Commit graph

8902 commits

Author SHA1 Message Date
Martijn Atema
de2a9d4b13
ddns-scripts: Fix typo in route53 update script
Signed-off-by: Martijn Atema <martijn@atema.one>
2021-11-15 12:44:41 +01:00
Alexandru Ardelean
84adeaaed3
Merge pull request #17108 from commodo/ovs-no-python-six
ovs,ovn: remove python-six dep
2021-11-14 05:08:47 +02:00
Nikos Mavrogiannopoulos
0101370e1d ocserv: updated to 1.1.4
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2021-11-13 09:28:17 +01:00
Lucian Cristian
e965229a7d frr: update to 8.1.0
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2021-11-12 17:20:37 -08:00
Daniel Golle
ded4ab79b2 nfs-kernel-server: move hardcoded /run to /tmp/run
statd currently fails to start due to missing /run which doesn't exist
on OpenWrt.

Add a patch moving /run to /tmp/run as the path is hardcoded in several
places and cannot be configured neither at buildtime nor at runtime.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-11-13 01:11:34 +00:00
Stan Grishin
80ef61729b curl: update to 7.80.0
* bump version to 7.80.0
* update maintainer email address

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-11-12 20:25:53 +00:00
Huangbin Zhan
2689a0d11d openssh-server-pam: add key files as conffiles
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2021-11-12 11:04:02 -08:00
Huangbin Zhan
159e12381f openssh: keep same permission for /etc/ssh
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2021-11-12 11:04:02 -08:00
Lucian Cristian
90834c5ce1 netopeer2: update to 2.0.35
needed after libyang update

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2021-11-12 11:02:56 -08:00
Lucian Cristian
6048971467 sysrepo: update to 2.0.53
needed after libyang update
also drop python3-sysrepo as now is standalone

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2021-11-12 11:02:56 -08:00
Huangbin Zhan
9ac16d4528 wget: update to 1.21.2
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2021-11-12 11:00:24 -08:00
Huangbin Zhan
0907651268 wget: fix hsts time
`time_t` on musl 1.2 is 64bit, while `long` is 32 bit. we will always get zero time with the original source on mips big endian.

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2021-11-12 11:00:24 -08:00
Aleksander Morgado
9bc5942529 modemmanager: fix physdev sysfs path detection in PCIe modems
The PCIe physdev path lookup relies on the 'vendor' and 'device'
attribute files, instead of the 'idVendor' and 'idProduct' ones, which
are USB specific.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2021-11-12 11:00:04 -08:00
Tianling Shen
9b4031dec4 dnsproxy: Update to 0.39.10
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-11-11 03:47:03 -08:00
Tianling Shen
ae7c97f616 dnslookup: Update to 1.5.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-11-11 03:46:38 -08:00
Alexandru Ardelean
22ad3368f3 ovn: remove python-six dep
OVN doesn't require Python Six, since about commit
 338a6ddb5e
Maybe even earlier than that.

There are some left-over installations of six in their CI, but no usage in
any Python source code.

Refreshed patches.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-11-10 14:54:36 +02:00
Alexandru Ardelean
2648f2e02c openvswitch: remove python-six dependency
Python six was required to build the OVS Python libs during the time when
they were supporting both Python 2 & 3.

Python 3 is a minimum requirement for OVS Python's libs since commits:
  1ca0323e7c
  bd90524550
and Six is no longer required since commit
  0c4d144a98

The end-goal here is to get rid of the Python Six host-build.
OVS is the only user.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-11-10 14:32:16 +02:00
Karl Palsson
9be6e174a4 mosquitto: bump to 2.0.13
Security and bugfix releases.

