Commit Graph
7074 Commits
Author SHA1 Message Date
William Fleurant 1d78e7dc31 yggdrasil: Ygg-over-ygg bugfix
Signed-off-by: William Fleurant <meshnet@protonmail.com>
2020-07-23 23:35:18 -04:00
Rosen Penev 7fa266580f zerotier: disable pie support
The Makefile is already patched for it. But PKG_ASLR_PIE still needs
to be disabled.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-23 13:41:00 -07:00
Rosen PenevandGitHub 4da82b8569 Merge pull request #12893 from ja-pa/tor-0.4.3.6
tor: update to version 0.4.3.6 (security fix)
2020-07-23 13:15:08 -07:00
Rosen PenevandGitHub 75efd85bf1 Merge pull request #12799 from aaronjg/openfortivpn/netifd
openfortivpn: use standard 'peerdns' config option on netifd script
2020-07-21 18:59:00 -07:00
Daniel Golle 46da3eedc5 gnunet: update to version 0.13.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-07-22 02:43:35 +01:00
Jan Pavlinec 3f51a1ee6e tor: update to version 0.4.3.6 (security fix)
Fixes
CVE-2020- 15572

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-07-21 12:53:57 +02:00
Rosen PenevandGitHub 567c620bdc Merge pull request #12879 from TDT-AG/pr/20200720-mwan3
mwan3: update to version 2.8.11
2020-07-20 00:36:40 -07:00
Rosen PenevandGitHub 6fec82d068 Merge pull request #12848 from BKPepe/squid
squid: update to version 4.12 (security update)
2020-07-20 00:35:45 -07:00
Josef Schlehofer 3401e29aa7 squid: update to version 4.12
- Fixes CVEs:

CVE-2019-12519
CVE-2019-12520
CVE-2019-12521
CVE-2019-12523
CVE-2019-12524
CVE-2019-12525
CVE-2019-12526
CVE-2019-12527
CVE-2019-12528
CVE-2019-12529
CVE-2019-12824
CVE-2019-12854
CVE-2019-13345
CVE-2019-18676
CVE-2019-18677
CVE-2019-18678
CVE-2019-18679

CVE-2020-8449
CVE-2020-8450
CVE-2020-11945
CVE-2020-14058
CVE-2020-15049

- Remove patch for cross-compilation
The patch should not be included in the OpenWrt at all without any
commit message/description.
Is not needed and there should be used HOST variables instead of BUILD variables (e.g.
   HOSTCXX)
However, the BUILDCXX is set in Makefile to HOSTCXX

- Renumber glibc patch and refresh it

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-07-20 08:56:50 +02:00
Florian Eckert f601e6cfa4 mwan3: update version to 2.8.11
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-07-20 08:15:50 +02:00
Florian Eckert b0acbf057e mwan3: add online and uptime to detail output
Add also online time value and uptime time value from netifd to the
detail output view.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-07-20 08:13:34 +02:00
Florian Eckert 058a2b6f30 mwan3: add workaround for procd change
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-07-20 08:12:48 +02:00
Florian Eckert cde2a77ed3 mwan3: also cleanup lock on mwan3 stop
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-07-20 08:12:31 +02:00
Florian Eckert bcd13ba95c mwan3: fix rtmon routing table function generation
If the uci option family is not set in the interface section, then there
is no default value set as in the `config_load / config_get` API.
The problem here is that if the family is not set, the default value ipv4
is normaly assumed. But the comparison fails here because the value is empty
and therefore the dedicated routing table for this interface is not compared
with the other routes from the main table and so not updated.

To fix this set the default value for this config option which is`false`
for enabled and `ipv4` for family.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-07-20 08:11:20 +02:00
Florian EckertandGitHub bcd914e665 Merge pull request #12814 from aaronjg/improvements/mwan3-misc-improvements-rb
mwan3: clean up ipv4/ipv6 duplicated code and misc. improvments
2020-07-20 08:06:39 +02:00
Florian EckertandAaron Goodman 8e3e6f8dde mwan3: fix IPv6 routing add handling
This fixes routing handling. Introduced with the last version update.
The following message disappears on the shell
when mwan3 is called with 'mwna3 restart`.

`Error: Invalid gateway address.`

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
[aaronjg@stanford.edu: fully unset variable and handle ipv4 as well]
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 23:24:13 -04:00
Florian EckertandAaron Goodman a796b7a84e mwan3: fix idx calculation
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
[aaronjg@stanford.edu: fix syntax error]
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 23:24:13 -04:00
Aaron Goodman ca8bc3d115 mwan3: version bump
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 23:24:13 -04:00
Aaron Goodman 30a46bdc9e mwan3: cleanup duplicate ipv4 and ipv6 logic
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 23:24:13 -04:00
Aaron Goodman 702a104f9c mwan3: don't send iptable setup failures to /dev/null
silencing failing rules makes debugging more difficult

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 23:18:22 -04:00
Aaron Goodman 2a5e9be83e mwan3: add default rule for ipv6 in example config
default rule only applied to ipv4 with dest_ip 0.0.0.0/0
and error was hidden when trying to apply it in ip6table

