OpenWrt
/
packages
mirror of https://git.openwrt.org/feed/packages.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
21,018 Commits 10 Branches 1 Tag 74 MiB
Commit Graph

7227 Commits

Author SHA1 Message Date
Lucian Cristian 8c0d17cf5d frr: update to 7.4 and latest backports 
changelogs: https://github.com/FRRouting/frr/releases/tag/frr-7.4

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
 2020-07-24 18:50:07 +03:00
William Fleurant 1d78e7dc31 yggdrasil: Ygg-over-ygg bugfix 
Signed-off-by: William Fleurant <meshnet@protonmail.com>
 2020-07-23 23:35:18 -04:00
Rosen Penev 7fa266580f
zerotier: disable pie support 
The Makefile is already patched for it. But PKG_ASLR_PIE still needs
to be disabled.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-07-23 13:41:00 -07:00
Rosen Penev 4da82b8569
Merge pull request #12893 from ja-pa/tor-0.4.3.6 
tor: update to version 0.4.3.6 (security fix)
 2020-07-23 13:15:08 -07:00
Aaron Goodman d134b7ffbb openfortivpn: Only start autostart interfaces on hotplug event 
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
 2020-07-21 22:01:46 -04:00
Rosen Penev 75efd85bf1
Merge pull request #12799 from aaronjg/openfortivpn/netifd 
openfortivpn: use standard 'peerdns' config option on netifd script
 2020-07-21 18:59:00 -07:00
Daniel Golle 46da3eedc5 gnunet: update to version 0.13.1 
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 2020-07-22 02:43:35 +01:00
Jan Pavlinec 3f51a1ee6e
tor: update to version 0.4.3.6 (security fix) 
Fixes
CVE-2020- 15572

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
 2020-07-21 12:53:57 +02:00
Rosen Penev 567c620bdc
Merge pull request #12879 from TDT-AG/pr/20200720-mwan3 
mwan3: update to version 2.8.11
 2020-07-20 00:36:40 -07:00
Rosen Penev 6fec82d068
Merge pull request #12848 from BKPepe/squid 
squid: update to version 4.12 (security update)
 2020-07-20 00:35:45 -07:00
Josef Schlehofer 3401e29aa7
squid: update to version 4.12 
- Fixes CVEs:

CVE-2019-12519
CVE-2019-12520
CVE-2019-12521
CVE-2019-12523
CVE-2019-12524
CVE-2019-12525
CVE-2019-12526
CVE-2019-12527
CVE-2019-12528
CVE-2019-12529
CVE-2019-12824
CVE-2019-12854
CVE-2019-13345
CVE-2019-18676
CVE-2019-18677
CVE-2019-18678
CVE-2019-18679

CVE-2020-8449
CVE-2020-8450
CVE-2020-11945
CVE-2020-14058
CVE-2020-15049

- Remove patch for cross-compilation
The patch should not be included in the OpenWrt at all without any
commit message/description.
Is not needed and there should be used HOST variables instead of BUILD variables (e.g.
   HOSTCXX)
However, the BUILDCXX is set in Makefile to HOSTCXX

- Renumber glibc patch and refresh it

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
 2020-07-20 08:56:50 +02:00
Florian Eckert f601e6cfa4 mwan3: update version to 2.8.11 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-07-20 08:15:50 +02:00
Florian Eckert b0acbf057e mwan3: add online and uptime to detail output 
Add also online time value and uptime time value from netifd to the
detail output view.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-07-20 08:13:34 +02:00
Florian Eckert 058a2b6f30 mwan3: add workaround for procd change 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-07-20 08:12:48 +02:00
Florian Eckert cde2a77ed3 mwan3: also cleanup lock on mwan3 stop 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-07-20 08:12:31 +02:00
Florian Eckert bcd13ba95c mwan3: fix rtmon routing table function generation 
If the uci option family is not set in the interface section, then there
is no default value set as in the `config_load / config_get` API.
The problem here is that if the family is not set, the default value ipv4
is normaly assumed. But the comparison fails here because the value is empty
and therefore the dedicated routing table for this interface is not compared
with the other routes from the main table and so not updated.

To fix this set the default value for this config option which is`false`
for enabled and `ipv4` for family.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-07-20 08:11:20 +02:00
Florian Eckert bcd914e665
Merge pull request #12814 from aaronjg/improvements/mwan3-misc-improvements-rb 
mwan3: clean up ipv4/ipv6 duplicated code and misc. improvments
 2020-07-20 08:06:39 +02:00
Florian Eckert 8e3e6f8dde mwan3: fix IPv6 routing add handling 
This fixes routing handling. Introduced with the last version update.
The following message disappears on the shell
when mwan3 is called with 'mwna3 restart`.

