Commit Graph

4844 Commits

Author SHA1 Message Date
Jeffery To a214ce9f5b ntpd: Update init script
This replaces the use of uci_validate_section() with
uci_load_validate(), which removes the need to declare local variables
for every config option.

This also moves the generated config file to /var/etc and adds a
service_triggers() function.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-02-26 20:46:30 +01:00
Jan Pavlinec 9754ee1dcc tor: Add PKG_CPE_ID for proper CVE tracking.
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-02-26 20:42:26 +01:00
Peter Wagner bb151d5ec5 git: update to 2.21.0
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2019-02-25 19:25:27 +01:00
Deng Qingfang 7c0c22f6f7 bind: update to 9.12.3-P4
Fixed CVEs:

CVE-2018-5744
CVE-2018-5745
CVE-2019-6465

Add PKG_CPE_ID
Size optimizations

Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>
2019-02-24 12:28:18 -08:00
Hannu Nyman 775abb52df Merge pull request #8284 from wvdakker/master
Shorewall: Bump to version 5.2.3
2019-02-23 19:39:32 +02:00
Hannu Nyman 8814c94e67 Merge pull request #8280 from guidosarducci/master-add-speedtest
speedtest-netperf: new package to measure network performance
2019-02-23 19:38:55 +02:00
Peter Wagner caa8855bea privoxy: update to 3.0.28
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2019-02-23 13:27:15 +01:00
Peter Wagner 03caca8e18 tor: update to 0.3.5.8
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2019-02-23 12:52:26 +01:00
W. van den Akker e93e7e29b5 Shorewall6: Bump to version 5.2.3.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2019-02-23 11:29:25 +01:00
W. van den Akker 213314a496 Shorewall: Bump to version 5.2.3.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2019-02-23 11:22:38 +01:00
W. van den Akker 3d10df7fda Shorewall6-lite: Bump to version 5.2.3.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2019-02-23 11:19:55 +01:00
W. van den Akker 3c6d3781bb Shorewall-lite: Bump to version 5.2.3.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2019-02-23 11:17:23 +01:00
W. van den Akker 8385c1e9f4 Shorewall-core: Bump to version 5.2.3.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2019-02-23 11:13:22 +01:00
Dirk Brenken 7f7a4a60e1 Merge pull request #8281 from dibdot/travelmate
travelmate: bugfix 1.3.7
2019-02-23 08:06:35 +01:00
Dirk Brenken feca82971a travelmate: bugfix 1.3.7
* fix a possible 'reload' race condition

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-02-23 07:55:26 +01:00
Tony Ambardar 463590e2bc speedtest-netperf: new package to measure network performance
The speedtest-netperf.sh script measures the network throughput while
monitoring latency under load and capturing key CPU usage and frequency
statistics. The script can emulate a web-based speed test by downloading
and then uploading from an internet server, or perform simultaneous
download and upload to mimic the stress of the FLENT test program.

It simplifies tasks such as validating ISP provisioned speeds or setting
up and fine-tuning SQM, directly on the router. The CPU usage details
can also help determine if the demands of SQM, routing and other tasks
such as the test itself are exhausting the device's CPUs.

This script leverages earlier scripts from the CeroWrt project used for
bufferbloat mitigation, betterspeedtest.sh and netperfrunner.sh. They are
used with the permission of the author, Rich Brown.

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2019-02-22 13:34:25 -08:00
Dirk Brenken 41a780ee0f Merge pull request #8275 from dibdot/travelmate
travelmate: update 1.3.6
2019-02-22 16:48:53 +01:00
Dirk Brenken a423fd57bb travelmate: update 1.3.6
* add captive portal domains automatically to the related
  domain whitelist (dhcp option 'rebind_domain'),
  if rebind protection/RFC1918 is enabled

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-02-22 12:04:37 +01:00
Hannu Nyman 43c894d233 Merge pull request #8254 from neheb/patch-5
haproxy: Don't select OPENSSL_WITH_DEPRECATED
2019-02-20 16:04:52 +02:00
Hans Dedecker 9d931ca29c Merge pull request #8206 from dengqf6/xt
xtables-addons: fix build on 4.19 for xt_DNETMAP and xt_pknock
2019-02-19 22:02:35 +01:00
Peter Wagner edbac15a55 nfs-kernel-server: update patches
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2019-02-19 20:14:42 +01:00
Jeffery To c953f74843 obfsproxy: Use default compile
This updates the package to use the default PyBuild/Compile, instead of
defining a custom Build/Compile.

This also updates the source url and adds a src package.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-02-19 23:09:58 +08:00
Yousong Zhou b4452ce160 shadowsocks-libev: move --no-delay into json config file
It was introduced in 3.1.0 as a command line argument and was part of
the json config since 3.1.1

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2019-02-19 21:08:23 +08:00
Yousong Zhou 9cfa29b873 shadowsocks-libev: use jshn.sh for making json config
As suggested by Jeffery To in openwrt/packages#8233

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2019-02-19 21:08:23 +08:00
Deng Qingfang d9222c37dd xtables-addons: fix build on 4.19 for xt_DNETMAP and xt_pknock
Backport 2 commits to fix build on 4.19:
https://github.com/nawawi/xtables-addons/commit/3ea761a1ed338241fbc79bef8e433307e108b6cd
https://github.com/nawawi/xtables-addons/commit/2b76b68c65c97fc11409088c3c30993324df8500

Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>
2019-02-19 19:52:30 +08:00
Rosen Penev 430906bd78 haproxy: Don't select OPENSSL_WITH_DEPRECATED
Deprecated APIs are already patched out.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-02-19 01:17:37 -08:00
Jeffery To 247d162e2e twisted: Rename package, fix errors
This renames the Python 2 twisted package to python-twisted, and updates
dependents (i.e. obfsproxy) to reference the updated name.

