aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
| * | | | | | | softethervpn5: update to 5.01.9672Andy Walsh2019-11-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 5.01.9672 release * Cedar: handle UDP acceleration and R-UDP versions * Mayaqua: implement R-UDP version 2, powered by ChaCha20-Poly1305 * Cedar: implement UDP acceleration version 2, powered by ChaCha20-Poly1305 * Cedar: serve new web management interface * Cedar: implement detailed protocol info * Mayaqua: add Windows Server 2019 to the supported operating systems list * Cedar: various fixes * Cedar: add "DisableIPsecAggressiveMode" option * Make install dir for unit files configurable * Protocol.c: adapt ClientConnectGetSocket() for new proxy functions * Wpc.c: adapt WpcSockConnectEx() for new proxy functions * Protocol: add ProxyCodeToCedar() * Move generic proxy stuff from Cedar to Mayaqua * Proto_OpenVPN.c: improve OvsProcessData(), fix out-of-bounds access found by Coverity * Proto_OpenVPN.c: fix segmentation fault in OvsProceccRecvPacket() * Addressing the UDP reflection amplification attack: https://github.com/SoftEtherVPN/SoftEtherVPN/issues/1001 * Mayaqua.h: include <stdarg.h> for "va_list" on Illumos * Protocol.c: fix bug in ClientConnectGetSocket() causing custom HTTP header not to work * Mayaqua: move HTTP functions from "Network" to "HTTP" * Move GetMimeTypeFromFileName() and related structure to Mayaqua * Mayaqua.h: include <stdio.h> for "FILE" * Mayaqua.h: include <stddef.h>, for "wchar_t" * Bump mixin-deep in /src/bin/hamcore/wwwroot/admin/default * - Fixed the problem occurs when RPC messages between Cluster Members exceed 64Kbytes. - Fixed the RADIUS PEAP client to use the standard TLS versioning. - Implementation of a function to fix the MAC address of L3 VPN protocol by entering e.g. "MAC: 112233445566" in the "Notes" field of the user information. - Implementation of a function to fix the virtual MAC address to be assigned to the L3 VPN client as a string attribute from RADIUS server when authentication. * Updating built-in Win32 libraries - OpenSSL 1.1.1 -> 1.1.1d - zlib 1.2.3 -> 1.2.11 * Update strtable_cn.stb * Avoid using hardcoded paths in log file enumeration * Fix buffer overflow during NETBIOS name resolution * Update SEVPN.sln * Create strtable_pt_br.stb * ci: display error if vpntest failed * Fix several compile warnings on MS VC++ 2008. * Enables crash minidump for Win32 vpntest. Minidump files will be saved to the 'C:\Users\<username>\AppData\Local\Temp\vpn_debug' (for normal user) or 'src\bin\vpn_debug\' (for administrator user). * OpenVPN: use new protocol interface * Add interface for easy protocol implementation * add "no-deprecated" to openssl builds "no-deprecated" is widely used in openwrt devices * Fix LibreSSL support * Switch to OpenSSL THREADID API * travis-ci: update openssl, libressl * enable sonar-scan in travis-ci builds * Virtual: fix race condition in DHCP server which resulted in multiple clients receiving the same IP * Mayaqua: Fix compilation without deprecated OpenSSL APIs * Mayaqua: Replace GNU specific sys/poll.h header with POSIX poll.h * systemd: replace deprecated CAP_SYS_ADMIN with CAP_SYSLOG Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
* | | | | | | | Merge pull request #10637 from Andy2244/cifsd-tools_update-2019-11-25Rosen Penev2019-11-25
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | cifsd-tools: update to git (2019-11-25)
| * | | | | | | | cifsd-tools: update to git (2019-11-25)Andy Walsh2019-11-25
| |/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * cifsd-tools: fix Assignment of a signed value which has type 'long' * init: convert hide_dot_files to yes/no option * 'read only = no' seems bugged for cifsd/smb.conf, so fix via 'writeable = yes' Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
* | | | | | | | Merge pull request #10582 from neheb/domoStijn Tintel2019-11-26
|\ \ \ \ \ \ \ \ | |_|_|_|_|/ / / |/| | | | | | | domoticz: Fix compilation with newer python
| * | | | | | | domoticz: Add missing dependencyRosen Penev2019-11-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | CMake picks up telldus-core now that it is in the tree. Fixes #10246 Signed-off-by: Rosen Penev <rosenp@gmail.com>
| * | | | | | | domoticz: Fix compilation with newer PythonRosen Penev2019-11-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Backported upstream patch. Fixes #10543 Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | Merge pull request #10588 from gladiac1337/pcre-jit-coRosen Penev2019-11-25
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | pcre: Add JIT-support for select architectures
