aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
* treewide: refresh hashes after move to use ZSTD as defaultRobert Marko2024-04-07
| | | | | | | | With the recent move to using ZSTD as the default compression format for packaging git repo clones we must refresh all of the hashes for the packages feed as well. Signed-off-by: Robert Marko <robimarko@gmail.com>
* croc: update to 9.6.15Jonas Jelonek2024-04-06
| | | | | | | | | changelogs: 9.6.13: https://github.com/schollz/croc/releases/tag/v9.6.13 9.6.14: https://github.com/schollz/croc/releases/tag/v9.6.14 9.6.15: https://github.com/schollz/croc/releases/tag/v9.6.15 Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
* ksmbd-tools: update to version 3.5.2Andrea Pesaresi2024-04-06
| | | | | | | | | | Major changes are: - Add durable handles parameter to ksmbd.conf. - Add payload_sz in ksmbd_share_config_response to validate ipc response. - Fix UAF and cleanups. Signed-off-by: Andrea Pesaresi <andreapesaresi82@gmail.com>
* nginx: add patch to fix compilation error on mips targetsChristian Marangi2024-04-06
| | | | | | | | | | Add patch to fix compilation error on mips targets. This was triggered after enabling LTO. It was discovered that -fPIC is enabled on building dynamic modules in CFLAGS but was missing on linking them. This patch adds the missing -fPIC also on linking. Fixes: 3b13b08ad98d ("nginx: Fix compilation with LTO") Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* nginx: drop redundant --with-cc-opt configure argChristian Marangi2024-04-06
| | | | | | | | | | Drop redundant --with-cc-opt configure arg to mute warning of cc1: note: someone does not honour COPTS correctly, passed 2 times. CFLAGS are already parsed and correctly applied without this option and adding it just makes the CFLAGS appended twice. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* Merge pull request #23787 from stangri/master-curlStan Grishin2024-04-04
|\ | | | | curl: update to 8.7.1
| * curl: update to 8.7.1Stan Grishin2024-03-31
| | | | | | | | | | | | | | | | | | * update to 8.7.1: https://curl.se/changes.html#8_7_1 * use the new --disable-docs flag for configure * update 200-no_docs_tests.patch * switch to APK-compatible revision Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | v2ray-geodata: Update to latest versionTianling Shen2024-04-04
| | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | v2ray-geodata: use APK compatible version schemaTianling Shen2024-04-04
| | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | strongswan: Backport upstream fix for RNG definition conflictPhilip Prindeville2024-04-03
| | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | libcurl-gnutls: update to verison 8.7.1Daniel Golle2024-04-04
| | | | | | | | | | | | See https://curl.se/changes.html#8_7_1 Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | apcupsd: fix gcc 13 compliation errorIvan Pavlov2024-04-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | On GCC13 build fails: toolchain-mipsel_24kc_gcc-13.2.0_musl/lib/libsupc++.a(eh_alloc.o): in function `std::__sv_check(unsigned int, unsigned int, char const*)': toolchain-mipsel_24kc_gcc-13.2.0_musl/gcc-13.2.0-final/mipsel-openwrt-linux-musl/libstdc++-v3/include/string_view:73: undefined reference to `std::__throw_out_of_range_fmt(char const*, ...)' collect2: error: ld returned 1 exit status make[5]: *** [Makefile:33: apcupsd] Error 1 Workaround found at https://lore.kernel.org/buildroot/87wmsbk386.fsf@48ers.dk/T/ Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
* | nlbwmon: Fix PKG_MIRROR_HASH after APK changesHannu Nyman2024-04-03
| | | | | | | | | | | | | | Adjust PKG_MIRROR_HASH to the filename logic change due to APK preparations. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | cgi-io: Fix PKG_MIRROR_HASH after APK changesHannu Nyman2024-04-03
| | | | | | | | | | | | | | Adjust PKG_MIRROR_HASH to the filename change due to APK preparations. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | mdio-tools: use commit hash as the source versionRobert Marko2024-04-03
| | | | | | | | | | | | | | | | | | | | | | In light of the recent XZ events, it seems that using the tag as the source version reference is not ideal as it can be updated by the upstream lets switch to using the full commit hash as the source. This also should fix the APK semantic versioning by setting PKG_VERSION as well updating the PKG_MIRROR_HASH which got broken by recent APK changes. Signed-off-by: Robert Marko <robimarko@gmail.com>
