Commit Graph

33497 Commits

Author SHA1 Message Date
Anirudh Srinivasan d4a4de8309 prometheus-node-exporter-ucode: fix missing .so mounts in jail
Signed-off-by: Anirudh Srinivasan <anirudhsriniv@gmail.com>
2025-02-09 17:53:37 +08:00
Peter van Dijk 39002e38a5 pdns: update to 4.9.4
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2025-02-08 21:02:40 +08:00
Wesley Gimenes ff34616414 netbird: update to 0.36.5
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.36.5

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
2025-02-08 01:55:59 +08:00
ACI0419 1c1125a47e ddns-scripts: add ydns.io provider 2025-02-06 18:03:44 +01:00
Francesco Benini 7c58cd667b keepalived: add support for directory sync
This commit adds support for folder synchronization.
An example is in the 810-files file where it is explained how to
synchronize all hotplug files of keepalived.

Signed-off-by: Francesco Benini <francy.benini@gmail.com>
2025-02-05 08:14:04 +01:00
Milinda Brantini 8eecd2e5a0 sing-box: Update to 1.11.1
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2025-02-05 14:13:04 +08:00
Jianhui Zhao 92953c1d7d lua-cjson: add build VARIANT for Lua5.3
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2025-02-04 20:25:53 -08:00
Adam Beck 1302e503a3 ddns-scripts: add type field for digitalocean API
DigitalOcean API requires a "type" JSON field to update a DNS
record. This adds that while checking for IPv6 to change which
record type to use. Without it, the API call fails, making
the script unable to update the DNS records for DigitalOcean.

Signed-off-by: Adam Beck <subcursion@gmail.com>
2025-02-04 16:27:16 +01:00
Florian Eckert 25b156a71b keepalived: add ubus status
The hotplug scripts are called with every state change. When called, the
scripts are processed under '/etc/hotplug.d/keepalived'. This change adds
the functionality that the last state change of the keepalived can be
queried via the ubus.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-02-04 13:48:09 +01:00
Tianling Shen 35b614c437
rclone: Update to 1.69.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-02-04 15:25:08 +08:00
Matt Eaton 1cc7069c64 strongswan: fix compilation against wolfssl
Backports upstream patch fix compilation error against recent versions of wolfssl.

Closes https://github.com/openwrt/packages/issues/25877

Signed-off-by: Matt Eaton <git@divinehawk.com>
2025-02-03 16:36:25 +01:00
Milinda Brantini 2c7b8ef5a2 sing-box: Update to 1.11.0
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2025-02-03 23:32:13 +08:00
Tianling Shen 155fe01112
alist: Update to 3.42.0
Fix the value of conf.WebVersion.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-02-03 20:38:17 +08:00
Tianling Shen 2d83d187a0
cloudflared: Update to 2025.1.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-02-03 20:22:18 +08:00
Tianling Shen cec4103bbc
v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-02-03 20:22:01 +08:00
Tianling Shen c1b0143a79
v2ray-core: Update to 5.26.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-02-03 20:21:53 +08:00
Tianling Shen e9a86e1809
xray-core: Update to 25.1.30
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-02-03 20:21:37 +08:00
Dirk Brenken bf2fb994fa
banIP: update 1.5.0-6
* fixed  the incomplete rule maintainance during banIP reloads
* fixed the Set query function (if the Set counters are disabled)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2025-02-02 22:15:41 +01:00
Antonio Pastor 900e71b607 netatalk: add uci support
Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
2025-02-02 19:12:30 +08:00
Antonio Pastor 0bd99d1cbb netatalk: create small and full variants
Small version includes only AFP file sharing to minimize size.
Base version adds AppleTalk. This matches the contents of the
existing package.
Full version includes everything that OpenWrt can support and
configuration option for build system (menuconfig).

Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
2025-02-02 19:12:30 +08:00
Antonio Pastor 960fde3ace netatalk: update to 4.1.1
Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
2025-02-02 19:12:30 +08:00
Sandro Jäckel 7c8295dc2b tailscale: update to 1.80.0
Signed-off-by: Sandro Jäckel <sandro.jaeckel@gmail.com>
2025-02-02 15:58:00 +08:00
Daniel Golle befdf8a5b2 cryptsetup: update to version 2.7.5
Enable building cryptsetup-reencrypt, integritysetup and veritysetup,
add new binary packages for integritysetup and veritysetup.

