Commit Graph

11442 Commits

Author SHA1 Message Date
Robert Marko 272f55e87f treewide: refresh hashes after move to use ZSTD as default
With the recent move to using ZSTD as the default compression format
for packaging git repo clones we must refresh all of the hashes for
the packages feed as well.

Signed-off-by: Robert Marko <robimarko@gmail.com>
2024-04-07 12:06:34 +02:00
Jonas Jelonek 6e5a8e7973
croc: update to 9.6.15
changelogs:
9.6.13: https://github.com/schollz/croc/releases/tag/v9.6.13
9.6.14: https://github.com/schollz/croc/releases/tag/v9.6.14
9.6.15: https://github.com/schollz/croc/releases/tag/v9.6.15

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
2024-04-06 22:35:30 +02:00
Andrea Pesaresi 9cf0eae9bc ksmbd-tools: update to version 3.5.2
Major changes are:
 - Add durable handles parameter to ksmbd.conf.
 - Add payload_sz in ksmbd_share_config_response to validate ipc
   response.
 - Fix UAF and cleanups.

Signed-off-by: Andrea Pesaresi <andreapesaresi82@gmail.com>
2024-04-06 19:23:09 +03:00
Christian Marangi 88fdab5d77
nginx: add patch to fix compilation error on mips targets
Add patch to fix compilation error on mips targets. This was triggered
after enabling LTO. It was discovered that -fPIC is enabled on building
dynamic modules in CFLAGS but was missing on linking them. This patch
adds the missing -fPIC also on linking.

Fixes: 3b13b08ad9 ("nginx: Fix compilation with LTO")
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2024-04-06 17:02:58 +02:00
Christian Marangi 9d809674e3
nginx: drop redundant --with-cc-opt configure arg
Drop redundant --with-cc-opt configure arg to mute warning of
cc1: note: someone does not honour COPTS correctly, passed 2 times.

CFLAGS are already parsed and correctly applied without this option and
adding it just makes the CFLAGS appended twice.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2024-04-06 16:56:14 +02:00
Stan Grishin f410661f7b
Merge pull request #23787 from stangri/master-curl
curl: update to 8.7.1
2024-04-04 08:12:24 -07:00
Tianling Shen 06332b0229
v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-04-04 12:17:22 +08:00
Tianling Shen 30796c5948
v2ray-geodata: use APK compatible version schema
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-04-04 12:16:29 +08:00
Philip Prindeville b014ae3f86 strongswan: Backport upstream fix for RNG definition conflict
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-04-03 21:34:36 -06:00
Daniel Golle 428e9da9df libcurl-gnutls: update to verison 8.7.1
See https://curl.se/changes.html#8_7_1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2024-04-04 04:20:37 +01:00
Ivan Pavlov 98a5367982 apcupsd: fix gcc 13 compliation error
On GCC13 build fails:

toolchain-mipsel_24kc_gcc-13.2.0_musl/lib/libsupc++.a(eh_alloc.o): in function `std::__sv_check(unsigned int, unsigned int, char const*)':
toolchain-mipsel_24kc_gcc-13.2.0_musl/gcc-13.2.0-final/mipsel-openwrt-linux-musl/libstdc++-v3/include/string_view:73:
undefined reference to `std::__throw_out_of_range_fmt(char const*, ...)'
collect2: error: ld returned 1 exit status
make[5]: *** [Makefile:33: apcupsd] Error 1

Workaround found at https://lore.kernel.org/buildroot/87wmsbk386.fsf@48ers.dk/T/

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
2024-04-03 15:57:01 -07:00
Hannu Nyman 2383185c31 nlbwmon: Fix PKG_MIRROR_HASH after APK changes
Adjust PKG_MIRROR_HASH to the filename logic change due to
APK preparations.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2024-04-03 20:29:56 +03:00
Hannu Nyman e684ab6e76 cgi-io: Fix PKG_MIRROR_HASH after APK changes
Adjust PKG_MIRROR_HASH to the filename change due to
APK preparations.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2024-04-03 20:20:15 +03:00
Robert Marko 639cc3d2e4 mdio-tools: use commit hash as the source version
In light of the recent XZ events, it seems that using the tag as the
source version reference is not ideal as it can be updated by the upstream
lets switch to using the full commit hash as the source.

This also should fix the APK semantic versioning by setting PKG_VERSION as
well updating the PKG_MIRROR_HASH which got broken by recent APK changes.

Signed-off-by: Robert Marko <robimarko@gmail.com>
2024-04-03 13:34:33 +08:00
Remy D. Farley 69a5a8000b yggdrasil: move `yggdrasil-jumper` setup/shutdown logic to `netifd`
Signed-off-by: Remy D. Farley <one-d-wide@protonmail.com>
2024-04-02 21:37:35 +08:00
William Fleurant 828bbd61d6 yggdrasil-jumper: add multiple ygg support
Signed-off-by: William Fleurant <meshnet@protonmail.com>
2024-04-02 21:37:35 +08:00
William Fleurant 3637786850 yggdrasil-jumper: initial commit builds
mips32/xiaomi-4c target bins
stun-tcp ............ 1.7M
yggdrasil-jumper .... 2.3M

Signed-off-by: William Fleurant <meshnet@protonmail.com>
2024-04-02 21:37:35 +08:00
Josef Schlehofer 888c7bb77a
Merge pull request #22599 from vooon/add-net-wgsd
wgsd: add package
2024-04-01 15:08:01 +02:00
Tianling Shen 1b59556d06
xray-core: Update to 1.8.10
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-04-01 15:59:40 +08:00
Tianling Shen 96ffb28c61
alist: Update to 3.33.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-04-01 15:59:24 +08:00
Rui Salvaterra ee8b29de2c tor: update to 0.4.8.10 stable
Bugfix release, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.10/ChangeLog

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2024-03-31 18:46:18 +01:00
Stan Grishin 227c8daa15 curl: update to 8.7.1
* update to 8.7.1: https://curl.se/changes.html#8_7_1
* use the new --disable-docs flag for configure
* update 200-no_docs_tests.patch
* switch to APK-compatible revision

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-03-31 16:44:21 +00:00
Andrea Pesaresi f8a7ee7f47 kmsbd-tools: switch to use tagged release
Instead of checking Git sources, we will use now tagged releases.

This solve the strange version 0~3.5.1-r1, now will be 3.5.2-r2

Signed-off-by: Andrea Pesaresi <andreapesaresi82@gmail.com>
2024-03-31 09:52:52 +02:00
jiangslee 1f9349d12a netbird: update to 0.26.6
Signed-off-by: jiangslee <jiangsili@qq.com>
2024-03-30 15:00:07 +08:00
Zephyr Lykos 6c5dc8daff tailscale: Update to 1.62.1
https://github.com/tailscale/tailscale/releases/tag/v1.62.1

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
2024-03-30 14:59:54 +08:00
Findlay Feng 7da6cb31d1
proto-bonding: Modify ipaddr as optional
The configuration of ipaddr in proto-bonding is not necessary,
such as adding the bond interface to the bridge or
performing pppoe dialing on the bond interface, etc.

