Commit Graph

4048 Commits

Author SHA1 Message Date
Miroslav Lichvar 1377bc60f0 chrony: fix configuration of IPv6 client access
Fix the init script to allow access from IPv6 subnets of the interface
specified in allow section in /etc/config/chrony.

Fixes issue #7039.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2018-09-17 17:44:18 +02:00
Dirk Brenken 23bb744ff3 adblock: bugfix 3.5.5v2
* fix uci wrapper calls
* fix link in readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit cd3f925210)
2018-09-05 17:54:26 +02:00
Dirk Brenken e8813bb561 adblock: update 3.5.5
* accept only ascii aka punycode chars in blocklists to prevent possible
dns backend warnings
* fix cornercase issues in json parsing (backend & frontend)
* slightly optimize tld compression performance
* refine logging
* use uci wrapper where possible
* change indentation from spaces to tabs (saves 8kb)
* add experimental youtube blocklist source

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 4987f066f9)
2018-09-04 21:41:09 +02:00
Christian Schoenebeck c7e97bf2b0 radicale[18.06]: add extra command "export_storage" to init script
add extra command "export_storage" to export data for use with Radicale 2.x.x
remove myself as PKG_MAINTAINER

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2018-09-02 16:59:20 +02:00
Ted Hess 6680ce8650 socat: Fix CRDLY, TABDLY and CSIZE shifts for PowerPC
Signed-off-by: Ted Hess <thess@kitschensync.net>
2018-08-30 15:07:20 -04:00
Toke Høiland-Jørgensen 09f9947f83 sqm-scripts: Bump to v1.2.4
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2018-08-28 12:14:41 +02:00
Karl Palsson c696cc4600 net/mosquitto: update to 1.5.1
Bugfix release.  Full changelog at:
https://mosquitto.org/blog/2018/08/version-151-released/

Of most interest to OpenWrt:
* Remove use of AI_ADDRCONFIG, which means the broker can be used on systems where only the loopback interface is defined.
* Fix IPv6 addresses not being able to be used as bridge addresses.
* Fix problem opening listeners on Pi caused by unsigned char being default.
* Fix segfault on startup if bridge CA certificates could not be read.
* Fix possible endian issue when reading the memory_limit option.
* library and client bugfixes including: https://github.com/openwrt/packages/issues/6765

Signed-off-by: Karl Palsson <karlp@etactica.com>
2018-08-20 09:30:12 +00:00
Eric Luehrsen 45ffcb3d6a unbound: drop odhcpd leases with wrong field count
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry pick commit: 59617f076d)
2018-08-17 23:24:16 -04:00
Dirk Brenken 1e5416bbd1 travelmate: update 1.2.2
* fix restart behaviour after successful connection
* fix labeling of faulty stations
* optimize re-connect behaviour at locations where multiple uplinks with
the same SSID are in range
* use procd pidfile handling
* refine logging
* small fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit bc78ad8200)
2018-08-11 07:49:33 +02:00
Jo-Philipp Wich d7bea561dc usbip: remove nonshared flag (#6681)
Since https://git.openwrt.org/d0e0b7049f88774e67c3d5ad6b573f7070e5f900,
OpenWrt SDKs ship the appropriate sources for building usbip userspace
packages, so special nonshared handling is not required anymore.

Sucessfully tested by compiling usbip utilities for various architectures
using self built SDKs after applying the change linked above.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit eded6ed7cf)
2018-08-05 12:39:45 +02:00
Philip Prindeville bae476afe5 isc-dhcp: write resolv.conf per network & dhcp settings
The internal nameservers and the DHCP default domain should be
squirted into /tmp/resolv.conf.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit db6adb616d)
2018-08-02 22:38:05 -06:00
Daniel F. Dickinson af0ad2ce0d nut: Fix for nut-upsmon without nut-server
nut-monitor failed to create required dir /var/etc/nut, as
well as failing to set appropriate user on the directory and
conf files.  Fixing this closes
https://github.com/openwrt/packages/issues/6644

