This reverts commit 9cdc4a47.

This reverts commit 310d6c96.

This reverts commit 5cffe853.

This reverts commit e9617f55.

Signed-off-by: Javier Marcet <javier@marcet.info>

Jan Pavlinec authored Dec 13, 2019 and Javier Marcet committed Jul 14, 2022

Seccomp variant enables usage of sandboxing
inside tor

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

This reverts commit 0a23f1f0.

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

autostart this alleviates the race condition we have with
'netns cleanup_net'

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

Global Socket allows two workstations on different private networks to
communicate with each other. Through firewalls and through NAT - like
there is no firewall.

The TCP connection is secured with AES-256 and using OpenSSL's SRP
protocol (RFC 5054). It does not require a PKI and has forward
secrecy and (optional) TOR support.

The gsocket tools derive temporary session keys and IDs and connect
two TCP pipes through the Global Socket Relay Network (GSRN). This is
done regardless and independent of the local IP Address or geographical
location.

The session keys (secrets) never leave the workstation. The GSRN sees only
the encrypted traffic.

The workhorse is 'gs-netcat' which opens a ssh-like interactive PTY
command shell to a remote workstation (which resides on a private and
remote network and/or behind a firewall).

Also added test.sh file to run test it inside containeer

Signed-off-by: Ralf Kaiser <skyper@thc.org>

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

Signed-off-by: Othmar Truniger <github@truniger.ch>

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>

apinger: improve uci and procd support

- convert apinger into procd instances
- generate instance specific apinger.conf from uci
- hotplug handling for apinger alarms
- restart apinger interface instance on ifup action of interface
- don't exit on packet count mismatch, allows to use apinger as monitor
  for multiple targets handling
- add srcip option to target configuration, allows specifying source ip
  used to monitor target
- allow creating status file in script parseable format

Patches are ported against latest version of apinger and referenced from
https://git.pld-linux.org/?p=packages/apinger.git;a=summary



Signed-off-by: Jaymin Patel <jem.patel@gmail.com>

add support System Realtime and System Common
This patch has also been submitted upstream:
https://github.com/cchaussat/ttymidi-sysex/pull/2



Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Volodymyr Nazarchuk <vavooon@gmail.com>

bind: update to version 9.18.4

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

Autoreconf is enough to fix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Not really needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

No need for an external one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Update to v16.16.0

Release for the following issues:
HTTP Request Smuggling - Flawed Parsing of Transfer-Encoding (Medium)(CVE-2022-32213)
HTTP Request Smuggling - Improper Delimiting of Header Fields (Medium)(CVE-2022-32214)
HTTP Request Smuggling - Incorrect Parsing of Multi-line Transfer-Encoding (Medium)(CVE-2022-32215)
DNS rebinding in --inspect via invalid IP addresses (High)(CVE-2022-32212)

https://nodejs.org/en/blog/vulnerability/july-2022-security-releases/



No vulnerabilities related with openssl (uses system openssl)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>