Commit graph

6022 commits

Author SHA1 Message Date
Dirk Brenken
fdd4afe6ac
adblock: fix init status command
Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-04-01 20:55:45 +02:00
Lucian Cristian
5a8a7aeab1 libreswan: update cu 3.32
CVE and NSS fix

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2021-03-28 23:10:05 +03:00
Stan Grishin
aa3e95ac69 https-dns-proxy: bugfix: correct PROCD firewall object
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-25 16:46:10 -07:00
Stan Grishin
3530635214 https-dns-proxy: support for additional Force DNS ports
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-22 07:29:14 +00:00
Josef Schlehofer
44b301125f bind: update to version 9.16.13
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-03-21 20:35:45 -07:00
Christian Lachner
227597c970 haproxy: Update HAProxy to v2.0.21
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-03-19 18:38:26 +01:00
Tianling Shen
a8a4059284 tmate: add new package
Tmate is a fork of tmux. It provides an instant pairing solution.
For more details, see https://tmate.io.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ccfe1bfa50)
2021-03-18 23:22:48 -10:00
Jan Pavlinec
0494d8706b
tor: update to version 0.4.4.8
Fixes CVE-2021-28089 and CVE-2021-28090

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-03-17 10:52:33 +01:00
Florian Eckert
1656b49bfe
Merge pull request #15136 from TDT-AG/pr/2021015-openwrt-19.07-mwan3
mwan3: remove mwan3 ubus call on mwan3 iface hotplug ACTION
2021-03-16 14:14:24 +01:00
Florian Eckert
40d56e46b1 mwan3: remove mwan3 ubus call on mwan3 iface hotplug ACTION
With this change, the interface status is no longer read from the mwan3 ubus.
The status of the interface is read directly from the status directory.
This was already implemented in the master with the
commit c07f5230be.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-03-15 14:15:42 +01:00
Karl Palsson
b66d262d75 net/mosquitto: bump to 1.6.14
This is a minor security fix for outgoing bridges and the client
library.

Full details: https://mosquitto.org/blog/2021/03/version-2-0-9-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-03-15 10:41:31 +00:00
Olivier Poitrey
81fa8cf893 nextdns: Update to version 1.11.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-03-09 21:24:18 +02:00
Stan Grishin
af02206e25 vpn-policy-routing: better processing of custom user files
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-08 10:35:01 +00:00
Florian Eckert
8c63f6331c
Merge pull request #14661 from TDT-AG/pr/20210203-19.07-keepalived
keepalived: backport fixes
2021-03-03 10:01:24 +01:00
Stan Grishin
86bb11e973 vpn-policy-routing: update to 0.3.2-18
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-01 21:38:44 +00:00
Eric Luehrsen
5c95dda730 unbound: update to 1.13.1
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2021-02-28 16:01:03 -05:00
Stan Grishin
3abe9d0aef vpn-policy-routing: bugfix: netflix user file missing redirect
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-26 22:03:41 +00:00
Stan Grishin
904d911c55 vpn-policy-routing: update user netflix file
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-26 02:16:44 +00:00
Stan Grishin
7d26130b33 vpn-policy-routing: custom user scripts improvements
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-24 19:44:10 +00:00
Dirk Brenken
8550232147
adblock: update blocklist sources
* change adguard url
* remove malwaredomains (discontinued)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-02-23 15:46:43 +01:00
Rosen Penev
04f8ded56d
Merge pull request #14869 from stangri/19.07-vpn-policy-routing
[19.07] vpn-policy-routing: update to version 0.3
2021-02-23 05:12:03 -08:00
Jan Hak
39f3941cd4
knot: update to version 3.0.4
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 341fffb8dd)
2021-02-23 12:25:02 +01:00
Jan Hak
1662ca26ba
knot: update to 3.0.3
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 5cd9378653)
2021-02-23 12:24:57 +01:00
Jan Hák
9389a5dd1f
knot: disable embedded xdp
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 1f9d6fbb26)
2021-02-23 12:24:52 +01:00
Jan Hák
7619ff0dfc
knot: update to 3.0.2
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit a54828926d)
2021-02-23 12:24:47 +01:00
Daniel Salzman
5ddcc2e050
knot: disable libnghttp2 autodetection
Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>
(cherry picked from commit 67e3c594de)
2021-02-23 12:24:43 +01:00
Jan Hak
fb103be86b
knot: update to version 3.0.1
definition of PSELECT_COMPAT could be removed many years ago, is no longer needed

Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 4069bb1e72)
2021-02-23 12:24:38 +01:00
Josef Schlehofer
8e1b62d4bb openvswitch: update to version 2.11.6 (security fix)
Fixes CVEs:
- CVE-2020-35498
- In DPDK: CVE-2015-8011 and CVE-2020-27827
- In LLDP: CVE-2019-14818, CVE-2020-10722, CVE-2020-10723 and CVE-2020-10724

