Commit Graph

28443 Commits

Author SHA1 Message Date
Paul Donald e4958a3762 p910nd: restart daemon even if no driver file is needed
Not all USB printers need a blob loading; restart the daemon
independently of driver loading.

Closes openwrt/packages#23588

Signed-off-by: Paul Donald <newtwen@gmail.com>
Tested-by: minicx <minicx@disroot.org>
(cherry picked from commit 685ef7d97b)
2024-03-13 10:29:23 +01:00
Jan Hák 2a09ee562e knot: update to version 3.3.5
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit d660dc6e7c)
2024-03-06 20:30:54 +01:00
Paul Donald 33cd89a57f ntpclient: remove
ntp sources are dead and gone. The most important functionality is now
provided by ntpd.

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 2cd10d8113)
2024-03-05 22:43:27 +01:00
Josef Schlehofer a03500c5c8 syslog-ng: update to version 4.6.0
1. Bump version config to 4.6
2. Updated to 4.6.0 version
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.6.0
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.5.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit cf4df28d06)
2024-03-05 22:19:10 +01:00
Sergey Ponomarev d8490a4722 syslog-ng: conf: fix deprecated stats_freq
The deprecated stats_freq() replaced with stats(freq(0)).

Also make comments shorter.
Fix tabs.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
(cherry picked from commit 37d2d69595)
2024-03-05 22:18:49 +01:00
Dengfeng Liu ced6158ab4 apfree-wifidog: update to 7.02.1977
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
2024-03-05 11:41:06 +08:00
Dengfeng Liu 7e95cc8972 apfree-wifidog: fix some bugs in the wifidogx.init file
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
2024-03-05 11:41:06 +08:00
Stan Grishin 8ff00cec77
Merge pull request #23572 from stangri/openwrt-22.03-https-dns-proxy
[23.05] https-dns-proxy: update to upstream 2023-11-19
2024-03-04 13:58:32 -07:00
Ray Wang 7183f1d3a5 natmap: update to 20240303
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit 7bbd9156cc)
2024-03-04 23:40:10 +08:00
Tianling Shen 9ccca54089
rclone: add fuse3-utils as dependency
rclone has switched to use fuse3 since v1.62.0.

Reported-by: qiuzi <gxfclql@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit df9d076d60)
2024-03-02 17:55:14 +08:00
Stan Grishin 2b98e97b31 https-dns-proxy: update to upstream 2023-11-19
* update to upstream 2023-11-19
  (changes: 489c57efd4)
* bugfix: include resolveip dependency in Makefile
  (fixes https://github.com/openwrt/packages/issues/23567)
* minor update for failed healthcheck logging

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit bd501dd89c)
2024-03-02 00:21:34 +00:00
Rui Salvaterra 55b7f6f501 tor: update to 0.4.8.7 stable
Bugfix release, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.7/ChangeLog

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 5cb304e2b3)
2024-02-27 11:05:58 +01:00
ValdikSS ValdikSS f532413ba2 tor: fix daemon reloading
procd requires init script name, not the path to executable

Signed-off-by: ValdikSS ValdikSS <iam@valdikss.org.ru>
(cherry picked from commit af58942738)
2024-02-27 11:05:49 +01:00
Rui Salvaterra d7b84bfc32 tor: update to 0.4.8.4 stable
First release of the 0.4.8.x series, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.4/ChangeLog

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 1b2c1ddbb2)
2024-02-27 11:05:42 +01:00
Daniel Bermond ba17b22a10 tor: update to version 0.4.7.13
Maintainers  : @hauke (Hauke Mehrtens) and @tripolar (Peter Wagner)
Build system : Arch Linux x86_64
Build tested : r7800 OpenWrt git master (r22104-01262c921c)
Run tested   : r7800 OpenWrt git master (r22104-01262c921c)

Signed-off-by: Daniel Bermond <danielbermond@gmail.com>
(cherry picked from commit 5f0a9ec722)
2024-02-27 11:05:35 +01:00
Rui Salvaterra 90d25bc61c tor: bump to 0.4.7.12 stable
Quoting the changelog:

Changes in version 0.4.7.12 - 2022-12-06
  This version contains a major change that is a new key for moria1. Also, new
  metrics are exported on the MetricsPort for the congestion control
  subsystem.

