summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* python-ubus: Update to 0.1.2openwrt-21.02Jeffery To2023-11-021-3/+3
| | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com> (cherry picked from commit 99d8554bcd1a16e2276ffb706c3f1e823ece65f3)
* exim: update to version 4.96.2Daniel Golle2023-10-312-4/+4
| | | | | | | | | Fixes vulnerabilities: - Improper Neutralization of Special Elements (CVE-2023-42117) - dnsdb Out-Of-Bounds Read (CVE-2023-42119) Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit 86ec7b19bc5f5935152b1423bb4f450ccefaabae)
* zsh: backport PCRE2 patches and move to itChristian Marangi2023-10-166-2/+1060
| | | | | | | | | | | | Backport PCRE2 patches from upstream and move package to PCRE2 library as PCRE is EOL and won't receive any security update anymore. Patch are backported with minimal change, only the Changelog change is commented out as it would conflict and makes no sense to adapt for the purpose of backport patches. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com> (cherry picked from commit 5b929fde5f9b8bc2b6e85999c9eb08b5a4295c7f)
* zsh: use autoreconf PKG_FIXUP to configureOskari Rauta2023-10-161-0/+9
| | | | | | | | | | | | | | | | | | | In preparation to PCRE2 fixup, use autoreconf PKG_FIXUP as a better configure system instead of configure script. This is needed to reduce upcoming patch to migrate to PCRE2 library. To correctly use autoreconf it's needed to declare empty PKG_REMOVE_FILES. zsh include custom macro in the default aclocal.m4 When autoreconf PKG_FIXUP is used, if PKG_REMOVE_FILES is not defined, it's set to remove the file aclocal.m4 by default resulting in problem with the custom macro AC_PROG_LN. Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com> [ split to 2 commit, add PKG_REMOVE_FILES, reword commit description ] Signed-off-by: Christian Marangi <ansuelsmth@gmail.com> (cherry picked from commit a7f837c98b0ab3fde1b19283e13a21fdaf1b1ee2)
* zsh: update to 5.9John Audia2023-10-161-2/+2
| | | | | | | | | | | Bump to latest release Build system: x86_64 Build-tested: bcm2711/RPi4B Run-tested: bcm2711/RPi4B Signed-off-by: John Audia <therealgraysky@proton.me> (cherry picked from commit de2ff3a5f18705152964edf827032fed513dc375)
* zsh: update to 5.8.1John Audia2023-10-161-2/+2
| | | | | | | | | Build system: x86_64 Build-tested: bcm2711/RPi4B Run-tested: bcm2711/RPi4B Signed-off-by: John Audia <graysky@archlinux.us> (cherry picked from commit 034da11e2bc56c9f960ebbd8c5d2b0f9cd76932b)
* exim: update to version 4.96.1Daniel Golle2023-10-082-187/+2
| | | | | | | | | | | | | | | | | | | This is a security release. JH/01 Bug 2999: Fix a possible OOB write in the external authenticator, which could be triggered by externally-supplied input. Found by Trend Micro. CVE-2023-42115 JH/02 Bug 3000: Fix a possible OOB write in the SPA authenticator, which could be triggered by externally-controlled input. Found by Trend Micro. CVE-2023-42116 JH/03 Bug 3001: Fix a possible OOB read in the SPA authenticator, which could be triggered by externally-controlled input. Found by Trend Micro. CVE-2023-42114 Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit 7c8f4a2a1c2e883ae3ebd62aab96bb45e31b4d55)
* restic-rest-server: fix configuration option namesAnton Ryzhov2023-10-071-4/+4
| | | | | Signed-off-by: Anton Ryzhov <anton@ryzhov.me> (cherry picked from commit c61ed3e93fe60f23b2fccb6d62222fc09f6e555e)
* mg: switch pcre to pcre2Hirokazu MORIKAWA2023-10-063-4/+4
| | | | | | | | Switch pcre to pcre2 https://github.com/openwrt/packages/issues/22006 Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com> (cherry picked from commit 3d11e5c197e250f0a32ca813ff07d480b59311d0)
* mg: bump to 7.3Hirokazu MORIKAWA2023-10-062-3/+3
| | | | | | | | Description: Sync to OpenBSD 7.3 Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com> (cherry picked from commit e25f57b60273a6fa4515367e82b379c09c483e55)
* wget: Update to 1.21.4Tianling Shen2023-10-063-94/+3
| | | | | | | Removed upstreamed patches and unneeded autoreconf. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> (cherry picked from commit 54593c0ba9a52ca72c69a1041b11bc9ef558db77)