`Error: Invalid gateway address.`

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
[aaronjg@stanford.edu: fully unset variable and handle ipv4 as well]
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
 2020-07-19 23:24:13 -04:00
Florian Eckert a796b7a84e mwan3: fix idx calculation 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
[aaronjg@stanford.edu: fix syntax error]
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
 2020-07-19 23:24:13 -04:00
Aaron Goodman ca8bc3d115 mwan3: version bump 
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
 2020-07-19 23:24:13 -04:00
Aaron Goodman 30a46bdc9e mwan3: cleanup duplicate ipv4 and ipv6 logic 
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
 2020-07-19 23:24:13 -04:00
Aaron Goodman 702a104f9c mwan3: don't send iptable setup failures to /dev/null 
silencing failing rules makes debugging more difficult

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
 2020-07-19 23:18:22 -04:00
Aaron Goodman 2a5e9be83e mwan3: add default rule for ipv6 in example config 
default rule only applied to ipv4 with dest_ip 0.0.0.0/0
and error was hidden when trying to apply it in ip6table

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
 2020-07-19 23:18:21 -04:00
Aaron Goodman a0d66d4eeb mwan3: don't try to use ipv6 if not installed 
fix issue  #11826

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
 2020-07-19 23:18:18 -04:00
Aaron Goodman f32ad35870 openfortivpn: use standard 'peerdns' argument on netifd script 
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
 2020-07-19 18:54:48 -04:00
Rosen Penev 04432dc54f
Merge pull request #12864 from aaronjg/bugfix/openfortivpn-ping 
openfortivpn: add host up test back
 2020-07-19 15:35:00 -07:00
Rosen Penev 0daffb9011
Merge pull request #12861 from neheb/api 
apinger: fix compilation with GCC 10
 2020-07-19 14:44:35 -07:00
Rosen Penev 1af20a26d5
Merge pull request #12860 from neheb/bfdd 
bfdd: fix compilation with GCC 10
 2020-07-19 01:20:29 -07:00
Rosen Penev 292834d324
Merge pull request #12856 from neheb/fpi 
fping: update to 4.3
 2020-07-18 23:31:48 -07:00
Aaron Goodman 374ac6817d openfortivpn: add option to use ither curl or ping to test host status 
allow use of curl rather than ping to test if a host
is up since a host may not respond to ping, but an
https request is part of the openfortivpn connection,
so this is a more reliable test

also clean up overly verbose logging

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
 2020-07-18 22:05:13 -04:00
Rosen Penev aaa81d7534
Merge pull request #12854 from neheb/rads 
memcached: update to 1.6.6
 2020-07-18 14:06:54 -07:00
Andy Walsh 3ba3a0ba4a wsdd2: Uppercase NB_PARM 
* Uppercase NB_PARM if mdns option is not set
* filter commented lines

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
 2020-07-18 13:00:22 +02:00
Rosen Penev ef646f2a70
apinger: fix compilation with GCC 10 
Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-07-17 20:35:34 -07:00
Rosen Penev 2bdabc1db7
bfdd: fix compilation with GCC 10 
Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-07-17 20:34:36 -07:00
Rosen Penev dafbd9e5e4
davfs2: fixup gettext-version again 
It seems this is still needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-07-17 19:43:55 -07:00
Toke Høiland-Jørgensen 40e148cdad
Merge pull request #12858 from neheb/radse 
radsecproxy: fix compilation with GCC10
 2020-07-18 01:06:21 +02:00
Rosen Penev 8ce5898fd3
Merge pull request #12855 from neheb/ngi 
ngircd: update to 26
 2020-07-17 15:53:04 -07:00
Rosen Penev d9f15d2cd6
radsecproxy: fix compilation with GCC10 
Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-07-17 15:46:48 -07:00
Rosen Penev 4b7184cd6a
rsyslog: update to 8.2006.0 
Fixes compilation with GCC10.

Added random mirror since the normal website has issues at this time.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-07-17 15:33:53 -07:00
Rosen Penev afbe8536f4
fping: update to 4.3 
Fixes compilation with GCC 10.

Backported upstream patch to fix compilation without IPv6.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-07-17 15:12:16 -07:00
Rosen Penev a98399f3d2
ngircd: update to 26 
Fixes compilation with GCC10.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-07-17 15:11:35 -07:00
Rosen Penev 0773d9e111
memcached: update to 1.6.6 
Fixes compilation with GCC 10.

Added PKG_BUILD_PARALLEL for faster compilation.

Simplified configure var.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-07-17 15:10:44 -07:00
Peter Stadler 4f7da949cb uwsgi: update to version 2.0.19.1 
update to latest version.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
 2020-07-17 17:45:44 +02:00
Rosen Penev 4cb4df527d
Merge pull request #12846 from expiron/kcptun-updates 
kcptun: bump to v20200701
 2020-07-17 06:05:26 -07:00
Rosen Penev 7395537276
Merge pull request #12842 from neheb/dav2 
davfs2: update to 1.5.6
 2020-07-17 01:57:49 -07:00
Chao Liu beb5a87be8
kcptun: bump to v20200701 
Signed-off-by: Chao Liu <expiron18@gmail.com>
 2020-07-17 15:06:26 +08:00
Rosen Penev f57d05c769
Merge pull request #12843 from neheb/zer 
zerotier: fix compilation with GCC10
 2020-07-16 16:19:26 -07:00
Rosen Penev cd3a4f4731
zerotier: fix compilation with GCC10 
Patch taken from upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-07-16 14:31:54 -07:00
Rosen Penev cf6c95d752
davfs2: update to 1.5.6 
Split musl patch into multiple small ones. Much easier to reason about.

Removed stack protector patch. This is not an issue anymore.

