aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* Merge pull request #14665 from peter-stadler/uacmeRosen Penev2021-02-08
|\ | | | | uacme: adopt to new behavior of nginx
| * uacme: adopt to new behavior of nginxPeter Stadler2021-02-08
| | | | | | | | Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* | Merge pull request #14695 from lucize/frrupRosen Penev2021-02-08
|\ \ | | | | | | frr: fix init and update
| * | frr: fix init and updateLucian Cristian2021-02-09
| | | | | | | | | | | | | | | | | | fix ospfd startup when instances are enabled Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | python-ubus: add packageErik Larsson2021-02-09
| | | | | | | | | | | | | | | | | | Python bindings for ubus. Signed-off-by: Erik Larsson <who+github@cnackers.org>
* | | Merge pull request #14572 from dhewg/dslHauke Mehrtens2021-02-08
|\ \ \ | | | | | | | | prometheus-node-exporter-lua: use the new ubus dsl metrics
| * | | prometheus-node-exporter-lua: use the new ubus dsl metricsAndre Heider2021-02-04
| | | | | | | | | | | | | | | | | | | | | | | | This is significantly faster. Signed-off-by: Andre Heider <a.heider@gmail.com>
* | | | acme: adopt to new behavior of nginxPeter Stadler2021-02-08
| |/ / |/| | | | | | | | Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* | | Merge pull request #14688 from mhei/libxml2-iconv-supportMichael Heimpold2021-02-08
|\ \ \ | | | | | | | | libxml2: allow building with iconv support
| * | | libxml2: allow building with iconv support (fixes #14637)Michael Heimpold2021-02-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Instead of hard disabling iconv support, just rely on the global setting. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net> Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | mosquitto: bump 2.0.5 to 2.0.7Karl Palsson2021-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Includes: https://mosquitto.org/blog/2021/02/version-2-0-7-released/ and https://mosquitto.org/blog/2021/01/version-2-0-6-released/ Various fixes in broker and clients Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | wg-installer: add babeld hotplug.d scriptNick Hainke2021-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add a hotplug.d-extension that automatically configures babeld for meshing via wireguard interfaces. It checks for "add" and "remove" of a wireguard interface with name "wg_*". Depending on the action, it removes it from the babeld config or adds the interface and reloads babeld. Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | oci-runtime-tools: add packageDaniel Golle2021-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Package oci-runtime-tool itself as well as oci-runtime-tests containing runtime validation test executables as well as rootfs tarballs used by the tests. oci-runtime-tool can be used to generate OCI spec files or validate OCI bundles. To validate the OCI runtime (runc, crun, uxc, maybe others) itself, install the 'oci-runtime-tests' package as well as 'node-npm', use npm to install node-tap and symlink the tap executable to /usr/bin. Then cd /usr/libexec/oci-runtime-tests tap *.t Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | Merge pull request #14685 from jefferyto/golang-1.15.8Rosen Penev2021-02-07
|\ \ \ \ | | | | | | | | | | golang: Update to 1.15.8
| * | | | golang: Update to 1.15.8Jeffery To2021-02-08
| | |_|/ | |/| | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | Merge pull request #14687 from jefferyto/python-hyperlink-21.0.0Rosen Penev2021-02-07
|\ \ \ \ | | | | | | | | | | python-hyperlink: Update to 21.0.0, refresh patch
| * | | | python-hyperlink: Update to 21.0.0, refresh patchJeffery To2021-02-08
| |/ / / | | | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | Merge pull request #14683 from 1715173329/ttyd-fixRosen Penev2021-02-07
|\ \ \ \ | | | | | | | | | | ttyd: force enable authentication for login
| * | | | ttyd: force enable authentication for loginTianling Shen2021-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, we called `/usr/libexec/login.sh` as login command, but unfortunately the auth is disabled by default in it[1], and this is really serious as it could be a free "backdoor" for any spoiler who has conntectd to the router via LAN or wireless. In my option, it shouldn't be exposed to anyone without auth, so I set the default login command to `/bin/login`. And for those who really want that, they can do it themselves. 1. `login.sh` adjusts whether use authentication or not from system config named ttylogin, which is set to disabled by default. See package/base-files/files/bin/config_generate#L243. Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>
