aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* gsocket: add a new package with version 1.4.37Ralf Kaiser2022-07-13
| | | | | | | | | | | | | | | | | | | | | | | | | | Global Socket allows two workstations on different private networks to communicate with each other. Through firewalls and through NAT - like there is no firewall. The TCP connection is secured with AES-256 and using OpenSSL's SRP protocol (RFC 5054). It does not require a PKI and has forward secrecy and (optional) TOR support. The gsocket tools derive temporary session keys and IDs and connect two TCP pipes through the Global Socket Relay Network (GSRN). This is done regardless and independent of the local IP Address or geographical location. The session keys (secrets) never leave the workstation. The GSRN sees only the encrypted traffic. The workhorse is 'gs-netcat' which opens a ssh-like interactive PTY command shell to a remote workstation (which resides on a private and remote network and/or behind a firewall). Also added test.sh file to run test it inside containeer Signed-off-by: Ralf Kaiser <skyper@thc.org>
* pdns-recursor: update to 4.7.1Peter van Dijk2022-07-13
| | | | Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
* pdns: update to 4.6.3Peter van Dijk2022-07-13
| | | | Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
* libfmt: bump to new upstream version 9.0.0Othmar Truniger2022-07-12
| | | | Signed-off-by: Othmar Truniger <github@truniger.ch>
* libndpi: update to 4.4Toni Uhlig2022-07-12
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* Merge pull request #18913 from jempatel/improve_apinger-procd-uciFlorian Eckert2022-07-12
|\ | | | | apinger: improve uci and procd support
| * apinger: improve uci and procd supportJaymin Patel2022-07-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - convert apinger into procd instances - generate instance specific apinger.conf from uci - hotplug handling for apinger alarms - restart apinger interface instance on ifup action of interface - don't exit on packet count mismatch, allows to use apinger as monitor for multiple targets handling - add srcip option to target configuration, allows specifying source ip used to monitor target - allow creating status file in script parseable format Patches are ported against latest version of apinger and referenced from https://git.pld-linux.org/?p=packages/apinger.git;a=summary Signed-off-by: Jaymin Patel <jem.patel@gmail.com>
* | ttymidi-sysex: support more System messagesDaniel Golle2022-07-11
| | | | | | | | | | | | | | | | add support System Realtime and System Common This patch has also been submitted upstream: https://github.com/cchaussat/ttymidi-sysex/pull/2 Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | libv4l: change dependence from libudev-zero to libudevVolodymyr Nazarchuk2022-07-11
| | | | | | | | Signed-off-by: Volodymyr Nazarchuk <vavooon@gmail.com>
* | Merge pull request #18811 from turris-cz/bindJosef Schlehofer2022-07-11
|\ \ | | | | | | bind: update to version 9.18.4
| * | bind: update to version 9.18.4Josef Schlehofer2022-06-24
| | | | | | | | | | | | | | | | | | | | | Fixes: - CVE-2022-1183 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | telegraf: Update to version 1.23.1Jonathan Pagel2022-07-11
| | | | | | | | | | | | Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
* | | libextractor: fix iconv handlingRosen Penev2022-07-10
| | | | | | | | | | | | | | | | | | Autoreconf is enough to fix. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | softethervpn: get rid of external iconvRosen Penev2022-07-10
| | | | | | | | | | | | | | | | | | Not really needed. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | transmission: get rid of iconv dependencyRosen Penev2022-07-10
| | | | | | | | | | | | | | | | | | No need for an external one. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | node: July 7th 2022 Security ReleasesHirokazu MORIKAWA2022-07-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update to v16.16.0 Release for the following issues: HTTP Request Smuggling - Flawed Parsing of Transfer-Encoding (Medium)(CVE-2022-32213) HTTP Request Smuggling - Improper Delimiting of Header Fields (Medium)(CVE-2022-32214) HTTP Request Smuggling - Incorrect Parsing of Multi-line Transfer-Encoding (Medium)(CVE-2022-32215) DNS rebinding in --inspect via invalid IP addresses (High)(CVE-2022-32212) https://nodejs.org/en/blog/vulnerability/july-2022-security-releases/ No vulnerabilities related with openssl (uses system openssl) Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
* | | elektra: fix compilation with external iconvRosen Penev2022-07-10
