023 05:38:11 +0000 (13:38 +0800)]
python-pluggy: Update to 1.2.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
11 months agosing-box: update to 1.3.0
Van Waholtz [Sat, 1 Jul 2023 09:24:49 +0000 (17:24 +0800)]
sing-box: update to 1.3.0

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
11 months agonetbird: update to 0.21.7
Salem Huang [Sun, 25 Jun 2023 16:43:29 +0000 (00:43 +0800)]
netbird: update to 0.21.7

1. Release notes:
   https://github.com/netbirdio/netbird/releases/tag/v0.21.2
   https://github.com/netbirdio/netbird/releases/tag/v0.21.3
   https://github.com/netbirdio/netbird/releases/tag/v0.21.4
   https://github.com/netbirdio/netbird/releases/tag/v0.21.5
   https://github.com/netbirdio/netbird/releases/tag/v0.21.6
   https://github.com/netbirdio/netbird/releases/tag/v0.21.7
2. Update GO_PKG_LDFLAGS, because of https://github.com/netbirdio/netbird/commit/292ee260ad564d1e65199b1cb3430b0cd7ba9646
3. Define the configuration file.

Signed-off-by: Salem Huang <solohoh@hotmail.com>
11 months agopython-markupsafe: Update to 2.1.3, add host build
Jeffery To [Wed, 28 Jun 2023 17:54:50 +0000 (01:54 +0800)]
python-markupsafe: Update to 2.1.3, add host build

The host build will be used for mako (to be added later).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
11 months agopython-service-identity: Update to 23.1.0
Jeffery To [Mon, 26 Jun 2023 05:59:56 +0000 (13:59 +0800)]
python-service-identity: Update to 23.1.0

This adds new build dependencies as the package switched to
pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
11 months agopython-libmodbus: Update to 0.6.2
Jeffery To [Wed, 28 Jun 2023 17:22:03 +0000 (01:22 +0800)]
python-libmodbus: Update to 0.6.2

This also adds a source package (python3-libmodbus-src).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
11 months agoinadyn: update to 2.11.0
Robert Högberg [Wed, 28 Jun 2023 17:23:39 +0000 (19:23 +0200)]
inadyn: update to 2.11.0

Signed-off-by: Robert Högberg <robert.hogberg@gmail.com>
11 months agostrongswan: Update to 5.9.11
Philip Prindeville [Tue, 27 Jun 2023 21:56:03 +0000 (15:56 -0600)]
strongswan: Update to 5.9.11

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
11 months agovala: add self as maintainer of unmaintained package
W. Michael Petullo [Wed, 28 Jun 2023 13:09:55 +0000 (08:09 -0500)]
vala: add self as maintainer of unmaintained package

Signed-off-by: W. Michael Petullo <mike@flyn.org>
11 months agovala: patch to circumvent apparent pkgconf bug
W. Michael Petullo [Sun, 25 Jun 2023 20:36:28 +0000 (15:36 -0500)]
vala: patch to circumvent apparent pkgconf bug

There is an apparent bug in pkgconf 1.9 that broke building the OpenWrt
Vala package. This adds a patch to circumvent the bug. For the related
discussion, see:

https://github.com/openwrt/packages/issues/21359

The pkgconf bug appears similar to the one discussed here:

https://github.com/pkgconf/pkgconf/issues/268

Signed-off-by: W. Michael Petullo <mike@flyn.org>
11 months agoadblock: update to 4.1.5-8
Dirk Brenken [Fri, 30 Jun 2023 05:28:16 +0000 (07:28 +0200)]
adblock: update to 4.1.5-8

* adapt adguard_tracking source changes

Signed-off-by: Dirk Brenken <dev@brenken.org>
11 months agominidlna: update to 1.3.3
Robert Högberg [Sun, 11 Jun 2023 21:55:23 +0000 (23:55 +0200)]
minidlna: update to 1.3.3

Fixes CVE-2023-33476:
  ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable
  to Buffer Overflow. The vulnerability is caused by incorrect
  validation logic when handling HTTP requests using chunked transport
  encoding. This results in other code later using attacker-controlled
  chunk values that exceed the length of the allocated buffer,
  resulting in out-of-bounds read/write.

