Commit Graph
91 Commits
Author SHA1 Message Date
Peter Wagner c64a84937e nfs-kernel-server: update to 1.3.4
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-12-01 16:11:37 +01:00
Peter Wagner 640d377622 ntpd: update to 4.2.8p9
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-11-27 20:18:56 +01:00
Peter Wagner 08575b71c3 git: update to 2.10.2
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-11-10 01:45:48 +01:00
Peter Wagner 78d163bdea git: update to 2.10.1
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-10-21 00:35:15 +02:00
Peter Wagner afb706d146 openssh: Unregister the KEXINIT handler after message has been
received. Otherwise an unauthenticated peer can repeat the KEXINIT and cause
allocation of up to 128MB -- until the connection is closed. Reported by
shilei-c at 360.cn

https://github.com/openssh/openssh-portable/commit/ec165c392ca54317dbe3064a8c200de6531e89ad

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-10-17 21:26:26 +02:00
Peter Wagner c67b05b269 openssh: move inbound NEWKEYS handling to kex layer; otherwise early NEWKEYS causes NULL deref
see: https://anongit.mindrot.org/openssh.git/commit/?id=28652bca29046f62c7045e933e6b931de1d16737

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-10-03 21:38:15 +02:00
Peter Wagner fbe48e2172 pulseaudio: update to 9.0, fix typo
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-10-03 20:06:12 +02:00
Peter Wagner 477f33612a git: fix wrong md5sum
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-09-23 17:07:08 +02:00
Peter Wagner 10a906ffe8 irssi: update to 0.8.20
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-09-23 17:01:49 +02:00
Peter Wagner df95e9a593 git: update to 2.10.0
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-09-23 16:59:18 +02:00
Peter Wagner 5dfd322a3a glib2: update to 2.49.7
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-09-19 21:45:24 +02:00
Peter Wagner 88abc1007d ntpd: update to 4.2.8p8
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-09-07 19:42:46 +02:00
Peter Wagner 7ad9eb6703 openssh: update to 7.3p1
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-08-09 18:58:22 +02:00
Peter Wagner 2edb2e36ec git: update to 2.8.2
Fixes:
 CVE-2016-2315
 CVE-2016-2324

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-05-13 12:54:35 +02:00
Peter Wagner 82055305b3 ntpd: update to 4.2.8p7
Fixes the following CVEs:

    Bug 3020 / CVE-2016-1551: Refclock impersonation vulnerability, AKA: refclock-peering
        Reported by Matt Street and others of Cisco ASIG
    Bug 3012 / CVE-2016-1549: Sybil vulnerability: ephemeral association attack, AKA: ntp-sybil - MITIGATION ONLY
        Reported by Matthew Van Gundy of Cisco ASIG
    Bug 3011 / CVE-2016-2516: Duplicate IPs on unconfig directives will cause an assertion botch
        Reported by Yihan Lian of the Cloud Security Team, Qihoo 360
    Bug 3010 / CVE-2016-2517: Remote configuration trustedkey/requestkey values are not properly validated
        Reported by Yihan Lian of the Cloud Security Team, Qihoo 360
    Bug 3009 / CVE-2016-2518: Crafted addpeer with hmode > 7 causes array wraparound with MATCH_ASSOC
        Reported by Yihan Lian of the Cloud Security Team, Qihoo 360
    Bug 3008 / CVE-2016-2519: ctl_getitem() return value not always checked
        Reported by Yihan Lian of the Cloud Security Team, Qihoo 360
    Bug 3007 / CVE-2016-1547: Validate crypto-NAKs, AKA: nak-dos
        Reported by Stephen Gray and Matthew Van Gundy of Cisco ASIG
    Bug 2978 / CVE-2016-1548: Interleave-pivot - MITIGATION ONLY
        Reported by Miroslav Lichvar of RedHat and separately by Jonathan Gardner of Cisco ASIG
    Bug 2952 / CVE-2015-7704: KoD fix: peer associations were broken by the fix for NtpBug2901, AKA: Symmetric active/passive mode is broken
        Reported by Michael Tatarinov, NTP Project Developer Volunteer
    Bug 2945 / Bug 2901 / CVE-2015-8138: Zero Origin Timestamp Bypass, AKA: Additional KoD Checks
        Reported by Jonathan Gardner of Cisco ASIG
    Bug 2879 / CVE-2016-1550: Improve NTP security against buffer comparison timing attacks, authdecrypt-timing, AKA: authdecrypt-timing
        Reported independently by Loganaden Velvindron, and Matthew Van Gundy and Stephen Gray of Cisco ASIG.

