| Commit message (Collapse) | Author | Age |
|
|
|
| |
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
|
|
|
| |
Signed-off-by: Dov Murik <dmurik@us.ibm.com>
|
|
|
|
| |
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
|
|\
| |
| | |
Update liburcu, add libedit and update knot
|
| |
| |
| |
| | |
Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>
|
| |
| |
| |
| | |
Signed-off-by: heil <heil@terminal-consulting.de>
|
|\ \
| | |
| | | |
nginx: upstep to 1.10.0, add Lua module, footprint optimizations
|
| | |
| | |
| | |
| | | |
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
|
|\ \ \
| | | |
| | | | |
adblock: update 1.1.2
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
* remove hardcoded paths for system tools like iptables, uci & fetch
(wget)
* support openwrt & lede spin-off
* cosmetics & cleanups
Signed-off-by: Dirk Brenken <openwrt@brenken.org>
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
- add DNS lookup support for "drill" and "khost" (Knot DNS) #2637
- new service nsupdate.info (IPv4 and IPv6) #2433
- new services dyndnss.net, dyns.net (IPv4 only)
- new services dnshome.de, goip.de, myonlineportal.net (IPv4 and IPv6)
Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
|
| |_|/
|/| |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* push gnurl, gnutls and libmicrohttpd dependencies down to modules
* use standard UID/GID for gnunet (958/958)
* use GID adjecent (452) to dnsmasq (453) for gnunetdns to allow
using the owner match with a range of GIDs (452-452)
* package new gnunet-social pub/sub CLI tool
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Fixes the following CVEs:
Bug 3020 / CVE-2016-1551: Refclock impersonation vulnerability, AKA: refclock-peering
Reported by Matt Street and others of Cisco ASIG
Bug 3012 / CVE-2016-1549: Sybil vulnerability: ephemeral association attack, AKA: ntp-sybil - MITIGATION ONLY
Reported by Matthew Van Gundy of Cisco ASIG
Bug 3011 / CVE-2016-2516: Duplicate IPs on unconfig directives will cause an assertion botch
Reported by Yihan Lian of the Cloud Security Team, Qihoo 360
Bug 3010 / CVE-2016-2517: Remote configuration trustedkey/requestkey values are not properly validated
Reported by Yihan Lian of the Cloud Security Team, Qihoo 360
Bug 3009 / CVE-2016-2518: Crafted addpeer with hmode > 7 causes array wraparound with MATCH_ASSOC
Reported by Yihan Lian of the Cloud Security Team, Qihoo 360
Bug 3008 / CVE-2016-2519: ctl_getitem() return value not always checked
Reported by Yihan Lian of the Cloud Security Team, Qihoo 360
Bug 3007 / CVE-2016-1547: Validate crypto-NAKs, AKA: nak-dos
Reported by Stephen Gray and Matthew Van Gundy of Cisco ASIG
Bug 2978 / CVE-2016-1548: Interleave-pivot - MITIGATION ONLY
Reported by Miroslav Lichvar of RedHat and separately by Jonathan Gardner of Cisco ASIG
Bug 2952 / CVE-2015-7704: KoD fix: peer associations were broken by the fix for NtpBug2901, AKA: Symmetric active/passive mode is broken
Reported by Michael Tatarinov, NTP Project Developer Volunteer
Bug 2945 / Bug 2901 / CVE-2015-8138: Zero Origin Timestamp Bypass, AKA: Additional KoD Checks
Reported by Jonathan Gardner of Cisco ASIG
Bug 2879 / CVE-2016-1550: Improve NTP security against buffer comparison timing attacks, authdecrypt-timing, AKA: authdecrypt-timing
Reported independently by Loganaden Velvindron, and Matthew Van Gundy and Stephen Gray of Cisco ASIG.
Signed-off-by: Peter Wagner <tripolar@gmx.at>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
OpenWrt offers a special 'prelocal' routing table at priority 0.
Use it, so local-to-local DNS traffic also gets redirected properly.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Anthony Brown <anthony@found-it.net>
|
|\ \ \
| | | |
| | | | |
tor: remove tor-fw-helper
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
The "internal pure-C" tor-fw-helper was removed in 0.2.7.5. This removes
the tor-fw-helper package and references to its dependencies.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
|
|\ \ \ \
| | | | |
| | | | | |
net/vpnc: Add option to prevent retry on authentication failure
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
On some systems too many retries with authentication failure results
in IP or username being locked out, so add option to prevent retries
in the event of authentication failure
Signed-off-by: Daniel Dickinson <openwrt@daniel.thecshore.com>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
fwknop Makefile had two conffiles sections. Combine them.