Signed-off-by: Robert Högberg <robert.hogberg@gmail.com>
11 months agopython-gnupg: Update to 0.5.0
Jeffery To [Wed, 28 Jun 2023 16:22:11 +0000 (00:22 +0800)]
python-gnupg: Update to 0.5.0

This also removes the dependency on gnupg as there are two packages for
gpg, gnupg and gnupg2; this library should work with either one.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
11 months agopython-werkzeug: Update to 2.3.6
Jeffery To [Wed, 28 Jun 2023 18:41:39 +0000 (02:41 +0800)]
python-werkzeug: Update to 2.3.6

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
11 months agocoova-chilli: fix kernel >= 5.17 compile
John Thomson [Fri, 21 Oct 2022 03:49:42 +0000 (13:49 +1000)]
coova-chilli: fix kernel >= 5.17 compile

Signed-off-by: John Thomson <git@johnthomson.fastmail.com.au>
11 months agosnort3: update to 3.1.64.0
John Audia [Tue, 27 Jun 2023 12:22:04 +0000 (08:22 -0400)]
snort3: update to 3.1.64.0

Upstream bump

Signed-off-by: John Audia <therealgraysky@proton.me>
11 months agolibdaq3: update to 3.0.11
John Audia [Wed, 28 Jun 2023 16:30:13 +0000 (12:30 -0400)]
libdaq3: update to 3.0.11

Upstream bump

Signed-off-by: John Audia <therealgraysky@proton.me>
11 months agonetsniff-ng: backport patch fixing wrong args handling with musl
Christian Marangi [Thu, 29 Jun 2023 16:24:53 +0000 (18:24 +0200)]
netsniff-ng: backport patch fixing wrong args handling with musl

Backport a patch from upstream fixing wrong args handling with musl.
Before this patch non args must be passed at the end of the command due
to a musl limitation.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
11 months agoMerge pull request #21410 from pprindeville/isc-dhcp-dont-require-pools
Philip Prindeville [Tue, 27 Jun 2023 21:48:38 +0000 (15:48 -0600)]
Merge pull request #21410 from pprindeville/isc-dhcp-dont-require-pools

isc-dhcp: don't require subnet pools

11 months agopython-setuptools: Update to 68.0.0
Jeffery To [Mon, 26 Jun 2023 06:06:46 +0000 (14:06 +0800)]
python-setuptools: Update to 68.0.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
11 months agopython-packages: Take over maintainership from Daniel Golle
Jeffery To [Mon, 26 Jun 2023 06:28:51 +0000 (14:28 +0800)]
python-packages: Take over maintainership from Daniel Golle

This was requested in
https://github.com/openwrt/packages/pull/21227#issuecomment-1567676980.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
11 months agoknot: update to version 3.2.8
Jan Hák [Mon, 26 Jun 2023 11:07:06 +0000 (13:07 +0200)]
knot: update to version 3.2.8

Signed-off-by: Jan Hák <jan.hak@nic.cz>
11 months agobind: bump to 9.18.16
Noah Meyerhans [Mon, 26 Jun 2023 03:02:35 +0000 (20:02 -0700)]
bind: bump to 9.18.16

Fixes CVEs:

- CVE-2023-2828: The overmem cleaning process has been improved, to
  prevent the cache from significantly exceeding the configured
  max-cache-size limit.
- CVE-2023-2911: A query that prioritizes stale data over lookup
  triggers a fetch to refresh the stale data in cache. If the fetch is
  aborted for exceeding the recursion quota, it was possible for named
  to enter an infinite callback loop and crash due to stack overflow.