Removed NLS support. There seems to be a linking issue as
libiconv-stub does not have a shared library component.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-07-16 13:27:59 -07:00
Peter Stadler 19b382acea nginx: update to version 1.19.1 
update to newest version.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
 2020-07-16 19:22:26 +02:00
Josef Schlehofer 01ff758894
dnscrypt-proxy2: update to version 2.0.44 
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
 2020-07-16 15:31:30 +02:00
Aaron Goodman 84a53b7c79 mwan3: be more efficient with sleep after killing trackers 
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
 2020-07-16 02:03:21 -04:00
Aaron Goodman da9a626f78 mwan3: don't add single ipv4 to connected list if already covered by a cidr 
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
 2020-07-16 02:03:21 -04:00
Rosen Penev 588c5d2041
bridge-utils: update to 1.7 
Changed URL to new upstream.

Use PKG_INSTALL for consistency between packages.

Use PKG_BUILD_PARALLEL for faster compilation.

Remove outdated patch.

Minor cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-07-15 19:14:34 -07:00
Rosen Penev 6b269abde8
Merge pull request #12775 from nickberry17/add_mm_err_messages 
modemmanager: add error message notifications to proto handler
 2020-07-15 17:24:47 -07:00
Florian Eckert 335efed8cb
Merge pull request #12810 from TDT-AG/pr/20200714-mwan3 
mwan3: fix some shellcheck warnings
 2020-07-15 11:07:41 +02:00
Florian Eckert 2594258c4b mwan3: update version to 2.8.9 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-07-15 10:23:47 +02:00
Florian Eckert d0c248a7da mwan3: cleanup function mwan3_create_iface_route 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-07-15 10:23:47 +02:00
Florian Eckert feae9e5742 mwan3: fix shellcheck warning SC2086 
Add double quote to prevent globbing and word splitting where there is
no regression.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-07-15 10:22:26 +02:00
Florian Eckert c0fdfaa174 mwan3: fix shellcheck warning SC2166 
Replace -o boolean check with ||.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-07-15 10:21:54 +02:00
Florian Eckert 644d9a25df mwan3: remove unused variable complained by shellcheck 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-07-15 10:21:54 +02:00
Florian Eckert 0ed7524f81 mwan3: fix shellcheck warning SC2039 
Replace all `==` with `=`.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-07-15 10:21:54 +02:00
Florian Eckert facf8ea299 mwan3: move redirect error output to trash 
This suppress the following output on `mwan3 restart`:
> Dump terminated

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-07-15 10:21:54 +02:00
Yousong Zhou 74d78af936 ovn: bump to version 20.06.1 
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
 2020-07-14 21:25:20 +08:00
Florian Eckert 86a2e8f671 ntpd: add config include support 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-07-14 14:04:25 +02:00
Rosen Penev 0c200218ec
Revert "modemmanager: remove unnecessary autoreconf and specifications of glib-mkenums and gdbus-codegen" 
This reverts commit 352ca90243.
 2020-07-13 22:19:18 -07:00
Rosen Penev a437ca9096
Merge pull request #12784 from neheb/ligh 
lighttpd: switch to meson
 2020-07-13 06:29:09 -07:00
Rosen Penev d2dcc9902c
Merge pull request #12798 from EricLuehrsen/unbound_20200704 
unbound: improve startup and dhcp script robustness
 2020-07-13 01:26:30 -07:00
Rosen Penev 787ca91550
Merge pull request #12801 from wvdakker/master 
Shorewall: Bump to 5.2.6.1
 2020-07-13 01:25:36 -07:00
Florian Eckert a261a6e672
Merge pull request #12773 from TDT-AG/pr/20200710-xinetd 
xinetd: start service in foreground for procd
 2020-07-13 08:45:41 +02:00
Willem van den Akker f615195f48
Shorewall6: Bump to 5.2.6.1 
Signed-off-by: Willem van den Akker <wvdakker@wilsoft.nl>
 2020-07-13 08:27:42 +02:00
Willem van den Akker 77813b8ee5
Shorewall: Bump to 5.2.6.1 
Signed-off-by: Willem van den Akker <wvdakker@wilsoft.nl>
 2020-07-13 08:26:25 +02:00
Willem van den Akker 8d826b26fc
Shorewall6-lite: Bump to 5.2.6.1 
Signed-off-by: Willem van den Akker <wvdakker@wilsoft.nl>
 2020-07-13 08:24:52 +02:00
Willem van den Akker 93f58d0942
Shorewall-lite: Bump to 5.2.6.1 
Signed-off-by: Willem van den Akker <wvdakker@wilsoft.nl>
 2020-07-13 08:23:23 +02:00
Willem van den Akker e85e6fc5f3
Shorewall-core: Bump to 5.2.6.1 
Signed-off-by: Willem van den Akker <wvdakker@wilsoft.nl>
 2020-07-13 08:21:45 +02:00
Rosen Penev 05ca5f909b
Merge pull request #12765 from neheb/mnu 
miniupnpd: default to IGDv1
 2020-07-12 17:59:58 -07:00
Rosen Penev d7898a5667
Merge pull request #12753 from nickberry17/fixup_mm_makefile 
modemmanager: remove unnecessary autoreconf
 2020-07-12 17:57:27 -07:00
Eric Luehrsen e81529596d unbound: improve startup and dhcp script robustness 
- prevent rapid overlap in DHCP script updates
- check and allow localhost forwards with specific applications
- add option for rate limiting inbound queries
- change UCI list to table format with Unbound conf references

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
 2020-07-12 14:56:46 -04:00
Nick Hainke 55daa1e8cb dawn: update to latest version 2020-07-12 
Includes:
- dawn_uci: no need uci_alloc_context on each uci_set_network call
- test_storage: extend test harness; datastorage: two bug fixes
- tcpsocket: free con after ustream write error and make list each safe
  list_each is not safe against removal of list entry

Signed-off-by: Nick Hainke <vincent@systemli.org>
 2020-07-12 14:57:11 +02:00
Rosen Penev 602e3899b4
lighttpd: switch to meson 
Simplifies the Makefile and allows faster compilation with Ninja.