Signed-off-by: Findlay Feng <i@fengch.me>
2024-03-29 21:16:05 +08:00
Philip Prindeville 509d1ecca7 strongswan: drop unneeded sleep patch
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-03-27 20:17:40 -06:00
Philip Prindeville b20950a515 strongswan: backport upstream MUSL fix for farp_spoofer.c
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-03-27 20:17:40 -06:00
Philip Prindeville 04c1d688de strongswan: backport upstream MUSL fix for pf_handler.c
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-03-27 20:17:40 -06:00
Philip Prindeville 544abeb36a strongswan: simplify MUSL patch
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-03-27 20:17:40 -06:00
Philip Prindeville a90d387e86 strongswan: Update to 5.9.14
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-03-27 20:17:40 -06:00
Thibaut VARÈNE bc33522715 uspot: update to Git HEAD (2024-03-25)
56eebdad085e uspot: wrap spotfilter device under tip_mode
1a96d57e5fe0 uspot: client_enable() wrap spotfilter data in tip_mode
fe12f9a7abde uspot: clear ratelimit state on startup/shutdown
976badc4d0b6 update README
53b8cb88a94a Makefile: require minimum ucode version
ff6163190d5a uspot/portal: report client_enable() failure
8601d9199233 include sample radcli dictionaries
c670f6c4b48f update README
094f0df88150 uspot: work around ucode#191 missing in 23.05

Update the package Makefile to reflect the changes from the following
above-listed commit:

53b8cb88a94a Makefile: require minimum ucode version

Fixes: https://github.com/f00b4r0/uspot/issues/4
Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
2024-03-27 17:30:57 +08:00
Jan Klos ae870abc89 nginx: update to 1.25.4
Signed-off-by: Jan Klos <jan@klos.xyz>
2024-03-26 16:46:42 +01:00
Peca Nesovanovic 152d80ce13 p910nd: fix running multiple instances
Compile tested: (ramips, rb760igs, 23.05 snapshot)
Run tested: (ramips, rb760igs, 23.05 snapshot, tests done)

Description:
In case we have multiple device defined in /etc/config/p910nd then init script will try to start multiple instance with same instance name
drop instance name as resolution

tested on 23.05 snapshot with 2 USB printers

Signed-off-by: Peca Nesovanovic <peca.nesovanovic@sattrakt.com>
2024-03-26 11:57:52 +08:00
brvphoenix 1ca47e0ed4 sing-box: update to 1.8.10
Signed-off-by: brvphoenix <brvphoenix@gmail.com>
2024-03-26 02:36:44 +08:00
brvphoenix da03a29cda sing-box: restart if the specified interfaces start up
Signed-off-by: brvphoenix <brvphoenix@gmail.com>
2024-03-26 02:36:44 +08:00
Michael Heimpold 887805fa95
Merge pull request #23681 from jummo/add_ddns_servercow
ddns-scripts: Add servercow.de as DDNS provider
2024-03-24 16:56:08 +01:00
Stan Grishin aa802e82d6
Merge pull request #23716 from stangri/master-https-dns-proxy
https-dns-proxy: prepare migration to APK
2024-03-24 07:55:05 -06:00
Stan Grishin cef4854ea5
Merge pull request #23717 from stangri/master-adblock-fast
adblock-fast: prepare migration to APK
2024-03-24 07:08:57 -06:00
Stan Grishin cd46684e28
Merge pull request #23715 from stangri/master-nebula
nebula: prepare migration to APK
2024-03-24 07:07:26 -06:00
Stan Grishin 7e4e72373a
Merge pull request #23714 from stangri/master-pbr
pbr: prepare migration to APK
2024-03-24 07:06:32 -06:00
Stan Grishin b8a8c480fc https-dns-proxy: prepare migration to APK
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-03-24 13:05:05 +00:00
Michal Hrusecky 1131acf57f knot-resolver: Update to version 5.7.1
- Fixes CVE-2023-50868 and CVE-2023-50387
- Also, the resolver has not been called 'Knot DNS Resolver' for quite
some time, so fix that, too.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2024-03-24 11:35:38 +01:00
Šimon Bořek a68397ff77 knot-resolver: enable dnstap module build by default
'dnstap' module will be built but not loaded by default at runtime
(configuration must be provided for it to be loaded). It is still possible to
disable dnstap build manually using menuconfig.

"The dnstap module supports logging DNS requests and responses to a unix socket
in dnstap format using fstrm framing library. This logging is useful if you need
effectively log all DNS traffic."[^1]

Adds dependency on 'protobuf', 'protobuf-c', 'libfstrm'. Listed packages are
available from OpenWrt packages, have uncomplicated manifests and
while 'protobuf-c' doesn't have a maintainer since spring 2020, all the
packages (including 'protobuf-c') seem to be maintained - the last
updates of all of them in autumn 2021.

As stated by Vladimír Čunát from Knot Resolver team they build dnstap
while packaging for majority of standard Linux distributions.
Therefore this change brings us closer to expected default.

[^1]: https://knot-resolver.readthedocs.io/en/stable/modules-dnstap.html

Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
2024-03-24 11:35:28 +01:00
Šimon Bořek af521478f8 knot-resolver: do not overwrite -Ddnstap=enabled configuration
It was possible to enable dnstap in menuconfig, but the configuration
only added dependencies while leaving dnstap module build disabled.

Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
2024-03-24 11:35:18 +01:00
Hauke Mehrtens 50dffb7424 snort3: Fix compilation with GCC 13
This fixes a compile problem with GCC 13.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2024-03-24 10:15:42 +01:00
Ivan Pavlov 35ef370178 openvpn: update to 2.6.10
This is a bugfix release containing several security fixes specific to the Windows platform.

Bug fixes
---------
- Windows: if the win-dco driver is used (default) and the GUI requests
  use of a proxy server, the connection would fail.  Disable DCO in
  this case.

- Compression: minor bugfix in checking option consistency vs. compiled-in
  algorithm support

- systemd unit files: remove obsolete syslog.target

Security fixes
--------------
- CVE-2024-27459: Windows: fix a possible stack overflow in the
  interactive service component which might lead to a local privilege
  escalation.

- CVE-2024-24974: Windows: disallow access to the interactive service
  pipe from remote computers.

- CVE-2024-27903: Windows: disallow loading of plugins from untrusted
  installation paths, which could be used to attack openvpn.exe via
  a malicious plugin.

