Commit Graph

28443 Commits

Author SHA1 Message Date
Florian Eckert b6cd34db8b zabbix: add fping dependency
If fping is not installed on the system the following message is show if
hosts should be monitored via icmp.

Log-Message:
"At least one of '/usr/sbin/fping', '/usr/sbin/fping6' must exist. Both
are missing in the system."

To fix this also, add a dependency to 'fping' for 'zabbix-server' and
'zabbix-proxy' for installation to allow icmp hosts monitoring.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 672a655d6b)
2024-02-17 15:01:12 +01:00
Julien Cassette c9c59f553e unbound: fix `create_host_record_from_host` error when `dns` is not set
The function `create_host_record_from_host` fails if the `dns` option
is not set in the host entry.
This sets a default to the `dns` variable in order to fix this error.

Fixes: #22691

Signed-off-by: Julien Cassette <julien.cassette@gmail.com>
(cherry picked from commit 8d60419251)
2024-02-17 14:59:31 +01:00
Julien Cassette e629fc3db5 unbound: create extra host records from DHCP static leases
The "Extra DNS" option allows to create records from the DHCP
"Hostnames" configuration entries.
This allows to create such records from the DHCP "Static leases"
configuration entries too.

Fixes: #22593

Signed-off-by: Julien Cassette <julien.cassette@gmail.com>
(cherry picked from commit b4a31f92de)
2024-02-17 14:59:25 +01:00
Eric Luehrsen 0f7d777b66 unbound: update to 1.19.0
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit 183f166279)
2024-02-17 14:58:47 +01:00
Eric Luehrsen c02c6e2013 unbound: update to 1.18.0
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit 03f70dcfd5)
2024-02-17 14:58:39 +01:00
Ted Hess cf077e7945 Unbound: Silence SSL unexpected eof messages
Refs: https://github.com/NLnetLabs/unbound/issues/812
      https://github.com/NLnetLabs/unbound/issues/846

This is a backport of: https://github.com/NLnetLabs/unbound/commit/d7e7761
and can be removed with the next release/update of the Unbound package

Signed-off-by: Ted Hess <thess@kitschensync.net>
(cherry picked from commit 2a71e17ca1)
2024-02-17 14:58:33 +01:00
John Audia d8ef968bd6 htop: update to 3.3.0
Changelog: https://github.com/htop-dev/htop/compare/3.2.2...3.3.0

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 3ee7b46610)
2024-02-17 14:55:54 +01:00
Alexander Egorenkov d63ee8c4be yt-dlp: bump to version 2023.12.30
Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>
(cherry picked from commit 5d3424f992)
2024-02-17 14:50:33 +01:00
Alexander Egorenkov b7330c9daa yt-dlp: bump to version 2023.11.16
Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>
(cherry picked from commit 707e87884d)
2024-02-17 14:50:24 +01:00
Rani Hod 596cd34952 yt-dlp: add missing dependencies
Added missing python3-{logging,uuid} dependencies.

Signed-off-by: Rani Hod <rani.hod@gmail.com>
(cherry picked from commit 40a680ffd7)
2024-02-17 14:50:07 +01:00
Jonas Jelonek 7823702d3f iperf3: update to 3.16
notable changes:
- multithreading support

changelog: https://github.com/esnet/iperf/releases/tag/3.16

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
(cherry picked from commit bdb6d2a37f)
2024-02-16 19:40:31 +01:00
Jakub Raczynski deb51a38bb iperf3: Fix dependecy conflict with iperf3-ssl
When selecting both iperf3 and iperf3 ssl, there is a problem that
both packages install same binary file.
This patch fixes this issue by adding conflict between those packages.

Signed-off-by: Jakub Raczynski <myszsoda@gmail.com>
(cherry picked from commit cea45c75c0)
2024-02-16 19:40:26 +01:00
Alexander Couzens a58f5da25d net/iperf3: assign PKG_CPE_ID
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
(cherry picked from commit e97f763a72)
2024-02-16 19:40:17 +01:00
Leo Douglas 3f85f0fd83 iperf3: update to 3.15
see changelog: https://github.com/esnet/iperf/releases/tag/3.15.

