Commit Graph

1649 Commits

Author SHA1 Message Date
Josef Schlehofer
cbecb8ba87 beep: change git repository to fix CVE-2018-0492 and CVE-2018-1000532
1. Changed Git repository, which is used for Fedora packaging
https://github.com/johnath/beep/issues/11#issuecomment-450277122

Fixed CVEs:
CVE-2018-0492 - https://nvd.nist.gov/vuln/detail/CVE-2018-0492
CVE-2018-1000532 - https://nvd.nist.gov/vuln/detail/CVE-2018-1000532

2. Fixed SPDX License Identifier

3. Add patch to comment out -D_FORTIFY_SOURCE
Otherwise, it can not be built by default.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-06-09 17:32:10 +00:00
breakings
c9c73f6165
tailscale: update to 1.26.0 (#472) 2022-06-08 22:43:20 +08:00
breakings
4fa1a1b53d
libnetwork: update to latest HEAD (#471) 2022-06-08 22:43:08 +08:00
breakings
06f9b1228f
containerd: update to 1.6.6 (#470) 2022-06-08 22:42:49 +08:00
breakings
288d9b46c3
runc: update to 1.1.2 (#469) 2022-06-08 22:42:33 +08:00
breakings
fc884e1f22
docker: Update to v20.10.17 (#468) 2022-06-08 22:42:18 +08:00
breakings
b33b20a557
dockerd: Update to v20.10.17 (#467) 2022-06-08 22:42:03 +08:00
Stan Grishin
c637926398 curl: bump to 7.83.1
* https://curl.se/changes.html#7_83_1

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2022-06-07 15:48:30 +00:00
John Audia
ea5c5f4cf4 htop: update to 3.2.1
Build-tested: x86/64
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>
2022-06-07 15:48:22 +00:00
Beginner
ea737bb112 dnsproxy: update to 0.43.1 2022-06-06 16:01:10 +00:00
Tianling Shen
1410271e8c yq: Update to 4.25.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-06-06 15:57:19 +00:00
Tianling Shen
ec3bbeae7a gg: Update to 0.2.6
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-06-06 15:41:03 +00:00
Jeffery To
1b4875aaf4 golang: Update to 1.18.3
Includes fix for CVE-2022-30634 (crypto/rand: Read hangs when passed
buffer larger than 1<<32 - 1).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-06-06 15:41:03 +00:00
breakings
fd009448da
ksmbd-tools: update to 3.4.5 (#461)
Major changes are:

Add support for Heimdal as the Kerberos 5 implementation.
Add smbd max io size parameter.
Accept global share options.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Co-authored-by: Rosen Penev <rosenp@gmail.com>
2022-06-06 00:41:04 +08:00
breakings
cb56ef7422
nfs-kernel-server: update to 2.5.4 (#462)
* nfs-kernel-server: update to 2.5.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* nfs-kernel-server: reload when exported mountpoints show

Use newly introduced procd_add_reload_mount_trigger to reload nfsd
when a mountpoint covering an exported filesystem is added by blockd.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

* nfs-kernel-server: move hardcoded /run to /tmp/run

statd currently fails to start due to missing /run which doesn't exist
on OpenWrt.

Add a patch moving /run to /tmp/run as the path is hardcoded in several
places and cannot be configured neither at buildtime nor at runtime.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

* nfs-kernel-server: fix build on macos arm64

1. prctl() check is not required for host-compile on any OS due to prctl
is not used in rpcgen which is only one is compiled during host-compile
phase. prctl() check is disabled via HOST_CONFIGURE_VARS in OpenWrt makefile

2. __DARWIN_ONLY_64_BIT_INO_T is true on macos arm64 so struct stat64
and stat64() are not available. This patch defines stat64 as stat if
__DARWIN_ONLY_64_BIT_INO_T is true

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>

* treewide: remove rpath-link

Most usages seem to be outdated and fixed a long time ago.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* nfs-kernel-server: disable IPv6 for host

Some issue with static libtirpc

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Co-authored-by: Rosen Penev <rosenp@gmail.com>
Co-authored-by: Daniel Golle <daniel@makrotopia.org>
Co-authored-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-06-06 00:40:53 +08:00
breakings
200b6ee4a3
docker-compose: Update to version 2.6.0 (#463)
* docker-compose: Update to version 2.5.1

What's Changed:

 - Fix relative paths on envfile label by @ulyssessouza
 - down: Reject all arguments by @Jille
 - Clarify what default work dir is when multiple compose files by
 @quite
 - compose down exit=0 if nothing to remove by @ndeloof
 - cp command: copy to all containers of a service as default
 behaviour by @glours
 - Fix extra space printed with --no-log-prefix option by @jan4843
 - bump compose-go to 1.2.5 by @ndeloof

New Contributors:

 - @Jille made their first contribution
 - @quite made their first contribution
 - @jan4843 made their first contribution

