Commit Graph

29377 Commits

Author SHA1 Message Date
Nikos Mavrogiannopoulos 6ae1811ea4
Merge pull request #20970 from nmav/tmp-ocserv
ocserv: updated to 1.1.7
2023-05-12 15:53:44 +02:00
Florian Eckert c664b83535 glib2: fix host build offline download
If buildsystem does not have a internet connection, then the build
fails. This is because of the fact, that glib2 is downloading and building
the missing dependencies during host compilation.

This cannot be allowed to happen. The package must also be built without
an internet connection.

Adding the missing host build dependency and removing the 'forcefallback'
fixes this issue.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-05-12 11:11:46 +03:00
Michele Primavera 33e7dbadb0 libopen62541: Adding support
Open62541 is an opensource OPC UA library useful in IoT scenarios.

Signed-off-by: Michele Primavera <primavera@elmod.it>
2023-05-12 07:30:20 +08:00
Stan Grishin 643e501c8d pbr: bugfix: create IPv6 routes
* add missing space in str_contains
* unquote variable to make sure IPv6 rotues are added
* add IPv6 routes display to status output in nft mode

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2023-05-11 23:07:04 +00:00
Rafał Miłecki 90fef036fe lxc: set RUNTIME_PATH define to the /var/run path
The default runtime directory used by LXC is /run which doesn't exist
in OpenWrt. It causes errors like:

Failed to create lock for foo
lxc-create: foo: tools/lxc_create.c: main: 260 Failed to create lxc container

There has been workaround for that in the lxc-auto.init but it requires
installing "lxc-auto" package. Replacing that "ln -s" workaround with
Makefile specifying RUNTIME_PATH define allows using pure "lxc" in
OpenWrt (without the "lxc-auto").

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2023-05-11 18:23:23 +03:00
Rafał Miłecki 6020ca52bf wsdd2: fix stopping service
Function start_service() is called whenever service may need reloading.
If SMB server is not running it could be simply because it has been
stopped. Reloading service in such case is not an error so:
1. Don't log error as it isn't one
2. Don't exit with error code as it was confusing procd

This change fixes scenario like:
/etc/init.d/ksmbd stop
/etc/init.d/wsdd2 reload
(previously above wasn't stopping wsdd2)

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2023-05-11 18:21:42 +03:00
Jeffery To 2c54b7637e
python-incremental: Add missing host build dependencies
Fixes: 8d81b67327 ("python-incremental: Update to 22.10.0, redo patch, add host build")
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-11 15:42:33 +08:00
Alexandru Ardelean 9fb783712c
Merge pull request #20978 from jefferyto/numpy-build-fixes
numpy: Build fixes
2023-05-11 09:38:06 +03:00
Jeffery To bcba053fb0
python3-packages: Set PYTHON3_PKG_BUILD:=0
This sets PYTHON3_PKG_BUILD:=0 so that python3-package.mk does not set
any default build recipes.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-11 02:54:08 +08:00
Jeffery To 3cee44d888
numpy: Avoid build user config files
This stops numpy from reading .numpy-site.cfg in the build user's home
directory. The code actually tries to find both .numpy-site.cfg and
site.cfg in the user's home directory; this patch prevents both.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-11 02:46:57 +08:00
Jeffery To 5cafab68ff
numpy: Fix compilation when OpenBLAS support is not enabled
Currently, if OpenBLAS support is not enabled, a site.cfg file is not
written and numpy will use build host paths for libraries. If the build
host has any conflicting libraries, specifically libpython3.10.a, then
compilation will fail.

This ensures site.cfg is always written with buildroot paths.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-11 02:46:57 +08:00
Jeffery To 8d331953f3
numpy: Fix pyproject.toml-based build
The versions of setuptools and wheel pinned in pyproject.toml are older
than the versions available in the packages repo. This unpins the
versions so that the build can proceed.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-11 02:46:57 +08:00
Tianling Shen 0aff57d001
Merge pull request #20958 from jefferyto/python-trove-classifiers-2023.5.2
python-trove-classifiers: Update to 2023.5.2
2023-05-10 22:01:00 +08:00
Jeffery To 5ce254fd8e CI: Do package run-tests only if target packages were built
Currently, the package run-test phase will fail for PRs that only
add/update host-only packages, as no target packages (*.ipk) are built.

This checks if any target packages are built before attempting the
run-tests.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-10 11:52:51 +02:00
Jeffery To 955a90944b CI: Run "apt-get update" before installing signify-openbsd
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-10 11:52:51 +02:00
Juan del Bosque 96145db78a dovecot: Fix iconv macro is missing compile error
Fix a Dovecot compile error when building with no other packages than
the default in master build, because iconv macro is missing.

