feed/packages.git
2 years agoclamav: update to 0.104.0
Lucian Cristian [Sun, 19 Sep 2021 18:27:33 +0000 (21:27 +0300)]
clamav: update to 0.104.0

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 44eb2ae61901888f023e8dee295610436fb875c9)

2 years agonode: January 10th 2022 Security Releases
Hirokazu MORIKAWA [Mon, 24 Jan 2022 07:27:30 +0000 (16:27 +0900)]
node: January 10th 2022 Security Releases

Update to v14.18.3

January 10th 2022 Security Releases:
Improper handling of URI Subject Alternative Names (Medium)(CVE-2021-44531)
Certificate Verification Bypass via String Injection (Medium)(CVE-2021-44532)
Incorrect handling of certificate subject and issuer fields (Medium)(CVE-2021-44533)
Prototype pollution via console.table properties (Low)(CVE-2022-21824)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 8278998e48565090fc1c75da8e0921aa6cd4a4b6)

2 years agotvheadend: fix conffiles section
Josef Schlehofer [Mon, 24 Jan 2022 22:04:13 +0000 (23:04 +0100)]
tvheadend: fix conffiles section

The previous one was wrong, and it did not work. It could be checked
inside compiled package in control.tar.gz that there was missing
``conffiles`` file with content `/etc/config/tvheadend`

It is also possible to verify that the config is not overwritten on the router
by running ``opkg install tvheadend --force-reinstall``

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 752d1ffc28971b9b641162498a877750fa687bbd)

2 years agolighttpd: update to lighttpd 1.4.64 release hash
Glenn Strauss [Fri, 29 Oct 2021 03:16:03 +0000 (23:16 -0400)]
lighttpd: update to lighttpd 1.4.64 release hash

remove long-deprecated modules

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 3badd766681460bde8025d401b36dfc400c01cda)

2 years agolighttpd: update to lighttpd 1.4.63 release hash
Glenn Strauss [Sat, 4 Dec 2021 15:15:37 +0000 (10:15 -0500)]
lighttpd: update to lighttpd 1.4.63 release hash

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 35dff58b3ae34361c2c31ea48b10377205bcc6c6)

2 years agolighttpd: update to lighttpd 1.4.62 release hash
Glenn Strauss [Thu, 2 Dec 2021 06:49:49 +0000 (01:49 -0500)]
lighttpd: update to lighttpd 1.4.62 release hash

depend on libpcre2 instead of libpcre

also remove patches incorporated upstream into lighttpd 1.4.62

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit ddecac45c8f813b0711ec625ab424e33e7a8da9c)

2 years agotvheadend: fix typo in uriparser
Josef Schlehofer [Mon, 24 Jan 2022 11:25:00 +0000 (12:25 +0100)]
tvheadend: fix typo in uriparser

Fixes: 0449c109e78d4e5b998fc26415ecaa5bb5c274c3 ("tvheadend: disable
uriparser")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5879260515332a338e77776a7cbb50b56a48f03a)

2 years agoMerge pull request #17677 from mhei/21.02-php8-update
Michael Heimpold [Mon, 24 Jan 2022 06:45:04 +0000 (07:45 +0100)]
Merge pull request #17677 from mhei/21.02-php8-update

[21.02] php8: update to 8.0.15

2 years agowg-installer: fix multiple namespaces
Nick Hainke [Sat, 22 Jan 2022 22:27:02 +0000 (23:27 +0100)]
wg-installer: fix multiple namespaces

Add flag "--lookup-default-namespace" to signal that wg-installer should
look already established wireguard sessions in the default namespace.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 94efdcf02a723fbcdcc6a192e026e0c2f766a158)

2 years agophp8: update to 8.0.15
Michael Heimpold [Sat, 22 Jan 2022 20:24:37 +0000 (21:24 +0100)]
php8: update to 8.0.15

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2 years agotvheadend: disable uriparser
Josef Schlehofer [Fri, 21 Jan 2022 10:01:29 +0000 (11:01 +0100)]
tvheadend: disable uriparser

This avoids to add liburiparser as dependency.

Package tvheadend is missing dependencies for the following libraries:
liburiparser.so.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 0449c109e78d4e5b998fc26415ecaa5bb5c274c3)

2 years agopython3: Update to 3.9.10, refresh patches
Jeffery To [Sun, 16 Jan 2022 20:32:03 +0000 (04:32 +0800)]
python3: Update to 3.9.10, refresh patches

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2 years agowg-installer: remove unused dependency
Nick Hainke [Thu, 20 Jan 2022 14:24:05 +0000 (15:24 +0100)]
wg-installer: remove unused dependency

Remove the dependency "coreutils-realpath" from
wg-installer-server-hotplug-olsrd.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit fab86eb626b677f8329482f427c6837e59fe4597)