| | | | | | | | | | | | | | | | | | Patch mostly taken from hidapi. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | Merge pull request #18898 from mhei/ser2net-service-startMichael Heimpold2022-07-10
|\ \ \ | | | | | | | | ser2net: schedule start later during boot (fixes #18872)
| * | | ser2net: schedule start later during boot (fixes #18872)Michael Heimpold2022-07-09
|/ / / | | | | | | | | | | | | | | | | | | Usually, no other local service depends on the start of ser2net, so let's start it later in the boot process. Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | clamav: fix compilation without libiconv-stubRosen Penev2022-07-08
| | | | | | | | | | | | | | | | | | Ported similar patch from hidapi. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | libmad: update to 0.16.2Rosen Penev2022-07-08
| | | | | | | | | | | | | | | | | | Backport aarch64 patch. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | liburing: Update to v2.2Christian Lachner2022-07-08
| | | | | | | | | | | | | | | | | | - Updated download URL and hash Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | python-requests: bump to version 2.28.1Alexandru Ardelean2022-07-07
| | | | | | | | | | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | | python-lxml: bump to version 4.9.1Alexandru Ardelean2022-07-07
| | | | | | | | | | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | | pillow: bump to version 9.2.0Alexandru Ardelean2022-07-07
| | | | | | | | | | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | | python-chardet: bump to version 5.0.0Alexandru Ardelean2022-07-07
| | | | | | | | | | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | | rsyslog: apply shellcheck SC3014 to initGiacomo Sanchietti2022-07-07
| | | | | | | | | | | | Signed-off-by: Giacomo Sanchietti <giacomo.sanchietti@nethesis.it>
* | | rsyslog: replace spaces with tabs inside initGiacomo Sanchietti2022-07-07
| | | | | | | | | | | | Signed-off-by: Giacomo Sanchietti <giacomo.sanchietti@nethesis.it>
* | | rsyslog: improve default configGiacomo Sanchietti2022-07-07
| | | | | | | | | | | | | | | | | | | | | Check also for config files containing comment lines starting with white spaces. Signed-off-by: Giacomo Sanchietti <giacomo.sanchietti@nethesis.it>
* | | rsyslog: apply shellcheck suggestions to initGiacomo Sanchietti2022-07-07
| | | | | | | | | | | | Signed-off-by: Giacomo Sanchietti <giacomo.sanchietti@nethesis.it>
* | | rsyslog: preserve existing configurationGiacomo Sanchietti2022-07-07
| | | | | | | | | | | | Signed-off-by: Giacomo Sanchietti <giacomo.sanchietti@nethesis.it>
* | | rsyslog: include original config fileGiacomo Sanchietti2022-07-07
| | | | | | | | | | | | | | | | | | Allow advanced configurations from /etc/rsyslog.conf file Signed-off-by: Giacomo Sanchietti <giacomo.sanchietti@nethesis.it>
* | | rsyslog: write config file to RAMGiacomo Sanchietti2022-07-07
| | | | | | | | | | | | | | | | | | Avoid wearing out flash storage Signed-off-by: Giacomo Sanchietti <giacomo.sanchietti@nethesis.it>
* | | rsyslog: add uci supportGiacomo Sanchietti2022-07-07
| | | | | | | | | | | | Signed-off-by: Giacomo Sanchietti <giacomo.sanchietti@nethesis.it>
* | | Merge pull request #18883 from jefferyto/python-cryptography-fix-buildAlexandru Ardelean2022-07-07
|\ \ \ | | | | | | | | python-cryptography: Fix failing build
| * | | python-cryptography: Fix failing buildJeffery To2022-07-07
|/ / / | | | | | | | | | | | | | | | | | | Fixes https://github.com/openwrt/packages/issues/18876. Fixes https://github.com/openwrt/packages/issues/18879. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | dnslookup: Update to 1.7.1Tianling Shen2022-07-07
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | cloudflared: Update to 2022.7.1Tianling Shen2022-07-07
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | travelmate: update 2.0.9Dirk Brenken2022-07-06
| |/ |/| | | | | | | | | | | * various vpn fixes/optimizations (run tested by forum users) * refine several log statements Signed-off-by: Dirk Brenken <dev@brenken.org>
* | libarchive: fix ext2fs build race error conditionPetr Štetiar2022-07-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | libarchive looks for ext2fs headers during configure, and if it finds them it will expect to find them during compile, or on the rare occasion when they aren't it will fail: libarchive/archive_entry.c:59:55: fatal error: ext2fs/ext2_fs.h: No such file or directory As we just need headers for some type constants, let's re-use headers from tools/e2fsprogs package which are always available. Reported-by: Adam Dov <adov@maxlinear.com> Suggested-by: Paul Eggleton <paul.eggleton@linux.intel.com> References: https://git.yoctoproject.org/poky/commit/?id=f0b9a7cf9f80be1917e45266fa201f464a28c1e5 Signed-off-by: Petr Štetiar <ynezz@true.cz>