The complete list of changes is available in the upstream release
notes at
https://ftp.isc.org/isc/bind9/cur/9.18/doc/arm/html/notes.html#notes-for-bind-9-18-16

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
11 months agoMerge pull request #21405 from jefferyto/selinux-update
Tianling Shen [Sun, 25 Jun 2023 09:04:14 +0000 (17:04 +0800)]
Merge pull request #21405 from jefferyto/selinux-update

selinux: Update selinux packages to 3.5, setools to 4.4.2, reorganize packages

11 months agolibpfring: update to 8.4.0
John Thomson [Fri, 21 Oct 2022 04:01:24 +0000 (14:01 +1000)]
libpfring: update to 8.4.0

Release notes:
https://github.com/ntop/PF_RING/releases/tag/8.4.0

Signed-off-by: John Thomson <git@johnthomson.fastmail.com.au>
11 months agoxr_usb_serial_common: bump to 2023-03-31
John Thomson [Sat, 22 Oct 2022 09:04:38 +0000 (19:04 +1000)]
xr_usb_serial_common: bump to 2023-03-31

Fix 6.1 kernel compile

git log --oneline ecc6eb.. -- xr_usb_serial_common-1a/
90ad530166f0 Support Linux 6.1
af618e2eded6 #45 Fix some warnings

Signed-off-by: John Thomson <git@johnthomson.fastmail.com.au>
11 months agoMerge pull request #21366 from zhanhb/haproxy
Jeffery To [Sat, 24 Jun 2023 12:20:47 +0000 (20:20 +0800)]
Merge pull request #21366 from zhanhb/haproxy

haproxy: update to v2.8.0

11 months agobanip: update 0.8.8-2
Dirk Brenken [Sat, 24 Jun 2023 11:09:40 +0000 (13:09 +0200)]
banip: update 0.8.8-2

* process local lists in strict sequential order to prevent possible race conditions
* support ranges in the IP search, too
* fix some minor search issues

Signed-off-by: Dirk Brenken <dev@brenken.org>
11 months agohaproxy: update to v2.8.0 21366/head
Huangbin Zhan [Wed, 14 Jun 2023 04:19:28 +0000 (12:19 +0800)]
haproxy: update to v2.8.0

- New major LTS release (https://www.mail-archive.com/haproxy@formilux.org/msg43600.html)

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
11 months agovsftpd: fix compilation with musl 1.2.4
Tianling Shen [Thu, 22 Jun 2023 06:27:18 +0000 (14:27 +0800)]
vsftpd: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
11 months agodnsdist: Move the configuration to Config.in
Remi Gacogne [Mon, 19 Jun 2023 07:48:08 +0000 (09:48 +0200)]
dnsdist: Move the configuration to Config.in

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
11 months agodnsdist: Split in two packages `dnsdist` and `dnsdist-full`
Remi Gacogne [Tue, 13 Jun 2023 15:48:27 +0000 (17:48 +0200)]
dnsdist: Split in two packages `dnsdist` and `dnsdist-full`

`dnsdist-full` has all optional features enabled, but is a big package
in term of both flash and memory footprint.
`dnsdist` only keeps the features that make the most sense
on embeded devices, but can also be customised to match the
user's needs, up to the point where it matches `dnsdist-full`.

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
11 months agogitlab-runner: Update to 16.0.2
Tianling Shen [Mon, 19 Jun 2023 09:25:04 +0000 (17:25 +0800)]
gitlab-runner: Update to 16.0.2

* Added test.sh script
* Fixed build with riscv64
* Passed package version via go ldflags
* Refreshed patches
* Removed useless test binaries from package

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
11 months agoh2o: Reduce the size of the default HTTP2 buffer
Remi Gacogne [Wed, 14 Jun 2023 13:22:03 +0000 (15:22 +0200)]
h2o: Reduce the size of the default HTTP2 buffer

The initial value takes 80kB of memory for each HTTP/2 connection
which is a lot on small devices. Using 8kB instead saves a fair
amount of memory without sacrificing performance.

