Commit Graph

31621 Commits

Author SHA1 Message Date
Josef Schlehofer 72e41a8fe1
Merge pull request #23777 from jmarcet/docker-compose
docker-compose: Update to version 2.26.1
2024-03-31 15:24:12 +02:00
Javier Marcet 261b38c14b docker-compose: add PKG_NAME to PKG_SOURCE
Before this change, the tarball was downloaded as vVERSION.tar.gz.
For example, it was v2.26.1.tar.gz and that file was put into the dl folder
within the OpenWrt build system.

After this change, the tarball is properly downloaded as NAME-vVERSION.tar.gz.
In this case, it will look like this: docker-compose-v.2.26.1.tar.gz

The advantages of using this:
- Users, developers will know that what they downloaded (it has name and version)
- The tarball will not be overwritten by another package with the same version.

Signed-off-by: Javier Marcet <javier@marcet.info>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[added commit message]
2024-03-31 13:06:42 +02:00
Javier Marcet 9db6b4abab docker-compose: Update to version 2.26.1
Release notes:
https://github.com/docker/compose/releases/tag/v2.26.1

Signed-off-by: Javier Marcet <javier@marcet.info>
2024-03-31 13:06:28 +02:00
Andrea Pesaresi f8a7ee7f47 kmsbd-tools: switch to use tagged release
Instead of checking Git sources, we will use now tagged releases.

This solve the strange version 0~3.5.1-r1, now will be 3.5.2-r2

Signed-off-by: Andrea Pesaresi <andreapesaresi82@gmail.com>
2024-03-31 09:52:52 +02:00
jiangslee 1f9349d12a netbird: update to 0.26.6
Signed-off-by: jiangslee <jiangsili@qq.com>
2024-03-30 15:00:07 +08:00
Zephyr Lykos 6c5dc8daff tailscale: Update to 1.62.1
https://github.com/tailscale/tailscale/releases/tag/v1.62.1

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
2024-03-30 14:59:54 +08:00
Stan Grishin 003d994835
Merge pull request #23743 from stangri/master-nghttp3
nghttp3: update to 1.2.0
2024-03-29 14:56:56 -06:00
Stan Grishin e67432bc7d
Merge pull request #23744 from stangri/master-ngtcp2
ngtcp2: update to 1.4.0
2024-03-29 14:55:35 -06:00
Petr Štetiar 9e46b47ca3
Revert "tools/xz: update to 5.6.1" (CVE-2024-3094)
This reverts commit 714c91d1a63f29650abaa9cf69ffa47cf2c70297 as probably
the upstream xz repository and the xz tarballs have been backdoored.

References: https://www.openwall.com/lists/oss-security/2024/03/29/4
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2024-03-29 17:31:17 +00:00
Philip Prindeville ccabe6d8e6 perl-text-csv_xs: Update to 1.53
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-03-29 08:03:49 +01:00
Jonas Jelonek 55bc293291 eza: update to 0.18.9
Release notes:
0.18.8 - https://github.com/eza-community/eza/releases/tag/v0.18.8
0.18.9 - https://github.com/eza-community/eza/releases/tag/v0.18.9

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
2024-03-28 12:35:45 +08:00
Philip Prindeville 509d1ecca7 strongswan: drop unneeded sleep patch
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-03-27 20:17:40 -06:00
Philip Prindeville b20950a515 strongswan: backport upstream MUSL fix for farp_spoofer.c
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-03-27 20:17:40 -06:00
Philip Prindeville 04c1d688de strongswan: backport upstream MUSL fix for pf_handler.c
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-03-27 20:17:40 -06:00
Philip Prindeville 544abeb36a strongswan: simplify MUSL patch
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-03-27 20:17:40 -06:00
Philip Prindeville a90d387e86 strongswan: Update to 5.9.14
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-03-27 20:17:40 -06:00
Thibaut VARÈNE bc33522715 uspot: update to Git HEAD (2024-03-25)
56eebdad085e uspot: wrap spotfilter device under tip_mode
1a96d57e5fe0 uspot: client_enable() wrap spotfilter data in tip_mode
fe12f9a7abde uspot: clear ratelimit state on startup/shutdown
976badc4d0b6 update README
53b8cb88a94a Makefile: require minimum ucode version
ff6163190d5a uspot/portal: report client_enable() failure
8601d9199233 include sample radcli dictionaries
c670f6c4b48f update README
094f0df88150 uspot: work around ucode#191 missing in 23.05

Update the package Makefile to reflect the changes from the following
above-listed commit:

53b8cb88a94a Makefile: require minimum ucode version

Fixes: https://github.com/f00b4r0/uspot/issues/4
Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
2024-03-27 17:30:57 +08:00
Jan Klos ae870abc89 nginx: update to 1.25.4
Signed-off-by: Jan Klos <jan@klos.xyz>
2024-03-26 16:46:42 +01:00
krant 7f01006f96 rust: update to 1.77.0
- Restore patch hunk mis-deleted in dccb910
- Refresh patches
- Remove --enable-missing-tools configure option deleted in the upstream

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-03-26 11:45:24 +02:00
Peca Nesovanovic 152d80ce13 p910nd: fix running multiple instances
Compile tested: (ramips, rb760igs, 23.05 snapshot)
Run tested: (ramips, rb760igs, 23.05 snapshot, tests done)

Description:
In case we have multiple device defined in /etc/config/p910nd then init script will try to start multiple instance with same instance name
drop instance name as resolution

tested on 23.05 snapshot with 2 USB printers

Signed-off-by: Peca Nesovanovic <peca.nesovanovic@sattrakt.com>
2024-03-26 11:57:52 +08:00
Philip Prindeville 45625ee37e clixon: Update to 7.0.0
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-03-25 13:17:22 -06:00
brvphoenix 1ca47e0ed4 sing-box: update to 1.8.10
Signed-off-by: brvphoenix <brvphoenix@gmail.com>
2024-03-26 02:36:44 +08:00
brvphoenix da03a29cda sing-box: restart if the specified interfaces start up
Signed-off-by: brvphoenix <brvphoenix@gmail.com>
2024-03-26 02:36:44 +08:00
Oskari Rauta 551ff0f810 podman: update to v5.0.0
Major version update to podman

 - Obsolete patch removed
 - patch 010-do-not-build-docs.patch refreshed

Changelog: https://github.com/containers/podman/releases/tag/v5.0.0

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2024-03-26 00:26:14 +08:00
Oskari Rauta 680bb77421 lsd: update to v1.1.1
Changes:
 - hex color parser for themes
 - adds truncate option
 - adds --literal flag
 - adds disable option for permission
 - upgrades many included sub modules/crates
 - Fixes literal flags not regocnized
 - adds and improves icons

Full changelogs:
 - v1.1.0: https://github.com/lsd-rs/lsd/releases/tag/v1.1.0
 - v1.1.1: https://github.com/lsd-rs/lsd/releases/tag/v1.1.1

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2024-03-26 00:26:02 +08:00
Philip Prindeville 79fb3c5bd9 cligen: Update to 7.0.0
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-03-25 10:22:02 -06:00
Philip Prindeville c8d934b6df perl-cgi: Update to 4.64
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-03-25 10:19:50 -06:00
Josef Schlehofer 5aee095cda psmisc: update to version 23.7
Release notes:
https://gitlab.com/psmisc/psmisc/-/compare/v23.4...v23.7?from_project_id=334185&straight=false

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2024-03-25 13:57:48 +01:00
Stan Grishin fbacca12d8 ngtcp2: update to 1.4.0
* update PKG_RELEASE to be apk-compatible
* update PKG_SOURCE/PKG_SOURCE_URL so that it builds
* drop dependency on libopenssl as other SSL libs start to support HTTP/3

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-03-25 09:36:30 +00:00
Stan Grishin 54274d4d90 nghttp3: update to 1.2.0
* update PKG_RELEASE to be apk-compatible
* update PKG_SOURCE/PKG_SOURCE_URL so that it builds

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-03-25 09:31:11 +00:00
krant e616f879c0 opus: revert to autotools
Latest update in 6c3db5d has switched build system to Meson,
which is broken on several non-SIMD platforms. Turns out,
Meson support is not yet stable enough in the upstream,
so we revert to autotools and drop meson-related patch.

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-03-25 17:06:55 +08:00
Hannu Nyman b8d0049e7c irqbalance: update to version 1.9.4
Update irqbalance to version 1.9.4.

* refresh version in meson patch
* remove EINVAL handling patch as upstream seems to have silenced
  the log spam for unmanageable IRQs

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2024-03-24 23:23:16 +02:00
Michael Heimpold 887805fa95
Merge pull request #23681 from jummo/add_ddns_servercow
ddns-scripts: Add servercow.de as DDNS provider
2024-03-24 16:56:08 +01:00
Stan Grishin aa802e82d6
Merge pull request #23716 from stangri/master-https-dns-proxy
https-dns-proxy: prepare migration to APK
2024-03-24 07:55:05 -06:00
Stan Grishin cef4854ea5
Merge pull request #23717 from stangri/master-adblock-fast
adblock-fast: prepare migration to APK
2024-03-24 07:08:57 -06:00
Stan Grishin cd46684e28
Merge pull request #23715 from stangri/master-nebula
nebula: prepare migration to APK
2024-03-24 07:07:26 -06:00
Stan Grishin 7e4e72373a
Merge pull request #23714 from stangri/master-pbr
pbr: prepare migration to APK
2024-03-24 07:06:32 -06:00
Stan Grishin b8a8c480fc https-dns-proxy: prepare migration to APK
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2024-03-24 13:05:05 +00:00
Josef Schlehofer e5b561665a nnn: update to version 4.9
- Release notes:
https://github.com/jarun/nnn/compare/v4.4...v4.9