Signed-off-by: Leo Douglas <douglarek@gmail.com>
(cherry picked from commit 8a223d4724)
2024-02-16 19:40:11 +01:00
John Audia ac44c9e297 iperf3: update to 3.14
Release Notes:
https://github.com/esnet/iperf/blob/master/RELNOTES.md

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 8c0afc4cab)
2024-02-16 19:40:05 +01:00
Nick Hainke e72dcedacb iperf3: update to 3.13
Release Notes:
https://software.es.net/iperf/news.html#iperf-3-13-released

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 1bfd2f7ade)
2024-02-16 19:39:58 +01:00
Nick Hainke 80c30513f7 iperf3: update to 3.12
Release Notes:
https://groups.google.com/g/iperf-dev/c/_DgSWrpl9Gk?pli=1

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 431016a23d)
2024-02-16 19:39:51 +01:00
Nick Hainke 664368b890 iperf3: fix install section of Makefile and dependencies
In the Makefile the library installation was accidentally called
"Package/iperf3/install" and not "Package/libiperf3/install". Fix this
typo. Thanks to Hartmut spotting this.

Also the iperf3-ssl does not need to depend on libiperf3.

Fixes ae48be8e21 ("iperf3: add shared libiperf library and link iperf3 dynamically")

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit dc59d98c2c)
2024-02-16 19:39:44 +01:00
Nick Hainke 770e595ee9 iperf3: add shared libiperf library and link iperf3 dynamically
Add library for creating own functions with iperf3 functionality.
Example: https://github.com/esnet/iperf/blob/master/examples/mis.c
This library is needed by python3-iperf3.

Build iperf3 binary with dynamically linked libiperf3. However, still
build iperf3-ssl as static binary due to a lack of shipping two libiperf
versions.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit ae48be8e21)
2024-02-16 19:39:37 +01:00
Jan Hák c32ee50e8b knot: update to version 3.3.4
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 66c1065b45)
2024-02-16 19:35:46 +01:00
Jan Hák beb955a29d knot: update to version 3.3.3
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit a693dd5821)
2024-02-16 19:35:41 +01:00
Jan Hák d8d0257015 knot: update to version 3.3.2
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit fbfa63a03b)
2024-02-16 19:35:34 +01:00
Noah Meyerhans a9f1d7095c bind: bump to 9.18.24
Fixes CVEs:

- CVE-2023-50387: Validating DNS messages containing a lot of DNSSEC signatures
  could cause excessive CPU load, leading to a denial-of-service condition.
- CVE-2023-50868: Preparing an NSEC3 closest encloser proof could cause
  excessive CPU load, leading to a denial-of-service condition.
- CVE-2023-4408: Parsing DNS messages with many different names could cause
  excessive CPU load.
- CVE-2023-5517: Specific queries could cause named to crash with an assertion
  failure when nxdomain-redirect was enabled.
- CVE-2023-5679: A bad interaction between DNS64 and serve-stale could cause
  named to crash with an assertion failure, when both of these features were
  enabled.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit d277e41e78)
2024-02-16 19:21:54 +01:00
Marius Dinu b5911e2984 transmission: add copy_file_range syscall to seccomp
Fixes this crash:

root@RPi3OpenWrt:/# grep -i seccomp /var/log/audit/audit.log
type=SECCOMP msg=audit(1689503903.597:16): auid=4294967295 uid=224 gid=1012 ses=4294967295 pid=1752 comm="transmission-da" exe="/usr/bin/transmission-daemon" sig=31 arch=c00000b7 syscall=285 compat=0 ip=0x7fa3b0eefc code=0x80000000
root@RPi3OpenWrt:/# ausyscall 285
copy_file_range
root@RPi3OpenWrt:/#

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit f0926b44f4)
2024-02-16 19:14:29 +01:00
Peter van Dijk eb7593ef02 pdns-recursor: update to 4.8.6 (fixes CVE-2023-50387, CVE-2023-50868)
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2024-02-16 14:05:23 +08:00
Eneas U de Queiroz c9362686b9 squid: bump to release 5.7
This is the latest version and brings compatibility with OpenSSL 3.0.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 78dcc29e47)
2024-02-15 07:48:44 +01:00
Paul Donald 455cb66663 p910nd: bump release
Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 9dad4285d3)
2024-02-15 02:41:25 +01:00
Paul Donald 563b526d4e p910nd: hotplug shellcheck fixes
Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 77f47a6341)
2024-02-15 00:05:59 +01:00
Paul Donald 4099d99a1a p910nd: init: check device (/dev/usb/lpX) existence
this prevents the daemon exiting when a configured device
is not plugged in.

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 4d461aacca)
2024-02-15 00:05:59 +01:00
Paul Donald b5b755a736 p910nd: init: partial fix for openwrt/packages#10496
Harmless to carry this fix until procd.sh adds the param

This parameter will mean umdns advertises not just "OpenWrt" but a more
appropriate string:

"Apple LaserWriter Pro 630"

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 60be001775)
2024-02-15 00:05:59 +01:00
Paul Donald f946b2e4bf p910nd: hotplug+init: include extra ieee1284 properties
Apple and macOS GUI co-opts the mDNS note= param as "Location"

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit c74f82e17b)
2024-02-15 00:05:59 +01:00
Paul Donald b5607f4e10 p910nd: hotplug: minor bug fixes
Commit driver_home defaults before continuing

Fix missing path for serial number acquisition

Store current device if no previously configured device had one.
Also set CHAR_DEV so the printer can get its driver sent on first run.