* | yggdrasil: move `yggdrasil-jumper` setup/shutdown logic to `netifd`Remy D. Farley2024-04-02
| | | | | | | | Signed-off-by: Remy D. Farley <one-d-wide@protonmail.com>
* | yggdrasil-jumper: add multiple ygg supportWilliam Fleurant2024-04-02
| | | | | | | | Signed-off-by: William Fleurant <meshnet@protonmail.com>
* | yggdrasil-jumper: initial commit buildsWilliam Fleurant2024-04-02
| | | | | | | | | | | | | | | | mips32/xiaomi-4c target bins stun-tcp ............ 1.7M yggdrasil-jumper .... 2.3M Signed-off-by: William Fleurant <meshnet@protonmail.com>
* | Merge pull request #22599 from vooon/add-net-wgsdJosef Schlehofer2024-04-01
|\ \ | | | | | | wgsd: add package
| * | wgsd: add packageVladimir Ermakov2024-03-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adds WGSD, a service that enables use cases such as: - Building a mesh of WireGuard peers from a central registry - Dynamic discovery of WireGuard Endpoint addressing (both IP address and port number) - NAT-to-NAT WireGuard connectivity where UDP hole punching is supported. Provides two packages: - wgsd-coredns - a DNS-SD server, which allows clients to discover other wireguard peers - wgsd-client - a client, which query DNS server and update wireguard peers endpoints Signed-off-by: Vladimir Ermakov <vooon341@gmail.com>
* | | xray-core: Update to 1.8.10Tianling Shen2024-04-01
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | alist: Update to 3.33.0Tianling Shen2024-04-01
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | tor: update to 0.4.8.10 stableRui Salvaterra2024-03-31
| |/ |/| | | | | | | | | | | | | Bugfix release, see the changelog [1] for what's new. [1] https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.10/ChangeLog Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* | kmsbd-tools: switch to use tagged releaseAndrea Pesaresi2024-03-31
| | | | | | | | | | | | | | | | Instead of checking Git sources, we will use now tagged releases. This solve the strange version 0~3.5.1-r1, now will be 3.5.2-r2 Signed-off-by: Andrea Pesaresi <andreapesaresi82@gmail.com>
* | netbird: update to 0.26.6jiangslee2024-03-30
| | | | | | | | Signed-off-by: jiangslee <jiangsili@qq.com>
* | tailscale: Update to 1.62.1Zephyr Lykos2024-03-30
| | | | | | | | | | | | https://github.com/tailscale/tailscale/releases/tag/v1.62.1 Signed-off-by: Zephyr Lykos <git@mochaa.ws>
* | strongswan: drop unneeded sleep patchPhilip Prindeville2024-03-27
| | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | strongswan: backport upstream MUSL fix for farp_spoofer.cPhilip Prindeville2024-03-27
| | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | strongswan: backport upstream MUSL fix for pf_handler.cPhilip Prindeville2024-03-27
| | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | strongswan: simplify MUSL patchPhilip Prindeville2024-03-27
| | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | strongswan: Update to 5.9.14Philip Prindeville2024-03-27
| | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | uspot: update to Git HEAD (2024-03-25)Thibaut VARÈNE2024-03-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 56eebdad085e uspot: wrap spotfilter device under tip_mode 1a96d57e5fe0 uspot: client_enable() wrap spotfilter data in tip_mode fe12f9a7abde uspot: clear ratelimit state on startup/shutdown 976badc4d0b6 update README 53b8cb88a94a Makefile: require minimum ucode version ff6163190d5a uspot/portal: report client_enable() failure 8601d9199233 include sample radcli dictionaries c670f6c4b48f update README 094f0df88150 uspot: work around ucode#191 missing in 23.05 Update the package Makefile to reflect the changes from the following above-listed commit: 53b8cb88a94a Makefile: require minimum ucode version Fixes: https://github.com/f00b4r0/uspot/issues/4 Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
* | nginx: update to 1.25.4Jan Klos2024-03-26
| | | | | | | | Signed-off-by: Jan Klos <jan@klos.xyz>
* | p910nd: fix running multiple instancesPeca Nesovanovic2024-03-26
