aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
* net/dnscrypt-proxy: update to 1.9.5Damiano Renfer2017-05-14
| | | | | | | | * Update to 1.9.5 * Use PKG_HASH instead of PKG_MD5SUM * Add dnscrypt-proxy github link in PKG_SOURCE_URL Signed-off-by: Damiano Renfer <damiano.renfer@gmail.com>
* Merge pull request #4355 from sartura/sysrepo_mirror_hashLuka Perkov2017-05-14
|\ | | | | Sysrepo mirror hash
| * sysrepo: add PKG_MIRROR_HASHMislav Novakovic2017-05-12
| | | | | | | | Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
| * netopeer2: add PKG_MIRROR_HASHMislav Novakovic2017-05-12
| | | | | | | | Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
* | net/mwan3: update Makefile versionFlorian Eckert2017-05-12
| | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | net/mwan3: generate mwan3track run path folder on every runFlorian Eckert2017-05-12
| | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | net/mwan3: remove absolute path for bin filesFlorian Eckert2017-05-12
| | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | net/mwan3: remove pid file use pgrep to get pidFlorian Eckert2017-05-12
|/ | | | | | | | | | | | | | | If mwan3track will not stop immediately after sending the kill signal, the clean_up handler will delete the pid file later while the new mwan3track is already running. This could result in a situation that mwan3track is running more then once because the old mwan3track service could not be killed, because the pid file is missing. Using pgrep to kill all mwan3track for the tracked interface and not using pid file should fix this issue. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* add netopeer2Mislav Novakovic2017-05-11
| | | | Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
* add sysrepoMislav Novakovic2017-05-11
| | | | Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
* bind: Update to bind-9.10.5Noah Meyerhans2017-05-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This change includes fixes for several security issues: * CVE-2017-3138: rndc "" could trigger an assertion failure in named. * CVE-2017-3137: Some chaining (i.e., type CNAME or DNAME) responses to upstream queries could trigger assertion failures. * CVE-2017-3136: dns64 with break-dnssec yes; can result in an assertion failure. * CVE-2017-3135: If a server is configured with a response policy zone (RPZ) that rewrites an answer with local data, and is also configured for DNS64 address mapping, a NULL pointer can be read triggering a server crash. * CVE-2016-9444: named could mishandle authority sections with missing RRSIGs, triggering an assertion failure. * CVE-2016-9131: named mishandled some responses where covering RRSIG records were returned without the requested data, resulting in an assertion failure. * CVE-2016-9131: named incorrectly tried to cache TKEY records which could trigger an assertion failure when there was a class mismatch. * CVE-2016-8864: It was possible to trigger assertions when processing responses containing answers of type DNAME. * CVE-2016-6170: Added the ability to specify the maximum number of records permitted in a zone (max-records #;). This provides a mechanism to block overly large zone transfers, which is a potential risk with slave zones from other parties. * CVE-2016-2776: It was possible to trigger an assertion when rendering a message using a specially crafted request. * CVE-2016-2775: Calling getrrsetbyname() with a non absolute name could trigger an infinite recursion bug in lwresd or named with lwres configured if, when combined with a search list entry from resolv.conf, the resulting name is too long. Signed-off-by: Noah Meyerhans <frodo@morgul.net>
* Merge pull request #4346 from dibdot/travelmateHannu Nyman2017-05-10
|\ | | | | travelmate: update 0.7.3
| * travelmate: update 0.7.3Dirk Brenken2017-05-10
| | | | | | | | | | | | | | | | | | | | | | | | backend: * refine connection check (reduce ubus polling) * further stabilize sta-/ap-handling frontend (see LuCI repo): * Automatically refresh the overview page after button onclick event, e.g. 'Save & Apply' Signed-off-by: Dirk Brenken <dev@brenken.org>
* | Fix acme-challenge ./well-known check / webroot detection (#4339)Aleksei Nosachev2017-05-10
| | | | | | | | | | | | | | | | fixes webroot to be defined as _currentRoot='/www' instead of being interpreted as _currentRoot='"/www"' Signed-off-by: Aleksei Nosachev <nos1609@hotmail.com>
