Commit graph

9108 commits

Author SHA1 Message Date
Philip Prindeville
b8f1dcd22f
Merge pull request #17718 from pprindeville/isc-dhcp-fix-srvhost-rr
isc-dhcp: properly anchor SRV RR's
2022-01-28 22:33:24 -07:00
Philip Prindeville
93c9a1cb7a isc-dhcp: properly anchor SRV RR's
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-01-28 21:32:53 -07:00
Josef Schlehofer
dcedbe8027 prosody: update to version 0.11.13
Fixes CVEs:
- CVE-2022-0217
- CVE-2021-37601
- CVE-2021-32918
- CVE-2021-32920
- CVE-2021-32921
- CVE-2021-32917
- CVE-2021-32919

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-01-28 12:10:09 -08:00
Andy Walsh
7730a65d30 samba4: update to 4.14.11; fix AD_DC build
* update to 4.14.11
* fix AD_DC build
* add vfs_widelinks to defaults
* refresh patches
* fixes: #16697, #17692
* fixes: CVE-2016-2124, CVE-2020-25717, CVE-2020-25718, CVE-2020-25719, CVE-2020-25721, CVE-2020-25722, CVE-2021-3738, CVE-2021-23192

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2022-01-28 12:09:09 -08:00
Sergey V. Lobanov
768a832df1 isc-dhcp: fix build on macos
isc-dhcp uses system ar tool so build fails on Darwin build host.
Embedded bind lib uses system ar and ranlib tools and fails on Darwin

This patch explicitly specifies ar and ranlib tools for target build

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-28 12:08:27 -08:00
Josef Schlehofer
98332fea15
Merge pull request #17713 from turris-cz/clamav-update
clamav: update to version 0.104.2
2022-01-28 17:34:48 +01:00
Josef Schlehofer
eddbb64bc9
clamav: update to version 0.104.2
Backported upstream pending pull request to fix following error:

CMake Error at /foo/staging_dir/host/share/cmake-3.19/Modules/FindPackageHandleStandardArgs.cmake:218 (message):
  Could NOT find CURSES (missing: CURSES_LIBRARY)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-01-28 15:22:32 +01:00
Kerma Gérald
d2fd1f8346 crowdsec: update from latest upstream release 1.3.0
Changes (from 1.2.3):
https://github.com/crowdsecurity/crowdsec/compare/v1.2.3...v1.3.0

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-27 17:43:16 -08:00
Florian Eckert
64da77a4fd
Merge pull request #17646 from LugicoHDPlayer/feature-ddns-scripts-one-com
ddns-scripts: add one.com provider
2022-01-27 16:06:09 +01:00
Luca Conte
60047cdce1 ddns-scripts: add one.com provider
Signed-off-by: Luca Conte <main@lugico.de>
2022-01-27 13:59:42 +01:00
Hannu Nyman
569f3710fe miniupnpd: declare nftables variant as DEFAULT_VARIANT
Declare the nftables variant as the DEFAULT_VARIANT
as nftables firewall4 is the now default in OpenWrt.

Additionally,
 * toggle CONFLICTS placement to avoid circular dependency warning
 * use AUTORELEASE

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2022-01-26 13:11:05 -05:00
Tianling Shen
ad608b5ca7 dnsproxy: Update to 0.40.6
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-01-25 15:30:38 -08:00
Peter van Dijk
c3d2311e35 pdns: update to 4.6.0
* Bump to 4.6.0
* Remove "random" backend as it is gone upstream

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2022-01-25 15:30:30 -08:00
Jan Hoffmann
948f0d29cc vnstat2: update to version 2.9
Signed-off-by: Jan Hoffmann <jan@3e8.eu>
2022-01-25 21:54:48 +01:00
Daniel Bermond
9baa761936 proxychains-ng: update to version 4.16
Maintainer: me

Build system: Arch Linux x86_64
Build tested: ipq806x/R7800
Run tested  : ipq806x/R7800

Signed-off-by: Daniel Bermond <danielbermond@gmail.com>
2022-01-25 21:54:13 +01:00
Nick Hainke
94efdcf02a wg-installer: fix multiple namespaces
Add flag "--lookup-default-namespace" to signal that wg-installer should
look already established wireguard sessions in the default namespace.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-23 00:08:32 +01:00
Stijn Tintel
59af1d0694
Merge pull request #17543 from stintel/vallumd
vallumd: bump to 0.2.0
2022-01-22 16:59:25 +02:00
Tiago Gaspar
28ac3a6997 jool: remove iptables support and update templates
This commit removes iptables backend support and leaves only the
netfilter backend support. This means that:
-  iptables and nftables firewall based systems (firewall3 and firewall
4) are supported trough the netfilter instance mode
-  the iptables/xtables mode support is disabled

For more information on the modes and how to use the new netfilter
instance checkout https://www.jool.mx/en/intro-jool.html

This move is made out of the commit upstream that sets firewall4 as the
default for new default buils and based on the conversation in #16818
and was decided that the netfilter interface is the priority since
iptables support will be dropped in the foreseeable future.

