Florian Eckert [Tue, 15 Mar 2022 13:52:05 +0000 (14:52 +0100)]
collectd: remove not needed fix
This was not a real fix but a workaround. It is no longer clear to me
why this was necessary. Deleting the patch restores the upstream
behaviour of the collected for the smart plugin. I have tested it and on
my system the hard disk to be monitored is recognised.
Florian Eckert [Tue, 15 Mar 2022 14:04:55 +0000 (15:04 +0100)]
libudev-zero: backport latest changes to fix blocking on devices scan
This change added the latest upstream changes since version 1.0.0.
When using the smart plugin from collectd, there are problems with the
function udev_enumerate_scan_devices. This function is blocked and no
longer returns. Backporting the latest fixes from libudev-zero solves
the problem.
Javier Marcet [Mon, 14 Mar 2022 07:32:58 +0000 (08:32 +0100)]
python3-paramiko: update to version 2.10.1
2.10.1:
- [Bug]: (CVE-2022-24302) Creation of new private key files using
PKey subclasses was subject to a race condition between file creation
& mode modification, which could be exploited by an attacker with
knowledge of where the Paramiko-using code would write out such
files.
- This has been patched by using os.open and os.fdopen to ensure new
files are opened with the correct mode immediately. We’ve left the
subsequent explicit chmod in place to minimize any possible
disruption, though it may get removed in future backwards-
incompatible updates.
- Thanks to Jan Schejbal for the report & feedback on the solution,
and to Jeremy Katz at Tidelift for coordinating the disclosure.
2.10.0:
- [Feature] Add support for OpenSSH’s Windows agent as a fallback
when Putty/WinPageant isn’t available or functional. Reported by
@benj56 with patches/PRs from @lewgordon and Patrick Spendrin.
- [Feature] Add support for the %C token when parsing SSH config
files. Foundational PR submitted by @jbrand42.
- [Bug] Significantly speed up low-level read/write actions on
SFTPFile objects by using bytearray/memoryview. This is unlikely to
change anything for users of the higher level methods like
SFTPClient.get or SFTPClient.getfo, but users of SFTPClient.open will
likely see orders of magnitude improvements for files larger than a
few megabytes in size.
- Thanks to @jkji for the original report and to Sevastian Tchernov
for the patch.
- [Support] Add six explicitly to install-requires; it snuck into
active use at some point but has only been indicated by transitive
dependency on bcrypt until they somewhat-recently dropped it. This
will be short-lived until we drop Python 2 support. Thanks to
Sondre Lillebø Gundersen for catch & patch.
Marc Egerton [Mon, 14 Mar 2022 20:16:47 +0000 (20:16 +0000)]
mtr: bump version to 0.95, split package for JSON and non-JSON variants
As per the discussion in PR #18047, split the MTR package into
two, one with jansson enabled for JSON output, and one without.
This commit also bumps the version to 0.95. Since the MTR project
website does not seem to be updated with builds any longer, switch
to GitHub Codeload instead.
Also enable PKG_FIXUP:=autoreconf so that MTRs bootstrap.sh process
is executed properly.
