Commit Graph

32287 Commits

Author SHA1 Message Date
Milinda Brantini 24d29581e2 dockerd: Update to 27.0.2
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2024-06-28 00:34:22 -07:00
Fabian Lipken f9ea70ad66 fx: update to 35.0.0
Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
2024-06-28 00:33:57 -07:00
Tianling Shen 1116792178
Merge pull request #24468 from ne20002/master-crowdsec
Update crowdsec to latest upstream release version 1.6.2
2024-06-28 02:06:43 +08:00
Jan Hák 4c003313d7 knot: update to version 3.3.7
Signed-off-by: Jan Hák <jan.hak@nic.cz>
2024-06-27 15:16:48 +02:00
S. Brusch dcd0b8d025
crowdsec: Update to latest upstream release version 1.6.2
Signed-off-by: S. Brusch <ne20002@gmx.ch>

Maintainer: Kerma Gérald <gandalf@gk2.net>
Package tested: with manual install on different partition tested

Description: update to latest version of upstream
2024-06-27 13:08:58 +02:00
Dirk Brenken a029f01d81
adblock: update 4.1.5-10
* made the DNS Reporting / tcpdump parsing code more capable
* small init fixes
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
2024-06-27 07:47:10 +02:00
Esaaprilia Salsabila 3c4c819520 freeradius3: add PKG_BUILD_PARALLEL:=0
freeradius-3.2.4 had a build failure in the snapshoot release but it builds successfully when doing a pull request
https://downloads.openwrt.org/snapshots/faillogs/aarch64_generic/packages/freeradius3/compile.txt

https://github.com/openwrt/packages/pull/24417

as a solution we need to add

PKG_BUILD_PARALLEL:=0

to prevent freeradius3 from doing the build in parallel

Signed-off-by: Esaaprilia Salsabila <esaapriliasalsabila@gmail.com>
2024-06-26 01:50:47 -07:00
Daniel Golle 3a998e1021 auc: remove package
With 'owut' there is now a much better alternative available.
Retire and remove 'auc' in favor of 'owut'.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2024-06-26 03:07:01 +01:00
Eric Fahlgren a636371c5e snort3: improve date filtering in report
- Take advantage of bug fix in jsonfilter to get rid of array hack, should
   improve memory footprint quite a bit

 - Implement substring matching in dates so you can collect data for a specific
   day, hour or run bin reports for histograms

 - Report title now contains specified date range, footer percentages

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
2024-06-25 10:03:07 -07:00
Javier Marcet adb9243b7a docker-compose: Update to version 2.28.1
Release notes:
https://github.com/docker/compose/releases/tag/v2.28.1

Signed-off-by: Javier Marcet <javier@marcet.info>
2024-06-24 15:28:59 -07:00
Eric Fahlgren 7225d73251 owut: update to 2024.06.24
- fix up versioning in Makefile
- change package description doc link to wiki entry instead of github
- changes
  73b70e52e9
  714c462cc8
  1b222bdcb8

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
2024-06-24 15:28:49 -07:00
Ryan Keane 2d711c8fbd cloudflared: Fix incorrect uci config syntax
Fix incorrect uci config syntax, caused by a careless newbie contributer.
Modify function append_param_arg() in init script, to support hyphenated
arguments.
Add more command parameters as uci options, no value is set to keep it default.

Signed-off-by: Ryan Keane <the.ra2.ifv@gmail.com>
2024-06-24 15:35:56 +08:00
Milinda Brantini 04b9e8ab97 dnslookup: Update to 1.11.1
Fixed unnecessary error when running with no arguments.