2 years agowg-installer: create wireguard key if it does not exist
Nick Hainke [Thu, 20 Jan 2022 13:10:12 +0000 (14:10 +0100)]
wg-installer: create wireguard key if it does not exist

Check if the key exists which is given by
    option wg_key '/etc/wgserver/wg.key'

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 324fa79d7c8a90e899a81bbb3ae0c5a5a602f88e)

2 years agowg-installer: install cronjob
Nick Hainke [Thu, 20 Jan 2022 08:06:24 +0000 (09:06 +0100)]
wg-installer: install cronjob

Install a cronjob that removes unused wireguard interfaces every 10
minutes.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 432a965689f09c6bb86cd24753f79d739b9bcf46)

2 years agowg-installer: check if a key is already inserted
Nick Hainke [Tue, 18 Jan 2022 17:31:46 +0000 (18:31 +0100)]
wg-installer: check if a key is already inserted

Check if a peer is already existing with a given public key. Introduce a
response code for signaling why the server rejected the request.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit da48bc3792705b12fc104459ed9f5f1b73544d17)

2 years agowg-installer: rework code
Nick Hainke [Wed, 19 Jan 2022 17:40:16 +0000 (18:40 +0100)]
wg-installer: rework code

Use shellcheck to rework the code. Use "export" to return variables from
a function call. Further, fix typos.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 69c81790d1045e064cd9c643a1643a0f919f448d)

2 years agowg-installer: cosmetic changes
Nick Hainke [Tue, 18 Jan 2022 16:39:53 +0000 (17:39 +0100)]
wg-installer: cosmetic changes

Use "ip addr" instead of "ip addres" or "ip a".

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 38a9a3e0dc9713af7509e455ca9a71567d80323f)

2 years agocryptsetup: update to version 2.4.3
Josef Schlehofer [Tue, 18 Jan 2022 15:24:52 +0000 (16:24 +0100)]
cryptsetup: update to version 2.4.3

Fixes: CVE-2021-4122
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a2427edf76fffd294fbcc70f94c7d59d420d07b4)

2 years agogit: update to version 2.34.1
Josef Schlehofer [Thu, 30 Dec 2021 17:24:39 +0000 (18:24 +0100)]
git: update to version 2.34.1

- Refreshed patches

- Release notes 2.34.0:
https://github.com/git/git/blob/2ae0a9cb8298185a94e5998086f380a355dd8907/Documentation/RelNotes/2.34.0.txt

- Release notes 2.34.1:
https://github.com/git/git/blob/2ae0a9cb8298185a94e5998086f380a355dd8907/Documentation/RelNotes/2.34.1.txt

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 042bf16072627d763ba22a4d80c03cb32406a936)

2 years agocrowdsec: update from upstream latest release 1.2.3
Kerma Gérald [Sat, 15 Jan 2022 09:59:49 +0000 (10:59 +0100)]
crowdsec: update from upstream latest release 1.2.3

update from latest upstream release 1.2.3
updated copyright

(cherry picked from commit de41b63ca45be91273e0ea97213b2a6a29ba2a9a)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2 years agosmcroute: update to 2.5.5
Moritz Warning [Tue, 23 Nov 2021 20:19:57 +0000 (21:19 +0100)]
smcroute: update to 2.5.5

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2 years agosmcroute: update to 2.5.4
Moritz Warning [Sun, 14 Nov 2021 23:53:40 +0000 (00:53 +0100)]
smcroute: update to 2.5.4

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2 years agoMerge pull request #17619 from erdoukki/21.02-2to3
Jeffery To [Mon, 17 Jan 2022 11:10:26 +0000 (19:10 +0800)]
Merge pull request #17619 from erdoukki/21.02-2to3

[21.02] 2to3: add package host tool

2 years agowg-installer: switch to ubus call for olsrd hotplug
Nick Hainke [Sun, 16 Jan 2022 09:21:53 +0000 (10:21 +0100)]
wg-installer: switch to ubus call for olsrd hotplug

Use ubus ipc calls to add and remove interfaces.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit b89eb0115fc21183175af68c0a8807b25bd71c99)

2 years agowg-installer: rework iproute2 commands
Nick Hainke [Sun, 16 Jan 2022 09:04:36 +0000 (10:04 +0100)]
wg-installer: rework iproute2 commands

- Use ip address add instead of ip a a
- Directly add broadcast address

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit fea27cec05c0d76d3bb6aad1b4bfd53270c1c263)

2 years ago2to3: add package host tool
Kerma Gérald [Sat, 25 Dec 2021 10:46:36 +0000 (11:46 +0100)]
2to3: add package host tool

2to3 is a Python program that reads Python 2.x source code and applies a
  series of fixers to transform it into valid Python 3.x code. The standard
  library contains a rich set of fixers that will handle almost all code. 2to3
  supporting library lib2to3 is, however, a flexible and generic library, so it
  is possible to write your own fixers for 2to3. lib2to3 could also be adapted
  to custom applications in which Python code needs to be edited automatically.