Removed patches:
- 0001-compat-Include-confirm_neigh-parameter-if-needed.patch because they
are included in this release as it was backported
- 0010-acinclude-Fix-build-with-kernels-with-prandom-moved-.patch
included in this release as it was backported

Other patches were refreshed.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-02-23 17:14:37 +08:00
Stan Grishin
5e24f6db6d vpn-policy-routing: update to version 0.3
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-23 01:20:14 +00:00
Rosen Penev
3be5d565cf
Merge pull request #14710 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: support for force DNS/DNS hijacking
2021-02-22 16:27:00 -08:00
Moritz Warning
7be89f1f34
zerotier: bump to 1.6.4
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2021-02-21 08:48:36 +01:00
Noah Meyerhans
fcf72948ae bind: bump to 9.16.12
Includes fix for security issues:

* CVE-2020-8625: BIND servers are vulnerable if they are running an
  affected version and are configured to use GSS-TSIG features.

Disable backtrace functionality, as it is unreliable across
architectures and generally only supported by upstream on amd64

Remove a patch that has been incorporated upstream

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2021-02-18 15:46:39 -08:00
Hauke Mehrtens
90af10d015
Merge pull request #14647 from neheb/k9
[19.07] ksmbd(-tools): update to 3.3.4
2021-02-16 22:26:50 +00:00
Philip Prindeville
3f0dbcdae1 isc-dhcp: seeing crashes when attempting to update dynamic dns
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-02-10 12:00:53 -07:00
Stan Grishin
1a4184c076 https-dns-proxy: support for force DNS/DNS hijacking
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-10 05:59:24 +00:00
Karl Palsson
b1fec2b7b5 mosquitto: bump to 1.6.13
Includes various fixes: (2.0.7 + 1.6.13 dual release)
https://mosquitto.org/blog/2021/02/version-2-0-7-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-02-08 15:20:53 +00:00
Moritz Warning
db69f0b57c zerotier: update to 1.6.3
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2021-02-06 22:06:37 +01:00
Florian Eckert
798c3ba3f9 keepalived: fix config typo
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a8a1fbfa0d)

* Update PKG_RELEASE to 5
2021-02-05 09:25:02 +01:00
Florian Eckert
d41a0b75aa keepalived: add script security param to fix warning
Openwrt is a single user system. So keepalived is runnig as root.
If we add the config options `script_user root` and
`enabled_script_security' the following warnings are gone.

> local1.info Keepalived_vrrp[5382]: SECURITY VIOLATION - scripts are
being executed but script_security not enabled.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 1b1ba71063)
2021-02-05 09:25:02 +01:00
Rosen Penev
86c8807120
ksmbd-tools: update to 3.3.4
Manually updated.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-02-03 17:26:48 -08:00
Florian Eckert
dee2e818b9 keepalived: set default run directory for pid file on build
This fixes a runtime startup error on system which does not have a
toplevel runtime directory for the pid file. On openwrt the pid is
located at /var/run and not on /run. To fix that add a configure option to
move the pid location to /var/run.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit bc98aaa3f7)

* Patch adapted for the branch so that it can be applied correctly
2021-02-03 10:04:59 +01:00
Stan Grishin
cf79695645 simple-adblock: remove dependency on jsonfilter & old code
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-02 22:11:20 +00:00
Andy Walsh
46d327a59b samba4: fix for #13758
* fix for possible exploit #13758
* sanetize all external template/config inputs
* fix some shellcheck warnings

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-01-26 12:24:57 +01:00
Olivier Poitrey
e8d15424b4 nextdns: Update to version 1.10.1
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-01-25 17:55:29 +00:00
Stan Grishin
46253b17d4 https-dns-proxy: bugfix: high CPU utilization
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-01-18 15:28:06 +00:00
Christian Lachner
7707d2d78c haproxy: Update HAProxy to v2.0.20
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-01-11 17:38:14 +02:00
Olivier Poitrey
8cc7aef3ce nextdns: Update to version 1.9.6
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-01-10 23:25:34 +00:00
Stan Grishin
9e29bd4dee https-dns-proxy: update to 2020-11-25: add HTTP auth and DSCP codepoint support
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-01-06 17:53:15 +00:00
Dirk Brenken
0563feebc6
adblock: backport fixes
* set PROCD_RELOAD_DELAY correctly
* source changes:
  - add new source 'games_tracking' (https://www.gameindustry.eu)
  - change malwaredomains source mirror
  - remove malwarelist source (source is empty)
  - remove youtube source (does not work at all)
* add check for gnu-sort

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-12-23 21:20:28 +01:00
Aaron Goodman
6bd3f5c377 mwan3: use ping -I for ipv6 after tunnel kernel fix
Now that tunnels have been fixed with openwrt commit
c9c7b4b3945c01c2aadf3ef5d9a77c8200db80f1 for stable branch 19.07
ping with src ip is no longer needed.

fixes #13655

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* Update commit message
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-12-22 11:24:21 +01:00