Commit Graph

23455 Commits

Author SHA1 Message Date
Rosen Penev c8cee2bbee mutt: update to 1.14.6
Fixes CVE-2020-14154

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-23 13:37:00 -07:00
Rosen Penev 4a798f14e9 Merge pull request #12822 from neheb/mht
libmicrohttpd: update to 0.9.71
2020-07-23 13:15:45 -07:00
Rosen Penev 4da82b8569 Merge pull request #12893 from ja-pa/tor-0.4.3.6
tor: update to version 0.4.3.6 (security fix)
2020-07-23 13:15:08 -07:00
Nuno Goncalves 5466acd837 gl-mifi-mcu: add GL.iNet GL-MiFI power monitoring kernel module
Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>
2020-07-23 21:38:48 +02:00
Josef Schlehofer 9828dac28f python-urllib3: update to version 1.25.10
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-07-23 14:39:01 +02:00
Rosen Penev 1bcd916bad Merge pull request #12901 from commodo/python-batch1
python-simplejson,python-lxml,python-simplejson: bump versions
2020-07-22 13:45:16 -07:00
Rosen Penev 3ef6d9827c Merge pull request #12903 from ja-pa/measurement-kit-0.10.12
measurement-kit: update to version 0.10.12
2020-07-22 13:44:43 -07:00
Jan Pavlinec 2ef501831b measurement-kit: update to version 0.10.12
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-07-22 14:48:21 +02:00
Alexandru Ardelean c50dda22fc python-simplejson: bump to version 3.17.2
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2020-07-22 10:35:50 +03:00
Alexandru Ardelean 5a6ea6fb26 pymysql: bump to version 0.10.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2020-07-22 10:31:59 +03:00
Alexandru Ardelean 3f0099bff1 python-lxml: bump to version 4.5.2
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2020-07-22 10:30:31 +03:00
Aaron Goodman d134b7ffbb openfortivpn: Only start autostart interfaces on hotplug event
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-21 22:01:46 -04:00
Rosen Penev 75efd85bf1 Merge pull request #12799 from aaronjg/openfortivpn/netifd
openfortivpn: use standard 'peerdns' config option on netifd script
2020-07-21 18:59:00 -07:00
Daniel Golle 46da3eedc5 gnunet: update to version 0.13.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-07-22 02:43:35 +01:00
Rosen Penev 2860cf169a liblz4: fix previous patch
Previous patch was incomplete.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-21 15:00:38 -07:00
Rosen Penev cb44cd60c4 liblz4: add patch removing distutils requirement
Allows meson to compile on systems that lack distutils.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-21 14:06:39 -07:00
Rosen Penev 53ed852684 Merge pull request #12891 from ja-pa/redis-6.0.6
redis: update to version 6.0.6
2020-07-21 12:35:40 -07:00
Jan Pavlinec 3f51a1ee6e tor: update to version 0.4.3.6 (security fix)
Fixes
CVE-2020- 15572

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-07-21 12:53:57 +02:00
Jan Pavlinec 4afed7d2ff redis: update to version 6.0.6
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-07-21 11:57:45 +02:00
Florian Eckert 41e6cc2768 Merge pull request #12849 from TDT-AG/pr/20200717-docker-ce
docker-ce: add reload handling
2020-07-21 10:07:28 +02:00
Florian Eckert 2d27c4a10c docker-ce: add reload handling
If the uci configuration is changed send dockerd a SIGHUP to reload the
generated daemon.json file with the new configuration.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-07-21 10:04:39 +02:00
Rosen Penev 4623f80786 libnpupnp: update to 4.0.10
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-20 23:32:21 -07:00
Rosen Penev 7ca18957ad Merge pull request #12889 from neheb/mpd-25
mpd: update to 0.21.25
2020-07-20 23:19:59 -07:00
Rosen Penev dfdc430a4a mpd: update to 0.21.25
pulseaudio-daemon depends on alsa-lib, which depends on @AUDIO_SUPPORT.
Enables -full on platforms lacking AUDIO_SUPPORT.

Simplified LDFLAGS slighly.

Removed pointless ICU dependency. I managed to patch meson.build to fix
iconv compilation. The original error was that without the header, it
was prefixing the iconv check with __buildin_ , which does not work
with uClibc-ng.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-20 19:56:51 -07:00
Gérondal Thibault 5d42bf7550 prometheus-node-exporter-lua: Makefile alphabetical ordering
Signed-off-by: Gérondal Thibault <contact@tycale.be>
2020-07-20 13:11:04 -10:00
Gérondal Thibault e2b3fec6bf prometheus-node-exporter-lua: uci_dhcp_host module
Extract data from configuration file /etc/config/dhcp and create labels
{name, ip, mac, dns} via uci. Those labels are useful in order to craft
complex prometheus queries as replacing the MAC address to a custom
name.  E.g.: wifi_station_signal_dbm * on (mac) group_left(name)
uci_dhcp_host or on (mac) label_replace(wifi_station_signal_dbm, "name",
"$1", "mac", "(.+)")

