Commit Graph

5939 Commits

Author SHA1 Message Date
Dirk Brenken 1aa8e8fe14 adblock: change winspy url
* the windows 7/8.1/10 rules has been merged and the blocklist url
  has been changed

Signed-off-by: Dirk Brenken <dev@brenken.org>
2018-06-04 14:29:47 +02:00
Toke Høiland-Jørgensen 17b2c1a23b unbound: Enable TCP fast open
This can reduce the lookup times for TCP lookups with a full RTT for
supported servers.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2018-06-04 09:19:23 +02:00
Ansuel Smith bcc1c9615a uwsgi-cgi: another missing library
Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2018-06-04 08:35:18 +02:00
Ansuel Smith e4917a9bc6 uwsgi-cgi: add missing library
This fix compilation error for the missing library libjansson

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2018-06-04 07:58:08 +02:00
Yousong Zhou 932cb25b41 shadowsocks-libev: bump to version 3.2.0
Changes summarized by upstream maintainer

  * Add MinGW support by @linusyang.
  * Refine c-ares integration by @xnoreq.
  * Fix building issues with GCC8 by @FlyingheartCN.
  * Minor bug fixes.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-06-04 11:47:17 +08:00
Yousong Zhou 02fa673f82 openvswitch: bump to version 2.9.2
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-06-04 11:27:54 +08:00
Yousong Zhou c2f788f054 openvswitch: rework packaging
New scheme mainly provides three packages: openvswitch,
openvswitch-ovn-north, openvswitch-ovn-controller.  These should fit
most usage scenarios.  Other subpackages like openvswitch-libXXX
etc.  are there for dependency management and are hidden from the
menu.

Many python and shell scripts are removed in this revision.  Most of
them cannot run out of box at all for lack of dependencies.  Others
being legacy ones are not that useful now.  Add them back at later time
when real need appears

Below are a simple listing of additions

 - initscript now incorporate also ovn north and controller support
 - ovn-ctl and ovs-ctl can be invoked directly from within $PATH

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-06-04 11:27:54 +08:00
Hannu Nyman efa81850f2 Merge pull request #6166 from cotequeiroz/nut_openssl-1.1
nut: added compatibility with openssl-1.1
2018-06-04 00:04:51 +03:00
Ansuel Smith fee38c1cdf uwsgi-cgi: fix error
Bad makefile, fix missing separator error.
Also add PKG_MIRROR_HASH

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2018-06-03 19:58:24 +02:00
Hannu Nyman 83bbfa4270 Merge pull request #6096 from xavifr/master
lighttpd: Auth in version 1.4.48 is broken with musl, fixed in 1.4.49
2018-06-03 17:16:56 +03:00
Hannu Nyman 967ad04e77 Merge pull request #6083 from Ansuel/master
uwsgi-cgi: New package
2018-06-03 17:09:46 +03:00
Hannu Nyman fb5736dd1c Merge pull request #6103 from Ansuel/ddns-fix
ddns-scripts: fix unefficent sh script
2018-06-03 14:53:04 +03:00
Hannu Nyman 362adcbde4 Merge pull request #6116 from cotequeiroz/aircrack-ng_openssl-1.1
aircrack-ng: add openssl 1.1 compatibility
2018-06-03 09:52:15 +03:00
Hannu Nyman ce37c5fb65 Merge pull request #6117 from cotequeiroz/bitlbee_openssl-1.1
bitlbee: added openssl 1.1 support
2018-06-03 09:50:55 +03:00
Hannu Nyman 6e42b4b129 Merge pull request #6170 from MikePetullo/krb5
krb5: set replay cache directory to /tmp
2018-06-03 09:47:10 +03:00
W. Michael Petullo 536d555456 krb5: set replay cache directory to /tmp
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2018-06-02 15:54:24 -04:00
Ansuel Smith 8bb49eb5ed ddns-scripts: fix unefficent sh script
Currently this 3 variable are used only 1 time in the sh script and cause 10s of delay for them to load... move them to load only if it's required by the command. This also fix luci-app-ddns delay problem derived by calling dns_lucihelper (that use tdns_functions to load data) for the version.