Signed-off-by: Javier Marcet <javier@marcet.info>

* docker-compose: Update to version 2.6.0

What's Changed:

 - fix TestLocalComposeUp which fail locally and bump compose-go to
 1.2.7 by @glours
 - attach only to services declared by project applying profiles by
 @ndeloof
 - Add ddev's e2e test by @ulyssessouza
 - Fix local run of make e2e-compose-standalone by @ulyssessouza
 - fix: prevent flickering prompt when pulling same image from N
 services by @maxcleme
 - add tags property to build section by @glours
 - update golang version to 1.18 by @glours
 - bump compose-go to 1.2.6 by @maxcleme
 - add e2e tests to verify env variables priority by @glours
 - Import dotenv file to os environment by @ulyssessouza

New Contributors:

 - @maxcleme made their first contribution

Signed-off-by: Javier Marcet <javier@marcet.info>

Co-authored-by: Javier Marcet <javier@marcet.info>
2022-06-06 00:40:31 +08:00
breakings
201daa306a
ntfs-3g: update to 2022.5.17 (#464)
Signed-off-by: Rosen Penev <rosenp@gmail.com>

Co-authored-by: Rosen Penev <rosenp@gmail.com>
2022-06-06 00:40:17 +08:00
Hirokazu MORIKAWA
ec00e06068 node: bump to v16.15.0
Description:
Update from  v16.15.0
Changed handling of host's npm problems due to npm updates.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-06-02 18:06:13 +00:00
Rui Salvaterra
adef3769f9 openconnect: make the host dependency optional
According to David Woodhouse, OpenConnect has no issues reconnecting on any
interface. Make the host dependency optional, as it can cause issues in multiple
WAN scenarios.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2022-06-02 17:57:55 +00:00
Rui Salvaterra
34844a7188 openconnect: avoid using the --juniper switch
The --juniper switch has been deprecated in favour of --protocol=nc. Fix the
proto script thusly, while keeping compatibility with existing configurations.

Note that, as far as UCI is concerned, if both options juniper and vpn_protocol
are specified, the latter takes precedence.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2022-06-02 17:57:44 +00:00
Rui Salvaterra
bd3ad015b0 openconnect: fix inclusion of netifd proto scripts
This is the preferred way, according to the wiki.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2022-06-02 17:57:32 +00:00
Rui Salvaterra
ca3e425691 Revert "openconnect: drop the dependency on resolveip"
Using resolveip is more robust and predictable than depending on nslookup and
awk.

This reverts commit 131ec7b3bd6895aa3f86f57169dd23c15f174fe2.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2022-06-02 17:57:21 +00:00
breakings
7facff7d22
qttools: update to 5.15.4 (#460)
Co-authored-by: breakings <breakingstop@gmail.com>
2022-05-31 17:27:48 +08:00
breakings
a92c27a3a3
qtbase: update to 5.15.4 (#459)
Co-authored-by: breakings <breakingstop@gmail.com>
2022-05-31 17:27:38 +08:00
breakings
5119ee0067
qBittorrent: update to 4.4.3.1 (#458)
Tue May 24 2022 - sledgehammer999 <sledgehammer999@qbittorrent.org> - v4.4.3.1
    - BUGFIX: Fix broken translations (sledgehammer999)

Sun May 22 2022 - sledgehammer999 <sledgehammer999@qbittorrent.org> - v4.4.3
    - BUGFIX: Correctly handle changing of temp save path (glassez)
    - BUGFIX: Fix storage in SQLite (glassez)
    - BUGFIX: Correctly apply content layout when "Skip hash check" is enabled (glassez)
    - BUGFIX: Don't corrupt IDs of v2 torrents (glassez)
    - BUGFIX: Reduce the number of hashing threads by default (improves hashing speed on HDDs) (summer)
    - BUGFIX: Prevent the "update dialog" from blocking input on other windows (summer)
    - BUGFIX: Add trackers in exported .torrent files (glassez)
    - BUGFIX: Fix wrong GUI behavior in "Optional IP address to bind to" setting (Chocobo1)
    - WEBUI: Fix WebUI crash due to missing tags from config (An0n)
    - WEBUI: Show correct location path (Chocobo1)
    - MACOS: Fix main window freezing after opening a files dialog (glassez)

Co-authored-by: breakings <breakingstop@gmail.com>
2022-05-31 17:27:29 +08:00
breakings
ae9a3e472b
nspr: update to 4.34 (#457)
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Co-authored-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-05-31 17:27:02 +08:00
breakings
b7b60b09d9
nss: update to 3.78 (#456)
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Co-authored-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-05-31 17:26:46 +08:00
Michael Heimpold
a7f48ab328 libxml2: update to 2.9.14
This fixes CVE-2022-29824.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-05-31 07:24:27 +00:00
Michael Heimpold
e101d75b61 libxml2: update to 2.9.13
This fixes CVE-2022-23308.

