Commit graph

6056 commits

Author SHA1 Message Date
Aaron Goodman
37e2f88208 mwan3: version bump
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit ca8bc3d115)
2020-07-27 12:19:21 +02:00
Aaron Goodman
b9e3461250 mwan3: cleanup duplicate ipv4 and ipv6 logic
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit 30a46bdc9e)
2020-07-27 12:19:12 +02:00
Aaron Goodman
db46d3ab03 mwan3: don't send iptable setup failures to /dev/null
silencing failing rules makes debugging more difficult

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit 702a104f9c)
2020-07-27 12:19:03 +02:00
Aaron Goodman
383555d076 mwan3: add default rule for ipv6 in example config
default rule only applied to ipv4 with dest_ip 0.0.0.0/0
and error was hidden when trying to apply it in ip6table

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit 2a5e9be83e)
2020-07-27 12:18:52 +02:00
Aaron Goodman
dc25b38f13 mwan3: don't try to use ipv6 if not installed
fix issue  #11826

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit a0d66d4eeb)
2020-07-27 12:18:40 +02:00
Aaron Goodman
ec45ff8052 mwan3: be more efficient with sleep after killing trackers
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit 84a53b7c79)
2020-07-27 12:18:29 +02:00
Aaron Goodman
d6b051b8c0 mwan3: don't add single ipv4 to connected list if already covered by a cidr
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit da9a626f78)
2020-07-27 12:18:18 +02:00
Florian Eckert
f834ba0fce mwan3: update version to 2.8.9
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 2594258c4b)
2020-07-27 12:18:00 +02:00
Florian Eckert
2f2044ecb0 mwan3: cleanup function mwan3_create_iface_route
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit d0c248a7da)
2020-07-27 12:17:51 +02:00
Florian Eckert
db3c8326fe mwan3: fix shellcheck warning SC2086
Add double quote to prevent globbing and word splitting where there is
no regression.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit feae9e5742)
2020-07-27 12:17:40 +02:00
Florian Eckert
7d0f2cdb63 mwan3: fix shellcheck warning SC2166
Replace -o boolean check with ||.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit c0fdfaa174)
2020-07-27 12:17:31 +02:00
Florian Eckert
c0b111feab mwan3: remove unused variable complained by shellcheck
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 644d9a25df)
2020-07-27 12:17:22 +02:00
Florian Eckert
3443eb3c7d mwan3: fix shellcheck warning SC2039
Replace all `==` with `=`.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 0ed7524f81)
2020-07-27 12:17:11 +02:00
Florian Eckert
be8f287aaa mwan3: move redirect error output to trash
This suppress the following output on `mwan3 restart`:
> Dump terminated

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit facf8ea299)
2020-07-27 12:17:01 +02:00
Olivier Poitrey
08111b9c74 nextdns: Update to version 1.7.1
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-07-26 14:42:57 +00:00
Jan Pavlinec
345cb18d4c
tor: update to version 0.4.2.8 (security fix)
Fixes
CVE-2020-15572

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-07-21 14:49:29 +02:00
Rosen Penev
6ae076fd14
aria2: Build with MIPS16
All the computationally expensive stuff is in the libraries, not the
package itself.

Saves several kilobytes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a5e7d0a904)
2020-07-20 16:40:07 -07:00
Xingwang Liao
2cdf132b94
aria2: Update to 1.35.0
* remove OpenSSL patch, it has already merged to the source.

Signed-off-by: Xingwang Liao <kuoruan@gmail.com>
(cherry picked from commit 2384acdc9d)
2020-07-20 16:40:07 -07:00
Josef Schlehofer
0821c5001e
squid: update to version 4.12
- Fixes CVEs:

CVE-2019-12519
CVE-2019-12520
CVE-2019-12521
CVE-2019-12523
CVE-2019-12524
CVE-2019-12525
CVE-2019-12526
CVE-2019-12527
CVE-2019-12528
CVE-2019-12529
CVE-2019-12824
CVE-2019-12854
CVE-2019-13345
CVE-2019-18676
CVE-2019-18677
CVE-2019-18678
CVE-2019-18679

CVE-2020-8449
CVE-2020-8450
CVE-2020-11945
CVE-2020-14058
CVE-2020-15049

- Remove patch for cross-compilation
The patch should not be included in the OpenWrt at all without any
commit message/description.
Is not needed and there should be used HOST variables instead of BUILD variables (e.g.
   HOSTCXX)
However, the BUILDCXX is set in Makefile to HOSTCXX

- Renumber glibc patch and refresh it

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3401e29aa7)
2020-07-20 16:26:45 +02:00
Jonathan Elchison
5658fd93f8
squid: fix 'localhet' typo in squid.conf
Signed-off-by: Jonathan Elchison <JElchison@Gmail.com>
(cherry picked from commit 2ba6546dd8)
2020-07-20 16:26:08 +02:00
Josef Schlehofer
fb687b5420
dnscrypt-proxy2: update to version 2.0.44
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 01ff758894)
2020-07-17 11:10:06 +02:00
Josef Schlehofer
4c2ecb413e
Merge pull request #12676 from BKPepe/bind-openwrt19.07
[19.07] bind: update to version 9.16.x
2020-07-16 10:18:36 +02:00
Yousong Zhou
5ed85c0389 openvswitch: bump to version 2.11.3
Two patches were backported to fix issue openwrt/packages#12737

  0002-compat-Fix-ipv6_dst_lookup-build-error.patch
  0003-compat-Backport-ipv6_stub-change.patch

One was deleted as it is now part of 2.11.3

  0005-datapath-conntrack-fix-include-for-IP6_DEFRAG_CONNTR.patch

Other patches refreshed

Reported-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-07-14 20:06:44 +08:00
Rosen Penev
67755a8ea6
Merge pull request #12732 from TDT-AG/pr/20200706-mwan3
mwan3: sync with master branch
2020-07-12 17:59:25 -07:00
Peter Wagner
cc0eb59f42 ntpd: update to version 4.2.8p15 (security fix)
Fixes:
CVE-2020-11868
CVE-2018-8956
CVE-2020-13817
CVE-2020-1502

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2020-07-08 19:11:22 +02:00
Michiel Blokzijl
86d2bfe022 mwan3: Fix mwan3 start not doing anything Due to a missing config load function call, mwan3 start runs ifup for an empty list of interfaces, thus not calling ifup at all.
This commit introduces the missing config_load call.

Signed-off-by: Michiel Blokzijl <code@m01.eu>
(cherry picked from commit acfbd98ce0)
2020-07-06 08:58:45 +02:00
Florian Eckert
b74d5e9c17 mwan3: update version to 2.8.7
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 8030814267)
2020-07-06 08:58:45 +02:00
Florian Eckert
4f394c2590 mwan3: set status to unknown in rpcd if status file not found
If the status file is not found then set then return the value unknown.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit e30f16beef)
2020-07-06 08:58:45 +02:00
Florian Eckert
f7749c663b mwan3: switch to procd init script
This enables the procd handling for mwan3 on config change.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a6dc75428c)
2020-07-06 08:58:45 +02:00
Aaron Goodman
0498a2b357 mwan3: address reviewer comments on 5147dfc7
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit 38be40843b)
2020-07-06 08:58:45 +02:00
Aaron Goodman
cc1bb3e8b9 mwan3: Use /128 for ipv6 if no other source address was found
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit 4efaa44b21)
2020-07-06 08:58:45 +02:00
Aaron Goodman
74b6f10845 mwan3: Allow user to specify rules based on source interface
Add an option for adding rules based on source interface.
The default 0.0.0.0/0 src and destination ip addresses has been removed. It is unclear
how the 'any' family of rules would have worked, as it appears each rule always required an
ipv4 or ipv6 address src and destination address.  With this change, the any family will work
again.

I also cleaned up a bunch of repeated code around adding the iptables rules for
ipv4/ipv6/any in making the change.

