Commit Graph

9141 Commits (115bf07f6c449a17bf12a3e7e065ff252a772e6f)

Author SHA1 Message Date
Florian Eckert 493bf98d69
Merge pull request #17785 from TDT-AG/pr/20220204-stunnel
stunnel: update version to 5.62
2022-02-07 09:12:40 +01:00
Florian Eckert 9dbcfadf88
Merge pull request #17784 from TDT-AG/pr/20220204-keepalived
keepalived: update version to 2.2.7
2022-02-07 09:12:28 +01:00
Stan Grishin 88265c4fb9 https-dns-proxy: init script refactoring
* consolidate dnsmasq config manipulation into one function
* more elegant code for PROCD data processing (Thanks @jow-!)

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2022-02-06 06:00:03 +00:00
Tianling Shen c7b5e7ed67 v2rayA: Update to 1.5.6.2
Manually added new env variable `XDG_DATA_HOME` which won't be passed
by procd by default.

Removed upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-02-04 08:28:41 -08:00
Tianling Shen 8465053a58 v2raya: init: convert arguments into env variables
Suggested by upstream, to provide forward compatibility.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-02-04 08:28:41 -08:00
Tianling Shen d8d261fe2d xray-core: Update to 1.5.3
Removed outdated `alterId` in sample config.

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-02-04 08:28:20 -08:00
Florian Eckert d7b73fb195 stunnel: update version to 5.62
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-02-04 08:16:33 +01:00
Florian Eckert 792d745a59 keepalived: update version to 2.2.7
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-02-04 08:14:42 +01:00
Hannu Nyman f21774629c
Merge pull request #17671 from tohojo/sqm-nft
sqm-scripts: Change iptables dependency to iptables-nft
2022-02-03 20:00:09 +02:00
Florian Eckert cb4719789c
Merge pull request #17748 from neheb/8
xinetd: fix bad printf formats
2022-02-03 09:16:28 +01:00
Stan Grishin b59938c86e
Merge pull request #17762 from stangri/master-https-dns-proxy
https-dns-proxy: update to 2021-11-22-1
2022-02-02 09:12:20 -08:00
James White 435733a899 adguardhome: Bump adguardhome to v0.107.3 stable
Signed-off-by: James White <james@jmwhite.co.uk>
2022-02-02 07:25:37 -08:00
Josef Schlehofer 6c6c99ffb5 apache2: security update to version 2.4.52
Fixes CVEs:
- CVE-2021-44790
- CVE-2021-44224

Refreshed patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-02-02 07:24:59 -08:00
Philip Prindeville 2b00697f08 strongswan: Update to 5.9.5
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-02-01 23:24:46 -08:00
Toke Høiland-Jørgensen 698af2eb99 sqm-scripts: Change iptables dependency to iptables-nft
There's only one of the shaper scripts (simple.qos) that uses iptables, and
it should be fine with iptables-nft for compatibility with the new default
nft-based firewall. Confusingly, we still need the iptables-mod-ipopt
package to get the DSCP match module; we never used CONNMARK, though, so
drop the iptables-mod-conntrack-extra dependency while we're at it.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2022-02-01 23:30:17 +01:00
Nick Hainke 40b87aac95 wg-installer: use babeld add_interface function
With commit 385200443554 ("babeld: add add_interface function") babeld
has a new ubus function allowing to dynamically add an interface.

Before the add_interface function, we were required to reload babeld.
The reload influenced the babeld routing. However, the remove part is
still missing and will be added at a later stage.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-02-01 22:32:30 +01:00
Noah Meyerhans 127ef1207b bind: bump to 9.18.0
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2022-02-01 09:09:17 -08:00
Andy Walsh 1fa70d6a3c samba4: update to 4.14.12
* update to 4.14.12
* fixes: CVE-2021-44142, CVE-2022-0336

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2022-02-01 07:20:56 -05:00
Sergey V. Lobanov 0528707fd7 chaosvpn: fix build on macos
chaosvpn Makefile detects Darwin (macos) and changes compilation
flags for macos target, but OpenWrt is always Linux so build fails.
This patch redefines OS=Linux to use Linux compilation flags.

