aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
* Merge pull request #12344 from James-TR/pdns-4.2.2-bumpRosen Penev2020-05-27
|\ | | | | pdns: update to 4.2.2
| * pdns: update to 4.2.2James Taylor2020-05-27
| | | | | | | | | | | | | | | | | | Updates pdns to latest release in the 4.2 series. Full change log for this release is available at: https://doc.powerdns.com/authoritative/changelog/4.2.html#change-4.2.2 Signed-off-by: James Taylor <james@jtaylor.id.au>
* | Merge pull request #12343 from James-TR/pdns-recursor-4.2.2-bumpRosen Penev2020-05-27
|\ \ | | | | | | pdns-recursor: update to 4.2.2
| * | pdns-recursor: update to 4.2.2James Taylor2020-05-26
| |/ | | | | | | | | | | | | | | | | | | | | | | Updates pdns-recursor to latest release in the 4.2 series. Includes backported fixes for CVE-2020-10995, CVE-2020-12244 and CVE-2020-10030, plus avoid a crash when loading an invalid RPZ. Full change log for this release is available at: https://doc.powerdns.com/recursor/changelog/4.2.html#change-4.2.2 Signed-off-by: James Taylor <james@jtaylor.id.au>
* | dawn: bump to latest versionNick Hainke2020-05-27
| | | | | | | | | | | | | | Prepare DAWN for prometheus-node-exporter by always showing the whole network overview. Signed-off-by: Nick Hainke <vincent@systemli.org>
* | openvswitch: pass KERNEL_MAKE_FLAGS for reproducible buildYousong Zhou2020-05-27
| | | | | | | | | | Reported-by: Paul Spooren <mail@aparcar.org> Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | openvswitch: rework disabling docs buildYousong Zhou2020-05-27
| | | | | | | | | | | | | | | | | | This is needed since openvswitch 2.13 commit 2a97891eb23b ("Documentation: Work with sphinx-build for Python 3 also.") The 4th patch was also reworked to serve as another guard Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | Merge pull request #12323 from peter-stadler/nginx-util-clangRosen Penev2020-05-26
|\ \ | | | | | | nginx-util: fix issues and cleanup
| * | nginx-util: fix issues and cleanupPeter Stadler2020-05-26
| |/ | | | | | | | | | | | | | | | | | | * fix regex capture (to conform std) * fix issues for Clang/libcxx (warnings/includes) * fix CONFLICTS in the Makefile * use /bin/sh in host scripts and shellcheck them * add callback for setting arguments in ubus::call Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* | nextdns: Update to version 1.6.3Olivier Poitrey2020-05-26
| | | | | | | | Signed-off-by: Olivier Poitrey <rs@nextdns.io>
* | Merge pull request #12280 from sgabe/sslh-transparentRosen Penev2020-05-26
|\ \ | | | | | | sslh: add transparent proxy support
| * | sslh: use tls option instead of deprecated sslGabor Seljan2020-05-26
| | | | | | | | | | | | | | | | | | Upstream will drop support for the ssl option in the next future version. Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
| * | sslh: add capabilities supportGabor Seljan2020-05-26
| | | | | | | | | | | | | | | | | | | | | | | | Compile with USELIBCAP=1 to make use of POSIX capabilities. This will save the required capabilities needed for transparent proxying for unprivileged processes. Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
| * | sslh: add http probe configGabor Seljan2020-05-26
| | | | | | | | | | | | Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
| * | sslh: bump package releaseGabor Seljan2020-05-25
| | | | | | | | | | | | Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
| * | sslh: add transparent proxy supportGabor Seljan2020-05-24
| | | | | | | | | | | | Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
* | | nextdns: Update to version 1.6.0Olivier Poitrey2020-05-26
| | | | | | | | | | | | Signed-off-by: Olivier Poitrey <rs@nextdns.io>
* | | Merge pull request #12321 from ja-pa/transmission-fix-initRosen Penev2020-05-26
|\ \ \ | | | | | | | | transmission: init script check syscall list for seccomp
| * | | transmission: init script check syscall list for seccompJan Pavlinec2020-05-26
| | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | linuxptp: fix build failurePaulo Machado2020-05-26
