Commit Graph

30146 Commits

Author SHA1 Message Date
Oskari Rauta 9596937de3 dockerd: busybox compatibility
build hosts with busybox fail with long options on rm
command. Short versions are supported by all, so this
makes it script compatible with busybox hosts as well.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-17 16:36:30 +03:00
Ted Hess 8b2ccd8177
Merge pull request #22128 from BKPepe/ffmpeg
ffmpeg: update to version 5.1.3
2023-09-17 07:13:57 -04:00
Josef Schlehofer 87b2a2bb57 ffmpeg: update to version 5.1.3
Fixes CVEs:
CVE-2022-3964 [1]
CVE-2022-3965 [2]

[1] https://nvd.nist.gov/vuln/detail/CVE-2022-3964
[2] https://nvd.nist.gov/vuln/detail/CVE-2022-3965

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-17 09:46:19 +02:00
Leo Douglas 8a223d4724 iperf3: update to 3.15
see changelog: https://github.com/esnet/iperf/releases/tag/3.15.

Signed-off-by: Leo Douglas <douglarek@gmail.com>
2023-09-17 07:38:54 +02:00
Stan Grishin 6fa542b84c
Merge pull request #22122 from stangri/master-https-dns-proxy
https-dns-proxy: improve boot up start
2023-09-16 18:59:22 -07:00
Stan Grishin 22d21e28a7 https-dns-proxy: improve boot up startup
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2023-09-16 23:45:20 +00:00
Stan Grishin 3653eb3d4a
Merge pull request #22118 from stangri/master-adblock-fast
adblock-fast: bugfix: remove domains on allow
2023-09-16 16:43:31 -07:00
Oskari Rauta 75064f1bf7 aardvark-dns: update to 1.7.0
Changelog: https://github.com/containers/aardvark-dns/compare/v1.6.0...v1.7.0

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-16 21:43:46 +08:00
Oskari Rauta efb06993d7 netavark: update to 1.7.0
Changelog: https://github.com/containers/netavark/compare/v1.6.0...v1.7.0

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-16 21:43:27 +08:00
Oskari Rauta 56930920a4 podman: update to 4.6.2
patch refreshed.

Changelog:

 - Fixed a performance issue when calculating diff sizes in overlay. The podman system df command should see a significant performance improvement.
 - Fixed a bug where containers in a pod would use the pod restart policy over the set container restart policy.
 - Fixed a bug in the Compat Build endpoint where the pull query parameter did not parse 0/1 as a boolean.
 - Updated the containers/storage library to v1.48.1

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-16 21:43:15 +08:00
Oskari Rauta 7728e1eb39 crun: update to 1.9
Changes:
 - support arbitrary idmapped mounts. Now it is possible to specify a mapping for any type of mount, not only bind mounts.
 - add support for "ridmap" mount option to support recursive idmapped mounts.
 - fix check for oom_score_adj. Write the oom_score_adj file even when the new value is 0.
 - features: Support mountExtensions.
 - correctly handle unknown signal string when it doesn't start with a digit.
 - do not attempt to join again already joined namespace.
 - wasmer: use latest wasix API.
 - refresh libocispec

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-16 21:42:58 +08:00
Oskari Rauta 3d88d18ee2 conmon: update to 2.1.8
Bug fixes:
 - stdio: ignore EIO for terminals
 - ensure console socket buffers are properly sized
 - conmon: drop return after pexit()
 - ctrl: make accept4 failures fatal
 - logging: avoid opening /dev/null for each write
 - oom: restore old OOM score
 - Use default umask 0022

Misc changes:
 - cli: log parsing errors to stderr
 - Changes to build conmon for riscv64
 - Changes to build conmon for ppc64le
 - Fix close_other_fds on FreeBSD

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-16 21:42:34 +08:00
Stan Grishin bce310bfcd adblock-fast: bugfix: remove domains on allow
* fix sed command to properly remove allowed domains from block-file

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2023-09-16 13:13:49 +00:00
Stan Grishin 6105cb2752
Merge pull request #22109 from BKPepe/curl-update
curl: update to version 8.3.0
2023-09-16 03:25:03 -07:00
Josef Schlehofer bb4c3b5a20 bandwidthd: drop this package
This package is not maintained by upstream anymore as they replace it by Ntopng 3. [1]
Upstream repository is archived and read only since February 2022 [2]

[1] https://community.nethserver.org/t/bandwidthd-for-nethserver-7/4071/18
[2] https://github.com/NethServer/bandwidthd