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2024-06-24 15:34:36 +08:00
Self Hosting Group c9a170578e miniupnpd: Update package to 2.3.6
and change title to term used in LuCi

Signed-off-by: Self Hosting Group <155233284+Self-Hosting-Group@users.noreply.github.com>
2024-06-23 23:11:54 -07:00
Marius Dinu 6429b66dab qrencode: add support for PNG output
Added menuconfig option to enable PNG output. Default=disabled.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
2024-06-23 23:11:19 -07:00
Peca Nesovanovic b18c0f17f7 net-snmp: include ipv6 address & route mibs
description: Since IPv6 is present in everyday use, we need to include
  information about IPv6 addresses & routes in SNMP

example:
  IP-MIB::ipAddressOrigin.ipv6

  IP-MIB::ipAddressOrigin[ipv6]["00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:01"] = manual
  IP-MIB::ipAddressOrigin[ipv6]["fd:00:00:09:02:55:00:00:00:00:00:00:00:00:01:01"] = manual
  IP-MIB::ipAddressOrigin[ipv6]["fe:80:00:00:00:00:00:00:0c:00:09:ff:fe:06:01:01"] = linklayer
  IP-MIB::ipAddressOrigin[ipv6]["fe:80:00:00:00:00:00:00:0c:02:09:ff:fe:00:01:01"] = linklayer
  IP-MIB::ipAddressOrigin[ipv6]["fe:80:00:00:00:00:00:00:ae:84:c6:ff:fe:25:8c:ce"] = linklayer

tested:
  23.05-snapshot
  master snapshot
  with LibreNMS, OpenWRT device IPv6 Addresses & Routes are properly recognized

Signed-off-by: Peca Nesovanovic <peca.nesovanovic@sattrakt.com>
2024-06-23 23:10:35 -07:00
Martin Hübner 9577427bad gatling: Add procd files
This commit adds a uci configuration file and makes the gatling server
controllable by procd.

Co-authored-by: Moritz Warning <moritzwarning@web.de>
Signed-off-by: Martin Hübner <martin.hubner@web.de>
2024-06-23 23:09:55 -07:00
Roland Osborne 5912206b83 databag: add package
Signed-off-by: Roland Osborne <roland.osborne@gmail.com>
2024-06-23 18:35:10 -07:00
Chen Minqiang 9877676890 modemmanager: add sourcefilter option support
This make source based IPv6 routing option available for
modemmanager case dhcpv6

Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
2024-06-23 16:39:01 -07:00
Tony Ambardar 9b873f4247 speedtest-netperf: add idle latency measurement
Allow measuring ping latency and CPU details at idle as a baseline before
measuring under data transfer loading. This allows better determination of
Latency Under Load, a critical bufferbloat parameter. The CPU details can
also be used to verify idle conditions or examine CPU frequency against
ping variations and jitter.

Change the default test duration to 30 seconds, which is adequate for SQM
tuning while reducing bandwidth consumption for upstream netperf servers.

Change the default ping host from gstatic.com to one.one.one.one, which is
widely available and generally shows lower latency.

When warning of internal netperf errors, suggest running netperf directly
to view error details.

Other minor updates include:
  - clear tmp file names for safety in case of traps
  - simplify ping code, argument parsing and number validation
  - fix cases of wrong protocol usage with hostname as ping target
  - drop unneeded egrep usage

Also update README accordingly, with clearer usage text and terminology.

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2024-06-23 16:10:00 -07:00
Daniel Kucera de8e13efa5 tinyproxy: fix upstream config generation
Signed-off-by: Daniel Kucera <daniel.kucera@gmail.com>
2024-06-23 16:09:28 -07:00
Erwan MAS 65fc6ccb06 tinc: fix regression bring by commit fd61f2d
Signed-off-by: Erwan MAS <erwan@mas.nom.fr>
2024-06-23 16:09:08 -07:00
Christopher Ng 81654c6570 knot: fix EXTRA_DEPENDS for APK version schema
EXTRA_DEPENDS now requires an `r` before the `PKG_RELEASE` because of
e8725a932e.

