Commit Graph

10744 Commits

Author SHA1 Message Date
Jochen Dolze
83d5a08515 apinger: fixed bugs in apinger.init and apinger.rpc
Fix bug in init_apinger_config - debug/status_interval/rrd_interval were never set correctly
Fix bug in apinger_status - send and receive were swapped
Fix bug in apinger_status - added ability to use ipv6 on wan6

Signed-off-by: Jochen Dolze <jochen.dolze@schulergroup.com>
2023-10-28 10:16:43 +00:00
Florian Eckert
79b814047c Merge pull request #22427 from Linaro1985/update_mm_1.22.0
modemmanager: bump to 1.22.0
2023-10-18 08:49:10 +02:00
Maxim Anisimov
5a81a131b6 modemmanager: bump to 1.22.0
- switch to builtin plugins
- import upstream patch for fixing support of ublox LARA-R6001 / LARA-R6001D modules
  (see: https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/779)

Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
2023-10-18 07:35:44 +03:00
Stan Grishin
38c026250f https-dns-proxy: bugfix: logging crashing instances on ath79
* finally fixes https://github.com/openwrt/packages/issues/19366
* simplify service_triggers
* improve output for dnsmasq restart
* improve grep/sed dependencies
* remove interface hotplug

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2023-10-17 09:46:19 +00:00
Tianling Shen
03a69f84bc v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-10-16 17:14:34 +08:00
Michal Hrusecky
c9c5f62e30 samba4: Update to version 4.18.8
Mainly security release, fixing CVE-2023-3961, CVE-2023-4091,
CVE-2023-4154, CVE-2023-42669 and CVE-2023-42670. For more details see:
https://www.samba.org/samba/history/samba-4.18.8.html

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2023-10-16 07:15:46 +02:00
Philip Prindeville
7b998865ad isc-dhcpd: Redux of convenience functions avoiding sed/cut
Also minimize messing with $IFS.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2023-10-15 22:18:09 -06:00
Philip Prindeville
96e720bb6b isc-dhcp: Use 'append' instead of manually appending
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2023-10-15 22:17:51 -06:00
Philip Prindeville
a6d6475cd5 Merge pull request #22414 from pprindeville/isc-dhcp-no-empty-ranges
isc-dhcp: refuse to add empty DHCP ranges
2023-10-15 22:14:24 -06:00
Leon M. Busch-George
dd2daafc6e isc-dhcp: refuse to add empty DHCP range
ipcalc.sh no longer outputs invalid ranges and fails with an error code in
such cases. React to the error.

Signed-off-by: Leon M. Busch-George <leon@georgemail.eu>
2023-10-15 21:35:14 -06:00
Leon M. Busch-George
3ad482078b isc-dhcp: adapt to new ipcalc paradigm
With #12925, 'BROADCAST' will no longer be set if there is no local
broadcast address (rather than holding the global broadcast address).
Prepare for the merge but stay compatible with the old version of ipcalc.

Signed-off-by: Leon M. Busch-George <leon@georgemail.eu>
2023-10-15 21:33:15 -06:00
Nikos Mavrogiannopoulos
f1c7d1742c Merge pull request #22404 from vgaetera/openconnect-pfs
openconnect: add support for option --pfs
2023-10-15 12:01:34 +02:00
Vladislav Grigoryev
4af0378ef9 openconnect: add support for option --pfs
Add support for the OpenConnect option `--pfs`.
Designed to require perfect forward secrecy.

Signed-off-by: Vladislav Grigoryev <vg.aetera@gmail.com>
2023-10-14 15:30:15 +03:00
Oskari Rauta
53dc7146f4 netbird: update to 0.23.9
Changelog:
 - Add Pagination for IdP Users Fetch by @bcmmbaga in #1210
 - Rework peer connection status based on the update channel existence by @surik in #1213
 - Fix nil pointer exception in group delete by @pappz in #1211
 - Fix/key backup in config script by @pappz in #1206

Full changelog: https://github.com/netbirdio/netbird/compare/v0.23.8...v0.23.9

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-10-14 17:29:30 +08:00
Peter van Dijk
b19f8a822b dnsdist: update to 1.8.2
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2023-10-14 11:26:02 +08:00
Christian Marangi
32d53eae35 nginx: fix nginx lua module compilation error
Add pending patch fixing compilation error for missing pcre.h.

