Commit Graph
15718 Commits
Author SHA1 Message Date
Hannu NymanandGitHub e6ced27690 Merge pull request #10676 from gladiac1337/haproxy-2.0.10-openwrt-19.07
[openwrt-19.07] haproxy: Update HAProxy to v2.0.10
2019-11-29 17:29:01 +02:00
Christian Lachner 5dd5b33653 haproxy: Update HAProxy to v2.0.10
- Update haproxy download URL and hash
- Add new patches (see https://www.haproxy.org/bugs/bugs-2.0.10.html)
- This fixes CVE-2019-19330 (See: https://nvd.nist.gov/vuln/detail/CVE-2019-19330)

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-11-29 12:22:04 +01:00
Daniel Golle a79d6df674 transmission: sync with master branch
Fixes to init-script were not cherry-picked properly, sync it with
version found in master branch.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2019-11-28 18:38:11 +01:00
Rosen PenevandGitHub 7c1c00735c Merge pull request #10646 from Andy2244/softethervpn5-9672_19.07
[19.07] softethervpn5: update to 5.01.9672
2019-11-26 14:23:50 -08:00
Matthias Schiffer 03b412db2e luasrcdiet: add package (moved from luci-base package)
We use luasrcdiet in Gluon as well. Move it from the luci feed to packages.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit 46d68b8699)
2019-11-26 19:52:28 +01:00
Andy Walsh a881ab43c9 softethervpn5: update to 5.01.9672
* 5.01.9672 release
* Cedar: handle UDP acceleration and R-UDP versions
* Mayaqua: implement R-UDP version 2, powered by ChaCha20-Poly1305
* Cedar: implement UDP acceleration version 2, powered by ChaCha20-Poly1305
* Cedar: serve new web management interface
* Cedar: implement detailed protocol info
* Mayaqua: add Windows Server 2019 to the supported operating systems list
* Cedar: various fixes
* Cedar: add "DisableIPsecAggressiveMode" option
* Make install dir for unit files configurable
* Protocol.c: adapt ClientConnectGetSocket() for new proxy functions
* Wpc.c: adapt WpcSockConnectEx() for new proxy functions
* Protocol: add ProxyCodeToCedar()
* Move generic proxy stuff from Cedar to Mayaqua
* Proto_OpenVPN.c: improve OvsProcessData(), fix out-of-bounds access found by Coverity
* Proto_OpenVPN.c: fix segmentation fault in OvsProceccRecvPacket()
* Addressing the UDP reflection amplification attack: https://github.com/SoftEtherVPN/SoftEtherVPN/issues/1001
* Mayaqua.h: include <stdarg.h> for "va_list" on Illumos
* Protocol.c: fix bug in ClientConnectGetSocket() causing custom HTTP header not to work
* Mayaqua: move HTTP functions from "Network" to "HTTP"
* Move GetMimeTypeFromFileName() and related structure to Mayaqua
* Mayaqua.h: include <stdio.h> for "FILE"
* Mayaqua.h: include <stddef.h>, for "wchar_t"
* Bump mixin-deep in /src/bin/hamcore/wwwroot/admin/default
* - Fixed the problem occurs when RPC messages between Cluster Members exceed 64Kbytes. - Fixed the RADIUS PEAP client to use the standard TLS versioning. - Implementation of a function to fix the MAC address of L3 VPN protocol by entering e.g. "MAC: 112233445566" in the "Notes" field of the user information. - Implementation of a function to fix the virtual MAC address to be assigned to the L3 VPN client as a string attribute from RADIUS server when authentication.
* Updating built-in Win32 libraries - OpenSSL 1.1.1 -> 1.1.1d - zlib 1.2.3 -> 1.2.11
* Update strtable_cn.stb
* Avoid using hardcoded paths in log file enumeration
* Fix buffer overflow during NETBIOS name resolution
* Update SEVPN.sln
* Create strtable_pt_br.stb
* ci: display error if vpntest failed
* Fix several compile warnings on MS VC++ 2008.
* Enables crash minidump for Win32 vpntest. Minidump files will be saved to the 'C:\Users\<username>\AppData\Local\Temp\vpn_debug' (for normal user) or 'src\bin\vpn_debug\' (for administrator user).
* OpenVPN: use new protocol interface
* Add interface for easy protocol implementation
* add "no-deprecated" to openssl builds "no-deprecated" is widely used in openwrt devices
* Fix LibreSSL support
* Switch to OpenSSL THREADID API
* travis-ci: update openssl, libressl
* enable sonar-scan in travis-ci builds
* Virtual: fix race condition in DHCP server which resulted in multiple clients receiving the same IP
* Mayaqua: Fix compilation without deprecated OpenSSL APIs
* Mayaqua: Replace GNU specific sys/poll.h header with POSIX poll.h
* systemd: replace deprecated CAP_SYS_ADMIN with CAP_SYSLOG