This tool is necessary for fail2ban package because of issue
  https://github.com/openwrt/packages/issues/17311
  https://github.com/openwrt/packages/pull/17341

Simple 2to3.py script from Debian, thanks to Matthias Klose <doko@ubuntu.com>
From: https://salsa.debian.org/cpython-team/python3-defaults

(cherry picked from commit 2f91e1c9c5876bcdac4630fdc0e417903d8f9eb9)
Co-authored-by: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2 years agoCI: fix runtime testing for non master branch
Paul Spooren [Thu, 13 Jan 2022 23:55:36 +0000 (00:55 +0100)]
CI: fix runtime testing for non master branch

The runtime testing always ran on master branch aka snapshots since the
branch wasn't passed over to the container execution!

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit f535d770901674d7d9f3d8cd9abe566d9db63ebe)

2 years agoi2pd: Update to 2.40.0 and update package sources
R4SAS I2P [Sun, 26 Dec 2021 04:29:58 +0000 (04:29 +0000)]
i2pd: Update to 2.40.0 and update package sources

* Updating i2pd package to 2.40.0
* Rewrite Makefile
* Remove usage of PKG_INSTALL (package's make install)
* Rewrite init.rc configuration and script
* Remove '--service' option from init, which only sets datadir to /var/lib/i2pd
* Use '--datadir' option in init, otherwise datadir changing via uci is not works
* Update patch for i2pd.conf

Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
(cherry picked from commit ac27fffff9159be7b0b6529797ca45d7dc4136c0)

2 years agoi2pd: remove unneeded functions.sh
Dirk Neukirchen [Tue, 2 Mar 2021 19:10:03 +0000 (20:10 +0100)]
i2pd: remove unneeded functions.sh

its included via rc.common, see
https://openwrt.org/docs/guide-developer/config-scripting

Signed-off-by: Dirk Neukirchen <plntyk.lede@plntyk.name>
(cherry picked from commit 266deb586686bfdd5e95c451284541a06c3d5d25)

2 years agoi2pd: Update to 2.38.0
R4SAS I2P [Sun, 30 May 2021 11:48:46 +0000 (14:48 +0300)]
i2pd: Update to 2.38.0

Remove USE_AVX and USE_AESNI make options as it is correclty handled by
internal code.

Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
(cherry picked from commit 1025dd7c76706a4130a636b61eb112052617c082)

2 years agoi2pd: update to 2.36
Dirk Neukirchen [Thu, 4 Mar 2021 11:51:24 +0000 (12:51 +0100)]
i2pd: update to 2.36

remove AVX patches as upstream has integrated and closed
all AVX issues

compiled on :  x86-64, i386 generic
tested on : x86-64 VM, i386 VM

Signed-off-by: Dirk Neukirchen <plntyk.lede@plntyk.name>
(cherry picked from commit fc7d710e626f73029597d1f6811d0bd26d587c4d)

2 years agomariadb: Add sudo dependency
Michal Hrusecky [Thu, 13 Jan 2022 14:11:01 +0000 (15:11 +0100)]
mariadb: Add sudo dependency

During update we use sudo to start an instance. It probably could be
workarounded, but given the MariaDB size, dependency on sudo shouldn't
be an issue.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit 0ffec9bd4bf91118d33203d93d53b316b43115ce)

2 years agomariadb: Check and fix datadir owner issues during upgrade
Michal Hrusecky [Thu, 13 Jan 2022 14:04:57 +0000 (15:04 +0100)]
mariadb: Check and fix datadir owner issues during upgrade

If you are migrating to MariaDB package, you might have old datadir
stored somewhere using different setup with different users. If you
trust us enough to enable autoupgrade, you probably trust us enough to
chown your datadir as well. This can prevent some potential issues.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit b41525cef4171c7f3200afc41dca5e3837cbd2ec)

2 years agoMerge pull request #17603 from BKPepe/mariadb-bump
Josef Schlehofer [Fri, 14 Jan 2022 12:14:53 +0000 (13:14 +0100)]
Merge pull request #17603 from BKPepe/mariadb-bump

mariadb: update to version 10.4.22

2 years agomariadb: update to version 10.4.22
Josef Schlehofer [Thu, 13 Jan 2022 13:46:40 +0000 (14:46 +0100)]
mariadb: update to version 10.4.22

Fixes: CVE-2021-35604
Removed two patches:
130-c11_atomics.patch - included in upstream now [1]
140-mips-connect-unaligned.patch - included in upstream, too. [2]

