Andy Walsh
97e55a28b3
samba4: update to 4.13.3, enbale io_uring
...
* update to 4.13.3
* enable vfs io_uring module by default, if kernel supports it
* fix for possible exploit openwrt/packages#13758
* sanetize all external template/config inputs
* fix some shellcheck warnings
* remove old aio modules/deps
Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-01-08 17:28:36 +01:00
Rosen Penev
8ede7162e5
Merge pull request #14415 from linosgian/openssh_add_fido2_support
...
openssh: Add FIDO2 hardware token support
2021-01-08 03:33:34 -08:00
Linos Giannopoulos
855db864b0
openssh: Add FIDO2 hardware token support
...
Version 8.2[0] added support for two new key types: "ecdsa-sk" and
"ed25519-sk". These two type enable the usage of hardware tokens that
implement the FIDO (or FIDO2) standard, as an authentication method for
SSH.
Since we're already on version 8.4 all we need to do is to explicitly enable
the support for hardware keys when compiling OpenSSH and add all the
missing dependencies OpenSSH requires.
OpenSSH depends on libfido2[1], to communicate with the FIDO devices
over USB. In turn, libfido2 depends on libcbor, a C implementation of
the CBOR protocol[2] and OpenSSL.
[0]: https://lwn.net/Articles/812537/
[1]: https://github.com/Yubico/libfido2
[2]: tools.ietf.org/html/rfc7049
Signed-off-by: Linos Giannopoulos <linosgian00@gmail.com>
2021-01-07 00:53:05 +02:00
Daniel Golle
9ea8cccd35
transmission: add syscalls needed on PPC to seccomp rules
...
Add fadvise64_64 and fchmod syscalls needed on PowerPC platforms to
seccomp rules of transmission-daemon.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-01-06 22:17:40 +00:00
Stan Grishin
e948d41622
https-dns-proxy: update to 2020-11-25: add HTTP auth and DSCP codepoint support
...
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-01-06 11:48:07 -10:00
Rosen Penev
b4762c7e6f
Merge pull request #14063 from peter-stadler/etebase
...
[RFC] etebase: add package
2021-01-06 13:43:27 -08:00
Rosen Penev
67bd007f26
Merge pull request #13405 from peter-stadler/nginx-util-uci
...
[RFC] nginx-util: use UCI for server configuration
2021-01-06 13:43:12 -08:00
Rosen Penev
fbdab5bb08
Merge pull request #14299 from wulfy23/nftqosinit
...
nft-qos: silence buildsystem errors
2021-01-05 17:30:27 -08:00
Rosen Penev
e29ef2fc57
Merge pull request #14416 from dobo90/adguardhome_v0.104.3
...
[v2] adguardhome: upstream upgrade to v0.104.3
2021-01-05 17:16:26 -08:00
Rosen Penev
6b1f0439e8
Merge pull request #14362 from neheb/hwd
...
hwdata: introduce package and use
2021-01-03 15:17:59 -08:00
Dobroslaw Kijowski
85f8fd69bc
adguardhome: upstream upgrade to v0.104.3
...
Full changelog available at:
* https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.104.2
* https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.104.3
Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
2021-01-03 13:42:31 +01:00
Etienne Champetier
9ef2e619b9
Merge pull request #14413 from aaronjg/bugfix/mwan3-ipv6-regression
...
mwan3: fix regression in ipv6 routing tables
2021-01-03 05:47:51 -05:00
Aaron Goodman
267b65ad9f
mwan3: fix regression in ipv6 routing tables
...
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2021-01-02 21:37:37 -05:00
Maxim Storchak
40555eebf9
rsync: enable iconv if NLS support is enabled globally
...
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2021-01-02 22:52:52 +02:00
Rosen Penev
33cc6d0990
Merge pull request #14402 from wongsyrone/update-miniupnpc
...
net/miniupnpc: update to 2.2.1
2021-01-01 11:28:32 -08:00
Syrone Wong
3230f67d3a
net/miniupnpc: update to 2.2.1
...
Signed-off-by: Syrone Wong <wong.syrone@gmail.com>
2021-01-01 22:16:42 +08:00
Syrone Wong
5eb01b5a3e
net/miniupnpd: update to 2.2.1
...
Signed-off-by: Syrone Wong <wong.syrone@gmail.com>
2021-01-01 22:15:37 +08:00
Nikos Mavrogiannopoulos
60e7eee859
Merge pull request #14400 from FrederickGeek8/fix-14287
...
openconnect: Fix secondary password script overwriting primary
2021-01-01 11:51:56 +01:00
Frederick Morlock
5d85f5af63
openconnect: Fix secondary password script overwriting primary
...
When specifying a secondary password script, the output should be appended to the temporary password file and shouldn't overwrite it. If you refer to the case where there is a static secondary password, you can see that the secondary password is appended. Without this fix, only the secondary password is passed to the `openconnect` session.
Signed-off-by: Frederick Morlock <FrederickGeek8@gmail.com>
2021-01-01 17:18:27 +08:00
Rosen Penev
2dd17b0a79
Merge pull request #14342 from neheb/transmis
...
transmission: do not use wolfSSL
2020-12-31 22:21:40 -08:00
Rosen Penev
b318690cfe
gitolite: change symlink from absolute to relative
...
Fixes bad symlink under InstallDev.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-31 18:10:27 -08:00
Rosen Penev
044b05fc04
transmission: do not use wolfSSL
...