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-16 12:17:22 +02:00
Josef Schlehofer 07c0a5eab8 curl: update to version 8.3.0
Release notes:
https://curl.se/changes.html#8_3_0

Fixes:
CVE-2023-38039 [1]

[1] https://curl.se/docs/CVE-2023-38039.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-16 11:23:06 +02:00
Martin Schiller d42a6758b9 ovpn-dco: fix package dependencies
We have to add an "IPV6:" in front of the kmod-udptunnel6 to fix
redundant dependencies with the openvpn-* packages.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2023-09-16 17:03:03 +08:00
Olivier Poitrey 66b72b6db3 nextdns: Update to version 1.40.1
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2023-09-15 23:41:21 +08:00
Tianling Shen c1fbf1f419
Merge pull request #22104 from douglarek/zt
zerotier: update to 1.12.2
2023-09-15 23:41:05 +08:00
Josef Schlehofer 536569ca62 dnscrypt-proxy2: update to version 2.1.5
Fixes compilation with Go 1.21+.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-15 10:23:20 +02:00
Josef Schlehofer c43599b0c8 syslog-ng: update to version 4.3.1
Makefile changes:
- Since version 4.3.0, there is required to use pcre2 instead of pcre
Reference: https://github.com/syslog-ng/syslog-ng/pull/4537

- Disable c++ support by default to avoid picking libstdcpp dependency
Reference: https://github.com/syslog-ng/syslog-ng/pull/4484

Config changes:
- Bump version in config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-15 09:27:40 +02:00
Leo Douglas 0343dffefa
zerotier: update to 1.12.2
see changelog: https://github.com/zerotier/ZeroTierOne/releases/tag/1.12.2.

Signed-off-by: Leo Douglas <douglarek@gmail.com>
2023-09-15 10:17:57 +08:00
Leo Douglas b76a0d6aa6 sing-box: update to 1.4.3
see changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.4.3

Signed-off-by: Leo Douglas <douglarek@gmail.com>
2023-09-15 09:50:14 +08:00
Tyler Young ccde8d18a1 tailscale: set nftables as default
This changes the default firewall method used by Tailscale to nftables.
The 'autodetection' mode is only supported by arm64 and amd64 for now[1].
This causes mips devices to not do proper detection and incorrectly default back to
iptables.

I added a fw_mode variable to the tailscale.conf file that could be
set to iptables for easy conversion for someone still using iptables.
I was able to test on an older mips device and my current aarch64
without issues.

Also a few readme updates to bring it up to the current status.

1. dc7aa98b76/util/linuxfw/linuxfw_unsupported.go (L4C58-L4C58)

Signed-off-by: Tyler Young <git@yfh.addy.io>
2023-09-15 09:49:47 +08:00
John Audia 633950a384 snort3: update to 3.1.70.0
Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.1.70.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2023 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.12
           Using LuaJIT version 2.1.0-beta3
           Using OpenSSL 3.0.10 1 Aug 2023
           Using libpcap version 1.10.4 (with TPACKET_V3)
           Using PCRE version 8.45 2021-06-15
           Using ZLIB version 1.2.13
           Using Hyperscan version 5.4.2 2023-09-07

Signed-off-by: John Audia <therealgraysky@proton.me>
2023-09-14 23:46:46 +02:00
Jeffery To e309346104 python-setuptools: Update to 68.2.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-09-14 21:38:03 +08:00
Jeffery To 21eb9b7456 python-build: Update to 1.0.3
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-09-14 21:37:51 +08:00
Tianling Shen 701368824e
Merge pull request #22095 from jefferyto/rust-arch-depends
rust: Move RUST_ARCH_DEPENDS into rust-values.mk
2023-09-14 21:28:06 +08:00
Peter van Dijk e25bb510de dnsdist: update to 1.8.1
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2023-09-13 12:39:34 +08:00
Jeffery To 985738b399
rust: Move RUST_ARCH_DEPENDS into rust-values.mk
This allows other packages access to RUST_ARCH_DEPENDS by including
rust-values.mk, instead of rust-package.mk which also sets
Build/Compile.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-09-13 04:27:11 +08:00
Florian Eckert a56e111c49 mwan3: fix mwan3_connected ubus output
During the renameing of mwan3_connected_v4 to mwan3_connected_ipv4 and
mwan3_connected_v6 to mwan3_connected_ipv6 the adjustment in the ubus
call was forgotten. This commit fixes this.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-09-12 16:03:18 +02:00
Carsten Schuette d9acb54dc4 dawn: Add PKG_BUILD_FLAGS:=no-lto because lto causes strange SegFaults
Signed-off-by: Carsten Schuette <schuettecarsten@googlemail.com>
2023-09-11 09:01:26 +02:00
Carsten Schuette 6c5c99d206 dawn: Update to 2023-05-14
Signed-off-by: Carsten Schuette <schuettecarsten@googlemail.com>
2023-09-11 09:01:26 +02:00
Tianling Shen 9cab7fc6f7
Merge pull request #22083 from jefferyto/golang-1.21.1
golang: Update to 1.21.1
2023-09-11 09:55:32 +08:00
Jeffery To d9a999521e
golang: Update to 1.21.1
Includes fixes for:

* CVE-2023-39318: html/template: improper handling of HTML-like comments
  within script contexts

* CVE-2023-39319: html/template: improper handling of special tags
  within script contexts

* CVE-2023-39320: cmd/go: go.mod toolchain directive allows arbitrary
  execution

* CVE-2023-39321 and CVE-2023-39322: crypto/tls: panic when processing
  partial post-handshake message in QUICConn.HandleData

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-09-11 03:57:45 +08:00
Alexandru Ardelean b2fc84a21b
Merge pull request #21935 from G10h4ck/libssh-mbedtls
libssh: compile against MbedTLS instead of OpenSSL
2023-09-10 20:07:49 +03:00
Alexandru Ardelean 4359bac7c1
Merge pull request #21958 from graysky2/ncdu
ncdu: update to 1.18.1
2023-09-10 20:04:42 +03:00
Alexandru Ardelean 1de5a85a93
Merge pull request #21856 from AuthorReflex/ovpn-2.6.6
openvpn: update to 2.6.6
2023-09-10 20:04:08 +03:00
Alexandru Ardelean 9ca55bf34f
Merge pull request #22072 from commodo/python-updates1
chardet,numpy,django: bump versions
2023-09-10 20:02:01 +03:00
Alexandru Ardelean cac6c53d2e
Merge pull request #22043 from jefferyto/python-crcmod-package-section
python-crcmod: Fix package section
2023-09-10 16:18:35 +03:00
Alexandru Ardelean 28d5ed0da9
Merge pull request #22067 from robimarko/dbus
dbus: update to 1.14.10 and take ower maintainership
2023-09-10 16:18:06 +03:00
Alexandru Ardelean 46523843b9
Merge pull request #22030 from BKPepe/retake-packages
treewide: take maintainership from Karel
2023-09-10 16:17:11 +03:00
Alexandru Ardelean 681651db4f
Merge pull request #22039 from jefferyto/xmltodict-0.13.0
xmltodict: Update to 0.13.0, rename source package
2023-09-10 16:14:59 +03:00
Alexandru Ardelean d94a5cf585
Merge pull request #22038 from jefferyto/ruamel-yaml-0.17.32
ruamel-yaml: Update to 0.17.32, rename source package
2023-09-10 16:14:41 +03:00
Alexandru Ardelean ff83a84449
Merge pull request #22037 from jefferyto/python-zipp-3.16.2
python-zipp: Update to 3.16.2, update list of dependencies
2023-09-10 16:14:15 +03:00
Alexandru Ardelean f3f7f213e9
Merge pull request #22036 from jefferyto/python-zeroconf-0.97.0
python-zeroconf: Update to 0.97.0, update list of dependencies
2023-09-10 16:14:00 +03:00
Alexandru Ardelean 6cccbc7449
Merge pull request #22035 from jefferyto/python-yaml-6.0.1
python-yaml: Update to 6.0.1
2023-09-10 16:13:22 +03:00
Alexandru Ardelean 5215f65cd3
Merge pull request #22034 from jefferyto/python-build-1.0.0
python-build: Update to 1.0.0
2023-09-10 16:12:18 +03:00
Alexandru Ardelean 34ddaf88b4
Merge pull request #22041 from jefferyto/python-cryptodomex-3.18.0
python-cryptodomex: Update to 3.18.0, refresh patches
2023-09-10 16:11:52 +03:00
Alexandru Ardelean e5d80255bd
Merge pull request #22040 from jefferyto/python-cryptodome-3.18.0
python-cryptodome: Update to 3.18.0, refresh patches
2023-09-10 16:11:40 +03:00