Commit Graph

25223 Commits

Author SHA1 Message Date
Glenn Strauss 3796a78aad lighttpd: modify build cmd for type: feature opts
modify build command for meson type: feature options

remove -Dwith_libev=disabled (option no longer has any effect)

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 4a3b62a92a)
2023-04-14 13:58:33 -04:00
Glenn Strauss 636616f4a6 lighttpd: add lighttpd-mod-rrdtool dep on rrdtool1
add lighttpd-mod-rrdtool dependency on rrdtool1

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 9f299e881b)
2023-04-14 13:58:33 -04:00
Glenn Strauss d46d3bb761 lighttpd: lighttpd-1.4.67-4
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit a09dbfcf97)
2023-04-14 13:58:33 -04:00
Glenn Strauss 97197d5e94 lighttpd: document crypto lib options in Makefile
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 43741e748f)
2023-04-14 13:58:30 -04:00
Tianling Shen 8c6f6aefb4
v2raya: Update to 2.0.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 23e1348166)
2023-04-13 02:44:31 +08:00
Ryan Shi fb673d64be rrdtool: update PKG_SOURCE_URL
Signed-off-by: Ryan Shi <qweaszxcdf@users.noreply.github.com>
(cherry picked from commit 164e0257e7)
2023-04-10 21:16:10 +03:00
Tianling Shen 0b7b12d707
yq: Update to 4.33.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0b255830e9)
2023-04-06 18:54:23 +08:00
Tianling Shen bf18c8a4e8
yq: Update to 4.33.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e2cf4fa9a1)
2023-04-06 18:54:19 +08:00
Hannu Nyman d726a7b007 nano: make nanorc world readable
If file /etc/nanorc is readable by everyone, "default" settings
are available for users as well without necessarily requiring
their own customized .nanorc in their home directory. Or if
they want one, but want it to be based on system's default
nanorc, they can copy it from /etc - without chmodding
file, it is in-accessible for users.

Suggested-by: Oskari Rauta <oskari.rauta@gmail.com>
[switched approach to use INSTALL_DATA]
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 76d02f933f)
2023-04-05 20:48:26 +03:00
Vladimir Ulrich 5a6a8c3d6f zoneinfo: Updated to the latest release
Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit 7259eea63f)
(cherry picked from commit 00f1c78a64)
(cherry picked from commit 453be8f179)
(cherry picked from commit 3185feda49)
(cherry picked from commit b15721d6d6)
(cherry picked from commit cb5bf2b007)
(cherry picked from commit 89c2fa9d9b)
(cherry picked from commit 8d693a79be)
(cherry picked from commit 5a9e8698c9)

Updated zoneinfo-all meta-package to fix warnings on build
Removed zoneinfo-simple from dependencies of zoneinfo-all as its contents are included in other packages.
(cherry picked from commit 1d88250815)

(cherry picked from commit 23e6200e4d)
(cherry picked from commit 0ff1a8666b)
2023-04-05 20:29:47 +03:00
Josef Schlehofer cc5d4f7f82
unbound: update to version 1.17.1
- Refreshed one patch

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 97e69ec89c)
[Use AUTORELEASE]
2023-04-01 11:19:19 +02:00
Josef Schlehofer 663acbd379 ffmpeg: update to version 4.3.5
Fixes: CVE-2020-21041

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-04-01 11:04:53 +02:00
Tianling Shen 62e5089b5d v2raya: Update to 2.0.4
- Added TproxyNotSkipBr flag for OpenWrt.
- Removed all upstreamed patches.
- Removed deprecated option.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5062779dc7)
[removed nftables-related changes]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-03-21 18:50:02 +08:00
Tianling Shen 39c8d67ced
yq: Update to 4.32.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 65dc683efe)
2023-03-21 01:34:12 +08:00
Florian Eckert 27ff0f1149
Merge pull request #20671 from TDT-AG/pr/20220415-openwrt-21.2-strongswan-cves
strongswan: backport CVE fixes
2023-03-17 16:29:32 +01:00
Florian Eckert 1ad16b7109 strongswan: bump PKG_RELEASE because of CVEs backports
CVE-2022-40617 45774858e8
CVE-2021-41990 05836ef668
CVE-2021-45079 e4d4e9dc48
CVE-2021-41991 d1bc776958