* | | | | Merge pull request #14680 from jonathanunderwood/getdns-no-static-linkingRosen Penev2021-02-07
|\ \ \ \ \ | |_|/ / / |/| | | | getdns: disable static linking of getdns utilities
| * | | | getdns: disable static linking of getdns utilitiesJonathan G. Underwood2021-02-07
| |/ / / | | | | | | | | | | | | | | | | | | | | This fixes issue #13361. Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
* | | | Merge pull request #14682 from dedeckeh/masterHans Dedecker2021-02-07
|\ \ \ \ | |/ / / |/| | | nghttp2: update to 1.43
| * | | nghttp2: update to 1.43Hans Dedecker2021-02-07
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 3dc6c0af Bump version number to 1.43.0 e8762781 Update AUTHORS 2bf841e2 workflow: Build with UBSAN enabled 7ebab98e Merge pull request #1548 from nghttp2/py3-bindings 23fc6cc9 Bump Linux runner OS to ubuntu 20.04 2e35cdea Update doc 22af8e78 Require python3 for python bindings c88e9100 Update ax_python_devel.m4 43ba3125 Merge pull request #1547 from nghttp2/sphinx-v3.3 3c17299a Update enum references a7ecff65 Make doc generation work with sphinx v3.3 79a4f789 Merge pull request #1546 from nghttp2/py3-scripts 28ba0b37 Update document reference 6b7ade9f Require python3 for python scripts 46536729 Bump clang-format to 10 563c1173 Merge pull request #1544 from nghttp2/nghttpx-clear-mcpool 1c04ca80 Merge pull request #1540 from tavrez/patch-1 d32e20bc nghttpx: Make sure that Pool gets cleared when all buffers are returned 8b8ba6b0 Merge pull request #1542 from nghttp2/nghttpx-check-sigalg 81fb0153 nghttpx: Choose ECDSA cert if compatible signature algorithm available d8c71d5f Added new nghttp2_ksl.c to Windows makefile fb5b5aef Merge pull request #1537 from nghttp2/nghttpx-allow-colon-in-pattern 6787423e nghttpx: Add workaround to include ':' in backend pattern ffcdf5df Merge pull request #1533 from LorenzNickel/patch-1 0cdb1738 Fix typo in security.rst c9d5472f Bump version number to 1.43.0-DEV 15bd71ed Update manual pages Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* | | haproxy: Update HAProxy to v2.2.9Christian Lachner2021-02-07
| | | | | | | | | | | | | | | | | | - Update haproxy download URL and hash Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | Merge pull request #14672 from mhei/php8-quilt-optimizeMichael Heimpold2021-02-07
|\ \ \ | | | | | | | | php8: Don't run phpize8 with QUILT
| * | | php8: Don't run phpize8 with QUILTMichael Heimpold2021-02-06
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | Allows targets such as prepare, refresh, or update to be run without building dependencies for easier patch maintenance. This is d741a64b7 applied to php8. Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com> Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | Merge pull request #14678 from dibdot/banipDirk Brenken2021-02-07
|\ \ \ | | | | | | | | banip: release 0.7.1
| * | | banip: release 0.7.1Dirk Brenken2021-02-07
| |/ / | | | | | | | | | | | | | | | | | | * add 'ban_extrasources' to handle banIP-unrelated sets for reporting and queries * add set timeouts for local sources (maclist, whitelist, blacklist) Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | Merge pull request #14562 from ja-pa/clamav-0.103.0Rosen Penev2021-02-06
|\ \ \ | | | | | | | | clamav: update to version 0.103.0
| * | | clamav: update to version 0.103.0Jan Pavlinec2021-01-25
| | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | Merge pull request #14663 from mwarning/ztRosen Penev2021-02-06
|\ \ \ \ | | | | | | | | | | zerotier: update to 1.6.3
| * | | | zerotier: update to 1.6.3Moritz Warning2021-02-06
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Moritz Warning <moritzwarning@web.de>
* | | | | Merge pull request #14673 from zhaojh329/rttyRosen Penev2021-02-06
|\ \ \ \ \ | | | | | | | | | | | | rtty: update to 7.3.2
| * | | | | rtty: update to 7.3.2Jianhui Zhao2021-02-06