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit 5147dfc73a)
2020-07-06 08:58:45 +02:00
Aaron Goodman
c14e74a5a8 mwan3: Do not mangle outgoing ipv6 pings
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit cf38136b00)
2020-07-06 08:58:45 +02:00
Aaron Goodman
465baa46c3 mwan3: version bump to 2.8.6
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit b7d1f81f10)
2020-07-06 08:58:45 +02:00
Aaron Goodman
19bebd3d89 mwan3: force busybox ping
openwrt 19.07 uses iputils 20101006-1

This ancient version of iputils has a bug where the -I option is not respected.

https://github.com/iputils/iputils/issues/55
https://github.com/iputils/iputils/issues/56
https://bugs.openwrt.org/index.php?do=details&task_id=1486

Thus, we should force using busybox ping at "/bin/ping" until the iputils
version gets an upgrade in the next major release

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit 35a86bdc11)
2020-07-06 08:58:45 +02:00
Aaron Goodman
ffce45e365 mwan3: don't add ipv6 link local address to routing tables
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit aafdd0730c)
2020-07-06 08:58:45 +02:00
Aaron Goodman
a3c399d01f mwan3: reduce calls to `ip route list'
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit 02ebd831c1)
2020-07-06 08:58:45 +02:00
Brian J. Murrell
4af28cc681 mwan3: Update Makefile
Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
(cherry picked from commit b017fe34dd)
2020-07-06 08:58:45 +02:00
Brian J. Murrell
0693f0c9e3 mwan3: Don't use /128 address for ping source
An interface can have both a /64 and a /128 from a provider.

In such a case, use the address from the /64 to do the ping check, not
the /128.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
(cherry picked from commit 49cf5eac5c)
2020-07-06 08:58:45 +02:00
Jonathan G. Underwood
140e2ea19e stubby: update to version 0.3.0
Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
2020-07-05 12:34:31 +01:00
Andy Walsh
0c03b71b88 samba4: update to 4.11.11
* update to 4.11.11
* fixes CVE-2020-10730, CVE-2020-10745, CVE-2020-10760, CVE-2020-14303
* add fix-musl_missing__nss_buflen_passwd.patch
* remove fixed tirpc include
* add extra CONFIGURE_VARS (XSLTPROC=false, WAF_NO_PREFORK=1)
* fix python3 host paths, ensure we use build hostpkg tools
* add new UCI option "enable_extra_tuning"
* update template
* add config examples for options
* fix some access warnings on samba /var dirs

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-07-03 02:12:16 +02:00
Ian Cooper
b80db2c800
bind: add nslookup alternative to busybox nslookup
Add alternative to busybox nslookup. Busybox throws an error when
the host does not have an AAAA record.

Signed-off-by: Ian Cooper <iancooper@hotmail.com>
(cherry picked from commit 4cb5aa57fd)
2020-07-01 15:42:09 +02:00
Josef Schlehofer
3c3a1f7618
bind: update to version 9.16.3
Fixes:
CVE-2020-8616
CVE-2020-8617

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a75391575b)
2020-07-01 15:42:04 +02:00
Jan Pavlinec
177623c5fe
bind: update to version (security fix)
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit c8be44062e)
2020-07-01 15:41:57 +02:00
Noah Meyerhans
b73f479ea4
bind9: update to 9.16.1
Add libuv dependency

Fix optional libxml and c-json dependency handling

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 72654d20d5)
2020-07-01 15:41:31 +02:00
Rosen Penev
587e387af7
Merge pull request #12628 from jonathanunderwood/openwrt-19.07-stubby-fix-tls-port
[19.07] stubby: fix handling of tls_port config option
2020-06-28 19:54:51 -07:00
Rosen Penev
cd080dded6
miniupnpd: added libcap dependency
As miniupnpd is running as root, libcap can be used to limit its
capabilities.

libcap is very small, so this isn't a problem.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ba49c96808)
(switched to use libcap as -ng is not available)
2020-06-28 14:01:25 -07:00
Rosen Penev
b418029e41
miniupnpd: update to 2.1.20200510
Use the newly introduced configure script.

Use PKG_INSTALL for consistency between packages.

Use PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2b5028458e)
2020-06-28 14:00:39 -07:00
David Ehrmann
231e47185e
miniupnpd: suppress grep and uci errors
If miniupnpd is installed but disabled or not running, the hotplug
script will query uci for keys that don't exist and grep a temporary
config file that doesn't exist, resulting in the following errors:

uci: Entry not found
grep: /var/etc/miniupnd.conf: No such file or directory

These would arise when an interface is brought up or down, and are
more confusing than helpful, especially when miniupnpd is disabled.

Suppress these errors.

Signed-off-by: David Ehrmann <ehrmann@gmail.com>
(cherry picked from commit 6ef2b5400b)
2020-06-28 14:00:39 -07:00
Kevin Darbyshire-Bryant
5cb388497e
miniupnpd: improve hotplug & interface handling
The existing interface selection/detection code was incomprehensible at
worst and convoluted at best.  The uci config file suggested it
understood an external ipv6 interface but in reality the init script
took no notice.  Re-work it so it is at least comprehendible and takes
notice of ipv6 interface details if specified.

Update the hotplug script to use the same interface selection/detection
code as the init script and take note of ipv6 interface selection, only
restarting miniupnpd on interface up events and only if that interface
isn't already known (for that ip class) by miniupnpd.

For me this has solved numerous 'flaky' startup problems, especially
with regard to ipv6.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit 295d77943c)
2020-06-28 14:00:24 -07:00
Jonathan G. Underwood
f49c2c71ca stubby: fix handling of tls_port config option
Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
2020-06-27 17:00:34 +01:00
David Yang
f51ec94f86 acme: Bump release version
Signed-off-by: David Yang <mmyangfl@gmail.com>
2020-06-25 23:37:16 -07:00
David Yang
f7e03d1271 acme: Handle ecc cert correctly
Error was:
  The domain 'example.com' seems to have a ECC cert already, please add '--ecc' parameter if you want to use that cert.

Signed-off-by: David Yang <mmyangfl@gmail.com>
2020-06-25 23:37:16 -07:00
David Yang
0e5b273241 acme: Handle log message correctly
Error was:
  logger: unrecognized option: renew

Signed-off-by: David Yang <mmyangfl@gmail.com>
2020-06-25 23:37:16 -07:00
Stan Grishin
4344723f8c https-dns-proxy: re-add conffiles and add description to Makefile
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-06-26 03:09:39 +00:00
Stan Grishin
2c4644bf9b https-dns-proxy: bugfix: remove eDNS support
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-06-25 19:40:52 +00:00
Olivier Poitrey
8044a7014d nextdns: Update to version 1.7.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-06-25 00:22:43 +00:00
Daniel Engberg
7222143b4d
Merge pull request #12563 from Andy2244/ksmbd-3.2.0_ksmbd-tools-3.2.6-(19-07)
[19.07] Revert "ksmbd: update to 3.2.0, ksmbd-tools: update to 3.2.6"
2020-06-20 21:11:26 +02:00
Andy Walsh
45e78b34a7 Revert "ksmbd: update to 3.2.0, ksmbd-tools: update to 3.2.6"
Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

This reverts commit d88405ba84.
2020-06-20 19:26:12 +02:00
Christian Lachner
1b1c2c598e haproxy: Update HAProxy to v2.0.15
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2020-06-20 09:04:47 +03:00
Josef Zila
fd3648a7b4
transmission: add access to web interface files to procd jail
Signed-off-by: Josef Zila <josefzila@gmail.com>
(cherry picked from commit 9a82c952b4)
2020-06-18 14:53:16 -07:00
Rosen Penev
054b87df40
transmission: add a disabled notification
Helps to see that transmission must be enabled.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 89fc95c4fc)
2020-06-18 14:52:37 -07:00
Rosen Penev
8cb9367313
transmission: update to 3.0
remove upstreamed patches. Refresh remaining one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 93485dd317)
2020-06-18 14:51:49 -07:00
Etienne Champetier
668fb65674
Merge pull request #12505 from EricLuehrsen/unbound_ifauto_1907
[openwrt-19.07] unobund: make option interface_auto default on
2020-06-13 18:14:25 -04:00
Etienne Champetier
bc71ad7b3f
Merge pull request #12507 from stangri/19.07-simple-adblock
[19.07] simple-adblock: racially-neutral names
2020-06-13 18:10:40 -04:00
Rosen Penev
3ca5acd880
Merge pull request #12503 from Andy2244/samba-4.11.9-(19-07)
[19.07] samba4: update to 4.11.9
2020-06-13 14:39:09 -07:00
Rosen Penev
e2045ed7ac
Merge pull request #12502 from Andy2244/ksmbd-3.2.0_ksmbd-tools-3.2.6-(19-07)
[19.07] ksmbd: update to 3.2.0, ksmbd-tools: update to 3.2.6
2020-06-13 14:38:30 -07:00
Rosen Penev
e5f75f5009
Merge pull request #12499 from Andy2244/softethervpn5-9674-(19-07)
[19.07] Softethervpn5: update to 5.01.9674
2020-06-13 14:37:21 -07:00
Andy Walsh
b61848fd0f wsdd2: update to git 2020-05-06
* update to git 2020-05-06
* run init script through shellcheck
* fix infinite loop when BI_PARM is never set
* Fix '-b' option parsing