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
(cherry picked from commit 98fdf16ecb)
2018-08-02 19:27:33 +03:00
Daniel F. Dickinson 6a5a257fc0 nut: Update my email
Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
(cherry picked from commit b4fe49d2b2)
2018-08-02 19:27:33 +03:00
Eneas U de Queiroz 41a9bf21f0 nut: Add PKG_FIXUP:=autoreconf
We need to force this since a *.m4 file is patched.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
(cherry picked from commit 6543859dab)
2018-08-02 19:27:33 +03:00
Eneas U de Queiroz 6576f7be92 nut: added compatibility with openssl-1.1
Also added a fix in a check for empty string.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
(cherry picked from commit 1a9a7cc280)
2018-08-02 19:27:33 +03:00
Christian Schoenebeck edf11aaaee ddns-scripts[18.06]: bump to version 2.7.8-1
- synchronize with "master" incl. add service FreeDNS.42.pl
- remove Cloudflare v1 protocol support #6084 #6519
- fix goip.de update url #6448 #6519
- change Cloudflare v4 to read "Proxied" from current setting at Cloudflare Dashboard #5097 #6364 #6505
- fix replace of password inside logfile #6568
- remove myself as PKG_MAINTAINER

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2018-08-01 09:59:02 +02:00
Jo-Philipp Wich cb54af8d0d privoxy: fix uci configuration parsing after upstream OpenWrt changes
OpenWrt changed the way the uci shell parsing functions deal with list
configuration items.

This change broke the generation of the privoxy runtime configuration
because no callbacks were emitted anymore.

Fix the problem by defining a list_cb() that simply calls the existing
option_cb() to deal with list item values.

Ref: c9c0fc28a9 ("base-files: fix UCI config parsing and callback handling")
Ref: https://forum.lede-project.org/t/openwrt-snapshot-privoxy-error/15919
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 3113d62393)
2018-08-01 09:29:55 +02:00
Eneas U de Queiroz 327a03e8f0 usbip: adapt package to new kernel/libudev
The sources for usbip are within the kernel.  A patch that was included
with the package, which changed the old signal name SIGCLD to the new
one, SIGCHLD, was merged upstream.  However, different targets use
different kernel versions.  Current version 4.14 and 4.9 are fine, but
older versions do not have the patch applied.  So, I used
-DSIGCLD=SIGCHLD to please both worlds.

libudev-fbsd currently used by openwrt does not implement the
udev_device_get_devpath function.  eudev's implementation of libudev
sets it as (src/libudev/libudev-device.c):
udev_device->devpath = udev_device->syspath + strlen("/sys");
I used a command-line define to use the same logic, as it works with
new and old versions of the kernel--the use of ..devpath is quite
recent.

I also linked with libbsd, when using glibc.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
(cherry picked from commit 633fe0dbdf)
2018-07-31 21:29:55 +02:00
Eneas U de Queiroz 8f6157048f usbip: Remove obsolete patches
These patches are obsolete and are never applied.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
(cherry picked from commit 0baaabb640)
2018-07-31 21:29:55 +02:00
Hannu Nyman 64ccbc88fb Merge pull request #6617 from dibdot/travelmate-18.06
travelmate[18.06]: backport release 1.2.1 to 18.06 branch
2018-07-30 23:07:09 +03:00
Hannu Nyman 4554f1c37c Merge pull request #6616 from dibdot/adblock-18.06
adblock[18.06]: backport release 3.5.4 to 18.06 branch
2018-07-30 23:06:58 +03:00
W. Michael Petullo 8bf5fc17db krb5: update to 1.16.1
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 8256b96743)
2018-07-30 16:11:35 +02:00
W. Michael Petullo 59199e2534 krb5: set replay cache directory to /tmp
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 536d555456)
2018-07-30 16:11:34 +02:00
Andy Walsh 14340062e3 krb5: update depends, adapt FS#1310
Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry picked from commit ebc41d5759)
2018-07-30 16:11:34 +02:00
Dirk Brenken 8a19a18c45 travelmate[18.06]: backport release 1.2.1 to 18.06 branch
Tested with latest 18.06 branch (OpenWrt 18.06-SNAPSHOT,
r7175+5-ca0c649a38)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2018-07-30 13:58:40 +02:00
Dirk Brenken 5e41db3de3 adblock[18.06]: backport release 3.5.4 to 18.06 branch
Tested with latest 18.06 branch (OpenWrt 18.06-SNAPSHOT,
r7175+5-ca0c649a38)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2018-07-30 13:51:06 +02:00
Eric Luehrsen 44790e43cb unbound: fix TLS override documentation
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2018-07-24 22:58:44 -04:00
Stan Grishin 45f6a81fb2 simple-adblock: better download processing, luci-app integration, lists optimization, firewall integration
Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit ac34bf910e)
2018-07-17 22:08:00 +03:00
Eric Luehrsen bd4cfc3d63 unbound: add README recipe for DNS/TLS outside of UCI
Unbound UCI in OpenWrt 18.06 has limited forward configuration lacking
DNS over TLS connection setup tools. User override files
'unbound_srv.conf' and 'unbound_ext.conf' can implement this.

