mv88e6xxx_dump: add new packages to debug switch issues
Reviewed-by: Chris Healy cphealy@gmail.com Reviewed-by: Robert Marko <redacted> Reviewed-by: Andre Heider <redacted> Tested-by: Petr Štetiar <redacted> Signed-off-by: Etienne Champetier <redacted>
Noah Meyerhans [Thu, 26 Jan 2023 18:45:55 +0000 (10:45 -0800)]
bind: update to 9.18.11
Fixes CVEs:
- CVE-2022-3924: Fix serve-stale crash when recursive clients
soft quota is reached.
- CVE-2022-3736: Handle RRSIG lookups when serve-stale is
active.
- CVE-2022-3094: An UPDATE message flood could cause named to
exhaust all available memory. This flaw was addressed by adding
a new "update-quota" statement that controls the number of
simultaneous UPDATE messages that can be processed or
forwarded. The default is 100. A stats counter has been added to
record events when the update quota is exceeded, and the XML and
JSON statistics version numbers have been updated.
Seems to work.
Looking into the 'venv' lib, it seems it's installing pip & setuptools
inside a virtual environment.
`python3-pip` is already ~6 MB.
This adds another ~3 MB.
But, this gives users the ability to run Python virtual environments, which
is a pretty common feature of Python in production cases (usually web
stuff).
python-build: add support for pyproject.toml files
A new PEP 517 (https://www.python.org/dev/peps/pep-0517/) has defined that
Python packages can be shipped without any `setup.py` file, and that a
`pyproject.toml` file is sufficient.
A `setup.py` shim layer is suggested as a method for running the build.
For these cases, we will add a support in the OpenWrt build-system to
provide the default `setup.py` shim layer in case this file does not exist,
but there is a `pyproject.toml` file.
We also seem to need to tweak the shim layer with the PKG_VERSION,
otherwise the detected version is 0.0.0.
We will need to see if this will be fixed later in setuptools{-scm}.
Karl Palsson [Fri, 20 Jan 2023 13:14:40 +0000 (13:14 +0000)]
openocd: select new libjaylink
Without the +select, openocd's internal autoselection between internal
libjaylink and external libjaylink can result in linking against
external, without the depends declaration, leading to missing
depdendencies errors.
Hard depend on the external libjaylink, as that's the future direction
anyway.
Reported-by: Paul Fertser <redacted> Signed-off-by: Karl Palsson <redacted>
Benjamin Drung [Tue, 17 Jan 2023 23:14:02 +0000 (00:14 +0100)]
ddns-scripts: add hosting.de provider
Add hosting.de provider. To use dynamic DNS you have to create a DDNS
host with a separate DDNS user.
Note: As of 2023-01-17 hosting.de does not work with wget which will
fail with `400: Bad Request` (it will work with `--auth-no-challenge`).
You should use curl instead. I have reported that to the provider.
Stan Grishin [Tue, 3 Jan 2023 19:46:20 +0000 (19:46 +0000)]
pbr: update to 1.0.1-10
Bugfixes:
* better error information for empty tid/mark and failure to resolve domains
* better handling of entries in /etc/iproute2/rt_tables
* update packages definitions and descriptions
* remove firewall4 from dependencies to prevent dependency recursion
Updates:
* introduce nft_user_set_policy and nft_user_set_counter to control options for
user nft sets this service creares
* use counters in internal nft sets
Nick Hainke [Sun, 15 Jan 2023 19:13:16 +0000 (20:13 +0100)]
snowflake: update to 2.4.2
Changes in version v2.4.2 - 2023-01-13
- Issue 40208: Enhance help info for capacity flag
- Issue 40232: Update README and fix help output
- Issue 40173: Increase clientIDAddrMapCapacity
- Issue 40177: Manually unlock mutex in ClientMap.SendQueue
- Issue 40177: Have SnowflakeClientConn implement io.WriterTo
- Issue 40179: Reduce turbotunnel queueSize from 2048 to 512
- Issue 40187/40199: Take ownership of buffer in QueuePacketConn QueueIncoming/WriteTo
- Add more tests for URL encoded IPs (safelog)
- Fix server flag name
- Issue 40200: Use multiple parallel KCP state machines in the server
- Add a num-turbotunnel server transport option
- Issue: 40241: Switch default proxy STUN server to stun.l.google.com
Andre Heider [Sat, 14 Jan 2023 10:40:39 +0000 (11:40 +0100)]
lrzsz: update to v0.12.21rc and fix a CVE
This updates to v0.12.21rc from 1999 (sic), which was never officially
released. There're fixes in there, and it's what debian ships, so let's
use that too. While at it, use debian's autohell hack and package
description too.
Patch 1 fixes a hang with musl.
Patch 2 fixes CVE-2018-10195, add PKG_CPE_ID while at it.
Refesh the rest.
Fixes: CVE-2018-10195 Signed-off-by: Andre Heider <redacted>
Daniel Golle [Thu, 6 Oct 2022 22:33:58 +0000 (23:33 +0100)]
gnunet: update to version 0.19.2
GNUnet has not been updated for a while due to the gnurl-situation.
Now that we got libcurl-gnutls, we can update GNUnet.
For details, please see the GNUnet release notes:
Daniel Golle [Sat, 14 Jan 2023 01:03:10 +0000 (01:03 +0000)]
libcurl-gnutls: add package, replaces gnURL
The gnURL-fork of cURL is no longer maintained as cURL finally supports
probing and selecting the TLS implementation at run-time.
Hence just build a gnuTLS-backed variant of libcurl, use patchelf to
change the shared object name, call the result libcurl-gnutls and be
done. Other distributions have opted for similar solutions.
In future we could convert the curl package to provide build-variants
for each TLS implementation; however, this is out of the scope of the
needs of GNUnet which used to be only user of libgnurl.
git.99rst.org / openwrt-packages.git / log