Commit graph

6037 commits

Author SHA1 Message Date
Dirk Brenken
27678dc75a
adblock: fix polish source URL
Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-04-22 15:16:03 +02:00
Olivier Poitrey
6027afee17 nextdns: Update to version 1.32.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-04-20 15:08:39 +00:00
Olivier Poitrey
f1e6b878f2 nextdns: Update to version 1.12.5
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-04-20 01:38:38 +00:00
Rosen Penev
e5701228c1
Merge pull request #15384 from VolunteerComputingHelp/openwrt-19.07
Transfer of boinc 7.16.16 from 21.02 to 19.07
2021-04-17 09:05:05 -07:00
Stan Grishin
09ba055839 https-dns-proxy: bugfix: race condition with dnsmasq
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-04-10 22:38:48 -07:00
Steffen Moeller
0072fc5336 boinc: Transfer v7.16.16 from 21.02 to 19.07
Intentionally unchanged from 43d21e650d,
i.e. the pull request #14862 from neheb/boi

Signed-off-by: Steffen Moeller <moeller@debian.org>
2021-04-10 20:36:10 +02:00
Dirk Brenken
ba1a801f74
adblock: fix games_tracking source url
Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-04-09 18:38:16 +02:00
Dirk Brenken
1cf2e3530d
Merge pull request #15254 from dibdot/19.07
[19.07] travelmate: minimal change to fix cp detection
2021-04-09 18:34:08 +02:00
Dirk Brenken
74c8fb403f
travelmate: minimal change to fix cp detection
* fix cp detection proposed by @ChristianKuehnel
* add/adapt mikrotik login script provided by @Christian Kuehnel

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-04-09 18:21:17 +02:00
Rosen Penev
560a0ea2bf ksmbd-tools: update to 3.3.8
Major changes are:
  disable symlink by default.
  remove smack inherit leftovers.
  Enable guest access on IPC$ share by default.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c6fa2d5bfa)
2021-04-07 00:48:43 -07:00
Kirill Nikolaev
0863ab3237 ksmbd-tools: Add a mDNS TXT record for the ksmbd service
MacOS ignores Bonjour services for which TXT records are not returned. This changes forces umdns service to return a TXT record (`daemon=ksmbd`) for the ksmbd service. The exact content is unimportant and to the best of my knowledge nothing reads the `daemon` tag.

Symptoms of the problem (which are also debugging steps):
* Finder refuses to open the OpenWRT "computer" in the Network list.
* Discovery.app (Bonjour Browser) lists the _ssh._tcp service, but the submenu for it doesn't unfold and no address is shown.
* `dns-sd -L OpenWrt _smb._tcp` doesn't return any address.

Signed-off-by: Kirill Nikolaev <cyril7@gmail.com>
(cherry picked from commit 272b0a5c18)
2021-04-07 00:48:43 -07:00
Rosen Penev
52d3ce0f6d ksmbd-tools: update to 3.3.7
Major change are:

ksmbd.control -s terminate ksmbd.mountd as well as kernel server.
Update configuration.txt and README.
Turn off smb2 leases by default again.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7a1a8f3659)
2021-04-06 21:54:34 -07:00
Rosen Penev
f275b3f418 ksmbd-tools: update to 3.3.6
Major changes are:

Add missing g_rwlock_init() for rpc_samr and rpc_lsaprc.
Fix potential potential null pointer dereferencing error.
Fix memleak.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d95edf16ef)
2021-04-06 21:54:34 -07:00
Martin Blumenstingl
ba329c4ea5 ksmbd-tools: update to 3.3.5
Major changes for version 3.3.5 are:
- Rename "streams" parameter to "vfs objects = streams_xattr".
- Enable smb2 leases by default.
- Ignore ksmbd.subauth creation failure.
- Fix bugs that related to guest ok = yes.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>
(cherry picked from commit 58f91090f5)
2021-04-06 21:54:33 -07:00
Sven Roederer
055b1cd581 nut: fix typo in nutshutdown script
Even it's only cosmetic and should not affect the function of regular system,
fix the name of the IPKG_INSTROOT variable.
Typo was added long ago with 8400c9a6ec.

Signed-off-by: Sven Roederer <devel-sven@geroedel.de>
(cherry picked from commit f25f49a8b7)
2021-04-06 14:51:55 -07:00
Dirk Brenken
fdd4afe6ac
adblock: fix init status command
Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-04-01 20:55:45 +02:00
Lucian Cristian
5a8a7aeab1 libreswan: update cu 3.32
CVE and NSS fix

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2021-03-28 23:10:05 +03:00
Stan Grishin
aa3e95ac69 https-dns-proxy: bugfix: correct PROCD firewall object
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-25 16:46:10 -07:00
Stan Grishin
3530635214 https-dns-proxy: support for additional Force DNS ports
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-22 07:29:14 +00:00
Josef Schlehofer
44b301125f bind: update to version 9.16.13
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-03-21 20:35:45 -07:00
Christian Lachner
227597c970 haproxy: Update HAProxy to v2.0.21
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-03-19 18:38:26 +01:00
Tianling Shen
a8a4059284 tmate: add new package
Tmate is a fork of tmux. It provides an instant pairing solution.
For more details, see https://tmate.io.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ccfe1bfa50)
2021-03-18 23:22:48 -10:00
Jan Pavlinec
0494d8706b
tor: update to version 0.4.4.8
Fixes CVE-2021-28089 and CVE-2021-28090

