mpc: update to 0.35

Signed-off-by: Rosen Penev <[email protected]>

libxerces-c: update to 3.2.5

Signed-off-by: Rosen Penev <[email protected]>

libupnp: update to 1.14.18

Signed-off-by: Rosen Penev <[email protected]>

libtins: update to 4.5

Remove upstream backport.

Signed-off-by: Rosen Penev <[email protected]>

log4cplus: update to 2.1.1

Signed-off-by: Rosen Penev <[email protected]>

p910nd: bump release

Signed-off-by: Paul Donald <[email protected]>

libv4l: update to 1.26.1

meson now available.

Added 2 patches to fix missing intl dependency and musl support.

Signed-off-by: Rosen Penev <[email protected]>

libmpdclient: update to 2.22

Signed-off-by: Rosen Penev <[email protected]>

faad2: update to 2.11.1

CMake is used now.

Signed-off-by: Rosen Penev <[email protected]>

libidn: update to 1.42

Signed-off-by: Rosen Penev <[email protected]>

vala: remove pcre2 patch

Issue was avoided with glib2.

Signed-off-by: Rosen Penev <[email protected]>

glib2: use internal pcre2

For some strange reason, glib2 does not link properly with a static
pcre2. Work around by bundling own copy.

Signed-off-by: Rosen Penev <[email protected]>

Merge pull request #23400 from Rondom/rondom-fix-libstrophe-license

libstrophe: Specify correct PKG_LICENSE

python-aiohttp: update to 3.9.3

Fixes CVE-2023-47627

Signed-off-by: Rosen Penev <[email protected]>

moreutils: update to 0.68

- Refresh patches

Signed-off-by: krant <[email protected]>

imagemagick: update to 7.1.1-28

- Use .xz for PKG_SOURCE

Signed-off-by: krant <[email protected]>

softethervpn5: version update to 5.02.5181 (incl. vulnerability fixes)

softethervpn5: The softethervpn5 package is due for an update from recent source. This PR implements a Makefile update to pull December 2023 release, which includes fixes for recently-disclosed vulnerabilities. The build patches are also updated accordingly.

Signed-off-by: Thomas Winkler <[email protected]>

libstrophe: Specify correct PKG_LICENSE

libstrophe is dual-licensed as MIT OR GPL-3.0-only, which is also
reflected by the SPDX-License-Identifier lines in the source files.
Correct PKG_LICENSE in the Makefile accordingly.

Signed-off-by: Andreas Gnau <[email protected]>

proxychains-ng: update to version 4.17

Maintainer   : myself
Build system : Arch Linux x86_64
Build tested : r7800 OpenWrt git master (r25151-2a2abed0be)
Run tested   : r7800 OpenWrt git master (r25151-2a2abed0be)

Signed-off-by: Daniel Bermond <[email protected]>

snort3: clean up ucode usage

 - Add missing 'ucode' package dependency
 - Proto-ify the ConfigItem objects
 - Fix indentation and tab usage

Signed-off-by: Eric Fahlgren <[email protected]>

yq: Update to 4.40.7

Signed-off-by: Tianling Shen <[email protected]>

cloudflared: Update to 2024.2.0

Signed-off-by: Tianling Shen <[email protected]>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>

stlink: add packages

stlink is an open source toolset to program and debug STM32 devices
and boards manufactured by STMicroelectronics.

Resulting binary packages:
 * stlink - library and shared chip info data
 * st-info - a programmer and chip information tool
 * st-flash - a flash manipulation tool
 * st-trace - a logging tool to record information on execution
 * st-util - a GDB server

Signed-off-by: Daniel Golle <[email protected]>

redis: update to 6.2.14

Fixes CVE-2022-24735 and CVE-2022-24736

Signed-off-by: Rosen Penev <[email protected]>

tio: update to 2.7

- Switch to Meson build
- Fix license file name
- Add libinih dependency

Signed-off-by: krant <[email protected]>

minisatip: update to 1.3.2

Signed-off-by: krant <[email protected]>

libusb-compat: update to 0.1.8

- Update package URL

Signed-off-by: krant <[email protected]>

zlog: update to 1.2.17

Rework to use local tarballs. Smaller and more stable.