While at it update the templates provided.

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
2022-01-21 18:57:02 -08:00
Sergey V. Lobanov
270e8eabc3 libreswan: fix build on macos
libreswan makefile detects macos (darwin) and changes build logic
but OpenWrt is always Linux so it is required to specify linux as
target platfrom

This patch specifies Linux as a target platfrom

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-20 20:49:08 -08:00
Kerma Gérald
d6b116cb43 crowdsec-firewall-bouncer: fix name in initd to start the process
crowdsec rename the binary from crowdsec-firewall-bouncer to cs-firewall-bouncer
the initd need the correct binary name to start the process
the link for github source need also to be fixed (only the information one)
fix the BuildDate
updated copyright

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-20 20:48:18 -08:00
Tianling Shen
de310c7ff0 dnsproxy: Update to 0.40.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-01-20 20:47:01 -08:00
Glenn Strauss
3badd76668 lighttpd: update to lighttpd 1.4.64 release hash
remove long-deprecated modules

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-01-20 15:21:28 -08:00
Nick Hainke
fab86eb626 wg-installer: remove unused dependency
Remove the dependency "coreutils-realpath" from
wg-installer-server-hotplug-olsrd.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-20 15:56:02 +01:00
Nick Hainke
324fa79d7c wg-installer: create wireguard key if it does not exist
Check if the key exists which is given by
    option wg_key '/etc/wgserver/wg.key'

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-20 14:44:26 +01:00
Nick Hainke
432a965689 wg-installer: install cronjob
Install a cronjob that removes unused wireguard interfaces every 10
minutes.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-20 09:51:05 +01:00
Nick Hainke
da48bc3792 wg-installer: check if a key is already inserted
Check if a peer is already existing with a given public key. Introduce a
response code for signaling why the server rejected the request.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-20 09:19:04 +01:00
Nick Hainke
69c81790d1 wg-installer: rework code
Use shellcheck to rework the code. Use "export" to return variables from
a function call. Further, fix typos.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-20 02:04:50 +01:00
Peter van Dijk
8ca0439f97 dnsdist: update to 1.7.0
* bump to 1.7.0
* add outgoing DNS over HTTPS support, using new dependency nghttp2

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2022-01-19 13:27:16 -08:00
Peter van Dijk
9e3d0bdd82 pdns-recursor: update to 4.6.0
* bump to 4.7.0
* enable DNS over TLS (uses libssl which was already a dependency)
* add libcurl dependency for new zone-to-cache feature.

Co-Authored-By: wout@wbnet.eu
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2022-01-19 13:27:03 -08:00
Sergey V. Lobanov
d60a7ccedc ola: fix build on macos
Latest Apple clang (v13) defines __cplusplus=199711 by default, but
protobuf requires at least 201103 (c++11)

Backported patch to fix c++ detection:
30fe936a88

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-19 11:25:15 -08:00
Lucian Cristian
a1cdf51ba8 frr: update to latest
also fix mips compile

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-01-18 21:29:39 -08:00
Josef Schlehofer
042bf16072 git: update to version 2.34.1
- Refreshed patches

- Release notes 2.34.0:
2ae0a9cb82/Documentation/RelNotes/2.34.0.txt

- Release notes 2.34.1:
2ae0a9cb82/Documentation/RelNotes/2.34.1.txt

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-01-18 18:06:07 -08:00
Robert Marko
9f0fdb0ee2 mdio-tools: update to version 1.0.1
Version 1.0.1 brought the following changes:
[v1.0.1] - 2021-11-26

Primarily fixes a few issues in the kernel module that were found
during a quick review from Russell King:

https://lore.kernel.org/netdev/YYPThd7aX+TBWslz@shell.armlinux.org.uk/
https://lore.kernel.org/netdev/YYPU1gOvUPa00JWg@shell.armlinux.org.uk/

- mdio: The mvls subcommand now supports flushing the ATU

- mdio-netlink: Plug some glaring holes around integer overflows of
  the PC.
- mdio-netlink: Release reference to MDIO bus after a transaction
  completes.

So, update to the latest version and switch the kernel module back
to fetching tarballs like the userspace tool does.

Signed-off-by: Robert Marko <robimarko@gmail.com>
2022-01-18 18:05:33 -08:00
Nick Hainke
38a9a3e0dc wg-installer: cosmetic changes
Use "ip addr" instead of "ip addres" or "ip a".

