Commit graph

6114 commits

Author SHA1 Message Date
Glenn Strauss
2d35019d6b lighttpd: update to lighttpd 1.4.55 release hash
update lighttpd in openwrt-19.07 branch from lighttpd 1.4.54 to 1.4.55

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2021-10-06 00:16:45 -07:00
Rosen Penev
dd89b28442
Merge pull request #16569 from turris-cz/19.07/tor-0.4.4.9
tor: update to version 0.4.4.9
2021-09-18 15:05:14 -07:00
Josef Schlehofer
8c3d6a2e17
Merge pull request #16196 from miska/snort3-19.07
net/snort3: Include default configs and snort2lua
2021-09-17 16:20:57 +02:00
Stijn Tintel
b101f744c2 tcpreplay: avoid host lib leakage
On hosts that have pcapnav-config installed, there is host lib leakage.
From config.log:

LNAVLIB='-L/usr/lib64 -lpcapnav -lpcap'
LNAV_CFLAGS='-I/usr/include'

Fix this by disabling pcapnav-config, which isn't available anyway.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit e4b8fec79c)
2021-09-10 13:12:34 -07:00
Alexandru Ardelean
be17f97265 tcpreplay: bump to version 4.3.4
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 7436d944fa)
2021-09-10 13:12:34 -07:00
Rosen Penev
6e4e0d5e9d tcpreplay: add libdnet support
On Arch Linux, tcpreplay is picking up the host dnet-config and adding
OS paths, thereby breaking compilation. The easiest solution is to add
libdnet support as the previous commit fixes dnet-config on OpenWrt.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f9f216a066)
2021-09-10 13:12:34 -07:00
Rosen Penev
e7167f4702 tcpreplay: fix compilation with Arch Linux
It tries to link to host libraries for some reason. Add autoreconf to
fix. Also remove redundant prefixes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 87177eef75)
2021-09-10 13:12:34 -07:00
Alexandru Ardelean
668aa95dfb tcpreplay: bump to version 4.3.3
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit c7153f22a7)
2021-09-10 13:12:34 -07:00
Olivier Poitrey
02ce5303d5 nextdns: Update to version 1.37.2
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-09-09 12:48:00 -04:00
Jo-Philipp Wich
4b79a343fe
Merge pull request #16581 from jow-/openwrt-19.07
cgi-io: update to latest Git HEAD
2021-09-08 22:22:35 +02:00
Josef Schlehofer
7a7b8a257b bind: update to version 9.16.20
1. Fixes: CVE-2021-25218

2. Add patch to bump API version, which was forgotten by BIND devs
Related to https://kb.isc.org/docs/map-zone-format-incompatibility-in-bind-9-16-20-and-9-17-17
Pointed out in https://www.openwall.com/lists/oss-security/2021/08/20/2

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-09-08 13:19:09 -07:00
Jo-Philipp Wich
d8ef698a9f cgi-io: update to latest Git HEAD
98cef9d Retry splice() syscall on EINTR

Fixes: https://github.com/openwrt/luci/issues/5342
Fixes: https://bugs.openwrt.org/index.php?do=details&task_id=4006
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit db8e0fdea4)
2021-09-08 22:13:08 +02:00
Petr Štetiar
6c5169b395 cgi-io: update to version 2020-10-27
Contains following list of changes:

 ab4c3471b261 tests: add cram based unit tests
 7b4e3241e1bd tests: add cgi-io built with clang sanitizers
 21831f45d16d Disable session ACLs during unit testing
 2f525417b5df Add initial GitLab CI support
 57f1c4f18cb6 Add .gitignore
 09f9ac5066ee Fix off-by-one in postdecode_fields
 ed8ce0d5d28b Add fuzzing of utility functions
 a61581819800 Add fuzzing of multipart_parser
 6b0615b728ed Refactor utility functions into static library
 a0ed2c9a7a72 Fix clang compiler errors
 232659da19a4 Fix possible NULL dereference
 8e5719b37a67 Fix warnings reported by clang-10 static analyzer
 b99aa8a64cca Remove Makefile

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 351e4e01c5)
2021-09-08 22:13:08 +02:00
Petr Štetiar
daaacfd24e cgi-io: move into out of tree project
No functional changes, just moved the sources into out of tree
project[1] so it's going to be easier to do CI with unit testing,
fuzzing etc.