[1] https://github.com/MariaDB/server/commit/f502ccbcb5dfce29067434885a23db8d1bd5f134#diff-6ef8fc82162068daeab927be94e246b202eb39323a102273b9448219da24172f
[2] https://github.com/MariaDB/server/commit/a33c1082dab7ab4b08acf957d6364be95e4c6a9f#diff-821e2c7a49184a660339b094f437fcd1e9aea997a86391467a657088234ebca0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2 years agomg: bump to 7.0
Hirokazu MORIKAWA [Tue, 28 Dec 2021 06:36:55 +0000 (15:36 +0900)]
mg: bump to 7.0

This is mg as it appears in OpenBSD 7.0.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2 years agozerotier: add configuration reload trigger
Jo-Philipp Wich [Wed, 1 Dec 2021 14:50:52 +0000 (15:50 +0100)]
zerotier: add configuration reload trigger

Ensure that the zerotier service is automatically restarted when the uci
configuration is modified.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 04d0e45da1b6126643c54a22c39488b7095a5594)

2 years agonetdata: Update init script to use -D rather than -nd
James White [Fri, 31 Dec 2021 16:45:25 +0000 (16:45 +0000)]
netdata: Update init script to use -D rather than -nd

The current init script is using the deprecated -nd flag. This updates netdata to be started with -D.

Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit cf9d5a887031f245fbae6f8bcd3366078996f123)

2 years agoatlas-probe: update to version 2.4.1
Josef Schlehofer [Tue, 4 Jan 2022 11:26:52 +0000 (12:26 +0100)]
atlas-probe: update to version 2.4.1

Removed patches:
001-fix-stime-glibc-remove.patch - it is included in upstream
003-Fix-compilation-with-gcc11.patch - no longer necessary

Updated patches:
002-Avoid-problems-with-64-bit-time_t.patch

Refreshed patches:
004-Comment-out-librt-testing.patch

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit cf65ca2db009cc69aa4eedea7116727704c84c48)

2 years agoatlas-sw-probe: update to version 5040
Josef Schlehofer [Tue, 4 Jan 2022 11:26:25 +0000 (12:26 +0100)]
atlas-sw-probe: update to version 5040

Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ec767eb499dfa9269cf0f454b6f6446bf4235340)

2 years agocrowdsec-firewall-bouncer: update to 0.0.21
Kerma Gérald [Fri, 7 Jan 2022 13:41:00 +0000 (14:41 +0100)]
crowdsec-firewall-bouncer: update to 0.0.21

Update crowdsec-firewall-bouncer to latest upstream release version 0.0.21

Makefile rework
- use tagged version for download

Fixes
- set API_KEY in firewall bouncer config file

(cherry picked from commit b4f48b5c23d0b5d2ab9de2041edbf69a8f6ca013)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2 years agocrowdsec: update to 1.2.2
Kerma Gérald [Fri, 7 Jan 2022 13:29:58 +0000 (14:29 +0100)]
crowdsec: update to 1.2.2

Update crowdsec to latest upstream release version 1.2.2

Makefile rework
- use tagged version for download

(cherry picked from commit 2a34e4987bbd60091150de1886017426f10634ab)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2 years agoapache: fixup apxs
Sebastian Kemper [Sun, 24 Oct 2021 13:36:22 +0000 (15:36 +0200)]
apache: fixup apxs

apxs is used to get information about the apache installation when
building external modules. Currently there are issues:

1.

./staging_dir/target-mips_24kc_musl/usr/bin/apxs -q TARGET
apache2
apxs:Error: ./staging_dir/target-mips_24kc_musl/home/sk/tmp/openwrt/staging_dir/target-mips_24kc_musl/usr/bin/apr-1-config not found!.

This error is fixed by sed script #2.

2.

./staging_dir/target-mips_24kc_musl/usr/bin/apxs -q TARGET
cannot open ./staging_dir/target-mips_24kc_musl/home/sk/tmp/openwrt/staging_dir/target-mips_24kc_musl/usr/share/apache2/build/config_vars.mk: No such file or directory at ./staging_dir/target-mips_24kc_musl/usr/bin/apxs line 213.

This error is fixed by sed scipt #1.

Both sed scripts taken from buildroot (see [1]).