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-03-16 15:06:21 +01:00
Florian Eckert 45774858e8 strongswan: add fix for CVE-2022-40617
Full details of the CVE can be found at the following link:
https://www.strongswan.org/blog/2022/10/03/strongswan-vulnerability-(cve-2022-40617).html

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-03-16 08:08:34 +01:00
Florian Eckert 05836ef668 strongswan: add fix for CVE-2021-41990
Full details of the CVE can be found at the following link:
https://www.strongswan.org/blog/2021/10/18/strongswan-vulnerability-(cve-2021-41990).html

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-03-16 08:08:28 +01:00
Florian Eckert e4d4e9dc48 strongswan: add fix for CVE-2021-45079
Full details of the CVE can be found at the following link:
https://www.strongswan.org/blog/2022/01/24/strongswan-vulnerability-(cve-2021-45079).html

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-03-16 08:08:22 +01:00
Florian Eckert d1bc776958 strongswan: add fix for CVE-2021-41991
Full details of the CVE can be found at the following link:
https://www.strongswan.org/blog/2021/10/18/strongswan-vulnerability-(cve-2021-41991).html

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-03-16 08:08:17 +01:00
Michael Heimpold b508e90afe
Merge pull request #20667 from mhei/21.02-php8-update-to-8.0.28
[21.02] php8: update to 8.0.28
2023-03-16 07:30:35 +01:00
Michael Heimpold 3935ef65ea php8: update to 8.0.28
This fixes:
    - CVE-2023-0567
    - CVE-2023-0568
    - CVE-2023-0662

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2023-03-14 22:10:08 +01:00
Etienne Champetier 960ae0434e
mv88e6xxx_dump: update to 2023.03.08
This fixes 2 issues where mv88e6xxx_dump was displaying
data incorrectly for --vtu and --global2

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 2bf3832193)
2023-03-12 11:28:42 +01:00
Etienne Champetier 18f242ada9
mv88e6xxx_dump: add new packages to debug switch issues
Reviewed-by: Chris Healy cphealy@gmail.com
Reviewed-by: Robert Marko <robimarko@gmail.com>
Reviewed-by: Andre Heider <a.heider@gmail.com>
Tested-by: Petr Štetiar <ynezz@true.cz>
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 167c6234d0)
2023-03-12 11:28:36 +01:00
Christian Marangi 006014745c ci: update github actions to v3
Update checkout and upload-artifact action to v3 to mute nodejs
deprecation warning.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 52570d4242)
2023-03-11 12:02:29 +01:00
Jeffery To e328bb03ec ci: Use openwrt/gh-action-sdk@v5
The previous build errors with v5 have been fixed. This version builds
packages as a normal user instead of as root.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 37f9b77b01)
2023-03-11 12:02:29 +01:00
Jeffery To 6df650e909
golang: Fix conditionals not stripped
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 86fd1ebbe4)
2023-03-09 18:24:44 +01:00
Christian Lachner 8fac9fc114 haproxy: update to v2.2.29
- Update haproxy download URL and hash
- This release fixes a critial flaw known as CVE-2023-25725. See:
  http://git.haproxy.org/?p=haproxy-2.2.git;a=commit;h=4a4c90c2b04444d92c58873cfb19052f20280bc2

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2023-03-08 20:38:07 +08:00
Tianling Shen 477e23e85d
v2raya: drop wrong patches
These patches should not be backported to OpenWrt, otherwise tproxy
won't work for devices connected to br-lan (bypassed by the fw rules).