1. https://git.openwrt.org/?p=project/cgi-io.git;a=shortlog

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 08be327942)
2021-09-08 22:13:08 +02:00
Christian Lachner
d5a7aa1861 haproxy: Update HAProxy to v2.0.25
- This update fixes CVE-2021-40346; see: https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-09-08 07:33:31 -07:00
Josef Schlehofer
dd6be653dd
tor: update to version 0.4.4.9
Fixes:
- CVE-2021-34548
- CVE-2021-34549
- CVE-2021-34550

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-09-08 11:54:19 +02:00
Rosen Penev
508c15acb7
irssi: update to 1.2.3
Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 752656c6be)
2021-09-08 11:44:16 +02:00
Olivier Poitrey
93cfd1679a nextdns: Update to version 1.37.1
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-09-07 14:57:58 -07:00
Olivier Poitrey
6f3cd160d2 nextdns: Update to version 1.37.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-09-07 11:31:27 -07:00
Dennis Schüsselbauer
72f35e712e acme: Fix uhttpd restart to load new certificates
Fixes issue #16256

Bump PKG_RELEASE to 4.

Signed-off-by: Dennis Schüsselbauer <scde@users.noreply.github.com>

(cherry picked from commit d69534751e)
2021-09-06 14:29:41 -07:00
Eneas U de Queiroz
5bd73795e8
dnsdist: fix default SSL lib spelling
This is cosmetic only, since openssl is the first one being defined, but
it avoids a warning in scripts/config, after upgrading to kconfig-v5.6:
tmp/.config-package.in:102839:warning: choice default symbol
'DNSDIST_OPENSSSL' is not contained in the choice

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit dbe11776ed)
2021-09-02 12:12:58 +02:00
Rosen Penev
4006aeabad
Merge pull request #16518 from jefferyto/golang-packages-remove-strip-ldflags-openwrt-19.07
[openwrt-19.07] treewide: Remove GO_PKG_LDFLAGS for stripping binaries
2021-09-01 17:16:20 -07:00
Jeffery To
1dd040f9ca
treewide: Remove GO_PKG_LDFLAGS for stripping binaries
The "-s -w" flags in GO_PKG_LDFLAGS tells the Go compiler to strip the
binaries it produces. Since the default Go package build process will
strip binaries when CONFIG_USE_STRIP or CONFIG_USE_SSTRIP are selected,
these flags are unnecessary.

When CONFIG_NO_STRIP is selected, these flags override the user's
intention of building unstripped packages.

This removes these flags for all relevant packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-09-02 06:36:01 +08:00
Peter Stadler
82a3613ec8 nginx: add PROVIDES nginx-ssl to nginx-all-module
fix issue when installing luci-ssl-nginx

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2021-09-01 14:25:17 -07:00
Josef Schlehofer
b35c3984e1
Revert "net/miniupnpd: ext_ip_reserved_ignore support"
This patch is causing several issues [1], which then were reported to
upstream [2] and it was not accepted by upstream [3]. This results that
nobody maintain this custom patch and it is not useful as it is changing
addr_is_reserved behavior.

[1] https://github.com/openwrt/packages/issues/15258
[2] https://github.com/miniupnp/miniupnp/issues/542
[3] https://github.com/miniupnp/miniupnp/pull/511

This reverts commit b76aa99194.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 107f3376b5)
2021-08-28 09:05:30 +02:00
Rosen Penev
857e98768f
Merge pull request #16410 from paper42/git-2.26.3-19
[19.07] git: update to 2.26.3
2021-08-27 01:05:32 -07:00
Olivier Poitrey
9d3ad065b2 nextdns: Update to version 1.36.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-08-24 23:40:31 +00:00
Etienne Champetier
b03fe54e0e https-dns-proxy: patch CMakeList.txt to use OpenWrt CFLAGS
This fixes compilation issues with ASLR PIE enabled

We were compiling with '-g -DDEBUG'

https-dns-proxy_2021-07-29-*_arm_cortex-a9_vfpv3-d16.ipk
shrink from 19514 to 19095

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 374e1dd56e)
2021-08-20 21:04:03 -04:00
Michal Vasilek
47e2ef579e
git: update to 2.26.3
* fixes CVE-2021-21300

