aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* Merge pull request #13140 from PolynomialDivision/feature/add-ipv6-generatorRosen Penev2020-08-23
|\ | | | | generate-ipv6-address: add ipv6 generator
| * generate-ipv6-address: add ipv6 generatorNick Hainke2020-08-18
| | | | | | | | | | | | | | Generates IPv6 addresses from a given prefix and either a given MAC-48 address (an Ethernet hardware address) or a randomly drawn host number. Signed-off-by: Nick Hainke <vincent@systemli.org>
* | Merge pull request #13192 from peter-stadler/nginxRosen Penev2020-08-23
|\ \ | | | | | | nginx: update to version 1.19.2
| * | nginx: update to version 1.19.2Peter Stadler2020-08-22
| | | | | | | | | | | | Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* | | bind: New upstream version 9.16.6Noah Meyerhans2020-08-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Several security issures are addressed: - CVE-2020-8620 It was possible to trigger an assertion failure by sending a specially crafted large TCP DNS message. - CVE-2020-8621 named could crash after failing an assertion check in certain query resolution scenarios where QNAME minimization and forwarding were both enabled. To prevent such crashes, QNAME minimization is now always disabled for a given query resolution process, if forwarders are used at any point. - CVE-2020-8622 It was possible to trigger an assertion failure when verifying the response to a TSIG-signed request. - CVE-2020-8623 When BIND 9 was compiled with native PKCS#11 support, it was possible to trigger an assertion failure in code determining the number of bits in the PKCS#11 RSA public key with a specially crafted packet. - CVE-2020-8624 update-policy rules of type subdomain were incorrectly treated as zonesub rules, which allowed keys used in subdomain rules to update names outside of the specified subdomains. The problem was fixed by making sure subdomain rules are again processed as described in the ARM. Full release notes are available at https://ftp.isc.org/isc/bind9/9.16.6/doc/arm/html/notes.html#notes-for-bind-9-16-6 Signed-off-by: Noah Meyerhans <frodo@morgul.net>
* | | Merge PR #13179 via local branch.Michael Heimpold2020-08-23
|\ \ \
| * | | net/u2pnpd: convert init to procdKarl Palsson2020-08-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Drops pid files, no longer needed with procd management. Now properly reloads on reload_config after UCI changes. Signed-off-by: Karl Palsson <karlp@etactica.com> [ Fixed two shellcheck warnings and bump PKG_RELEASE ] Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | Merge pull request #13137 from neheb/iscRosen Penev2020-08-23
|\ \ \ \ | | | | | | | | | | isc-dhcp: fix compilation with GCC 10
| * | | | isc-dhcp: fix compilation with GCC 10Rosen Penev2020-08-15
| | |_|/ | |/| | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | Merge pull request #13191 from Foxtrot/add-fakepopRosen Penev2020-08-23
|\ \ \ \ | | | | | | | | | | fakepop: add new package
| * | | | fakepop: Fix PKG_LICENSE, remove libc dependencyMarc Egerton2020-08-22
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Marc Egerton <foxtrot@realloc.me>
| * | | | fakepop: new packageMarc Egerton2020-08-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | fakepop is a fake pop3 daemon. It returns always the same messages to all users, it does not care about usernames and passwords. All user/pass combinations are accepted. Signed-off-by: Marc Egerton <foxtrot@realloc.me>
* | | | | Merge pull request #13194 from yangfl/masterRosen Penev2020-08-23
|\ \ \ \ \ | | | | | | | | | | | | i2pd: Update to 2.32.1
| * | | | | i2pd: Update to 2.32.1David Yang2020-08-23
|/ / / / / | | | | | | | | | | | | | | | Signed-off-by: David Yang <mmyangfl@gmail.com>
* | | | / klish: fixup sigignore supportRosen Penev2020-08-22
| |_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | Added _GNU_SOURCE for uClibc-ng compatibility. _XOPEN_SOURCE does not seem to be enough. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | Merge pull request #13097 from lzto/nft-qos-macRosen Penev2020-08-21
|\ \ \ \ | | | | | | | | | | nft-qos: support mac address based speed limit
| * | | | nft-qos: support mac address based speed limitTong Zhang2020-08-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch makes it possible to configure and limit per-client internet speed based on MAC address and it can work with SQM. This feature is what OpenWRT currently lacks. This patch is largely based on static.sh and the configuration file is similar to original nft-qos. New configuration options and examples are listed below config default 'default' option limit_mac_enable '1' config client option drunit 'kbytes' option urunit 'kbytes' option hostname 'tv-box' option macaddr 'AB:CD:EF:01:23:45' option drate '1000' option urate '50' config client option drunit 'kbytes' option urunit 'kbytes' option hostname 'my-pc' option macaddr 'AB:CD:EF:01:23:46' option drate '3000' option urate '2000' limit_mac_enable - enable rate limit based on MAC address drunit - download rate unit urunit - upload rate unit macaddr - client MAC address drate - download rate urate - upload rate Signed-off-by: Tong Zhang <ztong0001@gmail.com>