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-26 15:50:20 +01:00
Rosen PenevandGitHub 21c52897bd Merge pull request #10638 from Andy2244/cifsd-tools_update-2019-11-25_19.07
cifsd-tools: update to git (2019-11-25) [19.07]
2019-11-25 20:15:21 -08:00
Rosen PenevandGitHub d0e97caca6 Merge pull request #10631 from jefferyto/python-pyopenssl-19.1.0-openwrt-19.07
[openwrt-19.07] python-pyopenssl: Update to 19.1.0
2019-11-25 11:14:29 -08:00
Andy Walsh b98dcdc342 cifsd-tools: update to git (2019-11-25)
* cifsd-tools: fix Assignment of a signed value which has type 'long'
* init: convert hide_dot_files to yes/no option
* 'read only = no' seems bugged for cifsd/smb.conf, so fix via 'writeable = yes'

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-25 17:14:16 +01:00
Dirk Brenken a45dd88502 adblock: update 3.8.12
* fix possible dns restart issue with DNS File Reset (race condition)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 219abdc5a1)
2019-11-25 09:51:15 +01:00
Rosen Penev 88c37cb6fe transmission: Disable webseeding
It causes 100% CPU usage in certain situations. Just disable it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 6d9ee2ec86)
2019-11-24 19:09:01 -08:00
Rosen Penev e8438eb67a transmission: Fix tracker issue with some firewalls
Some firewalls mandate a minimum size of 4k for SYN packets, which
transmission does not do by default. Upstream issue here:

https://github.com/transmission/transmission/issues/964

Cleanup:

Fixed license info.

Removed two unnecessary patches.

Ran shell script through shellcheck.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 730a1697fe)
2019-11-24 19:08:20 -08:00
Josef SchlehoferandMichael Heimpold 4a82137613 php7: Update to version 7.2.25
- Fixes CVE-2019-11043

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 9bc48abd2a)
2019-11-24 22:04:15 +01:00
W. Michael PetulloandMichael Heimpold 36358e7e38 php7: mark /etc/config/php7-fastcgi as conffile
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 5bc9bb04c5)
2019-11-24 22:03:41 +01:00
Michael Heimpold 3be4577ee9 php7-mod-xmlreader: add conditional dependency to php7-mod-dom (fixes #10201)
PHP7 fails to load xmlreader.so (php7-mod-xmlreader) module without
dom.so (php7-mod-dom) module loaded:

-snip-
PHP Warning:  PHP Startup: Unable to load dynamic library 'xmlreader.so'
 (tried: /usr/lib/php/xmlreader.so (Error relocating /usr/lib/php/xmlreader.so:
 dom_node_class_entry: symbol not found), /usr/lib/php/xmlreader.so.so (Error
 loading shared library /usr/lib/php/xmlreader.so.so: No such file or
 directory)) in Unknown on line 0
^C
-snap-