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-03-17 10:52:33 +01:00
Florian Eckert
1656b49bfe
Merge pull request #15136 from TDT-AG/pr/2021015-openwrt-19.07-mwan3
mwan3: remove mwan3 ubus call on mwan3 iface hotplug ACTION
2021-03-16 14:14:24 +01:00
Florian Eckert
40d56e46b1 mwan3: remove mwan3 ubus call on mwan3 iface hotplug ACTION
With this change, the interface status is no longer read from the mwan3 ubus.
The status of the interface is read directly from the status directory.
This was already implemented in the master with the
commit c07f5230be.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-03-15 14:15:42 +01:00
Karl Palsson
b66d262d75 net/mosquitto: bump to 1.6.14
This is a minor security fix for outgoing bridges and the client
library.

Full details: https://mosquitto.org/blog/2021/03/version-2-0-9-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-03-15 10:41:31 +00:00
Olivier Poitrey
81fa8cf893 nextdns: Update to version 1.11.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-03-09 21:24:18 +02:00
Stan Grishin
af02206e25 vpn-policy-routing: better processing of custom user files
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-08 10:35:01 +00:00
Florian Eckert
8c63f6331c
Merge pull request #14661 from TDT-AG/pr/20210203-19.07-keepalived
keepalived: backport fixes
2021-03-03 10:01:24 +01:00
Stan Grishin
86bb11e973 vpn-policy-routing: update to 0.3.2-18
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-01 21:38:44 +00:00
Eric Luehrsen
5c95dda730 unbound: update to 1.13.1
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2021-02-28 16:01:03 -05:00
Stan Grishin
3abe9d0aef vpn-policy-routing: bugfix: netflix user file missing redirect
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-26 22:03:41 +00:00
Stan Grishin
904d911c55 vpn-policy-routing: update user netflix file
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-26 02:16:44 +00:00
Stan Grishin
7d26130b33 vpn-policy-routing: custom user scripts improvements
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-24 19:44:10 +00:00
Dirk Brenken
8550232147
adblock: update blocklist sources
* change adguard url
* remove malwaredomains (discontinued)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-02-23 15:46:43 +01:00
Rosen Penev
04f8ded56d
Merge pull request #14869 from stangri/19.07-vpn-policy-routing
[19.07] vpn-policy-routing: update to version 0.3
2021-02-23 05:12:03 -08:00
Jan Hak
39f3941cd4
knot: update to version 3.0.4
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 341fffb8dd)
2021-02-23 12:25:02 +01:00
Jan Hak
1662ca26ba
knot: update to 3.0.3
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 5cd9378653)
2021-02-23 12:24:57 +01:00
Jan Hák
9389a5dd1f
knot: disable embedded xdp
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 1f9d6fbb26)
2021-02-23 12:24:52 +01:00
Jan Hák
7619ff0dfc
knot: update to 3.0.2
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit a54828926d)
2021-02-23 12:24:47 +01:00
Daniel Salzman
5ddcc2e050
knot: disable libnghttp2 autodetection
Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>
(cherry picked from commit 67e3c594de)
2021-02-23 12:24:43 +01:00
Jan Hak
fb103be86b
knot: update to version 3.0.1
definition of PSELECT_COMPAT could be removed many years ago, is no longer needed

Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 4069bb1e72)
2021-02-23 12:24:38 +01:00
Josef Schlehofer
8e1b62d4bb openvswitch: update to version 2.11.6 (security fix)
Fixes CVEs:
- CVE-2020-35498
- In DPDK: CVE-2015-8011 and CVE-2020-27827
- In LLDP: CVE-2019-14818, CVE-2020-10722, CVE-2020-10723 and CVE-2020-10724

Removed patches:
- 0001-compat-Include-confirm_neigh-parameter-if-needed.patch because they
are included in this release as it was backported
- 0010-acinclude-Fix-build-with-kernels-with-prandom-moved-.patch
included in this release as it was backported

Other patches were refreshed.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-02-23 17:14:37 +08:00
Stan Grishin
5e24f6db6d vpn-policy-routing: update to version 0.3
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-23 01:20:14 +00:00
Rosen Penev
3be5d565cf
Merge pull request #14710 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: support for force DNS/DNS hijacking
2021-02-22 16:27:00 -08:00
Moritz Warning
7be89f1f34
zerotier: bump to 1.6.4
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2021-02-21 08:48:36 +01:00
Noah Meyerhans
fcf72948ae bind: bump to 9.16.12
Includes fix for security issues:

* CVE-2020-8625: BIND servers are vulnerable if they are running an
  affected version and are configured to use GSS-TSIG features.

Disable backtrace functionality, as it is unreliable across
architectures and generally only supported by upstream on amd64

Remove a patch that has been incorporated upstream

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2021-02-18 15:46:39 -08:00
Hauke Mehrtens
90af10d015
Merge pull request #14647 from neheb/k9
[19.07] ksmbd(-tools): update to 3.3.4
2021-02-16 22:26:50 +00:00
Philip Prindeville
3f0dbcdae1 isc-dhcp: seeing crashes when attempting to update dynamic dns
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-02-10 12:00:53 -07:00
Stan Grishin
1a4184c076 https-dns-proxy: support for force DNS/DNS hijacking
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-10 05:59:24 +00:00