aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
...
| * | isc-dhcp: don't require subnet poolsPhilip Prindeville2023-06-19
| | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | knot: update to version 3.2.8Jan Hák2023-06-26
| | | | | | | | | | | | Signed-off-by: Jan Hák <jan.hak@nic.cz>
* | | bind: bump to 9.18.16Noah Meyerhans2023-06-25
| |/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes CVEs: - CVE-2023-2828: The overmem cleaning process has been improved, to prevent the cache from significantly exceeding the configured max-cache-size limit. - CVE-2023-2911: A query that prioritizes stale data over lookup triggers a fetch to refresh the stale data in cache. If the fetch is aborted for exceeding the recursion quota, it was possible for named to enter an infinite callback loop and crash due to stack overflow. The complete list of changes is available in the upstream release notes at https://ftp.isc.org/isc/bind9/cur/9.18/doc/arm/html/notes.html#notes-for-bind-9-18-16 Signed-off-by: Noah Meyerhans <frodo@morgul.net>
* | Merge pull request #21366 from zhanhb/haproxyJeffery To2023-06-24
|\ \ | | | | | | haproxy: update to v2.8.0
| * | haproxy: update to v2.8.0Huangbin Zhan2023-06-23
| | | | | | | | | | | | | | | | | | - New major LTS release (https://www.mail-archive.com/haproxy@formilux.org/msg43600.html) Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
* | | banip: update 0.8.8-2Dirk Brenken2023-06-24
|/ / | | | | | | | | | | | | | | * process local lists in strict sequential order to prevent possible race conditions * support ranges in the IP search, too * fix some minor search issues Signed-off-by: Dirk Brenken <dev@brenken.org>
* | vsftpd: fix compilation with musl 1.2.4Tianling Shen2023-06-23
| | | | | | | | | | | | | | | | | | musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so just having _GNU_SOURCE defined is not enough anymore. Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | dnsdist: Move the configuration to Config.inRemi Gacogne2023-06-22
| | | | | | | | Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
* | dnsdist: Split in two packages `dnsdist` and `dnsdist-full`Remi Gacogne2023-06-22
| | | | | | | | | | | | | | | | | | | | `dnsdist-full` has all optional features enabled, but is a big package in term of both flash and memory footprint. `dnsdist` only keeps the features that make the most sense on embeded devices, but can also be customised to match the user's needs, up to the point where it matches `dnsdist-full`. Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
* | linuxptp: Update to 4.0Wojciech Dubowik2023-06-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Major changes since version 3.1.1: * Officially supports the 2019 version of IEEE 1588 * Improved unicast messaging * Enhanced G.8275.2 profile * More flexible Pulse Per Second (PPS) handling * Virtual clock support * Power profile support * VLAN over bond support. * Parallel Redundancy Protocol (PRP) trailer handling. * Non-privileged read-only monitoring port. * New statistics reporting. [V2] * reset package release * adapt license name to the new format Signed-off-by: Wojciech Dubowik <Wojciech.Dubowik@westermo.com>
* | Merge pull request #21147 from cottsay/openelpJeffery To2023-06-22
|\ \ | | | | | | openelp: Add new package
| * | openelp: Add new packageScott K Logan2023-06-20
| | | | | | | | | | | | | | | | | | | | | | | | OpenELP is an open source EchoLink proxy for Linux and Windows. It aims to be efficient and maintain a small footprint, while still implementing all of the features present in the official EchoLink proxy. Signed-off-by: Scott K Logan <logans@cottsay.net>
* | | cloudflared: Update to 2023.6.1Tianling Shen2023-06-21
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | banip: release 0.8.8-1Dirk Brenken2023-06-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | * Support MAC-/IPv4/IPv6 ranges in CIDR notation * Support concatenation of local MAC addresses with IPv4/IPv6 addresses, e.g. to enforce dhcp assignments (see readme) * small fixes & cosmetics * update readme Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | Merge pull request #21378 from TDT-AG/pr/20230615-modemmanagerFlorian Eckert2023-06-21
|\ \ \ | | | | | | | | modemmanager: do not cache virtual device events
| * | | modemmanager: if an alias name is used do not check sysfs pathFlorian Eckert2023-06-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If an alias name is used for the modem, then a check if the device exists in sysfs does not work. To fix this remove the check if the sysfs device exists. The protocoll handler already checks if the modem is responsible for this device on the next line. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | modemmanager: do not cache virtual device eventsFlorian Eckert2023-06-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | On small systems with many virtual devices, the modem manager sometimes could not start because it took too long until all devices for the modem were recognised. This is because all system events that are stored in the file events.cache have to be processed. To speed up the processing, all devices under /sys/devices/virtual are now filtered out so that they do not have to be processed. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | Merge pull request #21411 from stangri/master-https-dns-proxyStan Grishin2023-06-20