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-31 18:37:30 -08:00
Stan Grishin 1e5e7ce469 https-dns-proxy: update to 2021-11-22-1
* update to 2021-11-22 upstream source
* update patch file
* update init script to preserve manual entries
	(fixes https://github.com/stangri/source.openwrt.melmac.net/issues/149)
* update init script service_triggers

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2022-01-31 22:15:04 +00:00
Sergey V. Lobanov 43372343ee nut: fix build on macos
nut build fails on macos due to:
1. configure script can not use AR env var due to OpenWrt build
system provides only executable name (e.g. aarch64-openwrt-linux-musl-gcc-ar)
but configure script checks if AR has '/'. As a result, configure
script ignores AR env var and uses system `ar` but macos `ar` is
not compatible with the objects generated by OpenWrt GCC toolchain.

This commit explicitly sets ac_cv_path_AR=$(TARGET_AR) to use
OpenWrt toolchain AR.

2. configure script detects if build host is macos and adds
macosx_ups driver as a build target, but this driver can not be
build with OpenWrt toolchain because OpenWrt is Linux.

This commit explicitly disables macosx_ups driver using configure
flag --without-macosx_ups

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-31 13:57:36 -08:00
Sergey V. Lobanov f01baee526 softethervpn: fix build on macos
host-compile fails on macos due to several reasons:
1. host-compile Makefile always selected for linux
2. macos host cc (clang) fails due to implicit-function-declaration
3. ar and ranlib tools are hardcoded in softethervpn Makefiles

All three issues are fixed by this patch

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-31 13:57:22 -08:00
Rosen Penev e87e3406ee bridge-utils: update to 1.7.1
Added missing limits header for PATH_MAX.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-01-31 07:08:39 -08:00
Rosen Penev 31a8112c51 linuxptp: fix bad formats with ppc64 and mips64
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-01-31 07:04:17 -08:00
André Herbst 07dec08c78 ddns-scripts: remove extra pipe
The extra pipe caused an error WARN : PID 'xyz' exit WITH ERROR '2' when executing ddns update.
Signed-off-by: André Herbst <moormaster@gmx.net>
2022-01-31 10:46:40 +01:00
Rosen Penev d438d1295c xinetd: fix bad printf formats
Easier to use the proper C macro.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-01-30 23:27:41 -08:00
Sergey V. Lobanov ae7b158723 knxd: fix build on macos
knxd compilation fails on macos due to clang does not support
exit() builtin function that is used to detect build cc

This commit adds a patch to fix this issue (replaces `exit 0` by
`return 0` in conftest.c)

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-30 23:08:41 -08:00
Tianling Shen eeb3143a88 dnsproxy: Update to 0.41.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-01-30 15:44:05 -08:00
Thibaut VARÈNE 8c78c33fed coova-chilli: add interface_trigger "wan"
This intends to replace the hotplug script. It still hardcodes "wan"
interface name (as several other packages do) for lack of a deterministic
way to detect the actual wan iface before it is brought up, but at least
it is fully integrated with procd and will not start a disabled service.

The interface trigger forcefully restarts chilli as a simple reload may
not be sufficient to recover from wan changes.

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
2022-01-29 21:02:28 -08:00
Thibaut VARÈNE a3e125267c coova-chilli: remove hotplug call
This hotplug trigger unconditionaly restarts coova-chilli when the "wan"
interface sees action "ifup", without checking whether or not the
service is disabled or the upstream interface is actually called "wan".

This hotplug could be replaced by a suitable service trigger instead.

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
2022-01-29 21:02:28 -08:00
Thibaut VARÈNE b1fb66e007 coova-chilli: execute firewall cleanup at shutdown
Coova Chilli creates "undo" firewall scripts that are intended to be run
when the daemon is shut down. Failure to do so results in leftover
entries in firewall and duplicated ones if chilli is subsequently
restarted.

Execute these scripts when the service stops.

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
2022-01-29 21:02:28 -08:00
Thibaut VARÈNE 06193dfdd6 coova-chilli: postpone startup until wan is available
Coova Chilli will fail to start if e.g. it cannot resolve names in its
configuration (like uamserver, radiusserver, etc) which is typically the
case when wan is unavailable. Prevent this situation by delaying startup
if wan is not available.