* | vsftpd: create directory for extra config filesHannu Nyman2017-05-09
|/ | | | | | | | | | | | * create /etc/vsftpd directory for extra config files like userlist, certificate and key * modify config file to use that directory * include that directory in conffiles for backup * use PKG_HASH * update URL Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* Merge pull request #4338 from dibdot/package-adblockHannu Nyman2017-05-08
|\ | | | | adblock: maintenance update 2.6.3
| * adblock: maintenance update 2.6.3Dirk Brenken2017-05-08
| | | | | | | | | | | | | | | | | | | | | | | | | | backend: * various small fixes & optimizations LuCI frontend (see luci repo): * Limit Blacklist/Whitelist Online editing to max. 512 KB, approx. 20.000 domains per list * Automatically refresh the overview page after button onclick event, e.g. 'Suspend/Resume' or 'Save & Apply' * cosmetics Signed-off-by: Dirk Brenken <dev@brenken.org>
* | Merge pull request #4324 from hnyman/irssiHannu Nyman2017-05-08
|\ \ | | | | | | irssi: remove nossl variant
| * | irssi: remove nossl variantHannu Nyman2017-05-04
| | | | | | | | | | | | | | | | | | | | | | | | Remove nossl variant as upstream has removed the option to build irssi without SSL: https://github.com/irssi/irssi/commit/6300dfec71d376c96351708f76a6c4ee4a187eb5 Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | Merge pull request #4337 from stangri/vpnbypassHannu Nyman2017-05-08
|\ \ \ | | | | | | | | vpnbypass: removed PROCD instance from start_service.
| * | | vpnbypass: removed PROCD instance from start_service.Stan Grishin2017-05-08
| | | | | | | | | | | | | | | | Signed-off-by: Stan Grishin <stangri@melmac.net>
* | | | Merge pull request #4336 from stangri/simple-adblockHannu Nyman2017-05-08
|\ \ \ \ | | | | | | | | | | simple-adblock: updated README, used stricter filters for domains and…
| * | | | simple-adblock: updated README, used stricter filters for domains and hosts ↵Stan Grishin2017-05-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | lists, added debugging logging, removed PROCD instance. Signed-off-by: Stan Grishin <stangri@melmac.net>
* | | | | ocserv: updated to 0.11.8Nikos Mavrogiannopoulos2017-05-08
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* | | | | Merge pull request #4332 from commodo/ovs-upgradeHannu Nyman2017-05-07
|\ \ \ \ \ | | | | | | | | | | | | openvswitch: upgrade to version 2.7.0
| * | | | | openvswitch: upgrade to version 2.7.0Alexandru Ardelean2017-05-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Notes: - drop un-needed patches - bump kernel support up to 4.9 - switch from git repo to release tarball - use OVS intree kernel module ; seems that using the kernel module from the package has certain issues due to the glue/backport code that tries to adapt to many kernel versions and has a potential to mess up ; not to mention, the glue code makes the kmod a few times larger than it should be - tested on x86_64 VM Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | | | | | Merge pull request #4329 from dibdot/package-travelmateHannu Nyman2017-05-07
|\ \ \ \ \ \ | | | | | | | | | | | | | | travelmate: update 0.7.2
| * | | | | | travelmate: update 0.7.2Dirk Brenken2017-05-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | backend: * remove redundant 'iwinfo' support & add 'iw' package dependency * refine stop action & json runtime housekeeping * various small fixes * documentation update frontend (see LuCI repo): * simplify uplink interface setup (just one Click! ;-), now part of the overview tab * cosmetics Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | | | Merge pull request #4327 from mwarning/zerotier-updateHannu Nyman2017-05-07
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | zerotier: update to version 1.2.4
| * | | | | | | zerotier: update to version 1.2.4Moritz Warning2017-05-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Zerotier now needs to have libstd, libminiupnpc and libnatpmp. Signed-off-by: Moritz Warning <moritzwarning@web.de>
