aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
...
* | adblock: 4.1.3-7Dirk Brenken2022-03-24
| | | | | | | | | | | | | | * removed discontinued source 'gaming' * changed url of source 'reg_kr' Signed-off-by: Dirk Brenken <dev@brenken.org>
* | xl2tpd: bump to version 1.3.17Yousong Zhou2022-03-24
| | | | | | | | | | | | The typo fix patch was merged upstream Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | ovn: bump to version 22.03.0Yousong Zhou2022-03-24
| | | | | | | | | | | | libovn now depends on libopenvswitch since ovn 21.09.0 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | openvswitch: bump to version 2.17.0Yousong Zhou2022-03-24
| | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | Merge pull request #18055 from pprindeville/bind-subpackage-ddns-confgenPhilip Prindeville2022-03-23
|\ \ | | | | | | bind: add subpackaging for ddns-confgen
| * | bind: add subpackaging for ddns-confgenPhilip Prindeville2022-03-13
| | | | | | | | | | | | | | | | | | | | | ddns-confgen is a useful tool for generating partial zones for transfer/update in dynamic DNS (ddns) scenarios. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | openvswitch: bump to 2.15.3Stijn Tintel2022-03-23
| | | | | | | | | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | openvswitch: enable AUTORELEASEStijn Tintel2022-03-23
| | | | | | | | | | | | | | | | | | | | | Enable AUTORELEASE in a separate commit so that the next commit can be reverted without having to manually re-introduce it. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | frr: update to 8.2.2 branchLucian Cristian2022-03-22
| | | | | | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | horst: fix compilation with ncurses 6.3Rosen Penev2022-03-21
| | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | cloudflared: Update to 2022.3.3Tianling Shen2022-03-20
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | xray-core: Update to 1.5.4Tianling Shen2022-03-20
| | | | | | | | | | | | | | | | | | Updated geodata to latest version while at it. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | gnunet-fuse: update to 0.16.0Daniel Golle2022-03-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | Only notable change since 0.14.0 is that pthread_mutexattr_setkind_np() is now no longer used. pthread_mutexattr_setkind_np() is deprecated and non-standard. The standard version is called pthread_mutexattr_settype() Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | gnunet: update to 0.16.2Daniel Golle2022-03-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a bugfix release for gnunet 0.16.1. Noteworthy changes in 0.16.2 (since 0.16.1) DHT: Fix path signature handling. GNS: Fix BOX handling in zone apex. NAMESTORE: Prevent storing under invalid labels. Buildsystem: Fix build on *BSD and Guix. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | rclone: Update to 1.58.0Tianling Shen2022-03-19
| | | | | | | | | | | | | | | | | | | | | | | | Added missing call for rclone-config. Refreshed patches. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | usteer: update to latest versionDavid Bauer2022-03-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | f4e120c band-steering: add band-steering component 439acc5 policy: add steer-reject-timeout 648c6f3 policy: make roam-steers client-rejectable 1fa3210 policy: update roam-state after hard-kicks c19c885 policy: move load-kick out of kick meta-function 96ef3a6 ubus: skip neighbors which exceed their assoc limit 86e7297 policy: export below_max_assoc 33a5acd policy: make policy helpers more generic 32fed79 add local_mode config option Signed-off-by: David Bauer <mail@david-bauer.net>
* | | Merge pull request #17903 from WereCatf/feature_gensioMichael Heimpold2022-03-18
|\ \ \ | | | | | | | | gensio: Add new package
| * | | gensio: Add new packageNita Vesa2022-03-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | A library to abstract stream I/O like serial port, TCP, telnet, UDP, SSL, IPMI SOL, etc. Signed-off-by: Nita Vesa <werecatf@outlook.com>
* | | | Merge pull request #18091 from c---/fixcurlwolfsslStan Grishin2022-03-18
|\ \ \ \ | | | | | | | | | | curl: Fix compiling curl wolfSSL when IPv6 is disabled
| * | | | curl: Fix compiling curl wolfSSL IPv6 disabledChris Osgood2022-03-18
| | |_|/ | |/| | | | | | | | | | | | | | | | | | Fixes #18082 Signed-off-by: Chris Osgood <chris_github@functionalfuture.com>
* / | | bind: bump to 9.18.1Noah Meyerhans2022-03-18
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes multiple security issues: * CVE-2022-0667 -- An assertion could occur in resume_dslookup() if the fetch had been shut down earlier * CVE-2022-0635 -- Lookups involving a DNAME could trigger an INSIST when "synth-from-dnssec" was enabled * CVE-2022-0396 -- A synchronous call to closehandle_cb() caused isc__nm_process_sock_buffer() to be called recursively, which in turn left TCP connections hanging in the CLOSE_WAIT state blocking indefinitely when out-of-order processing was disabled. * CVE-2021-25220 -- The rules for acceptance of records into the cache have been tightened to prevent the possibility of poisoning if forwarders send records outside the configured bailiwick Signed-off-by: Noah Meyerhans <frodo@morgul.net>
* | | cloudflared: Update to 2022.3.2Tianling Shen2022-03-17
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | bind: fix warnings about unknown optionsPhilip Prindeville2022-03-17
| | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | Merge pull request #17940 from TDT-AG/pr/20220225-mwan3Florian Eckert2022-03-17
|\ \ \ | | | | | | | | mwan3: update to version 2.11.0
| * | | mwan3: update version to 2.11.0Florian Eckert2022-03-14
| | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | mwan3: dump iptables and ipset command for debuggingFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | mwan3: unify error messagesFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | mwan3: add sleep to release ipset referenceFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It turns out that under high system load, ipsets cannot be deleted. This is because there is still a reference in iptables. A short sleep should give the system time to clean this up. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | mwan3: remove not needed ipset del cmdFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | mwan3: Split ipsets into separate ipv4 and ipv6 setsFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Nft does not directly support ipsets, nft sets must be used instead. The mwan3 uses ipsets for certain tasks. They can be combinded. So called an ipset of ipsets. This list type is not available in nft. So that mwan3 could be ported to nft in the feature, the ipset handling should be split. So we have for each ipset an iptables rule. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | mwan3: use mwan3_push_update function for mwan3_delete_iface_iptablesFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | mwan3: remove ipset generation from mwan3_set_general_iptablesFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | mwan3: use sticky ipset generation mwan3_push_update patternFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | mwan3: do not create dynamic ipset for IPv6 if not supportedFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | mwan3: do not add mwan3_custom_v6 set if ipv6 is not availableFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | mwan3: use also ipset restore for connected ipv4 setsFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | mwan3: move command definitions to common.shFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | mwan3: update iptables dependenciesFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | openssh: update to 8.9p1Michal Vasilek2022-03-16
| | | | | | | | | | | | | | | | Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
* | | | cloudflared: add new packageTianling Shen2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Contains the command-line client for Cloudflare Tunnel, a tunneling daemon that proxies traffic from the Cloudflare network to your origins. Docs: https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/install-and-setup/tunnel-guide Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | haproxy: Update HAProxy to v2.4.15Christian Lachner2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | - Update haproxy download URL and hash Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | | mtr: bump version to 0.95, split package for JSON and non-JSON variantsMarc Egerton2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As per the discussion in PR #18047, split the MTR package into two, one with jansson enabled for JSON output, and one without. This commit also bumps the version to 0.95. Since the MTR project website does not seem to be updated with builds any longer, switch to GitHub Codeload instead. Also enable PKG_FIXUP:=autoreconf so that MTRs bootstrap.sh process is executed properly. Signed-off-by: Marc Egerton <marc@malloc.me>
* | | | zerotier: update to 1.8.6Moritz Warning2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * remove upstreamed gcc10 and cerrno patches * disable SSO and OIDC as it needs Rust/Cargo support Signed-off-by: Moritz Warning <moritzwarning@web.de>
* | | | chrony: enable LTOStijn Tintel2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Size difference of the ipk on qoriq: * chrony: 718571 676886 * chrony-nts: 786960 757064 Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | chrony: enable AUTORELEASEStijn Tintel2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Enable AUTORELEASE in a separate commit so that the next commit can be reverted without having to manually re-introduce it. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | isc-dhcp: Update to 4.4.3Philip Prindeville2022-03-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Note that on 32-bit ARM with MUSL we don't have Unwind_GetIP() so we need to disable backtraces. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | named: don't leak mktemp files on reloadPhilip Prindeville2022-03-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Unless we're using "mktemp -u ..." (not recommended), it will create the temp file as part of its safety checking. Thus you should only create the name (file) if you're going to use it, and always remove it if you have created it. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | isc-dhcp: detect whether ddns transfers are IPv4 onlyPhilip Prindeville2022-03-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If named is configured to not listen on any IPv6 interfaces, then we should run 'nsupdate' with the '-4' argument. Also: * cleanup RFC-1918 address detection; * don't generate PTR records for domain entries that aren't RFC-1918 addresses or these will generate NOTAUTH failures; We're assuming that we're doing DNS split-horizon and that internal addresses aren't routable. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | isc-dhcp: don't leak mktemp filesPhilip Prindeville2022-03-15
| | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | gnunet: improve init scriptDaniel Golle2022-03-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Ensure correct ownership of /etc/gnunet. Quote variables and more or less make shellcheck happy. Signed-off-by: Daniel Golle <daniel@makrotopia.org>