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 23:18:21 -04:00
Aaron Goodman a0d66d4eeb mwan3: don't try to use ipv6 if not installed
fix issue  #11826

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 23:18:18 -04:00
Aaron Goodman f32ad35870 openfortivpn: use standard 'peerdns' argument on netifd script
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-19 18:54:48 -04:00
Rosen PenevandGitHub 04432dc54f Merge pull request #12864 from aaronjg/bugfix/openfortivpn-ping
openfortivpn: add host up test back
2020-07-19 15:35:00 -07:00
Rosen PenevandGitHub 0daffb9011 Merge pull request #12861 from neheb/api
apinger: fix compilation with GCC 10
2020-07-19 14:44:35 -07:00
Rosen PenevandGitHub 1af20a26d5 Merge pull request #12860 from neheb/bfdd
bfdd: fix compilation with GCC 10
2020-07-19 01:20:29 -07:00
Rosen PenevandGitHub 292834d324 Merge pull request #12856 from neheb/fpi
fping: update to 4.3
2020-07-18 23:31:48 -07:00
Aaron Goodman 374ac6817d openfortivpn: add option to use ither curl or ping to test host status
allow use of curl rather than ping to test if a host
is up since a host may not respond to ping, but an
https request is part of the openfortivpn connection,
so this is a more reliable test

also clean up overly verbose logging

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-18 22:05:13 -04:00
Rosen PenevandGitHub aaa81d7534 Merge pull request #12854 from neheb/rads
memcached: update to 1.6.6
2020-07-18 14:06:54 -07:00
Andy Walsh 3ba3a0ba4a wsdd2: Uppercase NB_PARM
* Uppercase NB_PARM if mdns option is not set
* filter commented lines

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-07-18 13:00:22 +02:00
Rosen Penev ef646f2a70 apinger: fix compilation with GCC 10
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-17 20:35:34 -07:00
Rosen Penev 2bdabc1db7 bfdd: fix compilation with GCC 10
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-17 20:34:36 -07:00
Rosen Penev dafbd9e5e4 davfs2: fixup gettext-version again
It seems this is still needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-17 19:43:55 -07:00
Toke Høiland-JørgensenandGitHub 40e148cdad Merge pull request #12858 from neheb/radse
radsecproxy: fix compilation with GCC10
2020-07-18 01:06:21 +02:00
Rosen PenevandGitHub 8ce5898fd3 Merge pull request #12855 from neheb/ngi
ngircd: update to 26
2020-07-17 15:53:04 -07:00
Rosen Penev d9f15d2cd6 radsecproxy: fix compilation with GCC10
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-17 15:46:48 -07:00
Rosen Penev 4b7184cd6a rsyslog: update to 8.2006.0
Fixes compilation with GCC10.

Added random mirror since the normal website has issues at this time.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-17 15:33:53 -07:00
Rosen Penev afbe8536f4 fping: update to 4.3
Fixes compilation with GCC 10.

Backported upstream patch to fix compilation without IPv6.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-17 15:12:16 -07:00
Rosen Penev a98399f3d2 ngircd: update to 26
Fixes compilation with GCC10.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-17 15:11:35 -07:00
Rosen Penev 0773d9e111 memcached: update to 1.6.6
Fixes compilation with GCC 10.

Added PKG_BUILD_PARALLEL for faster compilation.

Simplified configure var.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-17 15:10:44 -07:00
Peter Stadler 4f7da949cb uwsgi: update to version 2.0.19.1
update to latest version.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-07-17 17:45:44 +02:00
Rosen PenevandGitHub 4cb4df527d Merge pull request #12846 from expiron/kcptun-updates
kcptun: bump to v20200701
2020-07-17 06:05:26 -07:00
Rosen PenevandGitHub 7395537276 Merge pull request #12842 from neheb/dav2
davfs2: update to 1.5.6
2020-07-17 01:57:49 -07:00
Chao Liu beb5a87be8 kcptun: bump to v20200701
Signed-off-by: Chao Liu <expiron18@gmail.com>
2020-07-17 15:06:26 +08:00
Rosen PenevandGitHub f57d05c769 Merge pull request #12843 from neheb/zer
zerotier: fix compilation with GCC10
2020-07-16 16:19:26 -07:00
Rosen Penev cd3a4f4731 zerotier: fix compilation with GCC10
Patch taken from upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-16 14:31:54 -07:00
Rosen Penev cf6c95d752 davfs2: update to 1.5.6
Split musl patch into multiple small ones. Much easier to reason about.

Removed stack protector patch. This is not an issue anymore.

Removed NLS support. There seems to be a linking issue as
libiconv-stub does not have a shared library component.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-16 13:27:59 -07:00
Peter Stadler 19b382acea nginx: update to version 1.19.1
update to newest version.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-07-16 19:22:26 +02:00
Josef Schlehofer 01ff758894 dnscrypt-proxy2: update to version 2.0.44
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-07-16 15:31:30 +02:00
Aaron Goodman 84a53b7c79 mwan3: be more efficient with sleep after killing trackers
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-07-16 02:03:21 -04:00