aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
...
* | | Merge pull request #22273 from ne20002/crowdsec-firewall-bouncerTianling Shen2023-10-06
|\ \ \ | | | | | | | | crowdsec-firewall-bouncer: new upstream release version 0.0.28
| * | | crowdsec-firewall-bouncer: new upstream release version 0.0.28S. Brusch2023-10-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: S. Brusch <ne20002@gmx.ch> Maintainer: Kerma Gérald <gandalf@gk2.net> Run tested: mediatek/filogic, BPI-R3, Openwrt 23.05.0-rc3 Description: Update crowdsec-firewall-bouncer to latest upstream release version 0.0.28
* | | | openssh: bump to 9.5p1John Audia2023-10-05
| |/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: https://www.openssh.com/txt/release-9.5 Build system: x86/64 Build-tested: x86/64/AMD Cezanne Run-tested: x86/64/AMD Cezanne Signed-off-by: John Audia <therealgraysky@proton.me>
* | | wget: Update to 1.21.4Tianling Shen2023-10-04
| | | | | | | | | | | | | | | | | | Removed upstreamed patches and unneeded autoreconf. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | banip: release 0.9.1-1Dirk Brenken2023-10-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | * drop packets silently on input and forwardwan chains or actively reject the traffic, set 'ban_blocktype' accordingly * optimized banIP boot/reload handling * removed pppoe quirk in device detection * small fixes and optimizations Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | Merge pull request #22280 from dynasticorpheus/irssi-1.4.5Alexandru Ardelean2023-10-03
|\ \ \ | | | | | | | | irssi: update to 1.4.5
| * | | irssi: update to 1.4.5Fabian Lipken2023-10-03
| |/ / | | | | | | | | | Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
* | | Merge pull request #22268 from stangri/master-adblock-fastAlexandru Ardelean2023-10-03
|\ \ \ | | | | | | | | adblock-fast: update to 1.0.0-5
| * | | adblock-fast: update to 1.0.0-5Stan Grishin2023-10-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * improve processing of dnsmasq config files * do not run sed/show error if allow_filter is empty Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | Merge pull request #22228 from Ansuel/atftpJosef Schlehofer2023-10-03
|\ \ \ \ | | | | | | | | | | atftp: bump to release 0.8.0 + PCRE2
| * | | | atftp: move to PCRE2Christian Marangi2023-09-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Move atftp to PCRE2 as PCRE is flagged as EOL and won't receive security updates anymore. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
| * | | | atftp: bump to release 0.8.0Christian Marangi2023-09-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bump to release 0.8.0. Autorecong is now needed to correctly compile the package. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | | | Merge pull request #22256 from Ansuel/aircrack-ng-pcre2Josef Schlehofer2023-10-03
|\ \ \ \ \ | |_|_|/ / |/| | | | aircrack-ng: bump to release 1.7 + PCRE2
| * | | | aircrack-ng: backport patch and move package to pcre2Christian Marangi2023-10-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Backport patch merged upstream for PCRE2 support and move package to pcre2. Also add an additional patch pending to fix linking both pcre and pcre2 if autotools detect both library. (aircrack-ng prefer pcre2 in presence of both) Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
| * | | | aircrack-ng: bump to release 1.7Christian Marangi2023-10-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bump aircrack-ng to release 1.7 Changelog from [1] Airdecap-ng: Endianness fixes Airdecap-ng: Output PCAP as little endian Airodump-ng: Fixed blank encryption field when APs have TKIP (and/or CCMP) with WPA2 Airodump-ng: Updated encryption filter (-t/--encrypt) for WPA3 and OWE Airodump-ng: Fixed out-of-order timestamp captures Airodump-ng: Ignore NULL PMKID Airodump-ng: Fixed dropping management frames with zeroed timestamp Airodump-ng: Fixed sorting where sometimes it started with a different field Airodump-ng: Allow setting colors only in AP selection mode Airodump-ng: Fix crash on 4K Linux console Airodump-ng: Fixed issue where existing clients not linked to an AP become hidden when hitting 'o' Airodump-ng: Allow use of WiFi 6E 6GHz frequencies Airodump-ng: Look for oui.txt in /usr/share/hwdata Airgraph-ng: Fixed graphviz package conflict Airgraph-ng: Fixed downloading OUI with python3 Airgraph-ng: Ensure support/ directory is created when installing Aircrack-ng: Fixed static compilation Aircrack-ng: Fix handshake replay counter logic Aircrack-ng: Handle timeout when parsing EAPOL Aircrack-ng: Fixed WEP display Aircrack-ng: Fixed spurious EXIT messages Aircrack-ng: Improved handshake selection by fixing EAPOL timing and clearing state Aircrack-ng: Ignore NULL PMKID Aircrack-ng: Added Apple M1 detection Aireplay-ng: In test mode, detect tampering of sequence number by firmware/driver Aireplay-ng: Fixed incorrectly rewritten loops affecting fragmentation attack, and in some cases, SKA fake