Commit graph

4006 commits

Author SHA1 Message Date
Josef Schlehofer
4a4c793272
git: update to version 2.20.3
Fixes CVE-2020-5260

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-04-15 17:18:25 +02:00
Stan Grishin
6b290744db https-dns-proxy: support for dnsmasq noresolv option
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-03-20 21:22:49 +00:00
Yousong Zhou
f5ae75cf0b openvswitch: fix PIE build against 4.14 kernel
Reported-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Ref: https://github.com/openwrt/packages/pull/11567
(cherry picked from commit e9d6414437)
2020-03-16 15:32:11 +08:00
Yousong Zhou
f3df27f6f6 xl2tpd: fix building failure caused by pfc
Fixes openwrt/packages#10270

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 0412c20f1b)
2020-02-25 11:57:26 +08:00
Yousong Zhou
a0f2911918 xl2tpd: bump to version 1.3.15
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Ref: https://github.com/openwrt/packages/issues/11418
(cherry picked from commit 620ba386b4)
2020-02-25 11:57:26 +08:00
Rosen Penev
ddfa4cddca
i2pd: move chmod command
Similar change to upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-02-04 18:50:35 -08:00
David Yang
87a7ec7257
i2pd: Move DATADIR to /var/lib/i2pd, fix #5693
Original author: dartraiden <wowemuh@gmail.com>

Signed-off-by: David Yang <mmyangfl@gmail.com>
2020-02-04 18:44:34 -08:00
Kwonjin Jeong
925068d4f8
ddns-scripts: Change protocols of afraid.org urls to HTTPS.
- Use HTTPS protocol for updating urls for afraid.org to protect the password.
- Bump/align package version number.

Signed-off-by: Kwonjin Jeong <gram25gwh@gmail.com>
(cherry-picked from e25b558999)
2020-01-27 21:44:34 -08:00
Stan Grishin
8da1c41104 https-dns-proxy: fix deleting server items, configurable dnsmasq settings change
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-01-25 21:15:13 -07:00
Rosen Penev
9e1fcfa6eb
Merge pull request #9795 from LoEE/jpc/git-macos-cross
[18.06]git: fix cross compilation on macOS
2020-01-25 15:25:00 -08:00
Josef Schlehofer
ba934d1fbd
zerotier: add /etc/config/zerotier as configuration file
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-01-22 12:46:54 +01:00
Rosen Penev
36611df05c
transmission: sync with master
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-01-10 18:11:03 -08:00
Josef Schlehofer
7f96b4e2c2
git: Update to version 2.16.6 (security fix)
Fixes CVEs:
CVE-2018-17456
CVE-2019-1348
CVE-2019-1349
CVE-2019-1350
CVE-2019-1351
CVE-2019-1352
CVE-2019-1353
CVE-2019-1354
CVE-2019-1387

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-01-01 13:03:34 +01:00
tripolar
8304a768cb
Merge pull request #10858 from BKPepe/wget-18.06
[OpenWrt 18.06] wget: fix CVE-2019-5953
2019-12-30 14:03:47 +01:00
Eric Luehrsen
c791ba8f5b unbound: update to 1.9.6
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2019-12-28 09:22:48 -05:00
Rosen Penev
6e079e91ce
Merge pull request #10763 from leonghui/wiki-link-update-18.06
[18.06] treewide: replace old wiki links
2019-12-22 21:44:56 -08:00
Josef Schlehofer
49b5fc001f bind: Update to version 9.11.14
Add patch to fix compile issue:
stats.c: In function 'setcounter':
stats.c:300:29: error: 'val' undeclared (first use in this function); did you mean 'value'?
  stats->counters[counter] = val;
                             ^~~
                             value

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-12-21 15:56:20 -08:00
Josef Schlehofer
8fe26c9855
wget: fix CVE-2019-5953
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-12-21 19:57:41 +01:00
Rosen Penev
102c621fc7
Merge pull request #10846 from cshoredaniel/pr-18.06-fix-nut-cgi-initscript
nut: Fix NUT CGI startup script
2019-12-21 07:02:17 -08:00
Daniel F. Dickinson
45c95e8629 nut: Fix NUT CGI startup script
Commit c1aa1f784c which backported
a number of fixes from master, missed one fix for nut-cgi.  If
nut-cgi is installed standalone or nut-cgi starts before nut-server
(the default in 18.04.5) then the configuration file directory does
not get create and therefore there is no CGI configuration file.
This commit fixes that.

Closes: #10687

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-12-21 05:30:40 -05:00
Stan Grishin
0369174652 https-dns-proxy: switch to https-dns-proxy package name
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-12-17 14:48:56 -07:00
Leong Hui Wong
0a3b6465f6 treewide: update wiki links
Signed-off-by: Leong Hui Wong <wong.leonghui@gmail.com>
2019-12-14 15:31:54 +08:00
Christian Lachner
bc37a31b16 haproxy: Update HAProxy to v1.8.23
- Update haproxy download URL and hash
- This fixes CVE-2019-19330 (See: https://nvd.nist.gov/vuln/detail/CVE-2019-19330)

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-11-29 14:01:50 +01:00
Daniel Golle
fff2e26a9b
transmission: sync with master branch
Fixes to init-script were not cherry-picked properly, sync it with
version found in master branch.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry-picked from a79d6df674)
2019-11-28 16:16:21 -08:00
Jan Pavlinec
2986916b81 tor: update to version 4.1.6
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-11-28 22:27:56 +01:00
Rosen Penev
8ef82e9621
transmission: Disable webseeding
It causes 100% CPU usage in certain situations. Just disable it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 6d9ee2ec86)
2019-11-24 19:15:04 -08:00
Rosen Penev
bd8b4df19d
transmission: Fix tracker issue with some firewalls
Some firewalls mandate a minimum size of 4k for SYN packets, which
transmission does not do by default. Upstream issue here:

https://github.com/transmission/transmission/issues/964

Cleanup:

Fixed license info.

