Andy Syam [Fri, 22 Dec 2023 13:52:35 +0000 (21:52 +0800)]
numpy: update to version 1.26.2
https://github.com/numpy/numpy/releases
NumPy 1.26.2 Release Notes
NumPy 1.26.2 is a maintenance release that fixes bugs and regressions
discovered after the 1.26.1 release. The 1.26.release series is the last
planned minor release series before NumPy 2.0. The Python versions
supported by this release are 3.9-3.12.
Eric Fahlgren [Sun, 17 Dec 2023 16:33:36 +0000 (08:33 -0800)]
snort3: add missing action-override option
Allow use of rules as-defined, and don't override their actions. This
is generally the best way to use the ruleset, and overriding their
actions should only be undertaken when you fully understand how it
affects their use.
John Audia [Sun, 17 Dec 2023 10:36:47 +0000 (05:36 -0500)]
snort3: compile with lzma support
This PR adds the ability of snort to process rules that target
swf and pdf files requiring lzma decompression to look for
malicious payloads therein. This change only increases the size
of the snort3 executable by a fraction of a KB and the added
dependency of liblzma (based on currently offered 5.4.4-1) is
only a 169 KB shared object. Based on CPU requirements of snort,
x86 users likely represent the majority user-base and space their
rootfs is not an issue as it may be for lower-powered SoCs.
Size of snort3-3.1.76.0-2: 7354403 bytes
Size of snort3-3.1.76.0-3: 7354435 bytes
Description:
[A previous commit](https://github.com/openwrt/packages/commit/f8a8b71e26b9bdbf86fbb7d4d1482637af7f3ba4) has added more script event options.
However it looked like that commit was not complete as it stops the use of the script events route-up, route-pre-down, and ipchange when those are placed in the openvpn config file.
This PR fixes a regression that makes it problematic to specify certain event options in the OpenVPN configuration file.
Discussion in [this thread](https://forum.openwrt.org/t/openvpn-custom-route-up-script-in-23-05-rc2/167105/13) and [here](https://forum.openwrt.org/t/openvpn-route-up-and-route-pre-down-broken-in-23-05/176568)
Please have a look and consider implementing or make it possible to use all script event options in the openvpn config file in another way.
Pull request has been discussed and improved with the help of @AuthorReflex, see: https://github.com/openwrt/packages/pull/21732
Xiang W [Tue, 19 Dec 2023 13:20:13 +0000 (13:20 +0000)]
syncthing: fix wrong group name in syncthing.init
The group does not always have the same name as user, and when I try
to run syncthing with nobody I get an error. Since nobody belongs to
the group nogroup, I added some code to find out which group user
belongs to.
Javier Marcet [Mon, 1 Jan 2024 11:07:28 +0000 (12:07 +0100)]
python3-distro: update to version 1.9.0
- ENHANCEMENTS:
- Refactor distro.info() method to return an InfoDict
- Ignore the file '/etc/board-release'
- Ignore the file '/etc/ec2_version'
- RELEASE:
- Run Python 3.6 on Ubuntu 20.04 for CI and bump isort
- TESTS:
- Test on modern versions of CPython and PyPy and macOS
- Add support for ALT Linux Server 10.1 distribution
- Add Debian Testing to the tests
- Update archlinux resource for tests
Javier Marcet [Mon, 1 Jan 2024 10:44:14 +0000 (11:44 +0100)]
python-docker: Update to 7.0.0
Upgrade Notes:
- Removed SSL version (ssl_version) and explicit hostname check
(assert_hostname) options
- assert_hostname has not been used since Python 3.6 and was
removed in 3.12
- Python 3.7+ supports TLSv1.3 by default
- Websocket support is no longer included by default
- By default, docker-py hijacks the TCP connection and does not use
Websockets
- Websocket client is only required to use attach_socket(container,
ws=True)
- Python 3.7 no longer officially supported (reached end-of-life June
2023)
Features:
- Python 3.12 support
- Full networking_config support for containers.create()
- Replaces network_driver_opt (added in 6.1.0)
- Add health() property to container that returns status (e.g.
