aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
| * | | | | | | libreswan: various fixesLucian Cristian2020-05-17
| | |_|/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | start if kernel has missing ipv6 support add libcap-ng support fix some errors displayed on syslog Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | | Merge pull request #12205 from micmac1/mar-master-10413Hannu Nyman2020-05-18
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | mariadb: minor verison bump with CVE fixes
| * | | | | | | mariadb: bump to 10.4.13Sebastian Kemper2020-05-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upstream added define INSTALL_PAMDATADIR, so hardcoded path is gone. Fixes: CVE-2020-2752 CVE-2020-2812 CVE-2020-2814 CVE-2020-2760 Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * | | | | | | libmariadb: bump to 3.1.8Sebastian Kemper2020-05-17
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | | | | | | collectd: Improve sqm_collectd error reportingKevin Darbyshire-Bryant2020-05-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* | | | | | | Merge pull request #12091 from pprindeville/syslog-ng-restore-reloadJosef Schlehofer2020-05-17
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | syslog-ng: restore service "reload" to actually working
| * | | | | | | syslog-ng: restore service "reload" to actually workingPhilip Prindeville2020-05-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commit 44a16ca broke syslog-ng such that it no longer works with logrotate, for example. Yes, you can manually stop and start the service, but (1) you shouldn't have to and (2) it creates a window where you potentially lose messages if the syslog UDP socket overruns. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | | | | | Merge pull request #12193 from lnslbrty/masterHannu Nyman2020-05-17
|\ \ \ \ \ \ \ \ | | |_|/ / / / / | |/| | | | | | netatop: update to version 3.1
| * | | | | | | netatop: update to version 3.1Toni Uhlig2020-05-17
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* | | | | | | Merge pull request #12191 from neheb/libwebpRosen Penev2020-05-17
|\ \ \ \ \ \ \ | |_|/ / / / / |/| | | | | | libwebp: fix compilation under ARM without NEON
| * | | | | | libwebp: fix compilation under ARM without NEONRosen Penev2020-05-16
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The CMake logic seems broken. Luckily it's easy to work around. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | Merge pull request #12180 from lucize/libcapngRosen Penev2020-05-16
|\ \ \ \ \ \ | | | | | | | | | | | | | | libcap-ng: add package libcap-ng
| * | | | | | libcap-ng: add package libcap-ngLucian Cristian2020-05-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | | Merge pull request #12188 from jefferyto/golang-1.14.3Hannu Nyman2020-05-16
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | golang: Update to 1.14.3
| * | | | | | | golang: Update to 1.14.3Jeffery To2020-05-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This also removes a (useless) test for PKG_GO_ZBOOTSTRAP_MODS (it is always non-empty). Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | | | | Merge pull request #12181 from micmac1/apa-suidRosen Penev2020-05-16
|\ \ \ \ \ \ \ \ | |/ / / / / / / |/| | | | | | | apache: tighten log dir + suEXEC
| * | | | | | | apache: revisit suEXEC setupSebastian Kemper2020-05-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When adding suEXEC to the apache package, Alpine's package [1] served as a template. Not enough attention was paid to the details. Alpine uses a different layout. So for OpenWrt to use /var/www as DocumentRoot does not make sense. /var is also volatile on OpenWrt. This commit removes the configure argument. The default is htdocsdir. This also does away with uidmin/gidmin 99. The default is 100, which is fine. Finally, the suexec binary is moved from /usr/sbin to /usr/lib/apache2/suexec_dir. Upstream recommends installing suexec with "4750" (see [2]) and the group set to the user's group. While that would be possible, it would cause a few headaches on OpenWrt. The group would need to be changed first in a post-install script and a call to chmod would need to be made afterward, to make the binary SUID again. It's easier to hide the SUID binary away from others in a directory. This way we don't need to use chmod in the post-install script. [1] https://github.com/alpinelinux/aports/tree/master/main/apache2 [2] https://httpd.apache.org/docs/2.4/suexec.html Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * | | | | | | apache: create log directory o=Sebastian Kemper2020-05-16
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Hides away the contents of the log directory from others. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | | | | | | Merge pull request #12186 from lucize/nssltoHannu Nyman2020-05-16
|\ \ \ \ \ \ \ | |/ / / / / / |/| | | | | | nss: revert -flto change
| * | | | | | nss: revert -flto changeLucian Cristian2020-05-16
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | it seems that it can lead to segfault in libfreebl3.so Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | php7-pecl-redis: update to 5.2.2Michael Heimpold2020-05-16
