Commit Graph

7861 Commits

Author SHA1 Message Date
Andy Walsh 97e55a28b3 samba4: update to 4.13.3, enbale io_uring
* update to 4.13.3
* enable vfs io_uring module by default, if kernel supports it
* fix for possible exploit openwrt/packages#13758
* sanetize all external template/config inputs
* fix some shellcheck warnings
* remove old aio modules/deps

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-01-08 17:28:36 +01:00
Rosen Penev 8ede7162e5
Merge pull request #14415 from linosgian/openssh_add_fido2_support
openssh: Add FIDO2 hardware token support
2021-01-08 03:33:34 -08:00
Linos Giannopoulos 855db864b0 openssh: Add FIDO2 hardware token support
Version 8.2[0] added support for two new key types: "ecdsa-sk" and
"ed25519-sk". These two type enable the usage of hardware tokens that
implement the FIDO (or FIDO2) standard, as an authentication method for
SSH.

Since we're already on version 8.4 all we need to do is to explicitly enable
the support for hardware keys when compiling OpenSSH and add all the
missing dependencies OpenSSH requires.

OpenSSH depends on libfido2[1], to communicate with the FIDO devices
over USB. In turn, libfido2 depends on libcbor, a C implementation of
the CBOR protocol[2] and OpenSSL.

[0]: https://lwn.net/Articles/812537/
[1]: https://github.com/Yubico/libfido2
[2]: tools.ietf.org/html/rfc7049

Signed-off-by: Linos Giannopoulos <linosgian00@gmail.com>
2021-01-07 00:53:05 +02:00
Daniel Golle 9ea8cccd35 transmission: add syscalls needed on PPC to seccomp rules
Add fadvise64_64 and fchmod syscalls needed on PowerPC platforms to
seccomp rules of transmission-daemon.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-01-06 22:17:40 +00:00
Stan Grishin e948d41622 https-dns-proxy: update to 2020-11-25: add HTTP auth and DSCP codepoint support
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-01-06 11:48:07 -10:00
Rosen Penev b4762c7e6f
Merge pull request #14063 from peter-stadler/etebase
[RFC] etebase: add package
2021-01-06 13:43:27 -08:00
Rosen Penev 67bd007f26
Merge pull request #13405 from peter-stadler/nginx-util-uci
[RFC] nginx-util: use UCI for server configuration
2021-01-06 13:43:12 -08:00
Rosen Penev fbdab5bb08
Merge pull request #14299 from wulfy23/nftqosinit
nft-qos: silence buildsystem errors
2021-01-05 17:30:27 -08:00
Rosen Penev e29ef2fc57
Merge pull request #14416 from dobo90/adguardhome_v0.104.3
[v2] adguardhome: upstream upgrade to v0.104.3
2021-01-05 17:16:26 -08:00
Rosen Penev 6b1f0439e8
Merge pull request #14362 from neheb/hwd
hwdata: introduce package and use
2021-01-03 15:17:59 -08:00
Dobroslaw Kijowski 85f8fd69bc adguardhome: upstream upgrade to v0.104.3
Full changelog available at:
 * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.104.2
 * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.104.3

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
2021-01-03 13:42:31 +01:00
Etienne Champetier 9ef2e619b9
Merge pull request #14413 from aaronjg/bugfix/mwan3-ipv6-regression
mwan3: fix regression in ipv6 routing tables
2021-01-03 05:47:51 -05:00
Aaron Goodman 267b65ad9f mwan3: fix regression in ipv6 routing tables
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2021-01-02 21:37:37 -05:00
Maxim Storchak 40555eebf9 rsync: enable iconv if NLS support is enabled globally
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2021-01-02 22:52:52 +02:00
Rosen Penev 33cc6d0990
Merge pull request #14402 from wongsyrone/update-miniupnpc
net/miniupnpc: update to 2.2.1
2021-01-01 11:28:32 -08:00
Syrone Wong 3230f67d3a net/miniupnpc: update to 2.2.1
Signed-off-by: Syrone Wong <wong.syrone@gmail.com>
2021-01-01 22:16:42 +08:00
Syrone Wong 5eb01b5a3e net/miniupnpd: update to 2.2.1
Signed-off-by: Syrone Wong <wong.syrone@gmail.com>
2021-01-01 22:15:37 +08:00
Nikos Mavrogiannopoulos 60e7eee859
Merge pull request #14400 from FrederickGeek8/fix-14287
openconnect: Fix secondary password script overwriting primary
2021-01-01 11:51:56 +01:00
Frederick Morlock 5d85f5af63 openconnect: Fix secondary password script overwriting primary
When specifying a secondary password script, the output should be appended to the temporary password file and shouldn't overwrite it. If you refer to the case where there is a static secondary password, you can see that the secondary password is appended. Without this fix, only the secondary password is passed to the `openconnect` session.