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
11 months agoh2o: Do not initialize the mime types map at startup
Remi Gacogne [Wed, 14 Jun 2023 13:19:58 +0000 (15:19 +0200)]
h2o: Do not initialize the mime types map at startup

The map takes a fair amount of memory and the only consumer of this
library, dnsdist, does not need it.

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
11 months agoh2o: Build libh2o-evloop without yaml support
Remi Gacogne [Wed, 14 Jun 2023 13:18:29 +0000 (15:18 +0200)]
h2o: Build libh2o-evloop without yaml support

The only package using this library, dnsdist, does not require it
so let's save space and PSS memory.

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
11 months agolinuxptp: Update to 4.0
Wojciech Dubowik [Thu, 15 Jun 2023 14:08:16 +0000 (16:08 +0200)]
linuxptp: Update to 4.0

Major changes since version 3.1.1:
* Officially supports the 2019 version of IEEE 1588
* Improved unicast messaging
* Enhanced G.8275.2 profile
* More flexible Pulse Per Second (PPS) handling
* Virtual clock support
* Power profile support
* VLAN over bond support.
* Parallel Redundancy Protocol (PRP) trailer handling.
* Non-privileged read-only monitoring port.
* New statistics reporting.

[V2]
 * reset package release
 * adapt license name to the new format

Signed-off-by: Wojciech Dubowik <Wojciech.Dubowik@westermo.com>
11 months agotvheadend: add dependency on gettext (host)
Marius Dinu [Fri, 16 Jun 2023 12:59:44 +0000 (15:59 +0300)]
tvheadend: add dependency on gettext (host)

Gettext is a prerequisite to build OpenWrt according to:
https://openwrt.org/docs/guide-developer/toolchain/install-buildsystem
but github automated tests fail without this explicit dependency:

2023-06-19T08:02:45.1940511Z   checking for py module gzip ...                   ok
2023-06-19T08:02:45.1968662Z   checking for /builder/staging_dir/host/bin/pkg-config ...ok
2023-06-19T08:02:45.1998491Z ERROR: no gettext binaries found
2023-06-19T08:02:45.1999746Z   checking for xgettext ...                         fail
2023-06-19T08:02:45.2008403Z make[2]: *** [Makefile:263: /builder/build_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/tvheadend-2023-06-05/.configured_a17fb5ef857664f03cd0ce37cc5ea591] Error 1

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
11 months agotvheadend: update to 2023-06-05
Marius Dinu [Mon, 12 Jun 2023 07:47:03 +0000 (10:47 +0300)]
tvheadend: update to 2023-06-05

Update to git master 2023-06-05 and removed unneeded compatibility patch.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
11 months agoMerge pull request #21419 from QuintinHill/ble2mqtt-install-fix
Tianling Shen [Thu, 22 Jun 2023 05:22:08 +0000 (13:22 +0800)]
Merge pull request #21419 from QuintinHill/ble2mqtt-install-fix

python-ble2mqtt: fix installation of python program

11 months agoc-ares: bump to 1.19.1
Hirokazu MORIKAWA [Thu, 15 Jun 2023 06:49:25 +0000 (15:49 +0900)]
c-ares: bump to 1.19.1

This is a security and bugfix release.

Security
o CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
o CVE-2023-31147. Moderate. Insufficient randomness in generation of DNS
query IDs
o CVE-2023-31130. Moderate. Buffer Underwrite in ares_inet_net_pton()
o CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE during cross
compilation

Fixing libcares.pc
 The pkg-config file libcares.pc in version 1.19.1 has been changed to be unsuitable for OpenWrt
 and causes build errors with Openwrt packages that use libcares.
 For this reason, libcares.pc was replaced.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
11 months agoMerge pull request #21147 from cottsay/openelp
Jeffery To [Wed, 21 Jun 2023 17:02:07 +0000 (01:02 +0800)]
Merge pull request #21147 from cottsay/openelp

openelp: Add new package

11 months agocloudflared: Update to 2023.6.1
Tianling Shen [Wed, 21 Jun 2023 12:47:19 +0000 (20:47 +0800)]
cloudflared: Update to 2023.6.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
11 months agoshared-mime-info: update to 2.2
W. Michael Petullo [Tue, 20 Jun 2023 13:53:34 +0000 (08:53 -0500)]
shared-mime-info: update to 2.2

