aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
| * | | | | | | | Shorewall: Bump to version 5.2.1.3W. van den Akker2018-12-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
| * | | | | | | | Shorewall6-lite: Bump to version 5.2.1.3W. van den Akker2018-12-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
| * | | | | | | | Shorewall-lite: Bump to version 5.2.1.3W. van den Akker2018-12-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
| * | | | | | | | Shorewall-core: Bump to version 5.2.1.3W. van den Akker2018-12-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
* | | | | | | | | minisatip: add new packageDaniel Kucera2018-12-19
| |/ / / / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Minisatip is a multi-threaded satip server version 1.2 that runs under Linux and it was tested with DVB-S, DVB-S2, DVB-T, DVB-T2, DVB-C, DVB-C2, ATSC and ISDB-T cards. https://github.com/catalinii/minisatip Signed-off-by: Daniel Kucera <daniel.kucera@gmail.com>
* | | | | | | | golang: update to latest versionJeffery To2018-12-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | | | | Merge pull request #7727 from ClaymorePT/boost_1.69.0_r1Ted Hess2018-12-18
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | boost: Package Version Update -> 1.69.0
| * | | | | | | | boost: Package Version Update -> 1.69.0Carlos Miguel Ferreira2018-12-18
| | |_|_|_|/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This package update provides one new library: -> Safe Numerics: A library for guaranteed correct integer arithmetic for C++14 and later, from Robert Ramey [1]. Discontinued Libraries -> Signals (v1) is now removed. Its removal was announced in 1.68 and its deprecation was announced in 1.54. Boost 1.68 is the last release that provides this library. Users are encouraged to use Signals2 instead. The Boost community thanks Douglas Gregor for his work on Signals which served its users well and which also inspired Signals2 [2]. More info can be found at the usual place [3]. [1] : https://www.boost.org/doc/libs/1_69_0/libs/safe_numerics/doc/html/index.html [2] : https://www.boost.org/doc/libs/1_69_0/doc/html/signals2.html [3] : https://www.boost.org/users/history/version_1_69_0.html Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>
* | | | | | | | Merge pull request #7725 from micmac1/master-sqlite3champtar2018-12-18
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | (master) sqlite3 security bump
| * | | | | | | | sqlite3: remove $(FPIC)Sebastian Kemper2018-12-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Defaulting to -fPIC is a bad idea, especially for executables (here: sqlite3-cli). In short, there are certain security implications as well as overhead/performance penalties. Details see: https://wiki.gentoo.org/wiki/Project:Hardened/Position_Independent_Code_internals The configure script is able to detect the need for PIC and adds the flag when needed anyway (when compiling the library). Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * | | | | | | | sqlite3: security bumpSebastian Kemper2018-12-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | A remote code execution vuln has been found in sqlite. Infos available here: https://blade.tencent.com/magellan/index_en.html sqlite 3.26.0 contains the fix. This commit also changes source URL to https. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | | | | | | | | CircleCI: Add bzr to Docker image. Update to v1.0.2Ted Hess2018-12-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Ted Hess <thess@kitschensync.net>
* | | | | | | | | Merge pull request #7646 from neheb/tincSaverio Proto2018-12-18
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | tinc: Fix compilation without deprecated OpenSSL APIs
| * | | | | | | | | tinc: Fix compilation without deprecated OpenSSL APIsRosen Penev2018-12-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Minor Makefile adjustments. Added PKG_BUILD_PARALLEL for faster compilation. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | | | Merge pull request #7720 from cotequeiroz/softethervpn_hostHannu Nyman2018-12-18
|\ \ \ \ \ \ \ \ \ \ | |_|/ / / / / / / / |/| | | | | | | | | softethervpn: cleanup host/build, pass HOST_*FLAGS
| * | | | | | | | | softethervpn: cleanup host/build, pass HOST_*FLAGSEneas U de Queiroz2018-12-18
| | |/ / / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove hack to avoid readline host dependency, now that readline is being host/built. Pass on HOST_CFLAGS, HOST_CPPFLAGS, & HOST_LDFLAGS, to fix buildbots host-compile errors about not finding openssl headers. Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
* | | | | | | | | Merge pull request #7714 from neheb/patch-18Hannu Nyman2018-12-18
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | logrotate: Update to 3.15.0
| * | | | | | | | | logrotate: Update to 3.15.0Rosen Penev2018-12-17
| | |_|_|_|_|_|_|/ | |/| | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | | Merge pull request #7710 from neheb/patch-15Hannu Nyman2018-12-18
|\ \ \ \ \ \ \ \ \ | |_|/ / / / / / / |/| | | | | | | | python-requests: Update to 2.21.0
| * | | | | | | | python-requests: Update to 2.21.0Rosen Penev2018-12-17