Javier Marcet [Mon, 14 Mar 2022 07:31:23 +0000 (08:31 +0100)]
docker-compose: Update to version 2.3.3
What's Changed:
- use plain text progress when ansi=never is set by @ndeloof
- build full compose model from resources, then filter by services by
@ndeloof
- add run with dependencies e2e test by @glours
- add support for device_cgroup_rules by @ndeloof
- composeService to use dockerCli's In/Out/Err streams by @ndeloof
- fix generated YAML missing an "examples" section, and update
cli-docs-tool to v0.4.0 by @thaJeztah
chicken-scheme: add conflict and small Makefile polishing
- No need to explicitly state two times section and category since this is
already done in define Package/chicken-scheme/Default
- Also add TITLE to Default
- Add conflict between chicken-scheme-interpreter and
chicken-scheme-full
They both provide the same files:
/usr/lib/libchicken.so
/usr/lib/chicken/11/chicken.time.import.so
/usr/lib/chicken/11/chicken.fixnum.import.so
/usr/lib/chicken/11/chicken.internal.import.so
/usr/lib/chicken/11/chicken.tcp.import.so
/usr/lib/chicken/11/chicken.continuation.import.so
/usr/lib/chicken/11/chicken.port.import.so
/usr/lib/chicken/11/chicken.random.import.so
/usr/lib/chicken/11/chicken.compiler.user-pass.import.so
/usr/lib/chicken/11/chicken.process-context.import.so
/usr/lib/chicken/11/chicken.bitwise.import.so
/usr/lib/chicken/11/srfi-4.import.so
/usr/lib/chicken/11/chicken.load.import.so
/usr/lib/chicken/11/chicken.blob.import.so
/usr/lib/chicken/11/chicken.time.posix.import.so
/usr/lib/chicken/11/chicken.file.posix.import.so
/usr/lib/chicken/11/chicken.flonum.import.so
/usr/lib/chicken/11/chicken.condition.import.so
/usr/lib/chicken/11/chicken.pretty-print.import.so
/usr/lib/chicken/11/types.db
/usr/lib/chicken/11/chicken.foreign.import.so
/usr/lib/chicken/11/chicken.repl.import.so
/usr/lib/chicken/11/chicken.pathname.import.so
/usr/lib/chicken/11/chicken.sort.import.so
/usr/lib/chicken/11/chicken.keyword.import.so
/usr/lib/chicken/11/chicken.process.signal.import.so
/usr/lib/chicken/11/chicken.platform.import.so
/usr/lib/chicken/11/chicken.base.import.so
/usr/lib/chicken/11/chicken.syntax.import.so
/usr/lib/chicken/11/chicken.file.import.so
/usr/lib/chicken/11/chicken.memory.import.so
/usr/lib/chicken/11/chicken.gc.import.so
/usr/lib/chicken/11/chicken.io.import.so
/usr/lib/chicken/11/chicken.memory.representation.import.so
/usr/lib/chicken/11/chicken.process.import.so
/usr/lib/chicken/11/chicken.plist.import.so
/usr/lib/chicken/11/chicken.string.import.so
/usr/lib/chicken/11/chicken.errno.import.so
/usr/lib/chicken/11/chicken.format.import.so
/usr/lib/chicken/11/chicken.eval.import.so
/usr/lib/chicken/11/chicken.irregex.import.so
/usr/lib/chicken/11/chicken.process-context.posix.import.so
/usr/lib/chicken/11/chicken.read-syntax.import.so
/usr/lib/chicken/11/chicken.csi.import.so
/usr/lib/chicken/11/chicken.locative.import.so
/usr/bin/csi
I can't seem to see any package that needs it.
This was added for cryptography, since it was needed up to version 2.7
asn1-crypto doesn't have a user since commit 9d892e3cf88bd7c5f2c61117df2f3c2fd6c0e960
So, remove it.
Oskari Rauta [Thu, 10 Mar 2022 01:51:30 +0000 (03:51 +0200)]
podman: updates podman package
- add missing runtime depency catatonit
- removed SELinux variant, add config option for it instead, I do not believe we need variant of EVERY SELinux support capable software
- add config option for iptables firewall setup in default cni network config, otherwise skip iptables part (part of nftables transition, use cni-plugins-nft for nftables fw support or better; forget about cni fw completely, instead use openwrt's own as that way your rules for containers do not disappear on firewall restart)
Unless we're using "mktemp -u ..." (not recommended), it will
create the temp file as part of its safety checking. Thus you
should only create the name (file) if you're going to use it,
and always remove it if you have created it.
isc-dhcp: detect whether ddns transfers are IPv4 only
If named is configured to not listen on any IPv6 interfaces,
then we should run 'nsupdate' with the '-4' argument.
Also:
* cleanup RFC-1918 address detection;
* don't generate PTR records for domain entries that aren't
RFC-1918 addresses or these will generate NOTAUTH failures;
We're assuming that we're doing DNS split-horizon and that
internal addresses aren't routable.