Signed-off-by: W. Michael Petullo <mike@flyn.org>
11 months agoMerge pull request #21421 from nxhack/node_18161
Tianling Shen [Wed, 21 Jun 2023 11:12:20 +0000 (19:12 +0800)]
Merge pull request #21421 from nxhack/node_18161

node: June 20 2023 Security Releases

11 months agobanip: release 0.8.8-1
Dirk Brenken [Wed, 21 Jun 2023 08:53:19 +0000 (10:53 +0200)]
banip: release 0.8.8-1

* Support MAC-/IPv4/IPv6 ranges in CIDR notation
* Support  concatenation of local MAC addresses with IPv4/IPv6 addresses, e.g. to enforce dhcp assignments (see readme)
* small fixes & cosmetics
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
11 months agogl-mifi-mcu: remove package as it is device specific and I can't test it anymore
Nuno Gonçalves [Tue, 20 Jun 2023 16:49:40 +0000 (17:49 +0100)]
gl-mifi-mcu: remove package as it is device specific and I can't test it anymore

Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>
11 months agoMerge pull request #21378 from TDT-AG/pr/20230615-modemmanager
Florian Eckert [Wed, 21 Jun 2023 06:51:06 +0000 (08:51 +0200)]
Merge pull request #21378 from TDT-AG/pr/20230615-modemmanager

modemmanager: do not cache virtual device events

11 months agonode: June 20 2023 Security Releases 21421/head
Hirokazu MORIKAWA [Wed, 21 Jun 2023 02:27:48 +0000 (11:27 +0900)]
node: June 20 2023 Security Releases

Update to v18.16.1

The following CVEs are fixed in this release:
* CVE-2023-30581: mainModule.__proto__ Bypass Experimental Policy Mechanism (High)
* CVE-2023-30585: Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium)
* CVE-2023-30588: Process interuption due to invalid Public Key information in x509 certificates (Medium)
* CVE-2023-30589: HTTP Request Smuggling via Empty headers separated by CR (Medium)
* CVE-2023-30590: DiffieHellman does not generate keys after setting a private key (Medium)
* OpenSSL Security Releases (Depends on shared library provided by OpenWrt)
    * OpenSSL security advisory 28th March.
    * OpenSSL security advisory 20th April.
    * OpenSSL security advisory 30th May
* c-ares vulnerabilities: (Depends on shared library provided by OpenWrt)
    * GHSA-9g78-jv2r-p7vc
    * GHSA-8r8p-23f3-64c2
    * GHSA-54xr-f67r-4pc4
    * GHSA-x6mf-cxr9-8q6v

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
11 months agopython-ble2mqtt: fix installation of python program 21419/head
Quintin Hill [Tue, 20 Jun 2023 21:39:58 +0000 (22:39 +0100)]
python-ble2mqtt: fix installation of python program

This was broken when the init script was added in 408502ee0.

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
11 months agogl-mifi-mcu: make compatible with newer kernel (fix #21198)
Nuno Gonçalves [Sun, 28 May 2023 21:06:35 +0000 (22:06 +0100)]
gl-mifi-mcu: make compatible with newer kernel (fix #21198)

Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>
11 months agoMerge pull request #21411 from stangri/master-https-dns-proxy
Stan Grishin [Tue, 20 Jun 2023 15:58:05 +0000 (09:58 -0600)]
Merge pull request #21411 from stangri/master-https-dns-proxy

https-dns-proxy: update to 2023-05-25-2

11 months agoopenelp: Add new package 21147/head
Scott K Logan [Tue, 23 May 2023 20:14:13 +0000 (13:14 -0700)]
openelp: Add new package

OpenELP is an open source EchoLink proxy for Linux and Windows. It aims
to be efficient and maintain a small footprint, while still implementing
all of the features present in the official EchoLink proxy.