| |/ / / / / / / | | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | / / / / net/mosquitto: bump to 1.5.5Karl Palsson2018-12-18
| |_|_|/ / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Security and bug fix. Full changelog available at: https://mosquitto.org/ChangeLog.txt Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | | | Merge pull request #7565 from neheb/sendmailTed Hess2018-12-17
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | sendmail: Add OpenSSL 1.1 support
| * | | | | | | sendmail: link with gcc instead of ldEneas U de Queiroz2018-12-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If ld is used directly to link libmilter.so, linking is not done correctly with glibc, and produces a library that can't be used. Linking with the bad library produces a strange error: ld: conftest: hidden symbol `stat' in [...]libc_nonshared.a(stat.oS) is referenced by DSO Using ld with musl works fine, but using gcc is a more portable way of linking the shared library anyway. Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
| * | | | | | | sendmail: Add OpenSSL 1.1 supportRosen Penev2018-12-17
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | First patch is from Debian and enables OpenSSL 1.1 support. Second patch is a fix for OpenSSL 1.1 ECC curves. Third patch allows compilation without deprecated APIs. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* / / / / / / git: update to 2.20.1Peter Wagner2018-12-18
|/ / / / / / | | | | | | | | | | | | | | | | | | Signed-off-by: Peter Wagner <tripolar@gmx.at>
* | | | | | Merge pull request #7701 from dengqf6/xtablesHans Dedecker2018-12-17
|\ \ \ \ \ \ | | | | | | | | | | | | | | xtables-addons: fix compile error on kernel 4.18+
| * | | | | | xtables-addons: fix compile error on kernel 4.18+Deng Qingfang2018-12-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Use `struct nf_nat_range2` for kernel 4.18+ Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>
* | | | | | | CircleCI: Remove version info from SDK filename.Ted Hess2018-12-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Ted Hess <thess@kitschensync.net>
* | | | | | | Merge pull request #7690 from neheb/softHannu Nyman2018-12-17
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | gammu: Fix build under 64-bit targets.
| * | | | | | | gammu: Fix build under 64-bit targets.Rosen Penev2018-12-16
| | |_|_|/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There's a faulty suffix variable that points to the wrong place. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | haproxy: Update deprecated API patchRosen Penev2018-12-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | qemu: bump to version 3.1.0Yousong Zhou2018-12-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog can be found at https://wiki.qemu.org/ChangeLog/3.1 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | | | Merge pull request #7594 from dhewg/pull/prometheus-node-exporter-lua-ltq-dslchamptar2018-12-16
|\ \ \ \ \ \ \ | |/ / / / / / |/| | | | | | prometheus-node-exporter-lua: add lantiq dsl modem collector
| * | | | | | prometheus-node-exporter-lua: add lantiq dsl modem collectorRene Treffer2018-12-16
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | a.heider: Address PR comments and clean up. Signed-off-by: Rene Treffer <treffer+github@measite.de> Signed-off-by: Andre Heider <a.heider@gmail.com>
* | | | | | Merge pull request #7542 from Rixerx/masterchamptar2018-12-16
|\ \ \ \ \ \ | |_|_|/ / / |/| | | | | zabbix: update to 4.0 LTS
| * | | | | zabbix: update to 4.0 LTSKrystian Kozak2018-12-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updated to 4.0 LTS version. Compile tested: Yes, brcm2708 Run tested: Yes, brcm2708 Signed-off-by: Krystian Kozak <krystian.kozak20@gmail.com>
* | | | | | Merge pull request #7687 from dengqf6/nginxHannu Nyman2018-12-16
|\ \ \ \ \ \ | |_|/ / / / |/| | | | | nginx: add stream SSL and stream SSL preread support
| * | | | | nginx: add stream SSL and stream SSL preread supportDeng Qingfang2018-12-17
|/ / / / / | | | | | | | | | | | | | | | Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>
* | | | | Merge pull request #7681 from neheb/luvTed Hess2018-12-16
|\ \ \ \ \ | |_|_|/ / |/| | | | luv: Update to 1.22.0-1
| * | | | luv: Update to 1.22.0-1Rosen Penev2018-12-15
|/ / / / | | | | | | | | | | | | | | | | | | | | Switched to tarball and rearranged Makefile for consistency. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | Merge pull request #7673 from micmac1/mariadb-maj2Hannu Nyman2018-12-16
|\ \ \ \ | | | | | | | | | | mariadb: packaging, config and misc improvements