  o Directory authority changes (moria1):
    - Rotate the relay identity key and v3 identity key for moria1. They
      have been online for more than a decade and refreshing keys
      periodically is good practice. Advertise new ports too, to avoid
      confusion. Closes ticket 40722.

  o Minor feature (Congestion control metrics):
    - Add additional metricsport relay metrics for congestion control.
      Closes ticket 40724.

  o Minor features (fallbackdir):
    - Regenerate fallback directories generated on December 06, 2022.

  o Minor features (geoip data):
    - Update the geoip files to match the IPFire Location Database, as
      retrieved on 2022/12/06.

  o Minor bugfixes (cpuworker, relay):
    - Fix an off by one overload calculation on the number of CPUs being
      used by our thread pool. Fixes bug 40719; bugfix on 0.3.5.1-alpha.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 3fd37a234c)
2024-02-27 11:05:28 +01:00
Rui Salvaterra d0f156a55e tor: bump to 0.4.7.11 stable
Quoting the changelog:

Changes in version 0.4.7.11 - 2022-11-10
  This version contains several major fixes aimed at helping defend against
  network denial of service. It is also extending drastically the MetricsPort
  for relays to help us gather more internal data to investigate performance
  and attacks.

  We strongly recommend to upgrade to this version especially for Exit relays
  in order to help the network defend against this ongoing DDoS.

  o Directory authority changes (dizum, Faravahar):
    - Change dizum IP address. Closes ticket 40687.
    - Remove Faravahar until its operator, Sina, set it back up online
      outside of Team Cymru network. Closes ticket 40688.

  o Major bugfixes (geoip data):
    - IPFire informed us on August 12th that databases generated after
      (including) August 10th did not have proper ARIN network
      allocations. We are updating the database to use the one generated
      on August 9th, 2022. Fixes bug 40658; bugfix on 0.4.5.13.

  o Major bugfixes (onion service):
    - Set a much higher circuit build timeout for opened client rendezvous
      circuit. Before this, tor would time them out very quickly leading to
      unnecessary retries meaning more load on the network. Fixes bug 40694;
      bugfix on 0.3.5.1-alpha.

  o Major bugfixes (OSX):
    - Fix coarse-time computation on Apple platforms (like Mac M1) where
      the Mach absolute time ticks do not correspond directly to
      nanoseconds. Previously, we computed our shift value wrong, which
      led us to give incorrect timing results. Fixes bug 40684; bugfix
      on 0.3.3.1-alpha.

  o Major bugfixes (relay):
    - Improve security of our DNS cache by randomly clipping the TTL
      value. TROVE-2021-009. Fixes bug 40674; bugfix on 0.3.5.1-alpha.

  o Minor feature (Mac and iOS build):
    - Change how combine_libs works on Darwin like platforms to make
      sure we don't include any `__.SYMDEF` and `__.SYMDEF SORTED`
      symbols on the archive before we repack and run ${RANLIB} on the
      archive. This fixes a build issue with recent Xcode versions on
      Mac Silicon and iOS. Closes ticket 40683.

  o Minor feature (metrics):
    - Add various congestion control counters to the MetricsPort. Closes
      ticket 40708.

  o Minor feature (performance):
    - Bump the maximum amount of CPU that can be used from 16 to 128. Note
      that NumCPUs torrc option overrides this hardcoded maximum. Fixes bug
      40703; bugfix on 0.3.5.1-alpha.

  o Minor feature (relay):
    - Make an hardcoded value for the maximum of per CPU tasks into a
      consensus parameter.
    - Two new consensus parameters are added to control the wait time in
      queue of the onionskins. One of them is the torrc
      MaxOnionQueueDelay options which supersedes the consensus
      parameter. Closes ticket 40704.

  o Minor feature (relay, DoS):
    - Apply circuit creation anti-DoS defenses if the outbound circuit
      max cell queue size is reached too many times. This introduces two
      new consensus parameters to control the queue size limit and
      number of times allowed to go over that limit. Closes ticket 40680.