Changes since version 2.7.4
~~~~~~~~~~~~~~~~~~~~~~~~~~~
* Fix possible online reencryption data corruption (only in 2.7.x).

  In some situations (initializing a suspended device-mapper device),
  cryptsetup disabled direct-io device access. This caused unsafe
  online reencryption operations that could lead to data corruption.
  The code now adds strict checks (and aborts the operation) and
  changes direct-io detection code to prevent data corruption.

* Fix a clang compilation error in SSH token plugin.

  As clang linker treats missing symbols as errors, the linker phase
  for the SSH token failed as the optional cryptsetup_token_buffer_free
  was not defined.

* Fix crypto backend initialization in crypt_format_luks2_opal API call.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2025-02-02 00:00:26 +00:00
Lucian CRISTIAN 6623eadfa0 frr: 10.2.1 fixes
add packing mgmtd, pim6d and update helper scripts

Signed-off-by: Lucian CRISTIAN <lucian.cristian@gmail.com>
2025-02-01 10:54:15 +02:00
Noah Meyerhans 55c559347f bind: bump to 9.20.5
Fixes CVEs:
- CVE-2024-12705: DNS-over-HTTPS flooding
- CVE-2024-11187: Limit additional section processing for large RDATA sets

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2025-01-31 11:56:38 -05:00
Jan Hák 089f77e615 knot: update to version 3.4.4
Signed-off-by: Jan Hák <jan.hak@nic.cz>
2025-01-30 19:21:10 +02:00
John Audia 21c63a67e3 snort3: update to 3.6.2.0
Changelog: https://github.com/snort3/snort3/releases/tag/3.6.2.0

% snort --version

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.6.2.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2024 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.18
           Using Hyperscan version 5.4.2 2025-01-28
           Using libpcap version 1.10.5 (with TPACKET_V3)
           Using LuaJIT version 2.1.0-beta3
           Using LZMA version 5.6.2
           Using OpenSSL 3.0.15 3 Sep 2024
           Using PCRE2 version 10.42 2022-12-11
           Using ZLIB version 1.3.1

Signed-off-by: John Audia <therealgraysky@proton.me>
2025-01-30 19:19:00 +02:00
John Audia 3e42bc8bc2 libdaq3: update to 3.0.18
Update to latest version.

Changelog: https://github.com/snort3/libdaq/releases/tag/v3.0.18

Signed-off-by: John Audia <therealgraysky@proton.me>
2025-01-30 19:16:42 +02:00
Eric Fahlgren 445e40c3c8 owut: update to 2025.01.29
Bug fixes:
    efahl/owut@bced54a owut: prefer use of packages_changes when generating build request
    efahl/owut@b469547 owut: revert rootfs restrictions

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
2025-01-30 17:00:54 +08:00
Stan Grishin bee7227871 https-dns-proxy: bugfixes and improvements
* improvement: Makefile: prepend `r` to PKG_RELEASE in binary and init script versions to match package version
* bugfix: init script: more reliable/robust start on boot
* improvement: init script: more compact output()
* improvement: init script: better DNS Hijack login
* improvement: init script: fold some dnsmasq-related functions into dhcp_backup()

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-01-29 11:07:40 -08:00
Stan Grishin 2e764368cc adblock-fast: bugfixes: boot-up, StevenBlack list, new CERT.pl source
* bugfix: more robust boot-up start
* bugfix: processing of StevenBlack lists
* new remote block-list: CERT.pl

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-01-29 11:07:14 -08:00
Dirk Brenken f9effa495e
adblock: update 4.2.4-1
* support smartdns as dns backend
* support top level domains in local white- and blackklist,
  e.g. a 'de' in the blacklist blocks all domains with a german tld
  and the tld compression removes all subdomains from the final blocklist

Signed-off-by: Dirk Brenken <dev@brenken.org>
2025-01-27 23:29:22 +01:00
