Commit Graph

6762 Commits

Author SHA1 Message Date
Aaron Goodman 4f727bcc02 openfortivpn: version bump to 1.14.1
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-06-04 16:49:47 -04:00
Paulo Machado 5f64b2d1e4 linuxptp: fix build failure
Build is failing because HWTSTAMP_TX_ONESTEP_P2P is defined anymore on
linux net_tstamp.h.

Moreover, the usual way of linuxptp build is looking for system includes
unless user defines differently. That also was tried to fix.

PKG_RELEASE bumped to 3.

Signed-off-by: Paulo Machado <pffmachado@yahoo.com>
2020-05-26 16:29:39 +01:00
Josef Schlehofer 49e01721ed Merge pull request #12314 from Payne-X6/master
knot: update to version 2.9.5
2020-05-26 14:21:48 +02:00
Jan Hak 9d81b6e4ca knot: update to version 2.9.5
Removed patch
`03-configure-allow-to-manually-disable-POSIX-capabiliti.patch` that has been backported into release.

Signed-off-by: Jan Hak <jan.hak@nic.cz>
2020-05-26 14:19:44 +02:00
Rosen Penev e8c831e236 Merge pull request #12296 from neheb/trans
transmission: update to 3.0
2020-05-26 02:05:40 -07:00
Kevin Darbyshire-Bryant 295d77943c miniupnpd: improve hotplug & interface handling
The existing interface selection/detection code was incomprehensible at
worst and convoluted at best.  The uci config file suggested it
understood an external ipv6 interface but in reality the init script
took no notice.  Re-work it so it is at least comprehendible and takes
notice of ipv6 interface details if specified.

Update the hotplug script to use the same interface selection/detection
code as the init script and take note of ipv6 interface selection, only
restarting miniupnpd on interface up events and only if that interface
isn't already known (for that ip class) by miniupnpd.

For me this has solved numerous 'flaky' startup problems, especially
with regard to ipv6.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2020-05-25 22:49:03 +01:00
Rosen Penev f6d03d06fd Merge pull request #12302 from aleksander0m/aleksander/mm-mtu
modemmanager: set interface MTU based on bearer settings
2020-05-25 12:08:17 -07:00
Aleksander Morgado 41552c1cc2 modemmanager: set interface MTU based on bearer settings
Using the same method used by other protocol handlers like uqmi.

Fixes https://github.com/openwrt/packages/issues/11383

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2020-05-25 15:35:50 +02:00
Jan Pavlinec 168efe753d clamav: update to version 0.102.3 (security fix)
Fixes:
CVE-2020-3341
CVE-2020-3327

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-05-25 15:13:51 +02:00
Rosen Penev 93485dd317 transmission: update to 3.0
remove upstreamed patches. Refresh remaining one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-24 21:20:36 -07:00
Rosen Penev f50e2bde1d Merge pull request #12077 from peter-stadler/uwsgi
uwsgi: make luci-webui single threaded and log more
2020-05-24 18:32:00 -07:00
Rosen Penev 6b102f67d2 Merge pull request #12184 from peter-stadler/nginx-luci
nginx: set log level to crit for luci-static
2020-05-24 18:30:10 -07:00
Dirk Brenken 0b6ea12560 adblock: limit domain name length
* limit domain name length to max. 63 chars
  to fix issues with energized sources