* knot: update to version 3.2.10Josef Schlehofer2023-10-051-2/+2
| | | | | | | | | | Release notes: https://www.knot-dns.cz/2023-09-10-version-3210.html https://www.knot-dns.cz/2023-07-27-version-329.html https://www.knot-dns.cz/2023-06-26-version-328.html https://www.knot-dns.cz/2023-06-06-version-327.html Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* atftp: move to PCRE2Christian Marangi2023-10-041-1/+1
| | | | | | | | Move atftp to PCRE2 as PCRE is flagged as EOL and won't receive security updates anymore. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com> (cherry picked from commit f81a1a1212c17f460721fe6f4d4497e66ee418c6)
* atftp: bump to release 0.8.0Christian Marangi2023-10-041-2/+4
| | | | | | | | Bump to release 0.8.0. Autorecong is now needed to correctly compile the package. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com> (cherry picked from commit 364fe00b17ddfeb9f2bdf16298eda84866d58d27)
* atftp: update to 0.7.5Rosen Penev2023-10-043-24/+2
| | | | | | | Remove upstreamed patches. Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry picked from commit 0ad6384b5f8e2211cce72cc185f2756131929c4a)
* atftpd: fix conffilesHuangbin Zhan2023-10-041-1/+5
| | | | | | | | Add missing conffiles Fix conffile permission Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com> (cherry picked from commit 3d66be420301bebd9cf7ee1ec26a1d08abe4a6b7)
* ffmpeg: Add avi muxerJan Kratochvil2023-10-042-0/+4
| | | | | | | | Otherwise one cannot produce *.avi containers needed for some H.264 camera codecs. Signed-off-by: Jan Kratochvil <jan@jankratochvil.net> (cherry picked from commit 62f01d7b36ca621f3b9e2e01c78a64e897dbf4e8)
* btrfs-progs: Update to version 6.0.1Hauke Mehrtens2023-10-042-45/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes compilation problems with glibc 2.36. Full Changelog: btrfs-progs-6.0 (2022-10-11) ----------------------------- * fi usage: in tabular output, print total size and slack size * mkfs: * option -O now accepts values from -R to unify the interface (-R will continue to work) * zone reset and discard is done in parallel on all devices * removed option --leafsize, deprecated long time ago * corrupt-block: recalculate checksum when changing generation * fixes: * convert: fix reserved range detection and overlaps * mkfs: fix creating files with reserved inode numbers with --rootdir * receive: escape filenames in command attributes * fix extent buffer leaks after transaction abort * experimental: * mkfs: support for block-group-tree (kernel 6.1) * fsverity in send (protocol v3, WIP) * btrfstune -b converts to block-group-tree * other: * cleanups, refactoring * new and updated tests * update documentation btrfs-progs-6.0.1 (2022-11-04) """""""""""""""""""""""""""""" * send: minor speed up for v2 due to increased buffer size * resize: invalid command line options fail with error code * quota rescan: * add long options --status and --wait * new option to wait but don't start rescan * qgroup show: print path by default, updated format * qgroup: new subcommand clear-stale, remove qgroups without their subvolumes * experimental: * add warnings to commands that have it enabled (mkfs, image, btrfstune) * other: * documentation, help text, error message updates btrfs-progs-5.19 (2022-08-16) ----------------------------- * send: support protocol version 2 * fi show: print all missing devices * device stats: add tabular output * replace: add alias to device group (device replace) * check: validate free space tree items * fixes: * convert: support large filesystems (block count > 32bit) * recognize filesystems with verity enabled * mkfs and DUP could write out of order, fix it for zoned mode * build: * optional support for LZO and ZSTD in receive * compatibility with glibc 2.36 (mount.h) * add fallbacks for new GCC builtins * other: * corrupt-block: target specific items, offsets * documentation updates, new pages from wiki * new tests btrfs-progs-5.19.1 (2022-09-12) """"""""""""""""""""""""""""""" * fix memory leaks (extent buffer, path) * check: verify block device size vs item * rescue fix-device-size: allow to shrink device