Changelogs:
https://mosquitto.org/blog/2021/10/version-2-0-13-released/
https://mosquitto.org/blog/2021/08/version-2-0-12-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-11-09 09:12:24 +00:00
Tianling Shen
4eac8f4087 trojan-go: add new package
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-11-08 17:54:18 -08:00
Ren Zongjia
1f6944d607 transmission-web-control: Update to the latest master branch(4b2e1858)
Signed-off-by: Ren Zongjia <acooler15@foxmail.com>
2021-11-08 17:47:18 -08:00
Jan Hák
60a80b31fb knot: update to 3.1.4
Signed-off-by: Jan Hák <jan.hak@nic.cz>
2021-11-08 14:01:30 -08:00
Wout Bertrums
212f9fa76c pdns-recursor: Update to v4.5.7
Signed-off-by: Wout Bertrums <wout@wbnet.eu>
2021-11-05 15:43:55 -07:00
Oskari Rauta
9e7b9a4978 zerotier: update to 1.8.1
Release notes:

1.8.0
 - Upgrade json.hpp dependency to version 3.10.2
 - Check if DNS servers need to be applied on macOS
 - Set MAC address before bringing up Linux TAP link
 - Stop binding to temporary IPv6 addresses
 - Fix for mistakenly using v6 source addresses for v4 routes on some platforms
 - Fix for MacOS MTU capping issue on feth devices
 - Implement a workaround for one potential source of a "coma" bug, which can occur if buggy NATs/routers stop allowing the service to communicate on a given port. ZeroTier now reassigns a new secondary port if it's offline for a while unless a secondary port is manually specified in local.conf. Working around crummy buggy routers is an ongoing effort.
 - A completely rewritten desktop UI for Mac and Windows!

1.8.1
 - Fix an issue that could cause clobbering of MacOS IP route settings on restart.
 - Added additional hardening against address impersonation on networks (also in 1.6.6).
 - MacOS IPv6 no longer binds to temporary addresses as these can cause interruptions if they expire.
 - Remove support for REALLY ancient 1.1.6 or earlier network controllers.
 - Fix numerous UI issues from 1.8.0 (never fully released).

Changed to git as source and added $(AUTORELEASE)

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2021-11-05 17:28:03 +01:00
Tianling Shen
797c8b6c47 dnslookup: Update to 1.5.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-11-05 07:17:26 +01:00
Martin Schneider
a1d3552445 dns-over-https: Add dns-over-https.
Client and server software to query DNS over HTTPS, using Google DNS-over-HTTPS protocol and IETF DNS-over-HTTPS (RFC 8484). https://github.com/m13253/dns-over-https

Signed-off-by: Martin Schneider <martschneider@google.com>
2021-11-05 06:41:13 +01:00
Alexander Koenig
1589ebcede mdns-repeater: add package for mdns-repeater
Signed-off-by: Alexander Koenig <alex@lisas.de>
2021-11-04 15:17:00 -07:00
Tianling Shen
f712dc311e rclone: Update to 1.57.0
- Disabled unused plugins and re-enabled CGO.
- Fixed test script

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-11-03 08:12:07 -07:00
Ren Zongjia
cb54cef066 frp: update to 0.38.0
Signed-off-by: Ren Zongjia <acooler15@foxmail.com>
2021-11-03 07:30:55 +01:00
Josef Schlehofer
735d9deed6
Merge pull request #17031 from turris-cz/drop-rosy-fs
rosy-file-server: drop this package
2021-11-02 19:09:54 +01:00
David Bauer
63e2771140 usteer: update to latest git head
6813542 remote: always re-schedule update timeout
d7833e1 remote: fix compilation with glibc
bee2caf sta: schedule sta_info timeout on creation
ae32cb9 ubus: fix channel for active probing
8dc0753 ubus: introduce enum for beacon measurement mode
46e5976 policy: use correct reference signal
1116fdb policy: avoid creating kick loop for client
d3ff0d5 sta: add sta_connection_state enum
30f9ba7 remote: include node BSSID into messages
8af7b6c usteer: add BSSID to node struct

Signed-off-by: David Bauer <mail@david-bauer.net>
2021-10-31 21:06:01 +01:00
Josef Schlehofer
f1893a426a
rosy-file-server: drop this package
Reasons to drop this package:
a) this package depends on luci-app-rosy-file-server
Unfortunately, it was marked as broken as it is unmaintained.