  o Minor feature (relay, metrics):
    - Add DoS defenses counter to MetricsPort.
    - Add congestion control RTT reset counter to MetricsPort.
    - Add counters to the MetricsPort how many connections, per type,
      are currently opened and how many were created.
    - Add relay flags from the consensus to the MetricsPort.
    - Add total number of opened circuits to MetricsPort.
    - Add total number of streams seen by an Exit to the MetricsPort.
    - Add traffic stats as in number of read/written bytes in total.
    - Related to ticket 40194.

  o Minor features (fallbackdir):
    - Regenerate fallback directories generated on November 10, 2022.

  o Minor features (geoip data):
    - Update the geoip files to match the IPFire Location Database, as
      retrieved on 2022/11/10.

  o Minor bugfixes (authorities, sandbox):
    - Allow to write file my-consensus-<flavor-name> to disk when
      sandbox is activated. Fixes bug 40663; bugfix on 0.3.5.1-alpha.

  o Minor bugfixes (dirauth):
    - Directory authorities stop voting a consensus "Measured" weight
      for relays with the Authority flag. Now these relays will be
      considered unmeasured, which should reserve their bandwidth for
      their dir auth role and minimize distractions from other roles. In
      place of the "Measured" weight, they now include a
      "MeasuredButAuthority" weight (not used by anything) so the
      bandwidth authority's opinion on this relay can be recorded for
      posterity. Lastly, remove the AuthDirDontVoteOnDirAuthBandwidth
      torrc option which never worked right. Fixes bugs 40698 and 40700;
      bugfix on 0.4.7.2-alpha.

  o Minor bugfixes (onion service client):
    - A collapsing onion service circuit should be seen as an
      "unreachable" error so it can be retried. Fixes bug 40692; bugfix
      on 0.3.5.1-alpha.

  o Minor bugfixes (onion service):
    - Make the service retry a rendezvous if the circuit is being
      repurposed for measurements. Fixes bug 40696; bugfix
      on 0.3.5.1-alpha.

  o Minor bugfixes (relay overload statistics):
    - Count total create cells vs dropped create cells properly, when
      assessing if our fraction of dropped cells is too high. We only
      count non-client circuits in the denominator, but we would include
      client circuits in the numerator, leading to surprising log lines
      claiming that we had dropped more than 100% of incoming create
      cells. Fixes bug 40673; bugfix on 0.4.7.1-alpha.

  o Code simplification and refactoring (bridges):
    - Remove unused code related to ExtPort connection ID. Fixes bug
      40648; bugfix on 0.3.5.1-alpha.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 9136ff1532)
2024-02-27 11:05:20 +01:00
Glenn Strauss 648ff8de32 lighttpd: update to lighttpd 1.4.74 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 4d8bb07b73)
2024-02-23 08:20:21 +01:00
krant 2968d5c501 squid: fix configure options
- Remove non-existing 'dlmalloc' option
- Use 'with-cap' instead of 'with-libcap'
- Use 'with-xml2' instead of 'with-libxml2'
- Patch configure.ac to properly handle 'with-nettle'

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit f58be51721)
2024-02-21 17:13:58 +01:00
krant 72fc3a4ede squid: update to 6.7
- Switch URL to HTTPS
- Remove default/obsolete configure options
- Fix and refresh the patch

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit 4007a08529)
2024-02-21 17:13:48 +01:00
S. Brusch d2c632fe65 unbound: update to latest upstream release version 1.19.1
Maintainer: @EricLuehrsen
Fixes: CVE-2023-50387, CVE-2023-50868
Release notes: https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/
Run tested: BPi-R3, mediatek/filogic, OpenWrt 23.05.2
Signed-off-by: S. Brusch <ne20002@gmx.ch>
(cherry picked from commit 35ba14e50c)
2024-02-21 08:14:39 +01:00
Sebastian Kemper 16480e7038 tiff: force libdeflate support to off
Commit 81d2b72 added a package providing libdeflate. Tiff by default
links to it, causing a build error.

