* update logrotate version to 3.22.0
* add patch to implement minutes
* add patch to calculate age in minutes instead of days

Erik Karlsson authored 9 months ago and Vivek Dutta committed 9 months ago

Otherwise it is possible to write to the socket pair when there is no
consumer resulting in the buffer growing indefinitely. This issue
manifests itself when an external event loop is used together with
mosquitto_loop_read/mosquitto_loop_write/mosquitto_loop_misc instead
of using mosquitto_loop, mosquitto_loop_forever or threaded mode with
mosquitto_loop_start/mosquitto_loop_stop


(cherry picked from commit 3f96b060)

* add rsa-sha2-512 and rsa-sha2-256 to default list of HostKeyAlgorithms

this option is needed to announce http servers via mdns as DNS-SD
services

* since there are multiple ways in which port can be set in the
  server section, and the order can also be changed, the logic has
  been updated to handle these conditions while announcing the
  port number on which server is running
* nginx does not allow adding options to server section, so option
  mdns which controls whether services have to announced over
  mdns, has been moved to the global section
* add support for announcing service if non-standard ports are
  used

Add support and set defaults for following in default sshd config:

* Ciphers:		aes256-ctr, aes192-ctr, aes128-ctr

* HostKeyAlgorithms:	ssh-dss, ssh-rsa, ecdsa-sha2-nistp521,
			ecdsa-sha2-nistp384,ecdsa-sha2-nistp256

* HostKeyFiles:		default is empty

* KexAlgorithms:	diffie-hellman-group-exchange-sha256,
			diffie-hellman-group14-sha1,
			ecdh-sha2-nistp521,ecdh-sha2-nistp384,
			ecdh-sha2-nistp256

* add uci-default script that will generate an sshd config from
  dropbear config, if present (to preserve settings from previous
  image which had dropbear), or with default values if sshd config
  is also not present

* the script will also check for dropbear key file and if found,
  place them where sshd expects them

the values read from uci will now be written to a config file
which will be passed to sshd, instead of passing the values
as command line arguments to sshd

nginx-ubus-module version was not updated since past 4 years.
It had many security and memory related fixes along with optimizations

This reverts commit 8b2c130b.

While 743f0c5b (perl: Run make depend to fix build race condition,
2024-03-05) fixed 98% of all parallel build failures there is still some
flakiness left in the perl build process. For now, give up instead of
digging deep into the perl build process to debug this.

We may later revert this commit to see whether the issue is fixed in a
later perl version in a later OpenWrt release.

Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>

Mohd Mehdi authored 11 months ago and Rahul Thakur committed 11 months ago

* openssh package is missing uci support in openwrt,
this commit implements the same. The init script
now reads from the uci and passes the arguments to
openssh.
* support for handling multiple instances is also
added.

note: the same has been up-streamed and has also got
1 approval already.

disable ftp by default so that the port is not open

The following init scripts have been modified to use procd:
* atftpd
* vsftpd

The following services are being advertised:

* atftpd: tftp
* nginx: http, https, http-alt, pcsync-https
* vsftpd: ftp
* xl2tpd: l2tp

Run make depend before building perl. This fixes parallel build failures
on machines with a high number of cores.

Example error 1:

    /bin/ln -s /build/staging_dir/hostpkg/usr/bin/generate_uudmap generate_uidmap
    make[5]: ./generate_uudmap: Command not found
    make[5]: *** [Makefile:321: bitcount.h] Error 127

Example error 2:

    /bin/ln -s /build/staging_dir/hostpkg/usr/bin/generate_uudmap generate_udmap
    ./generate_uudmap uudmap.h bitcount.h mg_data.h
    /bin/ln: failed to create symbolic link 'generate_uudmap': File exists
    make[5]: *** [Makefile:325: generate_uudmap] Error 1

Link: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=996953
Link: https://salsa.debian.org/perl-team/interpreter/perl/-/commit/366bc98c916a3455f15c532aa33a5636d2fe2803
Closes: https://github.com/openwrt/packages/issues/8238


Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>

libstrophe is dual-licensed as MIT OR GPL-3.0-only, which is also
reflected by the SPDX-License-Identifier lines in the source files.
Correct PKG_LICENSE in the Makefile accordingly.

Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>
(cherry picked from commit ccb4632c57d456289e79e6062b3349c8779bf8ce)

Instead of /sbin/ install logread to /usr/sbin/logread. This works
around a conflict with the logd package.

Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>

Amit Kumar authored 1 year ago and Rahul Thakur committed 1 year ago

child expect entry timeout value set handled
in the response message of PAUSE with condition
verification of cseq value.

This makes it consistent with configuration for busybox in IOWRT and
is needed for compatibility with pam_unix which lacks bcrypt support.

This reduces the memory footprint of LuCI firmware upgrades.

This reduces the memory footprint of LuCI firmware upgrades.

Merge commit 8e3a1824 as specified in
feeds.conf.default of OpenWrt tag v23.05.2.

[23.05] adblock-fast: bugfix: ensure downloaded block-lists end with newline

* ensure downloaded block-lists end with newline
* turn free/total RAM checks into functions calls

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 3787b4135584ad2a6510dbd883406d30575dce5c)