aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
...
* | | | Merge pull request #19501 from stangri/master-simple-adblockStan Grishin2022-10-03
|\ \ \ \ | | | | | | | | | | simple-adblock: allow domains bugfix & canary domains support
| * | | | simple-adblock: allow domains bugfix & canary domains supportStan Grishin2022-10-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fix bug in download_lists and adb_allow to prevent unintended exclisions from the block-lists of domains containing allowed domain. Fixes issue: https://github.com/stangri/source.openwrt.melmac.net/issues/160 * add support for returning NXDOMAIN/blocking iCloud & Mozilla canary domains, disabled by default Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | samba4: update waf-cross-answersAndrew Sim2022-10-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * update waf-cross-answers for 4.14.x Signed-off-by: Andrew Sim <andrewsimz@gmail.com>
* | | | | samba4: update to 4.14.14Andrew Sim2022-10-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * update to 4.14.14 * fixes: CVE-2022-2031, CVE-2022-32744, CVE-2022-32745, CVE-2022-32746, CVE-2022-32742 Signed-off-by: Andrew Sim <andrewsimz@gmail.com>
* | | | | gg: Update to 0.2.13Tianling Shen2022-10-02
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | dnsproxy: Update to 0.45.2Tianling Shen2022-10-02
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | cloudflared: Update to 2022.9.1Tianling Shen2022-10-02
|/ / / / | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | https-dns-proxy: uci wrappers & iCloud canary domainsStan Grishin2022-09-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * switch to using uci wrappers instead of direct uci calls * add support for iCloud canary domains https://developer.apple.com/support/prepare-your-network-for-icloud-private-relay Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | Merge pull request #19447 from turris-cz/unboundJosef Schlehofer2022-09-29
|\ \ \ \ | | | | | | | | | | unbound: update to version 1.16.3
| * | | | unbound: update to version 1.16.3Josef Schlehofer2022-09-25
| | |/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-16-3 - Fixes: CVE-2022-3204 Refreshed one patch Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | ddns-scripts: add explicit "-d" switch for Dry RunRafał Miłecki2022-09-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It was a bit confusing to use *verbosity* level for Dry Run mode. Add explicity switch for it and designed DRY_RUN variable to make code easier to understand. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* | | | ddns-scripts: rename variable: s/ERR_UPDATE/RETRY_COUNT/Rafał Miłecki2022-09-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Rename variable to make code easier to understand. This variable specifies how many times in row ddns script tried to update IP without a success. Previous name ("ERR_UPDATE") didn't suggest it was for counting anything. It also didn't specify was error was it related to. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* | | | ddns-scripts: replace IP type (name) "local" with "current"Rafał Miłecki2022-09-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Local suggests something related to the local network or available locally only. All that code related to the "local" IP was actually dealing with *current* device external IP address. Using name "current" should make code a bit easier to understand. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* | | | ddns-scripts: rename variable: s/retry_count/retry_max_count/Rafał Miłecki2022-09-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Rename variable to make code easier to understand. This variable specifies how many times ddns script should try to send a request. Previous name ("retry_count") suggested it was for *counting* attempts. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* | | | Merge pull request #19448 from stangri/master-simple-adblockStan Grishin2022-09-27
|\ \ \ \ | | | | | | | | | | simple-adblock: update to 1.9.1-1
| * | | | simple-adblock: update to 1.9.1-1Stan Grishin2022-09-25
| | |_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * remove obsolete block-lists from config * add removal of obsolete lists to config-update * add AdGuard team's block-list to config * improve allow command * improve nftset support * move config load to uci_load_validate, which required some code refactoring which looks dramatic, but isn't * always use dnsmasq_restart instead of dnsmasq_hup for all dns resolution options for dnsmasq Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | Merge pull request #19460 from stangri/master-curlStan Grishin2022-09-26
|\ \ \ \ | | | | | | | | | | curl: bugfix: github source url