Fixes: #20677

Signed-off-by: Juan del Bosque <juan@web64.pro>
2023-05-10 14:02:20 +08:00
Jeffery To 8a36b03870
Merge pull request #20801 from jefferyto/python-pyproject
python: Add proper support for pyproject.toml-based builds, update Python packages for new build process
2023-05-10 12:11:07 +08:00
Georgi Valkov 83dd66fd34 coreutils: update to 9.3
Build system: Ubuntu Linux 22.04, macOS 12.6.5
Run-tested: x64, WRT3200ACM, TL-WR1043ND v4

[1] https://github.com/openwrt/packages/issues/20933
[2] https://debbugs.gnu.org/cgi/bugreport.cgi?bug=62404

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
2023-05-09 17:41:11 +08:00
Nikos Mavrogiannopoulos 8e498b214d ocserv: updated to 1.1.7
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2023-05-09 06:20:05 +02:00
Stan Grishin ee794aab11
Merge pull request #20944 from stangri/master-https-dns-proxy
https-dns-proxy: fixes/improvements
2023-05-08 19:44:57 -06:00
Stan Grishin 34a5faf6c3
Merge pull request #20942 from stangri/master-simple-adblock
simple-adblock: add family to firewall json objects
2023-05-08 19:44:48 -06:00
Stan Grishin 9bd9458812
Merge pull request #20930 from stangri/master-pbr
pbr: ipv6 & migration bugfixes
2023-05-08 19:41:31 -06:00
Tianling Shen a63aab4c3f
Merge pull request #20957 from jefferyto/golang-1.20.4
golang: Update to 1.20.4
2023-05-08 18:12:53 +08:00
Anna Tikhomirova bc2c6e63ee mwan3: bump PKG_VERSION to 2.11.7
Signed-off-by: Anna Tikhomirova <vamp@vampik.ru>
2023-05-08 09:47:08 +02:00
Florian Eckert 5f0461be8b mwan3: reset score to up+down on connected
Set the score value to the maximum value when the connected function is
called. The same happens with a disconnected event, the score value is
there set to zero.

Suggested-by: Anna Tikhomirova <vamp@vampik.ru>
Suggested-by: Maxim Mikityanskiy <maxtram95@gmail.com>
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-05-08 09:47:08 +02:00
Florian Eckert 1f6bd672fe mwan3: refactoring mwan3track action handling
Refactoring the score handling, so that only one action could take place
during run. The behaviour should be more comprehensible, since several
score actions are not processed at the same time.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-05-08 09:47:08 +02:00
Dirk Brenken f3054a90ea
banip: release 0.8.5-2
* fixed a log parser regression introduced in latest 0.8.4 update

Signed-off-by: Dirk Brenken <dev@brenken.org>
2023-05-08 09:17:07 +02:00
Michael Heimpold 4e60a7f3fb
Merge pull request #20915 from mhei/open-plc-utils-update
open-plc-utils: update to latest upstream version
2023-05-08 08:12:17 +02:00
Jeffery To 99a0cfdd03
python-trove-classifiers: Update to 2023.5.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-08 13:14:09 +08:00
Jeffery To 22b86d6e8d
golang: Update to 1.20.4
Includes fixes for:
* CVE-2023-24539: html/template: improper sanitization of CSS values
* CVE-2023-24540: html/template: improper handling of JavaScript
  whitespace
* CVE-2023-29400: html/template: improper handling of empty HTML
  attributes

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-08 12:14:54 +08:00
S. Brusch 05bc30fbb2 crowdsec-firewall-bouncer: new upstream release version 0.0.26
Signed-off-by: S. Brusch <ne20002@gmx.ch>

Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: ipq40xx/generic, Fritzbox 4040, Openwrt 22.03.5

Update crowdsec-firewall-bouncer to latest upstream release version 0.0.26
2023-05-08 10:34:37 +08:00
Nikos Mavrogiannopoulos 21937be8ed tang: use sbin instead of libexec
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2023-05-07 20:48:01 +02:00
Nikos Mavrogiannopoulos 17d759c7fd tang: remove post-installation key generation
The keys will be generated on startup.

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2023-05-07 20:47:11 +02:00
Nikos Mavrogiannopoulos c3d09dfaa3 tang: updated to version 12
This version enables standalone operation.

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2023-05-07 20:47:02 +02:00
John Audia 47b4ceac82 snort3: update to 3.1.61.0
Upstream bump

Removed upstreamed patch: 900-fix_build_for_archs_contain_plus.patch[1]

1. 4de62ca9b9

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>
2023-05-08 00:17:18 +08:00
Antonio Flores 1170831077 gnutls: update to v3.8.0
Fixes: https://github.com/openwrt/openwrt/issues/12542
The detailed list of changes follows:

* Version 3.8.0 (released 2023-02-09)

** libgnutls: Fix a Bleichenbacher oracle in the TLS RSA key exchange.
Reported by Hubert Kario (#1050). Fix developed by Alexander Sosedkin.
[GNUTLS-SA-2020-07-14, CVSS: medium] [CVE-2023-0361]

** libgnutls: C++ library is now header only. All definitions from
gnutlsxx.c have been moved into gnutlsxx.h. Users of the C++
interface have two options:
1. include gnutlsxx.h in their application and link against
the C library. (default)
2. include gnutlsxx.h in their application, compile with
GNUTLS_GNUTLSXX_NO_HEADERONLY macro defined and link
against the C++ library.