Stan Grishin cfd35b6bf8 pbr: bugfixes: boot-up and negative dest_addr
* bugfix: more robust boot-up behaviour, obsoleting following config
  options: procd_boot_delay, procd_boot_timeout, procd_wan_ignore_status
* bugfix: fix typo in processing negations on dest_addr

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-01-27 10:46:48 -08:00
Dirk Brenken 737c0601cb
banip: update 1.5.0-5
* fix a reporting issue with multiple ports/protocols

Signed-off-by: Dirk Brenken <dev@brenken.org>
2025-01-26 19:58:53 +01:00
Matthias Schiffer 2434806621
fastd: update to v23
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2025-01-26 15:13:19 +01:00
Eric Fahlgren 73fb1c4b38 owut: update to 2025.01.25
Bug fixes:
    efahl/owut@2bf45d5 owut: exit immediately on ctrl-c
    efahl/owut@a95d383 owut: fix processing of device defaults
    efahl/owut@cd63564 owut: disallow --rootfs-size changes on some platforms
Enhancements:
    efahl/owut@eaca182 owut: minor code cleanup in sha256 calculator
    efahl/owut@2b65aa7 owut: improve messaging
    efahl/owut@d687824 git: define file attributes

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
2025-01-26 21:44:26 +08:00
Michael Heimpold 9ef2d15c29 openssh: fix recursive key file removal
The -r option is not required here but should also not hurt,
since it was already tested, that $key is a file.
However, to express the intent of the command more clearly,
let's drop it.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-01-26 14:36:15 +01:00
Tianling Shen 359a615d6f
v2ray-core: Update to 5.25.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-01-26 13:01:26 +08:00
Juan Orti Alcaine f80fbec40f banip: Block UDP ports for HTTP/3
Block HTTP/3 by including UDP in the feeds that have the 80 443 ports in
their flag.

Signed-off-by: Juan Orti Alcaine <jorti@pm.me>
2025-01-25 19:36:40 +01:00
Christian Marangi 533b1b987e net-mtools: bump to release 3.2
Fix regression with detecting multicast ipv6 packet.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-01-25 12:31:35 +02:00
Ivan Chashkin d1614ac07d yggdrasil: update to 0.5.12
Signed-off-by: Ivan Chashkin <mail@cupivan.ru>
2025-01-25 12:31:16 +02:00
Markus Gothe 69c29a5b26 openssh: Validate keys and regenerate if needed.
Imitate dropbear init.d-script and make sure we
don't end up with corrupt keys.

This can happen if we use a caching filesystem,
like 'ubifs', and the DUT is powered off during
boot-up.

Signed-off-by: Markus Gothe <markus.gothe@genexis.eu>
2025-01-25 11:09:48 +01:00
Erik Karlsson 3ac8092a39 openssh: fix killing of active sessions on shutdown
Starting with OpenSSH 9.8 sessions are handled by a separate binary
called sshd-session

Signed-off-by: Erik Karlsson <erik.karlsson@iopsys.eu>
2025-01-25 10:53:24 +01:00
Michael Heimpold 19e9dde02d php8-pecl-dio: update to 0.3.0
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-01-25 10:43:37 +01:00
Michael Heimpold aadb3bccbc php8-pecl-http: update to 4.2.6
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-01-25 10:43:32 +01:00
Michael Heimpold 30dc14de63 php8-pecl-xdebug: update to 3.4.1
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-01-25 10:43:03 +01:00
Michael Heimpold fa0328232e php8-pecl-redis: update to 6.1.0
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-01-25 10:42:51 +01:00
Michael Heimpold 8214c20028 php8-pecl-krb5: update to 1.2.2
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-01-25 10:42:42 +01:00
Federico Capoano bf3333594a coova-chilli: Fix WolfSSL support
Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
2025-01-24 15:27:31 -08:00
Jan Klos eaf00f62da nut: add --without-nut_monitor to configure args
nut_monitor is not used anyway and is needlessly built & does not work with python 3.13

Signed-off-by: Jan Klos <jan@klos.xyz>
2025-01-24 10:22:28 -08:00