aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
| * | | | | | | | curl: update to 7.73.0Rosen Penev2020-11-24
| |/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove upstream patch. Refresh other one. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | Merge pull request #13966 from neheb/mes56Rosen Penev2020-11-25
|\ \ \ \ \ \ \ \ | |_|_|_|/ / / / |/| | | | | | | meson: update to 0.56.0
| * | | | | | | meson: update to 0.56.0Rosen Penev2020-11-24
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Move c/c++ options from properties to built-in options as there is now a deprecated warning. Remove cross libdir value. It's default since version 0.50. Remove ld option as it was removed in version 0.51. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | Merge pull request #14010 from neheb/usbRosen Penev2020-11-25
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | libusb-compat: move here and update to 0.1.7
| * | | | | | | libusb-compat: update to 0.1.7Rosen Penev2020-11-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upstream moved to GitHub. Adjust accordingly. Cleaned up Makefile for consistency between packages. Made InstallDev section more explicit. Used ABI_VERSION in install section. Signed-off-by: Rosen Penev <rosenp@gmail.com>
| * | | | | | | libusb-compat: import from baseRosen Penev2020-11-24
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | Merge pull request #13993 from neheb/lcapRosen Penev2020-11-25
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | libcap-ng: update to 0.8.1
| * | | | | | | libcap-ng: update to 0.8.1Rosen Penev2020-11-24
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | Merge pull request #14007 from neheb/pamRosen Penev2020-11-24
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | libpam: update to 1.5.0
| * | | | | | | libpam: update to 1.5.0Rosen Penev2020-11-24
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes CVE-2020-27780 Removed upstreamed patches. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | Merge pull request #14018 from neheb/fiooRosen Penev2020-11-24
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | fio: update to 3.24
| * | | | | | | fio: update to 3.24Rosen Penev2020-11-24
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | Merge pull request #14020 from neheb/hdpRosen Penev2020-11-24
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | hdparm: update to 9.60
| * | | | | | | hdparm: update to 9.60Rosen Penev2020-11-24
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Use PKG_INSTALL and PKG_BUILD_PARALLEL for consistency. Rebase patch. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | Merge pull request #14016 from neheb/nghRosen Penev2020-11-24
|\ \ \ \ \ \ \ | |/ / / / / / |/| | | | | | nghttp2: update to 1.42.0
| * | | | | | nghttp2: update to 1.42.0Rosen Penev2020-11-24
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Move maintainer line up for consistency between packages. Remove CMAKE_INSTALL as there is an explicit InstallDev section. Add PKG_BUILD_PARALLEL for faster compilation. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | Merge pull request #13996 from neheb/jpgRosen Penev2020-11-24
|\ \ \ \ \ \ | |_|_|/ / / |/| | | | | libjpeg-turbo: update to 2.0.6
| * | | | | libjpeg-turbo: update to 2.0.6Rosen Penev2020-11-24
| | |_|/ / | |/| | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | adguardhome: upstream upgrade to v0.104.1Dobroslaw Kijowski2020-11-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Full changelog available at: * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.104.0 * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.104.1 * Change path to packr resources as some of source files were moved. Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
* | | | | dfu-util: Update to version 0.10Bruno Randolf2020-11-24
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Bruno Randolf <br1@einfach.org>
* | | | | python-requests: bump to version 2.25.0Alexandru Ardelean2020-11-24
|/ / / / | | | | | | | | | | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | | | Merge pull request #13991 from neheb/libseRosen Penev2020-11-24
|\ \ \ \ | | | | | | | | | | libseccomp: update to 2.5.1
| * | | | libseccomp: update to 2.5.1Rosen Penev2020-11-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add license information. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | Merge pull request #13989 from neheb/ola3Rosen Penev2020-11-24
|\ \ \ \ \ | | | | | | | | | | | | ola: update to 0.10.8
| * | | | | ola: update to 0.10.8Rosen Penev2020-11-23
| |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Removed upstreamed patches. Refreshed other ones. Removed Makefile hacks. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | Merge pull request #13984 from rs/nextdns-1.9.4-masterRosen Penev2020-11-23
|\ \ \ \ \ | | | | | | | | | | | | nextdns: Update to version 1.9.4
| * | | | | nextdns: Update to version 1.9.4Olivier Poitrey2020-11-23
| |/ / / / | | | | | | | | | | | | | | | Signed-off-by: Olivier Poitrey <rs@nextdns.io>
* | | | | Merge pull request #13994 from neheb/greoRosen Penev2020-11-23