Signed-off-by: Scott K Logan <logans@cottsay.net>
12 months agov2ray-geodata: Update to latest version 21321/head
Tianling Shen [Tue, 20 Jun 2023 05:11:16 +0000 (13:11 +0800)]
v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
12 months agoxray-core: update to 1.8.3
Tianling Shen [Tue, 20 Jun 2023 05:11:04 +0000 (13:11 +0800)]
xray-core: update to 1.8.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
12 months agosemodule-utils: Update to 3.5, reorganize package 21405/head
Jeffery To [Fri, 9 Jun 2023 12:27:58 +0000 (20:27 +0800)]
semodule-utils: Update to 3.5, reorganize package

* Add separate packages for each tool (semodule-*)

* Update the semodule-utils package as a meta-package that installs all
  tools, keeping it functionally the same as the current semodule-utils
  package

* Remove host build (not used by any other package)

* Update package titles, descriptions, and license files

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
12 months agoselinux-python: Update to 3.5, reorganize package
Jeffery To [Fri, 9 Jun 2023 04:41:13 +0000 (12:41 +0800)]
selinux-python: Update to 3.5, reorganize package

* Added packages:

  * python3-seobject

    Contains the seobject.py library file which was previously included
    in selinux-semanage

  * selinux-sepolicy

    Contains the sepolicy and sepolgen tools which were previously
    included in python3-sepolicy

  * selinux-sepolgen-ifgen

    Contains the sepolgen-ifgen tool which was previously included in
    selinux-audit2allow

  * selinux-python

    A meta-package to install all tools

* Change the python3-sepolgen data_dir from /usr/share/sepolgen to
  /etc/sepolgen (updated 0001-sepolgen-adjust-data_dir.patch), and add
  the directory to conffiles

  By default, the sepolgen-ifgen tool writes to a file named
  "interface_info" in the data directory, to be read by the audit2allow
  tool. The header comment in the perm_map file also suggests that the
  file is customizable.

  The best place for these files would be in /var/lib, but /etc is more
  appropriate than /usr.

* Remove gui files from python3-sepolicy (0003-sepolicy-no-gui.patch)

* Fix ModuleNotFoundError raised by sepolicy
  (0004-sepolicy-fix-get_os_version-except.patch)

  Patch has been submitted upstream:
  https://lore.kernel.org/selinux/20230619063217.3165462-1-jeffery.to@gmail.com/

* Update package titles, descriptions, and dependencies

* Use Py3Package to build Python bytecode and source packages

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
12 months agohttps-dns-proxy: update to 2023-05-25-2 21411/head
Stan Grishin [Tue, 20 Jun 2023 02:02:45 +0000 (02:02 +0000)]
https-dns-proxy: update to 2023-05-25-2

bugfix: proper mdns object creation
bugfix: prevent fw errors by allowing custom interfaces in config

Signed-off-by: Stan Grishin <stangri@melmac.ca>
12 months agoisc-dhcp: don't require subnet pools 21410/head
Philip Prindeville [Tue, 20 Jun 2023 01:29:17 +0000 (19:29 -0600)]
isc-dhcp: don't require subnet pools

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
12 months agoMerge pull request #21402 from pprindeville/dhcpd-send-forced-options
Philip Prindeville [Tue, 20 Jun 2023 01:28:14 +0000 (19:28 -0600)]
Merge pull request #21402 from pprindeville/dhcpd-send-forced-options

isc-dhcp: force sending unrequested parameters

12 months agoisc-dhcp: force sending unrequested parameters 21402/head
Philip Prindeville [Sun, 18 Jun 2023 02:09:48 +0000 (20:09 -0600)]
isc-dhcp: force sending unrequested parameters

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
12 months agoalpine: disable parallel build
Eneas U de Queiroz [Mon, 12 Jun 2023 11:31:25 +0000 (08:31 -0300)]
alpine: disable parallel build

Parallel build does not work because it may reach a point where OSTYPE
might be needed before it is actually built.  They appear to run
parallel to each other:

echo slx > OSTYPE
[...]
cat: OSTYPE: No such file or directory
sh: line 1: test: too many arguments
cat: OSTYPE: No such file or directory
Already built for -- you must do "make clean" first
make[6]: *** [Makefile:706: rebuild] Error 1
make[6]: *** Waiting for unfinished jobs....

