aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
...
| * | lighttpd: Makefile polishingJosef Schlehofer2019-09-01
| | | | | | | | | | | | | | | | | | | | | | | | - Correct SPDX License Identifier - Move MAINTAINER, SUBMENU to more appropriate place - Use HTTPS in URL Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
| * | lighttpd: Update to version 1.4.54Josef Schlehofer2019-09-01
| | | | | | | | | | | | | | | | | | Fixes CVE-2019-11072 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | fastd: fix init script for multiple VPN instancesMatthias Schiffer2019-09-04
| | | | | | | | | | | | Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* | | Merge pull request #9919 from ja-pa/samba4-security-fixJosef Schlehofer2019-09-04
|\ \ \ | | | | | | | | samba4: update to version 4.9.13 (security fix)
| * | | samba4: update to version 4.9.13 (security fix)Jan Pavlinec2019-09-04
| | | | | | | | | | | | | | | | | | | | | | | | Fixes CVE-2019-10197 Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
| * | | samba4: remove double quotes for reniceOever González2019-09-04
| | |/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The double quote thells the shell that the list returned from `pidof` is a single argument, therefore, `renice` will cry about a malformed input. With this commit, `renice` will be applied correctly to all the returned PIDs from `pidof`. The output of `renice` for the quoted list is as follows: `renice: invalid number '6592 6587 6586 6574'` `renice` does not show and does apply the nice value if the list is unquoted. Signed-off-by: Oever González <notengobattery@gmail.com> Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | Merge pull request #9845 from ja-pa/fix-aslr-pieRosen Penev2019-09-04
|\ \ \ | | | | | | | | Disable ASLR PIE in selected packages
| * | | usbip: disable ASLR PIEJan Pavlinec2019-09-04
| | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | softethervpn: Add missing OpenSSL headerRosen Penev2019-09-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes compilation without OpenSSL deprecated APIs as well as -Werror=implicit-function-declaration. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | Merge pull request #9902 from neheb/mosh5Rosen Penev2019-09-03
|\ \ \ \ | | | | | | | | | | mosh: add package
| * | | | mosh: add packageJakub Tymejczyk2019-09-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: Jakub Tymejczyk <jakub@tymejczyk.pl> Compile tested: ramips, Xiaomi Router 3G, fc54256 Run tested: ramips, Xiaomi Router 3G, 0f54d96 Description: Mosh is "Remote terminal application that allows roaming, supports intermittent connectivity, and provides intelligent local echo and line editing of user keystrokes". Project's site: https://mosh.org Makefile and patch taken from: https://github.com/mchwalisz/mosh-openwrt updated by me Signed-off-by: Jakub Tymejczyk <jakub@tymejczyk.pl> (Makefile cleanup and size optimizations) Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | Merge pull request #9903 from mwarning/zerotierRosen Penev2019-09-03
|\ \ \ \ \ | |_|_|/ / |/| | | | zerotier: update to 1.4.4
| * | | | zerotier: update to release 1.4.4Moritz Warning2019-09-03
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | Also allow path to local.conf to be set and enable linker optimisations to save a few bytes. Signed-off-by: Moritz Warning <moritzwarning@web.de>
* / / / apinger: Fix PKG_SOURCE_VERSIONRosen Penev2019-09-01
|/ / / | | | | | | | | | | | | | | | Too short Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | Merge pull request #9881 from aparcar/ipsec-toolsRosen Penev2019-09-01
|\ \ \ | |_|/ |/| | remove ipsec-tools and opennhrp
| * | ipsec-tools: removePaul Spooren2019-08-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As discussed on GitHub[0] the package should be removed. [0]: https://github.com/openwrt/packages/issues/7832 > The package is effectively orphaned upstream and has been for some time. Given the security-sensitive nature of the package, an active maintainer community is essential for safe usage. Racoon's lack of support for IKEv2, despite it being stable for a long time, and the availability of next-generation tunneling systems such as wireguard, also would seem to limit its future value. Setkey's functionality has been subsumed by 'ip xfrm'. > If you disagree that ipsec-tools should be removed from OpenWRT, please say so now. If there are still use cases for it that are not met by other IKE implmenentations that would be good to know. But more importantly, I think you'll need to convince us that ipsec-tools is actually safe to operate on today's Internet given its current state of development. Signed-off-by: Paul Spooren <mail@aparcar.org>