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2018-06-02 18:04:16 +02:00
Ansuel Smith 157baf5c65 nginx: Package bump to 1.14.0
This bump nginx package to latest stable.
Also add support for the brotli compression module and head_more module.

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2018-06-02 14:02:37 +02:00
Eneas U de Queiroz 1a9a7cc280 nut: added compatibility with openssl-1.1
Also added a fix in a check for empty string.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2018-06-01 12:04:32 -03:00
Ansuel Smith 034e2bde7a ariang: Bump to latest version
This upgrade ariang webui to latest version

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2018-05-31 20:18:40 +02:00
Martin Blumenstingl 96ae89c801 net/vnstat: enable auto-respawn when vnstatd crashes
Originally this was indended as a fix for devices without RTC support
which do not have the correct time set after a reboot (until ntp is able
to update the system time). vnstat checks if there is a time difference
between the latest entry in the database and detects that the system time
is incorrect. In this case vnstat does not start (to prevent database
corruption), the following message is reported instead:
'Error: Interface "..." has previous update date too much in the future,
exiting.'
Once we have network connectivity (and ntp has updated the system time)
vnstat starts correctly though.
vnstat 1.18 fixes this by waiting a few minutes (instead of exiting) and
the following message is logged:
"Latest database update is in the future (db: 2018-04-28 08:39:11 > now:
2018-04-28 08:07:18). Giving the system clock up to 5 minutes to sync
before continuing."

This still adds a procd respawn trigger to let procd automatically
restart vnstat in case:
- vnstat it crashes
- no valid system time is received for a long time (no network
  connectivity, broken NTP servers, ...)

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>
2018-05-31 13:03:38 +02:00
Martin Blumenstingl e1acbd55b6 net/vnstat: port the init-script to procd
This ports the init-script from the legacy functions to procd. There
should be no functional changes with this patch.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>
2018-05-31 13:03:38 +02:00
Hannu Nyman 4bacddbbed Merge pull request #6131 from cotequeiroz/conserver_openssl-1.1
conserver: bump to v8.2.2 - adds openssl 1.1 compatibility
2018-05-30 17:42:46 +03:00
Hannu Nyman a02335741d Merge pull request #6153 from TDT-AG/pr/20180530-net-mwan3-fix-connected-networks
net/mwan3: fix connected networks
2018-05-30 16:40:51 +03:00
Florian Eckert acf7278fb8 net/mwan3: update version to 2.6.17
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-05-30 12:57:49 +02:00
Florian Eckert 7ea690ea3c net/mwan3: fix update on connected ip networks
If an interface is not tracked by mwan3 or enabled and this interface is
setup by netifd, then the connected ipset is not update by mwan3.
To fix this also call connected ipset update code even if the interface
is not tracked or enabled by mwan3.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-05-30 12:56:50 +02:00
Peter Wagner 1673e33b20 git: update to 2.17.1
Fixes CVE-2018-11233 and CVE-2018-11235

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2018-05-30 01:07:15 +02:00
Eneas U de Queiroz b941c8d932 noddos: add compatibility with openssl 1.1
Adapted minor piece of code to the new API.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2018-05-29 16:42:31 -03:00
Xavier Franquet 429b955ca2 Merge remote-tracking branch 'upstream/master' 2018-05-29 09:07:16 +02:00
Eric Luehrsen 36e1aa0892 unbound: add root zone file cache option
Add the possibility to use Unbound auto-zone: clause to
fetch complete root, arpa, in-addr.arpa, and ip6.arpa
zone files. This can speed up recursion when users
access many ccTLD or connection logging hits many PTR.

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
2018-05-28 23:32:12 -04:00
Eric Luehrsen cdeefec73e unbound: provide transparent defaults with documentation
Some resource options bundled many Unbound.conf options and
made customizing on top of UCI difficult. Make it easier to
use Unbound built defaults (blank conf sections).