| |_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Build is failing because HWTSTAMP_TX_ONESTEP_P2P is defined anymore on linux net_tstamp.h. Moreover, the usual way of linuxptp build is looking for system includes unless user defines differently. That also was tried to fix. PKG_RELEASE bumped to 3. Signed-off-by: Paulo Machado <pffmachado@yahoo.com>
* | | Merge pull request #12314 from Payne-X6/masterJosef Schlehofer2020-05-26
|\ \ \ | |/ / |/| | knot: update to version 2.9.5
| * | knot: update to version 2.9.5Jan Hak2020-05-26
| | | | | | | | | | | | | | | | | | | | | Removed patch `03-configure-allow-to-manually-disable-POSIX-capabiliti.patch` that has been backported into release. Signed-off-by: Jan Hak <jan.hak@nic.cz>
* | | Merge pull request #12296 from neheb/transRosen Penev2020-05-26
|\ \ \ | |/ / |/| | transmission: update to 3.0
| * | transmission: update to 3.0Rosen Penev2020-05-24
| | | | | | | | | | | | | | | | | | remove upstreamed patches. Refresh remaining one. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | miniupnpd: improve hotplug & interface handlingKevin Darbyshire-Bryant2020-05-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The existing interface selection/detection code was incomprehensible at worst and convoluted at best. The uci config file suggested it understood an external ipv6 interface but in reality the init script took no notice. Re-work it so it is at least comprehendible and takes notice of ipv6 interface details if specified. Update the hotplug script to use the same interface selection/detection code as the init script and take note of ipv6 interface selection, only restarting miniupnpd on interface up events and only if that interface isn't already known (for that ip class) by miniupnpd. For me this has solved numerous 'flaky' startup problems, especially with regard to ipv6. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* | | Merge pull request #12302 from aleksander0m/aleksander/mm-mtuRosen Penev2020-05-25
|\ \ \ | | | | | | | | modemmanager: set interface MTU based on bearer settings
| * | | modemmanager: set interface MTU based on bearer settingsAleksander Morgado2020-05-25
| |/ / | | | | | | | | | | | | | | | | | | | | | Using the same method used by other protocol handlers like uqmi. Fixes https://github.com/openwrt/packages/issues/11383 Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
* / / clamav: update to version 0.102.3 (security fix)Jan Pavlinec2020-05-25
|/ / | | | | | | | | | | | | | | Fixes: CVE-2020-3341 CVE-2020-3327 Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | Merge pull request #12077 from peter-stadler/uwsgiRosen Penev2020-05-24
|\ \ | | | | | | uwsgi: make luci-webui single threaded and log more
| * | uwsgi: make luci-webui single threaded and log morePeter Stadler2020-05-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | More threads can lead to a problem if a luci-app makes a fork (e.g. for executing a command). Parallelism is still achieved by using `processes = 3`. Make the log more verbose by filtering only standard messages for start/stop/reload out (leaving one line each). Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* | | Merge pull request #12184 from peter-stadler/nginx-luciRosen Penev2020-05-24
|\ \ \ | | | | | | | | nginx: set log level to crit for luci-static
| * | | nginx: set log level to crit for luci-staticPeter Stadler2020-05-24
| | |/ | |/| | | | | | | | | | | | | Do not write errors for inexistent files to the system log. Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* / | adblock: limit domain name lengthDirk Brenken2020-05-24
|/ / | | | | | | | | | | * limit domain name length to max. 63 chars to fix issues with energized sources Signed-off-by: Dirk Brenken <dev@brenken.org>
* | Merge pull request #12159 from peter-stadler/nginx-smpRosen Penev2020-05-23
|\ \ | | | | | | nginx: do not reduce max processes