This is caused by a bug on their end by trying to add pcre.h even if we
are using the PCRE2 library.

Fixes: f0754531c4 ("nginx: move to PCRE2")
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-10-13 20:35:42 +02:00
Tianling Shen
da5ac5da83 dnsproxy: Update to 0.56.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-10-11 22:48:22 +08:00
Jeffery To
0dfc1b508d rust: Use make's jobserver when building packages
This allows cargo to use make's jobserver when building packages, by
marking the cargo command as recursive (with the + prefix[1]) and
setting MAKEFLAGS.

This also:

* Give cargo/x.py the build directory instead of having to change the
  current directory (and opening subshells)

* Set PKG_BUILD_PARALLEL/HOST_BUILD_PARALLEL for Rust packages to enable
  the use of make's jobserver

[1]: https://www.gnu.org/software/make/manual/html_node/POSIX-Jobserver.html

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-10-11 15:50:24 +08:00
Jeffery To
9db7284d58 rust: Consolidate cargo environment variables
This consolidates all environment variables for cargo into:

* CARGO_HOST_CONFIG_VARS / CARGO_PKG_CONFIG_VARS

  These contain all cargo-specific environment variables, i.e. without
  "common" variables like CC.

* CARGO_HOST_VARS / CARGO_PKG_VARS (renamed from CARGO_VARS)

  These contain all environment variables to be passed to cargo.

This also:

* Set the CARGO_BUILD_TARGET environment variable instead of using the
  --target command-line option

* Update Python include files to use CARGO_HOST_CONFIG_VARS /
  CARGO_PKG_CONFIG_VARS

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-10-11 15:50:23 +08:00
Michal Hrusecky
5167111691 curl: Update to version 8.4.0
For detailed changes, see https://curl.se/changes.html#8_4_0
Switching to tar.bz2 for the time being as tar.xz is not yet available.
Fixes CVE-2023-38546 and CVE-2023-38545.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2023-10-11 09:17:21 +02:00
Tianling Shen
93cbaacbfb Merge pull request #22348 from miska/samba4
samba4: Update to version 4.18.7
2023-10-11 09:50:42 +08:00
Tianling Shen
e8597c2a7f Merge pull request #22345 from muink/patch-1
librespeed-go: Reload the daemon after modifying the tls certificate
2023-10-11 09:40:08 +08:00
Nick Hainke
9bd39a33b1 snowflake: update to 2.6.1
Release Notes:
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/tags/v2.6.1

Remove upstreamed patches:
- 0001-Bump-minimum-required-version-of-go.patch
- 0002-Update-dependencies.patch

Signed-off-by: Nick Hainke <vincent@systemli.org>
2023-10-10 10:30:28 +02:00
Tianling Shen
503825ef41 cloudreve: Update to 3.8.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-10-10 10:30:17 +08:00
Anya Lin
fd1d506fff librespeed-go: Reload the daemon after modifying the tls certificate
Make the daemon reload after the tls certificate is updated

Signed-off-by: Anya Lin <hukk1996@gmail.com>
2023-10-10 09:13:14 +08:00
Michal Hrusecky
eb7d756e79 samba4: Update to version 4.18.7
Update to the latest stable version in 4.18 series, for details, see
https://www.samba.org/samba/history/samba-4.18.7.html

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2023-10-09 08:41:46 +02:00
Florian Eckert
a2653fe7ca Merge pull request #22303 from perrin4869/ddns-scripts/add-samples-to-package
ddns-scripts: add samples to package
2023-10-09 08:36:16 +02:00
Sergey Ponomarev
08e3c43607 pppossh: depend on dbclient
The package should not only depend on a package dropbear but on the dbclient.
Otherwise the dbclient may be disabled during compilation and the dependency will be not satisfied.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-09 13:54:25 +08:00
Tianling Shen
303f0ad5ed dnsproxy: Update to 0.56.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-10-09 11:38:58 +08:00
Tianling Shen
02b723bec3 v2ray-core: Update to 5.8.0
Removed upstreamed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-10-09 11:38:50 +08:00
Kaveh Dadgar
b1fc3754b3 v2ray-geodata: add package v2ray-geosite-ir
"Iran Hosted Domains" is a comprehensive list of Iranian domains and services that are hosted within the country.