unhealthy)
- Add pause option to container.commit()
- Add support for bind mount propagation (e.g. rshared, private)
- Add filters, keep_storage, and all parameters to prune_builds()
(requires API v1.39+)
Bugfixes:
- Consistently return docker.errors.NotFound on 404 responses
- Validate tag format before image push
Miscellaneous:
- Upgraded urllib3 version in requirements.txt (used for
development/tests)
- Documentation typo fixes & formatting improvements
- Fixed integration test compatibility for newer Moby engine versions
- Switch to ruff for linting
Javier Marcet [Mon, 1 Jan 2024 10:39:54 +0000 (11:39 +0100)]
python-websocket-client: update to 1.7.0
- Renamed `mask` variable in ABNF to prevent name collision with
`mask()` function (9b51f73)
- Fixed old http import of HTTPStatus in _handshake.py (9b51f73)
- Add `send_text()` and `send_bytes()` to _app.py
- Improved typehint support (9b51f73, 8b73d00)
- General readability improvements, made all string concatenations
use f-strings (780584f, 3eabc6e)
- Applied black formatting style to code (da7f286)
Dirk Brenken [Thu, 28 Dec 2023 16:56:38 +0000 (17:56 +0100)]
banip: update 0.9.3-2
* rework the device/interface auto-detection (only layer-3 network devices will be detetcted correctly), disable the auto-detection e.g. for special tunnel interfaces
* supports now full gawk (preferred, if installed) and busybox awk
* raise the default boot timeout to 20 seconds (if 'ban_triggerdelay' is not set)
* various small fixes and improvements
* readme update
Sergey Ponomarev [Fri, 22 Dec 2023 21:27:54 +0000 (23:27 +0200)]
sshtunnel: ProxyCommand option
The ProxyCommand may have spaces so it must be quoted.
So we must use the procd_append_param.
Currently the option is not supported by Dropbear.
But it has -J instead which in OpenSSH means ProxyJump.
So we can't use it to avoid conflict.
Tianling Shen [Tue, 26 Dec 2023 05:49:05 +0000 (13:49 +0800)]
exfatprogs: Update to 1.2.2
exfatprogs 1.2.2 - released 2023-10-26
======================================
CHANGES :
* exfat2img: Allow dumps for read-only devices.
* fsck.exfat: Revert Repairing zero size directory.
NEW FEATURES :
* fsck.exfat: Repair duplicated filename.
* mkfs.exfat: Add the option "q" to print only error messages.
* mkfs.exfat: Add the option "U" to set volume GUID.
* tune.exfat: Add the option "U" / "-u" to set or print volume GUID.
BUG FIXES:
* fsck.exfat: Fix some out-of-bounds memory accesses.
* fsck.exfat: Change not to delete volume GUID directory entry.
New available libraries:
* *Cobalt:* Basic algorithms and types for C++20 coroutines, from
Klemens Morgenstern. [2]
* *Redis:* Redis async client library built on top of Boost.Asio, from
Marcelo Zimbres Silva. [3]
More info about Boost 1.84.0 can be found at the usual place [1].
,,_ -*> Snort++ <*-
o" )~ Version 3.1.77.0
'''' By Martin Roesch & The Snort Team
http://snort.org/contact#team
Copyright (C) 2014-2023 Cisco and/or its affiliates. All rights reserved.
Copyright (C) 1998-2013 Sourcefire, Inc., et al.
Using DAQ version 3.0.13
Using LuaJIT version 2.1.0-beta3
Using OpenSSL 3.0.12 24 Oct 2023
Using libpcap version 1.10.4 (with TPACKET_V3)
Using PCRE version 8.45 2021-06-15
Using ZLIB version 1.3
Using Hyperscan version 5.4.2 2023-12-20
Daniel Golle [Wed, 20 Dec 2023 05:01:15 +0000 (05:01 +0000)]
gnunet: update to version 0.20.0
v0.20.0:
- GNUNET_TESTING_get_testname_from_underscore renamed to GNUNET_STRINGS_get_suffix_from_binary_name and moved from libgnunettesting to libgnuneutil
- Move GNUNET_s into libgnunetutil.