item * receive: fix crash on wrong pinter free() * other: * experimental: support for block-group-tree * documentation updates * new tests btrfs-progs-5.18 (2022-05-25) ----------------------------- * fixes: * dump-tree: don't print traling zeros in checksums * recognize paused balance as exclusive operation state, allow to start device add * convert: properly initialize target filesystem label * mkfs: don't create free space bitmaps for empty filesystem * restore: make lzo support build-time configurable, print supported compression in help text * update kernel-lib sources * other: * documentation updates, finish conversion to RST, CHANGES and INSTALL could be included into RST * fix build detection of experimental mode * new tests btrfs-progs-5.18.1 (2022-06-06) """"""""""""""""""""""""""""""" * fixes: * convert: fix self reference of toplevel directory * build: make kernel lib headers compatible with C++ * zoned mode: verify minimum zone size 4MiB * libbtrfs: cleanups, merge headers and remove declarations of unexported symbols * other: documentation updates btrfs-progs-5.17 (2022-04-26) ----------------------------- * check: * repair wrong num_devices in superblock * recognize overly long xattr names * fix wrong total bytes check for seed device * auto-repair on read on RAID56 * property set: unify handling of empty value to mean default, changed meaning for property 'compression' to allow reset to default and to set NOCOMPRESS, since kernel 5.14 * fixes: * dump-tree: print fs-verity items * fix location of system chunk on zoned filesystem * do not allow setting seeding flag on a filesystem with dirty log * mkfs and subpage support: use sectorsize as nodesize fallback for mixed profiles * preparatory work for extent tree v2, global roots * experimental feature (unstable interface, not built by default, do not use for production) * btrfstune: option --csum to switch checksum algorithm * other: * cleanups, refactoring * update documentation build, remove asciidocs leftovers * update fssum to consider xattrs * add fsstress Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> (cherry picked from commit 99f5604905da0ba931f3dfa5119bb9823036475b) (cherry picked from commit 12bc0789a17d8f88c6e1fa6077da05e362acaf57)
* btrfs-progs: update to 5.16.1Rosen Penev2023-10-042-3/+47
| | | | | | | | | Disable libudev to avoid dependency. Backport patch to fix 64-bit int types under ppc64 and mips64. Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry picked from commit 06de9e9958b3864e3f93a49aeb31a59c27bf2796)
* syslog-ng: update to version 4.4.0Josef Schlehofer2023-10-042-4/+4
| | | | | | | | | | - Release notes: https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.4.0 - Bump version in config file Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit 4dd49d7c3cd571107958154f1ed1ec8d8dba7464)
* exim: apply hotfix for some ZDI reported vulnerabilitiesDaniel Golle2023-10-041-0/+185
| | | | | | | | Apply preliminary hotfix for some (three?) of the 0-day vulnerabilities reported by ZDI. Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit db85d9ead6c3258757e199ad1fbd5bd20c9aac5f)
* libuecc: update repository URLMatthias Schiffer2023-09-281-2/+2
| | | | | | | I've changed my username to neocturne. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net> (cherry picked from commit 1df594bc01b0c7be34cd6eb477ebd1621959d15d)
* apache: move to PCRE2Christian Marangi2023-09-281-2/+2
| | | | | | | | Move apache to PCRE2 now that PCRE is flagged EOL and won't receive any security update. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com> (cherry picked from commit d14fe0c51c0be8d66772b83a165c7fb3c4850af0)
* apache: bump to release 2.4.57Christian Marangi2023-09-282-5/+5
| | | | | | | Bump apache to release 2.4.57 and refresh patch automatically. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com> (cherry picked from commit 86f9af41c1cb8670e56be5d0fec8b64daf7c7499)
* wget: use pcre2Leon M. Busch-George2023-09-271-3/+2
| | | | | | | | Pcre (1) is unmaintained and reached its end of life in 2021. The base system provides pcre2 exclusively since May. Signed-off-by: Leon M. Busch-George <leon@georgemail.eu> (cherry picked from commit 379946951c22ea774e4e22b4379571da604ded4b)