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-18 18:20:20 +01:00
Kerma Gérald
de41b63ca4 crowdsec: update from upstream latest release 1.2.3
update from latest upstream release 1.2.3
updated copyright

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-18 16:31:31 +01:00
Florian Eckert
505b6c74db
Merge pull request #17586 from clayface/davfs2-secrets
davfs2: add secrets file to conffiles definition
2022-01-18 09:28:56 +01:00
Sergey V. Lobanov
5cd8b75f94 redsocks: fix build on macos
fix cross-compile issues (on macos)
use $CC -dumpmachine instead of `uname`
use $CC instead of CC

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-17 21:09:19 -08:00
Lucian Cristian
ec252c20cc libreswan: update to 4.6
this update also fixes a CVE

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-01-17 21:08:31 -08:00
Othmar Truniger
a2ba5e57cb knxd: bump to new upstream version 0.14.53
Signed-off-by: Othmar Truniger <github@truniger.ch>
2022-01-17 20:52:03 -08:00
Nick Hainke
7cb73ae3b9 dawn: update to 2022-01-17
877e2dc iwinfo: fix get_bandwidth_iwinfo
9ce01ec datastorage: fix multi-SSID
9187665 treewide: improve maintaince
6bf9b6d memory: Tighten up some memory handling to help spot errors
4df0c98 treewide: improve logging

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-17 11:52:42 +01:00
Michael Heimpold
6831c51a8c
Merge pull request #17534 from neheb/4
knxd: fix compilation with newer glibc
2022-01-16 15:39:17 +01:00
Nick Hainke
b89eb0115f wg-installer: switch to ubus call for olsrd hotplug
Use ubus ipc calls to add and remove interfaces.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-16 11:05:27 +01:00
Nick Hainke
fea27cec05 wg-installer: rework iproute2 commands
- Use ip address add instead of ip a a
- Directly add broadcast address

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-16 10:39:19 +01:00
Florian Eckert
b4694bb82c
Merge pull request #17617 from hgl/ddns-cloudflare
ddns-scripts-cloudflare: fix shell conditional
2022-01-15 16:03:37 +01:00
Glen Huang
aed4dbf349 ddns-scripts-cloudflare: fix shell conditional
Signed-off-by: Glen Huang <heyhgl@gmail.com>
2022-01-15 22:33:28 +08:00
Florian Eckert
e85fa926e6
Merge pull request #17600 from camarel/feature/ddns-scripts-wget-user-agent
ddns-scripts: pass user agent string
2022-01-15 15:24:43 +01:00
Claudio Marelli
dc0953fedd ddns-scripts: pass user agent string
This adds a user agent string to the wget request.

Fixes #17507

Signed-off-by: Claudio Marelli <camarelli@gmx.net>
2022-01-15 10:07:30 +01:00
Josef Schlehofer
0f0c7b8ea4
Merge pull request #17432 from r4sas/i2pd-2.40.0
i2pd: Update to 2.40.0, update init.rc script, UCI config and Makefile
2022-01-14 16:27:24 +01:00
R4SAS I2P
ac27fffff9
i2pd: Update to 2.40.0 and update package sources
* Updating i2pd package to 2.40.0
* Rewrite Makefile
* Remove usage of PKG_INSTALL (package's make install)
* Rewrite init.rc configuration and script
* Remove '--service' option from init, which only sets datadir to /var/lib/i2pd
* Use '--datadir' option in init, otherwise datadir changing via uci is not works
* Update patch for i2pd.conf

Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
2022-01-14 12:46:37 +00:00
Aleksander Morgado
ab061c8ddd modemmanager: remove 2s timeout before reporting cached events
When ModemManager is started on boot we may end up with hotplug events
reported directly to the daemon, plus some others already cached in
the cache file before the daemon was started.

If the cached events correspond to the same device that is still
notifying ports directly, we may end up with a modem object created
before the cached events have been emitted, so the modem may not
handle all control/data ports it should.

E.g.:

  - modem detected
  - hotplug event for wwan0 port, cached as MM not running
  - hotplug event for cdc-wdm0 port, cached as MM not running
  - hotplug event for ttyUSB0, cached as MM not running
  - MM starts
  - hotplug event for ttyUSB1, directly processed as MM is running
  - hotplug event for ttyUSB2, directly processed as MM is running
  - modem object created with ttyUSB1 and ttyUSB2
  - 2s after MM starts, cached events for wwan0, cdc-wdm0 and ttyUSB0
    happen, but are ignored because the modem object has already been
    created

MM expects that ports of the same device are reported with less than
1500ms in between ports. In other words, if ports are reported more
than 1500ms after the last reported port, they may get ignored.

If we remove the 2s timeout, the report of the cached events will
happen as soon as MM starts, which makes it much more likely to happen
in the timeslot that MM expects for ports of the same device reported.
The logic is still not perfect, and we may also need to increase that
1500ms timeout inside MM, but removing the 2s timeout right away here
makes sense.

This 2s timeout was introduced along with the new wrapper launcher for
the daemon, it didn't exist before.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2022-01-13 15:54:02 -08:00