| * | | | mariadb: update init script to use uciSebastian Kemper2018-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Does away with /etc/default/mysqld, introduces uci configuration instead. The init script receives some further brushing up, like a function (copied from Debian) to get mysqld configuration parameters easily and quickly. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * | | | mariadb: small miscellaneous enhancementsSebastian Kemper2018-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - correct spelling in comments ("mariadb" to "MariaDB") - remove mysqld_safe and mysqld_safe_helper (not used) - add some extra cmake configuration defines - remove cmake configuration defines that don't exist in the source - don't disable address sanitizer (ASAN) support Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * | | | mariadb: add galera supportSebastian Kemper2018-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add galera support by installing the configuration and including the wsrep scripts in mariadb-server-extra. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * | | | mariadb: add extra charsets to server baseSebastian Kemper2018-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There is little sense in keeping these charsets in an extra package. The included sets are of the single byte character set variety. They only amount to a few kbytes. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * | | | mariadb: improve packaging and configurationSebastian Kemper2018-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | At present there are some flaws related to configuration, also related to the packaging of mariadb. For starters there are complaints that the configuration is too static. To address this a new configuration layout is introduced. The primary configuration file (my.cnf) is changed so that it now only includes further configuration files in the directory /etc/mysql/conf.d. More default configuration files are added for the server and the client. This is the new default configuration. With these changes it's possible for the user to select if they want to change the default configuration (in conf.d/*.cnf) or if they want to drop their own files into conf.d instead. If the user .cnf files are read after the default .cnf files (files are included in alphabetical order), they will overwrite the settings from the default configuration. The other flaw is that the my.cnf file is included in mariadb-server. But that doesn't really fit the requirements, as the client also uses the configuration file(s). To accomodate this a new package mariadb-common is added. It installs the shared my.cnf file. The remaining changes add base packages, both for the server and the client. These are meant as foundation for the packages containing the respective binaries. In summary they will install the configuration, small miscellaneous files (SQL scripts etc.) and the user "mariadb". That means that everything is ready for the binaries, like mysql and mysqld. If there is not enough space left on flash memory, the user can just drop the binaries on a pendrive, link them to /usr/bin and get started. The ideas and configuration files were copied from Debian. Some amendments were made. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * | | | mariadb: rename share and plugin directoriesSebastian Kemper2018-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Rename them from mysql to mariadb. Use variables where possible (also for /etc/mysql). Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * | | | mariadb: refresh pluginsSebastian Kemper2018-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit deals with changes related to plugins and how they're built or disabled. Currently a lot of plugins are packaged which are merely for tests or plain examples. Other distros do not bundle these, hence this commit does away with them. A few new plugins are added related to PAM and Kerberos (auth_gssapi, auth_gssapi_client and auth_pam). The BuildPlugin template is refactored to also allow building of library plugins (needed for auth_gssapi_client). The template is also cleaned up - some extraneous dollar signs are removed and the install function is now defined outside the template. Unwanted plugins/engines are now turned off efficiently (without using cmake variables) by blanking CMakeLists.txt files in the associated folders. The idea was lifted from Gentoo. ha_sequence is now built into the server. This is an upstream preference. The plugin is about 30 kbytes in size, so there is no harm adding it into the server, which weighs in at about 15 Mbytes anyway. Last but not least the auth_socket plugin is now also built into the server. This allows the local root user to login to the database without a password being set. This makes maintenance easier without being detrimental to security. The idea was lifted from Debian. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * | | | mariadb: use system libedit for mysqlSebastian Kemper2018-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | libedit changed its interface a while back. mariadb currently does not recognize this interface and instead uses a static old readline version. It does not link in the system readline due to licence incompatibility. This commit adds a patch that enables mariadb to detect and use the system libedit. The patch was sent upstream already ([1]). [1] https://github.com/MariaDB/server/pull/1001 Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | | | | CircleCI: Update SDK / gcc version bumpTed Hess2018-12-15
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Ted Hess <thess@kitschensync.net>
Powered by cgit, Themed by Ted Yin.