|\ \ \ \ | |_|/ / |/| | | https-dns-proxy: update to 2023-05-25-2
| * | | https-dns-proxy: update to 2023-05-25-2Stan Grishin2023-06-20
| | |/ | |/| | | | | | | | | | | | | | | | bugfix: proper mdns object creation bugfix: prevent fw errors by allowing custom interfaces in config Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | v2ray-geodata: Update to latest versionTianling Shen2023-06-20
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | xray-core: update to 1.8.3Tianling Shen2023-06-20
|/ / | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | isc-dhcp: force sending unrequested parametersPhilip Prindeville2023-06-19
| | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | cloudflared: Update to 2023.6.0Tianling Shen2023-06-19
| | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | strongswan: make parsing more consistentPhilip Prindeville2023-06-15
| | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | krb5: update to 1.21W. Michael Petullo2023-06-15
|/ | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* cloudreve: Update to 3.8.0Tianling Shen2023-06-14
| | | | | | | - Fixed packing web frontend assets - Enabled build for riscv64 Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* nginx: create empty directory for module.d includeChristian Marangi2023-06-12
| | | | | | | | | Fix a bug on installation of nginx-mod-luci where module.d directory is not found and luci.module creation fails. Correctly create empty directory for module.d include for dynamic module loading by placing file in this directory. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* ddns: Prevent clearing of desec.io entriesBaptiste Fouques2023-06-12
| | | | | | | | | | | When using both ipv4 and ipv6 entries on the same host, ddns is clearing A (or AAAA) record depending on the connection (ipv4 or ipv6). see https://desec.readthedocs.io/en/latest/dyndns/update-api.html#determine-ip-addresses Signed-off-by: Baptiste Fouques <bateast@duck.com> Update comment and bump PKG_RELEASE number. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* tunneldigger: add package for establishing L2TPv3 tunnels over UDPNick Hainke2023-06-12
| | | | | | | | | | | | In the previous commit we already added tunneldigger-broker. Add the corresponding client. This PR is just a refactoring of the already existing opkg package from wlanslovenija [0]. [0] - https://github.com/wlanslovenija/firmware-packages-opkg/tree/master/net/tunneldigger Signed-off-by: Nick Hainke <vincent@systemli.org>
* tunneldigger-broker: add broker for tunneldiggerNick Hainke2023-06-12
| | | | | | | | | | | | | | | | | | In mesh communities, tunneldigger is widely used to create L2TPv3 tunnels and mesh via them. Since the broker is typically installed on other distributions, the openwrt broker package has not received any maintenance in recent years [0]. I take now care of the further maintaince of this package. Furthermore, I consulted with the maintainers to ensure that they were comfortable with the change [1]. This PR is just a refactoring of the already existing opkg package from wlanslovenija. It fixes config parsing and in general the config, adapts to the new python syntax and fixes dependency handling. - [0] https://github.com/wlanslovenija/firmware-packages-opkg/tree/master/net/tunneldigger-broker - [1] https://github.com/wlanslovenija/firmware-packages-opkg/issues/24 Signed-off-by: Nick Hainke <vincent@systemli.org>
* netavark: update to v1.6.0Oskari Rauta2023-06-12
| | | | | | | | | | | | | netavark v1.6.0 was released, so instead of using git version, use release. Does not contain very much of changes, but list is available from netavark's commit log. Software now comes with additional tool named netavark-dhcp-proxy-client which is now included in package. Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* xtables-addons: fix compilation error on kernel 6.1Christian Marangi2023-06-11
| | | | | | | | | | | | | | | | | | | | | | Fix compilation error on kernel 6.1. Fix compilation error: In file included from /mnt/Data/Sources/openwrt/x-wrt/build_dir/target-aarch64_cortex-a72_musl/linux-bcm27xx_bcm2711/xtables-addons-3.24/extensions/LUA/controller.h:24, from /mnt/Data/Sources/openwrt/x-wrt/build_dir/target-aarch64_cortex-a72_musl/linux-bcm27xx_bcm2711/xtables-addons-3.24/extensions/LUA/xt_LUA_target.c:27: /mnt/Data/Sources/openwrt/x-wrt/build_dir/target-aarch64_cortex-a72_musl/linux-bcm27xx_bcm2711/xtables-addons-3.24/extensions/LUA/lua/lua.h:12:10: fatal error: stddef.h: No such file or directory 12 | #include <stddef.h> | ^~~~~~~~~~ compilation terminated. The error is caused by commit 04e85bbf71c9 ("isystem: delete global -isystem compile option") present upstream from kernel 5.16. This commit dropped the inclusion of system headers by default and caused error on LUA module. Following what is done in the commit for the required code, modify the LUA Kbuild to include these header and restore correct compilation of the LUA module. Fixes: #21294 Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* aardvark-dns: update to v1.6.0Oskari Rauta2023-06-12