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit c54cb399f3)
2024-02-15 00:05:59 +01:00
Paul Donald b7f89169a3 p910nd: hotplug: small refactor
replace -a with &&

shorten uci commands via variables

add optional ieee1284_id parameters

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit d1b868b407)
2024-02-15 00:05:59 +01:00
Paul Donald 12c0db6867 p910nd: init: add txtvers=1 to mDNS properties
The spec https://developer.apple.com/bonjour/printing-specification/bonjourprinting-1.2.1.pdf
notes:

... if the meaning of any of the TXT record keys is changed, the txtvers value
will be incremented. The current value of this key is “1”, and if this key does not exist in
the TXT record, the default value of “1” is assumed. The txtvers SHOULD be the first
key/value pair in the TXT record.

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 55d00e3821)
2024-02-15 00:05:59 +01:00
Paul Donald a6fe00eb7a p910nd: init: line-break and conditionalize mDNS properties
Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit d939c5c3aa)
2024-02-15 00:05:59 +01:00
Paul Donald 84a6d8427a p910nd: init: only run mDNS changes if mdns is set to on
i.e. don't do the extra work unless mdns setting is enabled

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 2c5927cfac)
2024-02-15 00:05:59 +01:00
Paul Donald 852746e9c9 p910nd: init script
Don't run procd with a name of p9100d or p9101d etc.
Use the original binary name: p910nd.

This way, all supplied parameters should be visible via e.g.:

ps
xargs -0 < /proc/{procid}/cmdline

Revise all p910nd strings to the variable DAEMON_NAME or CONFIG where
appropriate.

Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 3f04d2d791)
2024-02-15 00:05:59 +01:00
Paul Donald fab3288a4a p910nd: hotplug script
Signed-off-by: Paul Donald <newtwen@gmail.com>
(cherry picked from commit 825b22a4db)
2024-02-15 00:05:46 +01:00
Olivier Poitrey eb8d12af6b nextdns: Update to version 1.42.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2024-02-04 16:09:06 -08:00
Sergey Ponomarev ac3fa0b87e
cloudflared: refine config.yml
The config.yml is an example of a tunnel local configuration.
But the cloudlfared treat it as a real config and fails to start.
So to avoid problems let's comment all the statements.

The `url: http://localhost:8000` is not a valid config option.

Additionally add a smale of configuring ingres rules.

The cloudflared.config has missing option token.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
(cherry picked from commit b3580a76d8)
2024-02-04 15:00:52 +08:00
Tianling Shen 80b3c476a7
rclone: Update to 1.65.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4437234dc4)
2024-02-04 15:00:49 +08:00
Stan Grishin 6d75c03d78
Merge pull request #23254 from stangri/openwrt-22.03-curl
[22.03] curl: update to 8.6.0
2024-02-03 16:15:40 -07:00
Konstantin Demin 85c29ebd48 curl: update to 8.6.0
* https://curl.se/changes.html#8_6_0

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
(cherry picked from commit 0f2c98d53f)
2024-02-02 13:48:49 +00:00
Ray Wang 8faff07237 natmap: update to 20240126
Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit 42c6e10ada)
2024-01-28 16:26:30 +08:00
Tianling Shen 02abbdf6f6
v2raya: do not allow changing config/log directory
We need stable path to persist configurations and read log from LuCI.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 272cff0d1c)
2024-01-26 12:37:30 +08:00
Tianling Shen 45d7492bfe
v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1aaa5c045d)
2024-01-26 12:36:28 +08:00
Tianling Shen 41f1bcb0a0
rclone: Update to 1.65.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 05b61b3b6d)
2024-01-26 12:35:26 +08:00
Tianling Shen 958a82d138
rclone: Update to 1.65.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ac17302410)
2024-01-26 12:35:21 +08:00
Michael Heimpold 444cedf4ff
Merge pull request #22999 from mhei/22.03-php8-update-to-8.1.27
[22.03] php8: update to 8.1.27
2023-12-29 10:04:00 +01:00
Rosen Penev 8661c37221 mosquitto: update to 2.0.18
Switch to CMake. Allows faster compilation.

Small Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit aa89f847c6)
2023-12-29 10:00:52 +01:00