aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
...
* | | | Merge pull request #16367 from pprindeville/strongswan-mod-socket-depPhilip Prindeville2022-08-15
|\ \ \ \ | | | | | | | | | | strongswan: Add dependency to virtual package strongswan-mod-socket
| * | | | strongswan: add strongswan-mod-socketStijn Tintel2022-02-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This a virtual package that is satisfied by either strongswan-mod-socket-default or strongswan-mod-socket-dynamic, and is required by the charon daemon. When neither of these packages is installed, charon will not function. Closes #16261, #16263 and #16367. Signed-off-by: Noel Kuntze <noel.kuntze@thermi.consulting> Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com> Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | | knot: update to 3.1.9Jan Hák2022-08-15
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jan Hák <jan.hak@nic.cz>
* | | | | rsync: bump to 3.2.5John Audia2022-08-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With the new OW release approaching, it might be better to get an officially tagged upstream release in as PR#19087 just contained a fix for CVE-2022-29154 which itself introduced a few bugs. Signed-off-by: John Audia <therealgraysky@proton.me>
* | | | | rclone: fix init script on CIDR format ipaddrLiangbin Lian2022-08-13
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
* | | | | rsync: fix CVE-2022-29154John Audia2022-08-13
| |_|/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The rsync package is vulnerable to CVE-2022-29154[1], which is not yet in a non-preview release. This commit applies the upstream commit to fix it and several subsequent commits needed to fix bugs the initial fix introduced[2]. 1. https://rsync.samba.org/ftp/rsync/NEWS#SECURITY_FIXES-3.2.5 2. https://bugs.archlinux.org/task/75558 Signed-off-by: John Audia <therealgraysky@proton.me>
* | | | Merge pull request #19085 from hardfalcon/unbound-1.16.2Josef Schlehofer2022-08-12
|\ \ \ \ | | | | | | | | | | unbound: update to 1.16.2, fix CVE-2022-30698, CVE-2022-30699
| * | | | unbound: update to 1.16.2, fix CVE-2022-30698, CVE-2022-30699Pascal Ernster2022-08-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: @EricLuehrsen Compile tested: x86/64 Run tested: x86/64 Description: Update to 1.16.2, fix CVE-2022-30698 and CVE-2022-30699. Signed-off-by: Pascal Ernster <git@hardfalcon.net>
* | | | | ksmbd-tools: add package with hotplug.d script for auto sharingRafał Miłecki2022-08-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | One of common use cases for SMB3 server in routers is sharing hotplugged drives. Users make many attempts setting that up which often are not optimal. This script handles it in the cleanest way by using: 1. hotplug.d mount subsystem 2. runtime config in the /var/run/config/ It provides a working basic solution that can be later adjusted by modifying provided hotplug script. A pretty much idential solution was part of the samba36 package. It was added in the OpenWrt commit ef1efa756e0d0 ("samba36: add package with hotplug.d script for auto sharing") as an answer for feature required by the Rosinson company. Cc: Jo-Philipp Wich <jo@mein.io> Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* | | | | ksmbd-tools: append config from /var/run/config/ for runtime sharesRafał Miłecki2022-08-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Dynamically created shares shouldn't be stored in the /etc/config/ because of: 1. Flash wearing 2. Risk of inconsistent state on reboots With this change all automation/hotplug.d scripts can store runtime in the /var/run/config/samba. It's useful e.g. for USB drives that user wants to be automatically shared. Also: automated scripts should never call "uci [foo] commit" as that could flush incomplete config. This problem also gets solved. Identical feature was added to samba36 in the OpenWrt commit 5a59e2c059866 ("samba36: append config from /var/run/config/ for runtime shares") but wasn't ported to ksmbd until now. Cc: Jo-Philipp Wich <jo@mein.io> Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* | | | | Merge pull request #19146 from pprindeville/strongswan-include-mgf1Philip Prindeville2022-08-10
|\ \ \ \ \ | | | | | | | | | | | | strongswan: bundle mgf1 with everything