Added patch to fix libmariadb dependency.

Added extra modules.

Speed Before:

time make package/lighttpd/compile -j 12
Executed in   47.91 secs   fish           external
   usr time   41.83 secs  384.00 micros   41.83 secs
   sys time   10.79 secs   37.00 micros   10.79 secs

Speed After:

time make package/lighttpd/compile -j 12
Executed in   19.67 secs   fish           external
   usr time   42.79 secs  377.00 micros   42.79 secs
   sys time    8.56 secs   37.00 micros    8.56 secs

Tested with fish shell.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-07-11 22:49:38 -07:00
Rosen Penev f7dea4561b
Merge pull request #11831 from lucize/addiscsi 
open-iscsi: add package open-iscsi
 2020-07-11 02:56:21 -07:00
Nicholas Smith 377a33730d modemmanager: add error message notifications to proto handler 
Signed-off-by: Nicholas Smith <nicholas.smith@telcoantennas.com.au>
 2020-07-10 20:28:31 +10:00
Florian Eckert eb6cb75f9f xinetd: start service in foreground for procd 
Since we use now procd for xinetd, we have to start the service with the
option `-dontfork` to make procd happy.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-07-10 11:08:11 +02:00
Florian Eckert 3d9e9632d4 xinetd: change PKG_MAINTAINER 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-07-10 11:08:08 +02:00
W. Michael Petullo 1000b84ab0 dmapd: update to 0.0.85 
Signed-off-by: W. Michael Petullo <mike@flyn.org>
 2020-07-08 21:37:39 -04:00
Rosen Penev 7891124d6c
miniupnpd: default to IGDv1 
It seems even modern stuff doesn't support v2 correctly. The miniupnp
suite does but other stacks seem to lack support. Default to v1 to
avoid the headache.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-07-08 14:17:23 -07:00
Rosen Penev 245720750b
Merge pull request #12751 from dibdot/foolsm 
foolsm: change mail dependency
 2020-07-08 13:55:34 -07:00
Rosen Penev 09cb497125
Merge pull request #12763 from micmac1/remo-maint 
apache/mariadb/sqlite: remove myself as maintainer
 2020-07-08 11:03:01 -07:00
Jan Pavlinec 799db6b36e ntpd: update to version 4.2.8p15 (security fix) 
Fixes:
CVE-2020-11868
CVE-2018-8956
CVE-2020-13817
CVE-2020-1502

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
 2020-07-08 19:07:16 +02:00
Sebastian Kemper 7582f7fca6 apache/apr/apr-util: remove maintainer 
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
 2020-07-08 18:28:35 +02:00
Dirk Brenken c5a6a1a2bd
foolsm: change mail dependency 
* changed mail dependency from orphaned 'ssmtp' to 'msmtp'

Signed-off-by: Dirk Brenken <dev@brenken.org>
 2020-07-08 10:54:39 +02:00
Nicholas Smith 352ca90243 modemmanager: remove unnecessary autoreconf and specifications of glib-mkenums and gdbus-codegen 
Signed-off-by: Nicholas Smith <nicholas.smith@telcoantennas.com.au>
 2020-07-08 18:51:20 +10:00
Rosen Penev d34b7d4d43
Merge pull request #12713 from neheb/spaw 
spawn-fcgi: switch to CMake
 2020-07-07 16:46:09 -07:00
Rosen Penev 9464d4171d
Merge pull request #12701 from neheb/apf 
apfree-wifidog: fix compilation with GCC10
 2020-07-07 16:32:12 -07:00
Rosen Penev 5be4b51414
Merge pull request #12720 from neheb/fw 
fwknop: fix compilation with GCC10
 2020-07-07 15:32:44 -07:00
Huangbin Zhan 704e733e51 treewide: fix broken conffiles 
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
 2020-07-07 18:29:13 +08:00
Huangbin Zhan e4a800f432 treewide: add conffiles 
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
 2020-07-07 06:27:51 +08:00
Rosen Penev 95b6f2f8ce
Merge pull request #12735 from mstorchak/rsync-3.2.2 
rsync: update to 3.2.2
 2020-07-06 07:24:16 -07:00
Maxim Storchak a10e4fa904 rsync: update to 3.2.2 
Force IPv6 support to according to the global CONFIG_IPV6, ignore compile time detection

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
 2020-07-06 17:08:48 +03:00
Nicholas Smith e1bcb21d9a modemmanager: bump to 1.14.0 
Signed-off-by: Nicholas Smith <nicholas.smith@telcoantennas.com.au>
 2020-07-06 22:03:03 +10:00
Florian Eckert fb1437e222
Merge pull request #12709 from m01/bugfix-mwan3-config-load 
mwan3: Fix mwan3 start not doing anything
 2020-07-06 08:42:01 +02:00
Rosen Penev ad6d1d331f
Merge pull request #12682 from jonathanunderwood/stubby-0.3.0 
stubby: update to version 0.3.0
 2020-07-05 09:34:30 -07:00
Josef Schlehofer 4155dfb6b5
Merge pull request #12586 from tiagogaspar8/bind-update-9-16-4 
bind: update to 9.16.4
 2020-07-05 17:50:41 +02:00
Rosen Penev 9b4a8f12a3
fwknop: fix compilation with GCC10 
Added PKG_LICENSE_FILES.