* wget: apply upstream fix to avoid nettle linking in nosslHannu Nyman2023-09-274-19/+91
| | | | | | | | | | | | Replace my own patch with the upstream solution, which they issued in response to my bug report. (Two patches as they overlooked something on the first try. Reference to https://savannah.gnu.org/bugs/index.php?63431 ) The nettle lib evaluation is now conditional to not having "--disable-ntlm". Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi> (cherry picked from commit fd7da3333e98c0d2ef1ed9d7997fe78000474caf)
* wget: update to 1.21.3Hannu Nyman2023-09-273-58/+23
| | | | | | | | | | | | | | | | Update wget to 1.21.3 * Remove patch 100-fix-hsts-time.patch as upstream has issued its own version on the fixes * Add a hack (and fixup autoreconf) to fix an upstream bug that forces the nettle library into nossl even if NTLM is disabled. Upstream bug filed: https://savannah.gnu.org/bugs/?63431 * Remove old maintainer who has not been active Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi> (cherry picked from commit a694130993d9d9eed8689ecdc1d6044dca3dc40e)
* wget: update to 1.21.2Huangbin Zhan2023-09-271-2/+2
| | | | | Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com> (cherry picked from commit 9ac16d452845f8ef9922e9fddc0f44f1d5e2554e)
* wget: fix hsts timeHuangbin Zhan2023-09-272-1/+55
| | | | | | | `time_t` on musl 1.2 is 64bit, while `long` is 32 bit. we will always get zero time with the original source on mips big endian. Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com> (cherry picked from commit 09076512680b742ad369d6496bf9b6819a37af24)
* czmq: drop libpcre dependencyJosef Schlehofer2023-09-221-2/+2
| | | | | | | | | | | It seems like the libpcre dependency was added by mistake. While checking in the source code of czmq (Makefile.am, CMakeLists.txt), I see there are several dependencies, but there isn't PCRE. Fixes: 936a48a ("czmq: add new package") Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit e3ab95185cb67e6d5753b2d7380bac74c4ef4acd)
* msmtp: update to version 1.8.24Josef Schlehofer2023-09-221-2/+2
| | | | | | | | Release notes: https://github.com/marlam/msmtp-mirror/commit/ef62463e4d0dc1f8e7f1db4f8dd35650999c13f9X Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit 29a9a6a4a7b797097992eb7ff2cfd84d11920b25)
* libdrm: install all headersBernd Kuhls2023-09-211-1/+1
| | | | | | | include/libdrm/drm.h and others headers are needed to build libva. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> (cherry picked from commit cb8c0ba6c0867604622873df96d5be164d747fc8)
* rclone: Update to 1.63.1Tianling Shen2023-09-201-2/+2
| | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> (cherry picked from commit 34d1c310b36ce0473a457ee1f82414ff994cd92c)
* libreswan: update to 4.9Lucian Cristian2023-09-202-3/+3
| | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com> (cherry picked from commit a707fcc88da8ee5adcb4619aab4180e18eac5645)
* libreswan: update to 4.7Lucian Cristian2023-09-201-3/+3
| | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com> (cherry picked from commit 8cf8518a0886e82ae3b3ad905af914bc63f4cce3)
* libreswan: fix build on macosSergey V. Lobanov2023-09-201-1/+3
| | | | | | | | | | | libreswan makefile detects macos (darwin) and changes build logic but OpenWrt is always Linux so it is required to specify linux as target platfrom This patch specifies Linux as a target platfrom Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in> (cherry picked from commit 270e8eabc3c953ea22e545a33ce12af3700748aa)
* python-sentry-sdk: update to 1.5.4Šimon Bořek2023-09-161-2/+2
| | | | | | | changelog: https://github.com/getsentry/sentry-python/blob/f6d3adcb3d7017a55c1b06e5253d08dc5121db07/CHANGELOG.md#154 Signed-off-by: Šimon Bořek <borek@autobakterie.cz> (cherry picked from commit 32e2a2fa2ae20e9b1248753d65705c5a8d3bdfbc)
* nextdns: Update to version 1.40.1Olivier Poitrey2023-09-161-2/+2
| | | | Signed-off-by: Olivier Poitrey <rs@nextdns.io>
* syslog-ng: update to version 4.3.1Josef Schlehofer2023-09-152-4/+5
