Ryan Keane [Wed, 13 Nov 2024 11:14:03 +0000 (03:14 -0800)]
git: Set PKG_FORTIFY_SOURCE to 0 when lto enabled
If PKG_FORTIFY_SOURCE is not 0 and lto is enabled for package git, it
will fail to compile with the following example error:
/openwrt/staging_dir/toolchain-aarch64_generic_gcc-14.1.0_musl/include/stdio.h: In function 'process_curl_messages': /openwrt/staging_dir/toolchain-aarch64_generic_gcc-14.1.0_musl/include/stdio.h:90:8: error: inlining failed in call to 'always_inline' 'fwrite': function body can be overwritten at link time
90 | size_t fwrite(const void *__restrict, size_t, size_t, FILE *__restrict);
| ^
http.c:355:33: note: called from here
355 | fprintf(stderr, "Received DONE message for unknown request!\n");
| ^
A related issue is #13016 .
This commit set PKG_FORTIFY_SOURCE to 0 if CONFIG_USE_LTO is y.
Yun Wang [Mon, 20 Jan 2025 08:58:32 +0000 (16:58 +0800)]
syncthing: Update to 1.29.2 and Change logfile path
Update to 1.29.2 and Change logfile path from /etc/syncthing/syncthing
log to /var/log/syncthing.log.
This utilizes tmpfs (memory-based storage) to prevent disk usage growth
caused by log file accumulation during extended operation.
Benefits:
- Avoids storage saturation from excessive log growth.
- Aligns with best practices for temporary log management.
- For systems using flash storage (e.g., SSDs or eMMC), storing logs in
tmpfs avoids flash memory wear caused by frequent writes to
/etc/syncthing.
lpac: update to 2.2.1, add support for custom ISD-R AID
Updated lpac to 2.2.1 and added support for custom ISD-R AIDs.
This allows for a broader range of esim cards with non standard AIDs to be supported.
See https://github.com/estkme-group/lpac/pull/181 for additional info.
Dirk Brenken [Fri, 17 Jan 2025 15:51:15 +0000 (16:51 +0100)]
adblock: update 4.2.3-3
Summary of three PRs regarding new adblock sources with minor changes/additions:
- add new source reg_lithuania, PR provided by @Myginas
- add new source certpl, PR provided by @jkostorz
- add new source oisd_nsfw_small, PR provided by @Turjoy9
AntiBlock program proxies DNS requests.
The IP addresses of the specified domains are added to
the routing table for routing through the specified interface.
Dirk Brenken [Thu, 16 Jan 2025 19:08:36 +0000 (20:08 +0100)]
banIP: release 1.5.0-1
* change the chain structure: only two regular chains contain the generated banIP sets.
“_inbound” covers the base chains WAN-Input and WAN-Forward, ‘_outbound’ covers the base chain LAN-Forward.
* pre-configure the default chains for every feed in the banip.feeds json file, no longer blocks
selected feeds in all chains by default
* it's now possible to split country and asn Sets by country or asn (disabled by default)
* support Set counters to report easily suspicious IPs per Set (disabled by default)
* make it possible, to opt out certain chains from the deduplication process
* the element search now returns all matches (and not only the first one)
* the report engine now includes statistics about the Inbound & Outbound chains and the Set counters (optional)
* save the temp. files of possible nft loading errors in "/tmp/banIP-errors" by default for easier debugging
* various code improvements
* remove ssbl feed (deprecated)
* add two new vpn feeds
* update the readme
Ivan Pavlov [Thu, 16 Jan 2025 06:47:45 +0000 (09:47 +0300)]
openvpn: update to 2.6.13
Feature changes:
- on non-windows clients (MacOS, Linux, Unix) send "release" string from uname() call as IV_PLAT_VER to server
- Windows: protect cached username, password and token in client memory
- Windows: use new API to get dco-win driver version from driver
- Linux: pass --timeout=0 argument to systemd-ask-password, to avoid default timeout of 90 seconds
Security fixes:
- improve server-side handling of clients sending usernames or passwords longer than USER_PASS_LEN
Notable bug fixes:
- FreeBSD DCO: fix memory leaks in nvlist handling
- purge proxy authentication credentials from memory after use
For details refer to https://github.com/OpenVPN/openvpn/blob/v2.6.13/Changes.rst
Gedalya Nie [Wed, 8 Jan 2025 21:58:02 +0000 (05:58 +0800)]
ddns-scripts: cloudflare: use PATCH method, minimize changes
Using the PUT method recreates the DNS record with and only with
the newly provided data. This seems unnecessary. In particular,
we don't need to hardcode a TTL of 120. Any existing comment
would be lost too.