Added PKG_BUILD_PARALLEL for faster compilation.

Simplified configure arguments.

Small cleanups for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-07-04 17:48:11 -07:00
Rosen Penev c8bb57b318
Merge pull request #12718 from Grommish/master 
[Snort3/Snort+] Fix Big-Endian compile issues
 2020-07-04 15:57:37 -07:00
Rosen Penev e349a3216c
spawn-fcgi: switch to CMake 
Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-07-04 15:22:53 -07:00
Donald Hoskins e3163364e9 [Snort3/Snort+] Fix Big-Endian compile issues 
Signed-off-by: Donald Hoskins <grommish@gmail.com>
 2020-07-04 18:22:12 -04:00
Rosen Penev 390c06a738
Merge pull request #12338 from alinnastac/rtsp-pb_discon 
xtables-addons: fix RTSP helper support for client_port=x/y Transport…
 2020-07-04 11:39:17 -07:00
Rosen Penev 35734b81cd
Merge pull request #12692 from qweaszxcdf/openfortivpn 
openfortivpn: Remove pingcheck and use l3_device instead
 2020-07-04 11:38:34 -07:00
Tiago Gaspar b8f8af8a30 bind: update to 9.16.4 
This update fixes the following CVE's:
- CVE-2020-8618
- CVE-2020-8619

More info on bug fixes and feature changes in:
https://downloads.isc.org/isc/bind9/9.16.4/doc/arm/html/notes.html

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
 2020-07-04 12:12:17 +01:00
Ryan Shi ee690da794 openfortivpn: bump PKG_RELEASE 
Signed-off-by: Ryan Shi <qweaszxcdfsh@gmail.com>
 2020-07-04 18:28:59 +08:00
Rosen Penev 4643ae9abe
Merge pull request #12603 from neheb/ossh 
openssh: update to 8.3p1
 2020-07-03 23:06:58 -07:00
Rosen Penev bd8002401a
Merge pull request #12510 from neheb/git 
git: update to 2.27.0
 2020-07-03 23:05:50 -07:00
Michiel Blokzijl acfbd98ce0 mwan3: Fix mwan3 start not doing anything 
Due to a missing config load function call, mwan3 start runs ifup for an empty
list of interfaces, thus not calling ifup at all.

This commit introduces the missing config_load call.

Signed-off-by: Michiel Blokzijl <code@m01.eu>
 2020-07-03 20:03:42 +01:00
Rosen Penev 477a881f14
Merge pull request #12697 from Andy2244/samba-4_12_5 
samba4: update to 4.12.5
 2020-07-03 07:04:03 -07:00
Rosen Penev fd683c5cb7
Merge pull request #12696 from neheb/nta 
netatalk: fix compilation with GCC10
 2020-07-03 07:03:27 -07:00
Rosen Penev cfa7b85ae4
Merge pull request #12702 from neheb/davf 
davfs2: fix compilation with GCC10
 2020-07-03 07:02:53 -07:00
Rosen Penev 3d9618c61b shadowsocks-libev: fix compilation with GCC10 
Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-07-03 11:24:52 +08:00
Rosen Penev 074a524c10
davfs2: fix compilation with GCC10 
Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-07-02 19:17:50 -07:00
Rosen Penev 1c4fb05ba3
apfree-wifidog: fix compilation with GCC10 
Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-07-02 19:16:30 -07:00
Andy Walsh 4da8b01f67 samba4: update to 4.12.5 
* update to 4.12.5
* fixes CVE-2020-10730, CVE-2020-10745, CVE-2020-10760, CVE-2020-14303
* add fix-musl_missing__nss_buflen_passwd.patch
* remove fixed tirpc include
* add extra CONFIGURE_VARS (XSLTPROC=false, WAF_NO_PREFORK=1)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
 2020-07-03 01:38:48 +02:00
Rosen Penev 8998415023
netatalk: fix compilation with GCC10 
Upstream patch: https://github.com/Netatalk/Netatalk/pull/125

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-07-02 11:47:58 -07:00
Ryan Shi f25db3dede openfortivpn: Remove pingcheck and use l3_device instead 
Signed-off-by: Ryan Shi <qweaszxcdfsh@gmail.com>
 2020-07-02 15:47:13 +08:00
Rosen Penev b09a963b52
Merge pull request #12663 from rfrankla/netcat_002_patch 
netcat: fix Illegal instruction on listen udp
 2020-07-01 23:24:39 -07:00
Rosen Penev d68b660569
Merge pull request #12674 from ldir-EDB0/miniupnpd 
miniupnpd: macosx compat and refresh patches
 2020-07-01 22:49:16 -07:00
Rosen Penev b16a9f2d1c
Merge pull request #12670 from neheb/neto 
Netopeer2: fix compilation with GCC10
 2020-07-01 22:48:55 -07:00
Rosen Penev 8d5bf27868
Merge pull request #12675 from axet/master 
add miniupnpd ipv6_disable option, #11971 close
 2020-07-01 22:44:24 -07:00
Alexey Kuznetsov 9b6537b487 miniupnpd: add miniupnpd ipv6_disable option, #11971 close 
Signed-off-by: Alexey Kuznetsov <axet@me.com>
 2020-07-02 06:20:13 +03:00
Jean-Michel Lacroix cd13e7ec7e darkstat: correct incompatbility with sshd 
The init file of darkstat is creating the pid in /var/empty and
setting the owner of the directory to darkstat which is incompatible
with sshd as sshd requires /var/empty to be owned by root and not
group or world-writable.  See issue #12420.

