cubixle/packages
1
0
Fork 0
mirror of https://github.com/novatiq/packages.git synced 2026-07-27 05:56:15 +01:00
Code Issues Packages Projects Releases Wiki Activity
16,908 Commits 8 Branches 1 Tag
8e1b62d4bb88d1ac2e66cb61d2cfef0874af0da6
Commit Graph
5991 Commits
Author SHA1 Message Date
Josef SchlehoferandYousong Zhou 8e1b62d4bb openvswitch: update to version 2.11.6 (security fix) 
Fixes CVEs:
- CVE-2020-35498
- In DPDK: CVE-2015-8011 and CVE-2020-27827
- In LLDP: CVE-2019-14818, CVE-2020-10722, CVE-2020-10723 and CVE-2020-10724

Removed patches:
- 0001-compat-Include-confirm_neigh-parameter-if-needed.patch because they
are included in this release as it was backported
- 0010-acinclude-Fix-build-with-kernels-with-prandom-moved-.patch
included in this release as it was backported

Other patches were refreshed.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
 2021-02-23 17:14:37 +08:00
Rosen PenevandGitHub 3be5d565cf Merge pull request #14710 from stangri/19.07-https-dns-proxy 
[19.07] https-dns-proxy: support for force DNS/DNS hijacking
 2021-02-22 16:27:00 -08:00
Moritz WarningandJosef Schlehofer 7be89f1f34 zerotier: bump to 1.6.4 
Signed-off-by: Moritz Warning <moritzwarning@web.de>
 2021-02-21 08:48:36 +01:00
Noah Meyerhans fcf72948ae bind: bump to 9.16.12 
Includes fix for security issues:

* CVE-2020-8625: BIND servers are vulnerable if they are running an
  affected version and are configured to use GSS-TSIG features.

Disable backtrace functionality, as it is unreliable across
architectures and generally only supported by upstream on amd64

Remove a patch that has been incorporated upstream

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
 2021-02-18 15:46:39 -08:00
Hauke MehrtensandGitHub 90af10d015 Merge pull request #14647 from neheb/k9 
[19.07] ksmbd(-tools): update to 3.3.4
 2021-02-16 22:26:50 +00:00
Philip Prindeville 3f0dbcdae1 isc-dhcp: seeing crashes when attempting to update dynamic dns 
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
 2021-02-10 12:00:53 -07:00
Stan Grishin 1a4184c076 https-dns-proxy: support for force DNS/DNS hijacking 
Signed-off-by: Stan Grishin <stangri@melmac.net>
 2021-02-10 05:59:24 +00:00
Karl Palsson b1fec2b7b5 mosquitto: bump to 1.6.13 
Includes various fixes: (2.0.7 + 1.6.13 dual release)
https://mosquitto.org/blog/2021/02/version-2-0-7-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>
 2021-02-08 15:20:53 +00:00
Moritz Warning db69f0b57c zerotier: update to 1.6.3 
Signed-off-by: Moritz Warning <moritzwarning@web.de>
 2021-02-06 22:06:37 +01:00
Rosen Penev 86c8807120 ksmbd-tools: update to 3.3.4 
Manually updated.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2021-02-03 17:26:48 -08:00
Stan Grishin cf79695645 simple-adblock: remove dependency on jsonfilter & old code 
Signed-off-by: Stan Grishin <stangri@melmac.net>
 2021-02-02 22:11:20 +00:00
Andy Walsh 46d327a59b samba4: fix for #13758 
* fix for possible exploit #13758
* sanetize all external template/config inputs
* fix some shellcheck warnings

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
 2021-01-26 12:24:57 +01:00
Olivier PoitreyandGitHub e8d15424b4 nextdns: Update to version 1.10.1 
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
 2021-01-25 17:55:29 +00:00
Stan Grishin 46253b17d4 https-dns-proxy: bugfix: high CPU utilization 
Signed-off-by: Stan Grishin <stangri@melmac.net>
 2021-01-18 15:28:06 +00:00
Christian LachnerandHannu Nyman 7707d2d78c haproxy: Update HAProxy to v2.0.20 
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
 2021-01-11 17:38:14 +02:00
Olivier PoitreyandGitHub 8cc7aef3ce nextdns: Update to version 1.9.6 
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
 2021-01-10 23:25:34 +00:00
Stan Grishin 9e29bd4dee https-dns-proxy: update to 2020-11-25: add HTTP auth and DSCP codepoint support 
Signed-off-by: Stan Grishin <stangri@melmac.net>
 2021-01-06 17:53:15 +00:00
Dirk Brenken 0563feebc6 adblock: backport fixes 
* set PROCD_RELOAD_DELAY correctly
* source changes:
  - add new source 'games_tracking' (https://www.gameindustry.eu)
  - change malwaredomains source mirror
  - remove malwarelist source (source is empty)
  - remove youtube source (does not work at all)
* add check for gnu-sort

