Stan Grishin [Sun, 18 Jul 2021 00:10:39 +0000 (00:10 +0000)]
vpn-policy-routing: update to 0.3.5-1
support for 21.02.0-rc2 and up
support for reloading a single interface on ifup/ifupdate
rename config file
updated shellcheck compatibility
remove obsolete create/remove_lock
interface processing optimizations to speed up reloads
drop dependency on curl in user scripts
uniform styling of functions
* code cleanup
* add auto login script for Julianahoeve beach resort (NL)
* add auto login script for Vodafone hotspots (DE)
* add auto login script for telekom hotspots (DE)
* enhance captive portal detection to support html redirects as well
* change default captive portal detection url to
'detectportal.firefox.com'
Daniel Golle [Sat, 24 Jul 2021 03:35:10 +0000 (04:35 +0100)]
uvol: update to version 0.3
* genrate UCI fstab configs for each volume before first 'up'
* remove UCI section on volume remove
* use autofs automounter for read-only volumes
* try umount on 'down'
* emulate hotplug events for UBI volume up/down
* more robust error paths
Daniel Golle [Fri, 23 Jul 2021 21:53:13 +0000 (22:53 +0100)]
uvol: adapt to changes in core
* lvm: remove left-over ubus events
* lvm: resolve /dev/dm-* device name
As block-mount and blockd now use /dev/dm-* names, let uvol also return
those device names.
Javier Marcet [Mon, 19 Jul 2021 05:50:09 +0000 (05:50 +0000)]
alsa-lib: install also /usr/share/alsa/ctl or alsa-mixer fails with:
❯ alsamixer
ALSA lib conf.c:827:(get_char_skip_comments) Cannot access file /usr/share/alsa/ctl/default.conf
ALSA lib conf.c:1994:(_snd_config_load_with_include) _toplevel_:61:26:No such file or directory
ALSA lib conf.c:4040:(config_file_open) /usr/share/alsa/cards/aliases.conf may be old or corrupted: consider to remove or fix it
ALSA lib conf.c:3962:(snd_config_hooks_call) function snd_config_hook_load returned error: No such file or directory
ALSA lib control.c:1481:(snd_ctl_open_noupdate) Invalid CTL cards.ctl.default
cannot open mixer: No such file or directory
The current way to add ports to an Open vSwitch bridge does not allow
complex port configurations. Use a dedicated uci config section per port
instead of the current port:type syntax. This way we can easily support
more features like setting the VLAN tag or the OpenFlow port number.
Calling the ovs_bridge_init function when stopping the service will
result in ovs-vsctl being called after ovsdb-server has been shut down.
This causes the following error:
ovs-vsctl: unix:/var/run/openvswitch/db.sock: database connection failed (No such file or directory)
Calling the ovs_bridge_init function when requesting the service status
has no added value.
Only call ovs_bridge_init during start or restart to fix this.
Stan Grishin [Sun, 18 Jul 2021 19:45:27 +0000 (19:45 +0000)]
vpnbypass: updates to 1.3.2-1
bugfix: domain names bypass
rename config file
update Makefile
updated README link
updated shellcheck compatibility
support for 21.02.0-rc2 and later
updated code for interface triggers
add newline to test.sh
George Iv [Mon, 19 Jul 2021 12:46:16 +0000 (15:46 +0300)]
yggdrasil: bump to 0.4.0
- Bump yggdrasil-go version to v0.4.0
- Update ygguci tool for compatibility with the new yggdrasil-go version
- Yggdrasil's config file is now generated in a separate command before running the daemon
This patch is causing several issues [1], which then were reported to
upstream [2] and it was not accepted by upstream [3]. This results that
nobody maintain this custom patch and it is not useful as it is changing
addr_is_reserved behavior.
Sebastian Kemper [Sat, 17 Jul 2021 12:03:40 +0000 (14:03 +0200)]
sane-backends: use macros (properly), remove chmod
- use $(INSTALL_DIR) instead of mkdir
- using $(INSTALL_CONF) and then running chmod is pointless, use
$(INSTALL_DATA) directly
- /etc/xinetd.d/sane-port doesn't need read protection from non-root
users, use $(INSTALL_DATA) as well
Sebastian Kemper [Sat, 17 Jul 2021 11:55:46 +0000 (13:55 +0200)]
sane-backends: fix usbid file generation
On some build systems (build bots, Debian Buster for example) the
current mechanism in the Build/Install define doesn't run. Replace it
with shell fu that works.
Daniel Golle [Fri, 16 Jul 2021 21:01:26 +0000 (22:01 +0100)]
uvol: general clean up
* make sure new volumes are in state 'down' until explicitely
requested to transition to 'up' state. Useful for additional
verification steps after writing a read-only volume.
* remove unused ubus events as blockd does that much better now
This release fixes some bugs and these vulnerabilities:
* CVE-2021-31810: Trusting FTP PASV responses vulnerability in Net::FTP
* CVE-2021-32066: A StartTLS stripping vulnerability in Net::IMAP
* CVE-2021-31799: A command injection vulnerability in RDoc
Signed-off-by: Luiz Angelo Daros de Luca <redacted>
Tianling Shen [Mon, 28 Jun 2021 06:23:24 +0000 (14:23 +0800)]
dnsproxy: add new package
A simple DNS proxy server that supports all existing DNS protocols
including DNS-over-TLS, DNS-over-HTTPS, DNSCrypt, and DNS-over-QUIC.
Moreover, it can work as a DNS-over-HTTPS, DNS-over-TLS or
DNS-over-QUIC server.
For documents, see https://github.com/AdguardTeam/dnsproxy.