- re-introduce compiler annotation for array size in signature
- function-signature adjustment due to compiler error
- GNUNET_PQ_get_oid removed, GNUNET_PQ_get_oid_by_name improved
- Added GNUNET_PQ_get_oid_by_name
- added GNUNET_PQ_get_oid()
- Added new CCA-secure KEM and use in IDENTITY encryption
- Add KEM API to avoid ephemeral private key management
- Add new GNUNET_PQ_event_do_poll() API to gnunet_pq_lib.h
- Added API to support arrays in query results
- Improve PQ API documentation.
- API for array types extended for times
- API extended for array query types
- relevant array-types in queries (not results) in postgresql added
- just style fixes, int to enum
- initial steps towards support of array-types in posgresql
- adds GNUNET_JSON_spec_object_const() and GNUNET_JSON_spec_array_const()
Fabrice Fontaine [Wed, 20 Dec 2023 08:18:46 +0000 (09:18 +0100)]
libassuan: Fix license
libassuan license is wrong since the addition of the package in commit
https://git.openwrt.org/?p=feed/packages.git;a=commit;h=e24e8fa98c813911419271d64433deb2b453fa02
Indeed, libassuan has been licensed under LGPL-2.1+ since version 1.0.3
back in 2007 [1]:
Noteworthy changes in version 1.0.3 (2007-08-24)
------------------------------------------------
* Changed the license of the library code back to LGPLv2.1 to support
a bunch of GPLv2(only) software which does not allow the use of
LGPLv3. Note that this is only a temporary change and authors of
GPLv2(only) software are asked to switch to GPLv3 or to add an
exception which allow the use of LPGLv3 software.
Florian Eckert [Wed, 20 Dec 2023 13:20:13 +0000 (14:20 +0100)]
openvpn: Added option to not start the native OpenVPN configurations on boot
OpenVPN configurations that have a uci entry, the enable/enabled option can
be used to control whether the OpenVPN connection should be started at
system startup or not.
OpenVPN configurations that are located under '/etc/openvpn/' are always
started at system boot. To ensure that these connections can also be
started later, they must 'not' be started automatically during system boot.
This can be prevented with the following entry in the OpenVPN configuration.
config globals 'globals'
option autostart '0'
These OpenVPN configurations can then be started later with the command.
'/etc/init.d/openvpn start <name>'
Florian Eckert [Wed, 20 Dec 2023 09:19:24 +0000 (10:19 +0100)]
openvpn: add possibility to start openvpn_path_instance on request
This commit adds the possibility that an OpenVPN instance located under
'/etc/openvpn' can also be started with the command.
'/etc/init.d/openvpn start <name>'
Daniel Golle [Wed, 20 Dec 2023 02:21:11 +0000 (02:21 +0000)]
ccid: update to version 1.5.4
Add new build dependency on zlib as package no longer builds without
it being present.
1.5.4 - 29 October 2023, Ludovic Rousseau
- fix a regression introduced in 1.5.3
1.5.3 - 25 October 2023, Ludovic Rousseau
- Add support of
- ACS ACR1552 1S CL Reader
- ACS ACR1552 CL Reader
- ACS ACR1581
- ACS ACR40T ICC Reader
- ACS ACR40U ICC Reader
- ACS WalletMate 1S CL Reader
- Aktiv Rutoken SCR 3101 NFC Reader
- CIRIGHT ONE PASS U2F
- Dexon Tecnologias Digitais LTDA eSmartDX
- Excelsecu Card reader
- GHI NC001
- Identiv uTrust Token Flex
- SpringCard M519 with idProduct: 0x6212
- SpringCard M519 with idProduct: 0x621A
- WCMi SD5931
- parse: create output.bin file
- udev: Disable USB-persist for CCID devices
- configure: fail if flex is not found
- Some other minor improvements
1.5.2 - 31 January 2023, Ludovic Rousseau
- Add support of
- KAPELSE KAP-LINK
- LDU LANDI
- Sensyl SSC-HV Reader
- TOKEN2 MFA NFC Reader
- TOKEN2 Molto2
- Thales RF Reader
- Alcor Micro AU9560: Remove high speeds since they are not supported
- Hack for AlcorMicro AU9560 and Acos-ID card
- configure.ac: disable the use of --disable-usbdropdir
Daniel Golle [Wed, 20 Dec 2023 04:01:35 +0000 (04:01 +0000)]
pcsc-lite: update to version 2.0.1
Add configure argument to keep polkit disabled as per before 2.0.1.
