Commit Graph

28435 Commits

Author SHA1 Message Date
Stan Grishin 26aedd9710
Merge pull request #24024 from rs/nextdns-1.43.0-openwrt-22.03
[22.03] nextdns: Update to version 1.43.0
2024-04-28 17:33:55 -07:00
Sibren Vasse 350e9ef2a3 openssh: fix build failure on powerpc_8548
1036d77b34

Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>
(cherry picked from commit a79c49578c)
2024-04-28 09:41:42 +02:00
Rucke Teg 794a9110d4 openssh: bump to 9.6p1
Release notes: https://www.openssh.com/txt/release-9.6

Signed-off-by: Rucke Teg <rucketeg@protonmail.com>
(cherry picked from commit e8dfc6abbe)
2024-04-28 09:41:37 +02:00
John Audia 92b4a034e8 openssh: bump to 9.5p1
Changelog: https://www.openssh.com/txt/release-9.5

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 6dc86d46da)
2024-04-28 09:41:31 +02:00
Olivier Poitrey b81d247f14 nextdns: Update to version 1.43.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2024-04-28 00:47:37 +00:00
Marius Dinu 30a9623c40 tvheadend: Fix github warning about AUTORELEASE
Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit 091681e152)
2024-04-27 12:05:42 +02:00
Marius Dinu 645f5fa2ae tvheadend: add conditions for -O3 and LTO optimizations
Building for arc, mips and powerpc platforms fails if -O3 and LTO optimizations are enabled. This patch removes that option for everything other than arm and x86_64. These are known to work.
Fixes issue #19923.
Also fixes a typo in the description.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit 1490531981)
2024-04-27 12:05:21 +02:00
Ivan Pavlov 1301ccb894 openvpn: update to 2.5.8
Mostly bugfix release
For details refer to https://github.com/OpenVPN/openvpn/blob/v2.5.8/Changes.rst

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
(cherry picked from commit f49645d24c)
2024-04-27 11:53:41 +02:00
Martin Schiller 09a85c7e99 openvpn: add possibility to set param "compress" without algorithm
In some situations you need to set the compress param without an
algorithm. Compression will be turned off, but the packet framing for
compression will still be enabled, allowing a different setting to be
pushed later.

As it is not possible to have options with optional values at the
moment, I've introduced a pseudo value "frames_only" which will be
removed in the init script.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
(cherry picked from commit 5ce5220eb2)
2024-04-27 11:53:35 +02:00
Sibren Vasse bfb0d953f0 openssh: update to 9.4p1
Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>
(cherry picked from commit 7fb8e823b9)
2024-04-27 10:04:05 +02:00
Philip Prindeville 8a1e03011a openssh: add server config subdirectory
Most distros allow dropping site configuration files into
/etc/sshd_config.d/ so that you don't have to tweak the main
server configuration file.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit ead95a26b6)
2024-04-27 10:04:05 +02:00
Nathan Friedly e90632f98a
librespeed-go: improve the description
This swaps the order of the lines in the description so that when LuCI displays only the first line, it still offers some helpful information.

Signed-off-by: Nathan Friedly <nathan@nfriedly.com>
(cherry picked from commit 06ea66c558)
2024-04-27 13:23:00 +08:00
Anya Lin d44d1fcfa0
librespeed-go: Reload the daemon after modifying the tls certificate
Make the daemon reload after the tls certificate is updated

Signed-off-by: Anya Lin <hukk1996@gmail.com>
(cherry picked from commit fd1d506fff)
2024-04-27 13:22:57 +08:00
Josef Schlehofer 870b00c2fe syslog-ng: update to version 4.7.1
Release notes:
- https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.7.0
- https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.7.1

Also bump version in the config file to avoid warning

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 9d49df0dab)
2024-04-26 13:42:10 +02:00
Paul Spooren 020c2ae413 CI: remove CircleCI for now
The GitHub CI offers currenlty more architecture and the Signed-of-by
test is covered via the DOC CI test. In case GitHub ever changes
policies, we can simply switch back.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 26c101edc3)
2024-04-26 11:50:47 +02:00
Jeffery To 311c13cd77 CircleCI: Add 22.03 public keys, 18.06 v2 gpg key, 18.06 usign key
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit dce83a5022)
2024-04-26 11:50:17 +02:00
Ray Wang a21e2d6847 natmap: add log_std{out,err} options
Introduce `log_stdout` and `log_stderr` options for managing logging output.

Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit 5abbd3bcb2)
2024-04-25 00:26:57 +08:00
Josef Schlehofer 2738e4ab7e modemmanager: drop backported patches
These patches were included in 1.18.8, thus it can be removed.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2024-04-23 16:38:07 +02:00
Aleksander Morgado cb8ea00900 modemmanager: fix unquoted strings when launching pppd
Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit eb283ea8a3)
2024-04-23 16:37:01 +02:00
Arkadiusz Drabczyk b971b843c9 modemmanager: fix mm_log() invocations in 25-modemmanager* files
Definition of mm_log() was changed in
45a56a8899 but 25-modemmanager* weren't
changed.

Signed-off-by: Arkadiusz Drabczyk <arkadiusz@drabczyk.org>
(cherry picked from commit cdbc7a67fc)
2024-04-23 16:36:48 +02:00
Aleksander Morgado ba92c4552b modemmanager: explicitly disconnect even if no bearers found
A network restart where netifd is cleanly restarted involves bringing
the network interfaces down. The 'modemmanager' protocol handler will
run a mmcli --simple-disconnect in this case, but only if there are
bearer objects found.

If the network restart happened *during* the connection attempt
procedure, while the modem is e.g. being registered in the network, no
bearer objects exist yet, and so, we would skip doing anything during
the interface teardown operation. This would lead to the original
connection attempt succeeding, so leaving the modem in ModemManager
in connected state, while the associated interface in netifd is
reported down.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit c15e94f6c5)
2024-04-23 16:36:42 +02:00
Aleksander Morgado 2aff57efdc modemmanager: report network initiated disconnections to netifd
The new connection dispatcher scripts support integrated in
ModemManager 1.18.8 allows us to provide a openwrt-specific dispatcher
script used to report netifd that the underlying network connection is
down.

See also https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/merge_requests/775

Fixes https://github.com/openwrt/openwrt/issues/8368
Fixes https://github.com/openwrt/packages/issues/14096

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit bc754f31cf)
2024-04-23 16:36:35 +02:00
Aleksander Morgado 27747109cc modemmanager: install available FCC unlock scripts
The FCC unlock scripts are installed but not enabled by default.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit e430420aa1)
2024-04-23 16:36:29 +02:00
Maxim Anisimov 3c8a12e897 modemmanager: bump to 1.18.12
Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit c588b92d51)
2024-04-23 16:31:18 +02:00
Jan Klos c2740e801f unbound: update to 1.19.3
Signed-off-by: Jan Klos <jan@klos.xyz>
(cherry picked from commit 558cbcac46)
2024-04-18 19:08:31 +02:00
Rui Salvaterra d7d2427989 tor: update to 0.4.8.10 stable
Bugfix release, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.10/ChangeLog

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit ee8b29de2c)
2024-04-18 19:05:57 +02:00
Andrew Sim b4d46c666c transmission: update to 4.0.4
Update Transamission to 4.0.4 stable release
Changelog: https://github.com/transmission/transmission/releases/tag/4.0.4

Signed-off-by: Andrew Sim <andrewsimz@gmail.com>
(cherry picked from commit 45170d9b67)
2024-04-18 18:52:30 +02:00
Michael Heimpold 8d38e3de1d
Merge pull request #23940 from mhei/22.03-php8-update-to-8.1.28
[22.03] php8: update to 8.1.28
2024-04-16 21:10:07 +02:00
Michael Heimpold f05d23ebbd php8: update to 8.1.28
This fixes:
  - CVE-2024-1874
  - CVE-2024-2756
  - CVE-2024-3096