Package libtiff is missing dependencies for the following libraries:
libdeflate.so.0

This commit forces libdeflate use off to avoid this. No revision bump is
done because the package is currently not compiling anyway.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit e3c6da4e25)
2024-02-21 08:08:53 +01:00
Daniel Golle b72390bb95 libb64: add package
Add generic base64 encode/decode (static) library.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 6993b5d945)
2024-02-20 09:05:54 +01:00
Tianling Shen f5e224ced4 libdeflate: Update to 1.18
Release note:
https://github.com/ebiggers/libdeflate/blob/master/NEWS.md#version-118

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8591e8fb3f)
2024-02-20 09:05:31 +01:00
Daniel Golle c91b629ba6 libdeflate: add package
Add package for libdeflate which is a library for fast, whole-buffer
DEFLATE-based compression and decompression.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 81d2b7262e)
2024-02-20 09:05:26 +01:00
Daniel Golle 848f917a5e libdht: add package
Add Kademlia Distributed Hash Table (DHT) library.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit a281a8af9f)
2024-02-20 09:05:10 +01:00
Daniel Golle 9185c338f0 libutp: add package
Add Transmission version of the uTorrent Transport Protocol library.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1ecef46f1c)
2024-02-20 09:04:50 +01:00
Liangbin Lian 91d0edffae transmission: fix depends on libmbedtls
If a firmware build with curl without mbedtls, install transmission from openwrt official repo will fail to start

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit 2311e79218)
2024-02-20 09:01:19 +01:00
Tianling Shen 3b33d02a11
Merge pull request #23416 from systemcrash/p910nd_22_picks
P910nd v22.03 picks
2024-02-20 13:47:37 +08:00
Rosen Penev dd8e952e82 openconnect: update to 9.12
Remove upstream backport and fix libxml 1.12 compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-19 13:28:47 +01:00
Vladislav Grigoryev 463b115966 openconnect: add support for option --pfs
Add support for the OpenConnect option `--pfs`.
Designed to require perfect forward secrecy.

Signed-off-by: Vladislav Grigoryev <vg.aetera@gmail.com>
2024-02-19 13:28:47 +01:00
John Audia c2515de900 lxc: update to 5.0.3
Bump to latest upstream release.

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 1b5ee689f3)
2024-02-18 17:06:40 +01:00
Jeffery To 2c24e0e269 fail2ban: Fix compatibility with Python 3.11
This backports 2 commits from upstream[1]; the other 3 are not strictly
necessary. One of the patches has been updated to remove a change to a
regex that does not exist in 0.11.2.

[1]: https://github.com/fail2ban/fail2ban/pull/3267

Fixes: https://github.com/openwrt/packages/issues/22736

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0d9cc4aed2)
2024-02-18 17:04:01 +01:00
Marius Dinu b54b3ce36f transmission: add copy_file_range syscall to seccomp
Fixes this crash:

root@RPi3OpenWrt:/# grep -i seccomp /var/log/audit/audit.log
type=SECCOMP msg=audit(1689503903.597:16): auid=4294967295 uid=224 gid=1012 ses=4294967295 pid=1752 comm="transmission-da" exe="/usr/bin/transmission-daemon" sig=31 arch=c00000b7 syscall=285 compat=0 ip=0x7fa3b0eefc code=0x80000000
root@RPi3OpenWrt:/# ausyscall 285
copy_file_range
root@RPi3OpenWrt:/#

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit f0926b44f4)
2024-02-18 17:00:51 +01:00
Marius Dinu 359331cb4e transmission: add ftruncate syscall to seccomp
Fixes many crashes.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit a037254588)
2024-02-18 17:00:45 +01:00
Leonid Bogdanov 3be19d32d1 transmission: Fix env variables passing
It's not possible to configure custom Transmission web home as corresponding
env var gets overwritten by the command that sets CA bundle env var.

Signed-off-by: Leonid Bogdanov <leonidbogdanov86@gmail.com>
(cherry picked from commit c662aefd9a)
2024-02-18 17:00:35 +01:00
Marius Dinu 744a5b5b7a transmission: add missing nls.mk include
Fixes issue #21016.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit f66bcdd1b6)
2024-02-18 17:00:02 +01:00
Daniel Golle c2627a0f74 transmission: add missing ftruncate64 syscall
Transmission 4.0.3 started using the ftruncate64 syscall.
Add it to the list of allowed syscalls.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 142bbc77f1)
2024-02-18 16:59:56 +01:00
Daniel Golle 5e31c0d9cc transmission: add new syscall needed with musl 1.2.4
Apparently the "revcmsg" syscall is now needed, add it to the list
of allowed syscalls.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 6afcc1bc88)
2024-02-18 16:59:49 +01:00
Andrew Sim 1b12e2a9cc transmission: Update to v4.03
Update transmission to latest stable v4.0.3 release