Signed-off-by: Kaveh Dadgar <Kavehdadgar666@protonmail.com>
2023-10-09 10:10:25 +08:00
Zephyr Lykos
5cd966ca4f tailscale: Update to 1.50.1
https://github.com/tailscale/tailscale/releases/tag/v1.50.1

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
2023-10-09 10:09:41 +08:00
Oskari Rauta
ff93e4a19d cni-protocol: update protocol
Changes to protocol file and it's description.
Works better now and restarts firewall automaticly
when tunnel comes available. More informative/guiding
description.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-10-09 10:09:22 +08:00
Leo Douglas
bf7ce353b8 sing-box: update to v1.5.2
* Enable `with_ech` and `with_dhcp`, just like upstream
* See changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.5.2

Signed-off-by: Leo Douglas <douglarek@gmail.com>

sing-box: ShadowsocksR is marked as deprecated since v1.5.0

Signed-off-by: Leo Douglas <douglarek@gmail.com>

sing-box: remove dhcp by default

Signed-off-by: Leo Douglas <douglarek@gmail.com>
2023-10-09 10:09:04 +08:00
Stijn Tintel
af48372e37 kea: bump to 2.4.0
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2023-10-08 14:19:18 -07:00
Stijn Tintel
58558c8834 kea: bump to 2.2.1
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2023-10-08 14:19:18 -07:00
Nuno Gonçalves
597df3585f esp2net: add Espressif ESP chip USB-Network proxy
Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>
2023-10-08 17:40:50 +01:00
Glenn Strauss
3e9b2d85f0 lighttpd: update to lighttpd 1.4.72 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2023-10-08 20:41:16 +08:00
Olivier Poitrey
4e0d43a8d9 nextdns: Update to version 1.41.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2023-10-08 14:06:57 +03:00
Sergey Ponomarev
fdaf530950 sshtunnel: update version to 5.1
Make it depends on ether Dropbear dbclient or OpenSSH client

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
1a92dbcf32 sshtunnel: allow empty port and user
A user may have some host configured in the .ssh/config with user and port.
But we anyway have to specify them in the sshtunnel.
The change fixes this

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
9ea6f35194 sshtunnel: add enabled option
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
9dd8a62238 sshtunnel: allow empty remoteaddress
Just empty or * may have some semantic difference on a server

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
1d9f10a135 sshtunnel: StrictHostKeyChecking for Dropbear
The dbclient doesn't support the -o StrictHostKeyChecking but it has it's own -y option:
-y    Always accept remote host key if unknown
-y -y Don't perform any remote host key checking (caution)

So we can add these options to make the StrictHostKeyChecking working.
The dbclient will ignore -o StrictHostKeyChecking but use the -y or -yy instead.

The only problem is that the -y flag is also used by the openssh-client:

-y Send log information using the syslog(3) system module.  By default this information is sent to stderr.

This is not critical and once the dbclient start to support the StrictHostKeyChecking we can remove the -y flag.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
f14dae7bc9 sshtunnel: Use -i $IdentityFile instead of -o IdentityFile=$IdentityFile
This makes the sshtunnel compatible with Dropbear.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
714c97b012 sshtunnel: set StrictHostKeyChecking=accept-new by default
Without the option the ssh will propt a user to accept the host key.
So a user should perform a connection manualy and accept before useing the sshtunnel.
The accept-new is a reasonable trade off.

Also the LogLevel is INFO by default.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
2a5f9dbcc7 sshtunnel: uci_sshtunnel use example.com
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
41635f946c sshtunnel: uci_sshtunnel simplify
Simplify comment and make it shorter.
Remove triling tab after retrydelay.
Use a full path for IdentityFile because otherwise the uci validation fails with the relative path ~/.ssh

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Jeffery To
1dce408385 Merge pull request #22309 from BKPepe/tor-fw-helper
tor-fw-helper: remove it
2023-10-07 18:52:07 +08:00
Stan Grishin
7d0557fad4 Merge pull request #22311 from stangri/master-adblock-fast
adblock-fast: bugfix: properly identify hosts-files
2023-10-06 16:42:32 -06:00