While at, switch to https download URL.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-04-16 19:54:06 +02:00
Glenn Strauss 8d8620bbf2 lighttpd: update to lighttpd 1.4.76 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit a5557a2a47)
2024-04-13 14:00:48 -07:00
Josef Schlehofer 062b283f13 lualanes: update to version 3.16.3 and use tarball
1. Update it to version 3.16.3
Release notes: https://github.com/LuaLanes/lanes/releases/tag/v3.16.3

2. Change to download tarball instead of checking out Git sources
In the previous commit (in the Fixes tag), it was changed to Git sources without any reason. Let's revert it back. Let's use again tagged release.

Fixes: b93e5b45b1 ("lualanes: Version bump to v3.16.2")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 8b7040b6de)
2024-04-12 09:55:52 +02:00
Mark Baker 662dd4a0a4 lualanes: Version bump to v3.16.2
Update the PKG_VERSION and PKG_SOURCE_VERSION to pull version 3.16.2
from upstream. The upstream version includes fixes for the
`pthread_yield: symbol not found` issue.

Removed patches 100-musl-compat.patch and 200-fix-redef-error.patch
as fixes were implemented upstream.

Build tested on aarch64, arm_cortex_a15/a9, i386, mips[el]_24kc,
powerpc_464fp/8548, riscv64, x86_64. Confirmed on x86_64.

Signed-off-by: Mark Baker <mark@vpost.net>
(cherry picked from commit 08e51ab50a)
2024-04-12 09:55:36 +02:00
krant 8022fb4a83 hwdata: update to 0.379
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit 9f45bfd3d5)
2024-04-12 09:53:55 +02:00
Jo-Philipp Wich 8c02297d07 nano: fix syntax highlighting for raw ucode scripts
Text between interpreter line and start of first directive should only
highlighted as uninterpreted when running in template mode, so adjust
the match rule accordingly.

Fixes: #23761
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 8f9564387d)
2024-04-05 17:32:15 +03:00
Jo-Philipp Wich 51005623ca nano: add syntax highlighting for ucode scripts
Introduce local syntax highlighting support for ucode scripts, like
it is done already for uci configuration files.

Ref: https://github.com/jow-/ucode/issues/178
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit d8a574f7f0)
2024-04-05 17:32:11 +03:00
Peca Nesovanovic 7c3f86430e p910nd: fix running multiple instances
Compile tested: (ramips, rb760igs, 23.05 snapshot)
Run tested: (ramips, rb760igs, 23.05 snapshot, tests done)

Description:
In case we have multiple device defined in /etc/config/p910nd then init script will try to start multiple instance with same instance name
drop instance name as resolution

tested on 23.05 snapshot with 2 USB printers

Signed-off-by: Peca Nesovanovic <peca.nesovanovic@sattrakt.com>
(cherry picked from commit 152d80ce13)
2024-03-27 14:33:04 +08:00
Josef Schlehofer ae3ae3f30e syslog-ng: enable http module based on zlib support in curl
Since version 4.4.0, syslog-ng added compression to http() destination
using zlib from curl. [1] However, zlib is currently disabled in curl [2]
and it prevented syslog-ng to start.

This commit changes the configuration opinion to enable http module only if
zlib support is enabled for curl and as well it adds dependency for zlib (in that case).
If the zlib is disabled, then it disables http module, so syslog-ng can start
and thus zlib dependency is not required.

