Commit graph

8446 commits

Author SHA1 Message Date
Jan Hoffmann
10a8054925
vnstat2: update to version 2.9
Signed-off-by: Jan Hoffmann <jan@3e8.eu>
(cherry picked from commit 948f0d29cc)
2022-02-18 23:25:59 +01:00
Jan Hoffmann
42f35cdda7
vnstat2: add hotplug script for adding interfaces
If an interface doesn't exist yet when vnStat is started, it won't be
monitored, as only existing interfaces can be added to the database via
the vnstat command.

This adds a hotplug script which adds any configured interfaces to the
vnStat database when it goes up.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>
(cherry picked from commit f9ea814260)
2022-02-18 23:25:53 +01:00
Jan Hoffmann
f8820d2aeb
vnstat2: fix all interfaces being monitored when none are configured
By default, vnstatd adds all available interfaces on startup when its
database is empty. The --noadd option prevents this, but it breaks
import of legacy databases, and causes vnstatd to exit immediately
after startup, which breaks reloading.

This changes the init script to add the --noadd option when no legacy
databases need to be imported, and patches vnstatd to keep running
even when no interfaces are configured.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>
(cherry picked from commit ecae7dedde)
2022-02-18 23:25:49 +01:00
Jan Hoffmann
86f85cde4f
vnstat2: update to version 2.8
Signed-off-by: Jan Hoffmann <jan@3e8.eu>
(cherry picked from commit 73fff7a4ed)
2022-02-18 23:25:44 +01:00
Rosen Penev
362c8c4df3 ksmbd-tools: update to 3.4.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3ffd540b04)
2022-02-14 19:54:11 -08:00
Georgi Valkov
41ca56ff2b ksmbd-tools: Fix ksmbd service is semi-killed at system startup
The configuration for the ksmbd service is auto-generated when
the OpenWRT configuration changes, and also during startup,
hence ksmbd.init has to reload the kernel module. It does that by
calling kill_server, which does not perform cleanup. This results
in ksmbd being killed but not restarted properly during boot.
This patch resolves the issue by using stop_service, which performs
proper cleanup.

https://forum.openwrt.org/t/ksmbd-samba3-4-alternative-ex-cifsd-smbd-package-support-thread/51695/68

Signed-off-by: Georgi Valkov <gvalkov@abv.bg>
(cherry picked from commit 4af04cdc05)
2022-02-14 19:54:11 -08:00
Jan Hák
845b9a1dfe
knot: update to 3.1.6
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 4de863e418)
2022-02-10 02:00:36 +01:00
Jan Hák
d286939b73
knot: update to 3.1.5
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 2a56e478f5)
2022-02-10 02:00:30 +01:00
Tianling Shen
0329b2c11d xray-core: Update to 1.5.3
Removed outdated `alterId` in sample config.

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d8d261fe2d)
2022-02-07 21:26:22 -08:00
Stan Grishin
a507620a18 https-dns-proxy: init script refactoring
* consolidate dnsmasq config manipulation into one function
* more elegant code for PROCD data processing (Thanks @jow-!)

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 88265c4fb9)
2022-02-06 06:01:00 +00:00
Josef Schlehofer
675755537a
apache2: security update to version 2.4.52
Fixes CVEs:
- CVE-2021-44790
- CVE-2021-44224

Refreshed patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 6c6c99ffb5)
2022-02-03 12:57:17 +01:00
Noah Meyerhans
74f9ae0286 bind: bump to 9.18.0
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 127ef1207b)
2022-02-02 09:20:10 -08:00
Stan Grishin
b7374630e1
Merge pull request #17764 from stangri/openwrt-21.02
[21.02] https-dns-proxy: update to 2021-11-22-1
2022-02-02 09:12:45 -08:00
Kerma Gérald
b29655996d crowdsec: update from latest upstream release 1.3.0
Changes (from 1.2.3):
https://github.com/crowdsecurity/crowdsec/compare/v1.2.3...v1.3.0

(cherry picked from commit d2fd1f8346)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-02-02 07:24:22 -08:00
Nick Hainke
3b28c6f389 wg-installer: use babeld add_interface function
With commit 385200443554 ("babeld: add add_interface function") babeld
has a new ubus function allowing to dynamically add an interface.

Before the add_interface function, we were required to reload babeld.
The reload influenced the babeld routing. However, the remove part is
still missing and will be added at a later stage.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 40b87aac95)
2022-02-02 11:10:19 +01:00
Kerma Gérald
1026a1fd4e crowdsec-firewall-bouncer: fix name in initd to start the process
crowdsec rename the binary from crowdsec-firewall-bouncer to cs-firewall-bouncer
the initd need the correct binary name to start the process
the link for github source need also to be fixed (only the information one)
fix the BuildDate
updated copyright

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit d6b116cb43)
2022-02-02 08:09:01 +01:00
Stan Grishin
2cd8928796 https-dns-proxy: update to 2021-11-22-1
* update to 2021-11-22 upstream source
* update patch file
* update init script to preserve manual entries
	(fixes https://github.com/stangri/source.openwrt.melmac.net/issues/149)
* update init script service_triggers