Removed two unnecessary patches.

Ran shell script through shellcheck.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 730a1697fe)
2019-11-24 19:14:28 -08:00
Jan Pavlinec
d0726f1f2b
bind: update to version 9.11.13 (security fix)
Fixes CVE-2019-6477

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-11-21 16:14:05 +01:00
Josef Schlehofer
04a8496b7f
unbound: Update to version 1.9.5
Fixes CVE-2019-18934

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-11-20 00:09:04 +01:00
Rosen Penev
f496ed58d3
Merge pull request #9671 from BKPepe/clamav1806
[OpenWrt 18.06] clamav: update to version 0.100.3
2019-11-09 18:52:17 -08:00
Yousong Zhou
e312133081 wget: provides gnu-wget
So that packages like acme requiring features from it can depend on it
explicitly, not the more basic "wget" which is also provided by
"uclient-fetch"

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
[port to 18.06 to fix acme package backport]
Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
2019-10-31 10:21:25 +01:00
Toke Høiland-Jørgensen
9f4f78da15 acme: Bring up-to-date with master
There are quite a few bugfixes in the version of the ACME package in
master, and the old version in 18.06 have some issues as seen in #10328.
This commit ports over all changes from the master branch in one go.

Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
2019-10-29 09:48:37 +01:00
Stan Grishin
7001d4748d vpnbypass: bugfix: PROCD command not found on stop
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-10-20 21:21:30 -07:00
Jan Pavlinec
b504ac5532
irssi: update to version 1.2.2 (security fix)
Fixes CVE-2019-15717

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit b42159dea3)
2019-10-20 00:23:44 +02:00
Josef Schlehofer
9c7cf98805
bind: Update to version 9.11.11
Change License to MPL-2.0 and add PKG_LICENSE_FILES.
For more details look at https://www.isc.org/blogs/bind9-adopts-the-mpl-2-0-license-with-bind-9-11-0/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-13 11:04:51 +02:00
Rosen Penev
a8ca566840
Merge pull request #10167 from BKPepe/unbound18.06
[OpenWrt 18.06] unbound: Update to version 1.9.4
2019-10-08 13:58:14 -07:00
Josef Schlehofer
c674fa684d
unbound: Update to version 1.9.4
Fixes CVE-2019-16866

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-07 01:45:38 +02:00
Eric Luehrsen
0b8eee5fbd
unbound: update to 1.9.3
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2019-10-07 01:45:24 +02:00
Stan Grishin
dba87ee0cc simple-adblock: bugfix: proper dnsmasq reload on stop, rework start/stop logic
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-10-06 09:33:48 -07:00
Hannu Nyman
5452bb8332
Merge pull request #10156 from gladiac1337/haproxy-1.8.21-openwrt-18.06
[openwrt-18.06] haproxy: Update HAProxy to v1.8.21
2019-10-05 17:17:46 +03:00
Christian Lachner
1bb725133e haproxy: Update HAProxy to v1.8.21
- Update haproxy download URL and hash
- Add new patches (see https://www.haproxy.org/bugs/bugs-1.8.21.html)

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-10-05 13:26:02 +02:00
Stan Grishin
b677e3eee3 simple-adblock: bugfix and improvements (check description)
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-10-03 18:42:02 -07:00
Rosen Penev
7a8808940c
clamav: Remove build hacks
Simplified the Makefile and fixes compilation with uClibc-ng. Also added
IPv6 support.

Took the time to clean up the Makefile with other useful options.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from commit 012e4c1)
2019-10-03 23:03:21 +02:00
Josef Schlehofer
eef89800eb
clamav: update to version 0.100.3
Fixes CVEs:
0.100.1
- CVE-2017-16932
- CVE-2018-0360
- CVE-2018-0361
0.100.2
- CVE-2018-15378
- CVE-2018-14680
- CVE-2018-14681
- CVE-2018-14682
0.100.3
- CVE-2019-1787
- CVE-2019-1788
- CVE-2019-1789

Use HTTPS in URL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-03 22:27:21 +02:00
Josef Schlehofer
c64a4e86c3
Merge pull request #9893 from BKPepe/bind-18.06
[OpenWrt 18.06] bind: update to version 9.11.10
2019-09-28 11:52:27 +02:00
Karl Palsson
03fb174ec7 net/mosquitto: bump to 1.5.9 for CVE
Fixes CVE-2019-11779
Release notes at https://mosquitto.org/blog/2019/09/version-1-6-6-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>
2019-09-27 13:31:27 +00:00
Stan Grishin
fb43709a64 simple-adblock: dnsmasq.ipset option support, better handling of IDNs, updated README
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-09-24 09:11:57 -07:00
W. Michael Petullo
f587f31ad5
lighttpd: mark module configuration files
Signed-off-by: W. Michael Petullo <mike@flyn.org>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from 9cf412c0cb)
2019-09-11 10:50:45 +02:00
Josef Schlehofer
8f42d4b714 wget: fix CVE-2018-20483
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-06 19:58:33 +02:00
Matthias Schiffer
f6e7b56a58
fastd: fix init script for multiple VPN instances
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit b7ff8b8087)
2019-09-04 22:51:10 +02:00