** libgnutls: GNUTLS_NO_STATUS_REQUEST flag and %NO_STATUS_REQUEST
priority modifier have been added to allow disabling of the
status_request TLS extension in the client side.

** libgnutls: TLS heartbeat is disabled by default.
The heartbeat extension in TLS (RFC 6520) is not widely used given
other implementations dropped support for it. To enable back
support for it, supply --enable-heartbeat-support to configure
script.

** libgnutls: SRP authentication is now disabled by default.
It is disabled because the SRP authentication in TLS is not up to
date with the latest TLS standards and its ciphersuites are based
on the CBC mode and SHA-1. To enable it back, supply
--enable-srp-authentication option to configure script.

** libgnutls: All code has been indented using "indent -ppi1 -linux".
CI/CD has been adjusted to catch regressions. This is implemented
through devel/indent-gnutls, devel/indent-maybe and .gitlab-ci.yml’s
commit-check. You may run devel/indent-gnutls to fix any
indentation issues if you make code modifications.

** guile: Guile-bindings removed.
They have been extracted into a separate project to reduce complexity
and to simplify maintenance, see <https://gitlab.com/gnutls/guile/>.

** minitasn1: Upgraded to libtasn1 version 4.19.

** API and ABI modifications:
GNUTLS_NO_STATUS_REQUEST: New flag
GNUTLS_SRTP_AEAD_AES_128_GCM: New gnutls_srtp_profile_t enum member
GNUTLS_SRTP_AEAD_AES_256_GCM: New gnutls_srtp_profile_t enum member

Signed-off-by: Antonio Flores <antflores627@gmail.com>
2023-05-07 22:46:32 +08:00
Christian Lachner 47ae88c379 haproxy: update to v2.6.13
- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.6.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2023-05-07 19:44:11 +08:00
Tianling Shen 4bd7befa6a
cloudflared: Update to 2023.5.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-05-07 17:33:16 +08:00
Nick Peng e042899ef9 smartdns: bump to 1.2023.42
Signed-off-by: Nick Peng <pymumu@gmail.com>
2023-05-07 17:10:23 +08:00
Stan Grishin 25801ddf74 https-dns-proxy: fixes/improvements
* use shared memory to store output data
* add family option to firewall json objects, due to reports that IPv6 hijacking
  doesn't work without explicit family declaration

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2023-05-07 02:55:39 +00:00
Stan Grishin 0b84504670 simple-adblock: add family to firewall json objects
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2023-05-07 02:29:53 +00:00
Dirk Brenken 7ac5f0a3d9
banip: release 0.8.5-1
* add support for external allowlist URLs to reference additional IPv4/IPv6 feeds, set 'ban_allowurl' accordingly
* make download retries in case of an error configurable, set 'ban_fetchretry' accordingly (default 5)
* small fixes
* readme update
* LuCI update (separate commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2023-05-06 22:42:20 +02:00
Hannu Nyman 5f58aa7a4e libxml2: remove - moved to OpenWrt main repo
Remove libxml2 that was moved into the main OpenWrt repo.
Commit in OpenWrt: 9b0b46985c112c664354dc745d8cfb313166744b

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2023-05-06 18:19:00 +03:00
Hannu Nyman 8f8444c12a gperf: remove - moved to OpenWrt main repo
Remove gperf that was moved into the main OpenWrt repo.
Commit in OpenWrt: 2070a2ca27bdb2b1e4e1587274e192e42f247516

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2023-05-06 18:19:00 +03:00
Christian Marangi 8c704f2ccc
nginx: fix compilation error for nginx-full
Fix compilation error for stream module not converted to use the PACKAGE
config flag and a missing required dependency for the DAV ext module.

Drop additional config for STREAM module since they are now included and
built by default.

Fixes: 65a676ed56 ("nginx: introduce support for dynamic modules")
Fixes: #20906
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-05-06 07:17:25 +02:00
Tianling Shen 8c37490eff
Merge pull request #20925 from jefferyto/python-hatchling-1.14.1
python-hatchling: Update to 1.14.1
2023-05-06 20:28:23 +08:00
Robert Högberg 7960fd83ac rtl_433: update to 22.11
Signed-off-by: Robert Högberg <robert.hogberg@gmail.com>
2023-05-06 20:24:57 +08:00
Glen Huang b2ec3ff76d uwsgi: make LuCI work
LuCI is no longer powered by lua, but ucode

Signed-off-by: Glen Huang <me@glenhuang.com>
2023-05-05 14:36:46 +02:00
Stan Grishin c2739705b9 pbr: ipv6 & migration bugfixes
* suppress RTNETLINK errors when inserting ipv6 routes
* only display global scope IPv6 gateways in status/WebUI
* stop and disable vpn-policy-routing when migrating

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2023-05-05 01:48:33 +00:00
Stan Grishin 60dcf5826a
Merge pull request #20912 from stangri/master-pbr
pbr: update to 1.1.1-1
2023-05-04 19:41:14 -06:00