| * | | | | | | | pcre: Add JIT-support for select architecturesChristian Lachner2019-11-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - This commit adds a config-option for JIT in libpcre(1). According to research published on https://rust-leipzig.github.io/regex/2017/03/28/comparison-of-regex-engines/ this should give a 10x performance increase on JIT operations which can be desireable for high performance Apache mod_rewrite or haproxy reqrep operations. This option is available on all officially supported architecutres which are listed on https://pcre.org/original/doc/html/pcrejit.html#SEC3. Furthermore, it is enabled by default on the following architectures: arm, i686, x86_64. Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | | | | | | | Merge pull request #10626 from NeoRaider/move-luasrcdietRosen Penev2019-11-25
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | luasrcdiet: add package (moved from luci-base package)
| * | | | | | | | | luasrcdiet: add package (moved from luci-base package)Matthias Schiffer2019-11-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We use luasrcdiet in Gluon as well. Move it from the luci feed to packages. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* | | | | | | | | | Merge pull request #10630 from jefferyto/python-pyopenssl-19.1.0Rosen Penev2019-11-25
|\ \ \ \ \ \ \ \ \ \ | |_|_|_|/ / / / / / |/| | | | | | | | | python-pyopenssl: Update to 19.1.0
| * | | | | | | | | python-pyopenssl: Update to 19.1.0Jeffery To2019-11-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | | | | | | transmission: Disable webseedingRosen Penev2019-11-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It causes 100% CPU usage in certain situations. Just disable it. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | | | Merge pull request #10632 from wfleurant/ygg-bump-0-3-12Rosen Penev2019-11-24
|\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | yggdrasil: bump to 0.3.12
| * | | | | | | | | | yggdrasil: bump to 0.3.12William Fleurant2019-11-24
|/ / / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: William Fleurant <meshnet@protonmail.com>
* | | | | | | | | | Merge pull request #10628 from BKPepe/php7Michael Heimpold2019-11-24
|\ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / / |/| | | | | | | | | php7: Update to version 7.2.25
| * | | | | | | | | php7: Update to version 7.2.25Josef Schlehofer2019-11-24
|/ / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Fixes CVE-2019-11043 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | | | | | Merge pull request #10519 from BKPepe/gitHannu Nyman2019-11-24
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | git: Update to version 2.24.0
| * | | | | | | | | git: Update to version 2.24.0Josef Schlehofer2019-11-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Refresh patch Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | | | | | | Merge pull request #10627 from hnyman/collectd-fixHannu Nyman2019-11-23
|\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | collectd: enable cpufreq module for ipq40xx and brcm2708_bcm2709
| * | | | | | | | | | collectd: enable cpufreq module for ipq40xx and brcm2708_bcm2709Hannu Nyman2019-11-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As some ipq40xx CPUs support frequency scaling, enable building collectd-mod-cpufreq for ipq40xx (for private builds) and its package architecture brcm2708_bcm2709 (for buildbot) Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | | | | | | | | | Merge pull request #10518 from BKPepe/clamav_updateRosen Penev2019-11-23
|\ \ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / / / |/| | | | | | | | | | clamav: Update to version 0.101.4
| * | | | | | | | | | clamav: Shellcheck fixesRosen Penev2019-11-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix SC2129 Signed-off-by: Rosen Penev <rosenp@gmail.com>
| * | | | | | | | | | clamav: Update to version 0.101.4Josef Schlehofer2019-11-23
|/ / / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change deprecated options to a new one: DetectBrokenExecutables to AlertBrokenExecutables ArchiveBlockEncrypted to AlertEncrypted Fixes: CVE-2019-12900 and CVE-2019-12625 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | | | | | | Merge pull request #10625 from dibdot/adblockDirk Brenken2019-11-23
|\ \ \ \ \ \ \ \ \ \ | |_|/ / / / / / / / |/| | | | | | | | | adblock: update 3.8.12
| * | | | | | | | | adblock: update 3.8.12Dirk Brenken2019-11-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fix possible dns restart issue with DNS File Reset (race condition) Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | | | | | | Merge pull request #10621 from BKPepe/youtubeDaniel Engberg2019-11-22
|\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | youtube-dl: Update to version 2019.11.22
| * | | | | | | | | | youtube-dl: Update to version 2019.11.22Josef Schlehofer2019-11-22
| |/ / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | | | | | | Merge pull request #10622 from diizzyy/fix-circleciDaniel Engberg2019-11-22
|\ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / / |/| | | | | | | | | circleci: Revert switch to CDN due to breakage
| * | | | | | | | | circleci: Revert switch to CDN due to breakageDaniel Engberg2019-11-22