Build with cmake. Faster and simpler. Needs a small patch though.

License was updated.

Fixes CVE-2021-43521

Signed-off-by: Rosen Penev <[email protected]>

libmicrohttpd: update to 0.9.77

Fixes CVE-2023-27371

Signed-off-by: Rosen Penev <[email protected]>

libao: backport fix for CVE-2017-11548

Signed-off-by: Rosen Penev <[email protected]>

yajl: backport CVE-2023-33460 fix

Removed old uclibc patches. Not relevant with modern musl or glibc.

Signed-off-by: Rosen Penev <[email protected]>

postgesql: update to 15.6

Fixes CVE-2023-39417 and CVE-2023-39418

Signed-off-by: Rosen Penev <[email protected]>

p910nd: hotplug shellcheck fixes

Signed-off-by: Paul Donald <[email protected]>

p910nd: init: check device (/dev/usb/lpX) existence

this prevents the daemon exiting when a configured device
is not plugged in.

Signed-off-by: Paul Donald <[email protected]>

p910nd: init: partial fix for openwrt/packages#10496

Harmless to carry this fix until procd.sh adds the param

This parameter will mean umdns advertises not just "OpenWrt" but a more
appropriate string:

"Apple LaserWriter Pro 630"

Signed-off-by: Paul Donald <[email protected]>

p910nd: hotplug+init: include extra ieee1284 properties

Apple and macOS GUI co-opts the mDNS note= param as "Location"

Signed-off-by: Paul Donald <[email protected]>

p910nd: hotplug: minor bug fixes

Commit driver_home defaults before continuing

Fix missing path for serial number acquisition

Store current device if no previously configured device had one.
Also set CHAR_DEV so the printer can get its driver sent on first run.

Signed-off-by: Paul Donald <[email protected]>

p910nd: hotplug: small refactor

replace -a with &&

shorten uci commands via variables

add optional ieee1284_id parameters

Signed-off-by: Paul Donald <[email protected]>

p910nd: init: add txtvers=1 to mDNS properties

The spec https://developer.apple.com/bonjour/printing-specification/bonjourprinting-1.2.1.pdf
notes:

... if the meaning of any of the TXT record keys is changed, the txtvers value
will be incremented. The current value of this key is “1”, and if this key does not exist in
the TXT record, the default value of “1” is assumed. The txtvers SHOULD be the first
key/value pair in the TXT record.

Signed-off-by: Paul Donald <[email protected]>

p910nd: init: line-break and conditionalize mDNS properties

Signed-off-by: Paul Donald <[email protected]>

p910nd: init: only run mDNS changes if mdns is set to on

i.e. don't do the extra work unless mdns setting is enabled

Signed-off-by: Paul Donald <[email protected]>

p910nd: init script

Don't run procd with a name of p9100d or p9101d etc.
Use the original binary name: p910nd.

This way, all supplied parameters should be visible via e.g.:

ps
xargs -0 < /proc/{procid}/cmdline

Revise all p910nd strings to the variable DAEMON_NAME or CONFIG where
appropriate.