auth Aireplay-ng: Fixed a bunch of instances where packets had their duration updated instead of the sequence number Airmon-ng: Fix avahi killing Airmon-ng: rewrite service stopping entirely Airmon-ng: Codestyle fixes and code cleanup Airmon-ng: Added a few Raspberry Pi hardware revisions Airmon-ng: Fixes for 8812au driver Airmon-ng: Fix iwlwifi firmware formatting Airmon-ng: Remove broken KVM detection Airmon-ng: Show regdomain in verbose mode Airmon-ng: Updated Raspberry Pi hardware revisions Airmon-ng: Document frequency usage Airmon-ng: Add a sleep to help predictable names due to udev sometimes renaming interface Airmon-ng: Added warning for broken radiotap headers in kernel 5.15 to 5.15.4 Airmon-ng: shellcheck fixes Airmon-ng: support systemctl as some systems don't support 'service' anymore Airmon-ng: Fixes for pciutils 3.8, backward compatible Airbase-ng: use enum for frame type/subtype Airbase-ng: remove a few IE in association responses Besside-ng: Support and detect all channels in 5GHz in Auto-Channel mode OSdep: Search additional IE for channel information OSdep: Android macro fixes Patches: Add missing patches that were on https://patches.aircrack-ng.org but not in repo Patches: Updated freeradius-wpe patch for v3.2.0 Patches: Updated hostapd-wpe patch for v2.10 Patches: Added docker containers to test WPE patches Autotools: make dist now creates VERSION file Autotools: Added maintainer mode Autotools: Initial support for Link Time Optimization (LTO) builds Integration tests: Added a new test, and improved some existing ones Airgraph-ng: switch airodump-join to Python 3 Manpages: Fixes (typos, tools name, etc.) and improvements README: Updated dependencies and their installation on various distros in README.md and INSTALLING README: Fixed typos and spelling in README.md and INSTALLING Packages: Packages on PackageCloud now support any distro using .deb and .rpm, however, it requires reinstalling repo (BREAKING CHANGE) General: Fix compilation with LibreSSL 3.5 General: Fix issues reported by Infer General: Updated buildbots General: Add Linux uclibc support General: Compilation fixes on macOS with the Apple M1 CPU General: Removed TravisCI and AppVeyor General: Use Github Actions for CI (Linux, Win, macOS, code style, and PVS-Studio) General: Added vscode devcontainer and documentation General: Fix warnings from PVS-Studio and build with pedantic (See PR2174) General: Shell script fixes thanks to shellcheck General: Fixes for GCC 10 and 11 General: Fixed cross-compilation General: Code refactoring, deduplication, cleanup, and misc code improvements General: Coverity Scan fixes, which includes memory leaks, race conditions, division by 0, and other issues General: PVS Studio improvements,fixes and updates General: Code formatting/style fixes General: Various fixes and improvements (code, CI, integration tests, coverity) General: Update bug reporting template and update the process [1] https://aircrack-ng.blogspot.com/2022/05/aircrack-ng-17.html Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | | | netavark: update to 1.8.0Oskari Rauta2023-10-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | changelog: - iptables: improve error when ip6?tables commands are missing - docs: Convert markdown with go-md2man instead of mandown - iptables: drop invalid packages - bump rust edition to 2021 - Add ACCEPT rules in firewall for bridge network with internal dns - Add vrf support for bridges Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | | aardvark-dns: update to 1.8.0Oskari Rauta2023-10-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | changes: - dependency updates Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | | netbird: update to 0.23.6Oskari Rauta2023-10-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | A lot of changes since previous packaged openwrt version of netbird, changes available at: https://github.com/netbirdio/netbird/releases Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | | irssi: update to 1.4.4Fabian Lipken2023-10-01
| |_|/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | update to 1.4.4 switch to meson remove obsolete patch Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
* | | | net-snmp: move to PCRE2 libraryChristian Marangi2023-09-30
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | Add upstream patch adding support for pcre2 and update dependency to require libpcre2 instead of libpcre. --with-pcre2-8 is now needed to exclude support for pcre and only require pcre2 as net-snmp still use and try to use pcre by default. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | Merge pull request #22241 from stangri/master-adblock-fastStan Grishin2023-09-29
|\ \ \ | | | | | | | | adblock-fast: better error reporting when nothing to do
| * | | adblock-fast: better error reporting when nothing to doStan Grishin2023-09-28
| | | | | | | | | | | | | | | | | | | | | | | | * also nicer file type output in high verbosity Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | kismet: drop the packageJosef Schlehofer2023-09-29