[1] https://github.com/buildroot/buildroot/blob/master/package/apache/apache.mk

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 83d1cdaf3f1392a67aaa9d10f544680805229019)

2 years agoapache: security bump to 2.4.51
Sebastian Kemper [Sun, 24 Oct 2021 13:32:06 +0000 (15:32 +0200)]
apache: security bump to 2.4.51

Fixes (see [1] for details):

  CVE-2021-33193
  CVE-2021-41524
  CVE-2021-41773
  CVE-2021-42013

[1] https://httpd.apache.org/security/vulnerabilities_24.html

Patch 020-openssl-deprecated.patch refreshed.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit da4b1ca8d65b788d85489cd3ca83d91b0fd72f0f)

2 years agowg-installer: fix shell typo
Nick Hainke [Wed, 12 Jan 2022 17:25:13 +0000 (18:25 +0100)]
wg-installer: fix shell typo

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 53503c4a3a6660a67e88a37876a87e9b824ee03c)

2 years agowg-installer: allow defining link costs for hotplugs
Nick Hainke [Tue, 11 Jan 2022 11:18:49 +0000 (12:18 +0100)]
wg-installer: allow defining link costs for hotplugs

Add options to set link costs in mesh routing daemons.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit ee879d37479cf66f8caf8d4354a0aeae3764f0a8)

2 years agowg-installer: private key as parameter
Nick Hainke [Tue, 11 Jan 2022 23:19:44 +0000 (00:19 +0100)]
wg-installer: private key as parameter

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 6a59d41fbf4ea61b1ee8b6e2ccc47d9a10529b0e)

2 years agowg-installer: generate new keys for every connection
Nick Hainke [Tue, 11 Jan 2022 22:06:22 +0000 (23:06 +0100)]
wg-installer: generate new keys for every connection

Generate new keys on every new connection.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 8ab044712abb7e1a319099a419b1265ea04fb53c)

2 years agogolang: Update to 1.17.6
Jeffery To [Tue, 11 Jan 2022 13:13:00 +0000 (21:13 +0800)]
golang: Update to 1.17.6

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 45208db29bd22238d355f4f8fdcc02fd2045c78a)

2 years agowg-installer: fix using symlinks for conf files
Nick Hainke [Mon, 10 Jan 2022 22:56:36 +0000 (23:56 +0100)]
wg-installer: fix using symlinks for conf files

It is useful to symlink babeld and olsrd to /tmp/ if we frequently
write to those config files.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 5e8301d7dc154b27b03dc2c24c111e41bb897293)

2 years agofail2ban: fix 2to3 error
Kerma Gérald [Sun, 12 Dec 2021 10:59:39 +0000 (11:59 +0100)]
fail2ban: fix 2to3 error

Issue: 2to3 support has been removed in setuptools since version 58.0.0.

Fix: openwrt/packages#17311

Requirements: 2to3/host openwrt/packages#17429

Add upstream patch: https://github.com/fail2ban/fail2ban/commit/196c55e93103d1e56d1336f27a5f2591b4e54fef

To install/build for python3 from source, it is necessary to convert to py3
codebase before setup (invoke 2to3 or ./fail2ban-2to3 firstly).
> ./fail2ban-2to3
> python3 setup.py build

(cherry picked from commit ad0e1a1c3ce871da079779bf9ac706859445f3c5)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2 years agowg-installer: fix cleanup script
Nick Hainke [Mon, 10 Jan 2022 09:49:01 +0000 (10:49 +0100)]
wg-installer: fix cleanup script

The wrong function was called.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit e6afcf8f3c5ef428a954bda0f391f7b691d0de9f)

2 years agohaveged: update to 1.9.17
Hannu Nyman [Sun, 9 Jan 2022 17:00:24 +0000 (19:00 +0200)]
haveged: update to 1.9.17

Update havged to version 1.9.17.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit e065ccda94aff9ac39d0aeac0449e9cd2cecc703)

2 years agowg-installer: fix get_usage function
Nick Hainke [Sat, 13 Mar 2021 19:16:45 +0000 (20:16 +0100)]
wg-installer: fix get_usage function

The get_usage function always returns 0. The shell syntax was wrong.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit f7cb8b20e118834f9a6c5be298737829f90ea68b)

2 years agowg-installer: delete old interfaces
Nick Hainke [Sat, 13 Mar 2021 19:55:02 +0000 (20:55 +0100)]
wg-installer: delete old interfaces

Add "wg_check_interfaces" and specify a timeout in the config file.
This allows to delete not used wireguard-interfaces automatically.

For example a cronjob can be installed that calls:
  . /usr/share/wginstaller/wg_functions.sh && wg_check_interfaces

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 36dc9b3f797dd04d075d9b6c36fece68d03470fe)

2 years agowg-installer: fix dependencies
Nick Hainke [Mon, 6 Sep 2021 12:05:12 +0000 (14:05 +0200)]
wg-installer: fix dependencies

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 62cc627aba9b9aa1ac7b54ac5471b6f97e3f4ba3)

2 years agowg-installer: fix typo in cleanup function
Nick Hainke [Sun, 9 Jan 2022 12:13:47 +0000 (13:13 +0100)]
wg-installer: fix typo in cleanup function

The delete variable was misspelled leading to devices always being
removed although they had connected neighbors.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 0e416dadd1281878388445007e45df741c387335)