| * | | | curl: bugfix: github source urlStan Grishin2022-09-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fixes https://github.com/openwrt/packages/issues/19456 Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | Merge pull request #19446 from jamesmacwhite/mwan3-config-replace-google-dnsFlorian Eckert2022-09-26
|\ \ \ \ \ | | | | | | | | | | | | mwan3: Switch default track_ip targets from Google DNS to Cloudflare DNS
| * | | | | mwan3: Switch default track_ip targets from Google DNS to Cloudflare DNSJames White2022-09-25
| | |_|/ / | |/| | | | | | | | | | | | | Signed-off-by: James White <james@jmwhite.co.uk>
* | | | | pagekite: add patchs for 64bit timeKarl Palsson2022-09-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Source: https://github.com/pagekite/libpagekite/pull/78 Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | mosquitto: bump to 2.0.15Karl Palsson2022-09-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: https://mosquitto.org/blog/2022/08/version-2-0-15-released/ Changelog: https://mosquitto.org/blog/2021/11/version-2-0-14-released/ 2.0.15 is bigger security and bugfix release. 2.0.14 had a couple of minor changes and was skipped for OpenWrt. Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | mosquitto: add missing 'persistence' section in configPtilopsis Leucotis2022-09-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Section 'Persistence' in 'luci-app-mosquitto' is unusable without 'persistence' section in config file. Signed-off-by: Ptilopsis Leucotis <PtilopsisLeucotis@yandex.com>
* | | | | tor: update to 0.4.7.9Nick Hainke2022-09-26
| |/ / / |/| | | | | | | | | | | | | | | | | | | | | | | Release Notes: https://forum.torproject.net/t/urgent-stable-release-0-4-5-14-0-4-6-12-and-0-4-7-10 Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | haproxy: Update HAProxy to v2.6.6Christian Lachner2022-09-26
| | | | | | | | | | | | | | | | | | | | | | | | - Update haproxy download URL and hash Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | | adblock: update 4.1.4-5Dirk Brenken2022-09-25
|/ / / | | | | | | | | | | | | | | | | | | | | | * auto-whitelist ext. dns lookup domain * add public doh server blocklist source * whitespace fixes in adblock.sources Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | Merge pull request #19419 from james-mcguire/masterDirk Brenken2022-09-25
|\ \ \ | | | | | | | | adblock: add lightswitch05 source
| * | | adblock: add lightswitch05 blocklist sourceJames McGuire2022-09-24
| | | | | | | | | | | | | | | | Signed-off-by: James McGuire <jamesm51@gmail.com>
* | | | snowflake: run snowflake-proxy with procd-ujailDaniel Golle2022-09-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | snowflake-proxy doesn't write any files => run in read-only rootfs environment the process needs to read SSL certs but no other files => only exposed path is /etc/ssl/certificates (read-only) running as unpriviledged user with no additional capabilities => set no-new-privs bit By default procd-ujail also isolates the process by executing it in a separate new IPC and PID namespace. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | snowflake: add packageDaniel Golle2022-09-24
| |/ / |/| | | | | | | | | | | | | | | | | Package Tor's Snowflake system components so users can offer e.g. a standalone Snowflake proxy on their routers or other devices. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | gatling: add package gatlingMartin Hübner2022-09-23
| | | | | | | | | | | | | | | | | | | | | | | | Gatling is a high-performance webserver from fefe. It gives a fairly decent feature-set at really small size. And its fast. Co-authored-by: Josef Schlehofer <pepe.schlehofer@gmail.com> Signed-off-by: Martin Hübner <martin.hubner@web.de>
* | | dnsproxy: Update to 0.45.0Tianling Shen2022-09-23
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | dnslookup: Update to 1.8.0Tianling Shen2022-09-23
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | Merge pull request #19422 from paper42/knot-resolver-5.5.3Josef Schlehofer2022-09-23
|\ \ \ | | | | | | | | knot-resolver: update to 5.5.3
| * | | knot-resolver: update to 5.5.3Michal Vasilek2022-09-22
| | | | | | | | | | | | | | | | | | | | | | | | * fixes CVE-2022-40188 Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
* | | | pdns-recursor: update to 4.7.3Peter van Dijk2022-09-22
|/ / / | | | | | | | | | Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