Daniel Golle [Tue, 15 Mar 2022 02:39:52 +0000 (02:39 +0000)]
gnunet: depend on 'uci-firewall' instead of 'firewall'
To allow using gnunet on systems with firewall4, add replace direct
dependency on 'firewall' with 'uci-firewall' which is satisfied by
either 'firewall' or 'firewall4'.
Daniel Golle [Sun, 13 Mar 2022 01:29:49 +0000 (01:29 +0000)]
gnunet: update to version 0.16.1
* OPUS and Pulse can be configured nicely by default now, no longer
need a local patch for that
* mysql version checks fail when cross-compiling, add patch to remove
them and always assume MySQL >8.0.
* Package new services, communicators, ...
This is a new major release. It breaks protocol compatibility with the
0.15.x versions. Please be aware that Git master is thus henceforth
(and has been for a while) INCOMPATIBLE with the 0.15.x GNUnet network,
and interactions between old and new peers will result in issues.
0.15.x peers will be able to communicate with Git master or 0.16.x
peers, but some services - in particular GNS - will not be compatible.
Michal Vasilek [Thu, 3 Mar 2022 15:30:16 +0000 (16:30 +0100)]
netdata: update to version 1.33.1
- Switch to upstream's release tarball
Requires to add PKG_BUILD_DIR since netdata is extracted to the folder
netdata-v1.33.1 instead of the previous solution where there was
missing v
- Disable anomaly detection by default
This avoids adding a new dependencies to netdata
Fixes:
Package netdata is missing dependencies for the following libraries:
libatomic.so.1
libstdc++.so.6
- Add FreeBSD patch to have smaller package and to avoid clutter in
WebUI
Signed-off-by: Michal Vasilek <redacted>
[add commit message, add FreeBSD patch] Signed-off-by: Josef Schlehofer <redacted>
Javier Marcet [Tue, 8 Mar 2022 16:23:59 +0000 (17:23 +0100)]
docker-compose: Update to version 2.3.2
What's Changed:
- 2.3.2:
- Fix json format for version command by @victor-timofei
- filter containers after project has been rebuilt from resources by
@ndeloof
- publish a draft release with auto generate release notes by
@glours
- map --interactive to StdinOpen by @ndeloof
- 2.3.1:
- Support COMPOSE_IGNORE_ORPHANS for compose run by @PIG208
- don't try to start dependencies when there are none by @ndeloof
- don't failed when trying to stop or rm services with no containers
ru… by @glours
- 2.3.0:
- Don't wait forever for unhealthy dependencies by @benesch
- Add progress output while waiting for dependencies by @benesch
- Discard env_file section on convert/config by @ulyssessouza
- Return only numbers in short version by @guillaumerose
- Don't SetRawTerminal() when exec is run with -T by @x-yuri
- only remove volumes set by compose file by @ndeloof
- Set NetworkMode correctly according to network priorities by
@laurazard
- go.mod: github.com/buger/goterm v1.0.4 by @thaJeztah
- Fix typo in reference/compose_up.md by @danBamikiya
- Fix pause/unpause by only applying to running containers by
@ulyssessouza
- use CustomLabels for composeV2 metadata and not impact service
hash by @ndeloof
- use golangci-lint-action by @ndeloof
- Adds support to list the config files on docker compose ls by
@KoditkarVedant
- declare --volume as an alias for --volumes by @ndeloof
- bump buildx to 0.7.1 by @ndeloof
- Wait and scale 0 by @glours
- Bump github.com/containerd/containerd from 1.5.8 to 1.6.0 by
@dependabot
- COMPOSE_REMOVE_ORPHANS can be set to always apply --remove-orphans
by @ndeloof
- Using start, stop, restart from outside the working directory
using --project-name (#9147) by @arhemd
- exclude com.docker.compose.image label from service hash by
@ndeloof
- Bump compose-go 1.0.9 by @ulyssessouza
- Bump compose-go 1.1.0 by @ulyssessouza