|\ \ \ \ \ | | | | | | | | | | | | grep: update to 3.6
| * | | | | grep: update to 3.6Rosen Penev2020-11-23
| |/ / / / | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | Merge pull request #13992 from neheb/lz45Rosen Penev2020-11-23
|\ \ \ \ \ | | | | | | | | | | | | lz4: update to 1.9.3
| * | | | | lz4: update to 1.9.3Rosen Penev2020-11-23
| |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove upstreamed patches. Switch PKG_NAME to lz4 to get rid of PKG_BUILD_DIR. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | Merge pull request #13988 from neheb/oatRosen Penev2020-11-23
|\ \ \ \ \ | | | | | | | | | | | | oath-toolkit: update to 2.6.4
| * | | | | oath-toolkit: update to 2.6.4Rosen Penev2020-11-23
| |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | remove upstreamed patch. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | Merge pull request #13986 from neheb/sysssRosen Penev2020-11-23
|\ \ \ \ \ | | | | | | | | | | | | sysstat: update to 12.4.1
| * | | | | sysstat: update to 12.4.1Rosen Penev2020-11-23
| |/ / / / | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | Merge pull request #13985 from neheb/xfs3Rosen Penev2020-11-23
|\ \ \ \ \ | |/ / / / |/| | | | xfsprogs: update to 5.9.0
| * | | | xfsprogs: update to 5.9.0Rosen Penev2020-11-23
|/ / / / | | | | | | | | | | | | | | | | | | | | Add license information. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | Merge pull request #13977 from ja-pa/ooniprobe-3.0.11Rosen Penev2020-11-23
|\ \ \ \ | | | | | | | | | | ooniprobe: udpate to version 3.0.11
| * | | | ooniprobe: udpate to version 3.0.11Jan Pavlinec2020-11-23
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | | Merge pull request #13982 from rs/nextdns-1.9.3-masterRosen Penev2020-11-23
|\ \ \ \ \ | | | | | | | | | | | | nextdns: Update to version 1.9.3
| * | | | | nextdns: Update to version 1.9.3Olivier Poitrey2020-11-23
|/ / / / / | | | | | | | | | | | | | | | Signed-off-by: Olivier Poitrey <rs@nextdns.io>
* | | | | Merge pull request #13976 from XiaoliChan/patch-1Rosen Penev2020-11-23
|\ \ \ \ \ | |/ / / / |/| | | | xtables-addons: update to 3.13
| * | | | xtables-addons: update to 3.13Xiaoli Chan2020-11-23
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Xiaoli Chan <2209553467@qq.com>
* | | | | Merge pull request #13643 from TDT-AG/pr/20201012-docker-ceFlorian Eckert2020-11-23
|\ \ \ \ \ | |/ / / / |/| | | | docker-ce: disable docker iptables changes
| * | | | docker-ce: update PKG_RELEASE versionFlorian Eckert2020-11-19
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | docker-ce: do not delete generated iptables by docker-ceFlorian Eckert2020-11-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Deleting rules that docker has created is error-prone, because with every update docker we have to check if anything has changed. Cleaning up the firewall rules is part of the docker and should and must be cleaned up and handeled by them when the service is terminated. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | docker-ce: add device option to expand interface blockingFlorian Eckert2020-11-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If docker-ce handles the firewall and fw3 is not envolved because the rules get not proceed, then not only docker0 should be handled but also other interfaces and therefore other docker networks. This commit extends the handling and introduces a new uci option `device` in the docker config firewall section. This can be used to specify which device is allowed to access the container. Up to now only docker0 is covert. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | docker-ce: remove not applicable uciupdateFlorian Eckert2020-11-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As the protocol is set to none, this makes no sense here, as it cannot be controlled and thus processed by the netifd. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | docker-ce: set proto for docker bridge device to noneFlorian Eckert2020-11-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Set proto from `static` to `none`. This makes it clear that this interface is not handled by the netifd. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | docker-ce: make docker-ce firewall handling configurableFlorian Eckert2020-11-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Openwrt has a own firewall service called fw3, that supports firewall zones. Docker can bypass the handling of the zone rules in openwrt via custom tables. These are "always" processed before the openwrt firewall. Which is prone to errors! Since not everyone is aware that the firewall of openwrt will not be passed. And this is a security problem because a mapped port is visible on all interfaces and so also on the WAN side. If the firewall handling in docker is switched off, then the port in fw3 must be explicitly released and it cannot happen that the port is accidentally exported to the outside world via the interfaces on the WAN zone. So all rules for the containers should and so must be made in fw3. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Powered by cgit, Themed by Ted Yin.