Signed-off-by: Paul Donald <[email protected]>

restic: update to 0.16.4

Signed-off-by: Fabian Lipken <[email protected]>

dmidecode: update to 3.5

Signed-off-by: krant <[email protected]>

bash: update to 5.2.21

- Switch package URL to HTTPS

Signed-off-by: krant <[email protected]>

gawk: update to 5.3.0

Signed-off-by: krant <[email protected]>

Merge pull request #23354 from neheb/2

tcpreplay: backport CVE fix

confuse: fix CVE-2022-40320

Signed-off-by: Rosen Penev <[email protected]>

iodine: bump version to 0.8.0

Signed-off-by: Michael Gerlach <[email protected]>

giflib: fix CVEs

Patches taken from Fedora

Signed-off-by: Rosen Penev <[email protected]>

avahi: backport CVE fixes from upstream

Signed-off-by: Rosen Penev <[email protected]>

libvpx: update to 1.14.0

Fixes CVE-2023-5217

Signed-off-by: Rosen Penev <[email protected]>

libssh2: update to 1.11.0

Fixes CVE-2020-22218

Signed-off-by: Rosen Penev <[email protected]>

tcpreplay: backport CVE fix

Low severity.

Signed-off-by: Rosen Penev <[email protected]>

stress-ng: bump to version 0.17.05

Signed-off-by: Alexandru Ardelean <[email protected]>

acl: update to 2.3.2

Signed-off-by: Maxim Storchak <[email protected]>

attr: update to 2.5.2

Signed-off-by: Maxim Storchak <[email protected]>

tgt: update to 1.0.90

Signed-off-by: Maxim Storchak <[email protected]>

libx264: update to 2024-01-13 revision

- Fix CPU type detection to enable asm on ARM
- Refresh patches

Signed-off-by: krant <[email protected]>

telldus-mqtt: bump to 0.2

Signed-off-by: Peter Liedholm <[email protected]>

net-snmp: update to 5.9.4

Adjust patches for current version changes
Module "disk" renamed to "disk_hw"
Internal type "unknown" changed to "u_int32_t"
Add patch with removing macro syntax checking for successful build

Signed-off-by: Ivan Pavlov <[email protected]>

libfido2: update to 1.14.0

- Don't set default and remove obsolete CMake options

Signed-off-by: krant <[email protected]>

libcbor: update to 0.11.0

Signed-off-by: krant <[email protected]>

file: update to 5.45

- Remove default and non-existent configure options

Signed-off-by: krant <[email protected]>

cjson: update to 1.7.17

Signed-off-by: krant <[email protected]>

jool: update to 4.1.11

Update jool to 4.1.11 and remove unneeded patch.
Changelog: https://github.com/NICMx/Jool/releases/tag/v4.1.11

Signed-off-by: Tiago Gaspar <[email protected]>

squid: fix configure options

- Remove non-existing 'dlmalloc' option
- Use 'with-cap' instead of 'with-libcap'
- Use 'with-xml2' instead of 'with-libxml2'
- Patch configure.ac to properly handle 'with-nettle'

Signed-off-by: krant <[email protected]>

json-glib: update to 1.8.0

- Don't set default Meson option

Signed-off-by: krant <[email protected]>

libextractor: update to 1.13

- Remove obsolete configure option
- Remove patch and var override since MEM_SRCDST_SUPPORTED is always on

Signed-off-by: krant <[email protected]>

glib2: update to 2.78.4

- Use HTTPS for package URL
- Don't set default Meson options
- Remove upstreamed patch
- Refresh remaining patches

Signed-off-by: krant <[email protected]>

croc: update to 9.6.9

change overview:
9.6.6 -> 9.6.8: only CI + deployment changes
9.6.8 -> 9.6.9: crypto library version bump

changelogs:
9.6.6 -> 9.6.7: https://github.com/schollz/croc/releases/tag/v9.6.7
9.6.7 -> 9.6.8: https://github.com/schollz/croc/releases/tag/v9.6.8
9.6.9 -> 9.6.9: https://github.com/schollz/croc/releases/tag/v9.6.9

Signed-off-by: Jonas Jelonek <[email protected]>

nbd: update to 3.25

- Use up-to-date project URLs
- Use up-to-date configure args
- Drop obsolete std=gnu99 from CFLAGS

Signed-off-by: krant <[email protected]>

erlang: update to 26.2.2

- Drop upstreamed patch
- Fix broken symlink /usr/bin/epmd
- Re-enable mips16
- Formatting

Signed-off-by: krant <[email protected]>

python-lxml: bump to version 5.1.0

Also add a quick test.sh file.

