Rosen Penev
7fa266580f
zerotier: disable pie support
...
The Makefile is already patched for it. But PKG_ASLR_PIE still needs
to be disabled.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-23 13:41:00 -07:00
Rosen Penev
4da82b8569
Merge pull request #12893 from ja-pa/tor-0.4.3.6
...
tor: update to version 0.4.3.6 (security fix)
2020-07-23 13:15:08 -07:00
Rosen Penev
75efd85bf1
Merge pull request #12799 from aaronjg/openfortivpn/netifd
...
openfortivpn: use standard 'peerdns' config option on netifd script
2020-07-21 18:59:00 -07:00
Daniel Golle
46da3eedc5
gnunet: update to version 0.13.1
...
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-07-22 02:43:35 +01:00
Jan Pavlinec
3f51a1ee6e
tor: update to version 0.4.3.6 (security fix)
...
Fixes
CVE-2020- 15572
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-07-21 12:53:57 +02:00
Rosen Penev
567c620bdc
Merge pull request #12879 from TDT-AG/pr/20200720-mwan3
...
mwan3: update to version 2.8.11
2020-07-20 00:36:40 -07:00
Rosen Penev
6fec82d068
Merge pull request #12848 from BKPepe/squid
...
squid: update to version 4.12 (security update)
2020-07-20 00:35:45 -07:00
Josef Schlehofer
3401e29aa7
squid: update to version 4.12
...
- Fixes CVEs:
CVE-2019-12519
CVE-2019-12520
CVE-2019-12521
CVE-2019-12523
CVE-2019-12524
CVE-2019-12525
CVE-2019-12526
CVE-2019-12527
CVE-2019-12528
CVE-2019-12529
CVE-2019-12824
CVE-2019-12854
CVE-2019-13345
CVE-2019-18676
CVE-2019-18677
CVE-2019-18678
CVE-2019-18679
CVE-2020-8449
CVE-2020-8450
CVE-2020-11945
CVE-2020-14058
CVE-2020-15049
- Remove patch for cross-compilation
The patch should not be included in the OpenWrt at all without any
commit message/description.
Is not needed and there should be used HOST variables instead of BUILD variables (e.g.
HOSTCXX)
However, the BUILDCXX is set in Makefile to HOSTCXX
- Renumber glibc patch and refresh it
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-07-20 08:56:50 +02:00
Florian Eckert
f601e6cfa4
mwan3: update version to 2.8.11
...
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-07-20 08:15:50 +02:00
Florian Eckert
b0acbf057e
mwan3: add online and uptime to detail output
...
Add also online time value and uptime time value from netifd to the
detail output view.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-07-20 08:13:34 +02:00
Florian Eckert
058a2b6f30
mwan3: add workaround for procd change
...
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-07-20 08:12:48 +02:00
Florian Eckert
cde2a77ed3
mwan3: also cleanup lock on mwan3 stop
...
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-07-20 08:12:31 +02:00
Florian Eckert
bcd13ba95c
mwan3: fix rtmon routing table function generation
...
If the uci option family is not set in the interface section, then there
is no default value set as in the `config_load / config_get` API.
The problem here is that if the family is not set, the default value ipv4
is normaly assumed. But the comparison fails here because the value is empty
and therefore the dedicated routing table for this interface is not compared
with the other routes from the main table and so not updated.
To fix this set the default value for this config option which is`false`
for enabled and `ipv4` for family.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-07-20 08:11:20 +02:00
Florian Eckert
bcd914e665
Merge pull request #12814 from aaronjg/improvements/mwan3-misc-improvements-rb
...
mwan3: clean up ipv4/ipv6 duplicated code and misc. improvments
2020-07-20 08:06:39 +02:00
Florian Eckert
8e3e6f8dde
mwan3: fix IPv6 routing add handling
...
This fixes routing handling. Introduced with the last version update.
The following message disappears on the shell
when mwan3 is called with 'mwna3 restart`.
`Error: Invalid gateway address.`
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
[aaronjg@stanford.edu: fully unset variable and handle ipv4 as well]
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 23:24:13 -04:00
Florian Eckert
a796b7a84e
mwan3: fix idx calculation
...
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
[aaronjg@stanford.edu: fix syntax error]
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 23:24:13 -04:00
Aaron Goodman
ca8bc3d115
mwan3: version bump
...
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 23:24:13 -04:00
Aaron Goodman
30a46bdc9e
mwan3: cleanup duplicate ipv4 and ipv6 logic
...
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 23:24:13 -04:00
Aaron Goodman
702a104f9c
mwan3: don't send iptable setup failures to /dev/null
...
silencing failing rules makes debugging more difficult
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 23:18:22 -04:00
Aaron Goodman
2a5e9be83e
mwan3: add default rule for ipv6 in example config
...
default rule only applied to ipv4 with dest_ip 0.0.0.0/0
and error was hidden when trying to apply it in ip6table
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 23:18:21 -04:00
Aaron Goodman
a0d66d4eeb
mwan3: don't try to use ipv6 if not installed
...
fix issue #11826
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 23:18:18 -04:00
Aaron Goodman
f32ad35870
openfortivpn: use standard 'peerdns' argument on netifd script
...