Fixes https://github.com/openwrt/packages/issues/23735

Signed-off-by: Christopher Ng <facboy@gmail.com>
2024-06-23 16:04:40 -07:00
Milinda Brantini 001e7138dd dockerd: Update to 26.1.4
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2024-06-24 03:56:21 +08:00
Yanase Yuki 4948edf6ff zabbix: update to 7.0.0
License has been changed to AGPL-3.0-only

Signed-off-by: Yanase Yuki <dev@zpc.st>
2024-06-23 11:28:47 -07:00
Yanase Yuki e1d7c7ec89 zabbix: update to 6.4.15
Signed-off-by: Yanase Yuki <dev@zpc.st>
2024-06-23 11:28:47 -07:00
Yanase Yuki 808c315436 zabbix: update to 6.4.14
Signed-off-by: Yanase Yuki <dev@zpc.st>
2024-06-23 11:28:47 -07:00
Yanase Yuki d8d5538f5a zabbix: update to 6.4.13
Signed-off-by: Yanase Yuki <dev@zpc.st>
2024-06-23 11:28:47 -07:00
Yanase Yuki 956c5f9bf7 zabbix: update to 6.4.12
Signed-off-by: Yanase Yuki <dev@zpc.st>
2024-06-23 11:28:47 -07:00
Yanase Yuki e61c3ea01c zabbix: zabbix-agentd: depend on libevent2-pthreads
zabbix-agentd requires libevent2-pthreads to build
correctly, so add it to DEPENDS.

Signed-off-by: Yanase Yuki <dev@zpc.st>
2024-06-23 11:28:47 -07:00
Sean Khan e5f93c915c nginx-util: Rework ptr cleanup and error handling
As per @Ansuel's not about ctx cleanup in error path, decided to rework
the patch.

Changes and Improvements:

Smart Pointers for Memory Management:
* The `EVP_PKEY_ptr` and `X509_NAME_ptr` smart pointers
  are used to manage the memory of `EVP_PKEY` and `X509_NAME`
  objects respectively to ensure proper cleanup.

Error Handling:
* Improved error messages and exception handling to provide
  more information about what went wrong.

Resource Cleanup:
* Ensured all allocated resources are now properly freed
  in case of an error to prevent memory leaks.

Signed-off-by: Sean Khan <datapronix@protonmail.com>
2024-06-23 11:27:05 -07:00
Sean Khan 0d0afff918 nginx-util: fix deprecated openssl 3.0 functions
Since upstream openwrt has been using openssl 3.0 for quite some time,
figured we could clean up some of the legacy code.

This PR updates the code for EC/RSA key generation.

nginx-util currently only generates 'ecc' keys, even though the
framework is there for rsa as well.

In order properly test the changes, I created two binaries:

'nginx-util-ssl'     (generates ec keys)
'nginx-util-ssl-rsa' (generates rsa keys)

where I would change line:455 in `src/nginx-ssl-util.hpp`

`auto pkey = gen_eckey(NID_secp384r1)` to `auto pkey = gen_rsakey(2048)`

Example with UCI config

```
config server '_rsa'
	list listen '443 ssl default_server'
	list listen '[::]:443 ssl default_server'
	option server_name '_rsa'
	list include 'restrict_locally'
	list include 'conf.d/*.locations'
	option uci_manage_ssl 'self-signed'
	option key_type 'rsa'
	option ssl_certificate '/etc/nginx/conf.d/_rsa.crt'
	option ssl_certificate_key '/etc/nginx/conf.d/_rsa.key'
	option ssl_session_cache 'shared:SSL:32k'
	option ssl_session_timeout '64m'
	option access_log 'off; # logd openwrt'
```

➤ /opt/bin/nginx-ssl-util-rsa add_ssl _rsa
Adding SSL directives to UCI server: nginx._rsa
	uci_manage_ssl='self-signed'
Created self-signed SSL certificate '/etc/nginx/conf.d/_rsa.crt' with key '/etc/nginx/conf.d/_rsa.key'.