Signed-off-by: Dirk Brenken <dev@brenken.org>
 2020-12-23 21:20:28 +01:00
Aaron GoodmanandFlorian Eckert 6bd3f5c377 mwan3: use ping -I for ipv6 after tunnel kernel fix 
Now that tunnels have been fixed with openwrt commit
c9c7b4b3945c01c2aadf3ef5d9a77c8200db80f1 for stable branch 19.07
ping with src ip is no longer needed.

fixes #13655

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* Update commit message
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
 2020-12-22 11:24:21 +01:00
Rosen PenevandHannu Nyman 2a7bbad223 noddos: remove 
According to https://github.com/openwrt/packages/issues/14248 , this
is totally abandoned. The website isn't even up anymore.

Fixes: https://github.com/openwrt/packages/issues/14248

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(backported from commit eb9d5bbf39)
 2020-12-21 20:02:08 +02:00
Rosen PenevandGitHub 9f0c6921b4 Merge pull request #14280 from commodo/openwrt-19.07-ulogd 
[19.07] ulogd: backports from master
 2020-12-20 09:11:45 -08:00
Rosen PenevandAlexandru Ardelean 182264c5bd ulogd: Add back autoreconf 
Compile fails at times, probably because of the patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0fa6b85686)
 2020-12-20 11:44:49 +02:00
Sebastian FleerandAlexandru Ardelean 6106d1f287 ulogd2: Build IPFIX module 
add ulogd_output_IPFIX.so to ulogd-mod-extra

Signed-off-by: Sebastian Fleer <dev@dwurp.de>
(cherry picked from commit 3a06581ad7)
 2020-12-20 11:44:41 +02:00
Rosen PenevandAlexandru Ardelean c8730e9515 ulogd2: Backport upstream patches 
IPFIX support was requested.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 79c881200f)
 2020-12-20 11:44:35 +02:00
Alexandru Ardelean 5845691cba net: ulogd2: add myself as maintainer 
Since this package has been abandoned, I don't mind taking it over.
If there are issues with it, I can also investigate, and be a point-man.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 2a5fb656f2)
 2020-12-20 11:44:29 +02:00
Rosen Penev df1c29679e nut: fix _ handling 
Taken from https://github.com/openwrt/packages/issues/13359

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4d39346fb4)
 2020-12-19 22:27:45 -08:00
Stan Grishin 3eb2e140eb simple-adblock: config update 
Signed-off-by: Stan Grishin <stangri@melmac.net>
 2020-12-18 22:05:12 -06:00
Rosen PenevandGitHub e7d814a2b0 Merge pull request #14251 from Andy2244/samba-4.11.17 
[19.07] samba4: update to 4.11.17
 2020-12-17 14:38:38 -08:00
Andy Walsh dc529c8cdd wsdd2: update to git 2020-11-19 
* update to git 2020-11-19
* cleanup comments
* use uppercase for none mdns option

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
 2020-12-17 21:04:33 +01:00
Andy Walsh adb2143388 samba4: update to 4.11.17 
* update to 4.11.17
* fix CVE-2020-1472, CVE-2020-14318, CVE-2020-14323, CVE-2020-14383

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
 2020-12-17 20:51:58 +01:00
Stan Grishin dc015ffe27 simple-adblock: bugfix - config update 
Signed-off-by: Stan Grishin <stangri@melmac.net>
 2020-12-12 15:58:36 -06:00
Stan GrishinandPaul Spooren 9ca6bdaa05 https-dns-proxy: update binary to 2020-08-21 
Signed-off-by: Stan Grishin <stangri@melmac.net>
 2020-12-09 23:33:08 -10:00
Rosen Penev 13d999882b zerotier: add patch to avoid including sys/auxv.h 
It seems it's not needed and not supported under uClibc-ng.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e632e189fd)
 2020-12-09 17:14:22 -08:00
Jitao LuandRosen Penev 061f81ff6d miniupnpd: Don't override ipv6_listening_ip 
Fixes: https://github.com/openwrt/packages/issues/14145
Signed-off-by: Jitao Lu <dianlujitao@gmail.com>
(cherry picked from commit c89a1f3e8b)
 2020-12-08 23:22:46 -08:00
Jitao LuandRosen Penev e82884cafb miniupnpd: Pass ipv6 addr to ipv6_listening_ip 
Unlike ipv4, this option is supposed to be an IP address, otherwise, an
error occurs on startup:

    can't parse "br-lan" as valid IPv6 listening address

Signed-off-by: Jitao Lu <dianlujitao@gmail.com>
(cherry picked from commit 7077fd8c79)
 2020-12-03 17:58:39 -08:00
Rosen PenevandGitHub 33bd6b6afa Merge pull request #14115 from mwarning/zt 
zerotier: update to 1.6.2
 2020-12-02 15:50:32 -08:00
Moritz Warning ace81238c1 zerotier: update to 1.6.2 
Signed-off-by: Moritz Warning <moritzwarning@web.de>
 2020-12-02 19:01:33 +01:00
Chen MinqiangandRosen Penev 808a67b35d net/miniupnpd: ext_ip_reserved_ignore support 
This add an option to ignore ext_ip reserved
Enable this option in config by default.

Fixes: #13773

Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
(cherry picked from commit b76aa99194)
 2020-11-29 17:26:32 -08:00
Marco MartinsandRosen Penev 1adf9d9794 miniupnpd: Added chain rule to filter table so udp stun incoming connections rules works 
Signed-off-by: Marco Martins <marcomartins86@gmail.com>
(cherry picked from commit 773b87977e)
 2020-11-29 17:26:32 -08:00
Rosen Penev 4ed18c40e6 miniupnpd: update to 2.2.0 
Replace daemon patch with upstream solution.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4d824243e6)
 2020-11-29 17:26:30 -08:00
Chen MinqiangandRosen Penev 16cceb118a net/miniupnpd: check by /etc/init.d/miniupnpd running 
Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
(cherry picked from commit 67b4871322)
 2020-11-29 17:25:38 -08:00
Rosen Penev 93d44081c3 miniupnpd: default to IGDv1 
It seems even modern stuff doesn't support v2 correctly. The miniupnp
suite does but other stacks seem to lack support. Default to v1 to
avoid the headache.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7891124d6c)
 2020-11-29 17:25:06 -08:00
Dirk Brenken 49fb6862d2 adblock: reporting fixes/tweaks 
* prevents the creation of an invalid json structure
* add more space to the domain column on cli
* removed test.sh script from package

Signed-off-by: Dirk Brenken <dev@brenken.org>
 2020-11-29 13:51:48 +01:00
Rosen PenevandGitHub 613d4e19c6 Merge pull request #14029 from aaronjg/xtables-addons-fix 
xtables-addons: fix compilation error
 2020-11-25 21:17:20 -08:00
Aaron Goodman 12b0f8c1ab xtables-addons: patch for 4.14 route_me_harder fix 
backport xtables-addons: 0ab324790015a6396be5678b6dffeeaa1cd28299

build: adjust for changed signature of ip_route_me_harder

(Cf. commit 46d6c5ae953cc0be38efd0e469284df7c4328cf8 in Linux.)

Original author: Jan Engelhardt <jengelh@inai.de>

Backported by: Aaron Goodman <aaronjg@stanford.edu>
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
 2020-11-25 19:33:34 -05:00
Olivier PoitreyandGitHub 591601446b nextdns: Update to version 1.9.4 
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
 2020-11-23 22:15:03 +00:00
Olivier PoitreyandGitHub c65dc2c45d nextdns: Update to version 1.9.3 
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
 2020-11-23 17:01:54 +00:00
Dirk Brenken fb76302091 travelmate: refine scan interface determination 
* preferably use the logical wlan interface for scanning
  (as already done in travelmate 2.0)

Signed-off-by: Dirk Brenken <dev@brenken.org>
 2020-11-18 20:21:06 +01:00
Florian Eckert 68eb1943cc mwan3: add missing dependency 
Add missing rpcd dependency.

Fixes #13896

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-11 09:40:01 +01:00
Brian J. MurrellandFlorian Eckert b038148cc0 mwan3: Remove fork/exec for head 
Instead, let sed do the work since it's already being used.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
[ update PKG_VERSION ]
 2020-11-11 09:39:46 +01:00