We have introduced a new compile-time flag for new version (which
is not released yet), but it's unnecessray to backport redudant
patches as here is still at the old version.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 40669c4135)
2023-03-05 14:48:07 +08:00
Tianling Shen 41779b9804
yq: Update to 4.31.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1343bb5856)
2023-03-05 14:48:02 +08:00
Tianling Shen 48d54a6c92
yq: Update to 4.31.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b76bd94605)
2023-03-05 14:47:58 +08:00
Tianling Shen 8e8c8f3d6f
msgpack-c: Update to 5.0.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5890d2f2d7)
2023-03-02 16:51:48 +08:00
Alan Swanson a6abd3c010
sed: remove old libpcre dependency
Signed-off-by: Alan Swanson <reiver@improbability.net>
(cherry picked from commit 0a00f0f2a5)
2023-03-02 07:37:39 +01:00
Dengfeng Liu 98cb09953b xfrpc: update to version 2.1.606
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit db243b31c8)
2023-02-27 10:47:11 +08:00
Dengfeng Liu 4a1401a7f3 xfrpc: Update to 1.11.587
refactor tcp mux

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 419c434002)
2023-02-27 10:47:11 +08:00
Dengfeng Liu 72cfe23545 xfrpc: allow server_addr ip and domain
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit a7e3f28c37)
2023-02-27 10:47:11 +08:00
Dengfeng Liu bf9301311e xfrpc: Update to 1.07.582
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 9fbd26f170)
2023-02-27 10:47:11 +08:00
Dengfeng Liu f2b01b7b1b xfrpc: update to 1.06.579
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 5615ce33fa)
2023-02-27 10:47:11 +08:00
Dengfeng Liu 557cfeb98b xfrpc: set xfrpc's disabled default value to 0
change this to satisfy luci-app-xfrpc's need

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 10a24d4cad)
2023-02-27 10:47:11 +08:00
Dengfeng Liu 8f6d7e8885 xfrpc: fix bug of xfrpc.init
replace xfrpc with xfrp

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit b3bd24f1af)
2023-02-27 10:47:11 +08:00
Dengfeng Liu 5ef07ad955 xfrpc: update to 1.05.561
support tcp mux and default to turn it on

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit d4430d2e89)
2023-02-27 10:47:11 +08:00
Dengfeng Liu b6e1d2b6e8 xfrpc: Update to 1.05.548
deprecated xfrps, compatible with frps

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 2cb01429b1)
2023-02-27 10:47:11 +08:00
Dengfeng Liu 76b2528f6b xfrpc: fast reverve proxy client in c language
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 9af01c87bf)
2023-02-27 10:47:11 +08:00
Michal Vasilek 90d8dc04be git: update to 2.34.7
Fixes CVE-2023-22490, CVE-2023-23946

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 06f466cc61)
2023-02-23 15:43:44 +01:00
Peter van Dijk 2a015d5fd7 CI: do not crash during PKG-INFO generation if there are no packages
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit b5132de5cf)
2023-02-23 11:56:03 +01:00
Peter van Dijk b6e1446bee CI: add PKG-INFO metadata file
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit a40c1b3e44)
2023-02-23 11:56:03 +01:00
Peter van Dijk c49acc1fd3 CI: use git commit sha in name
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit bbf983721c)
2023-02-23 11:56:03 +01:00
Eneas U de Queiroz 8c41503549
Merge pull request #20526 from nxhack/2102_node_14213
[21.02] node: bump to v14.21.3
2023-02-20 09:37:44 -03:00
Alexandru Ardelean fae6120882
Merge pull request #20518 from commodo/django-21.02
[21.02] django: bump to version 3.2.18
2023-02-20 11:10:36 +02:00
Hirokazu MORIKAWA d57b35fa83 node: bump to v14.21.3
Thursday February 16 2023 Security Releases

Notable Changes
The following CVEs are fixed in this release:
* CVE-2023-23918: Node.js Permissions policies can be bypassed via process.mainModule (High)
* CVE-2023-23920: Node.js insecure loading of ICU data through ICU_DATA environment variable (Low)
More detailed information on each of the vulnerabilities can be found in February 2023 Security Releases blog post.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2023-02-19 15:07:45 +09:00