The only detail we need to change is the IP address. Leave everything
else as it was.
Serhii Ivanov [Thu, 9 Jan 2025 12:01:56 +0000 (14:01 +0200)]
transmissision: remove build dependency on nodejs
Have no idea why such dependency was added.
No documentation from transmission that they need
such dependency on build time. On the other hand
saves vast of time during build
vsftpd: handle migration and fix secure_chroot_dir error
* update UCI to use the traditional vsftpd.conf so
that people migrating from non-uci version do not face problems
* if secure_chroot_dir is not provided specifically, then create
an empty directory where vsftpd usually expects it
Rany Hany [Thu, 2 Jan 2025 13:38:48 +0000 (13:38 +0000)]
muninlite: add some patches to address old issues
As muninlite doesn't appear to have had a release in a few years and activity
on the git repo appears to have stalled, we add some patches on our end for now.
Patches:
- 001->004 are upstream fixes from master.
- 100 is a submitted PR: https://github.com/munin-monitoring/muninlite/pull/19
to fix https://github.com/munin-monitoring/muninlite/issues/14.
- 200->204 is a submitted PR to allow customizing the monitored network interfaces:
https://github.com/munin-monitoring/muninlite/pull/18. Despite the large
number of patches it is actually a trivial change.
Rany Hany [Wed, 1 Jan 2025 17:21:37 +0000 (17:21 +0000)]
muninlite: add /etc/munin to conffiles and install muninlite.conf
The entire /etc/munin should be backed up as it includes
user configuration for custom plugins and the muninlite.conf
config file which is useful to override the default NTP server.
Enhancements:
efahl/owut@e623a90 owut: cosmetic: include kernel version in build results
efahl/owut@05f3bbe owut: allow alternate delimiters between added/removed packages
efahl/owut@31b0478 owut: list server in 'versions' output
efahl/owut@ec97414 readme: general updates
Stan Grishin [Wed, 1 Jan 2025 05:31:14 +0000 (05:31 +0000)]
adblock-fast: Makefile bugfixes and hijack rework
* remove indentation in postinst/prerm/postrm scripts to fix issues with APK
* rework hijack logic to redirect port 53 to the port of active/selected dnsmasq instances
Michael Heimpold [Sat, 21 Dec 2024 14:46:08 +0000 (15:46 +0100)]
imx-uuc: add package 'sdimage' and 'ufb'
This adds two small tools useful only on the Freescale/NXP i.MX23/28
devices, so it is bound to the mxs target:
- sdimage: helper to write the required header for the bootstream,
e.g. during bootloader update
- ufb: can be used in conjunction with NXP's host side mfgtool
Wesley Gimenes [Sun, 22 Dec 2024 22:21:31 +0000 (19:21 -0300)]
netbird: revert fix to build with musl >1.2.4
Partially revert: 7b3d033ab651dd11e0db5fb099d106c9e09a2dc6
- Revert: Also fixes issue of not being able to build with musl >1.2.4,
The issue has been resolved as of March 2024. For more details, see:
https://github.com/mattn/go-sqlite3/issues/1164#issuecomment-1975022901
git.99rst.org / openwrt-packages.git / log