* | xfrpc: update to 1.06.579Dengfeng Liu2022-07-05
| | | | | | | | Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
* | xfrpc: set xfrpc's disabled default value to 0Dengfeng Liu2022-07-05
| | | | | | | | | | | | change this to satisfy luci-app-xfrpc's need Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
* | modemmanager: explicitly disconnect even if no bearers foundAleksander Morgado2022-07-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | A network restart where netifd is cleanly restarted involves bringing the network interfaces down. The 'modemmanager' protocol handler will run a mmcli --simple-disconnect in this case, but only if there are bearer objects found. If the network restart happened *during* the connection attempt procedure, while the modem is e.g. being registered in the network, no bearer objects exist yet, and so, we would skip doing anything during the interface teardown operation. This would lead to the original connection attempt succeeding, so leaving the modem in ModemManager in connected state, while the associated interface in netifd is reported down. Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
* | kea: create /var/run/kea in init scriptStijn Tintel2022-07-05
| | | | | | | | | | | | | | | | Kea expects /var/run/kea to exist. Without it, errors occur: Mon Jun 13 10:31:45 2022 daemon.err kea-dhcp6[2977]: Unable to use interprocess sync lockfile (No such file or directory): /var/run/kea/logger_lockfile Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | ncdu: update to 1.17 and add blue optionJohn Audia2022-07-05
| | | | | | | | | | | | | | | | | | | | | | | | Upstream bump and add a patch to use a blue highlight color for the dark color scheme (--color dark) as some users find the default bright green is too intense. Note that invoking ncdu without the --color switch at use uses the upstream default bright green, so users will need to call ncdu with --color dark in order to get the blue color. Signed-off-by: John Audia <therealgraysky@proton.me>
* | tor: bump to 0.4.7.8 stableRui Salvaterra2022-07-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | From the changelog… o Major bugfixes (congestion control, TROVE-2022-001): - Fix a scenario where RTT estimation can become wedged, seriously degrading congestion control performance on all circuits. This impacts clients, onion services, and relays, and can be triggered remotely by a malicious endpoint. Tracked as CVE-2022-33903. Fixes bug 40626; bugfix on 0.4.7.5-alpha. o Minor features (fallbackdir): - Regenerate fallback directories generated on June 17, 2022. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2022/06/17. o Minor bugfixes (linux seccomp2 sandbox): - Allow the rseq system call in the sandbox. This solves a crash issue with glibc 2.35 on Linux. Patch from pmu-ipf. Fixes bug 40601; bugfix on 0.3.5.11. o Minor bugfixes (logging): - Demote a harmless warn log message about finding a second hop to from warn level to info level, if we do not have enough descriptors yet. Leave it at notice level for other cases. Fixes bug 40603; bugfix on 0.4.7.1-alpha. - Demote a notice log message about "Unexpected path length" to info level. These cases seem to happen arbitrarily, and we likely will never find all of them before the switch to arti. Fixes bug 40612; bugfix on 0.4.7.5-alpha. o Minor bugfixes (relay, logging): - Demote a harmless XOFF log message to from notice level to info level. Fixes bug 40620; bugfix on 0.4.7.5-alpha. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* | autossh: improve uci and procd supportJaymin Patel2022-07-05
| | | | | | | | | | | | | | | | | | | | - convert autossh into procd instances - add new uci config options to handle local and remote port forwarding - remove hotplug down actions causing service to stop on any interface down event Signed-off-by: Jaymin Patel <jem.patel@gmail.com>
* | netifyd: Updated to v4.2.0.Darryl Sokoloski2022-07-05
| | | | | | | | Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
* | Merge pull request #18868 from PolynomialDivision/fix-gnutlsNikos Mavrogiannopoulos2022-07-05
|\ \ | | | | | | gnutls: adjust to new configure.ac syntax
| * | gnutls: disable brotliNick Hainke2022-07-05
| | | | | | | | | | | | | | | | | | | | | Disable the brotli library by default. It is not used and may prevent linking issues in the future. Signed-off-by: Nick Hainke <vincent@systemli.org>
Powered by cgit, Themed by Ted Yin.