Also switch to GNOME as download source and xz tarball.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-05-31 07:24:20 +00:00
Daniel Golle
9f6b104141 libxml2: build host static lib with -fPIC
libxslt/host is complaing that static libxml2 should be with -fPIC.
Unconditionally enable -fPIC for for host build of libxml2.

Fixes: dc701d61b ("libxml2: don't build host shared libraries")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-05-31 07:24:13 +00:00
Rosen Penev
404bf2c6f3 libxml2: don't build host shared libraries
Avoids having to add

HOST_LDFLAGS: -Wl,-rpath,$(STAGING_DIR_HOSTPKG)/lib

for packages that rely on shared libraries.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-05-31 07:24:05 +00:00
Tianling Shen
7cabd73eae cloudflared: Update to 2022.5.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-05-31 07:22:06 +00:00
Michael Heimpold
a9c15400a9 php8: update to 8.1.6
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-05-31 07:21:16 +00:00
Michael Pratt
c02f3c350b golang: do not rely on Go script host detection
for some use cases, for example:
a system with 64 bit kernel
and 32 bit userspace programs

the local Go installation is "detected"
using the kernel "uname",
causing build failure if they happen to differ

by adding the argument GOHOSTARCH using the corresponding make variable
it would be fully controlled in the openwrt git tree
based on the HOST_ARCH make variable.

Signed-off-by: Michael Pratt <mcpratt@pm.me>
2022-05-31 07:21:05 +00:00
Michael Pratt
19ee8dd834 golang: enable verbose output
allow the building script of Go to output verbose
when make is executed with "V=s..."

Signed-off-by: Michael Pratt <mcpratt@pm.me>
2022-05-31 07:20:58 +00:00
Michael Pratt
0aad4a6884 golang: split compile recipe into configure and compile
the default Configure recipe for packages
assumes that there is a "configure" script
in the source tree directory

Go does not have such a script,
configure and compile is done with the same script

so split the current Compile recipe
into both Configure and Compile recipes

Signed-off-by: Michael Pratt <mcpratt@pm.me>
2022-05-31 07:20:51 +00:00
Beginner
b6faac33f3 mosdns: update to 3.9.0 2022-05-29 16:33:56 +00:00
ImmortalWrt AutoUpdate Bot
49c1a94ca5 mosdns: Update to 3.8.0
Signed-off-by: ImmortalWrt AutoUpdate Bot <github-bot@immortalwrt.org>
2022-05-29 16:33:30 +00:00
Aleksandr V. Piskunov
1d323b9dc4 stubby: restart on trigger interfaces
Force restart stubby if any of the trigger interfaces goes up or down.
Avoids DoT DNS lookup timeouts when default route changes, in case of multiple
upstream interfaces.

Signed-off-by: Aleksandr V. Piskunov <aleksandr.v.piskunov@gmail.com>
2022-05-26 17:34:57 +00:00
Rosen Penev
7952700af9 hfsprogs: update to 540.1.linux3
Updates hfsprogs from 2011 to 2013 version.

Updated patches to latest Debian ones. Kept custom OpenWrt ones.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-05-26 17:30:16 +00:00
Tianling Shen
48998cbbbb ipt2socks: fix build for arc
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-05-26 07:34:10 +00:00
Tianling Shen
44ec2bc5bf dnslookup: add new package 2022-05-25 14:19:44 +00:00
Christian Lachner
de69fbdbc4 haproxy: Update HAProxy to v2.4.17
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2022-05-25 13:58:36 +00:00
Beginner-Go
9894928b99 dnsproxy: update to 0.43.0 2022-05-25 13:54:55 +00:00
Tianling Shen
a5cb29e5b7 ipt2socks: fix dependencies & cflags
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-05-25 13:47:11 +00:00
Rui Salvaterra
6f92b7866d openconnect: make sure OpenSSL is built with DTLS support
Otherwise, OpenConnect will fail to connect with DTLS.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2022-05-24 16:32:18 +00:00
Rui Salvaterra
e2736caf3c openconnect: don't bother loading the tun module
If it exists (if it isn't built-in), it will be loaded automatically at boot.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2022-05-24 16:32:11 +00:00
Rui Salvaterra
9513b30f0a openconnect: drop the dependency on resolveip
We have nslookup and awk, let's use them.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2022-05-24 16:32:04 +00:00
Rui Salvaterra
f226ec4b6b openconnect: fix OpenSSL build without deprecated API
Backport a patch in order to allow building OpenConnect against OpenSSL 1.1.x
without the need for deprecated API (further fixes will be required for OpenSSL
3.x, though).

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2022-05-24 16:31:56 +00:00
Jianhui Zhao
f98ba5b883 rtty: update to 8.0.1
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2022-05-24 16:30:14 +00:00