2 years agowg-installer: fix ipv4 meshing via olsr
Nick Hainke [Sat, 8 Jan 2022 21:08:33 +0000 (22:08 +0100)]
wg-installer: fix ipv4 meshing via olsr

The ipv4 address space was not allowed.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 4302bfd3c8b710411bc8572ad218f4b17dfb0c67)

2 years agowg-installer: add link-local to client interface
Nick Hainke [Fri, 5 Mar 2021 22:25:02 +0000 (23:25 +0100)]
wg-installer: add link-local to client interface

Wireguard has no link-local address on an interface automatically.
Add a link-local to the interface. The server has fe80::1/64 and
the client fe80::2/64.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 625f3c830207317dac1be06d6e1f196a9d92479c)

2 years agowg-installer: add cleanup script
Nick Hainke [Sun, 9 Jan 2022 09:04:48 +0000 (10:04 +0100)]
wg-installer: add cleanup script

Add script to cleanup unused wireguard interfaces.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 714b51c6309e4abc7c000bb9250119104fc2757a)

2 years agowg-installer: add ipv4 support
Nick Hainke [Thu, 6 Jan 2022 23:22:00 +0000 (00:22 +0100)]
wg-installer: add ipv4 support

Add base_v4prefix to allow ipv4 mesh connections.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 98d8680a8c26adfba431da008c9a76ff85786390)

2 years agogetdns: remove maintainer
Jonathan G. Underwood [Sun, 13 Jun 2021 14:10:40 +0000 (15:10 +0100)]
getdns: remove maintainer

Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
(cherry picked from commit 4a241581ab1cbd6679ca64c401e8cc0c00b88c45)

2 years agogetdns: bump to 1.7.0
Rui Salvaterra [Tue, 8 Jun 2021 16:16:19 +0000 (17:16 +0100)]
getdns: bump to 1.7.0

Remove obsolete patches.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 0261cd097226b7b8aca0c3053b69763ea4b4815c)

2 years agoMerge pull request #17504 from jefferyto/radicale2-2.1.12-openwrt-21.02
Josef Schlehofer [Thu, 6 Jan 2022 22:16:27 +0000 (23:16 +0100)]
Merge pull request #17504 from jefferyto/radicale2-2.1.12-openwrt-21.02

[openwrt-21.02] radicale2: Update to 2.1.12

2 years agoMerge pull request #17503 from jefferyto/radicale-1.1.7-openwrt-21.02
Josef Schlehofer [Thu, 6 Jan 2022 22:16:24 +0000 (23:16 +0100)]
Merge pull request #17503 from jefferyto/radicale-1.1.7-openwrt-21.02

[openwrt-21.02] radicale: Update to 1.1.7

2 years agowg-installer: add hotplug script for olsr
Nick Hainke [Thu, 6 Jan 2022 21:03:18 +0000 (22:03 +0100)]
wg-installer: add hotplug script for olsr

Add hotplug-olsrd to automatically mesh with olsrd via new wireguard
links.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit d35c22951bfabb9b34133471fe1e389909d2007b)

2 years agoradicale2: Update to 2.1.12
Jeffery To [Wed, 5 Jan 2022 11:23:55 +0000 (19:23 +0800)]
radicale2: Update to 2.1.12

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b37f409146d3e5e70dec5a2bb347c6b01e90aa05)

2 years agoradicale: Update to 1.1.7
Jeffery To [Wed, 5 Jan 2022 10:48:17 +0000 (18:48 +0800)]
radicale: Update to 1.1.7

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8d0018f54953e4821312e8ca2a0dc562bb7c087c)

2 years agoinadyn: update to 2.9.1
Rosen Penev [Mon, 3 Jan 2022 01:53:59 +0000 (17:53 -0800)]
inadyn: update to 2.9.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b434cd71b950185cbf57308466eb0e3473ba484e)

2 years agoMerge pull request #17447 from jefferyto/golang-1.17.5-openwrt-21.02
Josef Schlehofer [Wed, 29 Dec 2021 17:35:09 +0000 (18:35 +0100)]
Merge pull request #17447 from jefferyto/golang-1.17.5-openwrt-21.02

[openwrt-21.02] golang: Update to 1.17.5, add patch

2 years agomwan3: fix mwan3 flush conntrack table call
Florian Eckert [Wed, 22 Dec 2021 08:23:05 +0000 (09:23 +0100)]
mwan3: fix mwan3 flush conntrack table call

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit e1f321150d14aaabfe8b6468bc4c8401d2fffc6d)

2 years agogolang: Update to 1.17.5, add patch
Jeffery To [Tue, 28 Dec 2021 07:00:09 +0000 (15:00 +0800)]
golang: Update to 1.17.5, add patch

Includes fixes for:
* CVE-2021-44716: unbounded growth of HTTP/2 header canonicalization
  cache
* CVE-2021-44717: syscall.ForkExec error can close file descriptor 0