| | | | | | | | | | | | | | | Makefile changes: - Since version 4.3.0, there is required to use pcre2 instead of pcre Reference: https://github.com/syslog-ng/syslog-ng/pull/4537 - Disable c++ support by default to avoid picking libstdcpp dependency Reference: https://github.com/syslog-ng/syslog-ng/pull/4484 Config changes: - Bump version in config file Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit c43599b0c885bbb3b6aae2cac34aa8d526fb8274)
* python3: Update to 3.9.18Jeffery To2023-09-082-2/+2
| | | | | | | Includes fix for CVE-2023-40217 (Bypass TLS handshake on closed sockets). Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* zerotier: update to 1.12.1Moritz Warning2023-09-047-40/+95
| | | | | | | | | | * split up "fix makefile" patch logical distinct parts * add libatomic dependency needed for prometheus-cpp-lite-1.0 * refresh patch series * improve warning message in init script Signed-off-by: Moritz Warning <moritzwarning@web.de> (cherry picked from commit 6cf39ba626e35474b5b3c59754610f20c240d202)
* zerotier: do not allow executable stackOskari Rauta2023-09-041-2/+2
| | | | | | | | | | | | | | zerotier as default has executable stack. [ 11.343143] process '/usr/bin/zerotier-one' started with executable stack executable stacks are not recommend, possibly provide a threat and there seems to be no advantage of executable stack with zerotier-one - so let's build it without instead. Stack is executable on x86_64, but not on all archs, such as ramips. Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com> (cherry picked from commit 56f30520f2413f9f1434def5b533a265912aea1c)
* zerotier: update to 1.10.4Moritz Warning2023-09-042-4/+4
| | | | | Signed-off-by: Moritz Warning <moritzwarning@web.de> (cherry picked from commit b5cde91594a858b823270e50fed27bb7985ddebe)
* zerotier: update to 1.10.3Moritz Warning2023-09-042-5/+5
| | | | | Signed-off-by: Moritz Warning <moritzwarning@web.de> (cherry picked from commit 1af4a404a5e3755f22c1ef76968f7b9ff93b038c)
* knot-resolver: update to version 5.7.0Josef Schlehofer2023-09-032-3/+3
| | | | | | | | | Changelog: https://www.knot-resolver.cz/2023-01-26-knot-resolver-5.6.0.html https://www.knot-resolver.cz/2023-08-22-knot-resolver-5.7.0.html Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit a5314681149259827c1eec074ae11fe6b7a80961)
* tcl: fix build on macosSergey V. Lobanov2023-09-021-0/+6
| | | | | | | | | | | configure script detects Darwin and uses flags incompatible with Linux target build. This patch uses fakeuname tool if host OS is MacOS to avoid Darwin detection on target build. Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in> (cherry picked from commit 6e9c7010501df5bb03ebc7e61c96a842d8843783)
* stress-ng: fix build on macosSergey V. Lobanov2023-09-021-0/+3
| | | | | | | | | This patch adds KERNEL=Linux to MAKE_FLAGS to avod Darwin detection. If Makefile detects Darwin, it removes -lbsd from build flags, but this flag is required due to target is always Linux, not bsd-like. Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in> (cherry picked from commit 53a51fb3d1cbf7fed94aad3a84aa36a19c54a55a)
* syslog-ng: fix build on macosSergey V. Lobanov2023-09-021-0/+7
| | | | | | | | | | | configure script detects Darwin and uses flags incompatible with Linux target build. This patch uses fakeuname tool if host OS is MacOS to avoid Darwin detection on target build. Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in> (cherry picked from commit 0a9a52ee77ce826f03b2a198e735df71ee2b55ad)
* fakeuname: add packageSergey V. Lobanov2023-09-024-0/+91
| | | | | | | | | | | | This package provides fakeuname host tool to avoid build platform detection for invalid configure/build scripts that are not friendly to cross-platform build. This fake uname tool returns Linux as OS name and target Linux version as OS version. Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in> (cherry picked from commit 4b6fc857bee8a58e011a4526114e13ae78064fc9)
* Merge pull request #21815 from mhei/21.02-php8-update-to-8.0.30Michael Heimpold2023-08-151-2/+2
|\ | | | | [21.02] php8: update to 8.0.30
generated by cgit (git 2.46.0) at 2026-10-12 00:21:51 +0000