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 1e5e7ce469)
2022-01-31 22:36:27 +00:00
Nick Hainke
8d8cf26286 dawn: update to 2022-01-17
877e2dc iwinfo: fix get_bandwidth_iwinfo
9ce01ec datastorage: fix multi-SSID
9187665 treewide: improve maintaince
6bf9b6d memory: Tighten up some memory handling to help spot errors
4df0c98 treewide: improve logging

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 7cb73ae3b9)
2022-01-31 15:40:38 +01:00
Josef Schlehofer
df7568303b
prosody: update to version 0.11.13
Fixes CVEs:
- CVE-2022-0217
- CVE-2021-37601
- CVE-2021-32918
- CVE-2021-32920
- CVE-2021-32921
- CVE-2021-32917
- CVE-2021-32919

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit dcedbe8027)
2022-01-31 00:05:03 +01:00
Josef Schlehofer
213aaa1f32
clamav: update to version 0.104.2
Backported upstream pending pull request to fix following error:

CMake Error at /foo/staging_dir/host/share/cmake-3.19/Modules/FindPackageHandleStandardArgs.cmake:218 (message):
  Could NOT find CURSES (missing: CURSES_LIBRARY)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit eddbb64bc9)
2022-01-28 17:35:19 +01:00
Lucian Cristian
9c476ee993
clamav: update to 0.104.0
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 44eb2ae619)
2022-01-28 14:16:35 +01:00
Glenn Strauss
48bf1a0d0d
lighttpd: update to lighttpd 1.4.64 release hash
remove long-deprecated modules

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 3badd76668)
2022-01-24 15:19:03 +01:00
Glenn Strauss
82339309f5
lighttpd: update to lighttpd 1.4.63 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 35dff58b3a)
2022-01-24 15:18:59 +01:00
Glenn Strauss
527f2b920f
lighttpd: update to lighttpd 1.4.62 release hash
depend on libpcre2 instead of libpcre

also remove patches incorporated upstream into lighttpd 1.4.62

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit ddecac45c8)
2022-01-24 15:18:54 +01:00
Nick Hainke
aeb8aad5c0 wg-installer: fix multiple namespaces
Add flag "--lookup-default-namespace" to signal that wg-installer should
look already established wireguard sessions in the default namespace.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 94efdcf02a)
2022-01-23 18:09:51 +01:00
Nick Hainke
b9bfe1ef15 wg-installer: remove unused dependency
Remove the dependency "coreutils-realpath" from
wg-installer-server-hotplug-olsrd.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit fab86eb626)
2022-01-20 22:22:53 +01:00
Nick Hainke
9a836f4307 wg-installer: create wireguard key if it does not exist
Check if the key exists which is given by
    option wg_key '/etc/wgserver/wg.key'

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 324fa79d7c)
2022-01-20 15:12:22 +01:00
Nick Hainke
317ba6a43e wg-installer: install cronjob
Install a cronjob that removes unused wireguard interfaces every 10
minutes.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 432a965689)
2022-01-20 13:57:46 +01:00
Nick Hainke
a430932a7d wg-installer: check if a key is already inserted
Check if a peer is already existing with a given public key. Introduce a
response code for signaling why the server rejected the request.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit da48bc3792)
2022-01-20 13:57:46 +01:00
Nick Hainke
0aaa90629c wg-installer: rework code
Use shellcheck to rework the code. Use "export" to return variables from
a function call. Further, fix typos.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 69c81790d1)
2022-01-20 13:57:46 +01:00
Nick Hainke
dea64c08ea wg-installer: cosmetic changes
Use "ip addr" instead of "ip addres" or "ip a".

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 38a9a3e0dc)
2022-01-20 13:57:46 +01:00
Josef Schlehofer
a259a4aaaa
git: update to version 2.34.1
- Refreshed patches

- Release notes 2.34.0:
2ae0a9cb82/Documentation/RelNotes/2.34.0.txt

- Release notes 2.34.1:
2ae0a9cb82/Documentation/RelNotes/2.34.1.txt

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 042bf16072)
2022-01-19 11:20:01 +01:00
Kerma Gérald
0cdffbaf95 crowdsec: update from upstream latest release 1.2.3
update from latest upstream release 1.2.3
updated copyright

(cherry picked from commit de41b63ca4)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-18 18:06:54 -08:00
Moritz Warning
031fbb16a3 smcroute: update to 2.5.5
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-01-17 21:08:50 -08:00
Moritz Warning
fcf1633351 smcroute: update to 2.5.4
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-01-17 21:08:50 -08:00
Nick Hainke
c7470d1d8e wg-installer: switch to ubus call for olsrd hotplug
Use ubus ipc calls to add and remove interfaces.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit b89eb0115f)
2022-01-17 09:42:06 +01:00
Nick Hainke
8c3ce87fd2 wg-installer: rework iproute2 commands
- Use ip address add instead of ip a a
- Directly add broadcast address

