If sftp-server is installed, use it.

Michael Heimpold authored 1 month ago and Erik Karlsson committed 1 month ago

The -r option is not required here but should also not hurt,
since it was already tested, that $key is a file.
However, to express the intent of the command more clearly,
let's drop it.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

'ssh-keygen -l' is a bit forgiving for
corrupted files, hardening this by
using 'ssh-keygen -y' instead.

Imitate dropbear init.d-script and make sure we
don't end up with corrupt keys.

Starting with OpenSSH 9.8 sessions are handled by a separate binary
called sshd-session

Otherwise we might end up in a state where we cannot
generate the desired configurations and 'ssh' will
stop working.

the proc_ops is introduced in 5.6 and compatibility with earlier
versions is managed by xt_compat.h, update the patch accordingly

following config section and option introduced for including snmpd file
from uci

config include 'extra-file'
    option path '/etc/snmpd/extra-config.conf'

resolve compilation errors

Lwithwma Brahma authored 2 years ago and Rahul Thakur committed 4 months ago

Adds iptables-mod-mpeg2ts package.

Change-Id: I7256fa201534cfe5176cb8c6130895ac438236a2

Add logic for https-dns-proxy to not modify
dhcp-configuration unless DNS-over-HTTPS has
been configured.

Change-Id: I3578a917b4f748f31d8b6035f39f8c077c6e3986

Mohd Mehdi authored 6 months ago and Rahul Thakur committed 6 months ago

* add uci-defaults script to generate unbound config that makes
  it work with odhcpd and lets it forward (not resolve) queries
  to dns servers provided via upstream dhcp
* update dhcp UCI to use unbound

OpenSSH 9.8p1 removed support for DSA (DSS) signature algorithms.

From:
https://www.openssh.com/txt/release-9.8

"OpenSSH plans to remove support for the DSA signature algorithm in
early 2025. This release disables DSA by default at compile time."

Merge OpenWrt 23.05.4 commit '89955ee7'
into devel.

Conflicts:
	net/openssh/Makefile
	net/openvpn/files/openvpn.init

* update logrotate version to 3.22.0
* add patch to implement minutes
* add patch to calculate age in minutes instead of days

[23.05] php8: update to 8.2.21

Add option to support ip6tables configuration(default false).

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 55e689176ec52afde0cda0ee2b48dbff349d6c6c)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1016f8f1ba41b743bff905cf27b6c6f2b8de6c8e)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 309687f01abeca6f369e7e1d62aa2a5a47df02e7)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ef9be4a53c8f05f2d01cc4809055d5cb6999cb94)

ci: Fix up Docker images' tag from version number
chore(deps): bump github.com/gin-contrib/cors from 1.3.1 to 1.6.0

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit ccccd5c92df2b4f80a9e5c43d1e96edf0a6b7e6a)

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 88ba5210fb7ad6e3b6199cf4b70d4b53dc5fe3cf)
[Removed obsolete patch as upstream has fixed.]
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>

* filter crappy IP entries from urlhaus feed

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 9968fe6bf770f3a2eac47fbee17511d4144479cf)

Fixes the following CVEs when compared to the last-packaged version,
1.20.1:

	CVE-2024-37370
	CVE-2024-37371
	CVE-2023-36054

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 48ea7d33e169dee3513d4b3f22203b0b78df304c)

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.2.21



Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>

Signed-off-by: Zuev Aleksandr <A.Zuev@stdev.su>
(cherry picked from commit 050f13c2c7d0c35f497ddac005dcf4ada19efbf8)

This should allow the service to be activated even earlier during
the boot process and also avoids race condition against network.

Signed-off-by: Hiếu Lê <leorize+oss@disroot.org>
(cherry picked from commit d00131e2a0c8e846b42df22eda6c8356d4fce4a9)

[23.05] backport package license fixes