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
12 months agoselinux-python: Add default sections for Python and util packages
Jeffery To [Fri, 9 Jun 2023 05:28:11 +0000 (13:28 +0800)]
selinux-python: Add default sections for Python and util packages

This also moves the python3-selinux dependency from the default section
into each util package.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
12 months agoselinux-python: Order package sections alphabetically
Jeffery To [Fri, 9 Jun 2023 05:16:13 +0000 (13:16 +0800)]
selinux-python: Order package sections alphabetically

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
12 months agopython3-libsemanage: Update to 3.5, rename source/target package
Jeffery To [Thu, 8 Jun 2023 08:45:07 +0000 (16:45 +0800)]
python3-libsemanage: Update to 3.5, rename source/target package

* Rename:

  * Source package from python3-libsemanage to python-semanage
  * Target package from python3-libsemanage to python3-semanage

* Update dependents with new target package name

* Update package title, license files, and dependencies

* Remove Build/InstallDev (files not used by any other package)

* Use Py3Package to build Python bytecode and source packages

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
12 months agopython3-libselinux: Update to 3.5, rename source/target package
Jeffery To [Thu, 8 Jun 2023 07:34:09 +0000 (15:34 +0800)]
python3-libselinux: Update to 3.5, rename source/target package

* Rename:

  * Source package from python3-libselinux to python-selinux
  * Target package from python3-libselinux to python3-selinux

* Update dependents with new target package name

* Remove patches:

  * 010-setup-py-custom-cc.patch: LDSHARED is already set as part of
    $(PYTHON3_VARS)

  * 020-Make-use-of-variables-when-defining-libdir-and-inclu.patch: This
    package doesn't install the libselinux.pc file

* Update package title and dependencies

* Remove Build/InstallDev (files not used by any other package)

* Use Py3Package to build Python bytecode and source packages

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
12 months agosetools: Update to 4.4.2, reorganize package
Jeffery To [Fri, 9 Jun 2023 09:54:20 +0000 (17:54 +0800)]
setools: Update to 4.4.2, reorganize package

* Add separate packages for each tool (setools-*) and a package for the
  Python bindings (python3-setools)

* Update the setools package as a meta-package that installs all tools,
  keeping it functionally the same as the current setools package

* Remove gui tool (apol) and Python binding (setoolsgui)

* Simplify 030-remove-host-paths.patch (libraries installed by
  Build/InstallDev are placed in $(STAGING_DIR)/usr/lib only)

* Update package titles, descriptions, license, and dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
12 months agocloudflared: Update to 2023.6.0
Tianling Shen [Mon, 19 Jun 2023 06:44:12 +0000 (14:44 +0800)]
cloudflared: Update to 2023.6.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
12 months agolibuv: bump to 1.45.0
Hirokazu MORIKAWA [Sat, 17 Jun 2023 00:52:25 +0000 (09:52 +0900)]
libuv: bump to 1.45.0

1.45.0
* linux: introduce io_uring support
* src: add new metrics APIs
* unix,win: give thread pool threads an 8 MB stack
* win,unix: change execution order of timers