| * | nginx: do not reduce max processesPeter Stadler2020-05-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | Use the upstream value for NGX_MAX_PROCESSES (=1024) again. So it is safe to use `worker_processes auto;` (which sets it to the number of CPUs). Also use this directive in the conf instead of calculating the number in the init and passing it as argument. Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* | | adblock: release 4.0.5Dirk Brenken2020-05-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * update energized source urls, add ultimate variant * switch shalla source to http (invalid server certificate) * add another stevenblack source variant (normal / porn) * small cornercase fixes * update readme Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | Merge pull request #12243 from PolynomialDivision/feature/update_dawn_latestRosen Penev2020-05-23
|\ \ \ | | | | | | | | dawn: update to latest version
| * | | dawn: update to latest versionNick Hainke2020-05-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Includes: - dawn_iwinfo: fix whitespace - dawn_iwinfo: indentation - dawn_iwinfo: iwinfo_finish(); - dawn_iwinfo: filter out global interface - dawn_iwinfo: release iwinfo after usage - tcpsocket: fix port print - github: set CONFIG_SRC_TREE_OVERRIDE in actions CI - github: fix link to dawn source - github: use v2 for checkout action - github: add GitHub Actions CI - ubus: only update TCP socket list when using TCP connections - add notice that full wpad is requirement - fix link to luci-app-dawn - update readme and install instructions Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | Merge pull request #12252 from BKPepe/knot-disable-libcap-ngRosen Penev2020-05-22
|\ \ \ \ | | | | | | | | | | knot: disable libcap-ng
| * | | | knot: disable libcap-ngJosef Schlehofer2020-05-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Recently, there was added libcap-ng to OpenWrt packages feed, which is optional for Knot DNS. It enables POSIX 1003.1e capabilities. This can restrict root (by default it runs as root) permissions and might harm and as there isn't systemd on OpenWrt it can interfere. There is an added patch, which introduced an option to disable libcap-ng. This will be part of the next release. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | fastd: update to v19Matthias Schiffer2020-05-22
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* | | | | seafile-server: Update to 7.1.4, refresh patchesJeffery To2020-05-21
| |/ / / |/| | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | bind: update to version 9.16.3Josef Schlehofer2020-05-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes: CVE-2020-8616 CVE-2020-8617 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | Merge pull request #12232 from neheb/cifsRosen Penev2020-05-20
|\ \ \ \ | | | | | | | | | | cifs-utils: fix compilation
| * | | | cifs-utils: fix compilationRosen Penev2020-05-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Now that libcap-ng is in the tree, cifs-utils is picking it up. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | openvswitch: fix file generation in /etc/modules.dYousong Zhou2020-05-20
| | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> Reported-by: Paul Spooren <mail@aparcar.org>
* | | | | Merge pull request #12215 from BKPepe/unbound-1.10.1Josef Schlehofer2020-05-20
|\ \ \ \ \ | |/ / / / |/| | | | unbound: update to version 1.10.1 (security fix)
| * | | | unbound: update to version 1.10.1Josef Schlehofer2020-05-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes: CVE-2020-12662 CVE-2020-12663 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | Merge pull request #12210 from jefferyto/etesync-server-minor-cleanupHannu Nyman2020-05-19
|\ \ \ \ \ | |_|/ / / |/| | | | etesync-server: Minor Makefile cleanup
| * | | | etesync-server: Minor Makefile cleanupJeffery To2020-05-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Replace creating an empty PYTHON3_PKG_DIR with setting filespec to an empty value * Disable the default Python package build recipe (with PYTHON3_PKG_BUILD:=0) and set an empty Build/Compile * Remove VARIANT:=python3 and PROVIDES (providing the same name as the package) * Add PKG_BUILD_PARALLEL:=1 Signed-off-by: Jeffery To <jeffery.to@gmail.com>