[1] https://gitlab.nic.cz/turris/os/packages/-/issues/932
[2] 93cbaacbfb/net/curl/Config.in (L134)
Fixes: 4dd49d7c3c ("syslog-ng: update to version 4.4.0")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1e14d95d78)
2024-03-26 08:27:13 +01:00
Michal Hrusecky 1f10633db0 knot-resolver: Update to version 5.7.1
- Fixes CVE-2023-50868 and CVE-2023-50387
- Also, the resolver has not been called 'Knot DNS Resolver' for quite
some time, so fix that, too.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit 1131acf57f)
2024-03-24 11:38:27 +01:00
Šimon Bořek e36ca36b92 knot-resolver: enable dnstap module build by default
'dnstap' module will be built but not loaded by default at runtime
(configuration must be provided for it to be loaded). It is still possible to
disable dnstap build manually using menuconfig.

"The dnstap module supports logging DNS requests and responses to a unix socket
in dnstap format using fstrm framing library. This logging is useful if you need
effectively log all DNS traffic."[^1]

Adds dependency on 'protobuf', 'protobuf-c', 'libfstrm'. Listed packages are
available from OpenWrt packages, have uncomplicated manifests and
while 'protobuf-c' doesn't have a maintainer since spring 2020, all the
packages (including 'protobuf-c') seem to be maintained - the last
updates of all of them in autumn 2021.

As stated by Vladimír Čunát from Knot Resolver team they build dnstap
while packaging for majority of standard Linux distributions.
Therefore this change brings us closer to expected default.

[^1]: https://knot-resolver.readthedocs.io/en/stable/modules-dnstap.html

Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
(cherry picked from commit a68397ff77)
2024-03-24 11:38:22 +01:00
Šimon Bořek fc6fb6a860 knot-resolver: do not overwrite -Ddnstap=enabled configuration
It was possible to enable dnstap in menuconfig, but the configuration
only added dependencies while leaving dnstap module build disabled.

Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
(cherry picked from commit af521478f8)
2024-03-24 11:38:17 +01:00
Glenn Strauss 5a20abc059 lighttpd: update to lighttpd 1.4.75 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit a60a0d0730)
2024-03-23 15:13:01 +01:00
Fabrice Fontaine 87cf217806 treewide: assign PKG_CPE_ID
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 5afe5c9031)
2024-03-19 13:28:12 +01:00
Paul Donald e4958a3762 p910nd: restart daemon even if no driver file is needed
Not all USB printers need a blob loading; restart the daemon
independently of driver loading.

Closes openwrt/packages#23588

Signed-off-by: Paul Donald <newtwen@gmail.com>
Tested-by: minicx <minicx@disroot.org>
(cherry picked from commit 685ef7d97b)
2024-03-13 10:29:23 +01:00
Jan Hák 2a09ee562e knot: update to version 3.3.5
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit d660dc6e7c)
2024-03-06 20:30:54 +01:00
Paul Donald 33cd89a57f ntpclient: remove
ntp sources are dead and gone. The most important functionality is now
provided by ntpd.

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 2cd10d8113)
2024-03-05 22:43:27 +01:00
Josef Schlehofer a03500c5c8 syslog-ng: update to version 4.6.0
1. Bump version config to 4.6
2. Updated to 4.6.0 version
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.6.0
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.5.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit cf4df28d06)
2024-03-05 22:19:10 +01:00
Sergey Ponomarev d8490a4722 syslog-ng: conf: fix deprecated stats_freq
The deprecated stats_freq() replaced with stats(freq(0)).

Also make comments shorter.
Fix tabs.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
(cherry picked from commit 37d2d69595)
2024-03-05 22:18:49 +01:00
Dengfeng Liu ced6158ab4 apfree-wifidog: update to 7.02.1977
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
2024-03-05 11:41:06 +08:00
Dengfeng Liu 7e95cc8972 apfree-wifidog: fix some bugs in the wifidogx.init file
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
2024-03-05 11:41:06 +08:00
Stan Grishin 8ff00cec77
Merge pull request #23572 from stangri/openwrt-22.03-https-dns-proxy
[23.05] https-dns-proxy: update to upstream 2023-11-19
2024-03-04 13:58:32 -07:00