This corrects the problem by creating another directory: /var/darkstat
instead without setting the owner, which is not actually required.
Compile tested: not applicable as the changes do not involve
compilation.
Tested on my home router running darkstat.

Signed-off-by: Jean-Michel Lacroix <lacroix@lepine-lacroix.info>
 2020-07-01 18:40:42 -04:00
Jonathan G. Underwood d2016285ad stubby: update to version 0.3.0 
Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
 2020-07-01 22:27:27 +01:00
Kevin Darbyshire-Bryant 0189c45253 miniupnpd: macosx compat and refresh patches 
Tidy up some minor patch fuzz with a refresh.

Also tweak the linux makefile to make it run on macosx and linux:
install only understand -m for filemode, not that the openwrt staging
dir understands file modes.  Also glibc>2.17 so patch out the check that
otherwise barfs a number of errors from a missing 'ldd' command under
macos.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
 2020-07-01 10:16:43 +01:00
Rosen Penev 3197c5c9a9
Netopeer2: fix compilation with GCC10 
Refreshed openssl patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-06-30 19:46:11 -07:00
Rick Frankland 9d07ba2c77 netcat: fix Illegal instruction on listen udp 
When listening to a udp port an Illegal instruction occurs.
This did NOT happen when compiled with debug on.

Fixes issue openwrt#4747, FS#2937

Signed-off-by: Rick Frankland <rfrankla@yahoo.com>
 2020-06-30 23:42:10 +01:00
Rosen Penev 6b5fa7e9b9
Merge pull request #12653 from jefferyto/python-no-parallel-host-pip-install 
python-packages: Disable parallel build when host pip is needed
 2020-06-30 14:34:35 -07:00
W. van den Akker 65a3a1900c
Shorewall6: Bump to 5.2.5.2 
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
 2020-06-30 10:22:01 +02:00
W. van den Akker 3d28c3338c
Shorewall: Bump to 5.2.5.2 
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
 2020-06-30 09:49:15 +02:00
W. van den Akker 9b50950622
Shorewall6-lite: Bump to 5.2.5.2 
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
 2020-06-30 09:48:08 +02:00
W. van den Akker 710ab82728
Shorewall-lite: Bump to 5.2.5.2 
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
 2020-06-30 09:47:02 +02:00
W. van den Akker 5c9065a2bc
Shorewall-core: Bump to 5.2.5.2 
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
 2020-06-30 09:45:51 +02:00
Jeffery To e0e2224f8a
python-packages: Disable parallel build when host pip is needed 
This adds PKG_BUILD_PARALLEL:=0 to packages that depend on host Python
packages (HOST_PYTHON3_PACKAGE_BUILD_DEPENDS), because installing
packages with multiple concurrent pip processes can lead to errors or
unexpected results[1].

This also:

* Move HOST_PYTHON3_PACKAGE_BUILD_DEPENDS definitions to before
  python3-package.mk is included

* Update Python folder readme to include PKG_BUILD_PARALLEL:=0

[1]: https://github.com/pypa/pip/issues/2361

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
 2020-06-30 15:43:01 +08:00
Rosen Penev d2cb6411c5
Merge pull request #12582 from zhanhb/frp 
frp: update to 0.33.0
 2020-06-29 15:11:08 -07:00
Javier Marcet c48bae07be nfs-kernel-server: update to 2.5.1 
Signed-off-by: Javier Marcet <javier@marcet.info>
 2020-06-29 17:50:31 +02:00
Rosen Penev 8a965ca029
Merge pull request #12086 from aleksander0m/aleksander/mm-auth 
Authentication protocol setup in ModemManager
 2020-06-28 20:01:26 -07:00
Rosen Penev 362f74ff01
Merge pull request #12277 from xjboss/master 
ddns-scripts: Added api token method for cloudflare ddns script v4
 2020-06-28 19:59:05 -07:00
Rosen Penev ed47f22cce
Merge pull request #12583 from zhanhb/kcptun 
kcptun: update to 20200409
 2020-06-28 19:55:25 -07:00
Rosen Penev 021737ca73
Merge pull request #12627 from jonathanunderwood/stubby-fix-tls-port 
stubby: fix handling of tls_port config option
 2020-06-28 19:54:41 -07:00
Rosen Penev 2be45d6189
Merge pull request #12630 from Andy2244/samba4-uci-tuning 
samba4: add new UCI option "enable_extra_tuning"
 2020-06-28 19:53:56 -07:00
Rosen Penev 487ddf78a6
Merge pull request #12605 from neheb/rsy 
rsync: update to 3.2.0
 2020-06-28 14:06:48 -07:00
Maxim Storchak e1cd4bcf0a
rsync: fix ipv6 detection 
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
 2020-06-28 13:56:21 -07:00
David Bauer df891a50c5 jool: downgrade to v4.0.9 
Jool v4.1.0 suffers from bad offload management as well as broken
stateful NAT64 translation. See upstream issues #331 as well as #332 for
more information.