For details refer to https://github.com/OpenVPN/openvpn/blob/v2.6.10/Changes.rst

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
2024-03-23 14:00:08 +01:00
jiangslee b503f9f0df netbird: update to 0.26.3
Signed-off-by: jiangslee <jiangsili@qq.com>
2024-03-23 13:06:45 +08:00
Zephyr Lykos 8834608bc1 tailscale: Update to 1.62.0
https://github.com/tailscale/tailscale/releases/tag/v1.62.0

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
2024-03-23 13:05:17 +08:00
Stan Grishin 44f1f1184a pbr: prepare migration to APK
* remove dependencies/references to opkg
* simplify wan/wan6 discovery

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-03-23 01:03:59 +00:00
Stan Grishin 19bba88ab2
Merge pull request #23684 from stangri/master-pbr
pbr: update to 1.1.4-5
2024-03-22 19:03:04 -06:00
Stan Grishin 9cb2dbd23c nebula: prepare migration to APK
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-03-23 01:02:48 +00:00
Stan Grishin 706592edcc adblock-fast: prepare migration to APK
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-03-23 01:02:05 +00:00
Maxim Storchak 1b7cedfdc2 tgt: update to 1.0.91
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2024-03-22 16:08:56 +08:00
krant 0da2cb5266 squid: update to 6.8
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-03-22 16:08:00 +08:00
krant 7a7a87dfbd git-lfs: update to 3.5.1
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-03-22 16:06:25 +08:00
krant 6a0beb0ba0 git: update to 2.44.0
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-03-22 16:06:14 +08:00
Tianling Shen 4448d9f4a1
dnsproxy: Update to 0.66.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-03-21 15:05:52 +08:00
Tianling Shen bcb7553385
cloudflared: Update to 2024.3.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-03-21 15:05:52 +08:00
Tianling Shen 7cb8ac0966
v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-03-21 15:05:52 +08:00
Tianling Shen b627928682
v2ray-core: Update to 5.15.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-03-21 15:05:51 +08:00
Tianling Shen 09c4a4b1ba
xray-core: Update to 1.8.9
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-03-21 15:05:51 +08:00
Ozan Göktan 544e4a9061 microsocks: update to 1.0.4
Signed-off-by: Ozan Göktan <ozan@goktan.site>
2024-03-21 14:51:58 +08:00
Peter van Dijk bd337ef2e6 dnsdist: update to 1.9.1 and add maintainer
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2024-03-21 14:40:39 +08:00
Peter van Dijk 987be5cf23 pdns: update to 4.9.0 and add maintainer
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2024-03-21 14:37:20 +08:00
Stan Grishin 790753f6a6 pbr: update to 1.1.4-5
This update includes the following changes:
1. Makefile
  * update copyright
  * attempt to implement the proper variants to avoid luci-app dependency on both variants
  * quietly stop service on uninstall

2. Config-file
  * add the list of dnsmasq instances to target in supported dnsmasq modes
  * for default pbr variant, set the `resolver_set` to `dnsmasq.nftset`
  * for iptables pbr variant, set the `resolver_set` to `dnsmasq.ipset`
  * add the `nft_file_support` (disabled by default)
  * introduce `procd_boot_delay` to delay service start on boot
  * introduce the following nft set creation options:
    * nft_set_auto_merge
    * nft_set_counter
    * nft_set_flags_interval
    * nft_set_flags_timeout
    * nft_set_gc_interval
    * nft_set_policy
    * nft_set_timeout
  * add the pbr.user.wg_server_and_client custom user script to allow running wg server and
    client at the same time
  * add the "Ignore Local Requests" sample policy

3. Hotplug firewall/interface scripts
  * better logged messages

4. The pbr and pbr-iptables uci defaults script
  * use functions from the init script
  * improve vpn-policy-routing migration

5. The pbr-netifd uci defaults script
  * use functions from the init script
  * improve uci operations

6. Introduce the firewall.include file

7. Improve pbr.user.aws custom user script

8. Improve pbr.user.netflix custom user script

9. Introduce pbr.user.wg_server_and_client custom user script

10. Update the init file:
  * refactor some code to allow the init script file to be sourced by the uci defaults scripts
    and the luci rpcd script for shared functions
  * add support for `nft_file_mode` in which service prepares the fw4-compatible atomic nft/include
    file for faster operations on service reload
  * improve Tor support (nft mode only)
  * implement support for nft set options
  * update validation functions for new options/parameters

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-03-20 19:10:45 +00:00
Andreas Gnau 3b13b08ad9 nginx: Fix compilation with LTO
When CONFIG_USE_LTO=y, the int-size detection script will fail because a
variable gets optimised out. Mark it as volatile to fix the issue.

Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>
2024-03-20 11:36:08 -07:00
Toke Høiland-Jørgensen d701cae191 net/acme-common: Fix example config
Make sure we quote all strings, and add missing "option" in second example.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2024-03-20 17:18:45 +01:00
John Audia 6be0617c00 openssh: bump to 9.7p1
Release notes: https://www.openssh.com/txt/release-9.7

Removed upstreamed patch: 010-better_fzero-call-detection.patch

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
2024-03-19 23:07:15 +01:00
Patrick Hemmen 0d63145d58 ddns-scripts: Add servercow.de as DDNS provider
Add servercow.de as dynamic DNS provider provider.

Signed-off-by: Patrick Hemmen <jummo4@yahoo.de>
2024-03-19 18:24:11 +01:00
John Audia fdebb16619 snort3: update to 3.1.82.0
Changelog: https://github.com/snort3/snort3/releases/tag/3.1.82.0

Removed patches/010-gcc13.patch

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.1.82.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2024 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.14
           Using LuaJIT version 2.1.0-beta3
           Using OpenSSL 3.0.13 30 Jan 2024
           Using libpcap version 1.10.4 (with TPACKET_V3)
           Using PCRE version 8.45 2021-06-15
           Using ZLIB version 1.3.1
           Using Hyperscan version 5.4.2 2024-03-06
           Using LZMA version 5.4.6

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
2024-03-19 13:42:01 +01:00
Dirk Brenken d3dbdf0302
Merge pull request #23690 from drujd/unbound_1.19.3
unbound: update to 1.19.3
2024-03-19 06:08:16 +01:00
Tianling Shen 7ce54fa912
rclone: Update to 1.66.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-03-19 12:37:49 +08:00
Dirk Brenken b8c47eae98
travelmate: update 2.1.2-6
* fix vpn semaphore handling (#23643), thanks to @brianjmurrell
* disable vpn processing by default

Signed-off-by: Dirk Brenken <dev@brenken.org>
2024-03-18 22:09:51 +01:00
Jan Klos 558cbcac46
unbound: update to 1.19.3
Signed-off-by: Jan Klos <jan@klos.xyz>
2024-03-18 21:26:51 +01:00
Stan Grishin 0577aa43d6
Merge pull request #22211 from alaviss/adguard-network-wait
adguardhome: wait for interfaces to be up at boot
2024-03-18 10:21:16 -06:00
Paul Donald b8e6c2d4fc unbound: spell fix
Closes openwrt/luci#6993

Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-03-17 09:22:05 +08:00
Jan Klos 64da1fe3c6 unbound: bump release
Signed-off-by: Jan Klos <jan@klos.xyz>
2024-03-17 09:11:51 +08:00
Jan Klos f5195eb213 unbound: add file parameter to service instance
that way, procd does not needlessly restart unbound on triggers when
everything remains the same - changes in non-default included
configuration files will not be registered, however

Signed-off-by: Jan Klos <jan@klos.xyz>
2024-03-17 09:11:51 +08:00
Jan Klos d06c08b0ec unbound: remove date/time from config headers
so that procd can decide whether to restart unbound based on config
file changes

Signed-off-by: Jan Klos <jan@klos.xyz>
2024-03-17 09:11:51 +08:00
Jonas Jelonek e8cf9d422d gping: new package
gping is ping but with a graph. It graphically plots ping results
over time in terminal, allows multiple hosts to ping in parallel,
uses coloured output and can also plot the execution time of
arbitrary commands.