|/ / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit 27fdddf due to it causing random failures. Change agreed on here: https://github.com/openwrt/packages/pull/10560 Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* | | | | | | | | Merge pull request #10616 from Andy2244/samba4-22-11-2019Rosen Penev2019-11-22
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | samba4: add UCI option 'disable_async_io'
| * | | | | | | | | samba4: add UCI option 'disable_async_io'Andy Walsh2019-11-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add UCI option 'disable_async_io' * remove [homes] options Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
* | | | | | | | | | Merge pull request #10615 from Andy2244/cifsd-22-11-2019Rosen Penev2019-11-22
|\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | cifsd: update to git (2019-11-22)
| * | | | | | | | | | cifsd: update to git (2019-11-22)Andy Walsh2019-11-22
| |/ / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * cifsd: fix uninitialized fp could be freed * cifsd: fix potential uninitialized spnego_blob could be freed * cifsd: smbd: replace spinlock_irqsave with spinlock * cifsd: smbd: avoid the lack of client's send credits * cifsd-tools: add version generation script * cifsd-tools: do not abbrev git describe * cifsd-tools: use 'unknown' version string if git describe fails Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
* | | | | | | | | | Merge pull request #10614 from expiron/kcptun-updatesRosen Penev2019-11-22
|\ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / / |/| | | | | | | | | kcptun: bump to v20191112
| * | | | | | | | | kcptun: bump to v20191112Chao Liu2019-11-22
|/ / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Chao Liu <expiron18@gmail.com>
* | | | | | | | | Merge pull request #10547 from zhoreeq/yggdrasil_uciFlorian Eckert2019-11-21
|\ \ \ \ \ \ \ \ \ | |_|_|_|_|/ / / / |/| | | | | | | | yggdrasil: Change package configuration to UCI
| * | | | | | | | yggdrasil: Change package configuration to UCIGeorge Iv2019-11-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: George Iv <57254463+zhoreeq@users.noreply.github.com>
* | | | | | | | | Merge pull request #10605 from rs/nextdns-1.1.5Rosen Penev2019-11-21
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | nextdns: Update version 1.1.5 + add per host config option
| * | | | | | | | | nextdns: Update version 1.1.5 + add per host config optionOlivier Poitrey2019-11-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Update nextdns to version 1.1.5 which adds IPv6 dual stack support. * Add the ability to configure per host configuration id from uci. Signed-off-by: Olivier Poitrey <rs@nextdns.io>
* | | | | | | | | | Merge pull request #10608 from ja-pa/bind-9.14.8Rosen Penev2019-11-21
|\ \ \ \ \ \ \ \ \ \ | |_|_|_|_|_|_|_|_|/ |/| | | | | | | | | bind: update to version 9.14.8 (security fix)
| * | | | | | | | | bind: update to version 9.14.8 (security fix)Jan Pavlinec2019-11-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes CVE-2019-6477 Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | | | | | | | python3: bump PKG_RELEASEJosef Schlehofer2019-11-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes: 85eee2d7f85421fd9156fb988ac865679e4e7851 (python3: fix build when Blake2 not enabled in OpenSSL") Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | | | | | | Merge pull request #10604 from yorkie/fix/python3-buildRosen Penev2019-11-21
|\ \ \ \ \ \ \ \ \ \ | |_|/ / / / / / / / |/| | | | | | | | | python3: fix build when Blake2 not enabled in OpenSSL
| * | | | | | | | | python3: fix build when Blake2 not enabled in OpenSSLYorkie Liu2019-11-21
|/ / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Refs: - https://github.com/python/cpython/commit/7c20888e71304ecbf4bd3d595f364b7c691d30a0 - https://bugs.python.org/issue38684 Signed-off-by: Yorkie Liu <yorkiefixer@gmail.com>
* | | | | | | | | unbound: Update to version 1.9.5Josef Schlehofer2019-11-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes CVE-2019-18934 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | | | | | Merge pull request #10596 from neheb/fRosen Penev2019-11-20
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | fish: Convert to CMake
| * | | | | | | | | fish: Convert to CMakeRosen Penev2019-11-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | CMake is faster and allows to simplify the Makefile slightly. It also creates a slightly smaller package for some reason. Fixed license information. Ran postinst through shellcheck. It was using bashisms. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | | | Merge pull request #10595 from neheb/yam2Rosen Penev2019-11-20
|\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | libyaml-cpp: Update to 0.63
| * | | | | | | | | | libyaml-cpp: Update to 0.63Rosen Penev2019-11-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Several Makefile cleanups for consistency. Added ABI_VERSION. Signed-off-by: Rosen Penev <rosenp@gmail.com>
Powered by cgit, Themed by Ted Yin.