Downgrade to v4.0.9 until these are ironed out.

Tested on: ipq40xx-generic

Fixes commit 0a6891feac ("jool: update to v4.1.0")
Signed-off-by: David Bauer <mail@david-bauer.net>
 2020-06-28 15:12:47 +02:00
Rosen Penev ba49c96808
miniupnpd: added libcap-ng dependency 
As miniupnpd is running as root, libcap(-ng) can be used to limit its
capabilities.

libcap-ng is very small, so this isn't a problem.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-06-27 15:15:14 -07:00
Eric Luehrsen 9c655aed3a unbound: add dns assistants on local host 
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
 2020-06-27 17:17:41 -04:00
Eric Luehrsen 8e0b2d344e unbound: refactor build options to select switches 
The two unique packages "Unbound light" and "Unbound heavy"
were not working well due to the fact that Unbound is mostly
its library. Tools and helpers would crash. Instead a reasonable
default Unbound is built. Also up select options like python
are added. libevent and libpthreads are options to down select.

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
 2020-06-27 17:17:41 -04:00
Rosen Penev 3f00aed153
rsync: update to 3.2.1 
Disable several options to enable compilation.

Simplified several configure options.

Remove pointless configure var.

Added ssh hinting patch. Some SSH incompatibility.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-06-27 14:14:46 -07:00
Andy Walsh 68af8dcde3 samba4: add new UCI option "enable_extra_tuning" 
* add new UCI option "enable_extra_tuning"
* update template
* add config examples for options
* fix some access warnings on samba /var dirs

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
 2020-06-27 22:47:30 +02:00
Jonathan G. Underwood 31be44ca61 stubby: fix handling of tls_port config option 
Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
 2020-06-27 16:58:47 +01:00
Rosen Penev 65af93279d
Merge pull request #12611 from neheb/upn 
miniupnpd: update to 2.1.20200510
 2020-06-26 14:08:00 -07:00
Rosen Penev 6d3e7bef65
Merge pull request #12620 from blocktrron/jool-v410 
jool: update to v4.1.0
 2020-06-26 14:02:49 -07:00
Stan Grishin d2f4454fe6 https-dns-proxy: re-add conffiles and add description to Makefile 
Signed-off-by: Stan Grishin <stangri@melmac.net>
 2020-06-26 03:09:26 +00:00
Rosen Penev 2b5028458e
miniupnpd: update to 2.1.20200510 
Use the newly introduced configure script.

Use PKG_INSTALL for consistency between packages.

Use PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-06-25 17:44:23 -07:00
David Bauer 0a6891feac jool: update to v4.1.0 
Compile-tested: ipq40xx-generic
Run-tested: ipq40xx-generic

Signed-off-by: David Bauer <mail@david-bauer.net>
 2020-06-26 02:39:58 +02:00
Rosen Penev 8e77b50954
openssh: update to 8.3p1 
Removed outdated options.

Small bashism fix in the init script.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-06-25 17:38:55 -07:00
Stan Grishin e039bd4da7 https-dns-proxy: bugfix: remove eDNS support 
Signed-off-by: Stan Grishin <stangri@melmac.net>
 2020-06-25 19:40:38 +00:00
Hannu Nyman 8fb6748769
Merge pull request #12589 from Grommish/master 
[OpenConnect] Update to version 8.10 to address CVE-2020-12823
 2020-06-25 19:52:57 +03:00
Alexandru Ardelean c7153f22a7 tcpreplay: bump to version 4.3.3 
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
 2020-06-25 19:29:52 +03:00
Donald Hoskins c2d4156086 [OpenConnect] Update to version 8.10 to address CVE-2020-12823 
https://nvd.nist.gov/vuln/detail/CVE-2020-12823

Signed-off-by: Donald Hoskins <grommish@gmail.com>
 2020-06-25 07:37:13 -04:00
Olivier Poitrey b3bd71e9f4 nextdns: Update to version 1.7.0 
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
 2020-06-25 00:22:33 +00:00
Rosen Penev 7594111cf2
Merge pull request #12516 from rozhuk-im/fbsd_build 
FreeBSD build fix
 2020-06-24 12:58:23 -07:00
Rozhuk Ivan c54ddec41d xtables-addons: FreeBSD build fix 
Signed-off-by: Rozhuk Ivan <rozhuk.im@gmail.com>
 2020-06-24 15:33:22 +03:00
Huangbin Zhan 6ecdc863b9 kcptun: update to 20200409 
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
 2020-06-24 13:52:41 +08:00
Huangbin Zhan 9816e5d675 frp: update to 0.33.0 
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
 2020-06-24 13:51:58 +08:00
Rosen Penev ac5a29c189
Merge pull request #12559 from zhaojh329/wifidog-ng 
wifidog-ng: remove package
 2020-06-23 15:05:04 -07:00
Rosen Penev 81dc2bd6ab
Merge pull request #12547 from neheb/torr 
tor: remove libssp hack
 2020-06-23 15:03:51 -07:00
Rosen Penev e9abcd7482
Merge pull request #12542 from neheb/opens 
openssh: always enable stackprotect option
 2020-06-23 15:03:23 -07:00
Florian Eckert 6afcb0d0e0
Merge pull request #12533 from TDT-AG/pr/20200617-mwan3 
mwan3: improvements
 2020-06-23 13:18:04 +02:00
Huangbin Zhan 47c5d7537b overture: update to 1.6.1 
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
 2020-06-23 17:09:23 +08:00
Michal Hrusecky 8b5f98d989 lighttpd: Add subpackage containing authn_pam module 
Add new subpackage containing pam authentication module. Shouldn't
affect dependencies and nothing changes, there is just one more module
enabled for people interested in it.