| | | | | | | | | | aardvark-dns v1.6.0 was released, so instead of using git version, use release - similarly like netavark. Very much hasn't changed but list of changes is in git commit log of aardvark-dns. Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* dnsproxy: Update to 0.50.2Tianling Shen2023-06-12
| | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* nginx: bump to new 1.25.0 releaseChristian Marangi2023-06-11
| | | | | | | | | | | Bump nginx to new 1.25.0 release. Changes: *) Feature: experimental HTTP/3 support. Every patch automatically refreshed. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* Merge pull request #21282 from stangri/master-curlStan Grishin2023-06-11
|\ | | | | curl: update to 8.1.2
| * curl: update to 8.1.2Stan Grishin2023-06-05
| | | | | | | | | | | | * https://curl.se/changes.html#8_1_2 Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | nginx: fix problem with migration of uci conf templateChristian Marangi2023-06-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix some problem with migration of uci conf template and include of module.d directive. Fix 2 case: - uci.conf.template not versioned but with the include module.d resulting in double include module.d - uci.conf.template version 1.1 with the include module.d at the end of the config. This is problematic for nginx as modules must be included before any http directive. Handle this 2 case to restore a working uci.conf.template configuration on migrated config. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | nginx-util: bump uci conf template versionChristian Marangi2023-06-11
| | | | | | | | | | | | | | Bump uci conf template version to 1.2 to sync with nginx version handling some migration problem. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | transmission: Fix env variables passingLeonid Bogdanov2023-06-11
| | | | | | | | | | | | | | It's not possible to configure custom Transmission web home as corresponding env var gets overwritten by the command that sets CA bundle env var. Signed-off-by: Leonid Bogdanov <leonidbogdanov86@gmail.com>
* | netbird: update to 0.21.1Oskari Rauta2023-06-11
| | | | | | | | | | | | Release notes: https://github.com/netbirdio/netbird/releases Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | acme-acmesh: Bump to version 3.0.6Toke Høiland-Jørgensen2023-06-09
| | | | | | | | | | | | Important security fix. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* | openvpn: fix ipchange hotplug eventIvan Pavlov2023-06-09
| | | | | | | | | | | | | | | | | | | | In f8a8b71e26b9bdbf86fbb7d4d1482637af7f3ba4 openvpn introduced new hotplug events. For server config, ipchange hotplug event produces an error. So, make ipchange hotplug event for client only Fixes https://github.com/openwrt/packages/issues/21200 Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
* | crowdsec: new upstream release version 1.5.2S. Brusch2023-06-08
| | | | | | | | | | | | | | | | | | | | | | Update crowdsec to latest upstream release version 1.5.2 Signed-off-by: S. Brusch <ne20002@gmx.ch> Maintainer: Kerma Gérald <gandalf@gk2.net> Run tested: ipq40xx/generic, Fritzbox 4040, Openwrt 22.03.5 Description: update to latest version of upstream
* | knot: update to version 3.2.7Jan Hák2023-06-07
| | | | | | | | Signed-off-by: Jan Hák <jan.hak@nic.cz>
* | pdns: update to 4.8.0Peter van Dijk2023-06-06
| | | | | | | | Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
* | adguardhome: bump to 0.107.29Dobroslaw Kijowski2023-06-06
|/ | | | | | | | | | * Full changelog available at: * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.26 * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.27 * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.28 * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.29 Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
* banip: release 0.8.7-1Dirk Brenken2023-06-05
| | | | | | | | | | | * Optionally auto-add entire subnets to the blocklist Sets based on an additional RDAP request with the monitored suspicious IP, set 'ban_autoblocksubnet' accordingly (disabled by default). For more information regarding RDAP see https://www.ripe.net/manage-ips-and-asns/db/registration-data-access-protocol-rdap for reference. * small fixes & cosmetics * update readme Signed-off-by: Dirk Brenken <dev@brenken.org>
* snort3: update to 3.1.63.0John Audia2023-06-05
| | | | | | | | | | Upstream bump Build system: x86_64 Build-tested: bcm2711/RPi4B Run-tested: bcm2711/RPi4B Signed-off-by: John Audia <therealgraysky@proton.me>
* speedtestcpp: add new packageOskari Rauta2023-06-04
| | | | | | | | | | | | | | | | | | speedtestcpp is a fork of Taganaka's speedtest, rewritten. It has some improvements such as - interactive result show - use server recommended profiles, which makes it faster (can be disabled) - and more.. It also provides it's functions in shared and static libraries and offers development headers for integrating speedtest to features to another projects. This commit replaces speedtestpp since this fork has all the same features + more. Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>