Signed-off-by: Frederick Morlock <FrederickGeek8@gmail.com>
2021-01-01 17:18:27 +08:00
Rosen Penev 2dd17b0a79
Merge pull request #14342 from neheb/transmis
transmission: do not use wolfSSL
2020-12-31 22:21:40 -08:00
Rosen Penev b318690cfe
gitolite: change symlink from absolute to relative
Fixes bad symlink under InstallDev.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-31 18:10:27 -08:00
Rosen Penev 044b05fc04
transmission: do not use wolfSSL
There's some kind of crash internally in wolfSSL. It doesn't seem like
anyone knows how to fix it. Just disable it for now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-31 18:05:03 -08:00
Rosen Penev f84c7960f3
freeradius3: add missing libbsd dependency to glibc
Fixes packages generation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-31 15:38:32 -08:00
Etienne Champetier 423c276409
Merge pull request #14388 from Bloup1net/phantapresolv
phantap: Update to latest commit
2020-12-31 15:11:04 -05:00
Diana Dragusin ba6453889c phantap: Update to latest commit
a717723 Get resolvfile from configuration

Signed-off-by: Diana Dragusin <diana.dragusin@nccgroup.com>
2020-12-31 11:38:50 -05:00
Toke Høiland-Jørgensen 476e77be6b sqm-scripts: Update PKG_MIRROR_HASH
Forgot to update the MIRROR_HASH

Fixes: 2c652128c52e: ("sqm-scripts: Bump to v1.5.0")
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2020-12-31 17:28:15 +01:00
Toke Høiland-Jørgensen 2c652128c5 sqm-scripts: Bump to v1.5.0
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2020-12-31 16:18:15 +01:00
Rosen Penev 38913265b7
Merge pull request #14377 from neheb/bfd
bfdd: fix compilation with glibc
2020-12-31 00:20:10 -08:00
Rosen Penev 34a3e9bc09
Merge pull request #14374 from neheb/ksmbdt
ksmbd-tools: fix compilation with glibc
2020-12-30 17:35:24 -08:00
Rosen Penev c23556c8b0
Merge pull request #14375 from neheb/c
coova-chili: fix compilation with glibc
2020-12-30 17:24:38 -08:00
Rosen Penev 9a7c519f6e
Merge pull request #14379 from neheb/atft
atftp: fix compilation with glibc
2020-12-30 16:57:51 -08:00
Rosen Penev b90ce88d03
bfdd: fix compilation with glibc
Remove uClibc-ng patch as it's not in the tree anymore.

Also remove the _GNU_SOURCE CFLAG for the same reason.

Refreshed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-30 16:53:53 -08:00
Rosen Penev 9ac737ac80
atftp: fix compilation with glibc
It's defining two functions twice for some reason.

Refreshed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-30 16:37:57 -08:00
Rosen Penev 687dc0cc95
coova-chili: fix compilation with glibc
Disable Werror as it errors on pointless stuff.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-30 16:34:30 -08:00
Rosen Penev 5eeb8f8a79
ksmbd-tools: fix compilation with glibc
Needs to be linked to lpthread.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-30 16:32:58 -08:00
Nick Hainke 2922da5fe6 dawn: bump to latest version
Includes:
  CMakeList: fix compiling with glibc

Signed-off-by: Nick Hainke <vincent@systemli.org>
2020-12-31 00:14:25 +01:00
Dirk Brenken 33ed1eff57
banip: DHCPv6 bugfix
* ignore local DHCPv6 related and local icmpv6 traffic in banIP chain

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-12-30 20:02:40 +01:00
Rosen Penev 71cb006920
usbip: use new usbids package
It's more consistent since it installs to the same place.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-29 21:16:04 -08:00
Rosen Penev eb4a86a1bc
Merge pull request #14345 from lucize/frrup
frr: update stable to 2020-12-22
2020-12-28 18:07:31 -08:00
Glenn Strauss a49dec8a5f lighttpd: update to lighttpd 1.4.58 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2020-12-27 23:54:45 -05:00
Lucian Cristian 51a481ff94 frr: update stable to 2020-12-22
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-12-27 22:33:34 +02:00
Rosen Penev 3351568e9c
Merge pull request #14309 from neheb/squid
squid: update to 4.13
2020-12-24 19:18:04 -08:00
Rosen Penev 740740d219
Merge pull request #14318 from zhanhb/wget
wget: fix build
2020-12-23 14:04:34 -08:00
Thiago de Arruda Padilha 864092e073 adblock: fix when PROCD_RELOAD_DELAY is set
Move the "PROCD_RELOAD_DELAY" line to after the "delay" variable is set.

Signed-off-by: Thiago de Arruda Padilha <tpadilha84@gmail.com>
2020-12-23 16:59:32 -03:00
Huangbin Zhan 422360510c wget: fix build
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2020-12-23 23:07:31 +08:00
Rosen Penev f73287dec1
squid: update to 4.13
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-22 19:23:19 -08:00
Rosen Penev 87177eef75
tcpreplay: fix compilation with Arch Linux
It tries to link to host libraries for some reason. Add autoreconf to
fix. Also remove redundant prefixes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-22 19:01:12 -08:00
Karel Kočí 0663d8c2f8
wget: rename wget to wget-ssl
The idea behind this is to prevent confusion between "virtual" package
wget and real one. Wget is provided by not just wget packages but also
by uclient-fetch so technically it is better to threat wget as virtual
package.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
2020-12-22 17:58:30 +01:00
Imran Khan f88485f572 nft-qos: silence buildsystem errors
add IPKG_INSTROOT to init script to
silence build system errors

Signed-off-by: Imran Khan <gururug@gmail.com>
2020-12-23 02:21:09 +11:00
Florian Eckert 1b1fa35436
Merge pull request #14292 from TDT-AG/pr/20201221-mwan3
mwan3: minor fixes
2020-12-22 11:55:50 +01:00