| | | | | | | | | | | | | | | | | | | | | | | | | | Compile tested: (ramips, rb760igs, 23.05 snapshot) Run tested: (ramips, rb760igs, 23.05 snapshot, tests done) Description: In case we have multiple device defined in /etc/config/p910nd then init script will try to start multiple instance with same instance name drop instance name as resolution tested on 23.05 snapshot with 2 USB printers Signed-off-by: Peca Nesovanovic <peca.nesovanovic@sattrakt.com>
* | sing-box: update to 1.8.10brvphoenix2024-03-26
| | | | | | | | Signed-off-by: brvphoenix <brvphoenix@gmail.com>
* | sing-box: restart if the specified interfaces start upbrvphoenix2024-03-26
| | | | | | | | Signed-off-by: brvphoenix <brvphoenix@gmail.com>
* | Merge pull request #23681 from jummo/add_ddns_servercowMichael Heimpold2024-03-24
|\ \ | | | | | | ddns-scripts: Add servercow.de as DDNS provider
| * | ddns-scripts: Add servercow.de as DDNS providerPatrick Hemmen2024-03-19
| | | | | | | | | | | | | | | | | | Add servercow.de as dynamic DNS provider provider. Signed-off-by: Patrick Hemmen <jummo4@yahoo.de>
* | | Merge pull request #23716 from stangri/master-https-dns-proxyStan Grishin2024-03-24
|\ \ \ | | | | | | | | https-dns-proxy: prepare migration to APK
| * | | https-dns-proxy: prepare migration to APKStan Grishin2024-03-24
| | | | | | | | | | | | | | | | Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | Merge pull request #23717 from stangri/master-adblock-fastStan Grishin2024-03-24
|\ \ \ \ | | | | | | | | | | adblock-fast: prepare migration to APK
| * | | | adblock-fast: prepare migration to APKStan Grishin2024-03-23
| |/ / / | | | | | | | | | | | | Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | Merge pull request #23715 from stangri/master-nebulaStan Grishin2024-03-24
|\ \ \ \ | | | | | | | | | | nebula: prepare migration to APK
| * | | | nebula: prepare migration to APKStan Grishin2024-03-23
| |/ / / | | | | | | | | | | | | Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | Merge pull request #23714 from stangri/master-pbrStan Grishin2024-03-24
|\ \ \ \ | | | | | | | | | | pbr: prepare migration to APK
| * | | | pbr: prepare migration to APKStan Grishin2024-03-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * remove dependencies/references to opkg * simplify wan/wan6 discovery Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | knot-resolver: Update to version 5.7.1Michal Hrusecky2024-03-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Fixes CVE-2023-50868 and CVE-2023-50387 - Also, the resolver has not been called 'Knot DNS Resolver' for quite some time, so fix that, too. Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
* | | | | knot-resolver: enable dnstap module build by defaultŠimon Bořek2024-03-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 'dnstap' module will be built but not loaded by default at runtime (configuration must be provided for it to be loaded). It is still possible to disable dnstap build manually using menuconfig. "The dnstap module supports logging DNS requests and responses to a unix socket in dnstap format using fstrm framing library. This logging is useful if you need effectively log all DNS traffic."[^1] Adds dependency on 'protobuf', 'protobuf-c', 'libfstrm'. Listed packages are available from OpenWrt packages, have uncomplicated manifests and while 'protobuf-c' doesn't have a maintainer since spring 2020, all the packages (including 'protobuf-c') seem to be maintained - the last updates of all of them in autumn 2021. As stated by Vladimír Čunát from Knot Resolver team they build dnstap while packaging for majority of standard Linux distributions. Therefore this change brings us closer to expected default. [^1]: https://knot-resolver.readthedocs.io/en/stable/modules-dnstap.html Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
* | | | | knot-resolver: do not overwrite -Ddnstap=enabled configurationŠimon Bořek2024-03-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It was possible to enable dnstap in menuconfig, but the configuration only added dependencies while leaving dnstap module build disabled. Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
* | | | | snort3: Fix compilation with GCC 13Hauke Mehrtens2024-03-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes a compile problem with GCC 13. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>