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit fea27cec05)
2022-01-17 09:42:06 +01:00
R4SAS I2P
bbd3d70cd4
i2pd: Update to 2.40.0 and update package sources
* Updating i2pd package to 2.40.0
* Rewrite Makefile
* Remove usage of PKG_INSTALL (package's make install)
* Rewrite init.rc configuration and script
* Remove '--service' option from init, which only sets datadir to /var/lib/i2pd
* Use '--datadir' option in init, otherwise datadir changing via uci is not works
* Update patch for i2pd.conf

Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
(cherry picked from commit ac27fffff9)
2022-01-15 09:02:21 +01:00
Dirk Neukirchen
19d32003c2
i2pd: remove unneeded functions.sh
its included via rc.common, see
https://openwrt.org/docs/guide-developer/config-scripting

Signed-off-by: Dirk Neukirchen <plntyk.lede@plntyk.name>
(cherry picked from commit 266deb5866)
2022-01-15 09:02:15 +01:00
R4SAS I2P
8d150985c4
i2pd: Update to 2.38.0
Remove USE_AVX and USE_AESNI make options as it is correclty handled by
internal code.

Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
(cherry picked from commit 1025dd7c76)
2022-01-15 08:59:38 +01:00
Dirk Neukirchen
5ee9fb98dd
i2pd: update to 2.36
remove AVX patches as upstream has integrated and closed
all AVX issues

compiled on :  x86-64, i386 generic
tested on : x86-64 VM, i386 VM

Signed-off-by: Dirk Neukirchen <plntyk.lede@plntyk.name>
(cherry picked from commit fc7d710e62)
2022-01-15 08:59:34 +01:00
Jo-Philipp Wich
15b41a6751
zerotier: add configuration reload trigger
Ensure that the zerotier service is automatically restarted when the uci
configuration is modified.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 04d0e45da1)
2022-01-13 10:40:32 +01:00
Josef Schlehofer
c7fef6db56
atlas-probe: update to version 2.4.1
Removed patches:
001-fix-stime-glibc-remove.patch - it is included in upstream
003-Fix-compilation-with-gcc11.patch - no longer necessary

Updated patches:
002-Avoid-problems-with-64-bit-time_t.patch

Refreshed patches:
004-Comment-out-librt-testing.patch

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit cf65ca2db0)
2022-01-13 10:18:10 +01:00
Josef Schlehofer
98c1fe435c
atlas-sw-probe: update to version 5040
Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ec767eb499)
2022-01-13 10:17:53 +01:00
Kerma Gérald
1a40e3c89c crowdsec-firewall-bouncer: update to 0.0.21
Update crowdsec-firewall-bouncer to latest upstream release version 0.0.21

Makefile rework
- use tagged version for download

Fixes
- set API_KEY in firewall bouncer config file

(cherry picked from commit b4f48b5c23)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-13 10:15:11 +01:00
Kerma Gérald
432140a36e crowdsec: update to 1.2.2
Update crowdsec to latest upstream release version 1.2.2

Makefile rework
- use tagged version for download

(cherry picked from commit 2a34e4987b)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-13 10:15:01 +01:00
Sebastian Kemper
b5443ccdf0
apache: fixup apxs
apxs is used to get information about the apache installation when
building external modules. Currently there are issues:

1.

./staging_dir/target-mips_24kc_musl/usr/bin/apxs -q TARGET
apache2
apxs:Error: ./staging_dir/target-mips_24kc_musl/home/sk/tmp/openwrt/staging_dir/target-mips_24kc_musl/usr/bin/apr-1-config not found!.

This error is fixed by sed script #2.

2.

./staging_dir/target-mips_24kc_musl/usr/bin/apxs -q TARGET
cannot open ./staging_dir/target-mips_24kc_musl/home/sk/tmp/openwrt/staging_dir/target-mips_24kc_musl/usr/share/apache2/build/config_vars.mk: No such file or directory at ./staging_dir/target-mips_24kc_musl/usr/bin/apxs line 213.

This error is fixed by sed scipt #1.

Both sed scripts taken from buildroot (see [1]).

[1] https://github.com/buildroot/buildroot/blob/master/package/apache/apache.mk

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 83d1cdaf3f)
2022-01-13 10:10:49 +01:00
Sebastian Kemper
19451ec864
apache: security bump to 2.4.51
Fixes (see [1] for details):

  CVE-2021-33193
  CVE-2021-41524
  CVE-2021-41773
  CVE-2021-42013

[1] https://httpd.apache.org/security/vulnerabilities_24.html

Patch 020-openssl-deprecated.patch refreshed.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit da4b1ca8d6)
2022-01-13 10:10:45 +01:00
Nick Hainke
6fe1b64e7a wg-installer: fix shell typo
Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 53503c4a3a)
2022-01-12 22:43:41 +01:00
Nick Hainke
f21f39cfd8 wg-installer: allow defining link costs for hotplugs
Add options to set link costs in mesh routing daemons.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit ee879d3747)
2022-01-12 18:28:12 +01:00