aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
* tailscale: enable autodect of fw typeTyler Young2023-08-28
| | | | Signed-off-by: Tyler Young <git@yfh.addy.io>
* v2raya: Update to 2.2.1Tianling Shen2023-08-27
| | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* xray-core: backport pending patch for Go 1.21 updateTianling Shen2023-08-24
| | | | | | Fix build for Go 1.21. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* vnstat2: update to version 2.11Jan Hoffmann2023-08-24
| | | | | | | | | This release breaks the noexit patch, because the code for removing old now returns an error when no interfaces are configured. As it is run on startup, the daemon exits in this case. To avoid this, add an additional check so an error is only returned in an actual error case. Signed-off-by: Jan Hoffmann <jan@3e8.eu>
* tailscale: Update to 1.48.1Zephyr Lykos2023-08-24
| | | | Signed-off-by: Zephyr Lykos <git@mochaa.ws>
* net/mosquitto: bump to 2.0.17Karl Palsson2023-08-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a security and bug fix release. Security: - CVE-2023-28366: Fix memory leak in broker when clients send multiple QoS 2 messages with the same message ID, but then never respond to the PUBREC commands. - CVE-2023-0809: Fix excessive memory being allocated based on malicious initial packets that are not CONNECT packets. - CVE-2023-3592: Fix memory leak when clients send v5 CONNECT packets with a will message that contains invalid property types. - Broker will now reject Will messages that attempt to publish to $CONTROL/. - Broker now validates usernames provided in a TLS certificate or TLS-PSK identity are valid UTF-8. - Fix potential crash when loading invalid persistence file. - Library will no longer allow single level wildcard certificates, e.g. *.com Bugfixes of note or relevance to OpenWrt: - Fix bridges with non-matching cleansession/local_cleansession being expired on start after restoring from persistence. Closes #2634. Client library: - Use CLOCK_BOOTTIME when available, to keep track of time. This solves the problem of the client OS sleeping and the client hence not being able to calculate the actual time for keepalive purposes. Closes #2760. Full changelog available at: https://github.com/eclipse/mosquitto/blob/v2.0.16/ChangeLog.txt plus: https://github.com/eclipse/mosquitto/blob/v2.0.17/ChangeLog.txt (2.0.17 fixes regressions from the 2.0.16 release) Signed-off-by: Karl Palsson <karlp@tweak.au>
* v2ray-core: backport upstream Go 1.21 updatesTianling Shen2023-08-23
| | | | | | Fix build for Go 1.21. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* mdio-tools: update to 1.3.0Zhi-Jun You2023-08-23
| | | | | | | | | | | | | | | | Update the mdio-netlink kmod and userspace mdio-tools to version 1.3.0. [v1.3.0] - 2023-07-24 --------------------- Primarily widen the gamut of supported kernel versions, now supporting all kernels from 5.2 and onwards. - mvls: Support for 88E6320/88E6321 - mdio-netlink: Adapt to the upstream C22/C45 refactor. Signed-off-by: Zhi-Jun You <hujy652@protonmail.com>
* natmap: update to 20230820Ray Wang2023-08-23
| | | | Signed-off-by: Ray Wang <r@hev.cc>
* sqm-scripts: Bump to v1.6.0Toke Høiland-Jørgensen2023-08-22
| | | | | | Fixes an issue with DSA switch compatibility Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* Merge pull request #21874 from thess/unbound-SSL-workaroundTed Hess2023-08-21
|\ | | | | Unbound: Silence SSL unexpected eof messages
| * Unbound: Silence SSL unexpected eof messagesTed Hess2023-08-21
| | | | | | | | | | | | | | | | | | | | Refs: https://github.com/NLnetLabs/unbound/issues/812 https://github.com/NLnetLabs/unbound/issues/846 This is a backport of: https://github.com/NLnetLabs/unbound/commit/d7e7761 and can be removed with the next release/update of the Unbound package Signed-off-by: Ted Hess <thess@kitschensync.net>
* | adguardhome: update quic-go to v0.37.6Dobroslaw Kijowski2023-08-21
| | | | | | | | | | | | | | | | | | | | * quic-go v0.36.x cannot be compiled with Go 1.21. Update that AdGuardHome dependency to latest one from v0.37 series. * It fixes following compilation error: go-mod-cache/github.com/quic-go/quic-go@v0.36.2/internal/qtls/go121.go:5:13: cannot use "The version of quic-go you're using can't be built on Go 1.21 yet. For more details, please see https://github. com/quic-go/quic-go/wiki/quic-go-and-Go-versions." (untyped string constant "The version of quic-go you're using can't be built on Go 1.21 yet. Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
* | adguardhome: update to v0.107.36Hannu Nyman2023-08-21
| | | | | | | | | | | | | | | | | | | | | | | | * Full changelog available at: * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.34 * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.35 * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.36 Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi> [ Reword commit message ] Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
* | tailscale: Update to 1.48.0Zephyr Lykos2023-08-21
|/ | | | | | | | | | Everything is working on pure upstream code. Patching is not longer needed. Added entire /etc/tailscale/ directory to conffiles for persistent ssh host key & https certificate across sysupgrades. Signed-off-by: Zephyr Lykos <git@mochaa.ws>
* tunneldigger-broker: update to v0.4.0Perry Melange2023-08-20
| | | | | | Include new hook script to build Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>
* tunneldigger-broker: add rate-limit hookPerry Melange2023-08-20
| | | | Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>
* tunneldigger-broker: add option to isolate bridge portsPerry Melange2023-08-20
| | | | | | | | | | | | | | | Add new option to a config bridge section to indicate if a bridge port added to the bridge should be isolated or not. The default is 0 (no isolation). example config bridge option interface 'br-mybridge1446' option mtu '1446' option isolate '1' # default '0' Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>
* tunneldigger-broker: update lib functionsPerry Melange2023-08-20
| | | | | | Use config_foreach instead of config_cb Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>
* tunneldigger-broker: update config file and init for v0.4.0Perry Melange2023-08-20
| | | | Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>
* sing-box: update to 1.4.0-beta.5Van Waholtz2023-08-18
| | | | | | Add support for GO 1.21. Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
* frr: updat to 9.0Lucian Cristian2023-08-17
| | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* frp: update to 0.51.3Van Waholtz2023-08-17
| | | | | | Includes some bug fixes and adds support for GO 1.21. Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
* Merge pull request #21828 from stangri/master-simple-adblockStan Grishin2023-08-16
|\ | | | | simple-adblock: bugfixes for uci_load_validate
| * simple-adblock: bugfixes for uci_load_validateStan Grishin2023-08-15
| | | | | | | | | | | | | | * fix validation for force_dns_port when missing in config * fix validation for dns_instance when * or - are used Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | Merge pull request #21766 from TDT-AG/pr/20230808-modemmanagerFlorian Eckert2023-08-16
|\ \ | | | | | | modemmanager: setting allowed and preferred mode
| * | modemmanager: add setting for allowed and preferred modeFlorian Eckert2023-08-09
| | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | modemmanager: remove unneeded teardown error reportingFlorian Eckert2023-08-09
| | | | | | | | | | | | | | | | | | | | | Teardown error reporting is not needed, bacause it overrides init error reporting. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | modemmanager: fix white spacesFlorian Eckert2023-08-09
| | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | dnslookup: Update to 1.9.2Tianling Shen2023-08-16
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | dnsproxy: Update to 0.54.0Tianling Shen2023-08-16
| |/ |/| | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | tgt: update to 1.0.87Maxim Storchak2023-08-15
| | | | | | | | Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
* | Merge pull request #21800 from yogo1212/wget_pcre2Hannu Nyman2023-08-14
|\ \ | | | | | | wget: use pcre2
| * | wget: use pcre2Leon M. Busch-George2023-08-14
| | | | | | | | | | | | | | | | | | | | | Pcre (1) is unmaintained and reached its end of life in 2021. The base system provides pcre2 exclusively since May. Signed-off-by: Leon M. Busch-George <leon@georgemail.eu>
* | | smartdns: bump to 1.2023.43Nick Peng2023-08-14
| | | | | | | | | | | | Signed-off-by: Nick Peng <pymumu@gmail.com>
* | | v2raya: Update to 2.1.3Tianling Shen2023-08-13
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | openssh: update to 9.4p1Sibren Vasse2023-08-13
|/ / | | | | | | Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>
* | haproxy: update to v2.8.2Christian Lachner2023-08-11
| | | | | | | | | | | | | | - Update haproxy PKG_VERSION and PKG_HASH - See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | Merge pull request #19218 from stintel/openthreadStijn Tintel2023-08-11
|\ \ | | | | | | openthread-br: new package
| * | openthread-br: new packageStijn Tintel2023-08-07
| | | | | | | | | | | | | | | | | | | | | Add a new package for the OpenThread Border Router. Comes with a netifd protocol handler. See README.md for more information. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | chrony: update to 4.4Miroslav Lichvar2023-08-10
| | | | | | | | | | | | Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
* | | xtables-addons: add packaging for xt_asn, et alPhilip Prindeville2023-08-08
| | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | xtables-addons: add MaxMind versions of xt_geoip_dl, etc.Philip Prindeville2023-08-08
| | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | simple-adblock: force_dns_port validation bugfixStan Grishin2023-08-08
| |/ |/| | | | | Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | openssh: add server config subdirectoryPhilip Prindeville2023-08-07
| | | | | | | | | | | | | | | | Most distros allow dropping site configuration files into /etc/sshd_config.d/ so that you don't have to tweak the main server configuration file. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | i2pd: update to version 2.48.0R4SAS I2P2023-08-06
| | | | | | | | Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
* | v2fly-geodata: Update to latest versionTianling Shen2023-08-06
| | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | v2raya: Update to 2.1.0Tianling Shen2023-08-06
| | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | cloudreve: Update to 3.8.1Tianling Shen2023-08-06
| | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | gnunet: update to version 0.19.4Daniel Golle2023-08-05
| | | | | | | | | | | | | | | | | | | | | | v0.19.4: - No changes v0.19.3: - We now detect MySQL's strange, version-dependent my_bool type on configure. - Add pkg-config definitions for gnunet messenger. Signed-off-by: Daniel Golle <daniel@makrotopia.org>