- Refresh patch to fix offset

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2024-03-24 12:34:48 +01:00
Michal Hrusecky 1131acf57f knot-resolver: Update to version 5.7.1
- Fixes CVE-2023-50868 and CVE-2023-50387
- Also, the resolver has not been called 'Knot DNS Resolver' for quite
some time, so fix that, too.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2024-03-24 11:35:38 +01:00
Šimon Bořek a68397ff77 knot-resolver: enable dnstap module build by default
'dnstap' module will be built but not loaded by default at runtime
(configuration must be provided for it to be loaded). It is still possible to
disable dnstap build manually using menuconfig.

"The dnstap module supports logging DNS requests and responses to a unix socket
in dnstap format using fstrm framing library. This logging is useful if you need
effectively log all DNS traffic."[^1]

Adds dependency on 'protobuf', 'protobuf-c', 'libfstrm'. Listed packages are
available from OpenWrt packages, have uncomplicated manifests and
while 'protobuf-c' doesn't have a maintainer since spring 2020, all the
packages (including 'protobuf-c') seem to be maintained - the last
updates of all of them in autumn 2021.

As stated by Vladimír Čunát from Knot Resolver team they build dnstap
while packaging for majority of standard Linux distributions.
Therefore this change brings us closer to expected default.

[^1]: https://knot-resolver.readthedocs.io/en/stable/modules-dnstap.html

Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
2024-03-24 11:35:28 +01:00
Šimon Bořek af521478f8 knot-resolver: do not overwrite -Ddnstap=enabled configuration
It was possible to enable dnstap in menuconfig, but the configuration
only added dependencies while leaving dnstap module build disabled.

Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
2024-03-24 11:35:18 +01:00
Hauke Mehrtens 50dffb7424 snort3: Fix compilation with GCC 13
This fixes a compile problem with GCC 13.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2024-03-24 10:15:42 +01:00
Hauke Mehrtens d4ef5bb60d gost_engine: Update to version 3.0.3
This version contains minor bugfixes.
It fixes a compile problem with GCC 13.

Changes: https://github.com/gost-engine/engine/compare/v3.0.1...v3.0.3

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2024-03-23 22:35:50 -07:00
krant 5debfae868 imagemagick: update to 7.1.1.29
- Don't ignore version suffix (upstream 7.1.1-29 becomes 7.1.1.29)
- Avoid superfluous libstdcpp dependency

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-03-23 22:33:50 -07:00
krant 0ba53d3a0d giflib: update to 5.2.2
Drop upstreamed CVE patches.

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-03-23 22:30:51 -07:00
Ivan Pavlov 35ef370178 openvpn: update to 2.6.10
This is a bugfix release containing several security fixes specific to the Windows platform.

Bug fixes
---------
- Windows: if the win-dco driver is used (default) and the GUI requests
  use of a proxy server, the connection would fail.  Disable DCO in
  this case.

- Compression: minor bugfix in checking option consistency vs. compiled-in
  algorithm support

- systemd unit files: remove obsolete syslog.target

Security fixes
--------------
- CVE-2024-27459: Windows: fix a possible stack overflow in the
  interactive service component which might lead to a local privilege
  escalation.

- CVE-2024-24974: Windows: disallow access to the interactive service
  pipe from remote computers.

- CVE-2024-27903: Windows: disallow loading of plugins from untrusted
  installation paths, which could be used to attack openvpn.exe via
  a malicious plugin.

For details refer to https://github.com/OpenVPN/openvpn/blob/v2.6.10/Changes.rst

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
2024-03-23 14:00:08 +01:00
Javier Marcet a7363a33ac docker-compose: Update to version 2.26.0
Signed-off-by: Javier Marcet <javier@marcet.info>
2024-03-23 13:59:41 +01:00
jiangslee b503f9f0df netbird: update to 0.26.3
Signed-off-by: jiangslee <jiangsili@qq.com>
2024-03-23 13:06:45 +08:00
Zephyr Lykos 8834608bc1 tailscale: Update to 1.62.0
https://github.com/tailscale/tailscale/releases/tag/v1.62.0

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
2024-03-23 13:05:17 +08:00