There's some kind of crash internally in wolfSSL. It doesn't seem like
anyone knows how to fix it. Just disable it for now.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-31 18:05:03 -08:00
Rosen Penev
f84c7960f3
freeradius3: add missing libbsd dependency to glibc
...
Fixes packages generation.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-31 15:38:32 -08:00
Etienne Champetier
423c276409
Merge pull request #14388 from Bloup1net/phantapresolv
...
phantap: Update to latest commit
2020-12-31 15:11:04 -05:00
Diana Dragusin
ba6453889c
phantap: Update to latest commit
...
a717723 Get resolvfile from configuration
Signed-off-by: Diana Dragusin <diana.dragusin@nccgroup.com>
2020-12-31 11:38:50 -05:00
Toke Høiland-Jørgensen
476e77be6b
sqm-scripts: Update PKG_MIRROR_HASH
...
Forgot to update the MIRROR_HASH
Fixes: 2c652128c5
: ("sqm-scripts: Bump to v1.5.0")
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2020-12-31 17:28:15 +01:00
Toke Høiland-Jørgensen
2c652128c5
sqm-scripts: Bump to v1.5.0
...
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2020-12-31 16:18:15 +01:00
Rosen Penev
38913265b7
Merge pull request #14377 from neheb/bfd
...
bfdd: fix compilation with glibc
2020-12-31 00:20:10 -08:00
Rosen Penev
34a3e9bc09
Merge pull request #14374 from neheb/ksmbdt
...
ksmbd-tools: fix compilation with glibc
2020-12-30 17:35:24 -08:00
Rosen Penev
c23556c8b0
Merge pull request #14375 from neheb/c
...
coova-chili: fix compilation with glibc
2020-12-30 17:24:38 -08:00
Rosen Penev
9a7c519f6e
Merge pull request #14379 from neheb/atft
...
atftp: fix compilation with glibc
2020-12-30 16:57:51 -08:00
Rosen Penev
b90ce88d03
bfdd: fix compilation with glibc
...
Remove uClibc-ng patch as it's not in the tree anymore.
Also remove the _GNU_SOURCE CFLAG for the same reason.
Refreshed patches.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-30 16:53:53 -08:00
Rosen Penev
9ac737ac80
atftp: fix compilation with glibc
...
It's defining two functions twice for some reason.
Refreshed patches.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-30 16:37:57 -08:00
Rosen Penev
687dc0cc95
coova-chili: fix compilation with glibc
...
Disable Werror as it errors on pointless stuff.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-30 16:34:30 -08:00
Rosen Penev
5eeb8f8a79
ksmbd-tools: fix compilation with glibc
...
Needs to be linked to lpthread.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-30 16:32:58 -08:00
Nick Hainke
2922da5fe6
dawn: bump to latest version
...
Includes:
CMakeList: fix compiling with glibc
Signed-off-by: Nick Hainke <vincent@systemli.org>
2020-12-31 00:14:25 +01:00
Dirk Brenken
33ed1eff57
banip: DHCPv6 bugfix
...
* ignore local DHCPv6 related and local icmpv6 traffic in banIP chain
Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-12-30 20:02:40 +01:00
Rosen Penev
71cb006920
usbip: use new usbids package
...
It's more consistent since it installs to the same place.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-29 21:16:04 -08:00
Rosen Penev
eb4a86a1bc
Merge pull request #14345 from lucize/frrup
...
frr: update stable to 2020-12-22
2020-12-28 18:07:31 -08:00
Glenn Strauss
a49dec8a5f
lighttpd: update to lighttpd 1.4.58 release hash
...
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2020-12-27 23:54:45 -05:00
Lucian Cristian
51a481ff94
frr: update stable to 2020-12-22
...
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-12-27 22:33:34 +02:00
Rosen Penev
3351568e9c
Merge pull request #14309 from neheb/squid
...
squid: update to 4.13
2020-12-24 19:18:04 -08:00
Rosen Penev
740740d219
Merge pull request #14318 from zhanhb/wget
...
wget: fix build
2020-12-23 14:04:34 -08:00
Thiago de Arruda Padilha
864092e073
adblock: fix when PROCD_RELOAD_DELAY is set
...
Move the "PROCD_RELOAD_DELAY" line to after the "delay" variable is set.
Signed-off-by: Thiago de Arruda Padilha <tpadilha84@gmail.com>
2020-12-23 16:59:32 -03:00
Huangbin Zhan
422360510c
wget: fix build
...
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2020-12-23 23:07:31 +08:00
Rosen Penev
f73287dec1
squid: update to 4.13
...
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-22 19:23:19 -08:00
Rosen Penev
87177eef75
tcpreplay: fix compilation with Arch Linux
...
It tries to link to host libraries for some reason. Add autoreconf to
fix. Also remove redundant prefixes.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-22 19:01:12 -08:00
Karel Kočí
0663d8c2f8
wget: rename wget to wget-ssl
...
The idea behind this is to prevent confusion between "virtual" package
wget and real one. Wget is provided by not just wget packages but also
by uclient-fetch so technically it is better to threat wget as virtual
package.
Signed-off-by: Karel Kočí <karel.koci@nic.cz>
2020-12-22 17:58:30 +01:00
Imran Khan
f88485f572
nft-qos: silence buildsystem errors
...
add IPKG_INSTROOT to init script to
silence build system errors
Signed-off-by: Imran Khan <gururug@gmail.com>
2020-12-23 02:21:09 +11:00
Florian Eckert
1b1fa35436
Merge pull request #14292 from TDT-AG/pr/20201221-mwan3
...
mwan3: minor fixes
2020-12-22 11:55:50 +01:00