2.0.1: Ludovic Rousseau
24 November 2023
- SCardConnect(): return SCARD_W_SECURITY_VIOLATION when needed (polkit)
- SCardCancel(): return SCARD_S_SUCCESS even if the client already finished
- polkit is enabled by default
- libpcscspy: fix a crash with NULL pointers
- Doxygen: fix SCardBeginTransaction() documentation
- fix pcscd internal thread safety issues (clang -fsanitize=thread)
- Some other minor improvements
9 June 2023
2.0.0: Ludovic Rousseau
9 June 2023
- Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR
- Add '--disable-polkit' option
- Reset eventCounter when a reader is removed
- Add "polkit" in "pcscd -v" output if enabled
- Doxygen: document SCARD_E_INVALID_VALUE for some functions
- use secure_getenv(3) if available
- Some other minor improvements
* Non-maintainer upload targeting Debian 12.2, with maintainer approval
from Luca Boccassi.
* Backport merged-/usr support changes from trixie:
- Implement merged-/usr by post-merging.
This changes the bootstrap order so that it will be possible for a
future version of base-files in trixie/sid to take responsibility for
creating the /bin, /sbin, /lib* symlinks, and is a prerequisite for
lifting the moratorium imposed by #1035831.
(Closes: #1049898; implementation by Helmut Grohne)
- functions: Reinstate setup_merged_usr() as it existed before
fixing #1049898, for backwards-compatibility with older versions of
mmdebstrap.
- functions: Default to merged-/usr for suites newer than bookworm,
even for the buildd profile. This allows packages targeting trixie
to assume that merged-/usr is the only layout possible, and is a
prerequisite for lifting the moratorium imposed by #1035831.
- Mention --merged-usr in --help output. (Closes: #1031828)
* Backport autopkgtest regression fixes from trixie:
- Revert fake/schroot-1.6.10-3 to an accurate emulation of the
behaviour of schroot 1.6.10-3 (Closes: #983311)
- Document schroot 1.6.10-3 with the default profile as expected to
fail to use /dev/pts in a lxc >= 3 or Docker container; this is a
schroot bug (#983423) and not a debootstrap bug
- With these changes, the autopkgtest is confirmed to pass in
autopkgtest-virt-qemu (Closes: #983197)
-- Simon McVittie <redacted> Wed, 30 Aug 2023 15:21:17 +0100
[ Heysion Yuan ]
* add usrmerge support loongarch64.
[ Paul Menzel ]
* Avoid duplicate components in `sources.list`.
[ Edward Tomasz Napierala ]
* Mount /dev/fd if the host is FreeBSD.
[ Debian Janitor ]
* Bump debhelper from old 12 to 13.
* Update renamed lintian tag names in lintian overrides.
[ Luca Falavigna ]
* Add (Ubuntu) kinetic as a symlink to gutsy.
* Update standards version to 4.6.0.1, no changes needed.
[ Luca Boccassi ]
* setup_merged_usr: create skip flag when merged-usr is disabled on bookworm+
* Add usr-is-merged to the required set on testing/unstable
Daniel Golle [Wed, 20 Dec 2023 02:24:47 +0000 (02:24 +0000)]
hiredis: update to version 1.2.0
Announcing Hiredis v1.2.0 with with new adapters, and a great many bug
fixes.
🚀 New Features
- Add sdevent adapter
- Allow specifying the keepalive interval
- Add RedisModule adapter
- Helper for setting TCP_USER_TIMEOUT socket option
🐛 Bug Fixes
- Fix a typo in b6a052f.
- Fix wincrypt symbols conflict
- Don't attempt to set a timeout if we are in an error state.
- Accept -nan per the RESP3 spec recommendation.
- Fix colliding option values
- Ensure functionality without `_MSC_VER` definition
🧰 Maintenance
- Add a test for the TCP_USER_TIMEOUT option.
- Add -Werror as a default.
- CI: Update homebrew Redis version.
- Fix typo in makefile.
- Write a version file for the CMake package
- CMakeLists.txt: respect BUILD_SHARED_LIBS
- Cmake static or shared
- fix typo
- Add a test ensuring we don't clobber connection error.
- Search for openssl on macOS
git.99rst.org / openwrt-packages.git / log