Signed-off-by: Alexandru Ardelean <[email protected]>

django: bump to version 5.0.1

Signed-off-by: Alexandru Ardelean <[email protected]>

numpy: bump to version 1.26.3

Signed-off-by: Alexandru Ardelean <[email protected]>

squid: update to 6.7

- Switch URL to HTTPS
- Remove default/obsolete configure options
- Fix and refresh the patch

Signed-off-by: krant <[email protected]>

lyncx: fix wrongful include of 'bsd/stdlib.h' is some environments

Signed-off-by: krant <[email protected]>

v4l2camera: Update Makefile to fix mips build

Signed-off-by: Michel Promonet <[email protected]>

autossh: make forwarding optional
- previously localport option was required, which broke older configs
- now in-config forwarding is only optional
- ssh option still can be used for forwarding as in sample config

Signed-off-by: kkubicki <[email protected]>

snort3: improve script reliability

 - Enable missing variable checking by default
 - Explicitly check variables are defined in all 'rm' commands

Signed-off-by: Eric Fahlgren <[email protected]>

apr-util: update to 1.6.3

- Remove upstreamed patches
- Fix OS path leak in iconv configure script

Signed-off-by: krant <[email protected]>

usbutils: update to 017

- Add mandatory usbids dependency

Signed-off-by: krant <[email protected]>

openvpn: add OpenVPN option disable-dco

You maybe want to disable the DCO support, so let's add this option.

Signed-off-by: Martin Schiller <[email protected]>

rsyslog: update to 8.2312.0

Signed-off-by: krant <[email protected]>

libfastjson: update to 1.2304.0

- Use HTTPS for source URL

Signed-off-by: krant <[email protected]>

whois: update to 5.5.20

- Refresh patches

Signed-off-by: krant <[email protected]>

xxhash: update to 0.8.2

- Switch URL to the official one

Signed-off-by: krant <[email protected]>

iptraf-ng: update to 1.2.1

- Update package URLs
- Remove rvnamed-ng target since it was merged into iptraf-ng

Signed-off-by: krant <[email protected]>

libffi: update to 3.4.4

- Use proper tarball URL
- Use HTTPS for package URL
- Don't set default configure option

Signed-off-by: krant <[email protected]>

diffutils: update to 3.10

- Switch package URL to HTTPS
- Refresh the patch

Signed-off-by: krant <[email protected]>

pigz: update to 2.8

- Fix license name

Signed-off-by: krant <[email protected]>

libinput: update to 1.25.0

- Switch sources to git since no proper tarball is available
- Switch URL to HTTPS
- Don't set default Meson options

Signed-off-by: krant <[email protected]>

gitolite: update to 3.6.13

- Use git for sources since no proper tarball is available
- Switch package URL to HTTPS
- Refresh the patch

Signed-off-by: krant <[email protected]>

git-lfs: update to 3.4.1

- Update package URLs to the official ones

Signed-off-by: krant <[email protected]>

xmlrpc-c: install dev files only with 1st variant

This adds a variant check to run InstallDev only when the first variant
is built.  Otherwise, a dependent package may install the default
version, even though the second variant ends up in the staging dir,
causing downstream packages to miss library dependencies, such as:

Package rtorrent-rpc is missing dependencies for the following libraries:
libxmlrpc_xmlparse.so.3
libxmlrpc_xmltok.so.3

Signed-off-by: Eneas U de Queiroz <[email protected]>

openldap: update to 2.6.7

- Remove dead mirror URL
- Clean-up configure args

Signed-off-by: krant <[email protected]>

lmdb: update to 0.9.32

- Switch to git source URL
- Rebase the patch

Signed-off-by: krant <[email protected]>

hwdata: update to 0.379

Signed-off-by: krant <[email protected]>