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-13 23:26:25 +02:00
Stan Grishin
de09918aca simple-adblock: racially-neutral names
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-06-13 20:39:11 +00:00
Eric Luehrsen
5fcf2cb092 unbound: make option interface_auto default on
Unbound has a quirk and may reply on a different device address.
When Unbound answers with from-address different than it
received queries on, it may cause trouble for select VPN and
firewall configurations. Ensure Unbound replies with the same
address by changing this default.

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-06-13 15:16:51 -04:00
David Bauer
950646f6c0 unbound: bump PKG_RELEASE
Fixes commit da76aeb24c ("unbound: expose interface-auto to UCI")

Signed-off-by: David Bauer <mail@david-bauer.net>
2020-06-13 15:16:50 -04:00
Eric Luehrsen
ba19244b84 unbound: suggest matched domain option for dnsmasq link
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-06-13 15:16:50 -04:00
Andy Walsh
72b0ea4b5d samba4: update to 4.11.9
* update to 4.11.9
* remove merged upstream patches
* disable netbios port 139 on 'DISABLE_NETBIOS' option or missing 'nmbd'
* fixes CVE-2020-10700, CVE-2020-10704

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-13 20:39:26 +02:00
Andy Walsh
d88405ba84 ksmbd: update to 3.2.0, ksmbd-tools: update to 3.2.6
* ksmbd: update to 3.2.0
* ksmbd-tools: update to 3.2.6
* refresh patch

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-13 20:36:06 +02:00
Andy Walsh
1a0db6a217 softethervpn5: update to 5.01.9674
* update to 5.01.9674

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-13 20:29:55 +02:00
Dirk Brenken
c0dce1d3a6
adblock: update 4.0.6
* add anti_ad blocklist source
* made SafeSearch provider configurable, you can limit
  SafeSearch to certain providers
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e5ab2de1ff)
2020-06-13 08:36:08 +02:00
Dirk Brenken
982e7e2fa2
adblock: update 4.0.5-5
* add regional list source for czech/slovak
* add regional list source for korea
* adapt oisd_nl changes, switch to adb-syntax domains

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0a5e61ecb6)
2020-06-11 16:30:11 +02:00
Stan Grishin
53fc73b57e simple-adblock: remove obsolete dshield.org links from config
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-06-08 17:35:48 +00:00
Jan Hak
e667100a92
knot: update to version 2.9.5
Removed patch
`03-configure-allow-to-manually-disable-POSIX-capabiliti.patch` that has been backported into release.

Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 9d81b6e4ca)
2020-06-06 22:30:41 +02:00
Josef Schlehofer
aef8cb50ff
knot: disable libcap-ng
Recently, there was added libcap-ng to OpenWrt packages feed,
which is optional for Knot DNS. It enables POSIX 1003.1e capabilities.
This can restrict root (by default it runs as root) permissions and
might harm and as there isn't systemd on OpenWrt it can interfere.

There is an added patch, which introduced an option to disable libcap-ng.
This will be part of the next release.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 41957d6967)
2020-06-06 22:30:32 +02:00
Jan Hak
550fa7c286
knot: update to version 2.9.3
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 87d6c26c73)
2020-06-06 22:30:16 +02:00
Paulo Machado
1fe19e712f linuxptp: fix build failure
Build is failing because HWTSTAMP_TX_ONESTEP_P2P is defined anymore on
linux net_tstamp.h.

Moreover, the usual way of linuxptp build is looking for system includes
unless user defines differently. That also was tried to fix.

PKG_RELEASE bumped to 3.

Signed-off-by: Paulo Machado <pffmachado@yahoo.com>
(cherry picked from commit 5f64b2d1e4)
2020-06-05 21:43:10 -07:00
Gabor Seljan
267b490878
sslh: use tls option instead of deprecated ssl
Upstream will drop support for the ssl option in the next future version.

Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
(cherry picked from commit 46c253dfca)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[package bump]
2020-06-05 21:59:59 +02:00
Rosen Penev
8f935f38bf
Merge pull request #12361 from rs/nextdns-1.6.4-openwrt-19.07
[19.07] nextdns: Update to version 1.6.4
2020-06-05 12:23:37 -07:00
Hannu Nyman
b934e4b41c
Merge pull request #12334 from stangri/19.07-simple-adblock
[19.07] simple-adblock: bugfix: proper error reporting on failed downloads; lists update script
2020-06-03 18:21:49 +03:00
David Bauer
e760909455 unbound: expose interface-auto to UCI
This exposes the interface-auto option to UCI.

By default, interface-auto is disabled.
This leads to the DNS reply possibly originating from
a different address then the request was sent to.

Devices with a packet filter might not receive the reply in this case.

Enabling interface-auto ensures the reply is sent with the
source-address the request was sent to.

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit da76aeb24c)
2020-06-03 16:10:54 +02:00
Karl Palsson
2358915938 net/mosquitto: bump to 1.6.10
Full changelog at: https://mosquitto.org/blog/2020/05/version-1-6-10-released/

Fixes openssl 3.0 support,
Minor fixes, nothing standout as applicable specifically to OpenWrt.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2020-06-02 10:26:47 +00:00
Rosen Penev
620838fc91
ola: fix compilation with GCC4
The configure script confusingly sets CXXFLAGS to gnu++11 but does
not use that to check the important stuff. Fix that.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8f7687833e)
2020-05-31 14:02:47 -07:00
Dirk Brenken
c09244b012
adblock: update 4.0.5-4
* remove dumb list cache
* start adblock processing after adding/removing
  list sources via CLI
* add regional list source for france

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit ab44d8146a)
2020-05-31 18:31:26 +02:00
Olivier Poitrey
f0fd4c1512 nextdns: Update to version 1.6.4
Refactor the package so init script is installed from the binary instead
of an init script embedded in the package.

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-31 00:18:32 -07:00
Dirk Brenken
45313e42f9
adblock: update 4.0.5-3
* fix oisd_nl source parser (format has been changed)
* enable safesearch support for kresd (ip based)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7f6763359c)
2020-05-30 06:15:02 +02:00
Rosen Penev
6e27e51969
Merge pull request #12348 from adrianschmutzler/fixmake
[19.07] treewide: use relative include paths for python Makefiles
2020-05-28 19:11:38 -07:00
Rosen Penev
a9b5867e29
Merge pull request #12294 from neheb/keab
[19.07] backport kea changes
2020-05-28 15:17:01 -07:00
Jeffery To
d85c355aa1 treewide: use relative include paths for python Makefiles
This updates the include paths for python(3)-package.mk to be relative
to the package Makefile. If not, in certain cases this will print errors
like the following one:

ERROR: please fix feeds/openwrt/net/freeradius3/Makefile
   - see logs/feeds/openwrt/net/freeradius3/dump.txt for details

In the dump.txt there is the following:

Makefile:42: /mylocalpath/feeds/packages/lang/python/python3-package.mk: No such file or directory
make[1]: *** No rule to make target '/mylocalpath/feeds/packages/lang/python/python3-package.mk'.  Stop.