| * | | | | strongswan: bundle mgf1 with everythingPhilip Prindeville2022-08-10
| | |_|_|/ | |/| | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | | shadowsocks-libev: ss-rules: nft rule cleanup on reloadYousong Zhou2022-08-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove nft rules file generated by ss-rules if ss-rules was or should be turned off for by configuration. Use "fw4 restart" instead of "fw4 reload" to force the runtime rule reloading Ref: https://github.com/openwrt/packages/pull/17937#issuecomment-1207357037 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | shadowsocks-libev: ss-rules: setup policy rules for udp/ip6Yousong Zhou2022-08-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Supersedes: https://github.com/openwrt/packages/pull/18852 Fixes: https://github.com/openwrt/packages/issues/18850 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | Merge pull request #19145 from Thermi/strongswan-5.9.7-model-kdf-dependenciesPhilip Prindeville2022-08-10
|\ \ \ \ \ | | | | | | | | | | | | strongswan: try to model kdf optional dependencies
| * | | | | strongswan: try to model kdf optional dependenciesNoel Kuntze2022-08-11
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Noel Kuntze <noel.kuntze@thermi.consulting>
* | | | | | cgi-io: update to latest Git HEADJo-Philipp Wich2022-08-10
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | 901b0f0 main: fix two one-byte overreads in header_value() Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* | | | | Merge pull request #19128 from pprindeville/strongswan-update-5.9.7Philip Prindeville2022-08-10
|\ \ \ \ \ | |/ / / / |/| | | | strongswan: Update to 5.9.7
| * | | | strongswan: Update to 5.9.7Philip Prindeville2022-08-08
| |/ / / | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | openconnect: Allow reconnect timeout to be specifiedMichael Brown2022-08-07
| | | | | | | | | | | | | | | | Signed-off-by: Michael Brown <mbrown@fensystems.co.uk>
* | | | openconnect: Support use of a proxy serverMichael Brown2022-08-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Allow connection via a proxy server (required on some sites where direct outbound HTTP(S) access is not permitted). Signed-off-by: Michael Brown <mbrown@fensystems.co.uk>
* | | | kea: bump to 2.0.3Stijn Tintel2022-08-04
| | | | | | | | | | | | | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | Merge pull request #18781 from paper42/fail2ban-py310Josef Schlehofer2022-08-04
|\ \ \ \ | | | | | | | | | | fail2ban: fix patch for python 3.10
| * | | | fail2ban: fix patch for python 3.10Michal Vasilek2022-06-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 89d5d2e091c8da10a1c963158a6de92b05079116 only patched importing MutableMapping from collections, but importing Mapping has to be patched too Closes: #18681 Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
* | | | | Merge pull request #19021 from borkra/fix_dependenciesEneas U de Queiroz2022-08-03
|\ \ \ \ \ | |_|/ / / |/| | | | Avoid building unused package dependencies
| * | | | gensio: Avoid building unused python and libstdcpp dependeciesBoris Krasnovskiy2022-07-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Avoid building unused python and libstdcpp dependecies Signed-off-by: Boris Krasnovskiy <borkra@gmail.com>
| * | | | chrony: Avoid building unused gnutls and ca dependenciesBoris Krasnovskiy2022-07-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Avoid building unused gnutls and ca dependencies Signed-off-by: Boris Krasnovskiy <borkra@gmail.com>
* | | | | Merge pull request #19073 from jempatel/apinger-rrd-graphFlorian Eckert2022-07-29
|\ \ \ \ \ | | | | | | | | | | | | apinger: add rrd graph support
| * | | | | apinger: add rrd graph supportJaymin Patel2022-07-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - add package apinger-rrd for RRD graphs - add RPC to get an overview and update graphs - fix interface hotplug to restart apinger instance - add patch to split alarms list in the status Signed-off-by: Jaymin Patel <jem.patel@gmail.com>
* | | | | | stunnel: update version to 5.65Florian Eckert2022-07-28
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | | | frr: update to 8.3.0Lucian Cristian2022-07-28