| * | opennhrp: removePaul Spooren2019-08-31
| | | | | | | | | | | | | | | | | | The package requires ipsec-tools which will be removed from packages.git Signed-off-by: Paul Spooren <mail@aparcar.org>
* | | Merge pull request #9877 from EricLuehrsen/unbound_193Dirk Brenken2019-09-01
|\ \ \ | | | | | | | | unbound: update to 1.9.3
| * | | unbound: update to 1.9.3Eric Luehrsen2019-08-31
| |/ / | | | | | | | | | Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
* / / net: remove ipsec-toolsNoah Meyerhans2019-08-31
|/ / | | | | | | | | | | | | As discussed in #7832, ipsec-tools is no longer suitable for inclusion in the distribution. Signed-off-by: Noah Meyerhans <frodo@morgul.net>
* | Merge pull request #9732 from dengqf6/ngxRosen Penev2019-08-30
|\ \ | | | | | | nginx: update to 1.16.1
| * | nginx: update to 1.16.1DENG Qingfang2019-08-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes: when using HTTP/2 a client might cause excessive memory consumption and CPU usage (CVE-2019-9511, CVE-2019-9513, CVE-2019-9516). Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
* | | Merge pull request #9853 from neheb/atfRosen Penev2019-08-30
|\ \ \ | | | | | | | | atftp: Update to 0.7.2
| * | | atftp: Update to 0.7.2Rosen Penev2019-08-27
| | |/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes issue where CFLAGS were not being passed. This was breaking ASLR builds. Added PKG_BUILD_PARALLEL for faster compilation. Added PKG_INSTALL. Changed install paths based on PKG_INSTALL paths. Added --disable-debug to make sure debug code is disabled. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | Merge pull request #9868 from gladiac1337/haproxy-2.0.5Rosen Penev2019-08-30
|\ \ \ | | | | | | | | haproxy: Update HAProxy to v2.0.5
| * | | haproxy: Update HAProxy to v2.0.5Christian Lachner2019-08-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | - Update haproxy download URL and hash - Add new patches Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | | Merge pull request #9871 from wvdakker/masterRosen Penev2019-08-30
|\ \ \ \ | | | | | | | | | | Shorewall: Bump to 5.2.3.4
| * | | | Shorewall6: Bump to version 5.2.3.4W. van den Akker2019-08-30
| | | | | | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
| * | | | Shorewall: Bump to version 5.2.3.4W. van den Akker2019-08-30
| | | | | | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
| * | | | Shorewall6-lite: Bump to version 5.2.3.4W. van den Akker2019-08-30
| | | | | | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
| * | | | Shorewall-lite: Bump to version 5.2.3.4W. van den Akker2019-08-30
| | | | | | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
| * | | | Shorewall-core: Bump to version 5.2.3.4W. van den Akker2019-08-30
| | | | | | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
* | | | | cgi-io: require whitelisting upload locationsJo-Philipp Wich2019-08-30
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Introduce further ACL checks to verify that the request-supplied upload location may be written to. This prevents overwriting things like /bin/busybox and allows to confine uploads to specific directories. To setup the required ACLs, the following ubus command may be used on the command line: ubus call session grant '{ "ubus_rpc_session": "d41d8cd98f00b204e9800998ecf8427e", "scope": "cgi-io", "objects": [ [ "/etc/certificates/*", "write" ], [ "/var/uploads/*", "write" ] ] }' Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* | | | Merge pull request #9863 from dibdot/adblockDirk Brenken2019-08-29
|\ \ \ \ | | | | | | | | | | adblock: update 3.8.4
