Mohd Mehdi authored 3 weeks ago and Vivek Dutta committed 1 week ago

this is done so that we can use PAM modules for locking out users
after x number of failed attempts for y seconds (by configuring
UsePAM, MaxAuthTries and UnlockTime in sshd UCI respectively)

This reverts commit 596051a5.

Add back missing chroot directory creation which got lost in
13d207b2

Fixes incorrect handling of positional arguments where $10 was
interpreted incorrectly due to missing braces. Now using ${10}
ensures the log option is correctly assigned and passed.

If sftp-server is installed, use it.

Michael Heimpold authored 1 month ago and Erik Karlsson committed 1 month ago

The -r option is not required here but should also not hurt,
since it was already tested, that $key is a file.
However, to express the intent of the command more clearly,
let's drop it.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

'ssh-keygen -l' is a bit forgiving for
corrupted files, hardening this by
using 'ssh-keygen -y' instead.

Imitate dropbear init.d-script and make sure we
don't end up with corrupt keys.

Starting with OpenSSH 9.8 sessions are handled by a separate binary
called sshd-session

Otherwise we might end up in a state where we cannot
generate the desired configurations and 'ssh' will
stop working.

the proc_ops is introduced in 5.6 and compatibility with earlier
versions is managed by xt_compat.h, update the patch accordingly

following config section and option introduced for including snmpd file
from uci

config include 'extra-file'
    option path '/etc/snmpd/extra-config.conf'

resolve compilation errors

Lwithwma Brahma authored 2 years ago and Rahul Thakur committed 4 months ago

Adds iptables-mod-mpeg2ts package.

Change-Id: I7256fa201534cfe5176cb8c6130895ac438236a2

Add logic for https-dns-proxy to not modify
dhcp-configuration unless DNS-over-HTTPS has
been configured.

Change-Id: I3578a917b4f748f31d8b6035f39f8c077c6e3986

Mohd Mehdi authored 6 months ago and Rahul Thakur committed 6 months ago

* add uci-defaults script to generate unbound config that makes
  it work with odhcpd and lets it forward (not resolve) queries
  to dns servers provided via upstream dhcp
* update dhcp UCI to use unbound

OpenSSH 9.8p1 removed support for DSA (DSS) signature algorithms.

From:
https://www.openssh.com/txt/release-9.8

"OpenSSH plans to remove support for the DSA signature algorithm in
early 2025. This release disables DSA by default at compile time."

Merge OpenWrt 23.05.4 commit '89955ee7'
into devel.

Conflicts:
	net/openssh/Makefile
	net/openvpn/files/openvpn.init

* update logrotate version to 3.22.0
* add patch to implement minutes
* add patch to calculate age in minutes instead of days

[23.05] php8: update to 8.2.21

Add option to support ip6tables configuration(default false).

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 55e689176ec52afde0cda0ee2b48dbff349d6c6c)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1016f8f1ba41b743bff905cf27b6c6f2b8de6c8e)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 309687f01abeca6f369e7e1d62aa2a5a47df02e7)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ef9be4a53c8f05f2d01cc4809055d5cb6999cb94)

ci: Fix up Docker images' tag from version number
chore(deps): bump github.com/gin-contrib/cors from 1.3.1 to 1.6.0

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit ccccd5c92df2b4f80a9e5c43d1e96edf0a6b7e6a)

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 88ba5210fb7ad6e3b6199cf4b70d4b53dc5fe3cf)
[Removed obsolete patch as upstream has fixed.]
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>

* filter crappy IP entries from urlhaus feed

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 9968fe6bf770f3a2eac47fbee17511d4144479cf)

Fixes the following CVEs when compared to the last-packaged version,
1.20.1:

	CVE-2024-37370
	CVE-2024-37371
	CVE-2023-36054

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit 48ea7d33e169dee3513d4b3f22203b0b78df304c)