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
2024-03-16 06:50:14 +08:00
Florian Eckert 704e10157e
Merge pull request #23641 from TDT-AG/pr/20240313-httping
httping: add license informations
2024-03-15 15:43:52 +01:00
Glenn Strauss a60a0d0730 lighttpd: update to lighttpd 1.4.75 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2024-03-14 14:28:10 +01:00
Jo-Philipp Wich 09feb1885c
Merge pull request #23574 from dalfos/yggdrasil-0.5.5
yggdrasil: bump to 0.5.5
2024-03-13 22:47:49 +01:00
Florian Eckert a1dfaab951 httping: add license informations
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2024-03-13 14:33:30 +01:00
Paul Donald 685ef7d97b p910nd: restart daemon even if no driver file is needed
Not all USB printers need a blob loading; restart the daemon
independently of driver loading.

Closes openwrt/packages#23588

Signed-off-by: Paul Donald <newtwen@gmail.com>
Tested-by: minicx <minicx@disroot.org>
2024-03-12 22:09:58 +01:00
Yousong Zhou 85b634f0b4 shadowsocks-libev: add remote server ips to dst bypass ipset
To align with old iptables-based ss-rules implementation.

Supersedes openwrt/packages#20239

Link: https://github.com/openwrt/packages/pull/20239
Signed-off-by: Luis Liou <liouluis@gmail.com>
[minor fixup on commit title, version bump, etc.]
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2024-03-12 16:03:27 +00:00
Florian Eckert 26117ac9b1
Merge pull request #23590 from TDT-AG/pr/20240305-modemmanager
modemmanager: reconnect interface if the modemmanager detects a disconnect
2024-03-12 11:59:11 +01:00
Daniel Golle 31e9aea1b6 gnunet: update to version v0.21.0
This release marks a noteworthy milestone in that it includes a
completely new transport layer. It lays the groundwork for fixing some
major design issues and may also already alleviate a variety of issues
seen in previous releases related to connectivity. This change also
deprecates our testbed and ATS subsystem.

This is a new major release. It breaks protocol compatibility with the
0.20.x versions. Please be aware that Git master is thus henceforth
(and has been for a while) INCOMPATIBLE with the 0.20.x GNUnet
network, and interactions between old and new peers will result in
issues. In terms of usability, users should be aware that there are
still a number of known open issues in particular with respect to ease
of use, but also some critical privacy issues especially for mobile
users. Also, the nascent network is tiny and thus unlikely to provide
good anonymity or extensive amounts of interesting information. As a
result, the 0.21.0 release is still only suitable for early adopters
with some reasonable pain tolerance.

v0.21.0:

- Reworked PEERSTORE API

- Added record flag for maintenance records

- ensure traits can be generated with subsystem-specific prefixes for
  the symbols

- libgnunettesting first major testing NG refactor towards getting
  dependency structure streamlined

- Remove single-use API macro GNUNET_VA_ARG_ENUM

- major revision of blind signature API

- Introduced closure to hold store context when caling function to add
  hello in peerstore.

- Added DDLs for handling GNUNET_PEERSTORE_StoreHelloContext

- Removed old hello functionality.

- Refactoring components under src/ into lib/, plugin/, cli/ and
  service/

- add support for encoding/decoding double values as part of JSON to
  libgnunetjson

- Changed method GNUNET_HELLO_builder_get_expiration_time to not need
  parameter GNUNET_HELLO_Builder.

- Code moved to the core package to get rid of circular dependencies.

- Moved code to testing to have more generic test setup, which can be
  used not only from within transport.

- The old hello design replaced by the new hello design.

- Added api to get notified when hellos are stored with peerstore
  service.

- Added api to store hellos with peerstore service.

- Changed new hello uri api to allow to change the expiration time

- Moved start peer command to testing subsystem.

- Removed all usage of old transport api, beside peerinfo tool,
  gnunet-transport cli and usage in transport layer itself.

- Added __attribute__((deprecated)) to the old transport API

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2024-03-11 19:38:37 +00:00
Peter Putzer e12095b0b9 uacme: Add support custom CAs and TLS-ALPN-01 challenge
Signed-off-by: Peter Putzer <openwrt@mundschenk.at>
2024-03-09 19:40:39 +08:00
Andrey Petrov 7b52b0646a yggdrasil: bump to 0.5.5
Signed-off-by: Andrey Petrov <dalfos@mail.ru>
2024-03-08 09:52:02 +03:00
Peter van Dijk dac6a6de21 pdns-recursor: update to 5.0.3, plus add maintainer
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2024-03-08 11:05:31 +08:00
Florian Eckert b51ed340f9
Merge pull request #23551 from dnlplm/dp/mm-qmap-fix
modemmanager: report events for virtual netdevices
2024-03-07 09:57:19 +01:00
Reguna c7eaa3cfca chrony: update package description
Explicitly mention the support of NTS (or the lack of it) in the description of chrony and chrony-nts

Signed-off-by: Reguna <60984878+regunakyle@users.noreply.github.com>
2024-03-06 20:47:23 +01:00
Jan Hák d660dc6e7c knot: update to version 3.3.5
Signed-off-by: Jan Hák <jan.hak@nic.cz>
2024-03-06 20:30:07 +01:00
Vladimir Ermakov 1fb06d8081 wgsd: add package
Adds WGSD, a service that enables use cases such as:
- Building a mesh of WireGuard peers from a central registry
- Dynamic discovery of WireGuard Endpoint addressing (both IP address and port number)
- NAT-to-NAT WireGuard connectivity where UDP hole punching is supported.

Provides two packages:
- wgsd-coredns - a DNS-SD server, which allows clients to discover other
  wireguard peers
- wgsd-client - a client, which query DNS server and update wireguard
  peers endpoints

Signed-off-by: Vladimir Ermakov <vooon341@gmail.com>
2024-03-06 16:38:57 +00:00
Daniele Palmas c51a804a63 modemmanager: report events for virtual netdevices
Virtual netdevices created for multiplexing should not be skipped
when reporting events, otherwise it is not possible to setup the
data connection.

