| Commit message (Collapse) | Author | Age |
|\
| |
| | |
pdns: update to 4.2.2
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Updates pdns to latest release in the 4.2 series.
Full change log for this release is available at:
https://doc.powerdns.com/authoritative/changelog/4.2.html#change-4.2.2
Signed-off-by: James Taylor <james@jtaylor.id.au>
|
|\ \
| | |
| | | |
pdns-recursor: update to 4.2.2
|
| |/
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Updates pdns-recursor to latest release in the 4.2 series.
Includes backported fixes for CVE-2020-10995, CVE-2020-12244 and
CVE-2020-10030, plus avoid a crash when loading an invalid RPZ.
Full change log for this release is available at:
https://doc.powerdns.com/recursor/changelog/4.2.html#change-4.2.2
Signed-off-by: James Taylor <james@jtaylor.id.au>
|
| |
| |
| |
| |
| |
| |
| | |
Prepare DAWN for prometheus-node-exporter by always showing the whole
network overview.
Signed-off-by: Nick Hainke <vincent@systemli.org>
|
| |
| |
| |
| |
| | |
Reported-by: Paul Spooren <mail@aparcar.org>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This is needed since openvswitch 2.13 commit 2a97891eb23b
("Documentation: Work with sphinx-build for Python 3 also.")
The 4th patch was also reworked to serve as another guard
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
|
|\ \
| | |
| | | |
nginx-util: fix issues and cleanup
|
| |/
| |
| |
| |
| |
| |
| |
| |
| |
| | |
* fix regex capture (to conform std)
* fix issues for Clang/libcxx (warnings/includes)
* fix CONFLICTS in the Makefile
* use /bin/sh in host scripts and shellcheck them
* add callback for setting arguments in ubus::call
Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
|
| |
| |
| |
| | |
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
|
|\ \
| | |
| | | |
sslh: add transparent proxy support
|
| | |
| | |
| | |
| | |
| | |
| | | |
Upstream will drop support for the ssl option in the next future version.
Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Compile with USELIBCAP=1 to make use of POSIX capabilities. This will
save the required capabilities needed for transparent proxying for
unprivileged processes.
Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
|
|\ \ \
| | | |
| | | | |
transmission: init script check syscall list for seccomp
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
|
| |_|/
|/| |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Build is failing because HWTSTAMP_TX_ONESTEP_P2P is defined anymore on
linux net_tstamp.h.
Moreover, the usual way of linuxptp build is looking for system includes
unless user defines differently. That also was tried to fix.
PKG_RELEASE bumped to 3.
Signed-off-by: Paulo Machado <pffmachado@yahoo.com>
|
|\ \ \
| |/ /
|/| | |
knot: update to version 2.9.5
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Removed patch
`03-configure-allow-to-manually-disable-POSIX-capabiliti.patch` that has been backported into release.
Signed-off-by: Jan Hak <jan.hak@nic.cz>
|
|\ \ \
| |/ /
|/| | |
transmission: update to 3.0
|
| | |
| | |
| | |
| | |
| | |
| | | |
remove upstreamed patches. Refresh remaining one.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
The existing interface selection/detection code was incomprehensible at
worst and convoluted at best. The uci config file suggested it
understood an external ipv6 interface but in reality the init script
took no notice. Re-work it so it is at least comprehendible and takes
notice of ipv6 interface details if specified.
Update the hotplug script to use the same interface selection/detection
code as the init script and take note of ipv6 interface selection, only
restarting miniupnpd on interface up events and only if that interface
isn't already known (for that ip class) by miniupnpd.
For me this has solved numerous 'flaky' startup problems, especially
with regard to ipv6.
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
|
|\ \ \
| | | |
| | | | |
modemmanager: set interface MTU based on bearer settings
|
| |/ /
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Using the same method used by other protocol handlers like uqmi.
Fixes https://github.com/openwrt/packages/issues/11383
Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
|
|/ /
| |
| |
| |
| |
| |
| |
| | |
Fixes:
CVE-2020-3341
CVE-2020-3327
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
|
|\ \
| | |
| | | |
uwsgi: make luci-webui single threaded and log more
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
More threads can lead to a problem if a luci-app makes a fork
(e.g. for executing a command). Parallelism is still achieved
by using `processes = 3`.
Make the log more verbose by filtering only standard messages
for start/stop/reload out (leaving one line each).
Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
|
|\ \ \
| | | |
| | | | |
nginx: set log level to crit for luci-static
|
| | |/
| |/|
| | |
| | |
| | |
| | | |
Do not write errors for inexistent files to the system log.
Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
|
|/ /
| |
| |
| |
| |
| | |
* limit domain name length to max. 63 chars
to fix issues with energized sources
Signed-off-by: Dirk Brenken <dev@brenken.org>
|
|\ \
| | |
| | | |
nginx: do not reduce max processes
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Use the upstream value for NGX_MAX_PROCESSES (=1024) again.
So it is safe to use `worker_processes auto;` (which sets it to
the number of CPUs). Also use this directive in the conf instead
of calculating the number in the init and passing it as argument.
Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* update energized source urls, add ultimate variant
* switch shalla source to http (invalid server certificate)
* add another stevenblack source variant (normal / porn)
* small cornercase fixes
* update readme
Signed-off-by: Dirk Brenken <dev@brenken.org>
|
|\ \ \
| | | |
| | | | |
dawn: update to latest version
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Includes:
- dawn_iwinfo: fix whitespace
- dawn_iwinfo: indentation
- dawn_iwinfo: iwinfo_finish();
- dawn_iwinfo: filter out global interface
- dawn_iwinfo: release iwinfo after usage
- tcpsocket: fix port print
- github: set CONFIG_SRC_TREE_OVERRIDE in actions CI
- github: fix link to dawn source
- github: use v2 for checkout action
- github: add GitHub Actions CI
- ubus: only update TCP socket list when using TCP connections
- add notice that full wpad is requirement
- fix link to luci-app-dawn
- update readme and install instructions
Signed-off-by: Nick Hainke <vincent@systemli.org>
|
|\ \ \ \
| | | | |
| | | | | |
knot: disable libcap-ng
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Recently, there was added libcap-ng to OpenWrt packages feed,
which is optional for Knot DNS. It enables POSIX 1003.1e capabilities.
This can restrict root (by default it runs as root) permissions and
might harm and as there isn't systemd on OpenWrt it can interfere.
There is an added patch, which introduced an option to disable libcap-ng.
This will be part of the next release.
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
|
| |/ / /
|/| | |
| | | |
| | | | |
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Fixes:
CVE-2020-8616
CVE-2020-8617
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
|
|\ \ \ \
| | | | |
| | | | | |
cifs-utils: fix compilation
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Now that libcap-ng is in the tree, cifs-utils is picking it up.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Reported-by: Paul Spooren <mail@aparcar.org>
|
|\ \ \ \ \
| |/ / / /
|/| | | | |
unbound: update to version 1.10.1 (security fix)
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Fixes:
CVE-2020-12662
CVE-2020-12663
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
|
|\ \ \ \ \
| |_|/ / /
|/| | | | |
etesync-server: Minor Makefile cleanup
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
* Replace creating an empty PYTHON3_PKG_DIR with setting filespec to an
empty value
* Disable the default Python package build recipe (with
PYTHON3_PKG_BUILD:=0) and set an empty Build/Compile
* Remove VARIANT:=python3 and PROVIDES (providing the same name as the
package)
* Add PKG_BUILD_PARALLEL:=1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
|