Commit Graph

6006 Commits

Author SHA1 Message Date
Sergey Urushkin 569e06c82f arp-scan: update to 1.9.7
Signed-off-by: Sergey Urushkin <urusha.v1.0@gmail.com>
2019-12-02 09:51:19 +03:00
Rosen Penev 1d434b00e7 Merge pull request #10688 from neheb/ope
openconnect: Switch to HTTPS for the source URL
2019-12-01 16:51:29 -08:00
Rosen Penev 13513957f8 Merge pull request #10681 from gram25gwh/ddns-scripts-https-afraid-org
ddns-scripts: Change protocols of afraid.org urls to HTTPS.
2019-11-30 23:51:37 -08:00
Kwonjin Jeong e25b558999 ddns-scripts: Change protocols of afraid.org urls to HTTPS.
- Use HTTPS protocol for updating urls for afraid.org to protect the password.
- Bump/align package version number.

Signed-off-by: Kwonjin Jeong <gram25gwh@gmail.com>
2019-12-01 15:24:38 +09:00
Rosen Penev 3b31e4e13b Merge pull request #10668 from Andy2244/samba4_4.9.16_cleanup
samba4: update to 4.9.16, remove AD-DC/Winbind options
2019-11-30 18:34:55 -08:00
Rosen Penev 4d7c5af6e1 openconnect: Switch to HTTPS for the source URL
Goes through firewalls easier.

Switched to xz tarball, which is both implicit and smaller.

Rearranged some stuff for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-11-30 18:30:35 -08:00
Dirk Brenken e97f350a00 banip: update 0.3.11
* fix ssh daemon autodetection
* fix 'sshd' logfile parsing

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-11-30 19:31:14 +01:00
Hannu Nyman 52e6151d11 Merge pull request #10655 from gladiac1337/haproxy-2.0.10
haproxy: Update HAProxy to v2.0.10
2019-11-29 17:28:55 +02:00
Christian Lachner 19623a4ef9 haproxy: Update HAProxy to v2.0.10
- Update haproxy download URL and hash
- Add new patches (see https://www.haproxy.org/bugs/bugs-2.0.10.html)
- This fixes CVE-2019-19330 (See: https://nvd.nist.gov/vuln/detail/CVE-2019-19330)

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-11-29 12:25:21 +01:00
Rosen Penev 47772cc9c6 Merge pull request #10657 from neheb/addr
addrwatch: Add missing limits header for PATH_MAX
2019-11-29 02:12:07 -08:00
Rosen Penev 5b3a1591bc Merge pull request #10654 from leonghui/wiki-link-update
treewide: replace old wiki links
2019-11-28 20:21:31 -08:00
Leong Hui Wong a6f1ff5a85 treewide: update wiki links
Signed-off-by: Leong Hui Wong <wong.leonghui@gmail.com>
2019-11-29 09:16:02 +08:00
Sebastian Kemper 18335dc424 ntpd: create config_file directory
ntpd's configuration is stored in /var/etc, but the init script doesn't
create this directory. To be fair this folder is used by other packages
as well, for instance dnsmasq. Still, it's better not to rely on other
packages to create it.

Fixes: #10636

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-11-28 22:27:03 +01:00
Andy Walsh 226e0c6497 samba4: update to 4.9.16, remove AD-DC/Winbind options
* update to 4.9.16
* cherry-pick some musl alpine/openembedded patches
* cleanup/remove AD-DC/Winbind options and related code
* build the compile_et via samba4/host

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-28 17:11:55 +01:00
Florian Eckert 32efe3609d stunnel: update to version 5.56
Update to version 5.56