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 18:54:48 -04:00
Rosen Penev
04432dc54f
Merge pull request #12864 from aaronjg/bugfix/openfortivpn-ping
...
openfortivpn: add host up test back
2020-07-19 15:35:00 -07:00
Rosen Penev
0daffb9011
Merge pull request #12861 from neheb/api
...
apinger: fix compilation with GCC 10
2020-07-19 14:44:35 -07:00
Rosen Penev
1af20a26d5
Merge pull request #12860 from neheb/bfdd
...
bfdd: fix compilation with GCC 10
2020-07-19 01:20:29 -07:00
Rosen Penev
292834d324
Merge pull request #12856 from neheb/fpi
...
fping: update to 4.3
2020-07-18 23:31:48 -07:00
Aaron Goodman
374ac6817d
openfortivpn: add option to use ither curl or ping to test host status
...
allow use of curl rather than ping to test if a host
is up since a host may not respond to ping, but an
https request is part of the openfortivpn connection,
so this is a more reliable test
also clean up overly verbose logging
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-18 22:05:13 -04:00
Rosen Penev
aaa81d7534
Merge pull request #12854 from neheb/rads
...
memcached: update to 1.6.6
2020-07-18 14:06:54 -07:00
Andy Walsh
3ba3a0ba4a
wsdd2: Uppercase NB_PARM
...
* Uppercase NB_PARM if mdns option is not set
* filter commented lines
Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-07-18 13:00:22 +02:00
Rosen Penev
ef646f2a70
apinger: fix compilation with GCC 10
...
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-17 20:35:34 -07:00
Rosen Penev
2bdabc1db7
bfdd: fix compilation with GCC 10
...
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-17 20:34:36 -07:00
Rosen Penev
dafbd9e5e4
davfs2: fixup gettext-version again
...
It seems this is still needed.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-17 19:43:55 -07:00
Toke Høiland-Jørgensen
40e148cdad
Merge pull request #12858 from neheb/radse
...
radsecproxy: fix compilation with GCC10
2020-07-18 01:06:21 +02:00
Rosen Penev
8ce5898fd3
Merge pull request #12855 from neheb/ngi
...
ngircd: update to 26
2020-07-17 15:53:04 -07:00
Rosen Penev
d9f15d2cd6
radsecproxy: fix compilation with GCC10
...
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-17 15:46:48 -07:00
Rosen Penev
4b7184cd6a
rsyslog: update to 8.2006.0
...
Fixes compilation with GCC10.
Added random mirror since the normal website has issues at this time.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-17 15:33:53 -07:00
Rosen Penev
afbe8536f4
fping: update to 4.3
...
Fixes compilation with GCC 10.
Backported upstream patch to fix compilation without IPv6.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-17 15:12:16 -07:00
Rosen Penev
a98399f3d2
ngircd: update to 26
...
Fixes compilation with GCC10.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-17 15:11:35 -07:00
Rosen Penev
0773d9e111
memcached: update to 1.6.6
...
Fixes compilation with GCC 10.
Added PKG_BUILD_PARALLEL for faster compilation.
Simplified configure var.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-17 15:10:44 -07:00
Peter Stadler
4f7da949cb
uwsgi: update to version 2.0.19.1
...
update to latest version.
Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-07-17 17:45:44 +02:00
Rosen Penev
4cb4df527d
Merge pull request #12846 from expiron/kcptun-updates
...
kcptun: bump to v20200701
2020-07-17 06:05:26 -07:00
Rosen Penev
7395537276
Merge pull request #12842 from neheb/dav2
...
davfs2: update to 1.5.6
2020-07-17 01:57:49 -07:00
Chao Liu
beb5a87be8
kcptun: bump to v20200701
...
Signed-off-by: Chao Liu <expiron18@gmail.com>
2020-07-17 15:06:26 +08:00
Rosen Penev
f57d05c769
Merge pull request #12843 from neheb/zer
...
zerotier: fix compilation with GCC10
2020-07-16 16:19:26 -07:00
Rosen Penev
cd3a4f4731
zerotier: fix compilation with GCC10
...
Patch taken from upstream.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-16 14:31:54 -07:00
Rosen Penev
cf6c95d752
davfs2: update to 1.5.6
...
Split musl patch into multiple small ones. Much easier to reason about.
Removed stack protector patch. This is not an issue anymore.
Removed NLS support. There seems to be a linking issue as
libiconv-stub does not have a shared library component.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-16 13:27:59 -07:00
Peter Stadler
19b382acea
nginx: update to version 1.19.1
...
update to newest version.
Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-07-16 19:22:26 +02:00
Josef Schlehofer
01ff758894
dnscrypt-proxy2: update to version 2.0.44
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-07-16 15:31:30 +02:00
Aaron Goodman
84a53b7c79
mwan3: be more efficient with sleep after killing trackers
...
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-16 02:03:21 -04:00
Aaron Goodman
da9a626f78
mwan3: don't add single ipv4 to connected list if already covered by a cidr
...
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-16 02:03:21 -04:00