1.44.2
* loop: better align order-of-events behavior between platforms
* zos: fix fs event not fired if the watched file is moved/removed/recreated
* win: Fix pipe resource leak if closed during connect (and other bugs)
* zos: don't error when killing a zombie process
* macos: avoid posix_spawnp() cwd bug
* kqueue: skip EVFILT_PROC events when invalidating events for an fd.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
12 months agoarp-whisper: Add new package
Facundo Acevedo [Fri, 9 Jun 2023 23:47:59 +0000 (20:47 -0300)]
arp-whisper: Add new package

arp-whisper listens to ARP requests on a network interface and responds
to them based on a list of IP-MAC address mappings defined in a
configuration file

Signed-off-by: Facundo Acevedo <facevedo@disroot.org>
12 months agocollectd: handle renaming ipq807x as qualcommax
Hannu Nyman [Sat, 17 Jun 2023 15:58:13 +0000 (18:58 +0300)]
collectd: handle renaming ipq807x as qualcommax

The 'ipq807x' target was renamed to be 'qualcommax' (and ipq807x was
set as subtarget). Adjust plugin target dependencies to this renaming.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
12 months agomhz: add new package
Robert Marko [Sat, 17 Jun 2023 06:47:39 +0000 (08:47 +0200)]
mhz: add new package

mhz is a tool for mathematically calculating the current CPU frequency, it
has proven to be a really good help while developing CPU frequency scaling
solutions as it allows to independently prove that scaling actually works.

Now that the author has added a license we can package it for the all to
use.

Signed-off-by: Robert Marko <robimarko@gmail.com>
12 months agofatresize: bump release
Oskari Rauta [Sun, 11 Jun 2023 11:13:30 +0000 (14:13 +0300)]
fatresize: bump release

use newer git commit, fixes problem with manually
specified sizes.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
12 months agogost_engine: disable tests, reset patches dir
Eneas U de Queiroz [Mon, 12 Jun 2023 14:28:52 +0000 (11:28 -0300)]
gost_engine: disable tests, reset patches dir

Tests are breaking compilation for mipsel targets because of the removal
of the sysmips call.  Let's just not build them.

While at it, remove patches from 1.1 version and move the current ones
to the default 'patches' directory.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
12 months agoqemu: update to 8.0.2 21395/head
Vladimir Ermakov [Mon, 12 Jun 2023 12:56:58 +0000 (14:56 +0200)]
qemu: update to 8.0.2

Update version and refresh patches.

Signed-off-by: Vladimir Ermakov <vooon341@gmail.com>
12 months agoCI: update build architectures
Tianling Shen [Sun, 11 Jun 2023 05:28:03 +0000 (13:28 +0800)]
CI: update build architectures

- armvirt target has been renamed to armsr (Arm SystemReady) [1].
- armsr-armv8 has been switched to aarch64_generic architecture [2].

1. https://github.com/openwrt/openwrt/commit/40b02a230167626def69389452f19b7109aaeac1
2. https://github.com/openwrt/openwrt/commit/e0f06ddc23b2503a1791ae7e97b02e2647e8a70d

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
12 months agoqemu: change references from armvirt to armsr
Tianling Shen [Sun, 11 Jun 2023 05:26:34 +0000 (13:26 +0800)]
qemu: change references from armvirt to armsr

armvirt target has been renamed to armsr (Arm SystemReady) [1],
so the dependency need to be changed as well.

https://github.com/openwrt/openwrt/commit/40b02a230167626def69389452f19b7109aaeac1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
12 months agocollectd: change references from armvirt to armsr
Tianling Shen [Sun, 11 Jun 2023 05:26:27 +0000 (13:26 +0800)]
collectd: change references from armvirt to armsr

armvirt target has been renamed to armsr (Arm SystemReady) [1],
so the dependency need to be changed as well.

1. https://github.com/openwrt/openwrt/commit/40b02a230167626def69389452f19b7109aaeac1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
12 months agoMerge pull request #21380 from pprindeville/strongswan-clean-up-parser
Philip Prindeville [Fri, 16 Jun 2023 04:15:07 +0000 (22:15 -0600)]
Merge pull request #21380 from pprindeville/strongswan-clean-up-parser

strongswan: clean up parser