The relative path is used already in 19.07 for most of the packages, and
has been updated for the packages at hand in master as well:

302f4d17e3 ("libmraa,libupm: Disable default Python package build recipe")
1bc2f4f3c6 ("treewide: Remove Python variants for non-Python packages")

Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
2020-05-28 15:57:01 +02:00
Jan Pavlinec
615d909a22
transmission: init script check syscall list for seccomp
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-05-27 11:26:36 +02:00
Stan Grishin
18efcda210 simple-adblock: bugfix: proper error reporting on failed downloads; lists update script
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-05-27 00:26:13 +00:00
Rosen Penev
d5062122ef
Merge pull request #12292 from neheb/spoof
[19.07] spoofer backports
2020-05-26 14:08:58 -07:00
Olivier Poitrey
6e6e5fa2ad nextdns: Update to version 1.6.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-26 19:31:36 +00:00
Olivier Poitrey
474296dcb1 nextdns: Update to version 1.6.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-26 17:58:33 +00:00
Aleksander Morgado
ede1a8221b modemmanager: set interface MTU based on bearer settings
Using the same method used by other protocol handlers like uqmi.

Fixes https://github.com/openwrt/packages/issues/11383

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit 41552c1cc2)
2020-05-26 10:28:56 +02:00
Rosen Penev
5a1699aebd
kea: do not build static host binaries
Errors on some systems. No real change.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1950340c69)
2020-05-24 19:47:13 -07:00
Tiago Gaspar
bb42a250b4
kea: Update kea to the latest stable verion (1.6.2).
Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 0f4cc2e339)
2020-05-24 19:47:00 -07:00
Rosen Penev
1d30a273e1
kea: Remove openssl host dependency
OpenSSL is already built as part of tools (LibreSSL actually) and can be
used instead for the host build.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c037c8d988)
2020-05-24 19:46:50 -07:00
Tiago Gaspar
f22e122e64
kea: update package to 1.6.0
Update kea to the latest stable verion (1.6.0).

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 03cf093332)
2020-05-24 19:46:39 -07:00
Tiago Gaspar
6f19b894d6
kea: remove dependency and reduce file size
Remove boost-python3 dependency and reduce file size of the compiled
kea-libs

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 74603fe5ea)
2020-05-24 19:46:30 -07:00
Tiago Gaspar
87f4d6ba2c
kea: fix kea-admin dependency
Fix kea-admin dependency where if procps-ng-ps wasn't available busybox
would output an error casuse it does't support showing a processe's PID

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 9314a96765)
2020-05-24 19:46:22 -07:00
Tiago Gaspar
1360d1f88c
kea: fix and improve makefile
Fix an issue where the Makefile wouldn't allow kea to show up in the
menuconfig Also added some description to the packages

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 95307f2a4b)
2020-05-24 19:46:13 -07:00
Rosy Song
07538f535a
kea: remove python3 dependency of kea-admin
fix #9495

Signed-off-by: Rosy Song <rosysong@rosinson.com>
(cherry picked from commit 444420423f)
2020-05-24 19:46:07 -07:00
Rosen Penev
efde7c454e
kea: Fix compilation without deprecated OpenSSL APIs
Forgot to add this one to the last pull request.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 54d7bc119d)
2020-05-24 19:45:58 -07:00
Rosen Penev
09ea6f0325
kea: Don't install to STAGING_DIR_HOST
STAGING_DIR_HOST is for packages under tools/ , not host packages.

Reorganized Makefile for consistency between packages.

Added PKG/HOST_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d93fd61d62)
2020-05-24 19:45:50 -07:00
Rosen Penev
fb58e3b8c4
spoofer: remove host build + cleanups
The host build is not used by anything.

Added PKG_INSTALL for consistency between packages.

Added PKG_BUILD_PARALLEL for faster compilation.

Added missing protobuf/host build dependency. This was previously
specified as a host dependency, which is wrong.

Removed pointless std parameter.  It's only useful for old G++ versions.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 63107fa8c0)
2020-05-24 19:38:43 -07:00
Rosen Penev
deccad8925
spoofer: Update to 1.4.5
Needed for the new protobuf update.

Cleaned up Makefile.

Got rid of HOST_BUILD_DEPENDS. This package does not have a host build.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4c42eb0b45)
2020-05-24 19:38:34 -07:00
Dirk Brenken
15257f5b6d
adblock: limit domain name length
* limit domain name length to max. 63 chars
  to fix issues with energized sources

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0b6ea12560)
2020-05-24 21:49:26 +02:00
Dirk Brenken
c8d2ed2cbc
adblock: release 4.0.5
* update energized source urls, add ultimate variant
* switch shalla source to http (invalid server certificate)
* add another stevenblack source variant (normal / porn)
* small cornercase fixes
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c9f91ecc47)
2020-05-23 21:21:54 +02:00
Rosen Penev
a41e068db8
sslh: update to 1.20
Fixed maintainer entry.

Added patch fixing compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ded3ad41b8)
2020-05-21 17:28:35 -07:00
Josef Schlehofer
49ac1e8b74 bind: update to version 9.14.12
Fixes:
CVE-2020-8616
CVE-2020-8617

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-20 11:25:23 -07:00
Yousong Zhou
50148ea080 openvswitch: fix file generation in /etc/modules.d
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Reported-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 1091badd83)
2020-05-20 23:34:11 +08:00
Josef Schlehofer
828ba37e06
unbound: update to version 1.10.1
Fixes:
CVE-2020-12662
CVE-2020-12663

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-19 11:28:40 +02:00
Olivier Poitrey
07164dec74 nextdns: Update to version 1.5.8
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-14 23:41:04 +00:00
Eiji MATSUMOTO
0feb9ad314 freeradius3: Fix to init script.
To use eap tls, 'tmpdir' must be created before server starts.
This 'tmpdir' is used to store and verify client certificate,
and therefore radiusd do 'chmod go-rwx'.

If 'tmpdir' does NOT exists, server failed to start and default
'tmpdir' is '/tmp/radiusd'. So init script MUST create default
'tmpdir' like other directories.

Signed-off-by: Eiji MATSUMOTO <toudaiman@gmail.com>
2020-05-13 09:45:09 +02:00
Eric Luehrsen
8668e83d51 unbound: update to 1.10.0
cherry-pick: f779ef48cd
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-05-10 23:45:17 -04:00
Kevin Darbyshire-Bryant
2e01dd8382
miniupnpd: make hotplug work again
hotplug scripts are sourced not exec'd so #!/bin/sh /etc/rc.common
doesn't pull in the functions defined in /etc/rc.common thus since
'enabled' isn't defined the following sequence always fails:

enabled miniupnpd || exit 0

Unfortunately sourcing /etc/rc.common doesn't appear to work so come up
with some alternatives.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2020-05-10 14:57:29 -07:00
Aleksander Morgado
1c8e2e0c24 modemmanager: release 1.12.10
https://lists.freedesktop.org/archives/modemmanager-devel/2020-May/007828.html

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit 3feeacc051)
2020-05-10 09:27:27 +02:00
Rosen Penev
cea4fbe30a modemmanager: fix compilation under uClibc-ng
Needs nls.mk as a result of the glib2 change.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 311e2d76bb)
2020-05-10 09:27:12 +02:00
Matthias Schiffer
af5ada4574
wifidog-ng: remove incorrect PKG_BUILD_DIR override
As wifidog-ng builds a kernel module, it must use a PKG_BUILD_DIR in
KERNEL_BUILD_DIR instead of BUILD_DIR, otherwise old build artifacts may
be incorrectly reused when switching between different targets of same
architecture without a full clean.

Instead of fixing up the override, just remove it and instead move the
kernel.mk include above package.mk, so PKG_BUILD_DIR is set up correctly
by default.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit 25babf817f)
2020-05-09 14:04:19 +02:00
Rosen Penev
b8912fe4e3
Merge pull request #12111 from jefferyto/ddns-scripts-backport-fixes-openwrt-19.07
[openwrt-19.07] ddns-scripts: Backport fixes
2020-05-08 14:11:04 -07:00
Jeffery To
b8ce0e9599 ddns-scripts: Increment PKG_RELEASE and internal version number
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-08 15:47:24 +08:00
Zheng Luo
9437c31c86 ddns-scripts: cloudflare.com-v4: Fix grep patterns.
Related commit: 0080bb4b

Use `\s*` instead of ` \?` to match 0 or multiple spaces.

