Commit Graph

11115 Commits

Author SHA1 Message Date
Paul Donald 58e7bfc41f p910nd: hotplug shellcheck fixes
Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-02-11 15:48:49 -08:00
Paul Donald dabeaa7643 p910nd: init: check device (/dev/usb/lpX) existence
this prevents the daemon exiting when a configured device
is not plugged in.

Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-02-11 15:48:49 -08:00
Paul Donald ac501c908d p910nd: init: partial fix for openwrt/packages#10496
Harmless to carry this fix until procd.sh adds the param

This parameter will mean umdns advertises not just "OpenWrt" but a more
appropriate string:

"Apple LaserWriter Pro 630"

Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-02-11 15:48:49 -08:00
Paul Donald 4591a79fa2 p910nd: hotplug+init: include extra ieee1284 properties
Apple and macOS GUI co-opts the mDNS note= param as "Location"

Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-02-11 15:48:49 -08:00
Paul Donald 5bc581e698 p910nd: hotplug: minor bug fixes
Commit driver_home defaults before continuing

Fix missing path for serial number acquisition

Store current device if no previously configured device had one.
Also set CHAR_DEV so the printer can get its driver sent on first run.

Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-02-11 15:48:49 -08:00
Paul Donald 6e886cd434 p910nd: hotplug: small refactor
replace -a with &&

shorten uci commands via variables

add optional ieee1284_id parameters

Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-02-11 15:48:49 -08:00
Paul Donald 069cc8dc81 p910nd: init: add txtvers=1 to mDNS properties
The spec https://developer.apple.com/bonjour/printing-specification/bonjourprinting-1.2.1.pdf
notes:

... if the meaning of any of the TXT record keys is changed, the txtvers value
will be incremented. The current value of this key is “1”, and if this key does not exist in
the TXT record, the default value of “1” is assumed. The txtvers SHOULD be the first
key/value pair in the TXT record.

Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-02-11 15:48:49 -08:00
Paul Donald ffa1bbbe78 p910nd: init: line-break and conditionalize mDNS properties
Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-02-11 15:48:49 -08:00
Paul Donald b8890c69e4 p910nd: init: only run mDNS changes if mdns is set to on
i.e. don't do the extra work unless mdns setting is enabled

Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-02-11 15:48:49 -08:00
Paul Donald 34a35c93ce p910nd: init script
Don't run procd with a name of p9100d or p9101d etc.
Use the original binary name: p910nd.

This way, all supplied parameters should be visible via e.g.:

ps
xargs -0 < /proc/{procid}/cmdline

Revise all p910nd strings to the variable DAEMON_NAME or CONFIG where
appropriate.

Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-02-11 15:48:49 -08:00
Alexandru Ardelean e73ac3534a
Merge pull request #23354 from neheb/2
tcpreplay: backport CVE fix
2024-02-11 12:29:34 +02:00
Michael Gerlach ea47bc9c58 iodine: bump version to 0.8.0
Signed-off-by: Michael Gerlach <n3ph@cccfr.de>
2024-02-10 18:35:42 -08:00
Rosen Penev fd67754a05 tcpreplay: backport CVE fix
Low severity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-10 15:57:45 -08:00
Maxim Storchak e3b2caae05 tgt: update to 1.0.90
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2024-02-10 14:58:13 -08:00
Ivan Pavlov 13a237d941 net-snmp: update to 5.9.4
Adjust patches for current version changes
Module "disk" renamed to "disk_hw"
Internal type "unknown" changed to "u_int32_t"
Add patch with removing macro syntax checking for successful build

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
2024-02-10 14:57:25 -08:00
Tiago Gaspar 643e3bf73a jool: update to 4.1.11
Update jool to 4.1.11 and remove unneeded patch.
Changelog: https://github.com/NICMx/Jool/releases/tag/v4.1.11

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
2024-02-10 14:54:42 -08:00
krant f58be51721 squid: fix configure options
- Remove non-existing 'dlmalloc' option
- Use 'with-cap' instead of 'with-libcap'
- Use 'with-xml2' instead of 'with-libxml2'
- Patch configure.ac to properly handle 'with-nettle'