- Bump docker/distribution -> v2.8.0 by @ulyssessouza
- report external volume name not found by @ndeloof
- Bump github.com/containerd/containerd from 1.6.0 to 1.6.1 by
@dependabot
- CONTRIBUTING.md file. Update slack sign-up link by @teror4uks
- Add function to convert strings to bool by @ulyssessouza
- Add -i and -t to run and exec by @ulyssessouza
Javier Marcet [Tue, 8 Mar 2022 16:07:14 +0000 (17:07 +0100)]
python-websocket-client: update to 1.3.1
- 1.3.1:
- Fix 10 year old bug and improve dispatcher handling for
run_forever
- Fix run_forever to never return None, only return True or False,
and add two tests
- Remove Python 3.6 support, EOL in Dec 2021
- 1.3.0:
- BREAKING: Set Origin header to use https:// scheme when wss://
WebSocket URL is passed
- Replace deprecated/broken WebSocket URLs with working ones
(6ad5197)
- Add documentation referencing rel for automatic reconnection with
run_forever()
- Add missing opcodes 1012, 1013
- Add errno.ENETUNREACH to improve error handling (da1b050)
- Minor documentation improvements and typo fixes
- 1.2.3:
- Fix broken run_forever() functionality
- 1.2.2:
- Migrate wsdump script in setup.py from scripts to newer
entry_points
- Add support for ssl.SSLContext for arbitrary SSL parameters
- Remove keep_running variable
- Remove HAVE_CONTEXT_CHECK_HOSTNAME variable (dac1692)
- Replace deprecated ssl.PROTOCOL_TLS with ssl.PROTOCOL_TLS_CLIENT
- Simplify code and improve Python 3 support
- Fill default license template fields
- Update CI tests
- Improve documentation
Javier Marcet [Tue, 8 Mar 2022 16:02:25 +0000 (17:02 +0100)]
python3-distro: update to version 1.7.0
- BACKWARD COMPATIBILITY:
- Dropped support for EOL Pythons 2.7, 3.4 and 3.5
- Dropped support for LSB and uname back-ends when --root-dir is
specified
- Moved distro.py to src/distro/distro.py
- ENHANCEMENTS:
- Documented that distro.version() can return an empty string on
- rolling releases
- Documented support for Python 3.10
- Added official support for Rocky Linux distribution
- Added a shebang to distro.py to allow standalone execution
- Added support for AIX platforms
- Added compliance for PEP-561
- BUG FIXES:
- Fixed include_uname parameter oversight
- Fixed crash when uname -rs output is empty
- Fixed Amazon Linux identifier in distro.id() documentation
- Fixed OpenSuse >= 15 support
- Fixed encoding issues when opening distro release files
- Fixed linux_distribution regression
Jeffery To [Sun, 6 Mar 2022 22:43:52 +0000 (06:43 +0800)]
seafile: Remove packages
I believe these packages should be removed (and imported into the
abandoned packages repo[1]) as Seafile Server and Seahub have been
marked as broken for some time, and I do not believe I will have time to
fix or update these packages in the foreseeable future.
Jeffery To [Sun, 6 Mar 2022 20:01:16 +0000 (04:01 +0800)]
python-twisted: Update to 22.2.0
Includes fix for CVE-2022-21716 (The Twisted SSH client and server
implementation naively accepted an infinite amount of data for the
peer's SSH version identifier.)
haproxy: add conflict to packages with SSL or without SSL support
Both packages provide the same packages and should conflict to each
other.
Fixes:
```
Packages 'haproxy' and 'haproxy-nossl' do not conflict while providing same file: /usr/sbin/haproxy
Packages 'haproxy' and 'haproxy-nossl' do not conflict while providing same file: /etc/haproxy.cfg
Packages 'haproxy' and 'haproxy-nossl' do not conflict while providing same file: /etc/init.d/haproxy
```
- There should be shorter TITLE in Package/haproxy/Default
otherwise it is not shown
- No need to call Build/Prepare/Default
- Remove twice TITLE in non-SSL variant
- Make conffiles more clear
- Remove empty menu for halog