* | | | | Merge pull request #13186 from stangri/master-simple-adblockRosen Penev2020-08-21
|\ \ \ \ \ | | | | | | | | | | | | simple-adblock: bugfix: update config; use command -v
| * | | | | simple-adblock: bugfix: update config; use command -vStan Grishin2020-08-21
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Stan Grishin <stangri@melmac.net>
* | | | | | Merge pull request #13185 from flyn-org/gstreamer1Rosen Penev2020-08-21
|\ \ \ \ \ \ | |/ / / / / |/| | | | | gstreamer1: enable build options necessary for most applications
| * | | | | gstreamer1: enable build options necessary for most applicationsW. Michael Petullo2020-08-21
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commit cb058bf changed gstreamer1's build options, and this broke some applications. First, -Doption-parsing=false is intended for very specific embedded applications rather general packages. Please see: https://github.com/openwrt/packages/pull/8847 https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/388 Second, -Dregistry=false seems to break plugin discovery. Symptoms of this include broken applications and gst-inspect-1.0 listing zero plugins. Fixes #13180. Signed-off-by: W. Michael Petullo <mike@flyn.org>
* | | | | Merge pull request #13184 from PolynomialDivision/feature/dawnupdateRosen Penev2020-08-21
|\ \ \ \ \ | | | | | | | | | | | | dawn: bump to latest version
| * | | | | dawn: bump to latest versionNick Hainke2020-08-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Includes: - dawn_uci: fix crashing when uci config is received - tcpsocket: add option to add server ip A new config option allows to add a server ip option server_ip '10.0.0.2' However, this server does not send anything back. Therefore it is not possible to change the node configuration. This will probably be added soon. The main goal of this commit is to allow monitoring of all nodes in a network with DAWN, e.g. clients, channel utilization, ... Also a network option (3) has been added which allows to use TCP but not to announce your daemon in the broadcast domain. This allows you to create a monitor-only node that holds only the local information and forwards it to the central server. A monitor-only node could be configured like option server_ip '10.0.0.1' option tcp_port '1026' option network_option '3' Another possible config is option server_ip '10.0.0.1' option tcp_port '1026' option network_option '2' Here, the node shares information with a central server, which can be located outside the broadcast domain. Nevertheless, it also shares information within its broadcast domain and can therefore perform client steering. Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | | | Merge pull request #13176 from neheb/scRosen Penev2020-08-21
|\ \ \ \ \ \ | | | | | | | | | | | | | | serialconsole: update to 1.0
| * | | | | | serialconsole: update to 1.0Rosen Penev2020-08-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add license information. Add PKG_INSTALL and PKG_BUILD_PARALLEL for consistency between packages. Minor cleanups. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | Merge pull request #13175 from neheb/fpiRosen Penev2020-08-21
|\ \ \ \ \ \ \ | |_|/ / / / / |/| | | | | | fping: update to 5.0
| * | | | | | fping: update to 5.0Rosen Penev2020-08-19
| |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Minor cleanups. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | Revert "libwebsockets: move to 3.2.1"Karl Palsson2020-08-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit 7066486fbbfa1bb73fee74911a8306e3a534a6fe. LWS 3.2.x and 4.0.x are broken on ath79 and malta-be, (at least) See https://github.com/warmcat/libwebsockets/issues/2008 and https://github.com/openwrt/packages/issues/13085 Restore a functional 3.1 release until upstream release. Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | | Merge pull request #13164 from neheb/gphoRosen Penev2020-08-21
|\ \ \ \ \ \ | | | | | | | | | | | | | | libgphoto2: add missing INTL_DEPENDS
| * | | | | | libgphoto2: add missing INTL_DEPENDSRosen Penev2020-08-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | Merge pull request #13173 from neheb/bandRosen Penev2020-08-20
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | bandwidthd: don't build in parallel
| * | | | | | | bandwidthd: don't build in parallelRosen Penev2020-08-19
| | |/ / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There are intermittent build failures on the buildbots because of this. I see the same build failures locally as well. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | Merge pull request #13116 from neheb/klRosen Penev2020-08-20
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | klish: fix compilation with uClibc-ng