This also fixes conflicts between the Python 2 and 3 packages. Twisted
installs some scripts to /usr/bin, and previously scripts for both
packages used the same names. This adds a "3" suffix to scripts
installed by python3-twisted.

This also adds python[3]-setuptools as a dependency, as the scripts
installed to /usr/bin depend on pkg_resources (part of setuptools).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-02-18 16:11:02 +08:00
Rosen Penev 41a431cd56 git: Fix compilation without deprecated OpenSSL APIs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-02-18 00:29:15 +01:00
Stijn Tintel d89cd30a79 vallumd: bump to 0.1.4
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2019-02-17 17:47:54 +02:00
Rosen Penev cd6cba1f81 irssi: Fix OpenSSL without deprecated APIs compilation
When OpenSSL is built without deprecated APIs, pkg-config first tries
OpenSSL in the staging directory but fails as it cannot find the
deprecated SSL_library_init function and ends up finding the system one.

Added PKG_BUILD_PARALLEL for faster compilation.

Added -Wl,--gc-sections to LDFLAGS to save ~10KB from the resulting ipk.

Reworked configure section as some of those options were renamed or
removed.

Removed EXTRA_* hacks that are no longer necessary.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-02-17 00:18:34 +01:00
Peter Wagner 274ce493eb nfs-kernel-server: fix freeaddrinfo usage in nfs-kernel-server, because freeaddrinfo in musl after the 1.1.21
update, doesn't handly NULL pointers (which seems to spec conform) see
https://www.openwall.com/lists/musl/2019/02/03/3 for more info

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2019-02-17 00:17:03 +01:00
Stijn Tintel 68a58ff22b Merge pull request #8219 from Apteryks/master
net-snmp: disable support for perl
2019-02-16 17:28:50 +02:00
Stijn Tintel bf729d2f38 Merge pull request #5821 from kbabioch/feat/ipNetToPhysicalTable
net-snmp: Enable MIB ip-mib/inetNetToMediaTable
2019-02-16 17:15:04 +02:00
Yousong Zhou 40e7e241a3 shadowsocks-libev: flush ipv6 ss-rules on service stop
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2019-02-16 07:38:13 +00:00
Dirk Brenken 845078e8e0 Merge pull request #8224 from dibdot/travelmate
travelmate: update 1.3.5
2019-02-15 16:32:53 +01:00
Dirk Brenken 9caef6ca4f travelmate: update 1.3.5
* rework procd trigger handling
	- react immediately on if down network events
	- remove needless apply hook in LuCI

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-02-15 09:29:58 +01:00
Maxim Cournoyer 90a713e3c6 net-snmp: disable support for perl
Using an external toolchain, it was discovered that net-snmp would
link with the Perl library (-lperl) from the host rather than from the
target.

Since we do not provide Perl as a dependency to net-snmp, the solution
is to disable support for it.

Fixes issue #8217.

Signed-off-by: Maxim Cournoyer <maxim.cournoyer@savoirfairelinux.com>
2019-02-14 13:34:39 -05:00
Hannu Nyman c82e79713c Merge pull request #7894 from neheb/spoof
spoofer: Fix compilation without deprecated OpenSSL APIs
2019-02-14 18:30:44 +02:00
Karl Palsson fd206f5182 mosquitto: update to 1.5.7
This is a minor bugfix release. Full changelog available at:
https://mosquitto.org/blog/2019/02/version-1-5-7-released/

Most relevant to OpenWrt are probably:
* fixing persistent store bloat
* fix sorting of included config files
* fix errors related to per_listener_settings

Signed-off-by: Karl Palsson <karlp@etactica.com>
2019-02-14 11:17:40 +00:00
Hannu Nyman 436f18f269 Merge pull request #8190 from cshoredaniel/pr-gitolite-dropbear
gitolite: Drop openssh dependency
2019-02-13 18:51:38 +02:00
Rosen Penev 0e17306c29 iotivity: Backport upstream patch to fix GCC 7+ compilation
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-02-12 11:23:14 -08:00
Hannu Nyman 3613472b24 Merge pull request #8192 from gladiac1337/feature-haproxy-v1.8.19
haproxy: Update HAProxy to v1.8.19
2019-02-12 19:30:06 +02:00
Yousong Zhou b69810b8ec shadowsocks-libev: ss-rules: fix flushing ipv6 rules
"-6" has to be the first argument

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2019-02-12 11:53:16 +00:00
Yousong Zhou 8cba4a7f8b shadowsocks-libev: ss-rules: tweak for readability
- quash errors on detection of ipv6 nat
 - remove unnecessary rule args "--comment ..." and "-p ..."

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2019-02-12 11:49:40 +00:00
Christian Lachner b8d3db6fec haproxy: Update HAProxy to v1.8.19
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-02-12 08:58:53 +01:00
Peter Wagner 5d4ec805fd irssi: update to 1.2.0
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2019-02-12 00:48:34 +01:00
Hannu Nyman a182185381 Merge pull request #8135 from ja-pa/unbound-update
unbound: update to version 1.9.0 and remove old patch
2019-02-11 21:53:37 +02:00
Yousong Zhou c84a66112c shadowsocks-libev: flush ss rules on entry
Fixes issue reported in openwrt/luci#2527

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2019-02-11 13:34:56 +00:00
Jan Pavlinec f986379802 unbound: update to version 1.9.0
Changes:
-remove old dns64 patch
-refresh openssl deprecated patch
-add DoT error log patch https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=4206

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-02-11 12:34:22 +01:00
Jan Pavlinec 4729c3fddf openssh: patch scp security issues
Fixes
CVE-2019-6109
CVE-2019-6111

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-02-10 16:22:41 +01:00