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-08-20 11:29:43 +02:00
Stan Grishin
6c12530346
Merge pull request #16254 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: update to 2021-07-29-1
2021-08-03 22:14:19 -07:00
Jan Hak
5051c4bb00
knot: update to version 3.0.8
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 5f374929cf)
2021-08-02 05:56:08 +02:00
Jan Hak
e0f5b4e289
knot: update to version 3.0.7
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 8d66f49bae)
2021-08-02 05:56:08 +02:00
Jan Hak
de894d37a6
knot: update to version 3.0.6
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit d578f60818)
2021-08-02 05:56:08 +02:00
Jan Hak
0c3d97bf57
knot: update to version 3.0.5
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit d92a2cd21b)
2021-08-02 05:56:08 +02:00
Stan Grishin
210e3d9167 https-dns-proxy: update to 2021-07-29-01
* update binary to the latest commit (2021-07-29) to fix #16222 and #16239
* add hotplug.d/iface file and update Makefile to install it
* use Cloudflare's and Google's bootstrap DNS if bootstrap DNS is missing
* minor improvements in append_bool function
* add append_counter function for verbosity setting
* add append_bootstrap function (and supporting functions) to parse/sanitize bootstrap setting
* move firewall array from 'main' instance to the first proxy instance
* delete useless 'main' instace

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-07-30 13:11:58 +00:00
Olivier Poitrey
a0e39ca02c nextdns: Update to version 1.35.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-07-30 12:40:19 +03:00
Dirk Brenken
92abb99170
adblock: bugfix 4.0.7-9
* fix regex to prepare google safesearch domains

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-07-28 08:01:44 +02:00
Michal Hrusecky
f31271fed3
net/snort3: Include default configs and snort2lua
Include default configuration files to have something to start from.
Also include snort2lua to help convert snort2 rules to snort3 to also
help with bootstrapping the configuration.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2021-07-22 14:17:54 +02:00
George Iv
242dbcebaf yggdrasil: bump to 0.4.0
- Bump yggdrasil-go version to v0.4.0
- Update ygguci tool for compatibility with the new yggdrasil-go version
- Yggdrasil's config file is now generated in a separate command before running the daemon

Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
(cherry picked from commit e135c4c867)
2021-07-20 20:57:40 -07:00
Stan Grishin
df79c0614c vpnbypass: updates to 1.3.2-1
bugfix: domain names bypass
rename config file
update Makefile
updated README link
updated shellcheck compatibility
support for 21.02.0-rc2 and later
updated code for interface triggers
add newline to test.sh

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-07-20 21:23:49 +00:00
Josef Schlehofer
3f432b66ae
Merge pull request #16095 from turris-cz/bind-update
bind: update to version 9.16.18
2021-07-16 16:59:08 +02:00
Jeffery To
a673a23268
addrwatch: Various fixes
Makefile changes include:

* Include syslog output module

* Move main binary (back) to /usr/sbin, as it is system administration
  related and requires superuser privileges

New patches:

* 003-add-space-for-null-byte.patch - from
  374cfd2cab

* 004-more-specific-library-linking.patch - from
  27b57d9da3

* 005-use-c99-format-macro-constants.patch - from
  https://github.com/fln/addrwatch/pull/28

Init script changes include:

* Fix command-line option names and format (from
  https://forum.openwrt.org/t/cant-start-addrwatch-service/60499/3)

* Always use the --quiet command-line option, as the procd instance is
  not configured to capture stdout/stderr

* Change the syslog config option to start the syslog output module

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-07-15 20:40:13 +08:00
Jeffery To
1f9aa31eab
addrwatch: fix broken conffiles
This is 704e733e51 but applied for
addrwatch only.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-07-15 16:05:33 +08:00
Rosen Penev
531d59dbc7
addrwatch: update to 1.0.2
Switch to standard tarball to avoid autoreconfig.

Fix license information.

Add PKG_BUILD_PARALLEL for faster compilation.

Add PKG_INSTALL for consistency with other packages.

Removed upstreamed patches. Refresh remaining one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f1a7d509b5)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-07-15 16:03:42 +08:00
Rosen Penev
ce1781155d
addrwatch: Add missing limits header for PATH_MAX
Fixes compilation on musl.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8003eea2b9)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-07-15 16:03:28 +08:00
Rosen Penev
d617e7b143
Merge pull request #16062 from miska/snort3
snort3: Backport update to the stable version
2021-07-14 19:23:31 -07:00
James Vorderbruggen
192aea109a yggdrasil: allow HTTPS connections
Signed-off-by: James Vorderbruggen <jamesvorder@gmail.com>
(cherry picked from commit ffff347396)
2021-07-14 12:33:34 -07:00
George Iv
7248e1b957 yggdrasil: bump to 0.3.16
Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
(cherry picked from commit 76b642b50f)
2021-07-14 12:33:34 -07:00
George Iv
fe9b2579f9 yggdrasil: bump to 0.3.15
Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
(cherry picked from commit 6b2b730181)
2021-07-14 12:33:34 -07:00
William Fleurant
8687d79f84 yggdrasil: Ygg-over-ygg bugfix
Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry picked from commit 1d78e7dc31)
2021-07-14 12:32:59 -07:00