| * | | | | | | klish: fix compilation with uClibc-ngRosen Penev2020-08-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | sigignore is missing from libc. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | Merge pull request #13117 from neheb/zab2Rosen Penev2020-08-20
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | zabbix: do not build with uClibc-ng
| * | | | | | | | zabbix: do not build with uClibc-ngRosen Penev2020-08-13
| |/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It's missing functionality necessary for zabbix. Remove now pointless patch. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | Merge pull request #13177 from aleksander0m/aleksander/mm-1-14-2Rosen Penev2020-08-20
|\ \ \ \ \ \ \ \ | |_|_|_|_|_|_|/ |/| | | | | | | modemmanager: bump to 1.14.2
| * | | | | | | modemmanager: bump to 1.14.2Aleksander Morgado2020-08-20
| | |/ / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | https://lists.freedesktop.org/archives/modemmanager-devel/2020-August/008099.html Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
* | | | | | | Merge pull request #13111 from neheb/tgtRosen Penev2020-08-20
|\ \ \ \ \ \ \ | |/ / / / / / |/| | | | | | tgt: remove bzero usage
| * | | | | | tgt: remove bzero usageRosen Penev2020-08-13
| |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | bzero is deprecated and replaced by memset. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | lua-mosquitto: Update to 0.4.1Karl Palsson2020-08-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | New methods for setting client options, no major functional changes. Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | | lua-penlight: Update to 1.8.0Karl Palsson2020-08-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Full changelog at https://github.com/Tieske/Penlight/blob/master/CHANGELOG.md#180-2020-08-05 Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | | net/mosquitto: Update to 1.6.12Karl Palsson2020-08-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Security release. From the changelog: - In some circumstances, Mosquitto could leak memory when handling PUBLISH messages. This is limited to incoming QoS 2 messages, and is related to the combination of the broker having persistence enabled, a clean session=false client, which was connected prior to the broker restarting, then has reconnected and has now sent messages at a sufficiently high rate that the incoming queue at the broker has filled up and hence messages are being dropped. This is more likely to have an effect where max_queued_messages is a small value. This has now been fixed. Closes https://github.com/eclipse/mosquitto/issues/1793 Changelog: https://mosquitto.org/blog/2020/08/version-1-6-12-released/ Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | | Merge pull request #13041 from aaronjg/mwan3-startup-performanceFlorian Eckert2020-08-19
|\ \ \ \ \ \ | | | | | | | | | | | | | | mwan3: startup performance improvements and other fixes
| * | | | | | mwan3: improve startup performance; version 2.9.0Aaron Goodman2020-08-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | improve startup and runtime performance by 1) moving common startup procedures out of hotplug script when called from mwan3 start 2) reducing calls to iptables to check status of rules 3) consolidating iptables updates and updating with iptables-restore 4) do not wait for kill if nothing was killed 5) running interface hotplug scripts in parallel 6) eliminate operations in hotplug script that check status on every single interface unnecessarily 7) consolidate how mwan3track makes hotplug calls 8) do not restart mwan3track on connected events This is a significant refactor, but should not result in any breaking changes or require users to update their configurations. version bump to 2.9.0 Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | | | | mwan3: use ip monitor route to detect routing changesAaron Goodman2020-08-15
| | |_|/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | use only committed uci changes for updating routing table use functions.sh functions rather than uci command line tool to find interfaces for routing table. consolidate rtmon_ipv4 and rtmon_ipv6 functions into a single function Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
* | | | | | Merge pull request #13168 from ClaymorePT/boost_1.74.0_r2Rosen Penev2020-08-19
|\ \ \ \ \ \ | | | | | | | | | | | | | | boost: Package Revision - Remove unneded patches
| * | | | | | boost: Package Revision - Remove unneded patchesCarlos Miguel Ferreira2020-08-19
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit removes patches which are no longer needed Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>
* | | | | | Merge pull request #13162 from neheb/sysstRosen Penev2020-08-19
|\ \ \ \ \ \ | | | | | | | | | | | | | | sysstat: update to 12.4.0
| * | | | | | sysstat: update to 12.4.0Rosen Penev2020-08-18
| | |_|/ / / | |/| | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>