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
2018-05-28 23:32:12 -04:00
Eneas U de Queiroz 731a00aae5 conserver: update to v8.2.2
Adds openssl compatibility.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2018-05-28 23:31:54 -03:00
Stijn Tintel 7bb68c74e2 strongswan: bump to 5.6.3
Fixes the following CVEs:
- CVE-2018-5388
- CVE-2018-10811

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2018-05-28 23:38:53 +03:00
Hannu Nyman 1dc97d9206 Merge pull request #6140 from neheb/tr
transmission: Update to 2.94
2018-05-30 13:59:07 +03:00
Peter Wagner 0d1f48893c nfs-kernel-server: update to 2.3.2
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2018-05-28 20:53:18 +02:00
Yousong Zhou 86ece31c66 openvswitch: remove ovs-parse-backtrace
It's a python script and requires backtrace support when building
openvswitch which requires glibc.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-05-28 18:06:44 +08:00
Yousong Zhou a65da6a79a openvswitch: remove docker related utilities
The overlay and underlay driver, and ovs-docker utilities requires setup
and dependencies that are just not available in known maintained state.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-05-28 17:41:51 +08:00
Rosen Penev a46d0ffb83 transmission: Update to 2.94
Mainly a bugfix for XSS. Patches have been refreshed.

Added an upstream fix for TLS verification. Now enabled by default.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-05-27 15:18:12 -07:00
Hannu Nyman 763dab4eb8 Merge pull request #5897 from oldium/fwknopd-device-fix
fwknopd: More reliable network dependency
2018-05-28 00:37:11 +03:00
Eneas U de Queiroz 86e4b33a9d ibrdtnd: added openssl 1.1 compatibility
This patch adds compatibility with openssl 1.1.0 to ibrdtnd.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2018-05-27 07:48:06 -03:00
Eneas U de Queiroz 9ded227056 freeradius3: update to 3.0.17
Latest stable release, support for openssl 1.1

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2018-05-25 17:33:12 -03:00
Eneas U de Queiroz 3c78b49ab5 chaosvpn: add compatibility with openssl 1.1
This patch has been merged upstream.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2018-05-25 09:24:27 -03:00
Hannu Nyman 61c4f98c4c Merge pull request #6127 from mwarning/zerotier
zerotier: update to version 1.2.10
2018-05-25 15:19:59 +03:00
Moritz Warning 0bc668aded zerotier: update to version 1.2.10
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2018-05-25 13:08:06 +02:00
Eneas U de Queiroz b2dcf42108 bitlbee: added openssl 1.1 support
This patch was submitted upstream.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2018-05-24 23:57:24 -03:00
Eneas U de Queiroz 168ccaafbf aircrack-ng: adds openssl 1.1 compatibility
Applied a patch that was merged upstream.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2018-05-24 22:19:13 -03:00
Eneas U de Queiroz 0c995cabe7 rp-pppoe: Fixed compilation with glibc
Do not inlcude <netinet/in.h> when using glibc to avoid various
redefinitions.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2018-05-23 14:24:35 -03:00
Eneas U de Queiroz 633fe0dbdf usbip: adapt package to new kernel/libudev
The sources for usbip are within the kernel.  A patch that was included
with the package, which changed the old signal name SIGCLD to the new
one, SIGCHLD, was merged upstream.  However, different targets use
different kernel versions.  Current version 4.14 and 4.9 are fine, but
older versions do not have the patch applied.  So, I used
-DSIGCLD=SIGCHLD to please both worlds.

libudev-fbsd currently used by openwrt does not implement the
udev_device_get_devpath function.  eudev's implementation of libudev
sets it as (src/libudev/libudev-device.c):
udev_device->devpath = udev_device->syspath + strlen("/sys");
I used a command-line define to use the same logic, as it works with
new and old versions of the kernel--the use of ..devpath is quite
recent.

I also linked with libbsd, when using glibc.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2018-05-23 14:18:17 -03:00
Xavier Franquet a565ef8eaa SNMPD: Add snmp_extend config option
Signed-off-by: Xavier Franquet <xavier@franquet.es>
2018-05-23 16:04:13 +02:00
Xavier Franquet 425331f316 Lighttpd: Update to 1.4.49
At 1.4.48, base64 decode is broken when libc sees `char` as `unsigned char`

https://github.com/lighttpd/lighttpd1.4/commit/d4083effab0f9bf76528d5c47198b17e7471ed13?diff=unified

Signed-off-by: Xavier Franquet <xavier@franquet.es>
2018-05-23 15:38:53 +02:00