Add these exceptions in mm_report_event function.

Signed-off-by: Daniele Palmas <dnlplm@gmail.com>
2024-03-06 10:16:21 +01:00
Florian Eckert 77c16abb1a modemmanager: reconnect interface if the modemmanager detects a disconnect
There are situation for mobile routers, that the modemmanager can not
stay connected to the mobile network. There can have various reasons.
In order for the system to reconnect automatically, the netifd must be
informed that it must re-establish the connection.

The modem manager already does have a script callback handling which is
already used by the modemmanager in openwrt. Currently the modem is marked
as not unavailable when a disconnected event is detected.

The behavior was changed with this commit, so that a reconnect of the
interface is now triggerd via the netifd if the modem disconnects.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2024-03-06 09:11:57 +01:00
Florian Eckert 9d509b7433 modemmanager: start a 3gpp network regsistration
If a 'plmn' is set in the configuration, a registration attempt should be
established before the simple-connect command. If the plmn is set during
the simple-connect, a network change may occur during the connection setup.

To prevent this, the registration is started before the simple-connect with
a separate mmcli command. So that we can be sure that the modem is already
registered in the correct network before the simple-connect command.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2024-03-05 15:20:38 +01:00
Florian Eckert d839e194c5 modemmanager: move cleanup and enable to the top
Before a new connection attempt is made, the previous connection must be
cleaned up before further connection attempts are made. This is now done
by moving the cleanup and enable sequence to the beginning of the
conection setup.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2024-03-05 15:20:38 +01:00
Paul Donald 2cd10d8113 ntpclient: remove
ntp sources are dead and gone. The most important functionality is now
provided by ntpd.

Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-03-05 14:29:08 +01:00
Florian Eckert dab2cdc44c modemmanager: moving the openwrt related files to subdirectories
Moving the openwrt related files to subdirectories as they are installed
on the system. This change makes it immediately apparent during development
where the file is to be installed in the running system.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2024-03-05 13:04:59 +01:00
Tianling Shen 5f8d02a15f
alist: Update to 3.32.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-03-05 13:29:13 +08:00
Tianling Shen 9834d79ea1
v2ray-core: Update to 5.14.1
Including security fixes, see release note:
https://github.com/v2fly/v2ray-core/releases/tag/v5.14.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-03-05 13:28:00 +08:00
Stan Grishin 867e7c2ccf
Merge pull request #23571 from stangri/master-https-dns-proxy
https-dns-proxy: update to upstream 2023-11-19
2024-03-04 13:58:28 -07:00
Dirk Brenken 4356180197
banip: update 0.9.4-3
* fix another logical glitch in the logfile monitor

Signed-off-by: Dirk Brenken <dev@brenken.org>
2024-03-04 21:26:44 +01:00
Ray Wang 7bbd9156cc natmap: update to 20240303
Signed-off-by: Ray Wang <r@hev.cc>
2024-03-04 14:32:35 +08:00
Dirk Brenken 7b06b1d312
banip: update 0.9.4-2
* fix a long standing problem in the logfile-parser with dropbear and compressed IPv6 addresses

Signed-off-by: Dirk Brenken <dev@brenken.org>
2024-03-02 21:26:11 +01:00
Tianling Shen ab2f10233e
v2raya: Update to 2.2.5.1
Hot fix for a frontend failure bug.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-03-02 23:33:09 +08:00
Tianling Shen b5290ace07
dnsproxy: Update to 0.65.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-03-02 19:50:51 +08:00
Dengfeng Liu 13d9289558 apfree-wifidog: update to 7.02.1977
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
2024-03-02 19:12:06 +08:00
Dengfeng Liu cf3e16a08d apfree-wifidog: fix some bugs in the wifidogx.init file
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
2024-03-02 19:12:06 +08:00
Tianling Shen 381d1af347
v2raya: Update to 2.2.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-03-02 17:56:04 +08:00
Dirk Brenken 730ad59cb9
banip: release 0.9.4-1
* add support for destination port & protocol limitations for external feeds (see readme for details),
  useful for lan-forward ad- or DoH-blocking, e.g. only tcp ports 80 and 443
* add turris sentinel blocklist feed
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
2024-03-02 09:28:39 +01:00
Stan Grishin bd501dd89c https-dns-proxy: update to upstream 2023-11-19
* update to upstream 2023-11-19
  (changes: 489c57efd4)
* bugfix: include resolveip dependency in Makefile
  (fixes https://github.com/openwrt/packages/issues/23567)
* minor update for failed healthcheck logging

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-03-02 00:19:58 +00:00
Sergey Ponomarev 04ac8c177d acme-common: simplify config example
Make it more practical to easier get an idea

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2024-03-01 17:01:40 +01:00
Sergey Ponomarev 4bec28b4d1 acme-acmesh: use validation_method option instead of guessing
The new validation_method option can be: dns, webroot or standalone.
Previously we guessed the challenge type:
1. if the DNS provider is specified then it's dns
2. if standalone=1
3. fallback to webroot

The logic is preserved and if the validation_method wasn't set explicitly we'll guess it in old manner.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2024-03-01 17:01:40 +01:00
Sergey Ponomarev 7d07c75154 acme-common: use validation_method option instead of guessing
The new validation_method option can be: dns, webroot or standalone.
Previously we guessed the challenge type:
1. if the DNS provider is specified then it's dns
2. if standalone=1
3. fallback to webroot

The logic is preserved and if the validation_method wasn't set explicitly we'll guess it in old manner.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2024-03-01 17:01:40 +01:00
Dirk Brenken bec5f35dea
travelmate: update 2.1.2-5
* final vpn tweaks

Signed-off-by: Dirk Brenken <dev@brenken.org>
2024-02-29 21:01:16 +01:00
brvphoenix 3917a0af58 sing-box: update to 1.8.7
Signed-off-by: brvphoenix <brvphoenix@gmail.com>
2024-02-29 12:59:11 +08:00
Dirk Brenken 0af6e8d158
adblock: update 4.1.5-9
* minimal fix with reporting interface 'any'

Signed-off-by: Dirk Brenken <dev@brenken.org>
2024-02-28 21:12:10 +01:00
krant 3444a614ed openthread-br: modernize CMake options
- ':BOOL' suffix is not needed
- Don't set options which are matching the defaults
- Rename non-existing OT_BORDER_ROUTING_NAT64 to OTBR_NAT64

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-27 23:45:41 +02:00
krant fc4596ddc4 openthread-br: remove superseded patch
The patch is not needed since it is implemented in
https://github.com/openthread/ot-br-posix/pull/1908
and included into the current version.

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-27 23:45:41 +02:00
krant 9ad2c1fd97 openthread-br: fix build error on some platforms
On some builders the package was failing to build:
```
cp: cannot overwrite non-directory '[..]/var' with directory '[..]/var
```

Here we're moving the creation of /var/lib/thread into runtime script,
which eliminates the error.

