aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* nft-qos: Update init scriptJeffery To2019-02-12
| | | | | | | | | | | This replaces the use of uci_validate_section() with uci_load_validate(), which removes the need to declare local variables for every config option. This also adds a validate section to service_triggers(), and fixes some variable name typos in qosdef_init_static(). Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* ruby: fix build for uclibcLuiz Angelo Daros de Luca2019-02-12
| | | | | | Backporting upstream fix. Closes #8051. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* irssi: update to 1.2.0Peter Wagner2019-02-12
| | | | Signed-off-by: Peter Wagner <tripolar@gmx.at>
* Merge pull request #8135 from ja-pa/unbound-updateHannu Nyman2019-02-11
|\ | | | | unbound: update to version 1.9.0 and remove old patch
| * unbound: update to version 1.9.0Jan Pavlinec2019-02-11
| | | | | | | | | | | | | | | | | | Changes: -remove old dns64 patch -refresh openssl deprecated patch -add DoT error log patch https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=4206 Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | shadowsocks-libev: flush ss rules on entryYousong Zhou2019-02-11
| | | | | | | | | | | | Fixes issue reported in openwrt/luci#2527 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | php7: fix cross compiling patch (fixes #8166)Michael Heimpold2019-02-10
| | | | | | | | | | Fixes: e148924a4 ("php7: update to 7.2.15") Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | openssh: patch scp security issuesJan Pavlinec2019-02-10
| | | | | | | | | | | | | | | | Fixes CVE-2019-6109 CVE-2019-6111 Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | Merge pull request #8164 from diizzyy/patch-6Hannu Nyman2019-02-10
|\ \ | | | | | | bluez: Cosmetic fixes
| * | bluez: Cosmetic fixesDaniel Engberg2019-02-09
| | | | | | | | | | | | | | | Use $(INSTALL_BIN) instead of $(CP) when installing binaries Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* | | Merge pull request #8169 from dengqf6/uwsgiHannu Nyman2019-02-10
|\ \ \ | | | | | | | | uwsgi-cgi: update to 2.0.18 and use official tarball
| * | | uwsgi-cgi: update to 2.0.18 and use official tarballDeng Qingfang2019-02-10
|/ / / | | | | | | | | | Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>
* | | Merge pull request #8162 from neheb/keyHannu Nyman2019-02-10
|\ \ \ | | | | | | | | keyutils: Make reproducible
| * | | keyutils: Make reproducibleRosen Penev2019-02-08
| |/ / | | | | | | | | | | | | | | | Based on debian patch. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | libudev-fbsd: update to git source as of 2017-12-16Daniel Golle2019-02-09
| | | | | | | | | | | | | | | | | | | | | | | | Remove patches 001-fix-unused.patch and 002-replace-nitems.patch, similar fixes to make libudev-fbsd compile were applied upstream. Refresh remaining patches. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | Merge pull request #7823 from BKPepe/owfs3.2p3Hannu Nyman2019-02-09
|\ \ \ | | | | | | | | owfs: update to version v3.2p3
| * | | owfs: update to version v3.2p3Josef Schlehofer2019-01-31
| | | | | | | | | | | | | | | | Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | php7: update to 7.2.15Michael Heimpold2019-02-09
| |/ / |/| | | | | | | | | | | | | | Also refresh patch which does not apply cleanly anymore. Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | Merge pull request #8111 from neheb/ngHannu Nyman2019-02-08
|\ \ \ | | | | | | | | ngircd: Update to 25
| * | | ngircd: Update to 25Rosen Penev2019-02-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove upstreamed patch. Switch to .xz archives for smaller size. Add PKG_BUILD_PARALLEL to speed up compilation. Remove maintainer. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | Merge pull request #8126 from jefferyto/tgt-initHannu Nyman2019-02-08
|\ \ \ \ | | | | | | | | | | tgt: Update init script
| * | | | tgt: Update init scriptJeffery To2019-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This replaces the use of uci_validate_section() with uci_load_validate(), which removes the need to declare local variables for every config option. This also adds a service_triggers() function, removes a duplicate option, and removes some unnecessary curly brackets. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | Merge pull request #8156 from BKPepe/youtube-dl-2019.02.08Hannu Nyman2019-02-08
|\ \ \ \ \ | | | | | | | | | | | | youtube-dl: update to version 2019.02.08
| * | | | | youtube-dl: update to version 2019.02.08Josef Schlehofer2019-02-08
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | | Merge ACME fixesToke Høiland-Jørgensen2019-02-08
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Closes #8149 Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
| * | | | | | acme: Bump package revisionToke Høiland-Jørgensen2019-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
| * | | | | | acme: Fix loading credentialsAdrien DAURIAT2019-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Move loading credential function before cert renewal call as credentials might be needed for some renewal operations ( ex: DNS ) Signed-off-by: Adrien DAURIAT <16813527+dauriata@users.noreply.github.com> [toke@toke.dk: Port to master branch] Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
| * | | | | | net/acme: commit uhttpd configuration if update_httpd setAlexey I. Froloff2019-02-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | uhttpd configuration should be commited when update_uhttpd set. Signed-off-by: Alexey I. Froloff <raorn@raorn.name>
| * | | | | | net/acme: issue_cert should always call post_checks on exitAlexey I. Froloff2019-02-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | issue_cert fuction may return without calling post_checks, which leaves port 80 open and uhttpd configuration is not restored is listen_http was set. Always call post_checks when returning from issue_cert. Signed-off-by: Alexey I. Froloff <raorn@raorn.name>
* | | | | | | Merge pull request #7631 from neheb/patch-1Daniel Golle2019-02-08
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | cryptsetup: replace libgcrypt with AFALG and remove OpenSSL variant
| * | | | | | | cryptsetup: Remove OpenSSL variantRosen Penev2019-01-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | OpenSSL is only used for hashing while being a huge dependency (689.4KB for mips_24kc. Cryptsetup also supports and recommends argon2 for hashing, which is not provided by OpenSSL. Signed-off-by: Rosen Penev <rosenp@gmail.com>