Changelog: https://github.com/transmission/transmission/releases/tag/4.0.3

Signed-off-by: Andrew Sim <andrewsimz@gmail.com>
(cherry picked from commit f6c43e7c5a)
2024-02-18 16:59:36 +01:00
Daniel Golle 2482f02d83 transmission: update to version 4.0.2
See release notes for more details:
https://github.com/transmission/transmission/releases/tag/4.0.2

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 08ee78e022)
2024-02-18 16:59:31 +01:00
Daniel Golle ebd7ad6b97 transmission: update to version 4.0.1
This is a major release, both in numbering and in effort! It's been in
active development for over a year and has a huge list of changes --
over a thousand commits -- since Transmission 3.00.

For more information about the release see
https://github.com/transmission/transmission/releases/tag/4.0.0
https://github.com/transmission/transmission/releases/tag/4.0.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 96fd2dc531)
2024-02-18 16:59:04 +01:00
Rosen Penev 3ef8cf643f transmission: get rid of iconv dependency
No need for an external one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 142b73b5db)
2024-02-18 16:58:32 +01:00
Salim B cbfbb65532 transmission: retrieve boolean config opts using `config_get_bool`
The tranmission UCI config options

- `config_overwrite`
- `incomplete_dir_enabled`
- `watch_dir_enabled`

are all booleans, so we have to retrieve them using `config_get_bool` in order
to make sure they are properly interpreted in case the user sets them to a
keyword (`true`/`false`, `on`/`off` etc.) and not an integer (`0`/`1`).

Signed-off-by: Salim B <git@salim.space>
(cherry picked from commit 63dc13d7d2)
2024-02-18 16:54:58 +01:00
Alexander Egorenkov ea055982f4 transmission: add 'incomplete' and 'watch' dirs to ujail mounts
To fix the errors:

Sun Apr 10 14:19:41 2022 daemon.err transmission-daemon[29831]: [2022-04-10 14:19:41.098] watchdir Failed to open directory "/mnt/sda1/openwrt/transmission/watch" (2): No such file or directory (watchdir.c:358)

and

Sun Apr 10 14:20:18 2022 daemon.err transmission-daemon[30175]: [2022-04-10 14:20:18.641] Couldn't create "/mnt/sda1/openwrt/transmission/incomplete": Permission denied (file-posix.c:243)

References:
- https://github.com/openwrt/packages/issues/17674

Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>
(cherry picked from commit cbc1b0790d)
2024-02-18 16:54:36 +01:00
Florian Eckert bac36b9478 zabbix: update to version 6.4.7
Switch to current stable version 6.4.7.
See release notes:
https://www.zabbix.com/rn/rn6.4.7

So that the new version builds cleanly. The 'libevent2-pthreads' must be
added as dependency.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 4f9ced5cf9)
2024-02-17 15:01:51 +01:00
Christian Marangi 26e58ced08 zabbix: move to PCRE2 library
Move to PCRE2 library as PCRE is not EOL and won't receive any security
updates anymore.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 3dfb00c6c6)
2024-02-17 15:01:43 +01:00
Jeffery To 301dc0373d zabbix: Add "oldstable" source URL
Zabbix moved the 6.2 directory from "stable" into "oldstable". This adds
the "oldstable" URL to PKG_SOURCE_URL.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit c196aac4b1)
2024-02-17 15:01:38 +01:00
Florian Eckert c4d1804108 zabbix: add sqlite3 support
This change makes it possible to build zabbix with sqlite3 support.

Attention:
By selecting "SQLite" as "Database Software" you are not able
to build the zabbix-server and zabbix-server-frontend package anymore.
This database is not supported for this service.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 3c11092560)
2024-02-17 15:01:33 +01:00
Scott Roberts f86abce427 zabbix: update to 6.2.3
Refreshed patches.

Signed-off-by: Scott Roberts <ttocsr@gmail.com>
(cherry picked from commit 475d1cc0e9)
2024-02-17 15:01:18 +01:00