[04/14/24 18:37:15](K-6.6.27)
root@WRX36 ~
➤ openssl x509 -in /etc/nginx/conf.d/_rsa.crt -text -noout
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:55:a6💿52:25:31:fd:3c:78:66:24:82:5f:bb:b6:a6:fe:8f:c7
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = ZZ, ST = Somewhere, L = None, CN = OpenWrt, O = OpenWrtBF399B64ACF71BC3
        Validity
            Not Before: Apr 14 22:37:15 2024 GMT
            Not After : Jul 16 22:37:15 2027 GMT
        Subject: C = ZZ, ST = Somewhere, L = None, CN = OpenWrt, O = OpenWrtBF399B64ACF71BC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ac:52:71:af:25:e9:05:0a:a5:d7:86:d3:8d:0b:
                    66:e0:09:cf:2a💿a1:63:57:36:46:61:04:16:fe:
                    94:84:d0:20:ab:01:15:55:aa:a1:89:c2:85:a9:84:
                    47:ba:84:d7:1f:a9:0c:c0:f0:67:2f:81:1d:1b:3b:
                    31:d5:94:6e:a0:f0:e6:ec:26:91:4a:e2:fd:58:4c:
                    ac:b5:9e:a1:cd:7d:91:51:29:81:1d:3e:4a:d9:d1:
                    d5:f1:2f:34:2f:ca:95:dc:42:d5:c4:d3:d6:b2:91:
                    d5:19:61:a2:b5:b1:90:f0:83:88:ef:92:c9:bf:a4:
                    59:a9:d6:00:6f:1c:0d:70:16:40:cc:cb:c0🇩🇪c4:
                    8f:00:83:a3:2f:77:ca:18:cd:7b:d4:77:96:47:78:
                    1b:c1:ff:08:86:93:79:91:8f:a7:95:71:46:06:69:
                    fc:cc:65:64:e7:99:11:cc:82:bb:39:6b:12:27:73:
                    0e:d1:e7:65:51:9e:ad:dc:b3:ff:3f:ba:b0:72:4f:
                    22:ad:7e:41:bb:3c:c7:80:30:81:5f:8b:32:f4:7f:
                    22:48:3f:3d:a9:eb:28:27:12:db:a9:63:c9:7e:e2:
                    ed:36:de:e7:68:31:4e:9c:c0:36:e8:f2:d9:3f:50:
                    09:50:a3:e8:7a:03:00:4f:8d:e1:10:eb:a1:87:44:
                    be:23
                Exponent: 65537 (0x10001)
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        06:7d:84:00:ac:8f:8b:a6:b6:b7:b5:ed:ee:7f:61:76:6d:ee:
        11:53:f6:d1:f8:95:ad:6c:d7:d0:3e:01:ac:bb:d7:7a:8d:59:
        80:ec:ba:b2:7b:78:5c:4f:5e:3f:f1:74:ad:d9:8c:a2:6b:08:
        9c:bf:b1:42:fd:8d:a6:35:48:4d:a7:2d:92:c9:45:66:77:32:
        a4:e0:ea:eb:e0:4a:42:f5:dd:ea:a2:c0:0a:66:5a:32:03:1d:
        e7:87:3a:7f:1e:00:ed:d0:21:01:d5:f9:e2:b1:e6:b7:cb:1c:
        67:11:de:69:7f:a2:ce:d0:fc:2d:f2:6c:33:84:4c:3d:f4:f6:
        60:6b:2e:31:b7:0c:41:2c:73:31:7e:94:19:a2:2b:6a:56:3f:
        07:37:71:97:28:58:91:63:b2:58:97:b2:aa:1e:d5:d9:6d:af:
        6f:a0:02:e0:06:39:b0:c9:f5:50:41:b5:58:41:6a:30:72:89:
        9a:67:7e:a1:7a:a5:02:b9:2a:f3:f8:93:4f:59:6e:b1:27:54:
        86:d1:ec:96:7a:dd:d1:44:6b:1e:3b:17:cf:15:64:ad:83:6b:
        63:20:2d:42:c3:28:68:14:de:12:4e:8a:c3:f3:10:c8:4b:4f:
        c7:d8:2b:a8:45:fb:3a:bd:9d:bd:08:71:08:09:ed:ea:9b:b9:
        3b:33:a6:a6

[04/14/24 18:37:27](K-6.6.27)
root@WRX36 ~
➤ /opt/bin/nginx-ssl-util add_ssl _ec
Adding SSL directives to UCI server: nginx._ec
	uci_manage_ssl='self-signed'
Created self-signed SSL certificate '/etc/nginx/conf.d/_ec.crt' with key '/etc/nginx/conf.d/_ec.key'.