Signed-off-by: Zheng Luo <cherrotluo@gmail.com>
(cherry picked from commit 88b03577c4)
2020-05-08 15:43:55 +08:00
Michael Gray
b7958778ab ddns-scripts: cloudflare.com-v4: Fix success check for new response format
JSON response now has spaces between parameters. Accept this new format and the old one.

Signed-off-by: Michael Gray <michael.gray@lantisproject.com>
(cherry picked from commit 0080bb4bba)
2020-05-08 15:38:17 +08:00
Rosen Penev
98f12a896a ddns-scripts: fix logging bug
Fixes issue #11282, this patch was provided by PaulFertser on the #openwrt
IRC.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit bf68826897)
2020-05-08 15:37:09 +08:00
Rosen Penev
a6a2c8d139 ddns-scripts: use HTTP for IPv6 dyndns URL
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit da57ac0f39)
2020-05-08 15:36:45 +08:00
Rosen Penev
d040b2471c ddns-scripts: remove HTTPS from dyndns URL
HTTPS support is not provided by default.

Also fixed a mistakenly added ].

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit fdfe5a7607)
2020-05-08 15:36:36 +08:00
Rosen Penev
ab7dfd76b6 ddns-scripts: use new DDNS URL for dyndns.org
https://github.com/openwrt/packages/issues/8360

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a0fa14360c)
2020-05-08 15:36:23 +08:00
Rosen Penev
c2943b13f9 ddns-scripts: update ddnss.de response
https://github.com/openwrt/packages/issues/8013

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4128151843)
2020-05-08 15:35:14 +08:00
Paul Tobias
4d050bac76 ddns-scripts: Use https for domains.google.com
Without https the update fails with:

```
 132954       : #> /usr/bin/curl -RsS -o /var/run/ddns/myddns_ipv4.dat --stderr /var/run/ddns/myddns_ipv4.err --noproxy '*' 'http://CENSORED:***PW***@domains.google.com/nic/update?hostname=CENSORED&myip=CENSORED'
 132954       : DDNS Provider answered:
<HTML>
<HEAD>
<TITLE>Moved Temporarily</TITLE>
</HEAD>
<BODY BGCOLOR="#FFFFFF" TEXT="#000000">
<H1>Moved Temporarily</H1>
The document has moved <A HREF="https://domains.google.com/nic/update?hostname=CENSORED&amp;myip=CENSORED">here</A>.
</BODY>
</HTML>
 132954 ERROR : IP update not accepted by DDNS Provider
```

Signed-off-by: Paul Tobias <tobias.pal@gmail.com>
(cherry picked from commit 21f5cdd2fa)
2020-05-08 15:33:29 +08:00
Algin Maduro
4938c148ca nextdns: Update to version 1.5.7
Signed-off-by: Algin Maduro <1469047+mad-it@users.noreply.github.com>
2020-05-07 23:41:42 +00:00
Stan Grishin
2ce218bdce vpn-policy-routing: support phys-dev policies
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-05-04 22:47:47 +00:00
Rosen Penev
7ac37c1a8e
Merge pull request #12070 from stangri/19.07-vpn-policy-routing
[19.07] vpn-policy-routing: bugfix: remove non-ASCII from log; update README
2020-05-03 14:32:53 -07:00
Stan Grishin
9eb229c097 vpn-policy-routing: bugfix: remove non-ASCII from log; update README
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-05-03 19:45:40 +00:00
Stan Grishin
0ae7e11d73 vpnbypass: bugfix: remove non-ASCII from system log; update README
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-05-02 22:35:43 +00:00
Nikos Mavrogiannopoulos
1d5350fb48 openconnect: updated to 8.09
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-05-01 19:38:22 +02:00
Nikos Mavrogiannopoulos
b10a73c9a3 ocserv: updated to 1.0.1
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-05-01 19:37:18 +02:00
Dirk Brenken
e92ac8abee
travelmate: fix captive portal detection
* made captive portal detection more bullet proof, fixes #11990

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1aa4518dfc)
2020-04-29 14:53:53 +02:00
Robby K
28faf9676f freeradius3: Update to 3.0.21
Latest stable release.

Signed-off-by: Robby K <robbyke@gmail.com>
2020-04-28 20:03:51 +02:00
Robby K
cb10971c14 freeradius3: Updated patches/004-fix-target-python-header-detection.patch to remove the rlm_python3 specific changes as it is no longer needed to compile and updated the Makefile to reflect this due to the following change/commit in freeradius:
307678b268

This is in preparation for the 3.0.21 update.

Signed-off-by: Robby K <robbyke@gmail.com>
2020-04-28 20:03:17 +02:00
Robby K
4c9d290938 freeradius3: Refreshed patches/002-disable-session-cache-CVE-2017-9148.patch in preparation for the 3.0.21 update.
Signed-off-by: Robby K <robbyke@gmail.com>
2020-04-28 20:02:37 +02:00
Robby K
fe6f04346f freeradius3: Fix the ordering in the Makefile.
Signed-off-by: Robby K <robbyke@gmail.com>
2020-04-28 20:02:03 +02:00
Florian Eckert
0d795d2028 mwan3: fix whitespace issue
fixes #11965

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 3c34b151f6)
2020-04-28 17:10:32 +02:00
Brian J. Murrell
b7959a8d38 mwan3: Ping IPv6 hosts using address not interface
Pinging IPv6 hosts using an interface as a source specifier seems
troublesome.  See https://bugs.openwrt.org/index.php?do=details&task_id=2897
for more detail.

Use the desired source interface's IP address instead.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
(cherry picked from commit 6721587e8b)
2020-04-28 17:10:32 +02:00
Florian Eckert
2ac0a05d6c mwan3: change license to SPDX compatible identifier
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 6d638c3e23)
2020-04-28 17:10:32 +02:00
Florian Eckert
928ac2a20a mwan3: update version to 2.8.2
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 14dd084662)
2020-04-28 17:10:32 +02:00
Florian Eckert
1ea75a8fa5 mwan3: add httping_ssl option
Till now we could only ping http targets on port 80. With this change by
adding the config boolean config option httping_ssl we could also ping
https ping targets on port 443.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a689e168aa)
2020-04-28 17:10:32 +02:00
Florian Eckert
c2cd3f0997 mwan3: fix variable naming
The variable IPT is not valid at this point. Set the variable usage to IPT4
fixes this issue.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 581d7df844)
2020-04-28 17:10:32 +02:00
Bruno Randolf
aa353e13da pingcheck: Update and add script directories
- Update to version with longer interface names.

- Add /etc/pingcheck/(on|off)line.d/ directories with an example
  script. Closes #11263

Signed-off-by: Bruno Randolf <br1@einfach.org>
2020-04-27 16:15:27 +01:00
Hannu Nyman
6d9bfa5a88
Merge pull request #11948 from dvtirol/rlm_rest-19.07
OpenWrt 19: freeradius3: Support building freeradius3-mod-rest
2020-04-25 09:56:00 +03:00
Tobias Girstmair
742944560c freeradius3: Support building freeradius3-mod-rest
Signed-off-by: Tobias Girstmair <tobias.girstmair@tirol.gv.at>
2020-04-24 21:22:31 +02:00
Dirk Brenken
ad75f69013
travelmate: refine logical interface selection
Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 9eebb43159)
2020-04-24 08:34:46 +02:00
Aleksander Morgado
8b46bb9dfa modemmanager: release 1.12.8
https://lists.freedesktop.org/archives/modemmanager-devel/2020-March/007729.html

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit 052d9274ef)
2020-04-23 06:45:39 +02:00
Aleksander Morgado
9c337b7baf modemmanager: release 1.12.6
https://lists.freedesktop.org/archives/modemmanager-devel/2020-February/007713.html

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit d121e270e8)
2020-04-23 06:45:31 +02:00
Dirk Brenken
a15e7212df
travelmate: release 1.5.4
* add 'status_service' as workaround to init for 19.07
* fix 'wifionice' auto-login script
* fix autologin script matching
* change wifi scanning to logical interface name,
  no longer use the radio device

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 59cca01a23)
2020-04-22 21:08:34 +02:00
Stan Grishin
c725bb1b4c simple-adblock: bugfix: start downloads on cold boot
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-04-22 17:46:07 +00:00
Yousong Zhou
fb64ef9d36 acme: depends on wget-ssl
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit d917d662ae)
2020-04-18 23:38:25 +08:00
Yousong Zhou
ba4c4e681e wget: make the ssl variant provides wget-ssl
This is to address the need for specifying dependency on a wget
implementation with ssl support.