Added patches:
* 001-cmd-link-use-gold-on-ARM-ARM64-only-if-gold-is-available.patch:
  https://github.com/golang/go/pull/49748 backported for Go 1.17,
  this removes the requirement for the gold linker when building Go
  programs that use Go plugins on arm/arm64

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit eac2e91a285e9df119ce1aac0f4fe340cc54a6e4)

2 years agoadguardhome: update to 0.107.0
Hiếu Lê [Tue, 21 Dec 2021 16:22:57 +0000 (10:22 -0600)]
adguardhome: update to 0.107.0

Full changelog available at: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.0

packr has been removed from build dependencies, per
https://github.com/AdguardTeam/AdGuardHome/commit/c6888326b034daea9e69de5ee0a8f37aede45892#diff-2873f79a86c0d8b3335cd7731b0ecf7dd4301eb19a82ef7a1cba7589b5252261L2

Also added the ability to configure working directory location and moved
the directory to /var. On most setups this should not change anything,
as /var is symlinked to /tmp. The move mostly benefits setups where /var
is configured to be persistent.

The working directory is used by AdGuard to store persistent data like
query logs, filter lists, etc.

Data stored in this directory can get really huge, as such allowing
this directory to be moved elsewhere (ie. an USB drive) is very
beneficial.

Fixes: #17437
Co-authored-by: Dobroslaw Kijowski <dobo90@gmail.com>
Co-authored-by: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: Hiếu Lê <leorize+oss@disroot.org>
(cherry picked from commit f44603a131ef54bbfb2836ef942d0276da427881)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[Added fixes in the commit message]

2 years agoMerge pull request #17439 from 1715173329/xr-2102
Josef Schlehofer [Mon, 27 Dec 2021 08:30:10 +0000 (09:30 +0100)]
Merge pull request #17439 from 1715173329/xr-2102

[openwrt-21.02] xray-core: Update to 1.5.2

2 years agoMerge pull request #17438 from 1715173329/yq21
Josef Schlehofer [Mon, 27 Dec 2021 08:30:01 +0000 (09:30 +0100)]
Merge pull request #17438 from 1715173329/yq21

[openwrt-21.02] yq: Update to 4.16.2

2 years agoxray-core: Update to 1.5.2
Tianling Shen [Fri, 24 Dec 2021 15:12:16 +0000 (23:12 +0800)]
xray-core: Update to 1.5.2

Removed upstreamed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 418e59356b2517a0c28aae283dacf20aaafffc77)

2 years agoxray-core: Update to 1.5.1
Tianling Shen [Mon, 20 Dec 2021 13:07:44 +0000 (21:07 +0800)]
xray-core: Update to 1.5.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 6d56c80ff917ed3ef1a55bba0c01f739acb04be6)

2 years agoyq: Update to 4.16.2
Tianling Shen [Fri, 24 Dec 2021 15:17:12 +0000 (23:17 +0800)]
yq: Update to 4.16.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c47425fe2965c4424331d2060ae1f73c6a8736e9)

3 years agoadblock: 4.1.3-4
Dirk Brenken [Wed, 22 Dec 2021 12:19:40 +0000 (13:19 +0100)]
adblock: 4.1.3-4

* fix backup dir creation in raw mode

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 25dd0c63affd278a6be88629cc20bd3c66586ca8)

3 years agopython-lxml: update to version 4.6.5
Alexandru Ardelean [Mon, 20 Dec 2021 08:13:17 +0000 (10:13 +0200)]
python-lxml: update to version 4.6.5

Fixes: CVE-2021-43818
  https://nvd.nist.gov/vuln/detail/CVE-2021-43818

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
3 years agoMerge pull request #17405 from mhei/21.02-php8-update
Michael Heimpold [Tue, 21 Dec 2021 09:49:02 +0000 (10:49 +0100)]
Merge pull request #17405 from mhei/21.02-php8-update

[21.02] php8: update to 8.0.14

3 years agophp8: update to 8.0.14
Michael Heimpold [Mon, 20 Dec 2021 15:44:29 +0000 (16:44 +0100)]
php8: update to 8.0.14

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
3 years agoMerge pull request #17400 from jefferyto/remove-commodo-openwrt-21.02
Alexandru Ardelean [Mon, 20 Dec 2021 11:04:59 +0000 (13:04 +0200)]
Merge pull request #17400 from jefferyto/remove-commodo-openwrt-21.02

[openwrt-21.02] python-packages/seafile: Remove commodo as maintainer

3 years agoseafile: remove myself as maintainer of these packages
Alexandru Ardelean [Mon, 17 May 2021 07:40:56 +0000 (10:40 +0300)]
seafile: remove myself as maintainer of these packages

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 1e27dd7f8ff23515da5348a7029660aa33a48907)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
3 years agopython-packages: remove myself as maintainer
Alexandru Ardelean [Tue, 23 Nov 2021 11:14:42 +0000 (13:14 +0200)]
python-packages: remove myself as maintainer

There's been a bit of overlapping opinions on some of these packages.
The best thing to do here is to reduce ownership and relinquish my
control.