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2019-11-28 12:09:52 +01:00
Josef Schlehofer f39cdba7c0 Merge pull request #10511 from SibrenVasse/openssh8.1
openssh: update to 8.1p1
2019-11-28 09:27:58 +01:00
Rosen Penev 8003eea2b9 addrwatch: Add missing limits header for PATH_MAX
Fixes compilation on musl.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-11-27 23:38:35 -08:00
Rosen Penev f0eb182472 Merge pull request #10611 from ldir-EDB0/bumpdns
net/https-dns-proxy: Update to 2019-10-09
2019-11-27 13:50:22 -08:00
Andy Walsh b85a124ff6 cifsd: update to git (2019-11-27), fix reload/restart not applying smb.conf changes
* fix reload/restart not applying luci/smb.conf changes
* remove hotfix for 'read only = no' (fixed by upstream)
* update documentation, example
*cifsd: fix the lost of dos file attributes
*cifsd: store FILE_ATTRIBUTE_SPARSE into xattr
*cifsd: release v2.0.2
*cifsd-tools: add smb.conf.list file to show supported parameters list
*cifsd-tools: set CIFSD_SHARE_FLAG_WRITEABLE flags if read only = no
*cifsd-tools: release cifsd-tools v2.0.2

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-27 22:11:16 +01:00
Aleksander Morgado 5f11888b12 modemmanager: install common utils in /usr/share/ModemManager
The modemmanager.common file includes several utility functions that
are used in several places like the protocol handler and in hotplug
scripts. These utilities should not be installed in /etc as they're
not configuration.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2019-11-27 09:28:10 +01:00
Aleksander Morgado ecad39fd60 modemmanager: don't flag the 'device' option as 'device' type
Unlike other modem protocol handlers like the ones implemented by uqmi
or umbim, in the modemmanager protocol handler the 'device' option
does not specify a device node in /dev. Therefore, we shouldn't flag
the option as 'device' type (dt_type_device).

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2019-11-27 09:28:10 +01:00
Aleksander Morgado a684cdbab0 modemmanager: fix device unplug handling
When a USB modem device is unplugged, we had to do two different
things: first, cleanup the sysfs cache; and second, set interface as
unavailable.

Those two things were never being done properly due to several
different issues:

 * The parent sysfs path retrieval logic relies on checking for which
 sysfs path has the vid/pid files. This logic obviously only works
 when the device is available, and cannot be used on e.g. removal
 events.

 * The command to cleanup the modem wait status from the sysfs cache
 was not removing the previous state properly, because the sysfs path
 variable wasn't escaped properly for the sed command.

