This reverts commit 9cdc4a47.

This reverts commit 310d6c96.

This reverts commit 5cffe853.

This reverts commit e9617f55.

Signed-off-by: Javier Marcet <javier@marcet.info>

Jan Pavlinec authored Dec 13, 2019 and Javier Marcet committed Nov 22, 2021

Seccomp variant enables usage of sandboxing
inside tor

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

This reverts commit 0a23f1f0.

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

autostart this alleviates the race condition we have with
'netns cleanup_net'

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

python-yaml: bump to version 6.0

python3: bump to version 3.10.0

Those devices don't have 'device' propery, only 'l3_device', which
causes 'attempt to concatenate field 'device' (a nil value)' lua error.

Use 'l3_device' as a fallback in this case.

Signed-off-by: Jacek Konieczny <jajcus@jajcus.net>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

libpqxx: update to version 7.6.0

php8: update to 8.0.13

php7: update to 7.4.26

Fixes 'transmission-web' for users which didn't manually configure the
'web_home' option.
Assume transmission's default in case 'web_home' isn't defined and
mount the directory so it can be accessed from inside the jail.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Igor Bezzubchenko <garikello@gmail.com>

This fixes:
    - CVE-2021-21707

Also drop upstream patch which is included in the release now.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

This fixes:
    - CVE-2021-21707

Also drop upstream patch which is included in the release now.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Add missing "inotify_add_watch", "inotify_init1" and "inotify_rm_watch"
syscalls to seccomp filter which are needed in case watch_dir feature
of transmission is used.

Fixes #16972
Reported-by: @siwind
Signed-off-by: Daniel Golle <daniel@makrotopia.org>

As written in the commit message:

Depending on your conntrackd configuration, events might get lost,
leaving stuck entries in the cache forever. Skip checking the conntrack
ID to allow for lazy cleanup by when a new entry that is represented by
the same tuple is added.

Signed-off-by: Nick Hainke <vincent@systemli.org>

nebula: update to 1.5.0

nextdns: Update to version 1.37.4

* update binaries to version 1.5.0 (thanks @jefferyto)
* update maintainer's email address

Signed-off-by: Stan Grishin <stangri@melmac.ca>

Signed-off-by: Olivier Poitrey <rs@nextdns.io>