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This package is no longer maintained in OpenWrt even though it is maintained by upstream. The last update was done in August 2016 and because we have 2023, drop this package without replacement. If anyone from the community wants to step in and retake the maintainership together with the update, feel free to do it. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | openthread-br: fix actually buildingRosen Penev2023-09-28
| | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | mdnsresponder: move libdns_sd into own directoryRosen Penev2023-09-28
| | | | | | | | | | | | | | | | | | Prevents conflicts with avahi, which is better maintained. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | Merge pull request #22221 from stangri/master-adblock-fastStan Grishin2023-09-27
|\ \ \ | | | | | | | | adblock-fast: bugfix: better detect ABP lists
| * | | adblock-fast: bugfix: better detect ABP listsStan Grishin2023-09-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * bugfix: better detect ABP lists * update Makefile with BUSYBOX features dependencies * update the type of dnsmasq_instance setting * add error message when file type can't be detected * add reporting when file type can't be detected * bugfix: include URL on errors related to URL processing/parsing * rename resolver function to resolver_config to better reflect its use Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | stunnel: update version to 5.71Florian Eckert2023-09-27
| | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | bind: bump to 9.18.19Noah Meyerhans2023-09-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes CVEs: CVE-2023-3341 - Previously, sending a specially crafted message over the control channel could cause the packet-parsing code to run out of available stack memory, causing named to terminate unexpectedly. CVE-2023-4236 - A flaw in the networking code handling DNS-over-TLS queries could cause named to terminate unexpectedly due to an assertion failure under significant DNS-over-TLS query load. Signed-off-by: Noah Meyerhans <frodo@morgul.net>
* | | | tailscale: Update to 1.50.0Zephyr Lykos2023-09-27
| | | | | | | | | | | | | | | | Signed-off-by: Zephyr Lykos <git@mochaa.ws>
* | | | apache: move to PCRE2Christian Marangi2023-09-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Move apache to PCRE2 now that PCRE is flagged EOL and won't receive any security update. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | | apache: bump to release 2.4.57Christian Marangi2023-09-27
| | | | | | | | | | | | | | | | | | | | | | | | Bump apache to release 2.4.57 and refresh patch automatically. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | | linuxptp: Bump to version 4.1Wojciech Dubowik2023-09-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | From release notes: "This release is the first of our regular quarterly releases. It includes a new feature (multi-domain synchronization for phc2sys) and several minor bug fixes. Users are encouraged to upgrade." Signed-off-by: Wojciech Dubowik <Wojciech.Dubowik@westermo.com>
* | | | snort3: update to 3.1.71.0John Audia2023-09-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Build system: x86/64 Build-tested: x86/64/AMD Cezanne Run-tested: x86/64/AMD Cezanne ,,_ -*> Snort++ <*- o" )~ Version 3.1.71.0 '''' By Martin Roesch & The Snort Team http://snort.org/contact#team Copyright (C) 2014-2023 Cisco and/or its affiliates. All rights reserved. Copyright (C) 1998-2013 Sourcefire, Inc., et al. Using DAQ version 3.0.12 Using LuaJIT version 2.1.0-beta3 Using OpenSSL 3.0.11 19 Sep 2023 Using libpcap version 1.10.4 (with TPACKET_V3) Using PCRE version 8.45 2021-06-15 Using ZLIB version 1.2.13 Using Hyperscan version 5.4.2 2023-09-23 Signed-off-by: John Audia <therealgraysky@proton.me>
* | | | Merge pull request #22194 from neocturne/ovs-masterMatthias Schiffer2023-09-27
|\ \ \ \ | | | | | | | | | | openvswitch: disable groff manpage check
| * | | | openvswitch: disable groff manpage checkMatthias Schiffer2023-09-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The openvswitch build trips over a number of warnings during the manpage-check step if groff 1.23 is installed on the build host, resulting in a failed build. As this check is optional, and we don't even install the manpages, simply override the groff configure check to never detect groff. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* | | | | modemmanger: bump PKG_RELEASEFlorian Eckert2023-09-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The PKG_RELEASE was not incremented during the last merge, the commit shows that it is incremented by one, but this was already done during the last change. Very strange. Hence this commit which increments PKG_RELEASE by one. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | | Merge pull request #21993 from osedl/pr/20230901-modemmanager-hardcoded-protoFlorian Eckert2023-09-27