Remove also the whitespace from conffiles section (see #2652)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
The conffiles definition in Makefile should not contain leading whitespace.
Remove whitespace from Makefile of motion, dnscrypt-proxy and sstp-client.
Reference to discussion at #2652
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Closes #2652
Signed-off-by: Martin Rowe <martin.p.rowe@gmail.com>
|
|\ \ \ \ \
| | |_|/ /
| |/| | | |
adblock: update to 1.1.1
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
* discard uncommitted uci changes in case of processing errors
* init script (stop action) now removes all 'adb_src_count' &
'adb_src_timestamp' entries in config
* updated documentation
Signed-off-by: Dirk Brenken <openwrt@brenken.org>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
|
|\ \ \ \ \
| | | | | |
| | | | | | |
ddns-scripts: add IPv6 config for duckdns.org
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Joel Johnson <mrjoel@lixil.net>
|
|\ \ \ \ \ \
| | | | | | |
| | | | | | | |
p910nd: Convert p910nd init script to procd
|
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
Signed-off-by: Maximilian Mehnert <maximilian.mehnert@gmx.de>
[pkerling@casix.org: increase PKG_RELEASE version]
Signed-off-by: Philipp Kerling <pkerling@casix.org>
|
|\ \ \ \ \ \ \
| | |_|/ / / /
| |/| | | | /
| |_|_|_|_|/
|/| | | | | |
adblock: release 1.1.0
|
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
* support more router modes, as long as the firewall and the DNS server
are enabled
* new source sites can be added & changed via awk ruleset in uci config
* source domain count, last update time & overall count will be stored
in uci config
* added 3 new source sites:
ransomware tracker
rolist/easylist
winspy
* switch to minimal inline base64 encoded 1×1 GIF for pixel server
(separate png image no longer needed)
* simplified uci parser
* source download & domain sort optimization
* add whitelist parser with wildcard support
* reduced code size & various cleanups
* updated documentation
Signed-off-by: Dirk Brenken <openwrt@brenken.org>
|
|\ \ \ \ \ \
| |_|_|/ / /
|/| | | | | |
add package for ncp (https://www.fefe.de/ncp)
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Andreas Shimokawa <shimokawa@fsfe.org>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Create directory which was accidentally left-out during the previous
commit adding the proto handler.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
|
|\ \ \ \ \ \
| |/ / / / /
|/| | | | | |
davfs2: updated to 1.5.4
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Federico Di Marco <fededim@gmail.com>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
|
|\ \ \ \ \ \
| | | | | | |
| | | | | | | |
transmission: split packages depending on selected cryptography library
|
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
transmission: Shortening the title
Signed-off-by: Cezary Jackiewicz <cezary@eko.one.pl>
|
|\ \ \ \ \ \ \
| | | | | | | |
| | | | | | | | |
aircrack-ng: split out airmon-ng as a separate package.
|
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
As said in a related github discussion thread [1], OpenWrt is so small a
system that
- "airmon-ng check kill" does not have much to check
- airmon-ng takes up too much space for not that much benefit (bringing
up monitor interface with just iw should be enough for at least b43
and ath9k drivers)
Airmon-ng depends on a lot of utility binaries to run and these
dependencies increase the installation size. With this commit we can
provide a working airmon-ng and a smaller aircrack-ng package.
Dependency spec of airmon-ng is also reworked to
- select usbutils only if USB feature is available
- select pciutils only if PCI feature is available
While doing the split, this commit also contains a few other minor
changes
- Use SPDX identifier for license name.
- Add PKG_LICENSE_FILES definition.
- Set PKG_MAINTAINER (MAINTAINER variable will take value from it).
[1] https://github.com/openwrt/packages/pull/1693
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
|
|\ \ \ \ \ \ \ \
| | | | | | | | |
| | | | | | | | | |
net: Fix typos (found by codespell)
|
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
Signed-off-by: Stefan Weil <sw@weilnetz.de>
|
|\ \ \ \ \ \ \ \ \
| | |_|_|/ / / / /
| |/| | | | | | | |
lftp: updated to 4.7.1, davfs2: updated to 1.5.3 and reintroduced support for libssp
|
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
davfs2: updated to 1.5.3 and reintroduced support for libssp
Signed-off-by: Federico Di Marco <fededim@gmail.com>
|