* | | netsniff-ng: Build and package mausezahnMartin Blumenstingl2022-09-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | mausezahn is a multicast traffic generator which is part of the netsniff-ng sources. This utility is needed for the upcoming kernel-selftests-net-forwarding package. Add a new package for it. netsniff-ng will automatically detect all installed dependencies and build only the utilities whose dependencies are installed (meaning: mausezahn is not build when for example libcli is not installed and other tools are not build if for example zlib is missing). Depending on the selected packages (netsniff-ng or mausezahn) the OpenWrt build system has to trigger netsniff-ng's configure script, which will then pick up and automatically build the programs (mausezahn, netsniff-ng, trafgen, ...) for which all dependencies are installed. Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>
* | | hping3: add new packageAlexander E. Patrakov2022-09-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The new package would help measuring one-way delays using ICMP type 13 packets. This is important for various scripts that automatically adjust CAKE shaper bandwidth based on the observed bufferbloat. They need to understand whether the delay is on the way up or on the way down, so that they can adjust the bandwidth of the proper part of the shaper. https://forum.openwrt.org/t/cake-w-adaptive-bandwidth-historic/108848 https://forum.openwrt.org/t/cake-w-adaptive-bandwidth/135379 V2: refreshed patches Signed-off-by: Alexander E. Patrakov <patrakov@gmail.com>
* | | bind: bump to 9.18.7Noah Meyerhans2022-09-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes multiple security issues: CVE-2022-38178 - Fix memory leak in EdDSA verify processing CVE-2022-3080 - Fix serve-stale crash that could happen when stale-answer-client-timeout was set to 0 and there was a stale CNAME in the cache for an incoming query CVE-2022-2906 - Fix memory leaks in the DH code when using OpenSSL 3.0.0 and later versions. The openssldh_compare(), openssldh_paramcompare(), and openssldh_todns() functions were affected CVE-2022-2881 - When an HTTP connection was reused to get statistics from the stats channel, and zlib compression was in use, each successive response sent larger and larger blocks of memory, potentially reading past the end of the allocated buffer CVE-2022-2795 - Prevent excessive resource use while processing large delegations Signed-off-by: Noah Meyerhans <frodo@morgul.net>
* | | wifi-presence: Update to version v0.2.0Adam Williams2022-09-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | This version better decodes SSID names which contain emoji, control characters, and other non-ascii characters. https://github.com/awilliams/wifi-presence/pull/8 Signed-off-by: Adam Williams <pwnfactory@gmail.com>
* | | gg: Update to 0.2.11Tianling Shen2022-09-22
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | Merge pull request #19410 from robimarko/mdioStijn Tintel2022-09-21
|\ \ \ | | | | | | | | mdio-tools: update to 1.2.0
| * | | mdio-tools: update to 1.2.0Robert Marko2022-09-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update the mdio-netlink kmod and userspace mdio-tools to version 1.2.0. This allows dropping the time64 musl patch which was upstreamed. [v1.2.0] - 2022-09-15 --------------------- - mdio: A new addressing mode "mmd-c22": Used to access MMDs attached to MDIO controllers without Clause 45 support by using registers 13 and 14 in the device's Clause 22 register space - mdio: Pretty print gigabit link capability information from a PHY's extended status register - mdio: Pretty print lots of status information from MMDs (C45 PHYs) - mvls: Decode priority override information of ATU entries - mvls: Table listings now always prints out the device information, even on single chip systems. Signed-off-by: Robert Marko <robimarko@gmail.com>
* | | | lighttpd: update to lighttpd 1.4.67 release hashGlenn Strauss2022-09-21
| |/ / |/| | | | | | | | | | | | | | * update to lighttpd 1.4.67 release hash Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
* | | Merge pull request #19335 from db260179/master-openconnectFlorian Eckert2022-09-20
|\ \ \ | |/ / |/| | vpnc-script: restart dnsmasq when openconnect disconnects
| * | vpnc-script: restart dnsmasq when openconnect disconnectsDavid Bentham2022-09-19
| | | | | | | | | | | | Signed-off-by: David Bentham <db260179@gmail.com>
* | | v2ray-geodata: Update to latest versionTianling Shen2022-09-18
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | xray-core: Update to 1.6.0Tianling Shen2022-09-18
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | adblock: update 4.1.4-3Dirk Brenken2022-09-18
| | | | | | | | | | | | | | | | | | * unbound: fix domain search regression Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | nut: ensure time_t is defined in upsclient.hEneas U de Queiroz2022-09-17
| | | | | | | | | | | | | | | | | | | | | Use an upstream commit to ensure time_t is defined in upsclient.h, fixing a compile failure in collectd. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Powered by cgit, Themed by Ted Yin.