aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* snort: update 2.9.17.1W. Michael Petullo2021-05-10
| | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* lvm2: update to version 2.03.12Daniel Golle2021-05-10
| | | | | | Two notable changes are devices file and metadata based autoactivation. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* exim: update to version 4.94.2Daniel Golle2021-05-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Several exploitable vulnerabilities in Exim were reported to us and are fixed. Local vulnerabilities - CVE-2020-28007: Link attack in Exim's log directory - CVE-2020-28008: Assorted attacks in Exim's spool directory - CVE-2020-28014: Arbitrary PID file creation - CVE-2020-28011: Heap buffer overflow in queue_run() - CVE-2020-28010: Heap out-of-bounds write in main() - CVE-2020-28013: Heap buffer overflow in parse_fix_phrase() - CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase() - CVE-2020-28015: New-line injection into spool header file (local) - CVE-2020-28012: Missing close-on-exec flag for privileged pipe - CVE-2020-28009: Integer overflow in get_stdinput() Remote vulnerabilities - CVE-2020-28017: Integer overflow in receive_add_recipient() - CVE-2020-28020: Integer overflow in receive_msg() - CVE-2020-28023: Out-of-bounds read in smtp_setup_msg() - CVE-2020-28021: New-line injection into spool header file (remote) - CVE-2020-28022: Heap out-of-bounds read and write in extract_option() - CVE-2020-28026: Line truncation and injection in spool_read_header() - CVE-2020-28019: Failure to reset function pointer after BDAT error - CVE-2020-28024: Heap buffer underflow in smtp_ungetc() - CVE-2020-28018: Use-after-free in tls-openssl.c - CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash() The update to 4.94.2 also integrates a fix for a printf format issue previously addressed by a local patch which is removed. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* auc: support queue_position status from serverDaniel Golle2021-05-10
| | | | | | Display position in queue while waiting for build. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* Merge pull request #15552 from mhei/php7-updateMichael Heimpold2021-05-08
|\ | | | | php7: update to 7.4.18
| * php7: update to 7.4.18Michael Heimpold2021-04-30
| | | | | | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | Merge pull request #15575 from ↵Philip Prindeville2021-05-07
|\ \ | | | | | | | | | | | | pprindeville/strongswan-always-generate-var-strongswan strongswan: swanctl init script doesn't load connections
| * | strongswan: swanctl init script doesn't load connectionsPhilip Prindeville2021-05-05
| | | | | | | | | | | | | | | | | | Fixes issue #15446 Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | Merge pull request #15474 from ja-pa/unbound-ttl-negRosen Penev2021-05-07
|\ \ \ | | | | | | | | unbound: add cache-max-negative-ttl config option
| * | | unbound: add cache-max-negative-ttl config optionJan Pavlinec2021-04-20
| | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | Merge pull request #15553 from PolynomialDivision/add-samplicatorRosen Penev2021-05-06
|\ \ \ \ | | | | | | | | | | samplicator: add samplicator
| * | | | samplicator: add samplicatorNick Hainke2021-05-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Samplicator receives UDP datagrams on a given port and resends those datagrams to a specified set of receivers. Use Cases: - replicate Flow Samples to multiple receivers - use with conntrackd to synchronize via unicast to multiple targets Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | | Merge pull request #15539 from ja-pa/tailscaleRosen Penev2021-05-06
|\ \ \ \ \ | | | | | | | | | | | | tailscale: add new package
| * | | | | tailscale: add new packageJan Pavlinec2021-04-29
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | | | vim: install vimdiff symlink for vim-fullSergio E. Nemirowski2021-05-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | vim-full comes with diff feature Signed-off-by: Sergio E. Nemirowski <sergio@outerface.net>
* | | | | | samba4: update to 4.13.8Andy Walsh2021-05-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * update to 4.13.8 * remove faulty io_uring kernel detection * fixes CVE's: CVE-2020-27840, CVE-2021-20277, CVE-2020-27840, CVE-2021-20277, CVE-2020-27840, CVE-2021-20277, CVE-2021-20254 * resolves #15512 Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
* | | | | | Merge pull request #15537 from aaronjg/mwan3/notrackFlorian Eckert2021-05-06
|\ \ \ \ \ \ | | | | | | | | | | | | | | mwan3: allow interfaces with no tracking IPs
| * | | | | | mwan3: allow interfaces with no tracking IPsAaron Goodman2021-05-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In the procd refactor, support for interfaces with no tracking IPs was inadvertentiy removed. This commit restores the previous behavior Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
* | | | | | | Merge pull request #15562 from TDT-AG/pr/20200503-mwan3Florian Eckert2021-05-06
|\ \ \ \ \ \ \ | |_|_|_|_|/ / |/| | | | | | mwan3: update ubus status for no tracked interfaces
| * | | | | | mwan3: update ubus status for not tracked interfacesFlorian Eckert2021-05-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | | | mwna3: fix whitespaceFlorian Eckert2021-05-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | | | | Merge pull request #15554 from pprindeville/fix-dhcp-route-whitespacesPhilip Prindeville2021-05-05