This patch handles those issues in order to have a proper device
removal handling, by making sure the sysfs path is properly escaped in
the sed command, and by introducing a new hotplug script that runs
when the full USB device is removed.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2019-11-27 09:28:10 +01:00
Aleksander Morgado cc4ee2fd3c modemmanager: flag as available and no_device when initializing
Otherwise, if the modem is reseted, netifd will think that the device
is gone forever.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2019-11-27 09:28:10 +01:00
Aleksander Morgado 92781ecc7f modemmanager: add default proto configs
Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2019-11-27 09:28:10 +01:00
Rosen Penev 4dbb240c5c Merge pull request #10645 from Andy2244/softethervpn5-9672
softethervpn5: update to 5.01.9672
2019-11-26 14:23:45 -08:00
Andy Walsh a6054083dd softethervpn5: update to 5.01.9672
* 5.01.9672 release
* Cedar: handle UDP acceleration and R-UDP versions
* Mayaqua: implement R-UDP version 2, powered by ChaCha20-Poly1305
* Cedar: implement UDP acceleration version 2, powered by ChaCha20-Poly1305
* Cedar: serve new web management interface
* Cedar: implement detailed protocol info
* Mayaqua: add Windows Server 2019 to the supported operating systems list
* Cedar: various fixes
* Cedar: add "DisableIPsecAggressiveMode" option
* Make install dir for unit files configurable
* Protocol.c: adapt ClientConnectGetSocket() for new proxy functions
* Wpc.c: adapt WpcSockConnectEx() for new proxy functions
* Protocol: add ProxyCodeToCedar()
* Move generic proxy stuff from Cedar to Mayaqua
* Proto_OpenVPN.c: improve OvsProcessData(), fix out-of-bounds access found by Coverity
* Proto_OpenVPN.c: fix segmentation fault in OvsProceccRecvPacket()
* Addressing the UDP reflection amplification attack: https://github.com/SoftEtherVPN/SoftEtherVPN/issues/1001
* Mayaqua.h: include <stdarg.h> for "va_list" on Illumos
* Protocol.c: fix bug in ClientConnectGetSocket() causing custom HTTP header not to work
* Mayaqua: move HTTP functions from "Network" to "HTTP"
* Move GetMimeTypeFromFileName() and related structure to Mayaqua
* Mayaqua.h: include <stdio.h> for "FILE"
* Mayaqua.h: include <stddef.h>, for "wchar_t"
* Bump mixin-deep in /src/bin/hamcore/wwwroot/admin/default
* - Fixed the problem occurs when RPC messages between Cluster Members exceed 64Kbytes. - Fixed the RADIUS PEAP client to use the standard TLS versioning. - Implementation of a function to fix the MAC address of L3 VPN protocol by entering e.g. "MAC: 112233445566" in the "Notes" field of the user information. - Implementation of a function to fix the virtual MAC address to be assigned to the L3 VPN client as a string attribute from RADIUS server when authentication.
* Updating built-in Win32 libraries - OpenSSL 1.1.1 -> 1.1.1d - zlib 1.2.3 -> 1.2.11
* Update strtable_cn.stb
* Avoid using hardcoded paths in log file enumeration
* Fix buffer overflow during NETBIOS name resolution
* Update SEVPN.sln
* Create strtable_pt_br.stb
* ci: display error if vpntest failed
* Fix several compile warnings on MS VC++ 2008.
* Enables crash minidump for Win32 vpntest. Minidump files will be saved to the 'C:\Users\<username>\AppData\Local\Temp\vpn_debug' (for normal user) or 'src\bin\vpn_debug\' (for administrator user).
* OpenVPN: use new protocol interface
* Add interface for easy protocol implementation
* add "no-deprecated" to openssl builds "no-deprecated" is widely used in openwrt devices
* Fix LibreSSL support
* Switch to OpenSSL THREADID API
* travis-ci: update openssl, libressl
* enable sonar-scan in travis-ci builds
* Virtual: fix race condition in DHCP server which resulted in multiple clients receiving the same IP
* Mayaqua: Fix compilation without deprecated OpenSSL APIs
* Mayaqua: Replace GNU specific sys/poll.h header with POSIX poll.h
* systemd: replace deprecated CAP_SYS_ADMIN with CAP_SYSLOG

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-26 15:14:25 +01:00
Andy Walsh 67e529da18 cifsd-tools: update to git (2019-11-25)
* cifsd-tools: fix Assignment of a signed value which has type 'long'
* init: convert hide_dot_files to yes/no option
* 'read only = no' seems bugged for cifsd/smb.conf, so fix via 'writeable = yes'

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-25 17:11:46 +01:00
Rosen Penev 6d9ee2ec86 transmission: Disable webseeding
It causes 100% CPU usage in certain situations. Just disable it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-11-24 19:01:58 -08:00
William Fleurant be4fe496ce yggdrasil: bump to 0.3.12
Signed-off-by: William Fleurant <meshnet@protonmail.com>
2019-11-24 19:18:53 -05:00
Hannu Nyman c6a8853c0d Merge pull request #10519 from BKPepe/git
git: Update to version 2.24.0
2019-11-24 15:49:42 +02:00
Rosen Penev 2707a95d31 clamav: Shellcheck fixes
Fix SC2129

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-11-23 18:55:22 +01:00
Josef Schlehofer c7ad27ebbd clamav: Update to version 0.101.4
Change deprecated options to a new one:
DetectBrokenExecutables to AlertBrokenExecutables
ArchiveBlockEncrypted to AlertEncrypted