Now we have a game of names for opkg

 1. uclient-fetch: minimal version by openwrt project
 2. wget-nossl: gnu wget w/o ssl support
 3. wget-ssl: for the moment since this commit, gnu wget w/ ssl support
 4. wget: uclient-fetch, wget-nossl, or wget-ssl
 5. gnu-wget: wget-nossl or wget-ssl

By the time we provide some dummy package like uclient-fetch-ssl and
make it also provide wget-ssl, I guess by then we will also need
gnu-wget-ssl...

Ref: https://github.com/openwrt/packages/issues/11534
Ref: https://github.com/openwrt/packages/pull/9941
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 585e4a38fe)
2020-04-18 23:36:43 +08:00
Karel Kočí
406b052f73 wget: do not provide itself
The package wget should not say that it provides itself.

This also make gnu-wget provide general so it is not written in Makefile
twice.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry picked from commit 75f2be7d50)
2020-04-18 23:36:33 +08:00
Dirk Brenken
ea5c497c23
adblock: filter spurious line endings in sources
* prevent processing of spurious line endings
  that confuses (g)awk

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e291d68055)
2020-04-18 15:36:02 +02:00
Josef Schlehofer
b7e94479a6
git: update to version 2.26.1
Fixes: CVE-2020-5260

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 0551a5b030)
2020-04-18 12:21:48 +02:00
Josef Schlehofer
5b38ccf0dd
git: update to version 2.25.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3e0e16ec75)
2020-04-18 12:21:42 +02:00
Josef Schlehofer
cc818e5809
git: update to version 2.25.0
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 12bd25596c)
2020-04-18 12:21:41 +02:00
Rosen Penev
20d95578ee
wavemon: update to 0.9.1
Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 34ec8facc5)
2020-04-17 15:23:00 -07:00
Kevin Darbyshire-Bryant
83ff6c38f2
miniupnpd: fix sh syntax error
Add "use_stun" default to prevent sh: out of range error introduced by
c61614a84

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit 0f1e7d32af)
2020-04-17 15:21:56 -07:00
Rosen Penev
1fe1c80d66
miniupnpd: convert to procd
Massive cleanup of the shell script. Many issues were fixed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c61614a849)
2020-04-17 15:21:35 -07:00
DENG Qingfang
c02c42849e
miniupnpd: update to 2.1.20191006
Removed upstreamed patch:
100-build-on-OpenWrt.patch

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
(cherry picked from commit fcf72ceec4)
2020-04-17 15:21:25 -07:00
Michael Heimpold
175b26d8bd
u2pnpd: update to 0.5
This update fixes #11452 since LFS detection support was added upstream.
While at, update SPDX license tag to latest standard.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 2600255ecb)
2020-04-17 14:50:50 -07:00
Dirk Brenken
696d9bdf20
adblock: fix gawk incompatibility
* fix gawk incompatibility in reporting

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c11aaead91)
2020-04-17 07:02:15 +02:00
Jo-Philipp Wich
84f6fab447 mac-telnet: fix mirror hash
Fixes: 8399121e6 ("mac-telnet: install uci as config file")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 9de7945541)
2020-04-15 09:56:20 +02:00
Jo-Philipp Wich
2633415b27 mac-telnet: install uci as config file
Also mark it as configuration file while being at it.

Fixes: #11846
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 8399121e60)
2020-04-15 09:41:08 +02:00
Jo-Philipp Wich
4418e49a4e mac-telnet: mark uci as conffile
Fixes: 8399121e6 ("mac-telnet: install uci as config file")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 9f231909eb)
2020-04-15 09:41:07 +02:00
Francesco G
d12b473616
transmission: add init file STOP directive
Transmission should stop early on system shutdown to avoid
for example fstab unmount disks when transmission is writing.

Signed-off-by: Francesco G <gfrancesco@users.noreply.github.com>
(cherry picked from commit 4fcc44bc89)
2020-04-14 14:21:30 -07:00
Daniel Golle
54372522f6
transmission: add syscalls to seccomp filter
Syscalls observered when running on arm32. Add them to seccomp rule.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 3724ed3d68)
2020-04-14 14:20:18 -07:00
Richard Yu
10b93cd531
transmission: add service triggers and bump PKG_RELEASE
Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit c6c8ceb0b4)
2020-04-14 14:20:11 -07:00
Richard Yu
0ba4820b83
transmission: update config options
add missing 'peer_id_ttl_hours' and remove 'scrape_paused_torrents'
which is not exist in transmission wiki.

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit 53fd02d62c)
2020-04-14 14:20:04 -07:00
Dirk Brenken
e91c9b8b1c
adblock: fix another reporting bug
* add a final sort step, this fixes dns reporting with
  multiple pcap files as input

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1d8d456a55)
2020-04-13 06:20:13 +02:00
Jeffery To
fc2a591b53 treewide: Use default PKG_BUILD_DIR when possible
This removes lines that set PKG_BUILD_DIR when the set value is no
different from the default value.

Specifically, the line is removed if the assigned value is:

* $(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_VERSION)

  The default PKG_BUILD_DIR was updated[1] to incorporate BUILD_VARIANT
  if it is set, so now this is identical to the default value.

* $(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_SOURCE_SUBDIR)

  if PKG_SOURCE_SUBDIR is set to $(PKG_NAME)-$(PKG_VERSION), making it
  the same as the previous case

* $(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)

  This is the same as the default PKG_BUILD_DIR when there is no
  BUILD_VARIANT.

* $(BUILD_DIR)/[name]-$(PKG_VERSION)

  where [name] is a string that is identical to PKG_NAME

[1]: https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=e545fac8d968864a965edb9e50c6f90940b0a6c9

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 53e1692ae9)
2020-04-12 19:24:15 -07:00
Rosen Penev
3c59551d85 nsd: Update to 4.2.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6ba95fdac4)
2020-04-12 19:19:43 -07:00
Jo-Philipp Wich
4e3d6eca20 nlbwmon: update to latest Git HEAD
34a1887 nfnetlink: disable sequence number checking

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 53c48fae15)
2020-04-11 23:24:18 +02:00
Dirk Brenken
31412a2b4d
adblock: update 4.0.4
* add 'ca-bundle' dependency
* fix a sort bug in report engine
* fix potential bugs in the f_extconf function

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit d6634b611a)
2020-04-11 21:54:51 +02:00
Stan Grishin
210b760d3e https-dns-proxy: bugfix: memory leak
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-04-11 00:25:26 +00:00
Jo-Philipp Wich
4542b5219a nlbwmon: update to latest Git HEAD
e757e06 nfnetlink: allow specifying the socket buffer size
33c77cb nfnetlink: properly handle nl_recvmsgs() failures
95cced5 protocol: Include whitespace when reading names

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit d81d777a0f)
2020-04-11 00:31:18 +02:00
DENG Qingfang
559ff1828d nlbwmon: bump to latest git
e921ca0a Add further commonly used protocols to the protocol file.

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
(cherry picked from commit 5e140462e4)
2020-04-11 00:31:18 +02:00
Richard Yu
45bb9056ae nlbwmon: add procd reload trigger for nlbwmon config
Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit d551758310)
2020-04-11 00:31:18 +02:00
Rosen Penev
6199615960 mosh: use mips16 and remove configure patch
MIPS16 is not needed here.

Removed configure patch and replaced with a configure var.

