Commit graph

6738 commits

Author SHA1 Message Date
Josef Schlehofer
a75391575b bind: update to version 9.16.3
Fixes:
CVE-2020-8616
CVE-2020-8617

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-20 11:24:22 -07:00
Rosen Penev
9455e46d7a
Merge pull request #12232 from neheb/cifs
cifs-utils: fix compilation
2020-05-20 09:20:10 -07:00
Yousong Zhou
1091badd83 openvswitch: fix file generation in /etc/modules.d
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Reported-by: Paul Spooren <mail@aparcar.org>
2020-05-20 23:29:44 +08:00
Josef Schlehofer
ef71facb41
Merge pull request #12215 from BKPepe/unbound-1.10.1
unbound: update to version 1.10.1 (security fix)
2020-05-20 08:40:18 +02:00
Rosen Penev
71975d68a4 cifs-utils: fix compilation
Now that libcap-ng is in the tree, cifs-utils is picking it up.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-19 22:14:10 -07:00
Hannu Nyman
5e84c4872c
Merge pull request #12210 from jefferyto/etesync-server-minor-cleanup
etesync-server: Minor Makefile cleanup
2020-05-19 17:01:14 +03:00
Josef Schlehofer
8ccff44ad1
unbound: update to version 1.10.1
Fixes:
CVE-2020-12662
CVE-2020-12663

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-19 11:23:57 +02:00
Rosen Penev
ee9fe907e7
Merge pull request #12212 from lnslbrty/package/netsniff-ng
netsniff-ng: new package
2020-05-19 01:18:00 -07:00
Toni Uhlig
563b1225ff
netsniff-ng: new package
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
2020-05-19 09:55:00 +02:00
Jeffery To
70064ea4ad etesync-server: Minor Makefile cleanup
* Replace creating an empty PYTHON3_PKG_DIR with setting filespec to an
  empty value

* Disable the default Python package build recipe (with
  PYTHON3_PKG_BUILD:=0) and set an empty Build/Compile

* Remove VARIANT:=python3 and PROVIDES (providing the same name as the
  package)

* Add PKG_BUILD_PARALLEL:=1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-19 00:19:54 +08:00
Lucian Cristian
a659c58f29 libreswan: various fixes
start if kernel has missing ipv6 support
add libcap-ng support
fix some errors displayed on syslog

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-17 04:57:48 +03:00
Sebastian Kemper
07db6b4a39 apache: revisit suEXEC setup
When adding suEXEC to the apache package, Alpine's package [1] served as
a template. Not enough attention was paid to the details.

Alpine uses a different layout. So for OpenWrt to use /var/www as
DocumentRoot does not make sense. /var is also volatile on OpenWrt. This
commit removes the configure argument. The default is htdocsdir.

This also does away with uidmin/gidmin 99. The default is 100, which is
fine.

Finally, the suexec binary is moved from /usr/sbin to
/usr/lib/apache2/suexec_dir. Upstream recommends installing suexec with
"4750" (see [2]) and the group set to the user's group. While that would
be possible, it would cause a few headaches on OpenWrt. The group would
need to be changed first in a post-install script and a call to chmod
would need to be made afterward, to make the binary SUID again.

It's easier to hide the SUID binary away from others in a directory.
This way we don't need to use chmod in the post-install script.

[1] https://github.com/alpinelinux/aports/tree/master/main/apache2
[2] https://httpd.apache.org/docs/2.4/suexec.html

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-16 14:47:37 +02:00
Sebastian Kemper
dbaad2fa44 apache: create log directory o=
Hides away the contents of the log directory from others.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-16 14:24:05 +02:00
W. van den Akker
fbed8ff1e7
Shorewall6: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:35:30 +02:00
W. van den Akker
49a930dae6
Shorewall: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:34:21 +02:00
W. van den Akker
10afa55dfb
Shorewall6-lite: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:33:12 +02:00
W. van den Akker
3a61f1244d
Shorewall-lite: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:32:11 +02:00
W. van den Akker
fba9ad6c3b
Shorewall-core: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:31:02 +02:00
Rosen Penev
66c94cd4e9
Merge pull request #12168 from lucize/libreswup
libreswan: update to 3.32
2020-05-14 20:45:37 -07:00
Olivier Poitrey
5d6e75743a nextdns: Update to version 1.5.8
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-14 23:41:01 +00:00
Lucian Cristian
7d969ca3e1 libreswan: update to 3.32
also add -flto to compiler flags

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-14 16:32:10 +03:00
Rosen Penev
a22fff844d
Merge pull request #9865 from peter-stadler/etesync
etesync-server: add package and configuration for running with uwsgi on nginx [RFC]
2020-05-14 00:24:59 -07:00
Rosen Penev
355d2b7bef
Merge pull request #12060 from looklookson/master
sslh: Add http probe support
2020-05-13 15:22:38 -07:00
Rosen Penev
5f1c9e3c94
Merge pull request #11964 from zhanhb/nginx-all-module
nginx: update all-module configurations
2020-05-13 14:56:58 -07:00
Rosen Penev
f1b445963b
Merge pull request #11981 from zhanhb/conffiles
treewide: add conffiles
2020-05-13 14:44:35 -07:00
Rosen Penev
edff5dffaa
Merge pull request #12146 from kobboi/master
ifstat: make dependency on libnetsnmp conditional
2020-05-13 14:39:52 -07:00
Othmar Truniger
33fb579a41 knxd: bump to version 0.14.37
Signed-off-by: Othmar Truniger <github@truniger.ch>
2020-05-13 14:12:50 +02:00
Christophe Lermytte
888e9d9cea ifstat: make dependency on libnetsnmp conditional
The upstream package supports it with a configure switch.
Defaulting to 'with SNMP support' as it was before.