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-05-24 21:40:58 +02:00
Peter Stadler 34cb21a2cf nginx: set log level to crit for luci-static
Do not write errors for inexistent files to the system log.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-05-24 18:53:16 +02:00
Rosen Penev f5fdcf3e7e Merge pull request #12159 from peter-stadler/nginx-smp
nginx: do not reduce max processes
2020-05-23 19:53:54 -07:00
Dirk Brenken c9f91ecc47 adblock: release 4.0.5
* update energized source urls, add ultimate variant
* switch shalla source to http (invalid server certificate)
* add another stevenblack source variant (normal / porn)
* small cornercase fixes
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-05-23 21:15:52 +02:00
Rosen Penev 6607eeb96b Merge pull request #12243 from PolynomialDivision/feature/update_dawn_latest
dawn: update to latest version
2020-05-23 01:11:02 -07:00
Nick Hainke d1e0ae6a45 dawn: update to latest version
Includes:
- dawn_iwinfo: fix whitespace
- dawn_iwinfo: indentation
- dawn_iwinfo: iwinfo_finish();
- dawn_iwinfo: filter out global interface
- dawn_iwinfo: release iwinfo after usage
- tcpsocket: fix port print
- github: set CONFIG_SRC_TREE_OVERRIDE in actions CI
- github: fix link to dawn source
- github: use v2 for checkout action
- github: add GitHub Actions CI
- ubus: only update TCP socket list when using TCP connections
- add notice that full wpad is requirement
- fix link to luci-app-dawn
- update readme and install instructions

Signed-off-by: Nick Hainke <vincent@systemli.org>
2020-05-23 09:42:02 +02:00
Rosen Penev 2f8c24dfd1 Merge pull request #12252 from BKPepe/knot-disable-libcap-ng
knot: disable libcap-ng
2020-05-22 14:05:17 -07:00
Matthias Schiffer 598d4baa02 fastd: update to v19
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2020-05-22 21:15:46 +02:00
Josef Schlehofer 41957d6967 knot: disable libcap-ng
Recently, there was added libcap-ng to OpenWrt packages feed,
which is optional for Knot DNS. It enables POSIX 1003.1e capabilities.
This can restrict root (by default it runs as root) permissions and
might harm and as there isn't systemd on OpenWrt it can interfere.

There is an added patch, which introduced an option to disable libcap-ng.
This will be part of the next release.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-22 14:13:45 +02:00
Jeffery To f350b5620b seafile-server: Update to 7.1.4, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-21 15:53:54 +08:00
Josef Schlehofer a75391575b bind: update to version 9.16.3
Fixes:
CVE-2020-8616
CVE-2020-8617

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-20 11:24:22 -07:00
Rosen Penev 9455e46d7a Merge pull request #12232 from neheb/cifs
cifs-utils: fix compilation
2020-05-20 09:20:10 -07:00
Yousong Zhou 1091badd83 openvswitch: fix file generation in /etc/modules.d
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Reported-by: Paul Spooren <mail@aparcar.org>
2020-05-20 23:29:44 +08:00
Josef Schlehofer ef71facb41 Merge pull request #12215 from BKPepe/unbound-1.10.1
unbound: update to version 1.10.1 (security fix)
2020-05-20 08:40:18 +02:00
Rosen Penev 71975d68a4 cifs-utils: fix compilation
Now that libcap-ng is in the tree, cifs-utils is picking it up.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-19 22:14:10 -07:00
Hannu Nyman 5e84c4872c Merge pull request #12210 from jefferyto/etesync-server-minor-cleanup
etesync-server: Minor Makefile cleanup
2020-05-19 17:01:14 +03:00
Josef Schlehofer 8ccff44ad1 unbound: update to version 1.10.1
Fixes:
CVE-2020-12662
CVE-2020-12663

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-19 11:23:57 +02:00
Rosen Penev ee9fe907e7 Merge pull request #12212 from lnslbrty/package/netsniff-ng
netsniff-ng: new package
2020-05-19 01:18:00 -07:00
Toni Uhlig 563b1225ff netsniff-ng: new package
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
2020-05-19 09:55:00 +02:00
Jeffery To 70064ea4ad etesync-server: Minor Makefile cleanup
* Replace creating an empty PYTHON3_PKG_DIR with setting filespec to an
  empty value

* Disable the default Python package build recipe (with
  PYTHON3_PKG_BUILD:=0) and set an empty Build/Compile

* Remove VARIANT:=python3 and PROVIDES (providing the same name as the
  package)

* Add PKG_BUILD_PARALLEL:=1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-19 00:19:54 +08:00
Lucian Cristian a659c58f29 libreswan: various fixes
start if kernel has missing ipv6 support
add libcap-ng support
fix some errors displayed on syslog

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-17 04:57:48 +03:00
Sebastian Kemper 07db6b4a39 apache: revisit suEXEC setup
When adding suEXEC to the apache package, Alpine's package [1] served as
a template. Not enough attention was paid to the details.

