Daniel Golle [Thu, 24 Apr 2025 00:51:10 +0000 (01:51 +0100)]
libowfat: update to version 0.34
changes since 0.33:
* be more C99 compliant (Florian Weimer)
* add C++ convenience overloads to uint*.h
* remove unaligned memory access behind #ifdef i386 from uint*.h
(compilers are now smart enough so they are no longer needed and they
were technically undefined behavior so the sanitizer complained)
OpenWrt package changes:
* The newly introduced 'json' build tool is added to the host build and
staged as 'libowfat-json'.
* DEBUG option is now set by global CONFIG_DEBUG option
* fixed duplicate CROSS prefix of RANLIB
Daniel Golle [Sat, 26 Apr 2025 03:12:28 +0000 (04:12 +0100)]
ell: update to version 0.76
ver 0.76:
Fix issue with random scalar generation.
ver 0.75:
Add support for converting OID octets to strings.
Add support for NIST P-224 cuve usage with ECDH.
Add support for NIST P-521 cuve usage with ECDH.
Add support for SHA-3 series of hashing algorithms.
ver 0.74:
Add support for NIST P-192 curve usage with ECDH.
Add support for SHA-224 based checksums and HMACs.
ver 0.73:
Fix issue with parsing hwdb.bin child structures.
ver 0.72:
Add support for the Test Anything Protocol.
Will Mortensen [Sun, 9 Feb 2025 09:20:16 +0000 (09:20 +0000)]
shairport-sync: add drift and ALSA mixer config options
Allow setting drift_tolerance_in_seconds, which replaces the
now-deprecated drift option.
Also allow setting alsa.mixer_control_index, which is necessary to use
the hardware mixer correctly on some devices (like the Apple USB-C
Headphone Adapter when a headset is plugged in).
Fabrice Fontaine [Wed, 26 Feb 2025 17:40:02 +0000 (18:40 +0100)]
net/aria2: fix PKG_CPE_ID
aria2_project:aria2 is a better CPE ID than tatsuhiro_tsujikawa:aria2 as
this CPE ID has the latest CVE (whereas tatsuhiro_tsujikawa:aria2 only
has CVEs up to 2010):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:aria2_project:aria2
Fabrice Fontaine [Wed, 26 Feb 2025 21:16:59 +0000 (22:16 +0100)]
net/openssh: fix PKG_CPE_ID
openbsd:openssh is a better CPE ID than openssh:openssh as this CPE ID
has the latest CVEs (whereas openssh:openssh has no CVEs):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:openbsd:openssh
George Sapkin [Wed, 23 Apr 2025 11:53:46 +0000 (14:53 +0300)]
adguardhome: bump to 0.107.61
Security
- Any simultaneous requests that are considered duplicates will now only
result in a single request to upstreams, reducing the chance of a cache
poisoning attack succeeding. This is controlled by the new configuration
object pending_requests, which has a single enabled property, set to
true by default.
NOTE: It's strongly recommended to leave it enabled, otherwise AdGuard
Home will be vulnerable to untrusted clients.
Changelog: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.61 Signed-off-by: George Sapkin <redacted>
Paul Donald [Mon, 7 Apr 2025 14:01:46 +0000 (16:01 +0200)]
ttyd: update to 1.7.7
Breaking Changes
The web terminal is readonly by default now, to make it writable,
use -W option.
Changelog 1.7.7
Bump to 1.7.7
cmake: add static version back
Changelog 1.7.6
workflow: update actions packages
cmake: get version from git ref
Changelog 1.7.5
html: allow overriding client options with URL query
server: add --exit-no-conn option
html: add safari mobile full screen support
html: Add Unicode 11 xterm.js addon
html: upgrade to xterm 5.4.0
add trzszDragInitTimeout option
Changelog 1.7.4
Leverage Docker Layer System
html: update dependencies
build(deps): update zlib version 1.2.13 to 1.3 in cross-build.sh
server: print working directory on start
server: replace --readonly with --writable
server: fix -U option not work
server: do not expose port to public by default
Add -y flag for easier installation
improve support for trzsz
info.max_http_header_data = 65535;
Add Docker pulls badge
fix flow control
Fix typo, OPTOINS -> OPTIONS
Bump CMake version to 2.8.12
jq: provide regex support in additional package jq-full
I modified the makefile, so that it will build two packages: jq and
jq-full. The former will remain unchanged and the latter will have a
dependency to the oniguruma library, so jq-full will have regex functions
enabled.
coremark: fix error when it was built in the second run
When there is an error building packages other than coremark
and re-run with make -j1 V=s, the coremark package will report error.
the root cause is the folder was already created in the first run,
and not removed before the second run.
To fix this, use 'mkdir -p' instead of 'mkdir'.