This patch does that.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 48ce6e48b617ee72e40220e6ab6b7ceaa079a192)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
3 years agocrowdsec-firewall-bouncer: update to 0.0.18
Kerma Gérald [Sun, 12 Dec 2021 17:04:38 +0000 (18:04 +0100)]
crowdsec-firewall-bouncer: update to 0.0.18

Update to upstream release 0.0.18

(cherry picked from commit 515f8489cc77bfbd0e9925599713a3f4843e6e3a)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
3 years agoMerge pull request #17356 from mhei/21.02-php7-update
Michael Heimpold [Sat, 18 Dec 2021 09:08:59 +0000 (10:08 +0100)]
Merge pull request #17356 from mhei/21.02-php7-update

[21.02] php7: update to 7.4.27

3 years agophp7: update to 7.4.27
Michael Heimpold [Thu, 16 Dec 2021 20:59:52 +0000 (21:59 +0100)]
php7: update to 7.4.27

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
3 years agonano: update to version 6.0
Hannu Nyman [Wed, 15 Dec 2021 17:55:36 +0000 (19:55 +0200)]
nano: update to version 6.0

Update nano editor to version 6.0

Version 6.0 enable toggling the display of the line numbers with
the shortcut key M-N (Alt-n). Also the cmdline option "-l" works.
Remove earlier patch regarding that.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 0571f5400dfc1120b161df988f7bd8c836f33e8a)

3 years agolibqmi: fix missing CONFIG_ prefix
Florian Eckert [Tue, 14 Dec 2021 07:55:26 +0000 (08:55 +0100)]
libqmi: fix missing CONFIG_ prefix

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 43a0f68940f1a2709273fa630f12be5467c426c7)

3 years agoldns: update to 1.8.1
Eric Luehrsen [Mon, 6 Dec 2021 03:24:34 +0000 (22:24 -0500)]
ldns: update to 1.8.1

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit 7594e8581a200f6fd20fcba29672af54c4591111)

3 years agounbound: update to 1.14.0
Eric Luehrsen [Fri, 10 Dec 2021 07:01:49 +0000 (02:01 -0500)]
unbound: update to 1.14.0

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
3 years agohtop: update to 3.1.2-1
John Audia [Fri, 10 Dec 2021 16:57:34 +0000 (18:57 +0200)]
htop: update to 3.1.2-1

Build-tested: x86/64
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit 3b041e3b458889d7dbef72e1d49b102f193bf5c7)

3 years agohtop: explicitly disable some build options
Etienne Champetier [Fri, 10 Dec 2021 16:57:10 +0000 (18:57 +0200)]
htop: explicitly disable some build options

Since 3.1.0 delayacct option is enabled if the needed dependencies
are detected, it was previously disabled.
Sensors also check for dependency so we need to explicitly
disable it when not enabled.

Fixes 5f916720551ad5ea5ac86cf5e122fc2c0c34cc15

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 253e3f558c9d5d6ee43a7e870ef60f8a1c0c80c7)

3 years agohtop: update to 3.1.0
Hannu Nyman [Fri, 10 Dec 2021 16:56:55 +0000 (18:56 +0200)]
htop: update to 3.1.0

Update htop to versio 3.1.0

* Adjust Makefile configuration options to update
* Avoid libcap dependency
* Backport post-release fix for old automake

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 5f916720551ad5ea5ac86cf5e122fc2c0c34cc15)

3 years agoMerge pull request #17299 from nxhack/2102_node_14182
Josef Schlehofer [Fri, 10 Dec 2021 13:29:15 +0000 (14:29 +0100)]
Merge pull request #17299 from nxhack/2102_node_14182

[21.02] node: bump to 14.18.2

3 years agonode: bump to 14.18.2
Hirokazu MORIKAWA [Fri, 10 Dec 2021 11:27:30 +0000 (20:27 +0900)]
node: bump to 14.18.2

Update to v14.18.2

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
3 years agoMerge pull request #17270 from BKPepe/update-python3
Josef Schlehofer [Fri, 10 Dec 2021 10:20:41 +0000 (11:20 +0100)]
Merge pull request #17270 from BKPepe/update-python3

python3: update to version 3.9.9

3 years agohwdata: update to version 0.354
Josef Schlehofer [Tue, 7 Dec 2021 21:51:43 +0000 (22:51 +0100)]
hwdata: update to version 0.354

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 20a759a6ddf9f24ee1ca5128a10cfd95eabad771)