| | |_|/ / | |/| | | | | | | | | | | | | Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
* / | | | wg-installer: add wg-installerNick Hainke2021-02-06
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This tool can be used to automatically create wireguard tunnels. Using rpcd a new wireguard interface is created on the server where the client can connect to. Wiregurad server automatically installs a user and associated ACL to use the wireguard-installer-server features. The user is called wginstaller and so is the password. Get Usage: wg-client-installer get_usage --ip 127.0.0.1 --user wginstaller --password wginstaller Register Interface: wg-client-installer register --ip 127.0.0.1 --user wginstaller --password wginstaller --bandwidth 10 --mtu 1400 Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | Merge pull request #14202 from miska/vpn_userRosen Penev2021-02-05
|\ \ \ \ | | | | | | | | | | openvpn: Support username and password options
| * | | | openvpn: Support username and password optionsMichal Hrusecky2020-12-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Some VPN providers require username and password for client to connect. This commit adds an option to specify username, password and cert_password directly in uci config which then gets expanded during start of openpvn client. Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
* | | | | Merge pull request #14657 from pprindeville/isc-dhcp-gen-A-RRsPhilip Prindeville2021-02-05
|\ \ \ \ \ | | | | | | | | | | | | isc-dhcp: treat 'config host' like superset of 'config domain'
| * | | | | isc-dhcp: treat 'config host' like superset of 'config domain'Philip Prindeville2021-02-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Not including an A record mapping will cause nsupdate to balk at CNAME and MX records (and probably SRV as well) because the target will be unknown at the time of parsing, until the lease gets activated. We need these RR's to be in place well before the servers even come up. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | | | Merge pull request #14659 from mhei/php8-updateMichael Heimpold2021-02-05
|\ \ \ \ \ \ | | | | | | | | | | | | | | php8: update to 8.0.2
| * | | | | | php8: update to 8.0.2Michael Heimpold2021-02-05
| |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes: - CVE-2021-21702 Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | | | Merge pull request #14658 from mhei/php8-fix-x86_64-buildMichael Heimpold2021-02-05
|\ \ \ \ \ \ | |_|_|/ / / |/| | | | | php8: fix cross-compiling for x86_64
| * | | | | php8: fix cross-compiling for x86_64Michael Heimpold2021-02-04
| |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The build process uses a minilua helper for code generation which must not be compiled with target cross-compiler but the host compiler. This error was spotted by buildbots: ext/opcache/minilua /builder/shared-workdir/build/sdk/build_dir/ target-x86_64_musl/php-8.0.1/ext/opcache/jit/dynasm/dynasm.lua -D X64=1 -o ext/opcache/jit/zend_jit_x86.c /builder/shared-workdir /build/sdk/build_dir/target-x86_64_musl/php-8.0.1/ext/opcache/jit/zend_jit_x86.dasc /bin/bash: ext/opcache/minilua: No such file or directory Makefile:406: recipe for target 'ext/opcache/jit/zend_jit_x86.c' failed make[4]: *** [ext/opcache/jit/zend_jit_x86.c] Error 127 Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | | Merge pull request #14636 from neheb/nRosen Penev2021-02-05
|\ \ \ \ \ | | | | | | | | | | | | netifyd: add reproducibility patch
| * | | | | netifyd: add reproducibility patchRosen Penev2021-02-02
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | Merge pull request #14653 from lucize/libreupRosen Penev2021-02-05
|\ \ \ \ \ \ | | | | | | | | | | | | | | libreswan: update to 4.2
| * | | | | | libreswan: update to 4.2Lucian Cristian2021-02-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | | Merge pull request #14654 from lucize/nssupRosen Penev2021-02-05
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | nss: update to 3.61
| * | | | | | | nss: update to 3.61Lucian Cristian2021-02-04
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | | Merge pull request #14643 from lipnitsk/php7Michael Heimpold2021-02-05
|\ \ \ \ \ \ \ | |_|_|/ / / / |/| | | | | | lang/php7: Don't run phpize7 with QUILT