summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
| * php8: update to 8.0.30Michael Heimpold2023-08-131-2/+2
|/ | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* yq: Update to 4.34.2Tianling Shen2023-07-161-2/+2
| | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> (cherry picked from commit 1cb2590c1743eeb4c357b1f0d7e3fb47b3640ae6)
* yq: Update to 4.34.1Tianling Shen2023-07-161-2/+2
| | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> (cherry picked from commit 2ecf76e27dbcc0a5d64db6d9b30269de56b2bd1e)
* rclone: Update to 1.63.0Tianling Shen2023-07-161-3/+3
| | | | | | | While at it fixed a typo error of license files variable. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> (cherry picked from commit 952844c976bae289c603f9c93662a08f6ff49290)
* rclone: Update to 1.62.2Tianling Shen2023-07-161-2/+2
| | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> (cherry picked from commit 392a68e24774294590abf9c08ea1832f2cee190d)
* bind: bump to 9.18.16Noah Meyerhans2023-06-251-3/+3
| | | | | | | | | | | | | | | | | | | Fixes CVEs: - CVE-2023-2828: The overmem cleaning process has been improved, to prevent the cache from significantly exceeding the configured max-cache-size limit. - CVE-2023-2911: A query that prioritizes stale data over lookup triggers a fetch to refresh the stale data in cache. If the fetch is aborted for exceeding the recursion quota, it was possible for named to enter an infinite callback loop and crash due to stack overflow. The complete list of changes is available in the upstream release notes at https://ftp.isc.org/isc/bind9/cur/9.18/doc/arm/html/notes.html#notes-for-bind-9-18-16 Signed-off-by: Noah Meyerhans <frodo@morgul.net> (cherry picked from commit 9ac79ad46966908d2ceb64c0e0d8a0bff435767a)
* Merge pull request #21397 from mhei/21.02-php8-update-to-8.0.29Michael Heimpold2023-06-201-2/+2
|\ | | | | [21.02] php8: update to 8.0.29
| * php8: update to 8.0.29Michael Heimpold2023-06-151-2/+2
|/ | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* Merge pull request #21347 from jefferyto/python-3.9.17-openwrt-21.02Tianling Shen2023-06-134-23/+23
|\ | | | | [openwrt-21.02] python3: Update to 3.9.17
| * python3: Update to 3.9.17Jeffery To2023-06-124-23/+23
| | | | | | | | | | | | | | This includes an updated patch for pip, as the bundled pip was also updated with this release. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | avahi: Import patches for security fixesHirokazu MORIKAWA2023-06-117-1/+287
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Imported patches included in debian and other package. * 200-Fix-NULL-pointer-crashes-from-175.patch CVE-2021-3502 A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this vulnerability is to the service availability. * 201-Avoid-infinite-loop-in-avahi-daemon-by-handling-HUP-event.patch CVE-2021-3468 A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service, which becomes unresponsive after this flaw is triggered. * 202-avahi_dns_packet_consume_uint32-fix-potential-undefined-b.patch avahi_dns_packet_consume_uint32 left shifts uint8_t values by 8, 16 and 24 bits to combine them into a 32-bit value. This produces an undefined behavior warning with gcc -fsanitize when fed input values of 128 or 255 however in testing no actual unexpected behavior occurs in practice and the 32-bit uint32_t is always correctly produced as the final value is immediately stored into a uint32_t and the compiler appears to handle this "correctly". Cast the intermediate values to uint32_t to prevent this warning and ensure the intended result is explicit. * 203-Do-not-disable-timeout-cleanup-on-watch-cleanup.patch This was causing timeouts to never be removed from the linked list that tracks them, resulting in both memory and CPU usage to grow larger over time. * 204-Emit-error-if-requested-service-is-not-found.patch It currently just crashes instead of replying with error. Check return value and emit error instead of passing NULL pointer to reply. * 205-conf-file-line-lengths.patch Allow avahi-daemon.conf file to have lines longer than 256 characters (new limit 1024). Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com> (cherry picked from commit 779af4d40ccdc0f2a798ee6b6849abb37d202f1b)