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
2022-01-29 21:02:28 -08:00
Rosen Penev 6e4bf0deaf radsecproxy: fix compilation with newer GCC
Errors on uninitialized variable. Only on powerpc64 for some reason.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-01-29 16:38:49 -08:00
Philip Prindeville b8f1dcd22f
Merge pull request #17718 from pprindeville/isc-dhcp-fix-srvhost-rr
isc-dhcp: properly anchor SRV RR's
2022-01-28 22:33:24 -07:00
Philip Prindeville 93c9a1cb7a isc-dhcp: properly anchor SRV RR's
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-01-28 21:32:53 -07:00
Josef Schlehofer dcedbe8027 prosody: update to version 0.11.13
Fixes CVEs:
- CVE-2022-0217
- CVE-2021-37601
- CVE-2021-32918
- CVE-2021-32920
- CVE-2021-32921
- CVE-2021-32917
- CVE-2021-32919

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-01-28 12:10:09 -08:00
Andy Walsh 7730a65d30 samba4: update to 4.14.11; fix AD_DC build
* update to 4.14.11
* fix AD_DC build
* add vfs_widelinks to defaults
* refresh patches
* fixes: #16697, #17692
* fixes: CVE-2016-2124, CVE-2020-25717, CVE-2020-25718, CVE-2020-25719, CVE-2020-25721, CVE-2020-25722, CVE-2021-3738, CVE-2021-23192

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2022-01-28 12:09:09 -08:00
Sergey V. Lobanov 768a832df1 isc-dhcp: fix build on macos
isc-dhcp uses system ar tool so build fails on Darwin build host.
Embedded bind lib uses system ar and ranlib tools and fails on Darwin

This patch explicitly specifies ar and ranlib tools for target build

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-28 12:08:27 -08:00
Josef Schlehofer 98332fea15
Merge pull request #17713 from turris-cz/clamav-update
clamav: update to version 0.104.2
2022-01-28 17:34:48 +01:00
Josef Schlehofer eddbb64bc9
clamav: update to version 0.104.2
Backported upstream pending pull request to fix following error:

CMake Error at /foo/staging_dir/host/share/cmake-3.19/Modules/FindPackageHandleStandardArgs.cmake:218 (message):
  Could NOT find CURSES (missing: CURSES_LIBRARY)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-01-28 15:22:32 +01:00
Kerma Gérald d2fd1f8346 crowdsec: update from latest upstream release 1.3.0
Changes (from 1.2.3):
https://github.com/crowdsecurity/crowdsec/compare/v1.2.3...v1.3.0

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-27 17:43:16 -08:00
Florian Eckert 64da77a4fd
Merge pull request #17646 from LugicoHDPlayer/feature-ddns-scripts-one-com
ddns-scripts: add one.com provider
2022-01-27 16:06:09 +01:00
Luca Conte 60047cdce1 ddns-scripts: add one.com provider
Signed-off-by: Luca Conte <main@lugico.de>
2022-01-27 13:59:42 +01:00
Hannu Nyman 569f3710fe miniupnpd: declare nftables variant as DEFAULT_VARIANT
Declare the nftables variant as the DEFAULT_VARIANT
as nftables firewall4 is the now default in OpenWrt.

Additionally,
 * toggle CONFLICTS placement to avoid circular dependency warning
 * use AUTORELEASE

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2022-01-26 13:11:05 -05:00
Tianling Shen ad608b5ca7 dnsproxy: Update to 0.40.6
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-01-25 15:30:38 -08:00
Peter van Dijk c3d2311e35 pdns: update to 4.6.0
* Bump to 4.6.0
* Remove "random" backend as it is gone upstream

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2022-01-25 15:30:30 -08:00
Jan Hoffmann 948f0d29cc vnstat2: update to version 2.9
Signed-off-by: Jan Hoffmann <jan@3e8.eu>
2022-01-25 21:54:48 +01:00
Daniel Bermond 9baa761936 proxychains-ng: update to version 4.16
Maintainer: me

Build system: Arch Linux x86_64
Build tested: ipq806x/R7800
Run tested  : ipq806x/R7800

Signed-off-by: Daniel Bermond <danielbermond@gmail.com>
2022-01-25 21:54:13 +01:00
Nick Hainke 94efdcf02a wg-installer: fix multiple namespaces
Add flag "--lookup-default-namespace" to signal that wg-installer should
look already established wireguard sessions in the default namespace.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-23 00:08:32 +01:00
Stijn Tintel 59af1d0694
Merge pull request #17543 from stintel/vallumd
vallumd: bump to 0.2.0
2022-01-22 16:59:25 +02:00