See: 34b682afac

b) maintainer is inactive
c) rosinson website does not seem to be working

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-10-31 09:26:21 +01:00
Javier Marcet
19596a013c nginx: add scgi_params if CONFIG_NGINX_HTTP_SCGI=y
Signed-off-by: Javier Marcet <javier@marcet.info>
2021-10-30 14:59:14 -07:00
Rui Salvaterra
2997d2dcf5 tor: bump to 0.4.6.8 stable
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2021-10-30 01:13:07 -07:00
Peter Stadler
55c3bc14f7 nginx, python3-{asgiref,django-cors-headers,drf-nested-routers,sqlparse}: bump versions
Update to the newest versions and switch to $(AUTORELEASE) for the python3 packages (where I am the maintainer).

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2021-10-30 01:12:02 -07:00
Matthew Hagan
bbf13f9d89 openfortivpn: add persistent reconnect option
Currently when the connection times out, the interface will disconnect.
Add capability to add persistent option to re-establish connectivity.

Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
2021-10-30 01:07:49 -07:00
Matthew Hagan
008d4afa5f openfortivpn: add user, key, CA PEM support
Allow authentication inputs by key/cert PEM.

Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
2021-10-30 01:07:49 -07:00
Chao Liu
e99afaa97c zerotier: add respawn procd param
Signed-off-by: Chao Liu <git@expiron.dev>
2021-10-30 01:07:28 -07:00
Peter Stadler
545629e386 uwsgi: bump version and use less workarounds
* adopt pypi name and line numbers in patches
* remove custom tar command and patch for using python3 (changed upstream)

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2021-10-30 01:07:08 -07:00
Tianling Shen
ab540e6990 xray-core: remove dead jail files
It never works... And Xray-core needs root access to work.

Bump geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-10-30 01:06:40 -07:00
Glenn Strauss
2b67f2b178 lighttpd: update to lighttpd 1.4.61 release hash
also remove patches incorporated upstream into lighttpd 1.4.61

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2021-10-30 01:05:07 -07:00
Rosen Penev
53b5695ea8 softethervpn: update to 4.38-9760-rtm
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-10-28 16:54:50 -07:00
Philip Prindeville
a11d34617a
Merge pull request #16992 from pprindeville/named-restart-intf-flap
bind: detect new interfaces when they come up
2021-10-28 17:01:14 -06:00
Philip Prindeville
24e346e20b
Merge pull request #16984 from pprindeville/strongswan-update-5.9.4
strongswan: bump version to 5.9.4
2021-10-28 16:57:51 -06:00
Philip Prindeville
26bef5067c
Merge pull request #17010 from pprindeville/bind-update-9.17.19
bind: Bump to 9.17.19
2021-10-28 16:56:31 -06:00
Philip Prindeville
c2de702cbd bind: Bump to 9.17.19
The following CVE updates are included:

* CVE-2021-25219: The "lame-ttl" option is now forcibly set to 0. This
  effectively disables the lame server cache, as it could previously be
  abused by an attacker to significantly degrade resolver performance.

* CVE-2021-25218: An assertion failure occurred when named attempted
  to send a UDP packet that exceeded the MTU size, if Response Rate
  Limiting (RRL) was enabled.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-10-28 14:06:07 -06:00
Philip Prindeville
049b25bcf9 bind: detect new interfaces when they come up
Reload the service when interfaces flap; note that libcap support
is required to open new sockets on interfaces coming up during
a reload, otherwise a full restart would be needed.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-10-28 14:00:43 -06:00
Philip Prindeville
3ea87e6401
Merge pull request #17003 from pprindeville/named-deprecate-managed-keys
bind: deprecate managed-keys
2021-10-28 13:54:40 -06:00
Philip Prindeville
f7d11c9a1c strongswan: Bump to 5.9.4
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-10-28 13:04:40 -06:00
Daniel Golle
025bca81a0 nfs-kernel-server: reload when exported mountpoints show
Use newly introduced procd_add_reload_mount_trigger to reload nfsd
when a mountpoint covering an exported filesystem is added by blockd.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-10-28 19:54:29 +01:00
Daniel Golle
c3c6a2ff1d
gnunet: several improvements
Fix uci-defaults for PostgreSQL backends
Add user 'gnunet' to 'postgres' group
Always build with sqlite3 as configure fails when --without-sqlite

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-10-28 16:31:44 +01:00