[04/14/24 18:37:43](K-6.6.27)
root@WRX36 ~
➤ openssl x509 -in /etc/nginx/conf.d/_ec.crt -text -noout
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:32:fe:07:09:79:d1:40:d7:43:2e:45:3d:98:4a:77:65:d0:29:41
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = ZZ, ST = Somewhere, L = None, CN = OpenWrt, O = OpenWrt2EDD40F41960C8C1
        Validity
            Not Before: Apr 14 22:37:43 2024 GMT
            Not After : Jul 16 22:37:43 2027 GMT
        Subject: C = ZZ, ST = Somewhere, L = None, CN = OpenWrt, O = OpenWrt2EDD40F41960C8C1
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub:
                    04:97:d2:b2:f0:c9:60:60:89:7e:ea:6f:48:1c:90:
                    8e:6d:1d:d8:58:46:8c🇩🇪e9:50:e2:74:ea:d8:dd:
                    8c:d9:ed:f4:4c:b7:41:95:55:98:38:5a:9e:66:83:
                    b9:7c:79:71:9b:ec:18:ed:d9:09:3c:f7:64:32:ae:
                    59:ad:92🇩🇪d7:c4:15:2e:e5:89:65:f4:29:8a:62:
                    a0:85:21:95:22:3a:38:e3:11:e6:f2:01:f6:50:62:
                    01:ed:68:0d:d0:0c:d4
                ASN1 OID: secp384r1
                NIST CURVE: P-384
    Signature Algorithm: ecdsa-with-SHA256
    Signature Value:
        30:65:02:30:78:af:d1:4f:57:b1:97:2b:87:aa:7f:a2:26:39:
        19:30:5c:4f:9c:f0:d7:ee:24:8e:a2:39:ec:70:af:16:eb:a6:
        72:96:d4:a7:2f:c1:38:f4:65:ed:ed:bf:22:c6:a4:6d:02:31:
        00:bc:ec:19:0e:3d:6a:d1:5a:ae:6d:5c:a3:ec:96:60:32:f9:
        6a:88:06:92:ed:c1:a7:44:2c:33:7a:22:72:0f:2a:ce:83:f0:
        f2:04:9e:49:60:ef:83:b4:7f:8b:af:61:c9

```

Maintainer: Peter Stadler <peter.stadler@student.uibk.ac.at>
Compile tested: aarch64, qualcommax, Master Branch
Run tested: aarch64, Dynalink DL-WRX36, Master Branch

Signed-off-by: Sean Khan <datapronix@protonmail.com>
2024-06-23 11:27:05 -07:00
Lars Kruse d3c2f7625c mwan3: "use" action: run process via `exec` and handle whitespace
Previously the "use" command had the following shortcomings:
* a subprocess was created instead of replacing the shell process
* whitespace in arguments was not handled correctly

Implementation detail:
In shell context the `"$@"` expression should be used (instead of `$*`).
This allows the safe handling of arguments containing whitespace.

Closes: #20001

Signed-off-by: Lars Kruse <devel@sumpfralle.de>
2024-06-23 11:20:26 -07:00
David Andreoletti 2b49711d43 shairport-sync: fixed diagnostics settings
shairport-sync expects statistics/log_verbosity/log_output_to settings
to be in the diagnostics section of shairport-sync's native config.

Prior to this commit, these settings were either missing (log_output_to)
or generated in the incorrect (general) native config section bloc.

Signed-off-by: David Andreoletti <david@andreoletti.net>
2024-06-23 11:17:49 -07:00
Daniel Golle 57fdc5d2b9 libjwt: add package
Add package for JWT C Library built against OpenSSL.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2024-06-23 11:16:25 -07:00
Jianhui Zhao 482cfd1c6a lua-ffi: Add package
Lua-ffi is a portable lightweight C FFI for Lua, based on libffi
and aiming to be mostly compatible with LuaJIT FFI, but written
from scratch in C language.

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2024-06-23 11:15:50 -07:00
Luiz Angelo Daros de Luca d17ab93b6c sane-backends: update to 1.3.1
Many changes since 1.0.31. See:

- https://gitlab.com/sane-project/backends/-/releases/1.0.32
- https://gitlab.com/sane-project/backends/-/releases/1.1.1
- https://gitlab.com/sane-project/backends/-/releases/1.2.1