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-27 23:45:41 +02:00
Tianling Shen df9d076d60
rclone: add fuse3-utils as dependency
rclone has switched to use fuse3 since v1.62.0.

Reported-by: qiuzi <gxfclql@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-02-28 00:42:32 +08:00
krant f8dcc36af4 dnsdist: disable XSK to fix the build
XSK support is set to auto by default and on some hosts it is detected as
on and leads to:

```
In file included from dnsdist-backend.cc:32:
xsk.hh:28:10: fatal error: bits/types/struct_timespec.h: No such file or
directory
   28 | #include <bits/types/struct_timespec.h>
```

Here we disable XSK so configure will behave more deterministically and
hopefully fix the builders.

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-27 08:05:47 +01:00
krant 06fa612c85 httping: update to 3.5
- Update package URLs
- Use local tarball for sources
- Switch to CMake
- Drop obsolete patches including 'minimize' (ipk size +3KB only)
- Add 3 new patches to fix musl, openssl and cmake issues

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-26 14:07:53 -08:00
Tianling Shen 120fc57d55
v2fly-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-02-26 16:21:22 +08:00
Tianling Shen 22dd480739
alist: Update to 3.31.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-02-26 16:21:15 +08:00
Tianling Shen 18aef55126
cloudflared: Update to 2024.2.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-02-26 16:21:09 +08:00
John Audia 4295bd7f45 snort3: build against gperftools-runtime
Should provide increases in snort3 performance thanks to thread-
caching malloc provided by gperftools.  Avg CPU usage is down.
Another user reported higher throughput achieved with snort3
compiled with this on samba transfers on system with CPU-limited
snort3 performance.[1]

1. https://forum.openwrt.org/t/some-help-with-a-makefile-gperftools/165656/22

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
2024-02-24 20:17:51 -08:00
Dirk Brenken bd8829b341
travelmate: update 2.1.2-4
* more re-connections tweaks
* made travelmate generated emails responsive

Signed-off-by: Dirk Brenken <dev@brenken.org>
2024-02-24 22:39:31 +01:00
John Audia a7b5bfbfb7 snort3: update to 3.1.81.0
Changelog: https://github.com/snort3/snort3/releases/tag/3.1.81.0

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.1.81.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2024 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.14
           Using LuaJIT version 2.1.0-beta3
           Using OpenSSL 3.0.13 30 Jan 2024
           Using libpcap version 1.10.4 (with TPACKET_V3)
           Using PCRE version 8.45 2021-06-15
           Using ZLIB version 1.3.1
           Using Hyperscan version 5.4.2 2024-02-16
           Using LZMA version 5.4.6

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
2024-02-24 12:14:43 -08:00
Darren Tucker 69b24ecf6f conserver: free correct addrinfo to prevent crash.
When looping through addrinfo lists in AddrsMatch, keep a copy of the
original addrinfo pointers to free instead of ending up at the terminating
NULLs and trying to free those.

OpenWRT uses musl in which freeaddrinfo(NULL) is not safe (which is
fine, it's not required by the spec) so this fixes a segfault.

Signed-off-by: Darren Tucker <dtucker@dtucker.net>
2024-02-24 12:14:18 -08:00
krant 9e7739057f htpdate: update to 1.3.7
- Switch package URLs to HTTPS
- Use .gz for source archive since .xz is no longer available
- Remove upstreamed patches

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-24 12:12:49 -08:00
Oldřich Jedlička acc4d9058e fwknop: update to 2.6.11
Signed-off-by: Oldřich Jedlička <oldium.pro@gmail.com>
2024-02-24 12:12:34 -08:00
Dirk Brenken 6e4ea63b7e
travelmate: update 2.1.2-3
* various vpn optimizations
* remove obsololete trm_maxscan option
* small fixes for net status and captive portal handling
* add an additional login variant to the h-hotels login script
* fix the wifibahn login script work again with wifionice hotspots again
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
2024-02-24 06:59:24 +01:00
Glenn Strauss 4d8bb07b73 lighttpd: update to lighttpd 1.4.74 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2024-02-23 08:18:38 +01:00
Ivan Pavlov 3e34186c16 openvpn: update to 2.6.9
- license change is now complete, and all code has been re-licensed
  under the new license (still GPLv2, but with new linking exception
  for Apache2 licensed code).
  Code that could not be re-licensed has been removed or rewritten.

- add support for building with mbedTLS 3.x.x

- new option "--force-tls-key-material-export" to only accept clients
  that can do TLS keying material export to generate session keys
  (mostly an internal option to better deal with TLS 1.0 PRF failures).

- Windows: bump vcpkg-ports/pkcs11-helper to 1.30

- Log incoming SSL alerts in easier to understand form and move logging
  from "--verb 8" to "--verb 3".

- protocol_dump(): add support for printing "--tls-crypt" packets

and other fixes

For details refer to https://github.com/OpenVPN/openvpn/blob/v2.6.9/Changes.rst

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
2024-02-22 16:04:42 -08:00
Pierre Parent 61ba390b65 coova-chilli: fix libxt-coova not loading properly from iptables ( openwrt/packages#23092 )
Signed-off-by: Pierre Parent <m@pierre-parent.fr>
2024-02-22 16:03:04 -08:00
krant a9a1e7c3a6 clamav: update to 1.3.0
- Add build-time Rust dependency
- Don't set default and rename changed CMake options

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-22 16:01:54 -08:00
Jonas Jelonek f919d41922 croc: update to 9.6.12
changelogs:
9.6.10: https://github.com/schollz/croc/releases/tag/v9.6.10
9.6.11: https://github.com/schollz/croc/releases/tag/v9.6.10
9.6.12: https://github.com/schollz/croc/releases/tag/v9.6.10

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
2024-02-22 16:01:39 -08:00
krant f9e16375f6 git: update to 2.43.2
- Refresh a patch

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-22 15:22:19 -08:00
krant d1e721720f boinc: update to 7.24.3
- Use local tarball
- Remove upstreamed and refresh remaining patches

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-22 15:22:03 -08:00
Jo-Philipp Wich 365ab3cfcd nlbwmon: update to Git HEAD (2024-02-21)
8dab2ae24c54 neigh: fix potential integer underflow in avl_cmp_neigh()
992f9078b1d5 nfnetlink: fix netlink dump receive logic
ec1a39e53d3f nfnetlink: improve message reception in event callback
0ef61c3bebcb build: convert CMakeList.txt to lowercase
c7616bcfaaef nlbwmon: utilize uloop interval timer if available

Fixes: https://github.com/jow-/nlbwmon/issues/57
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2024-02-21 22:00:13 -08:00
Yousong Zhou 4d1c7a144a ovn: bump to 22.03.5
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2024-02-22 09:31:44 +08:00
Yousong Zhou 7ccbb9a66c openvswitch: bump to 2.17.9
Refresh and backport patches so that

 - ./python path in the source code takes precedence over the same dir in hostpkg
 - OVN LTS version 22.03.5 which depends on Open vSwitch 3.0 can compile
   with Open vSwitch 2.17

Fixes: https://github.com/openwrt/packages/issues/22744
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2024-02-22 09:31:44 +08:00
krant 30fe2d99ab libcurl-gnutls: fix build
- Missing --without-nghttp3 was leaking host includes and breaking the build
- Remove or rename deprecated configure options
- Add --disable-libcurl-option to reduce package size
- Use .xz instead of .bz2 for PKG_SOURCE

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-21 17:47:32 +00:00
Jonas Lochmann e119a57e97 mwan3: check removed route before removal
This makes mwan3rtmon check if mwan3_get_routes returns a route
before removing it. This helps with IPv6 routes with source address
selector removal where multiple original routes are transformed to
the same mwan3 route if one of the source routes is removed while
the others are kept.