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2018-07-09 01:26:54 -04:00
Eric Luehrsen 4e4534f1fb unbound: update README.md to be consistent with OpenWrt Wiki
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2018-07-04 15:21:54 -04:00
Stijn Tintel 8b76a11e67 strongswan: bump to 5.6.3
Fixes the following CVEs:
- CVE-2018-5388
- CVE-2018-10811

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 7bb68c74e2)
2018-06-27 16:33:58 +03:00
Eric Luehrsen eb80360e57 unbound: limit outside script source to init funciton scope
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2018-06-25 20:45:35 -04:00
Eric Luehrsen 3f00ecb725 unbound: update to 1.7.3
Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
2018-06-23 12:47:43 -04:00
Daniel Golle b94f4f8dce ola: enable and ship web stuff
Make OLA more useful for untrained users which depend on the built-in
webserver. We may split the ola package into smaller parts to allow
not having web-stuff in case this breaks the space-constraints for some
users.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2018-06-23 11:12:22 +02:00
Daniel Golle e4142dee1b ola: implement Host/Install for ola_protoc_plugin
Should fix build with SDK on buildbots.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2018-06-23 11:12:22 +02:00
Daniel Golle 5268d788f5 ola: update to 0.10.6, fix build with recent protobuf
Recent protobuf requires C++11 while OLA was forcing C++98 in order
to keep using auto_ptr without getting warnings... Use gnu++11 to make
everyone happy and live with the warnings about auto_ptr being
deprecated.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2018-06-23 11:12:22 +02:00
Saverio Proto cb7048e427 tinc: version bump 1.0.34
Signed-off-by: Saverio Proto <zioproto@gmail.com>
2018-06-15 17:03:47 +02:00
W. van den Akker 3d38c59976 Shorewall6: Bump to version 5.2.0.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:05:50 +02:00
W. van den Akker 0daf02f3a3 Shorewall: Bump to version 5.2.0.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:05:29 +02:00
W. van den Akker 979ea451a3 Shorewall6-lite: Bump to version 5.2.0.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:05:09 +02:00
W. van den Akker 61f78cd51b Shorewall-lite: Bump to version 5.2.0.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:04:50 +02:00
W. van den Akker decc2f979f Shorewall-core: Bump to version 5.2.0.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:04:30 +02:00
W. van den Akker 25f8ef2a46 Shorewall6: Bump to 5.2.0.3
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:04:04 +02:00
W. van den Akker 4a024eaf3b Shorewall: Bump to 5.2.0.3
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:03:41 +02:00
W. van den Akker 6f14c89fb0 Shorewall6-lite: Bump to 5.2.0.3
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:03:08 +02:00
W. van den Akker e0166df3dd Shorewall-lite: Bump to 5.2.0.3
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:02:49 +02:00
W. van den Akker 12e3fe7743 Shorewall-core: Bump to 5.2.0.3
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:02:28 +02:00
Rafał Miłecki 4cc0c88713 lighttpd: backport fix for plain auth from 1.4.49 release
Update commit 3d59ce6f50 ("lighttpd: update to 1.4.48") resulted in
plain auth regression: it simply stopped working with:
(mod_auth.c.525) password doesn't match for (...)
appearing on every authentication try.

This regression was fixed in 1.4.49 release. Backport the fix instead of
updating to the 1.4.49 to avoid risking more/other regressions.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2018-06-09 22:21:44 +02:00
Toke Høiland-Jørgensen b6e7720aff sqm-scripts: Bump to v1.2.3
Fixes an issue with sqm-scripts not being reloaded on ifup/down.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2018-06-05 23:39:02 +02:00
Florian Eckert cd5fd3883e net/mwan3: update version to 2.6.17
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit acf7278fb8)
2018-05-30 17:38:36 +03:00