Signed-off-by: Christophe Lermytte <gentoo@lermytte.be>
2020-05-13 10:46:00 +02:00
Oleg Derevenetz
654078b68d bwping: update to version 1.17
Signed-off-by: Oleg Derevenetz <oleg-derevenetz@yandex.ru>
2020-05-12 23:14:55 +03:00
Eneas U de Queiroz
6df2abceca
libreswan: fix compilation with Linux 4.14
According to a comment in programs/pluto/kernel_xfrm_interface.c:177:

* IFLA_XFRM_IF_ID was added to mainline kernel 4.19 linux/if_link.h
  with older kernel headers 'make USE_XFRM_INTERFACE_IFLA_HEADER=true'

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2020-05-12 09:30:30 -03:00
Kevin Darbyshire-Bryant
f084977ca3 netifyd: support uci parameters
Integrate with uci to support 'enabled/disabled' startup option and
override netify's default auto network selection.

config netifyd
       option enabled 0
       option autoconfig 1

autoconfig: Use netify's in-built interface selection
else use 'internal/external_if' definitions.

Also persist important agent config across sysupgrade
agent.uuid, serial.uuid, site.uuid

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2020-05-12 07:23:16 +01:00
Toke Høiland-Jørgensen
59b91fc342
Merge pull request #12121 from 4wrxb/acme_dns_calias
acme: Update acme.sh URL, add support for challenge & domain alises.
2020-05-11 11:47:48 +02:00
Will O'Neill
99cc5bbd97 acme: Update acme.sh URL, add support for challenge & domain alises.
Signed-off-by: Will O'Neill <0100wrxb@gmail.com>
2020-05-10 16:54:41 -07:00
Lucian Cristian
19059a5275 frr: update to 7.3.1
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-10 22:10:31 +03:00
Kevin Darbyshire-Bryant
b7c59c390f miniupnpd: make hotplug work again
hotplug scripts are sourced not exec'd so #!/bin/sh /etc/rc.common
doesn't pull in the functions defined in /etc/rc.common thus since
'enabled' isn't defined the following sequence always fails:

enabled miniupnpd || exit 0

Unfortunately sourcing /etc/rc.common doesn't appear to work so come up
with some alternatives.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2020-05-10 17:30:11 +01:00
Rosen Penev
83d36065d5
Merge pull request #12098 from neheb/pdnsr
pdns: fix compilation with boost 1.73
2020-05-09 19:50:19 -07:00
Rosen Penev
ea692188e0
Merge pull request #12099 from neheb/pdns
pdns-recursor: fix compilation with boost 1.73
2020-05-09 19:50:12 -07:00
Rosen Penev
386f5b58e5
Merge pull request #12126 from lucize/netopeer
Netopeer2: update Netopeer2 and dependencies to master
2020-05-09 19:49:55 -07:00
Lucian Cristian
c825364c1d Netopeer2: update Netopeer2 and dependencies to master
libnetconf2 to 1.1.24
libyang to 1.0.167
sysrepo to 1.4.58

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-10 00:03:55 +03:00
Aleksander Morgado
3feeacc051 modemmanager: release 1.12.10
https://lists.freedesktop.org/archives/modemmanager-devel/2020-May/007828.html

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2020-05-09 15:29:08 +02:00
Huangbin Zhan
0ec746ccb6 treewide: add conffiles
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2020-05-09 06:06:43 +08:00
Rosen Penev
234eb30b38
Merge pull request #12067 from NeoRaider/wifidog-build-dir
wifidog-ng: remove incorrect PKG_BUILD_DIR override
2020-05-08 10:53:51 -07:00
Hannu Nyman
8b06605d64
Merge pull request #12106 from rs/nextdns-1.5.7-master
nextdns: Update to version 1.5.7
2020-05-08 16:13:01 +03:00
Stijn Tintel
d1e31481ec strongswan: bump to 5.8.4
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-05-08 06:02:32 +03:00
Stijn Tintel
e1f607af94 vallumd: switch to codeload.github.com
Review of my PR to add readsb requested to use codeload. Update vallumd
to use codeload as well, so that things are consistent.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-05-08 04:17:48 +03:00
Algin Maduro
eba268a84b nextdns: Update to version 1.5.7
Signed-off-by: Algin Maduro <1469047+mad-it@users.noreply.github.com>
2020-05-07 23:41:36 +00:00
Rosen Penev
52d4b1e965
Merge pull request #12087 from simetnicbr/for-upstream/fping-suid
fping: add new config option to install SUID root
2020-05-07 11:40:52 -07:00
Rosen Penev
0ec076cf56
Merge pull request #12097 from neheb/dav
davfs2: fix compilation with newer neon
2020-05-07 01:15:16 -07:00
Rosen Penev
1376a5fe66
Merge pull request #12088 from lucize/sysrepofix
sysrepo: update to 1.4.2
2020-05-06 14:55:36 -07:00
Rosen Penev
3ef692e74d
pdns-recursor: fix compilation with boost 1.73
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-06 14:30:17 -07:00