| * | | | | | | cryptsetup: Replace libgcrypt with AFALGRosen Penev2019-01-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add several configure arguments to speed up build time. Switch from using libgcrypt to using the kernel directly. This has a number of benefits including smaller size and faster speed. It also allows selection of desired crypto primatives instead of having all of them. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | mosquitto: bump to 1.5.6Karl Palsson2019-02-08
| |_|/ / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a bugfix and security release. CVE-2018-12551: If Mosquitto is configured to use a password file for authentication, any malformed data in the password file will be treated as valid. This typically means that the malformed data becomes a username and no password. If this occurs, clients can circumvent authentication and get access to the broker by using the malformed username. In particular, a blank line will be treated as a valid empty username. Other security measures are unaffected. => Users who have only used the mosquitto_passwd utility to create and modify their password files are unaffected by this vulnerability. CVE-2018-12550: If an ACL file is empty, or has only blank lines or comments, then mosquitto treats the ACL file as not being defined, which means that no topic access is denied. Although denying access to all topics is not a useful configuration, this behaviour is unexpected and could lead to access being incorrectly granted in some circumstances. CVE-2018-12546. If a client publishes a retained message to a topic that they have access to, and then their access to that topic is revoked, the retained message will still be delivered to future subscribers. This behaviour may be undesirable in some applications, so a configuration option `check_retain_source` has been introduced to enforce checking of the retained message source on publish. Plus the following bugfixes: * wills not sent to websocket clients * spaces now allowed in bridge usernames * durable clients not receiving offline messages with per_listener_settings==true * compilation with openssl without deprecated apis * TLS working over SOCKS * better comment handling in config files Full changelog available at: https://github.com/eclipse/mosquitto/blob/fixes/ChangeLog.txt#L1 Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | | | Merge pull request #8114 from neheb/avHannu Nyman2019-02-07
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | davfs2: Update to 1.5.5
| * | | | | | | davfs2: Update to 1.5.5Rosen Penev2019-02-02
| | |_|_|/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Switched URL to @SAVANNAH for more mirrors. Added PKG_BUILD_PARALLEL for faster compilation. Added PKG_LICENSE info. Minor reorganization for consistency between packages. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | Merge pull request #8124 from aparcar/prometheus-2.7.1Hannu Nyman2019-02-07
|\ \ \ \ \ \ \ | |_|_|/ / / / |/| | | | | | prometheus: update to 2.7.1
| * | | | | | prometheus: update to 2.7.1Paul Spooren2019-02-04
| | |_|/ / / | |/| | | | | | | | | | | | | | | | Signed-off-by: Paul Spooren <mail@aparcar.org>
* | | | | | znc: fix patches applyingJonas Gorski2019-02-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | git is hard. :-( Reported-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk> Fixes: 4629f043e08e ("znc: update to 1.7.2") Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
* | | | | | Merge pull request #8130 from lucize/freetype-hostHannu Nyman2019-02-06
|\ \ \ \ \ \ | | | | | | | | | | | | | | freetype: add host config flags
| * | | | | | freetype: add host config flagsLucian Cristian2019-02-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | this fixes static linking with mkfontscale/host xorg app Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | | Merge pull request #8136 from ja-pa/dovecot-security-fixHannu Nyman2019-02-06
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | dovecot: update to version 2.3.4.1 (security fix)
| * | | | | | | dovecot: update to version 2.3.4.1 (security fix)Jan Pavlinec2019-02-05
| | |_|_|_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes CVE-2019-3814 Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | | | | znc: update to 1.7.2Jonas Gorski2019-02-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Includes minor bugfixes, translation updates and most of the OpenSSL compilation patch. Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
* | | | | | | Merge pull request #8102 from jefferyto/clamav-initHannu Nyman2019-02-05
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | clamav: Update init scripts
| * | | | | | | clamav: Update init scriptsJeffery To2019-02-01
| | |_|_|_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This replaces the use of uci_validate_section() with uci_load_validate(), which removes the need to declare local variables for every config option. This also removes some unnecessary curly brackets. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | | | Merge pull request #8112 from neheb/shaTed Hess2019-02-05
|\ \ \ \ \ \ \ | |_|_|/ / / / |/| | | | | | shairplay: Update to 2018-08-24
| * | | | | | shairplay: Update to 2018-08-24Rosen Penev2019-02-04
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Switched to codeload for easier package bumping. Added PKG_BUILD_PARALLEL for faster compilation. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | / / / php7-pecl-http: give hint about zlib staging dirMichael Heimpold2019-02-04
| |_|/ / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Buildbots currently fail to find zlib souces, so try to give this hint with configure parameters. Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | | sshtunnel: Update init scriptJeffery To2019-02-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This replaces the use of uci_validate_section() with uci_load_validate(), which removes the need to declare local variables for every config option. This also fixes some validation, makes variable declarations local, removes unnecessary curly brackets. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | bind: update to 9.12.3-P1 and otherDeng Qingfang2019-02-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Refresh patches Remove --enable-static and --enable-dynamic because they're enabled by default Enable parallel compilation Fix compile without IPv6 Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>