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-10 14:54:24 -08:00
Jonas Jelonek f9ae3084c9 croc: update to 9.6.9
change overview:
9.6.6 -> 9.6.8: only CI + deployment changes
9.6.8 -> 9.6.9: crypto library version bump

changelogs:
9.6.6 -> 9.6.7: https://github.com/schollz/croc/releases/tag/v9.6.7
9.6.7 -> 9.6.8: https://github.com/schollz/croc/releases/tag/v9.6.8
9.6.9 -> 9.6.9: https://github.com/schollz/croc/releases/tag/v9.6.9

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
2024-02-08 21:42:16 -08:00
krant e0f538465f nbd: update to 3.25
- Use up-to-date project URLs
- Use up-to-date configure args
- Drop obsolete std=gnu99 from CFLAGS

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-08 21:42:04 -08:00
krant 4007a08529 squid: update to 6.7
- Switch URL to HTTPS
- Remove default/obsolete configure options
- Fix and refresh the patch

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-08 09:37:43 -08:00
krant 4dd0e03bdd lyncx: fix wrongful include of 'bsd/stdlib.h' is some environments
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-08 09:37:16 -08:00
kkubicki 278970f10c autossh: make forwarding optional
- previously localport option was required, which broke older configs
- now in-config forwarding is only optional
- ssh option still can be used for forwarding as in sample config

Signed-off-by: kkubicki <krzysiek.kubicki@gmail.com>
2024-02-07 14:11:35 -08:00
Eric Fahlgren b94c6dd37d snort3: improve script reliability
- Enable missing variable checking by default
 - Explicitly check variables are defined in all 'rm' commands

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
2024-02-07 14:01:11 -08:00
Martin Schiller e6fb43bdc9 openvpn: add OpenVPN option disable-dco
You maybe want to disable the DCO support, so let's add this option.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2024-02-07 13:58:46 -08:00
krant 0e1f5957d8 iptraf-ng: update to 1.2.1
- Update package URLs
- Remove rvnamed-ng target since it was merged into iptraf-ng

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-07 13:57:13 -08:00
krant a32fa4998a gitolite: update to 3.6.13
- Use git for sources since no proper tarball is available
- Switch package URL to HTTPS
- Refresh the patch

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-07 13:55:48 -08:00
krant ecc8d12076 git-lfs: update to 3.4.1
- Update package URLs to the official ones

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-07 13:55:38 -08:00
krant 158b761193 git: update to 2.43.0
- Refresh patches

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-07 13:53:17 -08:00
krant 3e3db442e7 lynx: update to 2.9.0
- Remove stale mirrors
- Use HTTPS for package URL
- Don't set default configure args
- Disable newly added bz2 support
- Formatting

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-07 13:50:54 -08:00
Othmar Truniger eb7d40509e knxd: bump to upstream version 0.14.61
Signed-off-by: Othmar Truniger <github@truniger.ch>
2024-02-07 17:45:06 +08:00
krant d0546216d2 fping: update to 5.1
- Don't set default configure arg

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-06 17:52:14 +02:00
krant d8e2857a74 subversion: update to 1.14.3
- Adopt the package
- Remove default configure options
- Rebase the patch

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-05 11:26:03 -08:00
Jonas Lochmann fc3cc2fe5c mwan3: use network_get_preferred_ipaddr6
This updates mwan3 to use network_get_preferred_ipaddr6 instead of
network_get_ipaddr6 if possible to determine a source ip for the
connectivity checks. This avoids issues where the first ip address
that is returned from network_get_ipaddr6 does not work anymore while
the preferred one returned from network_get_preferred_ipaddr6 works.

Signed-off-by: Jonas Lochmann <git@inkompetenz.org>
2024-02-04 16:39:13 -08:00
Rosen Penev 69dc285ac9 mosquitto: reenable options wrongly turned off
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-04 16:35:06 -08:00
Paul Donald 825b22a4db p910nd: hotplug script
Signed-off-by: Paul Donald <newtwen@gmail.com>
2024-02-04 16:22:58 -08:00
Eric Fahlgren 203e9413e2 snort3: finish up several incomplete capabilities
Reporting
 - Use json alert data for 10x speed improvement in report generation
 - Include both gid and sid, plus packet direction in report output
 - Add by-date incident filtering
 - Add verbose mode which displays actual rules triggered and their source
 - Attempt to look up host names from IPs in verbose mode
 - Clean up display of port number involved in incidents

Rules
 - Complete downloader for subscription rules using oinkcode (only tested
   with snort.org's "free" tier subscription)
 - Auto-detect multiple rules files and include them in lua 'ips.rules'
 - Add '--backup' option to copy out current rules before installing new
 - Add '--persistent' option to 'snort-rules', storing in persistent location