Signed-off-by: Jonas Lochmann <git@inkompetenz.org>
2024-02-20 21:53:22 +01:00
Dirk Brenken fe736b2f8c openvpn: fix start_path_instance function
Check the conffile existance (with .conf extension), before calling the
function 'start_path_instance'. This fixes errors with non-existing and
wrong spelling instances.

Signed-off-by: Dirk Brenken <dev@brenken.org>
- Update commit description
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2024-02-20 21:35:16 +01:00
Tianling Shen 870d09c5dd
v2raya: Update to 2.2.4.7
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-02-20 15:47:42 +08:00
Glen Huang ce76cad36e strongswan: add empty config
Without it, using uci to manipulate ipsec config can result in errors,
making it much difficult to use in uci-defaults for example.

Signed-off-by: Glen Huang <me@glenhuang.com>
2024-02-20 13:52:28 +08:00
John Audia a7f820077f snort3: build against hyperscan
Increases snort's IPS fast pattern matching by 2x (compared to
the ac_full engine) and 3x (compared to ac_bfna).  This is most
noticeable for users of large rules sets and when doing deep flow
inspection.

For more see: https://blog.snort.org/2020/09/snort-3-hyperscan-.html

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
2024-02-20 13:50:22 +08:00
Nikos Mavrogiannopoulos 6818154a61 ocserv: updated config
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-02-19 16:36:55 +01:00
Nikos Mavrogiannopoulos 246f678c69 ocserv: use better separator for sed
This prevents clashes with network addresses that
contain '/'.

Resolves: #18589

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-02-19 16:36:39 +01:00
Nikos Mavrogiannopoulos bdd15cbc16
Merge pull request #23348 from nmav/bug/23185
openconnect: make host dependency more resilient
2024-02-19 13:24:20 +01:00
Michael Heimpold 2953350f75
Merge pull request #23463 from mhei/fix-apr
apr/subversion: fix subversion build and apache-mod-php8 build regres…
2024-02-19 07:31:02 +01:00
Peter van Dijk aa4fb5151a dnsdist: update to 1.9.0
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2024-02-18 15:03:07 -08:00
S. Brusch 35ba14e50c unbound: update to latest upstream release version 1.19.1
Maintainer: @EricLuehrsen
Fixes: CVE-2023-50387, CVE-2023-50868
Release notes: https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/
Run tested: BPi-R3, mediatek/filogic, OpenWrt 23.05.2
Signed-off-by: S. Brusch <ne20002@gmx.ch>
2024-02-18 19:30:22 +01:00
Christian Lachner 9f780031a7 haproxy: update to v2.8.6
- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2024-02-17 13:27:18 +08:00
Michael Heimpold 84ac0263b5 apr/subversion: fix subversion build and apache-mod-php8 build regression (fixes #23460)
The recent upgrade of apr included a change with should fix the subversion build.

Unfortunately, this fix resulted in a build regression of apache-mod-php8.

The new approach is to pass the locations of the apr config helpers
to configure via parameter.

Fixes: 68dd7b7cf6 ("apr: update to 1.7.4")

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-02-17 00:28:46 +01:00
Stan Grishin dc888dea24
Merge pull request #23406 from stangri/master-adblock-fast
adblock-fast: add force_dns_interface setting
2024-02-16 16:12:40 -07:00
Oskari Rauta b59db99c53 slirp4netns: update to 1.2.3
changelog:
 - Fix some FD leaks (#334, thanks to @giuseppe)

As package belongs to network category, I moved it from utils to network folder

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2024-02-16 19:29:07 +01:00
Noah Meyerhans d277e41e78 bind: bump to 9.18.24
Fixes CVEs:

- CVE-2023-50387: Validating DNS messages containing a lot of DNSSEC signatures
  could cause excessive CPU load, leading to a denial-of-service condition.
- CVE-2023-50868: Preparing an NSEC3 closest encloser proof could cause
  excessive CPU load, leading to a denial-of-service condition.
- CVE-2023-4408: Parsing DNS messages with many different names could cause
  excessive CPU load.
- CVE-2023-5517: Specific queries could cause named to crash with an assertion
  failure when nxdomain-redirect was enabled.
- CVE-2023-5679: A bad interaction between DNS64 and serve-stale could cause
  named to crash with an assertion failure, when both of these features were
  enabled.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2024-02-16 07:02:24 -08:00
Oskari Rauta f03ac48d30 aardvark-dns: update to 1.10.0
changelogs: https://github.com/containers/aardvark-dns/releases

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2024-02-16 15:48:08 +01:00
Oskari Rauta e3222ee145 netavark: update to 1.10.3
changelogs: https://github.com/containers/netavark/releases

wrapper script and config file removed as they have become obsolete,
firewall driver is now configured in containers.conf

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2024-02-16 16:55:18 +08:00
Oskari Rauta 5717d032c5 netbird: update to 0.25.8
changes: https://github.com/netbirdio/netbird/compare/v0.25.2...v0.25.8

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2024-02-16 16:54:34 +08:00
Nikos Mavrogiannopoulos 20ea72607b openconnect: make host dependency more resilient
Retry when resolveip fails as it seems to be causing issues
on startup depending on various unpredictable parameters.

Resolves: #23185

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-02-16 04:57:48 +01:00
Peter van Dijk 454290bf6c pdns-recursor: update to 5.0.2 (fixes CVE-2023-50387, CVE-2023-50868)
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2024-02-15 14:16:16 -08:00
Paul Donald 9dad4285d3 p910nd: bump release
Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-02-14 17:07:13 -08:00
Thomas Winkler 1c2cee2b81 softethervpn5: version update to 5.02.5181 (incl. vulnerability fixes)
softethervpn5: The softethervpn5 package is due for an update from recent source. This PR implements a Makefile update to pull December 2023 release, which includes fixes for recently-disclosed vulnerabilities. The build patches are also updated accordingly.