Co-authored-by: Jonas Gorski <redacted> Signed-off-by: Rye Sears <redacted>
Rikki Vizcarra [Mon, 24 Mar 2025 21:41:25 +0000 (05:41 +0800)]
ddns-script: Change CURL call and redirect output in update_porkbun_v3
This also fixes: https://github.com/openwrt/packages/issues/26181
CURL funciton change was patterned on other ddns update scripts
that uses also JSON request/response payloads similar to
update_digitalocean_v2.sh: https://github.com/openwrt/packages/blob/15014f93e15bcb29956bf79cd397fea580bf6ea6/net/ddns-scripts/files/usr/lib/ddns/update_digitalocean_com_v2.sh#L29
update_gcp_v1.sh: https://github.com/openwrt/packages/blob/15014f93e15bcb29956bf79cd397fea580bf6ea6/net/ddns-scripts/files/usr/lib/ddns/update_gcp_v1.sh#L212
* checked and fixed the kresd and smartdns support
* fixed another ETAG issue
* changed the enabled feeds in default config to certpl, aguard and adguard_tracking
* various other small fixes
* update the readme
Stan Grishin [Mon, 14 Apr 2025 23:50:38 +0000 (23:50 +0000)]
adblock-fast: bugfixes: empty allow-lists, support for swap
* do not produce an error on empty allow-lists, fixes https://github.com/openwrt/packages/issues/26228
* do not produce an error when swap is available, fixes https://github.com/openwrt/packages/issues/26313
musl libc does not support this feature, and for glibc, additional
library libasan is required. Disable it explicitly to avoid build issue
when CONFIG_DEBUG is selected.
Petr Štetiar [Mon, 14 Apr 2025 04:20:36 +0000 (04:20 +0000)]
libarchive: bump to 3.7.9 fixing CVE-2025-25724, CVE-2025-1632, CVE-2024-57970
Libarchive 3.7.9 is a bugfix release, fixing a regression in libarchive
3.7.8 regarding GNU sparse entries was fixed.
Libarchive 3.7.8 is a bugfix and security release:
Security fixes:
* tar reader: Handle truncation in the middle of a GNU long linkname (CVE-2024-57970)
* unzip: fix null pointer dereference (CVE-2025-1632)
* tar reader: fix unchecked return value in list_item_verbose() (CVE-2025-25724)
Important bugfixes:
* 7zip reader: add SPARC and POWERPC filter support for non-LZMA compressors
* tar reader: Ignore ustar size when pax size is present
* tar writer: Fix bug when -s/a/b/ used more than once with b flag
* cpio: Fix a Y2038 bug on Windows
* libarchive: Handle ARCHIVE_FILTER_LZOP in archive_read_append_filter
* libarchive: Adding missing seeker function to archive_read_open_FILE()
Full Changelog: https://github.com/libarchive/libarchive/compare/v3.7.7...v3.7.8
The helper can be used by openssh-client, openssh-sftp-client,
and openssh-keygen to access `ecdsa_sk` and `ed25519_sk keys
provided by a FIDO U2F or FIDO2 hardware token connected over USB.
The reverted commit doesn't make sense since the component
(ssh-sk-helper) that uses libfido2, which is mentioned in
the commit message, isn't packaged.
* this release fixes a tar regression introduced in libarchive 3.7.5
libarchive 3.7.7:
* gzip: prevent a hang when processing a malformed gzip inside a gzip (OSS-Fuzz)
* tar: don't crash on truncated tar archives (OSS-Fuzz)
* tar: fix two leaks in tar header parsing
* the ETAG function now supports country and asn feeds as well
* fixed becyber URL and other small fixes
* LuCI fixes and improvements (separate commit)
* added a 'DNS Shift' option, where the generated final DNS blocklist is moved to the backup directory and
only a soft link to this file is set in memory. As long as your backup directory is located on an external drive,
you should activate this option to save disk space
* added ETAG-Header support to make sure to download only feeds that has been changed,
use backups otherwise (not supported by uclient-fetch)
* removed aria2 support
* added brave as a new safesearch provider
* removed the racist terminology from the local lists and renamed it to "allowlist" and "blocklist"
* removed the 'list' and 'timer' function from init, use the LuCI feed editor and the standard cron frontend instead
* various code changes and improvements
* major LuCI frontend changes, incl. a custom feed editor (separate commit)
* partial readme update
Michael Heimpold [Tue, 21 Jan 2025 20:28:00 +0000 (21:28 +0100)]
php8: update to 8.4.5
This is a major upgrade to latest stable PHP version.
- IMAP extension was unbundled from PHP
- align patch filenames with latest ones from Debian
- removed obsolete patches
- adapted/refreshed patches
- added patch to remove call to httpd during configure
Note: this assumes that 'prefork' mpm is used
Upstream changelog for this specific release:
https://www.php.net/ChangeLog-8.php#8.4.5
ipmitool: disable download of PEN list in Makefile
This commit allows building the package without downloading enterprise
numbers from the IANA PEN registry. This enables offline builds and
reduces storage usage, especially on devices with limited space.
Hannu Nyman [Sun, 6 Apr 2025 16:57:10 +0000 (19:57 +0300)]
nano: Update to 8.4
Update nano edit to version 8.4.
Add configure flags to overcome upstream bug 66978, where the newly added
gnulib module for strcasecmp always fails in the configure step when
cross-compiling.
https://savannah.gnu.org/bugs/?66978
https://github.com/coreutils/gnulib/commit/b2927d1b1fa3fb09a2210a3df5691f7d48d6151b
The added flags disable the strcasecmp function from gnulib.
If upstream (gnulib?) fixes things later, the flags should be removed.
git.99rst.org / openwrt-packages.git / log