search

openwrt / packages

Community maintained packages for OpenWrt. Documentation for submitting pull requests is in CONTRIBUTING.md
GNU General Public License v2.0
3.94k stars 3.45k forks source link

'obfs4proxy' new release? #18265

Closed rezad1393 closed 1 year ago

rezad1393 commented 2 years ago

Maintainer: @jefferyto

the version in opnewrt is 3 years old. can this be updated to 0.13?

jefferyto commented 2 years ago

Which version of OpenWrt are you using?

rezad1393 commented 2 years ago

21.02 I think the latest version

rezad1393 commented 2 years ago

when I do this: opkg list |grep obfs I get golang-gitlab-yawning-obfs4-dev - 0.0.11-1 obfs4proxy - 0.0.11-1

jefferyto commented 2 years ago

The stable series normally only receives bug fixes.

rezad1393 commented 2 years ago

The stable series normally only receives bug fixes.

even for programs that are standalone ? nano gets updates. for software like tor and obfs ,technically every update is kinda security update. though that is my opinion only.

AndersTrier commented 1 year ago

@jefferyto I think this kind of software is a good candidate for ignoring normal practices - this program is used to circumvent government censorship, and not keeping it up to date might put people at risk. Version 0.0.14 comes with an important security fix: https://forum.torproject.net/t/tor-relays-security-update-for-obfs4proxy/5152

rezad1393 commented 1 year ago

@jefferyto I think this kind of software is a good candidate for ignoring normal practices - this program is used to circumvent government censorship, and not keeping it up to date might put people at risk. Version 0.0.14 comes with an important security fix: https://forum.torproject.net/t/tor-relays-security-update-for-obfs4proxy/5152

I would have said that a lot more of software on openwrt should be treated that way. nano is treated correctly this way , but that is more of a base software (even more than tor) for a system like openwrt. So I think the devs know that software can be updated to new non-security-fix related versions.

maybe we should create a list for suggestion for software that can be updated without consideration of base system version? specially software like tor that are kinda useful for a router system like openwrt.

maybe a repository for them? kinda similar to how archlinux treat software and its main/extra/community/aur repos but for software update versions ? in that paradigm tor would go to something akin to community repo maybe?

AndersTrier commented 1 year ago

@jefferyto has been inactive on github since Juli. I hope he's alright.

jefferyto commented 1 year ago

In hindsight, I think obfs4proxy should have been updated in 21.02 at the time. Now I suggest upgrading to 22.03 (the current stable release) - the update to 0.0.14 was merged recently (#20843).

@jefferyto has been inactive on github since Juli. I hope he's alright.

Thanks for the concern :slightly_smiling_face:

rezad1393 commented 1 year ago

hi. thank you for the update. I hope you can track software that you are in charge of maintaining here on openwrt and update them more.

jefferyto commented 1 year ago

I hope you can track software that you are in charge of maintaining here on openwrt and update them more.

This is open source, you can contribute updates if you want.

rezad1393 commented 1 year ago

I hope you can track software that you are in charge of maintaining here on openwrt and update them more.

This is open source, you can contribute updates if you want.

my first language is not english. sorry. I didn't mean it as a order.

but if you meant what you said, I am not a programmer just a noob user. my experience with compiling is mostly copy/paste from internet and typing them in terminal. so if I try to become maintainer of this package ( I have no idea how I get access to be that) and the update requires more than just upping a number, then people that depend on that tool would not get the update. sometimes ago I tried to learn cross compiling (just the parameters not the programming part) but I am not good enough so that I can take this responsibility on my own.

and thank you again for update.