Signed-off-by: Michal Hrusecky <michal@hrusecky.net>
 2020-06-22 17:22:39 +02:00
W. van den Akker 1d2c5e6215
Shorewall6: Bump to 5.2.5.1 
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
 2020-06-21 22:31:44 +02:00
W. van den Akker 82f26ac9de
Shorewall: Bump to 5.2.5.1 
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
 2020-06-21 22:30:43 +02:00
W. van den Akker 217349cc02
Shorewall6-lite: Bump to 5.2.5.1 
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
 2020-06-21 22:29:32 +02:00
W. van den Akker 32612d68e6
Shorewall-lite: Bump to 5.2.5.1 
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
 2020-06-21 22:28:28 +02:00
W. van den Akker 749897ced2
Shorewall-core: Bump to 5.2.5.1 
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
 2020-06-21 22:27:25 +02:00
Frank Zhang bf1d880c24 ddns-scripts: Added api token method for cloudflare ddns script v4 
Update cloudflare token ddns file

Signed-off-by: Frank Zhang <i@xjboss.net>
 2020-06-21 16:08:22 +08:00
David Ehrmann 6ef2b5400b miniupnpd: suppress grep and uci errors 
If miniupnpd is installed but disabled or not running, the hotplug
script will query uci for keys that don't exist and grep a temporary
config file that doesn't exist, resulting in the following errors:

uci: Entry not found
grep: /var/etc/miniupnd.conf: No such file or directory

These would arise when an interface is brought up or down, and are
more confusing than helpful, especially when miniupnpd is disabled.

Suppress these errors.

Signed-off-by: David Ehrmann <ehrmann@gmail.com>
 2020-06-20 20:48:29 -07:00
Jianhui Zhao 53684eedf7 wifidog-ng: remove package 
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
 2020-06-20 16:44:59 +08:00
Rosen Penev 69c297971c
openssh: always enable stackprotect option 
b933f9cf0cb254e368027cad6d5799e45b237df5 in base made several changes
to OpenWrt's libssp support. It seems this workaround is no longer
needed.

Simplified the configure script slightly.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-06-20 00:17:37 -07:00
Andy Walsh d1e7a77e61 samba4: fix python3 host paths 
* fix python3 host paths, ensure we use build hostpkg tools

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
 2020-06-19 13:22:52 +02:00
Rosen Penev bfad83beb8
Merge pull request #12438 from neheb/cons 
conserver: 8.2.5
 2020-06-18 15:25:12 -07:00
Rosen Penev 2b80d3c433
Merge pull request #12514 from neheb/ari 
ariang: update to 1.1.6
 2020-06-18 15:24:39 -07:00
Rosen Penev 0df6c58f82
tor: remove libssp hack 
Does not seem to be needed anymore.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-06-18 15:14:33 -07:00
Rosen Penev d498a74910
Merge pull request #12543 from mydzor/master 
transmission: add access to web interface files to procd jail
 2020-06-18 14:52:53 -07:00
Michael Heimpold 024d36466d
Merge pull request #12545 from tru7/knxd 
knxd: bump to version 0.14.39
 2020-06-18 21:51:13 +02:00
Othmar Truniger ddbf62c949 knxd: bump to version 0.14.39 
Signed-off-by: Othmar Truniger <github@truniger.ch>
 2020-06-18 17:42:06 +02:00
Josef Zila 9a82c952b4 transmission: add access to web interface files to procd jail 
Signed-off-by: Josef Zila <josefzila@gmail.com>
 2020-06-18 13:48:07 +02:00
Rosen Penev 684a9a6b4f
seafile-server: remove GCC_LIBSSP 
The variable is gone as of b933f9cf0cb254e368027cad6d5799e45b237df5

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-06-17 20:08:59 -07:00
Florian Eckert 8030814267 mwan3: update version to 2.8.7 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-06-17 13:04:38 +02:00
Florian Eckert e30f16beef mwan3: set status to unknown in rpcd if status file not found 
If the status file is not found then set then return the value unknown.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-06-17 13:01:49 +02:00
Florian Eckert a6dc75428c mwan3: switch to procd init script 
This enables the procd handling for mwan3 on config change.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-06-17 13:00:48 +02:00
Rosen Penev f89c9e89f5
Merge pull request #12525 from neheb/rpp 
rp-pppoe: update to 3.14
 2020-06-16 15:33:42 -07:00
Andy Walsh c5b1b6f86e samba4: update waf-cross-answers 
* update waf-cross-answers for 4.12.x

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
 2020-06-16 21:46:04 +02:00