* | net/acme: Bump acme.sh to v3.0.6Toke Høiland-Jørgensen2023-06-091-2/+2
| | | | | | | | | | | | Important security fix. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* | lighttpd: update to lighttpd 1.4.71 release hashGlenn Strauss2023-05-284-91/+4
| | | | | | | | | | | | | | remove patches included upstream Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com> (cherry picked from commit 19291ee1951a79776c1b67c10fd67af5d346abc5)
* | syslog-ng: update to 4.2.0W. Michael Petullo2023-05-281-2/+2
| | | | | | | | | | Signed-off-by: W. Michael Petullo <mike@flyn.org> (cherry picked from commit 1fcea0798110cca216676d065dd66a17d1a1f447)
* | Merge pull request #21185 from commodo/django-update-21.09Alexandru Ardelean2023-05-271-2/+2
|\ \ | |/ |/| [21.02] django: bump to version 3.2.19
| * django: bump to version 3.2.19Alexandru Ardelean2023-05-261-2/+2
|/ | | | | | | Fixes CVE-2023-31047 Link: https://nvd.nist.gov/vuln/detail/CVE-2023-31047 Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
* wsdd2: fix stopping serviceRafał Miłecki2023-05-211-2/+2
| | | | | | | | | | | | | | | | Function start_service() is called whenever service may need reloading. If SMB server is not running it could be simply because it has been stopped. Reloading service in such case is not an error so: 1. Don't log error as it isn't one 2. Don't exit with error code as it was confusing procd This change fixes scenario like: /etc/init.d/ksmbd stop /etc/init.d/wsdd2 reload (previously above wasn't stopping wsdd2) Signed-off-by: Rafał Miłecki <rafal@milecki.pl> (cherry picked from commit 6020ca52bf5d7b2869ef1ff8a966d15281aa56ab)
* wsdd2: Remove extra comma, which breaks the key-value pair of the '-b' parameterLi Zhang2023-05-211-3/+3
| | | | | Signed-off-by: Li Zhang <starsunyzl@gmail.com> (cherry picked from commit 5fc06d939fb9a37752b7665eca1355e23aa4e85f)
* wsdd2: dont use fqdnFritz D. Ansel2023-05-211-1/+1
| | | | | | | workgroups use the name of the host without domain Signed-off-by: Fritz D. Ansel <fdansel@yandex.ru> (cherry picked from commit 3953ff956da6d9d0f335ddba3fc347bfef4fabb2)
* lxc: set --with-runtime-path to the /var/run pathRafał Miłecki2023-05-192-5/+2
| | | | | | | | | | | | | | | | The default runtime directory used by LXC is /run which doesn't exist in OpenWrt. It causes errors like: Failed to create lock for foo lxc-create: foo: tools/lxc_create.c: main: 260 Failed to create lxc container There has been workaround for that in the lxc-auto.init but it requires installing "lxc-auto" package. Replacing that "ln -s" workaround with Makefile specifying --with-runtime-path allows using pure "lxc" in OpenWrt (without the "lxc-auto"). Signed-off-by: Rafał Miłecki <rafal@milecki.pl> (cherry picked from commit 90fef036fe465262d5915489d45f430b313f22ab)
* lxc-auto: made init script compatible with image builderMarc Benoit2023-05-191-1/+1
| | | | | Signed-off-by: Marc Benoit <marcb62185@gmail.com> (cherry picked from commit e70844a9ca327b98eb33d1c9a3cce987cc91a190)
* lxc: update to 4.10.12John Audia2023-05-193-9/+6
| | | | | | | | | | | | | | | Bump to latest upstream release and rebase: 010-Remove-distro-check.patch 025-remove-unsupported-option.patch After updating ran `make package/lxc/refresh` to clean dirty patches Build system: x86_64 Build-tested: bcm2711/RPi4B Run-tested: bcm2711/RPi4B Signed-off-by: John Audia <graysky@archlinux.us> (cherry picked from commit 115bf07f6c449a17bf12a3e7e065ff252a772e6f)
* lxc-auto: step by 1 sec up to $max_timeoutJohn Audia2023-05-191-6/+10