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | | | php7: update to 7.4.6Michael Heimpold2020-05-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes: - CVE-2019-11048 Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | | | Merge pull request #12179 from wvdakker/masterHannu Nyman2020-05-16
|\ \ \ \ \ \ | | | | | | | | | | | | | | Shorewall: Bump to 5.2.4.5
| * | | | | | Shorewall6: Bump to 5.2.4.5W. van den Akker2020-05-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
| * | | | | | Shorewall: Bump to 5.2.4.5W. van den Akker2020-05-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
| * | | | | | Shorewall6-lite: Bump to 5.2.4.5W. van den Akker2020-05-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
| * | | | | | Shorewall-lite: Bump to 5.2.4.5W. van den Akker2020-05-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
| * | | | | | Shorewall-core: Bump to 5.2.4.5W. van den Akker2020-05-16
|/ / / / / / | | | | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
* | | | | | Merge pull request #12167 from lucize/nssltoRosen Penev2020-05-15
|\ \ \ \ \ \ | | | | | | | | | | | | | | nss: add -flto and makefile cleanup
| * | | | | | nss: add -flto and makefile cleanupLucian Cristian2020-05-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | | Merge pull request #12166 from lucize/nsprltoRosen Penev2020-05-15
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | nspr: nspr add -flto to compile
| * | | | | | | nspr: nspr add -flto to compileLucian Cristian2020-05-15
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | | Merge pull request #12170 from kagurazakakotori/open-vm-toolsRosen Penev2020-05-15
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | open-vm-tools: bump to version 11.1.0
| * | | | | | | open-vm-tools: bump to version 11.1.0Kagurazaka Kotori2020-05-15
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Kagurazaka Kotori <kagurazakakotori@gmail.com>
* | | | | | | Merge pull request #12168 from lucize/libreswupRosen Penev2020-05-14
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | libreswan: update to 3.32
| * | | | | | | libreswan: update to 3.32Lucian Cristian2020-05-14
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | also add -flto to compiler flags Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | | Merge pull request #12172 from rs/nextdns-1.5.8-masterRosen Penev2020-05-14
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | nextdns: Update to version 1.5.8
| * | | | | | | nextdns: Update to version 1.5.8Olivier Poitrey2020-05-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Olivier Poitrey <rs@nextdns.io>
* | | | | | | | Merge pull request #12162 from neheb/upnp23Rosen Penev2020-05-14
|\ \ \ \ \ \ \ \ | |/ / / / / / / |/| | | | | | | npupnp updates
| * | | | | | | upmpdcli: update to 1.4.9Rosen Penev2020-05-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
| * | | | | | | libupnpp: update to 0.19.1Rosen Penev2020-05-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
| * | | | | | | libnpupnp: update to 4.0.3Rosen Penev2020-05-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | Merge pull request #12149 from ja-pa/python-atomicwrites-udateRosen Penev2020-05-14
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | python-atomicwrites: update to version 1.4.0
| * | | | | | | | python-atomicwrites: update to version 1.4.0Jan Pavlinec2020-05-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | | | | | | Merge pull request #12161 from neheb/faad22Rosen Penev2020-05-14
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | faad2: update to 2.9.2
| * | | | | | | | | faad2: update to 2.9.2Rosen Penev2020-05-13
| | |/ / / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Removed upstreamed patches. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | | Merge pull request #12165 from jefferyto/golang-tweaksRosen Penev2020-05-14
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | golang: Various improvements/tweaks
| * | | | | | | | | golang: Set/reset default platform options for target Go compilerJeffery To2020-05-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Because the first stage for building target Go is actually a host build, the default platform options (GO386, GOARM, etc.) are detected from the host. These values are written to a source file and kept when building the second stage. This modifies this source file to set the appropriate values for the target platform, and reset values for other platforms to their cross-compiling / most compatible defaults. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
| * | | | | | | | | golang: Set buildid and enable stripping for Go compilerJeffery To2020-05-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Doing both should make the compiler reproducible. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
| * | | | | | | | | golang: Blacklist older (or no) FPUs rather than whitelist newer FPUsJeffery To2020-05-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This should be more future-proof (presumably all future ARM FPUs will be at least VFPv3). Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Powered by cgit, Themed by Ted Yin.