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | rclone: update to 1.59.0ZiMing Mo2022-07-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release note: https://rclone.org/changelog/#v1-59-0-2022-07-09 Signed-off-by: ZiMing Mo <msylgj@immortalwrt.org>
* | | | | | Merge pull request #18930 from pprindeville/isc-dhcp-drop-allow-updatePhilip Prindeville2022-07-27
|\ \ \ \ \ \ | | | | | | | | | | | | | | isc-dhcp: don't use allow-update in bind config
| * | | | | | isc-dhcp: don't use allow-update in bind configPhilip Prindeville2022-07-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | | | | Merge pull request #18914 from stangri/master-nebulaStan Grishin2022-07-26
|\ \ \ \ \ \ \ | |_|/ / / / / |/| | | | | | nebula: update to 1.6.0
| * | | | | | nebula: update to 1.6.0Stan Grishin2022-07-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Update to https://github.com/slackhq/nebula/releases/tag/v1.6.0 * Update maintainer's email address * Update for newest shellcheck Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | | | xfrpc: Update to 1.07.582Dengfeng Liu2022-07-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
* | | | | | | modemmanager: fix mm_log() invocations in 25-modemmanager* filesArkadiusz Drabczyk2022-07-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Definition of mm_log() was changed in 45a56a889943b437f78fa2bfca3d5d8ac555c77e but 25-modemmanager* weren't changed. Signed-off-by: Arkadiusz Drabczyk <arkadiusz@drabczyk.org>
* | | | | | | dawn: update to 2022-07-24Nick Hainke2022-07-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | edca4d2 network: rework network status callbacks Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | | | | curl: switch default SSL to mbedTLSRosen Penev2022-07-23
| |_|_|_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The decision to switch the default to wolfSSL was taken because of hostapd back from when curl was in base. Unfortunately, not only is wolfSSL bigger but it has also been causing issues recently. There's also no relation between hostapd and curl. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | dawn: update to 2022-07-22Nick Hainke2022-07-22
| |_|/ / / |/| | | | | | | | | | | | | | | | | | | | | | | | 10fb043 network: dump detail on ping pong received Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | | dawn: update to 2022-07-21Nick Hainke2022-07-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | bb362db datastorage: fix ap_array_unlink_entry always returns NULL 47e98ef network: ping pong keepalive for tcp connections eba0354 network: add timeout for client connections In the dawn config the con_timeout needs to be added: option con_timeout '60' Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | | usteer: update to latest HEADDavid Bauer2022-07-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 9059b9a ubus: derive RSSI from measurement report Signed-off-by: David Bauer <mail@david-bauer.net>
* | | | | geth: update to 1.10.20Rosen Penev2022-07-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix compilation with latest iconv changes. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | wifidog: fix compilation with more recent wolfsslRosen Penev2022-07-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Needs an extra header. pthread.h is also no longer implicitly included. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | curl: fix compilation with wolfSSLRosen Penev2022-07-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | options.h header is needed now. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | unbound: update to 1.16.1Pascal Ernster2022-07-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: @EricLuehrsen Compile tested: realtek/rtl838x, x86/64 Run tested: realtek/rtl838x, x86/64 Description: Update to 1.16.1 Signed-off-by: Pascal Ernster <git@hardfalcon.net>
* | | | | dawn: update to 2022-07-18Nick Hainke2022-07-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | e596ff1 ubus.c: only add nr entries matching our own SSID Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | | xray-core: Update to 1.5.9Tianling Shen2022-07-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updated geodata to latest version while at it. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | Merge pull request #18854 from Torxgewinde/restic_rest_server_updateJeffery To2022-07-18
|\ \ \ \ \ | | | | | | | | | | | | restic-rest-server: update to 0.11.0