| | | | | | | | | | | | | If the user defines a $max_timeout of 30, the service will wait 30 seconds before it considers lxc-stop complete even though lxc-stop might actually finish much sooner. This introduces an unneeded delay. This commit changes the behavior to check once per second to see when lxc-stop actually stops doing so up to $max_timeout. It also slightly simplifies the code with logic to append the -t $max_timeout to the script. Signed-off-by: John Audia <graysky@archlinux.us> (cherry picked from commit 7984d2d74a2fd83f036310888ad7486bff655c5a)
* knot: update to version 3.2.6Jan Hák2023-05-181-2/+2
| | | | | Signed-off-by: Jan Hák <jan.hak@nic.cz> (cherry picked from commit bb946a19cd3203e288f99db666e123c92f7e3d0d)
* knot: update to version 3.2.5Jan Hák2023-05-181-3/+3
| | | | | Signed-off-by: Jan Hák <jan.hak@nic.cz> (cherry picked from commit 94512aba16e9bf4bc4a6dbc18bf67cbd97e035a6)
* syslog-ng: update to version 4.1.1Josef Schlehofer2023-05-182-3/+3
| | | | | | | | | | - Release notes: https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.1.1 - Updated version in config Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit 7de98324c73c8c680d05ef06bf2bf313d54bda83)
* lighttpd: QUILT patches; fix build patchesGlenn Strauss2023-05-152-56/+33
| | | | | | QUILT patches; fix build patches to re-merge deprecated modules Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
* lighttpd: include mod_h2 in base packageGlenn Strauss2023-05-152-2/+90
| | | | | | | | | | | | | | The next version of lighttpd will move HTTP/2 support from the lighttpd base executable into a separate module: mod_h2 Include patch to do so now, and update packaging to handle it. HTTP/2 support is enabled by default since lighttpd 1.4.59, but if HTTP/2 support is explicitly disabled in the configuration, then mod_h2 will not be loaded, thereby reducing lighttpd memory use. Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com> (cherry picked from commit f4152fccadc021b016b341526ddf83ddcf593ca1)
* lighttpd: update to lighttpd 1.4.70 release hashGlenn Strauss2023-05-152-4/+4
| | | | | | | remove patches included upstream Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com> (cherry picked from commit 0d5b110077d4c51a12d797a844495ce63071a205)
* lighttpd: adjust packages for built-in modulesGlenn Strauss2023-05-151-15/+53
| | | | | | | (.so is no longer built, but package still contains config files) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com> (cherry picked from commit 7fda9563de92e58f0ae5c388e66de1d66e3df7f0)
* lighttpd: fix package DEPENDS syntaxGlenn Strauss2023-05-151-22/+20
| | | | | | Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com> Co-authored-by: Tianling Shen <cnsztl@immortalwrt.org> (cherry picked from commit ae5135a9139425455e39b1030928786b5c0e37a9)
* librespeed-go: update file permissions for ujailTianling Shen2023-04-292-18/+32
| | | | | | | | This fixes "permission denied" error when access files as a normal user. Reported-by: Anya Lin <hukk1996@gmail.com> Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> (cherry picked from commit 42d340bce0106538888f9e942dc3dd6f7f9e62ff)
* bind: disable geoipJavier Marcet2023-04-181-1/+2
| | | | | | Signed-off-by: Javier Marcet <javier@marcet.info> [modified also PKG_RELEASE] (cherry picked from commit 073ee02500ca5bd0b5b530efcc662690c55ca2ac)
* Merge pull request #20799 from gstrauss/lighttpd-1.4.69-1-openwrt-21.02Tianling Shen2023-04-168-90/+2027
|\ | | | | lighttpd: update to lighttpd 1.4.69 release hash - backport to openwrt 21.02
| * lighttpd: patch to restore removed modulesGlenn Strauss2023-04-142-0/+1864
| | | | | | | | | | | | patch to restore removed modules to preserve state for 21.02 Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
| * ocserv: disable libmaxminddb detectionHannu Nyman2023-04-141-1/+2
| | | | | | | | | | | | | | | | | | Disable libmaxminddb detection to fix a build error due to missing dependency. (the libmaxminddb library is now detected, but is unncessary.) Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi> (cherry picked from commit 508c4548dc7c73d6e824bd5a9b1dcb8fb7132ab3)