However, this dependency only exists when during build also php7-mod-dom
is selected.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit b8c22fc1ec)
2019-11-24 22:03:11 +01:00
Stefaan GhyselsandMichael Heimpold 7aadc71300 php7: bump to 7.2.23
Signed-off-by: Stefaan Ghysels <stefaang@gmail.com>
(cherry picked from commit dacda44755)
2019-11-24 22:02:30 +01:00
Jeffery To fc33728724 python-pyopenssl: Update to 19.1.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from aff03aee1f)
2019-11-25 04:40:19 +08:00
Rosen PenevandGitHub d4aa51b246 Merge pull request #10619 from Andy2244/samba4_19.07_22-11-2019
samba4: add UCI option 'disable_async_io' [19.07]
2019-11-22 08:34:04 -08:00
Rosen PenevandGitHub d74673aeb2 Merge pull request #10617 from Andy2244/cifsd_22-11-2019_19.07
cifsd: update to git (2019-11-22) [19.07]
2019-11-22 08:27:33 -08:00
Andy Walsh 5b2010ce80 samba4: add UCI option 'disable_async_io'
* add UCI option 'disable_async_io'
* remove [homes] options

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-22 14:15:12 +01:00
Andy Walsh e6564936ec cifsd: update to git (2019-11-22)
cifsd: fix uninitialized fp could be freed
cifsd: fix potential uninitialized spnego_blob could be freed
cifsd: smbd: replace spinlock_irqsave with spinlock
cifsd: smbd: avoid the lack of client's send credits

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-22 14:09:23 +01:00
Jan PavlinecandJosef Schlehofer fd254a04c8 bind: update to version 9.14.8 (security fix)
Fixes CVE-2019-6477

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit 46ca2c7)
2019-11-22 08:48:19 +01:00
Rosen PenevandGitHub 89d4f92b89 Merge pull request #10606 from rs/nextdns-1.1.5_19.07
[OpenWRT 19.07] nextdns: Update version 1.1.5 + add per host config option
2019-11-21 09:35:50 -08:00
Olivier Poitrey db06f7ee2a nextdns: Update version 1.1.5 + add per host config option
* Update nextdns to version 1.1.5 which adds IPv6 dual stack support.
* Add the ability to configure per host configuration id from uci.

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2019-11-21 02:42:12 -08:00
Josef Schlehofer d1bab6ef8a nnn: Add a new package
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 32cbfce051)
2019-11-21 09:17:03 +01:00
Josef Schlehofer 52515c819e unbound: Update to version 1.9.5
Fixes CVE-2019-18934

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 24667753a2)
2019-11-21 09:02:42 +01:00
Rosen PenevandGitHub b79cb96dc1 Merge pull request #10603 from Andy2244/cifsd-19.07
cifsd: add package cifsd [backport]
2019-11-20 16:45:32 -08:00
Andy Walsh ff0e3bf719 cifsd: add package cifsd [backport]
* adds cifsd (cifs kernel server) + tools

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-20 22:24:29 +01:00
Jan HakandJosef Schlehofer ffbe240f0f knot: update to version 2.9.1
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry-picked from commit 559672d)
2019-11-20 18:11:40 +01:00
Rosen PenevandGitHub 2850866230 Merge pull request #10586 from commodo/openwrt-19.07-django1
django: bump to version 1.11.26
2019-11-19 11:14:34 -08:00
Hannu NymanandGitHub 7a52e8e342 Merge pull request #10580 from gladiac1337/haproxy-2.0.9-openwrt-19.07
[openwrt-19.07] haproxy: Update HAProxy to v2.0.9
2019-11-19 19:14:37 +02:00
Dirk Brenken 6106619bde travelmate: update 1.5.3
* some init tweaks
* use the usual wifi wrapper for reloads
* compatibility fix for latest wifi-related changes
  in master (dynamic wireless radio reconfiguration)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 05c3153bb7)
2019-11-19 10:27:47 +01:00
Alexandru Ardelean 2969a1842d django: bump to version 1.11.26
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-11-19 10:49:50 +02:00
Dirk Brenken 58dd5a94ba adblock: update 3.8.11
* some more init tweaks
* update/cleanup readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit bc299d03f2)
2019-11-18 21:36:12 +01:00
Christian Lachner f28dfa39ea haproxy: Update HAProxy to v2.0.9
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-11-18 09:19:53 +01:00
Etienne ChampetierandEtienne Champetier a907174c3a prometheus-node-exporter-lua: bump version
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 50b825e7fa)
2019-11-17 18:28:41 -08:00
Zoltan HaindrichandEtienne Champetier 928915f4a6 prometheus-node-exporter-lua: an unavaliable wifi interface may have stopped the scraper from functioning
Signed-off-by: Zoltan Haindrich <kirk@rxd.hu>
(cherry picked from commit 7bec619f53)
2019-11-17 18:28:13 -08:00
Andre HeiderandEtienne Champetier 0e69b14733 prometheus-node-exporter-lua: respawn the process
Signed-off-by: Andre Heider <a.heider@gmail.com>
(cherry picked from commit a3af4c3691)
2019-11-17 18:28:13 -08:00
Andre HeiderandEtienne Champetier 56e0861f77 prometheus-node-exporter-lua: add a config reload trigger
Signed-off-by: Andre Heider <a.heider@gmail.com>
(cherry picked from commit d8e637d064)
2019-11-17 18:28:12 -08:00
Andre HeiderandEtienne Champetier ee353e6036 prometheus-node-exporter-lua: switch config to openwrt interface names
Drop the config knob 'listen_address' and introduce 'listen_interface'
and 'listen_ipv6' instead.