- https://gitlab.com/sane-project/backends/-/releases/1.3.1

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2024-06-23 11:13:39 -07:00
Eric Fahlgren dab1efaf08 owut: add new package
owut (OpenWrt Update Tool) is a command line program that gathers
information from the various openwrt.org build sites and reports
status on various aspects of builds and package availability.
It also shows many details about your current configuration and
installed packages, allowing it to create, download, verify and
install new images containing the user-installed packages.

It is written completely in 'ucode', allowing for user customization
on the installed device, without the need for compilers and linkers.

Documentation is available at https://github.com/efahl/owut
Forum thread at https://forum.openwrt.org/t/owut-openwrt-upgrade-tool/200035

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
2024-06-23 11:13:14 -07:00
Yangyu Chen c3232005cb nfs-kernel-server: do not export /mnt by default
Currently, the nfs-kernel-server package exports /mnt by default after
it is installed. This is not a good default behavior, as it may expose
sensitive data to the network if a user mounts something on /mnt. This
commit commented out the line that exports /mnt, so the user has to
enable it explicitly.

Signed-off-by: Yangyu Chen <cyy@cyyself.name>
2024-06-23 11:10:59 -07:00
Daniel Golle 49eb8e86b9 opensc: update to version 0.25.1
* New in 0.25.1; 2024-04-05
** General improvements
* Add missing file to dist tarball to build documentation (#3063)

** minidriver
* Fix RSA decryption with PKCS#1 v1.5 padding (#3077)
* Fix crash when app is not set (#3084)

* New in 0.25.0; 2024-03-06
** Security
* [CVE-2023-5992](https://github.com/OpenSC/OpenSC/wiki/CVE-2023-5992): Side-channel leaks while stripping encryption PKCS#1.5 padding in OpenSC (#2948)
* [CVE-2024-1454](https://github.com/OpenSC/OpenSC/wiki/CVE-2024-1454): Potential use-after-free in AuthentIC driver during card enrollment in pkcs15init (#2962)

** General improvements
* Update OpenSSL 1.1.1 to 3.0 in MacOS build (#2930)
* Remove support for old card drivers Akis, GPK, Incrypto34 and Westcos, disable Cyberflex driver (#2885)
* Fix 64b to 32b conversions (#2993)
* Improvements for the p11test (#2991)
* Fix reader initialization without SCardControl (#3007)
* Make RSA PKCS#1 v1.5 depadding constant-time (#2948)
* Add option for disabling PKCS#1 v1.5 depadding (type 01 and 02) on the card (#2975)
* Enable MSI signing via Signpath CI integration for Windows (#2799)
* Fixed various issues reported by OSS-Fuzz and Coverity in drivers, PKCS#11 and PKCS#15 layer

** minidriver
* Fix wrong hash selection (#2932)

** pkcs11-tool
* Simplify printing EC keys parameters (#2960)
* Add option to import GENERIC key (#2955)
* Add support for importing Ed25518/448 keys (#2985)
** drust-tool
* Add tool for D-Trust cards (#3026, #3051)
** IDPrime
* Support uncompressed certificates on IDPrime 940 (#2958)
* Enhance IDPrime logging (#3003)
* Add SafeNet 5110+ FIPS token support (#3048)
** D-Trust Signature Cards
* Add support for RSA D-Trust Signature Card 4.1 and 4.4 (#2943)
** EstEID
* Remove expired EstEID 3.* card support (#2950)
** ePass2003
* Allow SW implementation with more SHA2 hashes and ECDSA (#3012)
* Fix EC key generation (#3045)
** SmartCard-HSM
* Fix SELECT APDU command (#2978)
** MyEID
* Update for PKCS#15 profile (#2965)
** Rutoken
* Support for RSA 4096 key algorithm (#3011)
** OpenPGP

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2024-06-23 11:10:41 -07:00