| * | | | adblock: update 3.8.4Dirk Brenken2019-08-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fix the 'adb_sysver' output * pass the adblock version information to the helper scripts correctly Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | Merge pull request #9862 from dibdot/travelmateDirk Brenken2019-08-29
|\ \ \ \ \ | |_|/ / / |/| | | | travelmate: update 1.4.12
| * | | | travelmate: update 1.4.12Dirk Brenken2019-08-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * automatically add open uplinks to your wireless config, e.g. hotel captive portals (disabled by default) * shift net status check in a separate function * (s)hellcheck cosmetics Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | phantap: update to latest commitEtienne Champetier2019-08-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 758fba1 Fix EAP (802.1x) passthrough Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* | | | | Merge pull request #9843 from cshoredaniel/pr-fix-uwsgi-cgi-pythonRosen Penev2019-08-27
|\ \ \ \ \ | | | | | | | | | | | | uwsgi-cgi: use python3 hostpkg not system python3
| * | | | | uwsgi-cgi: use python3 hostpkg not system python3Daniel F. Dickinson2019-08-27
| | |_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | On a Debian system without python3-distutils install, uwsgi-cgi was failing to build because it couldn't import sysconfig from distutils. OpenWrt packages should be using the OpenWrt python not the system python. In addition we need to use python3 not python2, even when both are available. Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
* / | | | hcxtools: Updated to v5.2.0. Also modified default install dir to /usr/sbinAndreas Nilsen2019-08-26
|/ / / / | | | | | | | | | | | | Signed-off-by: Andreas Nilsen <adde88@gmail.com>
* | | | Merge pull request #9828 from dibdot/adblockDirk Brenken2019-08-26
|\ \ \ \ | | |/ / | |/| | adblock: update 3.8.3
| * | | adblock: update 3.8.3Dirk Brenken2019-08-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fix a dns restart issue if 'flush dns cache' is set * fix a suspend/resume issue, the status wasn't properly updated * fix a long standing query issue * rework return code handling, mostly for debugging * various cleanups & cosmetics Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | phantap: update to latest commitEtienne Champetier2019-08-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 2ccec01 Replace phantap (script) with phantap-learn (C) 7ed8acd Remove Makefile cc0911e phantap-learn: Output ERROR on stderr and DEBUG on stdout b50421e phantap-learn: add dhcp handling code 17da18b phantap-learn: modify dhcp-protocol.h af55a3d phantap-learn: import dhcp-protocol.h from dnsmasq 850af88 phantap-learn: add network info detection code 721423c phantap-learn: add handle_packet_ip() / handle_packet_arp() 2c0f1b0 phantap-learn: add set_bpf_filter() b914e3e phantap-learn: rework handle_neighboor() 8ffc56c phantap-learn: rework handle_packet() Signed-off-by: Diana Dragusin <diana.dragusin@nccgroup.com> Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* | | | softflowd: Update to 1.0.0Rosen Penev2019-08-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Development moved to GitHub. Update URLs. Cleaned up Makefile a bit for consistency between packages. Added patch that removes deprecated bzero. Ran init script through shellcheck. Fixed minor warnings. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | tor: update to version 0.4.1.5Jan Pavlinec2019-08-23
| | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | simple-adblock: move to POSIX compliance, better output on check, better bg ↵Stan Grishin2019-08-22
| | | | | | | | | | | | | | | | | | | | | | | | process data collection. Signed-off-by: Stan Grishin <stangri@melmac.net>
* | | | Merge pull request #9596 from dengqf6/bindRosen Penev2019-08-22
|\ \ \ \ | | | | | | | | | | bind: update to 9.14.4
| * | | | bind: update to 9.14.4DENG Qingfang2019-07-30
| | | | | | | | | | | | | | | | | | | | Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
* | | | | Merge pull request #9802 from stangri/master-simple-adblockRosen Penev2019-08-22
|\ \ \ \ \ | | | | | | | | | | | | simple-adblock: boot-up optimization
Powered by cgit, Themed by Ted Yin.