'listen_interface' takes an openwrt interface name ('loopback', 'lan',
'wan' etc, or "*" for all), from which the primary IP is used to listen
on. If 'listen_ipv6' is set to '1', the IPv6 adress will be used, IPv4
elsewise.

procd interface triggers are now combined with this, so if the listen
interface is not yet configured when the init script is executed, the
process start is defered, and the trigger takes care of that once
the interface is ready.

Fixes #7670

Signed-off-by: Andre Heider <a.heider@gmail.com>
(cherry picked from commit 48568ad9f9)
2019-11-17 18:28:12 -08:00
Rosen PenevandGitHub 41503554d0 Merge pull request #10577 from jefferyto/python-zope-interface-4.7.1-openwrt-19.07
[openwrt-19.07] python-zope-interface: Update to 4.7.1, refresh patch
2019-11-17 18:11:45 -08:00
Rosen PenevandGitHub 209ecba6be Merge pull request #10575 from jefferyto/python-twisted-19.10.0-openwrt-19.07
[openwrt-19.07] python-twisted: Update to 19.10.0, refresh patches
2019-11-17 18:11:27 -08:00
Rosen PenevandGitHub 4c8f47b5a7 Merge pull request #10567 from rs/nextdns-1.1.3_19.07
[19.07] nextdns: update to 1.1.3
2019-11-17 17:52:47 -08:00
Olivier Poitrey 6c42cc8f6d nextdns: update to 1.1.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2019-11-17 17:42:26 -08:00
Carey SonsinoandRosen Penev 87e9963eba dcwapd: Update init script to use procd
consolidate shell scripts into init script
remove "litter" from uci file
update default UCI values

Signed-off-by: Carey Sonsino <careys@edgewaterwireless.com>
Signed-off-by: Carey Sonsino <csonsino@gmail.com>
(cherry-picked from 0d5b50c4b)
2019-11-17 14:15:35 -08:00
Jeffery To 1f417d7ed0 python-zope-interface: Update to 4.7.1, refresh patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 5e8feda04a)
2019-11-18 04:49:46 +08:00
Hannu NymanandGitHub 55f6874ed8 Merge pull request #10573 from jefferyto/python-pyasn1-0.4.8-openwrt-19.07
[openwrt-19.07] python-pyasn1: Update to 0.4.8
2019-11-17 22:44:11 +02:00
Jeffery To 87ccd3ddbd python-twisted: Update to 19.10.0, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from c56770a570)
2019-11-18 04:35:45 +08:00
Jeffery To 7504b410a6 python-pyasn1: Update to 0.4.8
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from b99abe8dd8)
2019-11-18 04:07:32 +08:00
Toke Høiland-Jørgensen 1feef55c94 acme: Add dependency on luci-compat for luci-app-acme
Fixes #10564.

Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
2019-11-17 16:19:13 +01:00