Removed autoreconf as configure is no longer being patched.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1ead64489b)
2020-04-08 01:39:06 -07:00
Rosen Penev
376d0b76fd mosh: Fix compilation with libcxx
Partial backport of upstream patch.``

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3bfbb7d1db)
2020-04-08 01:38:59 -07:00
Rosen Penev
913f95a4bd mosh: Add protobuf host build dependency
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2fcdd1fb57)
2020-04-08 01:38:50 -07:00
Jakub Tymejczyk
d0bf136301 mosh: add package
Maintainer: Jakub Tymejczyk <jakub@tymejczyk.pl>
Compile tested: ramips, Xiaomi Router 3G, fc54256
Run tested: ramips, Xiaomi Router 3G, 0f54d96

Description:
Mosh is "Remote terminal application that allows roaming, supports
intermittent connectivity, and provides intelligent local echo and line
editing of user keystrokes".

Project's site: https://mosh.org

Makefile and patch taken from: https://github.com/mchwalisz/mosh-openwrt
updated by me

Signed-off-by: Jakub Tymejczyk <jakub@tymejczyk.pl>
(Makefile cleanup and size optimizations)
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5ac5cf0b98)
2020-04-08 01:38:43 -07:00
Dirk Brenken
9e581d5785
Merge pull request #11800 from dibdot/adblock-19.07
[19.07] adblock: release 4.0.3
2020-04-08 09:36:03 +02:00
Dirk Brenken
5e69c99619
adblock: release 4.0.3
* new package dependencies: coreultis-sort and
  a download util with SSL support
* focus on speed (multicore-support) to handle quite big lists
* include more than 40 pre-configured blocklist sources in a compressed
  json file (/etc/adblock/adblock.sources.gz)
* dynamic SafeSearch support for google, bing, duckduckgo,
  yandex, youtube and pixabay (CNAME (bind) & IP (dnsmaq, unbound))
* DNS backend autodetection
* Download Utility autodetection
* Report Interface autodetection
* Easy cron wrapper to set an adblock related auto-timer for
  automatic blocklist updates
* raw domain/blocklist support (e.g. for dnscrypt support)
* re-add restrictive Jaillist support
* rework online doc
* Complete LuCI rewrite (migrated to client side JS)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-04-08 07:02:40 +02:00
Stan Grishin
af1e0a533a simple-adblock: bugfixes: remove escape chars from log, restore from cache on boot
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-04-07 21:55:37 +00:00
Rosen Penev
574a5af56c
Merge pull request #11772 from micmac1/19.07-apache-2443
[19.07] apache: security bump to 2.4.43
2020-04-06 14:08:34 -07:00
Josef Schlehofer
ca555a0549
dnscrypt-proxy2: update to version 2.0.42
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 296a58491b)
2020-04-06 03:09:11 +02:00
Sebastian Kemper
8a4d0b206d apache: security bump to 2.4.43
This minor version bump fixes:

CVE-2020-1934
CVE-2020-1927

Upstream added cross-compile compatibility to apxs, so we can drop a sed
script. Upstream also added the OpenWrt layout, so we can drop our local
copy.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-04-05 21:08:04 +02:00
Christian Lachner
7e48c36cc9 haproxy: Update HAProxy to v2.0.14
- Update haproxy download URL and hash
- Add new patches (see https://www.haproxy.org/bugs/bugs-2.0.14.html)
- This fixes CVE-2020-11100 (http://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=b9cac598021e2b0d4ae2cfecf9825a3469328093)

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2020-04-03 09:32:58 +02:00
Stan Grishin
153892633c vpn-policy-routing: separation between auto/all proto; compatibility with mwan3; README update
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-03-31 23:05:46 +00:00
Stan Grishin
9923323db1 simple-adblock: support multiple dnsmasq instances; rework communication between principal package and luci app
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-03-29 05:13:18 +00:00
Jan Pavlinec
c983b08446 tor: update to version 0.4.2.7 (security fix)
Fixes:
CVE-2020-10592

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-03-26 08:52:55 -10:00
Toke Høiland-Jørgensen
9ba7b1799c acme: Backport two bug fixes from master
This backports the following bug-fix commits from the master branch:

c6b4d7f367 ("acme: Include empty 'dns' config option by default")
983cc995a3 ("acme: Correctly handle domain state dir for ECC certificates")

Fixes #11675.

Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
2020-03-26 16:39:10 +01:00
Yousong Zhou
40c5dd0ba1 openvswitch: depend on IPV6 for intree kmods
Ref: https://github.com/openwrt/packages/issues/11665
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 88dcd09487)
2020-03-26 15:54:43 +08:00
Yousong Zhou
ec0a9d4d01 openvswitch: rework skipping intree kmod build for unsupported kernels
This is a workaround to prevent the whole build from failing because of
the intree kmods are not supported yet by upstream project.

Root cause is that kernel version should not play a part when making
DEPENDS as the generated kconfig was for all targets that may have
different kernel versions.

One less than ideal effect of this change is that for an unsupported
kernel version, people can still select the intree kmod but it won't be
built.  This may contradict expectation if the warning was not noticed
by them

Resolves openwrt/packages#9274

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit a6ec885522)
2020-03-26 15:54:13 +08:00
Sven Roederer
f7308a55fa strongswan: add conffiles for swanctl util
Add a conffiles-section for the /etc/swanctl folder, which is used by the  swanctl util. This will keep the configfiles during an sysupgrade.

Signed-off-by: Sven Roederer <S.Roederer@colvistec.de>
(cherry picked from commit 49f298eb74)
2020-03-25 19:26:11 +02:00
Eneas U de Queiroz
ba76d4274e strongswan: quote 'comment' parameter in Config.in
Newer versions of the kconfig generator require quotes.  Prepare the
package for an eventual update.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 404c113bc2)
2020-03-25 19:26:11 +02:00
Karl Palsson
1cd3f5fdc2 net/pagekitec: support status reporting json file
Allows luci webapp to report health more dynamically.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-03-24 13:18:47 +00:00
Karl Palsson
1688807f18 net/pagekitec: Update to newest version
Drops a patch, adds support for a status file for health tracking.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-03-24 13:18:28 +00:00
Stan Grishin
6abb6bb2a0 https-dns-proxy: support for dnsmasq noresolv option
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-03-20 21:22:39 +00:00
Yousong Zhou
f043afe468 openvswitch: fix PIE build against 4.14 kernel
Reported-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Ref: https://github.com/openwrt/packages/pull/11567
(cherry picked from commit e9d6414437)
2020-03-16 15:30:22 +08:00
Rosen Penev
5746e4a2b3
nfs-kernel-server: Fix compile with uClibc-ng
NS_MAXMSG is not defined.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 732b1c4c0e)
2020-03-14 17:36:20 -07:00
Martin Schiller
17924b1283
xtables-addons: disable ASLR PIE
This package uses ld for linking and therefor does not support the
-specs option.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
(cherry picked from commit 3804006e60)
2020-03-14 02:51:44 +01:00
Rosen Penev
dc524aa2aa
softethervpn: disable PIC
Compilation is broken on AArch64.

Reordered some things for consistency between packages.

Fixed license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b8b4e7e269)
2020-03-09 13:57:45 -07:00
Rosen Penev
381153d597
softethervpn: Fix openssl header patch
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 41fe5a8335)
2020-03-09 13:57:32 -07:00
Rosen Penev
aba0dd8729
softethervpn: Add missing OpenSSL header
Fixes compilation without OpenSSL deprecated APIs as well as
-Werror=implicit-function-declaration.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b80b614f8f)
2020-03-09 13:57:12 -07:00
Philipp Schuster
f09028fcdb
softethervpn: Update to rtm version 4.29-9680
Update SoftEther VPN to the latest rtm version 4.29-9680

Compile tested: Atheros AR7xxx/AR9xxx, TP-LINK Archer C7 v2, 18.06.4

Signed-off-by: Philipp Schuster <philippschuster@gmx.com>
(rebased and refreshed patches).
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 34db38520b)
2020-03-09 13:56:40 -07:00
Rosen Penev
b546ff127c
stubby: fix init script
The configuration file was not being generated.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b95699c647)
2020-03-09 13:55:24 -07:00
Rosen Penev
c5219c8af3
stubby: makefile and init script cleanup
Reordered Makefile according to
https://github.com/openwrt/packages/pull/9399#issuecomment-508727872 .

Added PKG_BUILD_PARALLEL for faster compilation.

Remove duplicated conffiles section.

Install /etc/config/stubby using INSTALL_CONF, as is done elsewhere

Run init script through shellcheck and clean it up.