CLI interface
 - Completely rework command line option parsing in all user scripts
 - Allow options and commands to be in any order on command line
 - Add long-form names for all options ('--help' for '-h' and so on)
 - Detect errors properly in options, enhance help pages

Bug fixes
 - Use 'mkdir -p' on all directory creation
 - Use proper tmp directory from 'snort.snort.temp_dir' everywhere

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
2024-02-04 16:21:11 -08:00
Jan Klos 800218561d iputils: bump to 20240117
Signed-off-by: Jan Klos <jan@klos.xyz>
2024-02-04 16:20:38 -08:00
Fabrice Fontaine 5afe5c9031 treewide: assign PKG_CPE_ID
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2024-02-04 16:16:10 -08:00
Olivier Poitrey addb775797 nextdns: Update to version 1.42.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2024-02-04 16:08:47 -08:00
Jan Hoffmann 94d74d3566 vnstat2: update to version 2.12
This version includes several new features that allow to simplify the
package significantly: The noexit patch and hotplug script are no longer
needed, and the init script doesn't have to check for legacy databases
anymore.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>
2024-02-04 16:07:08 -08:00
Konstantin Demin af748ea691 libcurl-gnutls: update to version 8.6.0
https://curl.se/changes.html#8_6_0

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
2024-02-04 16:05:08 -08:00
Fabrice Fontaine 222df5ed5d net/nbd: fix PKG_CPE_ID
There is not a single CVE linked to network_block_device:nbd so use
network_block_device_project:network_block_device instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3🅰️network_block_device_project:network_block_device

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2024-02-04 16:02:55 -08:00
Fabrice Fontaine 0d96d38c6c net/miniupnpc: fix PKG_CPE_ID
cpe:/a:miniupnp_project:miniupnpc is the correct CPE ID for miniupnpc:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3🅰️miniupnp_project:miniupnpc

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2024-02-04 16:02:30 -08:00
Fabrice Fontaine f7ad88678d net/ntpd: fix license
Replace "Unique" by the standard SPDX identifier for NTP license:
https://spdx.org/licenses/NTP.html

Fixes: 1aff45c6dd (ntpd: add SPDX license information)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2024-02-04 15:58:57 -08:00
Fabrice Fontaine 013a2f2dfa net/boinc: fix PKG_CPE_ID
boinc_project:boinc has never been a valid CPE ID so use
rom_walton:boinc instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3🅰️rom_walton:boinc

Fixes: 9c2bd865c7 (boinc: new package for distributed computing/data acquisition)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2024-02-04 15:58:35 -08:00
Fabrice Fontaine d6d157f644 net/tinyproxy: fix PKG_CPE_ID
tinyproxy_project:tinyproxy is a better CPE ID than banu:tinyproxy as
this CPE ID has the latest CVEs (whereas banu:tinyproxy only has CVEs up
to 2012):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3🅰️tinyproxy_project:tinyproxy

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2024-02-04 15:58:02 -08:00
Fabrice Fontaine b52f465c7b net/tinc: fix PKG_CPE_ID
tinc-vpn:tinc is a better CPE ID than tinc:tinc as this CPE ID has the
latest CVEs (whereas tinc:tinc only has CVEs up to 2002):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3🅰️tinc-vpn:tinc

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2024-02-04 15:57:46 -08:00
Fabrice Fontaine 803c7b0571 net/vsftpd: fix PKG_CPE_ID
vsftpd_project:vsftpd is a better CPE ID than beasts:vsftpd as this CPE
ID has the latest CVEs (whereas beasts:vsftpd only has CVEs up to 2015):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3🅰️vsftpd_project:vsftpd

Fixes: 1371b7be87 (vsftpd: Fix compilation without ECC or deprecated APIs)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2024-02-04 15:57:34 -08:00
S. Brusch c08dac5ec5 crowdsec: new upstream release version 1.6.0
Update crowdsec to latest upstream release version 1.6.0

Signed-off-by: S. Brusch <ne20002@gmx.ch>

Maintainer: Kerma Gérald <gandalf@gk2.net>
Package tested: not able to test run due to limited space (package is big)

Description: update to latest version of upstream
2024-02-04 15:55:41 -08:00
Konstantin Demin 1ff280529b nmap: bump package version
Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
2024-02-04 23:05:25 +00:00