Commit Graph

6788 Commits

Author SHA1 Message Date
Rosen Penev d8ee5fae31 Merge pull request #12369 from gladiac1337/haproxy-2.1.5
haproxy: Update HAProxy to v2.1.5
2020-05-31 13:59:09 -07:00
Christian Lachner 169a431273 haproxy: Update HAProxy to v2.1.5
- Update haproxy download URL and hash
- This version introduces backtrace-support via backtrace(), however, it must be disabled because neither MUSL nor UCLIBC support it (build fails because of missing execinfo.h)
- Our previous UCLIBC patch is now obsolete and has been removed. We now only disable libcrypt support.
- A new patch was backported from the haproxy dev-branch which fixes an IFDEF which should only allow GLIBC to use dladdr1 and make builds fall back to dladdr when using other c-libs. The previous logic was bogus and broke the build on UCLIBC.

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2020-05-31 20:32:24 +02:00
Dirk Brenken ab44d8146a adblock: update 4.0.5-4
* remove dumb list cache
* start adblock processing after adding/removing
  list sources via CLI
* add regional list source for france

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-05-31 18:28:27 +02:00
Toke Høiland-Jørgensen f785b219cd Merge pull request #12346 from wt/acme_cron_improvement
acme: remove cron entry on package removal
2020-05-31 12:24:50 +02:00
Wren Turkal 54a6593b6f acme: remove cron entry on package removal
Previously, the cron config was not removed on uninstall. This change fixes
that.

Signed-off-by: Wren Turkal <wt@penguintechs.org>
2020-05-30 22:51:14 -07:00
Rosen Penev a79588dc3b Merge pull request #12357 from wt/uacme_cron_improvement
uacme: remove cron entry on package removal
2020-05-30 16:18:12 -07:00
Dirk Brenken 7f6763359c adblock: update 4.0.5-3
* fix oisd_nl source parser (format has been changed)
* enable safesearch support for kresd (ip based)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-05-30 06:10:59 +02:00
Wren Turkal 953702ad30 uacme: remove cron entry on package removal
Previously, the cron config was not removed on uninstall. This change fixes
that.

Signed-off-by: Wren Turkal <wt@penguintechs.org>
2020-05-28 22:36:20 -07:00
Rosen Penev cf6f72d542 Merge pull request #12344 from James-TR/pdns-4.2.2-bump
pdns: update to 4.2.2
2020-05-27 17:43:41 -07:00
Rosen Penev 79664cec4f Merge pull request #12343 from James-TR/pdns-recursor-4.2.2-bump
pdns-recursor: update to 4.2.2
2020-05-27 17:43:30 -07:00
Nick Hainke 79e3889cf3 dawn: bump to latest version
Prepare DAWN for prometheus-node-exporter by always showing the whole
network overview.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2020-05-27 17:42:03 +02:00
James Taylor 15264ff156 pdns: update to 4.2.2
Updates pdns to latest release in the 4.2 series.

Full change log for this release is available at:
https://doc.powerdns.com/authoritative/changelog/4.2.html#change-4.2.2

Signed-off-by: James Taylor <james@jtaylor.id.au>
2020-05-27 13:13:13 +00:00
Yousong Zhou 26291bba4e openvswitch: pass KERNEL_MAKE_FLAGS for reproducible build
Reported-by: Paul Spooren <mail@aparcar.org>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-05-27 16:38:56 +08:00
Yousong Zhou 931ff98633 openvswitch: rework disabling docs build
This is needed since openvswitch 2.13 commit 2a97891eb23b
("Documentation: Work with sphinx-build for Python 3 also.")

The 4th patch was also reworked to serve as another guard

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-05-27 16:38:56 +08:00
Rosen Penev c94ded697b Merge pull request #12323 from peter-stadler/nginx-util-clang
nginx-util: fix issues and cleanup
2020-05-26 13:12:22 -07:00
Olivier Poitrey 711983118d nextdns: Update to version 1.6.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-26 19:31:26 +00:00
Rosen Penev 413b7dced7 Merge pull request #12280 from sgabe/sslh-transparent
sslh: add transparent proxy support
2020-05-26 11:17:38 -07:00
Gabor Seljan 46c253dfca sslh: use tls option instead of deprecated ssl
Upstream will drop support for the ssl option in the next future version.

Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
2020-05-26 20:02:15 +02:00
Gabor Seljan f3aaffdd6f sslh: add capabilities support
Compile with USELIBCAP=1 to make use of POSIX capabilities. This will
save the required capabilities needed for transparent proxying for
unprivileged processes.

Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
2020-05-26 19:59:24 +02:00
Gabor Seljan 4950a37797 sslh: add http probe config
Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
2020-05-26 19:58:35 +02:00
Olivier Poitrey 76b7f669d4 nextdns: Update to version 1.6.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-26 17:58:23 +00:00
Rosen Penev 51bd6dd25b Merge pull request #12321 from ja-pa/transmission-fix-init
transmission: init script check syscall list for seccomp
2020-05-26 10:19:30 -07:00
Peter Stadler 2d359a4556 nginx-util: fix issues and cleanup
* fix regex capture (to conform std)
* fix issues for Clang/libcxx (warnings/includes)
* fix CONFLICTS in the Makefile
* use /bin/sh in host scripts and shellcheck them
* add callback for setting arguments in ubus::call

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-05-26 18:36:03 +02:00
Paulo Machado 5f64b2d1e4 linuxptp: fix build failure
Build is failing because HWTSTAMP_TX_ONESTEP_P2P is defined anymore on
linux net_tstamp.h.

Moreover, the usual way of linuxptp build is looking for system includes
unless user defines differently. That also was tried to fix.

PKG_RELEASE bumped to 3.

Signed-off-by: Paulo Machado <pffmachado@yahoo.com>
2020-05-26 16:29:39 +01:00
James Taylor 490157fe2a pdns-recursor: update to 4.2.2
Updates pdns-recursor to latest release in the 4.2 series.

Includes backported fixes for CVE-2020-10995, CVE-2020-12244 and
CVE-2020-10030, plus avoid a crash when loading an invalid RPZ.

Full change log for this release is available at:
https://doc.powerdns.com/recursor/changelog/4.2.html#change-4.2.2

Signed-off-by: James Taylor <james@jtaylor.id.au>
2020-05-26 13:31:48 +00:00
Josef Schlehofer 49e01721ed Merge pull request #12314 from Payne-X6/master
knot: update to version 2.9.5
2020-05-26 14:21:48 +02:00
Jan Hak 9d81b6e4ca knot: update to version 2.9.5
Removed patch
`03-configure-allow-to-manually-disable-POSIX-capabiliti.patch` that has been backported into release.

Signed-off-by: Jan Hak <jan.hak@nic.cz>
2020-05-26 14:19:44 +02:00
Jan Pavlinec a6bffd306f transmission: init script check syscall list for seccomp
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-05-26 14:16:40 +02:00
Rosen Penev e8c831e236 Merge pull request #12296 from neheb/trans
transmission: update to 3.0
2020-05-26 02:05:40 -07:00
Kevin Darbyshire-Bryant 295d77943c miniupnpd: improve hotplug & interface handling
The existing interface selection/detection code was incomprehensible at
worst and convoluted at best.  The uci config file suggested it
understood an external ipv6 interface but in reality the init script
took no notice.  Re-work it so it is at least comprehendible and takes
notice of ipv6 interface details if specified.

Update the hotplug script to use the same interface selection/detection
code as the init script and take note of ipv6 interface selection, only
restarting miniupnpd on interface up events and only if that interface
isn't already known (for that ip class) by miniupnpd.

For me this has solved numerous 'flaky' startup problems, especially
with regard to ipv6.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2020-05-25 22:49:03 +01:00
Rosen Penev f6d03d06fd Merge pull request #12302 from aleksander0m/aleksander/mm-mtu
modemmanager: set interface MTU based on bearer settings
2020-05-25 12:08:17 -07:00
Gabor Seljan 888c580605 sslh: bump package release
Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
2020-05-25 17:25:29 +02:00
Aleksander Morgado 41552c1cc2 modemmanager: set interface MTU based on bearer settings
Using the same method used by other protocol handlers like uqmi.