Added chmod for the stubby config file, to fix a LuCI issue.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit eaf5225323)
2020-03-09 13:55:23 -07:00
W. van den Akker
62d9ba9a02
Shorewall6: Bump to 5.2.3.7.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-03-07 10:40:39 +01:00
W. van den Akker
e14ee24803
Shorewall: Bump to 5.2.3.7.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-03-07 10:40:18 +01:00
W. van den Akker
84cca11fa0
Shorewall6-lite: Bump to 5.2.3.7.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-03-07 10:39:58 +01:00
W. van den Akker
803ab2f445
Shorewall-lite: Bump to 5.2.3.7.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-03-07 10:39:35 +01:00
W. van den Akker
7b67a0b91d
Shorewall-core: Bump to 5.2.3.7.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-03-07 10:39:17 +01:00
Etienne Champetier
c81415a803
Merge pull request #11501 from Bloup1net/phantap19.07
phantap: add to 19.07
2020-03-04 20:25:07 -05:00
Jo-Philipp Wich
b97f33e026 cgi-io: fix compilation against uClibc
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit ed965cf16f)
2020-03-04 09:52:49 +01:00
Jo-Philipp Wich
68aa303efb cgi-io: use O_TMPFILE for uploads and attempt to directly link target file
Create an anonymous inode in /tmp using O_TMPFILE and attempt to link the
file in place using linkat(). Only fall back to the old file copy when
linking the tempfile fails.

Avoids double memory use if both the temporary upload file and the
destination file are located in /tmp.

Ref: https://github.com/openwrt/luci/issues/3654
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 4f4a7e9532)
2020-03-04 09:52:49 +01:00
Jo-Philipp Wich
7f00eebab0 cgi-io: use dynamic memory for post decoding, support proc files
Allocate dynamic buffer memory for decoding post data and allow post
requsts up to 128KB compared to the previos 1KB limit.

Also support downloading /proc and /sys files by falling back to
chunked transfer encoding when the file size cannot be determined.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 39087eba18)
2020-03-04 09:52:49 +01:00
Diana Dragusin
801a908a17 phantap: add to 19.07
Signed-off-by: Diana Dragusin <diana.dragusin@nccgroup.com>
2020-03-03 03:42:33 -08:00
Karl Palsson
abdbeb350e mosquitto: bump to 1.6.9
Full changelog: https://mosquitto.org/blog/2020/02/version-1-6-9-released/

Nothing of particular relevant to OpenWrt, just general fixes.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2020-03-02 10:04:06 +00:00
Karl Palsson
99efce0cd2 pagekite: add simple websockets and update syntax
Syntax now matches preferred upstream style.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-02-26 11:45:08 +00:00
Karl Palsson
42c7a7adbe pagekite: avoid redundant information in syslog
Patch from upstream: 7b45878185

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-02-26 11:45:08 +00:00
Karl Palsson
13e8c6ffed pagekite: bump to v0.91.200218
pings the front ends less aggressively, reducing cpu usage on the host.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-02-26 11:45:08 +00:00
Nikos Mavrogiannopoulos
c3ff03a34c ocserv: updated to 0.12.6
Fixes: #11174

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-02-26 06:07:40 +01:00
Yousong Zhou
61970ece51 xl2tpd: fix building failure caused by pfc
Fixes openwrt/packages#10270

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 0412c20f1b)
2020-02-25 11:57:24 +08:00
Yousong Zhou
7fe2073756 xl2tpd: bump to version 1.3.15
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Ref: https://github.com/openwrt/packages/issues/11418
(cherry picked from commit 620ba386b4)
2020-02-25 11:57:24 +08:00
Marcos Del Sol Vives
2c0a307eeb acme: update to 2.8.5
Signed-off-by: Marcos Del Sol Vives <marcos@orca.pet>
[ fix for 19.07 branch ]
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2020-02-19 15:40:52 +01:00
Rosen Penev
e29cc586f2
Merge pull request #11381 from wvdakker/openwrt-19.07
[Openwrt 19.07] Shorewall: Bump to 5.2.3.6
2020-02-18 14:50:45 -08:00
W. van den Akker
1c7b7cfdfa
Shorewall6: Bump to version 5.2.3.6
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-02-18 16:36:26 +01:00
W. van den Akker
481e63febb
Shorewall: Bump to version 5.2.3.6
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-02-18 16:36:09 +01:00
W. van den Akker
4f0e5c49d3
Shorewall6-lite: Bump to version 5.2.3.6
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-02-18 16:35:50 +01:00
W. van den Akker
7c8f5fd70b
Shorewall-lite: Bump to version 5.2.3.6
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-02-18 16:35:33 +01:00
W. van den Akker
1fbf3e1795
Shorewall-core: Bump to version 5.2.3.6
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-02-18 16:34:58 +01:00
Christian Lachner
2f5b209873 haproxy: Update HAProxy to v2.0.13
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2020-02-17 11:00:48 +01:00
Rosen Penev
78d7c8aef5
knot: Do not try to build under ARC
liburcu does not support ARC.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5ec47ca837)
2020-02-15 22:07:30 -08:00
Rosen Penev
8640d243ee
Merge pull request #11296 from Andy2244/samba4-update-4.11.6-(19.07)
[19.07] samba4: update to 4.11.6, add new UCI option
2020-02-10 13:29:10 -08:00
Andy Walsh
f5be481a4f ksmbd: update to 3.1.3, ksmbd-tools: update to 3.2.1, add smb1 support, add avahi support package
* ksmbd: update to 3.1.3
* ksmbd-tools: update to 3.2.1
* add new package build option "KSMBD_SMB_INSECURE_SERVER"
* enable smb1 support to kmod by default
* add new UCI option "allow_legacy_protocols" to section [globals]
* add avahi support package "ksmbd-avahi-service"

* ksmbd: release 3.1.3 version
* ksmbd: lock SMB2_QUERY_INFO_HE request with read lock
* ksmbd: fix potential racy between query_dir and ksmbd_vfs_empty_dir
* ksmbd: fix racy issue between deleting file and checking empty directory
* ksmbd: don't register interface which are member of bridge
* ksmbd: SO_REUSEADDR is no property of tcp_setsockopt
* ksmbd: release 3.1.2 version
* ksmbd: fix read caching buffer size as max_read_size
* ksmbd: fix the infinite loop of handling FSCTL_QUERY_ALLOCATED_RANGES
* ksmbd: use compounding for smb2 flush
* ksmbd: downgrade error message to debug in get_file_all_info
* ksmbd: rename usmbd to ksmbd.mountd in trvis-ci
* ksmbd: release 3.1.1 version
* ksmbd: does not work if ipv6 module is not loaded or compiled in
* ksmbd: capsule ifdef CONFIG_SMB_INSECURE_SERVER with smb1 codes
* ksmbd: capsule ifdef CONFIG_SMB_INSECURE_SERVER with smb1 codes
* ksmbd: update README file

* ksmbd-tools: release 3.2.1 version
* ksmbd-tools: revert "remove glib2.0 dependancy" patch
* ksmbd-tools: release 3.2.0 version
* ksmbd-tools: update how to restart ksmbd in README file
* Revert "ksmbd-tools: disable tbuf and rbuf caching by default"
* ksmbd-tools: disable tbuf and rbuf caching by default
* ksmbd-tools: replace usmbd prefix with ksmbd prefix
* ksmbd-tools: update README file
* ksmbd-tools: fix warning ignoring return value of 'fread'
* ksmbd-tools: downgrade unsupported command print to debug
* ksmbd-tools: remove GLIB_LIBS in Makefiles
* ksmbd-tools: rename usmbd, smbuseradd, smbshareadd to ksmbd.mountd, ksmbd.adduser and ksmbd.addshare
* ksmbd-tools: fix null pointer dereference in _list_remove
* ksmbd-tools: fix the sanity check fails depending on the password length
* ksmbd-tools: fix build error(not found glib.h)
* ksmbd-tools: remove glib-2.0 dependancy
* ksmbd-tools: update README to add libglib2.0-dev for Ubuntu preprequisite packages

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-02-10 15:02:51 +01:00