Signed-off-by: Thomas Winkler <tewinkler86@gmail.com>
2024-02-14 12:55:57 -08:00
Daniel Bermond 12d5029eb3 proxychains-ng: update to version 4.17
Maintainer   : myself
Build system : Arch Linux x86_64
Build tested : r7800 OpenWrt git master (r25151-2a2abed0be)
Run tested   : r7800 OpenWrt git master (r25151-2a2abed0be)

Signed-off-by: Daniel Bermond <dbermond@archlinux.org>
2024-02-14 23:49:22 +08:00
Eric Fahlgren db58c9cd81 snort3: clean up ucode usage
- Add missing 'ucode' package dependency
 - Proto-ify the ConfigItem objects
 - Fix indentation and tab usage

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
2024-02-14 12:53:28 +08:00
Tianling Shen 87bd747652
cloudflared: Update to 2024.2.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-02-14 12:51:05 +08:00
Tianling Shen 21a8b968d1
v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-02-14 12:50:54 +08:00
Stan Grishin eafdd63d67 adblock-fast: add force_dns_interface setting
* allow users to specify list of interfaces/networks to force the
  DNS Hijacking on

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-02-14 04:41:10 +00:00
Paul Donald 58e7bfc41f p910nd: hotplug shellcheck fixes
Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-02-11 15:48:49 -08:00
Paul Donald dabeaa7643 p910nd: init: check device (/dev/usb/lpX) existence
this prevents the daemon exiting when a configured device
is not plugged in.

Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-02-11 15:48:49 -08:00
Paul Donald ac501c908d p910nd: init: partial fix for openwrt/packages#10496
Harmless to carry this fix until procd.sh adds the param

This parameter will mean umdns advertises not just "OpenWrt" but a more
appropriate string:

"Apple LaserWriter Pro 630"

Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-02-11 15:48:49 -08:00
Paul Donald 4591a79fa2 p910nd: hotplug+init: include extra ieee1284 properties
Apple and macOS GUI co-opts the mDNS note= param as "Location"

Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-02-11 15:48:49 -08:00
Paul Donald 5bc581e698 p910nd: hotplug: minor bug fixes
Commit driver_home defaults before continuing

Fix missing path for serial number acquisition

Store current device if no previously configured device had one.
Also set CHAR_DEV so the printer can get its driver sent on first run.

Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-02-11 15:48:49 -08:00
Paul Donald 6e886cd434 p910nd: hotplug: small refactor
replace -a with &&

shorten uci commands via variables

add optional ieee1284_id parameters

Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-02-11 15:48:49 -08:00
Paul Donald 069cc8dc81 p910nd: init: add txtvers=1 to mDNS properties
The spec https://developer.apple.com/bonjour/printing-specification/bonjourprinting-1.2.1.pdf
notes:

... if the meaning of any of the TXT record keys is changed, the txtvers value
will be incremented. The current value of this key is “1”, and if this key does not exist in
the TXT record, the default value of “1” is assumed. The txtvers SHOULD be the first
key/value pair in the TXT record.

Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-02-11 15:48:49 -08:00
Paul Donald ffa1bbbe78 p910nd: init: line-break and conditionalize mDNS properties
Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-02-11 15:48:49 -08:00
Paul Donald b8890c69e4 p910nd: init: only run mDNS changes if mdns is set to on
i.e. don't do the extra work unless mdns setting is enabled

Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-02-11 15:48:49 -08:00
Paul Donald 34a35c93ce p910nd: init script
Don't run procd with a name of p9100d or p9101d etc.
Use the original binary name: p910nd.

This way, all supplied parameters should be visible via e.g.:

ps
xargs -0 < /proc/{procid}/cmdline

Revise all p910nd strings to the variable DAEMON_NAME or CONFIG where
appropriate.

Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-02-11 15:48:49 -08:00
Alexandru Ardelean e73ac3534a
Merge pull request #23354 from neheb/2
tcpreplay: backport CVE fix
2024-02-11 12:29:34 +02:00
Michael Gerlach ea47bc9c58 iodine: bump version to 0.8.0
Signed-off-by: Michael Gerlach <n3ph@cccfr.de>
2024-02-10 18:35:42 -08:00
Rosen Penev fd67754a05 tcpreplay: backport CVE fix
Low severity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-10 15:57:45 -08:00
Maxim Storchak e3b2caae05 tgt: update to 1.0.90
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2024-02-10 14:58:13 -08:00
Ivan Pavlov 13a237d941 net-snmp: update to 5.9.4
Adjust patches for current version changes
Module "disk" renamed to "disk_hw"
Internal type "unknown" changed to "u_int32_t"
Add patch with removing macro syntax checking for successful build

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
2024-02-10 14:57:25 -08:00
Tiago Gaspar 643e3bf73a jool: update to 4.1.11
Update jool to 4.1.11 and remove unneeded patch.
Changelog: https://github.com/NICMx/Jool/releases/tag/v4.1.11

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
2024-02-10 14:54:42 -08:00
krant f58be51721 squid: fix configure options
- Remove non-existing 'dlmalloc' option
- Use 'with-cap' instead of 'with-libcap'
- Use 'with-xml2' instead of 'with-libxml2'
- Patch configure.ac to properly handle 'with-nettle'

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-10 14:54:24 -08:00
Jonas Jelonek f9ae3084c9 croc: update to 9.6.9
change overview:
9.6.6 -> 9.6.8: only CI + deployment changes
9.6.8 -> 9.6.9: crypto library version bump

changelogs:
9.6.6 -> 9.6.7: https://github.com/schollz/croc/releases/tag/v9.6.7
9.6.7 -> 9.6.8: https://github.com/schollz/croc/releases/tag/v9.6.8
9.6.9 -> 9.6.9: https://github.com/schollz/croc/releases/tag/v9.6.9

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
2024-02-08 21:42:16 -08:00
krant e0f538465f nbd: update to 3.25
- Use up-to-date project URLs
- Use up-to-date configure args
- Drop obsolete std=gnu99 from CFLAGS

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-08 21:42:04 -08:00
krant 4007a08529 squid: update to 6.7
- Switch URL to HTTPS
- Remove default/obsolete configure options
- Fix and refresh the patch

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-08 09:37:43 -08:00
krant 4dd0e03bdd lyncx: fix wrongful include of 'bsd/stdlib.h' is some environments
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-08 09:37:16 -08:00
kkubicki 278970f10c autossh: make forwarding optional
- previously localport option was required, which broke older configs
- now in-config forwarding is only optional
- ssh option still can be used for forwarding as in sample config

Signed-off-by: kkubicki <krzysiek.kubicki@gmail.com>
2024-02-07 14:11:35 -08:00
Eric Fahlgren b94c6dd37d snort3: improve script reliability
- Enable missing variable checking by default
 - Explicitly check variables are defined in all 'rm' commands

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
2024-02-07 14:01:11 -08:00
Martin Schiller e6fb43bdc9 openvpn: add OpenVPN option disable-dco
You maybe want to disable the DCO support, so let's add this option.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2024-02-07 13:58:46 -08:00