Fixes https://github.com/openwrt/packages/issues/11383

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2020-05-25 15:35:50 +02:00
Jan Pavlinec 168efe753d clamav: update to version 0.102.3 (security fix)
Fixes:
CVE-2020-3341
CVE-2020-3327

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-05-25 15:13:51 +02:00
Rosen Penev 93485dd317 transmission: update to 3.0
remove upstreamed patches. Refresh remaining one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-24 21:20:36 -07:00
Rosen Penev f50e2bde1d Merge pull request #12077 from peter-stadler/uwsgi
uwsgi: make luci-webui single threaded and log more
2020-05-24 18:32:00 -07:00
Rosen Penev 6b102f67d2 Merge pull request #12184 from peter-stadler/nginx-luci
nginx: set log level to crit for luci-static
2020-05-24 18:30:10 -07:00
Dirk Brenken 0b6ea12560 adblock: limit domain name length
* limit domain name length to max. 63 chars
  to fix issues with energized sources

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-05-24 21:40:58 +02:00
Gabor Seljan 499f3ac44b sslh: add transparent proxy support
Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
2020-05-24 18:58:37 +02:00
Peter Stadler 34cb21a2cf nginx: set log level to crit for luci-static
Do not write errors for inexistent files to the system log.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-05-24 18:53:16 +02:00
Rosen Penev f5fdcf3e7e Merge pull request #12159 from peter-stadler/nginx-smp
nginx: do not reduce max processes
2020-05-23 19:53:54 -07:00
Dirk Brenken c9f91ecc47 adblock: release 4.0.5
* update energized source urls, add ultimate variant
* switch shalla source to http (invalid server certificate)
* add another stevenblack source variant (normal / porn)
* small cornercase fixes
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-05-23 21:15:52 +02:00
Rosen Penev 6607eeb96b Merge pull request #12243 from PolynomialDivision/feature/update_dawn_latest
dawn: update to latest version
2020-05-23 01:11:02 -07:00
Nick Hainke d1e0ae6a45 dawn: update to latest version
Includes:
- dawn_iwinfo: fix whitespace
- dawn_iwinfo: indentation
- dawn_iwinfo: iwinfo_finish();
- dawn_iwinfo: filter out global interface
- dawn_iwinfo: release iwinfo after usage
- tcpsocket: fix port print
- github: set CONFIG_SRC_TREE_OVERRIDE in actions CI
- github: fix link to dawn source
- github: use v2 for checkout action
- github: add GitHub Actions CI
- ubus: only update TCP socket list when using TCP connections
- add notice that full wpad is requirement
- fix link to luci-app-dawn
- update readme and install instructions

Signed-off-by: Nick Hainke <vincent@systemli.org>
2020-05-23 09:42:02 +02:00
Rosen Penev 2f8c24dfd1 Merge pull request #12252 from BKPepe/knot-disable-libcap-ng
knot: disable libcap-ng
2020-05-22 14:05:17 -07:00
Matthias Schiffer 598d4baa02 fastd: update to v19
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2020-05-22 21:15:46 +02:00
Josef Schlehofer 41957d6967 knot: disable libcap-ng
Recently, there was added libcap-ng to OpenWrt packages feed,
which is optional for Knot DNS. It enables POSIX 1003.1e capabilities.
This can restrict root (by default it runs as root) permissions and
might harm and as there isn't systemd on OpenWrt it can interfere.

There is an added patch, which introduced an option to disable libcap-ng.
This will be part of the next release.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-22 14:13:45 +02:00
Jeffery To f350b5620b seafile-server: Update to 7.1.4, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-21 15:53:54 +08:00
Josef Schlehofer a75391575b bind: update to version 9.16.3
Fixes:
CVE-2020-8616
CVE-2020-8617

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-20 11:24:22 -07:00
Rosen Penev 9455e46d7a Merge pull request #12232 from neheb/cifs
cifs-utils: fix compilation
2020-05-20 09:20:10 -07:00