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | isc-dhcpd: handle extra spaces in routes
| * | | | | | | isc-dhcpd: handle extra spaces in routesPhilip Prindeville2021-05-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | | | | | tcpreplay: bump to version 4.3.4Alexandru Ardelean2021-05-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | | | | | | | adguardhome: bump to 0.106.1Dobroslaw Kijowski2021-05-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Create working directory when it is not present. Apparently some recent change made adguardhome fail to start when working directory is missing. * Full changelog available at: * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.1 Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
* | | | | | | | stress-ng: bump to version 0.12.07Alexandru Ardelean2021-05-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Refreshed patch. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | | | | | | | python-dotenv: update to v0.17.1Javier Marcet2021-05-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Javier Marcet <javier@marcet.info>
* | | | | | | | Merge pull request #15566 from BKPepe/hwdataRosen Penev2021-05-04
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | hwdata: update to version 0.347
| * | | | | | | | hwdata: update to version 0.347Josef Schlehofer2021-05-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | | | | | Merge pull request #15572 from dibdot/banipDirk Brenken2021-05-04
|\ \ \ \ \ \ \ \ \ | |/ / / / / / / / |/| | | | | | | | banip: update to 0.7.8
| * | | | | | | | banip: update to 0.7.8Dirk Brenken2021-05-04
|/ / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fix pid file processing of the background monitor plus child processes (bug reported in the forum) * made the enabled/disabled switch of the background monitor functional Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | | | | libmaxminddb: update to version 1.6.0Jan Pavlinec2021-05-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | | | | | python-typing-extensions: update to version 3.10.0.0Jan Pavlinec2021-05-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | | | | | Merge pull request #15532 from dangowrt/bunch-of-updatesEneas U de Queiroz2021-05-03
|\ \ \ \ \ \ \ \ | |_|/ / / / / / |/| | | | | | | a bunch of package updates
| * | | | | | | python-gnupg: update to version 0.4.7Daniel Golle2021-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
| * | | | | | | perl-mail-spamassassin: update to version 3.4.6Daniel Golle2021-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes CVE-2020-1946 Signed-off-by: Daniel Golle <daniel@makrotopia.org>
| * | | | | | | perl-net-dns: update to version 1.30Daniel Golle2021-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
| * | | | | | | opentracker: update to git HEADDaniel Golle2021-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
| * | | | | | | libksba: update to version 1.5.1Daniel Golle2021-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
| * | | | | | | libinput: update to version 1.17.1Daniel Golle2021-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
| * | | | | | | libextractor: update to version 1.11Daniel Golle2021-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
| * | | | | | | libassuan: update to version 2.5.5Daniel Golle2021-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
| * | | | | | | Jinja2: update to version 2.11.3Daniel Golle2021-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
| * | | | | | | gnunet-fuse: update to version 0.14.0Daniel Golle2021-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
| * | | | | | | debian-archive-keyring: update to 2021.1.1Daniel Golle2021-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
| * | | | | | | exfatprogs: update to version 1.1.1Daniel Golle2021-04-28
| | |/ / / / / | |/| | | | | | | | | | | | | | | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | | | nano: update version to 5.7Hannu Nyman2021-05-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upgrade nano editor to version 5.7. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | | | | | haproxy: Update HAProxy to v2.2.14Christian Lachner2021-05-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Update haproxy download URL and hash Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | | | | | Merge pull request #14237 from commodo/python-abi-versionJosef Schlehofer2021-05-01
|\ \ \ \ \ \ \ | |_|_|_|/ / / |/| | | | | | python3: introduce libpython3 with ABI_VERSION flag
| * | | | | | python3: introduce libpython3 with ABI_VERSION flagAlexandru Ardelean2021-04-28
| |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Related to discussion: https://github.com/openwrt/packages/pull/14060 Every once in a while a version bump will occur that requires an ABI change. Example: Python 3.8 to 3.9. When this happens some Python packages would need to be rebuilt. In setups where everything gets rebuilt, this isn't a problem. It's usually a bigger problem when needing to upgrade something via opkg. To accommodate for this, we add a libpython with it's own ABI_VERSION flag. If this ABI_VERSION changes, then this should propagate forward. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>