Fixes: CVE-2019-12900 and CVE-2019-12625

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-11-23 18:55:22 +01:00
Dirk Brenken 219abdc5a1 adblock: update 3.8.12
* fix possible dns restart issue with DNS File Reset (race condition)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-11-23 13:44:54 +01:00
Rosen Penev 9d57b11e44 Merge pull request #10616 from Andy2244/samba4-22-11-2019
samba4: add UCI option 'disable_async_io'
2019-11-22 08:33:45 -08:00
Rosen Penev a47004dfbb Merge pull request #10615 from Andy2244/cifsd-22-11-2019
cifsd: update to git (2019-11-22)
2019-11-22 08:27:20 -08:00
Andy Walsh ec3225b495 samba4: add UCI option 'disable_async_io'
* add UCI option 'disable_async_io'
* remove [homes] options

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-22 13:54:24 +01:00
Andy Walsh 5c2706a9ad cifsd: update to git (2019-11-22)
* cifsd: fix uninitialized fp could be freed
* cifsd: fix potential uninitialized spnego_blob could be freed
* cifsd: smbd: replace spinlock_irqsave with spinlock
* cifsd: smbd: avoid the lack of client's send credits
* cifsd-tools: add version generation script
* cifsd-tools: do not abbrev git describe
* cifsd-tools: use 'unknown' version string if git describe fails

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-22 13:43:17 +01:00
Chao Liu c233165fe0 kcptun: bump to v20191112
Signed-off-by: Chao Liu <expiron18@gmail.com>
2019-11-22 14:29:51 +08:00
Kevin Darbyshire-Bryant 0b30945de0 net/https-dns-proxy: Update to 2019-10-09
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2019-11-21 21:05:44 +00:00
Florian Eckert 58010dbd88 Merge pull request #10547 from zhoreeq/yggdrasil_uci
yggdrasil: Change package configuration to UCI
2019-11-21 20:01:12 +01:00
Rosen Penev fa0ef9c189 Merge pull request #10605 from rs/nextdns-1.1.5
nextdns: Update version 1.1.5 + add per host config option
2019-11-21 09:35:38 -08:00
Rosen Penev 82d4a10fe8 Merge pull request #10608 from ja-pa/bind-9.14.8
bind: update to version 9.14.8 (security fix)
2019-11-21 09:34:29 -08:00
George Iv 6857fd45c8 yggdrasil: Change package configuration to UCI
Signed-off-by: George Iv <57254463+zhoreeq@users.noreply.github.com>
2019-11-21 11:15:29 -05:00
Jan Pavlinec 46ca2c79ca bind: update to version 9.14.8 (security fix)
Fixes CVE-2019-6477

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-11-21 13:14:23 +01:00
Olivier Poitrey 8619255463 nextdns: Update version 1.1.5 + add per host config option
* Update nextdns to version 1.1.5 which adds IPv6 dual stack support.
* Add the ability to configure per host configuration id from uci.

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2019-11-21 02:41:28 -08:00
Josef Schlehofer 24667753a2 unbound: Update to version 1.9.5
Fixes CVE-2019-18934

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-11-21 09:01:56 +01:00
Rosen Penev dfe3924f33 Merge pull request #10583 from neheb/cif
cifs-utils: Add smbinfo utility
2019-11-20 16:48:51 -08:00
Rosen Penev 09ac44a5b7 Merge pull request #10587 from Payne-X6/master
knot: update to version 2.9.1
2019-11-19 11:13:05 -08:00
Dirk Brenken 760c3a2240 Merge pull request #10581 from dibdot/travelmate
travelmate: update 1.5.3
2019-11-19 08:31:50 +01:00
Rosen Penev fea1468506 cifs-utils: Add smbinfo utility
Switched to PKG_INSTALL for simplicity.

Added PKG_BUILD_PARALLEL for faster compilation.

Added InstallDev section.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-11-18 15:21:13 -08:00