Alpine uses a different layout. So for OpenWrt to use /var/www as
DocumentRoot does not make sense. /var is also volatile on OpenWrt. This
commit removes the configure argument. The default is htdocsdir.

This also does away with uidmin/gidmin 99. The default is 100, which is
fine.

Finally, the suexec binary is moved from /usr/sbin to
/usr/lib/apache2/suexec_dir. Upstream recommends installing suexec with
"4750" (see [2]) and the group set to the user's group. While that would
be possible, it would cause a few headaches on OpenWrt. The group would
need to be changed first in a post-install script and a call to chmod
would need to be made afterward, to make the binary SUID again.

It's easier to hide the SUID binary away from others in a directory.
This way we don't need to use chmod in the post-install script.

[1] https://github.com/alpinelinux/aports/tree/master/main/apache2
[2] https://httpd.apache.org/docs/2.4/suexec.html

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-16 14:47:37 +02:00
Sebastian Kemper dbaad2fa44 apache: create log directory o=
Hides away the contents of the log directory from others.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-16 14:24:05 +02:00
W. van den Akker fbed8ff1e7 Shorewall6: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:35:30 +02:00
W. van den Akker 49a930dae6 Shorewall: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:34:21 +02:00
W. van den Akker 10afa55dfb Shorewall6-lite: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:33:12 +02:00
W. van den Akker 3a61f1244d Shorewall-lite: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:32:11 +02:00
W. van den Akker fba9ad6c3b Shorewall-core: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:31:02 +02:00
Rosen Penev 66c94cd4e9 Merge pull request #12168 from lucize/libreswup
libreswan: update to 3.32
2020-05-14 20:45:37 -07:00
Olivier Poitrey 5d6e75743a nextdns: Update to version 1.5.8
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-14 23:41:01 +00:00
Lucian Cristian 7d969ca3e1 libreswan: update to 3.32
also add -flto to compiler flags

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-14 16:32:10 +03:00
Rosen Penev a22fff844d Merge pull request #9865 from peter-stadler/etesync
etesync-server: add package and configuration for running with uwsgi on nginx [RFC]
2020-05-14 00:24:59 -07:00
Peter Stadler 62609f1587 nginx: do not reduce max processes
Use the upstream value for NGX_MAX_PROCESSES (=1024) again.
So it is safe to use `worker_processes auto;` (which sets it to
the number of CPUs). Also use this directive in the conf instead
of calculating the number in the init and passing it as argument.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-05-14 09:19:45 +02:00
Rosen Penev 355d2b7bef Merge pull request #12060 from looklookson/master
sslh: Add http probe support
2020-05-13 15:22:38 -07:00
Rosen Penev 5f1c9e3c94 Merge pull request #11964 from zhanhb/nginx-all-module
nginx: update all-module configurations
2020-05-13 14:56:58 -07:00
Rosen Penev f1b445963b Merge pull request #11981 from zhanhb/conffiles
treewide: add conffiles
2020-05-13 14:44:35 -07:00
Rosen Penev edff5dffaa Merge pull request #12146 from kobboi/master
ifstat: make dependency on libnetsnmp conditional
2020-05-13 14:39:52 -07:00
Othmar Truniger 33fb579a41 knxd: bump to version 0.14.37
Signed-off-by: Othmar Truniger <github@truniger.ch>
2020-05-13 14:12:50 +02:00