Daniel Golle 3c12042eda pcsc-tools: update to version 1.7.1
Adds a bunch of new ATRs.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2024-06-23 11:10:41 -07:00
Daniel Golle 74ee2fa489 pcsc-lite: update to version 2.2.3
Switch to meson build system instead of autotools.

Changes since version 2.0.1:

2.2.3: Ludovic Rousseau
26 May 2024
- meson:
  . Fix build on Slackware 15
  . fail if both libusb and libudev are used
- Fix memory leak on exit
- libpcscspy: dump an output buffer only if the call succeeded
- Some code cleanup

2.2.2: Ludovic Rousseau
20 May 2024
- Serial support is ENABLED by default

2.2.1: Ludovic Rousseau
8 May 2024
- fix meson related issues
- Some code cleanup

2.2.0: Ludovic Rousseau
3 May 2024
- provide files for meson build tool (replaces autoconf/auoomake)
- fix a missing symbol in libpcscspy (bug introduced by the previous version)
- fix shutdown issues with hotplug_libusb
- update pcsc-spy manpage
- update copyright date
- Some other minor improvements

2.1.0: Ludovic Rousseau
12 April 2024
- LIBPCSCLITE_DELEGATE is used to redirect to another libpcsclite library
- setup_spy.sh displays the LIBPCSCLITE_DELEGATE value to use for spying
- provides libfake.c as a sample source code
- Some other minor improvements

2.0.3: Ludovic Rousseau
3 March 2024
- add SCARD_E_UNKNOWN_RES_MNG back

2.0.2: Ludovic Rousseau
3 March 2024
- SCardConnect() & SCardReconnect(): restrict the protocol used
- negotiate PTS also for the backup protocol
- pcscd.8:
  . document --disable-polkit
  . add "CONFIGURATION FILE" section
- Some other minor improvements

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2024-06-23 11:10:41 -07:00
Milinda Brantini 8f3a94645d containerd: Update to 1.7.18
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2024-06-23 11:09:01 -07:00
Milinda Brantini ab5b9ea2f0 docker: Update to 26.1.4
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2024-06-23 11:08:39 -07:00
Nathaniel Wesley Filardo ed7d0b0640 kafs-client: introduce package
Signed-off-by: Nathaniel Wesley Filardo <nwfilardo@gmail.com>
2024-06-23 11:08:20 -07:00
Nathaniel Wesley Filardo 5a8d39ec35 keyutils: package into the right directories
The kernel knows about /sbin/request-key *at that path*, and the shipped
configuration file presumes that /sbin/key.dns_resolver and /bin/keyctl are the
correct paths.

Signed-off-by: Nathaniel Wesley Filardo <nwfilardo@gmail.com>
2024-06-23 11:06:53 -07:00
Hirokazu MORIKAWA a5e319df3d node: bump to v20.15.0
Notable Changes
* test_runner: support test plans
* inspector: introduce the --inspect-wait flag
* zlib: expose zlib.crc32()
* cli: allow running wasm in limited vmem with --disable-wasm-trap-handler

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-06-23 11:06:32 -07:00
Antonio Pastor 645b04cb4b netatalk: update to 3.2.0.
Commit restores package after it was removed from OpenWrt 21.02.
Signed-off-by: Antonio Pastor <apccv@outlook.com>
2024-06-23 11:05:52 -07:00
Yaroslav Petrov 152a32208f monit: update to 5.34.0
Compile tested: x86_64, PC Engines APU4, OpenWrt 22.03.5/main
Run tested: x86_64, PC Engines APU4, OpenWrt 22.03.5/main, div. tests

* update from 5.33.0 to 5.34.0 (See changelog: https://mmonit.com/monit/changes/)
* remove upstream (obsolete) patch

Signed-off-by: Yaroslav Petrov <info@lank.me>
2024-06-23 11:05:02 -07:00
Erwan MAS 8ed9e61d04 moreutils: fix depencies for ts
Signed-off-by: Erwan MAS <erwan@mas.nom.fr>
2024-06-23 11:04:42 -07:00