* | | | | | | | net/mosquito: bump to 1.4.11Karl Palsson2017-05-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Full changelog available at: https://mosquitto.org/2017/02/version-1-4-11-released/ Mostly ipv6 and websockets fixes, but requires a patch (submitted upstream) to work around an accidental glibc dependency upstream. Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | | | | net/mosquitto: support more config fields in init scriptKarl Palsson2017-05-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adds the "notifications" option which is important when connecting mosquitto to rabbitmq for instance. Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | | | | net/mosquitto: Added further security configuration options for bridge sectionDavid Thornley2017-05-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: David Thornley <david.thornley@touchstargroup.com>
* | | | | | | | net/mosquitto: use PROVIDES for -client tools alsoKarl Palsson2017-05-05
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Earlier, PROVIDES handling was clarified for the broker and the library. Use the same style to properly provide the -client-ssl and -client-nossl packages. Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | / / radicale: update to version 1.1.2Christian Schoenebeck2017-05-04
| |_|_|_|/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | update to version 1.1.2 Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
* | | | | | vpnc: add PKG_MIRROR_HASHHannu Nyman2017-05-04
| |/ / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add PKG_MIRROR_HASH to enable building vpnc also in those buildbot buildslaves that do not have svn. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | | | fping: Update to 4.0Nikil Mehta2017-04-30
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Nikil Mehta <nikil.mehta@gmail.com>
* | | | | Merge pull request #4305 from billsq/openconnect_7.08Nikos Mavrogiannopoulos2017-04-29
|\ \ \ \ \ | | | | | | | | | | | | openconnect: Update to version 7.08
| * | | | | openconnect: Bump openconnect to 7.08Qian2017-04-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bump openconnect to 7.08. Remove patch as it is included in the upstream source. Signed-off-by: Qian Sheng billsq@billsq.me
* | | | | | Merge pull request #4308 from billsq/ocserv_udp_portNikos Mavrogiannopoulos2017-04-29
|\ \ \ \ \ \ | | | | | | | | | | | | | | ocserv: split UDP and TCP port configs
| * | | | | | ocserv: split UDP and TCP port configsQian2017-04-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Added a new config entry udp_port to split UDP port from TCP. This is useful when particular port is blocked by the ISP. udp_port falls back to port if not set to be compatible with current config file. Also fixed an ifname typo from the last commit. Signed-off-by: Qian Sheng <billsq@billsq.me>
* | | | | | | Merge pull request #4311 from dibdot/package-adblockHannu Nyman2017-04-29
|\ \ \ \ \ \ \ | | |_|_|_|_|/ | |/| | | | | adblock: update 2.6.2
| * | | | | | adblock: update 2.6.2Dirk Brenken2017-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refine 'force dns' handling: - enabled-check before firewall reload - add rule name (better LuCI experience) Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | | | Merge pull request #4306 from TDT-GmbH/mwan3-add-networkHannu Nyman2017-04-28
|\ \ \ \ \ \ \ | |_|/ / / / / |/| | | | | | Mwan3 add network
| * | | | | | net/mwan3: update Makefile versionFlorian Eckert2017-04-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | | | net/mwan3: add connected network regardless of mwan3 interface enable stateFlorian Eckert2017-04-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If netifd set an interface up/down which is not tracked by mwan3 the connected network of that interface should regardless be added/removed to the mwan3_connected ipset. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | | | | Merge pull request #4301 from billsq/ifname_addr_fixNikos Mavrogiannopoulos2017-04-27
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | ocserv: Correctly get runtime LAN ifname and addresses
| * | | | | | | Increase PKG_RELEASE version.Qian2017-04-26
| | | | | | | |
| * | | | | | | Correctly get runtime LAN ifname and addressesQian2017-04-25
| | |_|/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 1. Correctly get LAN runtime ifname and addresses using network functions 2. Do not store ip settings in config files as they may change next time.
* | | | | | | strongswan: bump to 5.5.2Stijn Tintel2017-04-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>