|\ \ \ \ \ | | | | | | | | | | | | modemmanager: Remove hardcoded proto check
| * | | | | modemmanager: Remove hardcoded proto checkOliver Sedlbauer2023-09-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Modified the code to correctly determine modem availability based on the sysfs path provided in the 'device' option, instead of relying on the 'proto' value. This ensures proper configuration for custom-made protos that do not match the "modemmanager" identifier. Signed-off-by: Oliver Sedlbauer <osedlbauer@tdt.de>
* | | | | | tunneldigger: set PKG_SOURCE_DATEMatthias Schiffer2023-09-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | opkg requires monotonically increasing version numbers to know which version of a package is newer. As git commit IDs do not satisfy this condition, PKG_SOURCE_DATE must be set to the date of the referenced commit, resulting in the complete version number '2021-03-08-4f72b305-1'. As the source date also becomes part of the paths inside the download archive, the source hash must be updated as well. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* | | | | | tunneldigger: add group option to UCI configMatthias Schiffer2023-09-27
| |_|/ / / |/| | | | | | | | | | | | | | | | | | | | | | | | The group can be used for policy routing and similar purposes. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* | | | | Merge pull request #22158 from TDT-AG/pr/20230920-mwan3Florian Eckert2023-09-26
|\ \ \ \ \ | | | | | | | | | | | | mwan3: update ubus and status view
| * | | | | mwan3: refactoring mwan3_report_iface_status outputFlorian Eckert2023-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The tracking and interface status was mixed up in the report. To fix this, the interface status and the tracking status are now used directly. The online, uptime and error information are appended to the status line if needed. If certain routing tables and routing rules are missing, the error number is also given. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | | mwan3: also show tracker state via ubusFlorian Eckert2023-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The tracker state is not shown via ubus. Only if the tracker was in active state, then the boolean running was set or not. By adding the tracking state to the ubus information we could also evaluate the state of the tracker. To remain compatible, the runnig flag of the tracker is not removed, which in fact displays the same information, but only if the tracker is in state 'active' or not. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | | mwan3: rename tracking state from 'not enabled' to 'disabled'Florian Eckert2023-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The expression 'disabled' is more meaningful than 'not enabled' and can therefore be better processed in the ubus output, since it is only one word. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | | mwan3: remove notracking in mwan3track ubus statusFlorian Eckert2023-09-20
| | |/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The function 'get_mwan3_status' is reading the internal state from the tracker via the status file. Do not use the state 'notracking' status anymore. If the mwan3track is not running always return 'unknown' and not 'notracking'. There is already an other function that evaluates the external state of the tracker. We have now the following states of the tracker: internal (mwan3track): - offline - online - diconnecting - connecting - disabled - unknown external (via pgrep and config): - paused - active - down - not enabled Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | | nginx-util: move to pcre2Christian Marangi2023-09-25
| |_|/ / |/| | | | | | | | | | | | | | | | | | | Convert to pcre2 library as pcre is EOL. No functional change intended. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | | treewide: add HAS_LUAJIT_ARCH dependency to luajit userChristian Marangi2023-09-25
| |_|/ |/| | | | | | | | | | | | | | | | | Add HAS_LUAJIT_ARCH dependency to any user of luajit to fix circular dependency limitation. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | samba4: update to 4.18.6Michal Hrusecky2023-09-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes various security issues. For detailed history see: * https://www.samba.org/samba/history/samba-4.18.6.html * https://www.samba.org/samba/history/samba-4.18.5.html * https://www.samba.org/samba/history/samba-4.18.4.html * https://www.samba.org/samba/history/samba-4.18.3.html * https://www.samba.org/samba/history/samba-4.18.2.html * https://www.samba.org/samba/history/samba-4.18.1.html Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
* | | transmission: fix depends on libmbedtlsLiangbin Lian2023-09-23
| | | | | | | | | | | | | | | | | | If a firmware build with curl without mbedtls, install transmission from openwrt official repo will fail to start Signed-off-by: Liangbin Lian <jjm2473@gmail.com>