packages/net/ddns-scripts, branch master

ddns-scripts: update hotplug script

2026-09-07T10:11:58Z

To handle ip address changing by ifupdate. When the ipv6 address is updated for an interface (some ISP only give dynamic ipv6 address). The ddns script will go into dead loop, as the new ipv6 address is not used. The simple change is restarting ddns when ip address is changed. Signed-off-by: Jimmy Qin

ddns-scripts: add gandi pat support

2026-09-01T06:26:59Z

Gandi has deprecated Api Key for authentication and replaced it with Personal Access Tokens. This adds a v2 gandi package containing a script using the new authentication scheme while keeping the old version intact for any existing API Key users. Additionally, it documents the old version as deprecated and points users to v2. Signed-off-by: Keith T. Garner

ddns-scripts: fix root command injection through ddns_dateformat

2026-07-30T09:43:04Z

The date format read from the UCI option ddns.global.ddns_dateformat was embedded into a command string that is later executed through "eval", both for the recurring log timestamps DATE_PROG="date +'$ddns_dateformat'" ... write_log 5 "PID '$$' started at $(eval $DATE_PROG)" and for the "last update" timestamp in the updater EPOCH_TIME="date -d @$EPOCH_TIME +'$ddns_dateformat'" write_log 7 "last update: $(eval $EPOCH_TIME)" The value is only wrapped in single quotes, so a single quote inside it closes that quote and starts a new shell word. A user who can write the ddns configuration - a delegated DDNS operator who was never granted shell access - can set ddns_dateformat="%F'; touch /tmp/pwned; '" and have arbitrary commands run as root, because the updater runs as root. The injection triggers on the next start of the updater, so in practice on the next reconfiguration or reboot. Stop building shell code from the option. Provide date_prog() as an ordinary shell function and pass the format as a single quoted argument in both places, which leaves no way for its content to be interpreted by the shell. The remaining use of ddns_dateformat in dynamic_dns_updater.sh, for NEXT_CHECK_TIME, already substituted it as a quoted argument without eval and was not affected. luci-app-ddns consumes the same option and is fixed separately in the LuCI repository. Reported-by: Matthew Hickey (Hacker Fantastic, https://hacker.house) Fixes: 1c20dcb71a69 ("ddns-scripts: update to 2.7.6-1") Assisted-by: Claude:claude-opus-5 Signed-off-by: Hauke Mehrtens

ddns-scripts: update to 2.8.4

2026-07-07T06:02:21Z

Bump PKG_VERSION for the ddns-scripts changes and reset PKG_RELEASE to 1 as requested. Signed-off-by: Jiang Tengfei

ddns-scripts: fix one.com prerm test syntax

2026-07-07T06:02:21Z

Add the missing spaces around the test bracket in the one.com pre-removal script and escape IPKG_INSTROOT consistently with the other subpackages. Signed-off-by: Jiang Tengfei

ddns-scripts: support version output in frontend

2026-07-07T06:02:21Z

The /usr/bin/ddns frontend did not support a version option, so generic package tests treated it as an executable that could not report the package version. Read the installed version file and support -V/--version, matching the version output style used by dynamic_dns_updater.sh. Signed-off-by: Jiang Tengfei

ddns-scripts: add curl source IP bind fallback

2026-07-07T06:02:21Z

Keep the existing cURL bind_network behavior of binding to the logical device first. This preserves the behavior introduced for PPPoE and multi-WAN setups where the selected network must also be used for the DDNS update request. Some setups can still fail when libcurl binds directly to the logical PPP device. In that case the transfer may time out even though binding to the source address of the same network succeeds. This can make DDNS updates fail repeatedly on affected systems. Retry cURL transfers once with the network source IP when the device-bound transfer fails. This leaves the normal path unchanged, keeps the update request on the same network, and matches the existing GNU Wget behavior which already binds to the network IP address. Also document the implicit bind_network default and the cURL fallback in the sample configuration. Signed-off-by: Jiang Tengfei

ddns-scripts: add EuroDNS provider

2026-07-06T08:59:48Z

Add EuroDNS provider for IPv4 and IPv6 Howto: set [USERNAME] to username set [PASSWORD] to password set [DOMAIN] to domain https://help.eurodns.com/s/article/How-do-I-configure-DYNDNS?language=en_US Signed-off-by: Angus Young

ddns-scripts: add version check override

2026-07-01T08:14:28Z

None of the ddns-scripts executables or scripts report the package version when run, which causes the generic version probe to fail. Add a test-version.sh to skip the version check for ddns-scripts and all of its subpackages. Signed-off-by: Josef Schlehofer

ddns-scripts: add fallback for default values

2026-06-09T09:19:35Z

In luci, the `interface` value has `o.default = 'wan'` configured. Due to a behavior fix in 'o.default', values matching the default are no longer saved. Currently, this is workedaround by disabling 'o.rmempty' in luci, but handling this compatibility fallback on the backend is a cleaner and superior approach. Ref: https://github.com/openwrt/luci/commit/b004197a277804ec0c8f092412b91c1d3e5936fa Signed-off-by: Andy Chiang