Signed-off-by: Gérondal Thibault <contact@tycale.be>
2020-07-20 13:11:04 -10:00
Rosen Penev f4e878c215 Merge pull request #12885 from peter-stadler/django-cors-headers
python3-django-cors-headers: update to version 3.4.0
2020-07-20 14:08:09 -07:00
Josef Schlehofer 62870a887d Merge pull request #12884 from peter-stadler/asgiref
python3-asgiref: update version to 3.2.10
2020-07-20 18:12:53 +02:00
Peter Stadler f81ad44a62 python3-django-cors-headers: update to version 3.4.0
update to latest version changing the URL and DEPENDS, too.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-07-20 18:11:45 +02:00
Peter Stadler bb4107c4f2 python3-asgiref: update version to 3.2.10
update to latest version.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-07-20 13:24:04 +02:00
Rosen Penev 38db6a2e3e Merge pull request #12880 from jefferyto/python-3.8.4
python3: Update to 3.8.4, refresh/rework patches, backport patches
2020-07-20 03:23:48 -07:00
Jeffery To 1a3cef77d4 python3: Update to 3.8.4, refresh/rework patches, backport patches
This version includes fixes for:
* CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface
* CVE-2020-15523: Python uses invalid DLL path after calling Py_SetPath
  on Windows

This version also includes support for OpenSSL 1.1.x builds that use
'no-deprecated' and '--api=1.1.0'[1], and so this removes the previous
OpenSSL-related patches.

This also backports fixes for security issues, including:
* CVE-2019-20907: Infinite loop in the tarfile module

This also updates the setuptools and pip packages to 47.1.0 and 20.1.1,
respectively.

[1]: https://github.com/python/cpython/pull/20566

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-07-20 17:30:14 +08:00
Rosen Penev 567c620bdc Merge pull request #12879 from TDT-AG/pr/20200720-mwan3
mwan3: update to version 2.8.11
2020-07-20 00:36:40 -07:00
Rosen Penev 6fec82d068 Merge pull request #12848 from BKPepe/squid
squid: update to version 4.12 (security update)
2020-07-20 00:35:45 -07:00
Josef Schlehofer 3401e29aa7 squid: update to version 4.12
- Fixes CVEs:

CVE-2019-12519
CVE-2019-12520
CVE-2019-12521
CVE-2019-12523
CVE-2019-12524
CVE-2019-12525
CVE-2019-12526
CVE-2019-12527
CVE-2019-12528
CVE-2019-12529
CVE-2019-12824
CVE-2019-12854
CVE-2019-13345
CVE-2019-18676
CVE-2019-18677
CVE-2019-18678
CVE-2019-18679

CVE-2020-8449
CVE-2020-8450
CVE-2020-11945
CVE-2020-14058
CVE-2020-15049

- Remove patch for cross-compilation
The patch should not be included in the OpenWrt at all without any
commit message/description.
Is not needed and there should be used HOST variables instead of BUILD variables (e.g.
   HOSTCXX)
However, the BUILDCXX is set in Makefile to HOSTCXX

- Renumber glibc patch and refresh it

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-07-20 08:56:50 +02:00
Florian Eckert f601e6cfa4 mwan3: update version to 2.8.11
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-07-20 08:15:50 +02:00
Florian Eckert b0acbf057e mwan3: add online and uptime to detail output
Add also online time value and uptime time value from netifd to the
detail output view.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-07-20 08:13:34 +02:00
Florian Eckert 058a2b6f30 mwan3: add workaround for procd change
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-07-20 08:12:48 +02:00
Florian Eckert cde2a77ed3 mwan3: also cleanup lock on mwan3 stop
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-07-20 08:12:31 +02:00
Florian Eckert bcd13ba95c mwan3: fix rtmon routing table function generation
If the uci option family is not set in the interface section, then there
is no default value set as in the `config_load / config_get` API.
The problem here is that if the family is not set, the default value ipv4
is normaly assumed. But the comparison fails here because the value is empty
and therefore the dedicated routing table for this interface is not compared
with the other routes from the main table and so not updated.

To fix this set the default value for this config option which is`false`
for enabled and `ipv4` for family.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-07-20 08:11:20 +02:00
Florian Eckert bcd914e665 Merge pull request #12814 from aaronjg/improvements/mwan3-misc-improvements-rb
mwan3: clean up ipv4/ipv6 duplicated code and misc. improvments
2020-07-20 08:06:39 +02:00
Florian Eckert 8e3e6f8dde mwan3: fix IPv6 routing add handling
This fixes routing handling. Introduced with the last version update.
The following message disappears on the shell
when mwan3 is called with 'mwna3 restart`.

`Error: Invalid gateway address.`

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
[aaronjg@stanford.edu: fully unset variable and handle ipv4 as well]
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 23:24:13 -04:00
Florian Eckert a796b7a84e mwan3: fix idx calculation
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
[aaronjg@stanford.edu: fix syntax error]
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 23:24:13 -04:00
Aaron Goodman ca8bc3d115 mwan3: version bump
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 23:24:13 -04:00
Aaron Goodman 30a46bdc9e mwan3: cleanup duplicate ipv4 and ipv6 logic
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 23:24:13 -04:00
Aaron Goodman 702a104f9c mwan3: don't send iptable setup failures to /dev/null
silencing failing rules makes debugging more difficult

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 23:18:22 -04:00
Aaron Goodman 2a5e9be83e mwan3: add default rule for ipv6 in example config
default rule only applied to ipv4 with dest_ip 0.0.0.0/0
and error was hidden when trying to apply it in ip6table

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 23:18:21 -04:00
Aaron Goodman a0d66d4eeb mwan3: don't try to use ipv6 if not installed
fix issue  #11826

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 23:18:18 -04:00
Aaron Goodman f32ad35870 openfortivpn: use standard 'peerdns' argument on netifd script
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 18:54:48 -04:00
Rosen Penev 04432dc54f Merge pull request #12864 from aaronjg/bugfix/openfortivpn-ping
openfortivpn: add host up test back
2020-07-19 15:35:00 -07:00