| * knot: disable libmaxminddb detectionHannu Nyman2023-04-141-1/+2
| | | | | | | | | | | | | | | | | | Disable libmaxminddb detection to fix a build error due to missing dependency. (the libmaxminddb library is now detected, but is unncessary.) Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi> (cherry picked from commit ce46bf8a4307ae2e0ec6d3f517cad05666eb7a22)
| * lighttpd: fix package DEPENDS syntaxGlenn Strauss2023-04-141-2/+4
| | | | | | | | | | Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com> Co-authored-by: Tianling Shen <cnsztl@immortalwrt.org>
| * libmaxminddb: install pkgconfig fileRosen Penev2023-04-141-1/+3
| | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry picked from commit fe018482f83d51b9005c44d25652ea323aa338a2) (cherry pick reduced for backport) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
| * lighttpd: update to lighttpd 1.4.69 release hashGlenn Strauss2023-04-141-2/+2
| | | | | | | | | | Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com> (cherry picked from commit 8f2fbf093a42040dcc226dee4fcd493a215645ed)
| * lighttpd: add lighttpd-mod-webdav_min packageGlenn Strauss2023-04-142-0/+29
| | | | | | | | | | | | | | | | | | | | | | | | add lighttpd-mod-webdav_min package alternative to lighttpd-mod-webdav lighttpd-mod-webdav_min is more minimal than full lighttpd-mod-webdav. lighttpd-mod-webdav_min does not support PROPPATCH, LOCK, UNLOCK, and by not supporting those methods, removes dependencies on libxml2, libsqlite3, and libuuid. Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com> (cherry picked from commit ed6fe528c1efc549891144967eefe51a73999511)
| * lighttpd: collect mods now built into lighttpd exeGlenn Strauss2023-04-141-11/+18
| | | | | | | | | | Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com> (cherry picked from commit 85279b49ceeb411f98623e6febef48b83f04813b)
| * lighttpd: remove patch included upstreamGlenn Strauss2023-04-141-39/+0
| | | | | | | | | | Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com> (cherry picked from commit 66001d5a91087dec6ff9e620b995beaff60506d7)
| * lighttpd: update to lighttpd 1.4.68 release hashGlenn Strauss2023-04-141-3/+3
| | | | | | | | | | Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com> (cherry picked from commit 6383ae9407280df7f2ac29065bfe22d7bca73ed7)
| * lighttpd: modify build cmd for type: feature optsGlenn Strauss2023-04-141-17/+16
| | | | | | | | | | | | | | | | | | modify build command for meson type: feature options remove -Dwith_libev=disabled (option no longer has any effect) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com> (cherry picked from commit 4a3b62a92ab21bb6ae373dbbbfc1c5eb16ebc3f5)
| * lighttpd: add lighttpd-mod-rrdtool dep on rrdtool1Glenn Strauss2023-04-141-1/+1
| | | | | | | | | | | | | | add lighttpd-mod-rrdtool dependency on rrdtool1 Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com> (cherry picked from commit 9f299e881ba7ae665d5251d1e4c8a9585b039911)
| * lighttpd: lighttpd-1.4.67-4Glenn Strauss2023-04-141-1/+1
| | | | | | | | | | Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com> (cherry picked from commit a09dbfcf976f8d0c0247f068945dbd321e314bf8)
| * lighttpd: document crypto lib options in MakefileGlenn Strauss2023-04-141-19/+90
| | | | | | | | | | Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com> (cherry picked from commit 43741e748f8569be4aaf3ba3a99867eef32c74e4)
* | v2raya: Update to 2.0.5Tianling Shen2023-04-131-3/+3
|/ | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> (cherry picked from commit 23e134816688793d42cc52ad78a9fc65f4e6d3bc)
* rrdtool: update PKG_SOURCE_URLRyan Shi2023-04-101-4/+1
| | | | | Signed-off-by: Ryan Shi <qweaszxcdf@users.noreply.github.com> (cherry picked from commit 164e0257e7c079b06e5d862cbc31e1f11ac651cb)
generated by cgit (git 2.46.0) at 2026-10-12 01:08:53 +0000