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-05-04 18:49:28 +02:00
Peter Wagner d986ccd6c5 git: update to 2.7.3
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-03-28 19:49:27 +02:00
Peter Wagner 1c729d723d openssh: update to 7.2p2
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-03-11 16:52:04 +01:00
Peter Wagner 0cc876bc65 openssh: v7.2p1
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-03-06 22:42:27 +01:00
Peter Wagner 59e8dcf186 glib2: fix download path
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-02-22 22:23:31 +01:00
Peter Wagner 00a5339e7e glib2: update to 2.46.2
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-02-22 22:21:08 +01:00
Peter Wagner a6026fd1b3 pulseaudio: update to 8.0
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-02-22 22:02:12 +01:00
Peter Wagner ff305cb8fe git: update to 2.7.1
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-02-10 19:58:08 +01:00
Peter Wagner 26beaa56e1 ntpd: update to 4.2.8p6
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-01-25 20:25:47 +01:00
Peter Wagner fab13041b3 openssh: update to 7.1p2
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-01-15 21:23:18 +01:00
Peter Wagner a0fac8b9a0 ntpd: update to 4.2.8p5
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-01-14 17:50:10 +01:00
Peter Wagner a8ad5cd54d tor: update to 0.2.7.6
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-12-27 16:32:25 +01:00
Peter Wagner e9e5ffaed7 libsndfile: update to 1.0.26
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-11-22 20:07:46 +01:00
Peter Wagner b65967668d ntpd: update to 4.2.8p4
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-11-22 00:59:39 +01:00
Peter Wagner d55d9ad92c pulseaudio: update to 7.1
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-11-21 23:39:35 +01:00
Peter Wagner c136bcbddb glib2: update to 2.44.1
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-10-04 12:58:22 +02:00
Peter Wagner 8025353d76 git: update to 2.6.0
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-10-03 11:22:11 +02:00
Peter Wagner a5729ee727 nfs-kernel-server: update to 1.3.3
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-10-03 11:19:22 +02:00
Peter Wagner 245fbc1f65 pulseaudio: update to 7.0
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-10-03 10:54:45 +02:00
Peter Wagner d199f2c038 openssh: update to 7.1p1
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-08-26 18:58:14 +02:00
Peter Wagner 1b92dfbe60 git: update to 2.4.6
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-07-23 21:40:39 +02:00
Peter Wagner e0ac428907 openssh: update to 6.9p1
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-07-18 08:53:39 +02:00
Peter Wagner 1710be8605 git: update to 2.4.2
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-05-27 21:32:31 +02:00
Peter Wagner 612e1a2aaf pulseaudio: fix libjson dependency
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-04-24 20:30:13 +02:00
Peter Wagner 0135d8e2bd ntpd: fix typo
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-04-13 18:53:17 +02:00
Peter Wagner 2c1c2de230 Currently the hotplug script never starts because it assumes the wrong
path to the binary. Fix the path.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-04-13 18:14:27 +02:00
Peter Wagner f4ef2c8fd7 ntpd: update to 4.2.8p2
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-04-12 20:56:51 +02:00
Peter Wagner 20c2805549 git: update to 2.3.5
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-04-12 20:54:38 +02:00
Peter Wagner 368c113db7 pulseaudio: pulseaudio-daemon depends on libjson-c
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-03-25 13:06:39 +01:00
Peter Wagner f49ab7c61a Revert "debootstrap: bump version"
This reverts commit e9072e50fe.
2015-03-25 13:02:11 +01:00
Peter Wagner 9322b6e80b openssh: update to 6.8p1
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-03-19 10:35:59 +01:00
Peter Wagner f3527d974e git: update to 2.3.3
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-03-16 02:34:13 +01:00
Peter Wagner 1b66d41113 glib2: update to 2.43.4
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-02-15 22:43:47 +01:00
Peter Wagner 43b06049c3 pulseaudio: update to 6.0
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-02-15 22:43:47 +01:00
Peter Wagner a957258b78 ntpd: update to 4.2.8p1
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-02-09 14:41:44 +01:00
Peter Wagner ea86770688 git: update to 2.3.0
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-02-09 14:40:01 +01:00
Peter Wagner d09c153df0 nfs-kernel-server: update to 1.3.2
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-02-02 03:02:07 +01:00
Peter Wagner b490ad6928 glib2: update to 2.43.3
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-01-25 19:02:57 +01:00
Peter Wagner 3687f946a2 git: update to 2.2.2
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-01-18 21:00:48 +01:00
Peter Wagner 3427303eee libtorrent: update to latest git HEAD
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-01-18 20:05:55 +01:00
Peter Wagner 3d54534d69 rtorrent: update to git HEAD
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-01-18 20:04:56 +01:00
Peter Wagner 99aad1438a [ntpd] fix deps and cleanup the Makefile
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-01-11 18:34:29 +01:00
Peter Wagner 45e8c33f3a [tor]: update to 0.2.5.10
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-01-08 13:49:07 +01:00
Peter Wagner 335dbdb850 git: update to 2.2.1
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2014-12-23 13:28:35 +01:00
Peter Wagner e40c1e3586 ntpd: update to 4.2.8 and remove nossl support
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2014-12-22 12:36:32 +01:00
Peter Wagner 7e9097b40c wget: update to 1.16.1
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2014-12-11 12:14:10 +01:00
Peter Wagner 14be8d35e8 git: update to 2.2.0
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2014-12-04 10:12:32 +01:00
Peter Wagner b026b50320 dovecot: update to 2.2.15
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2014-11-09 20:23:56 +01:00
Peter Wagner 169c863286 dovecot: update to 2.2.14
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2014-10-19 04:57:17 +02:00
Peter Wagner 30bdda47fb openssh: update to 6.7p1
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2014-10-19 04:45:16 +02:00
Peter Wagner bfcfcc48c3 irssi: update to 0.8.17
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2014-10-18 23:00:03 +02:00
Peter Wagner ad4da82a8e nfs-kernel-server: update to 1.3.1
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2014-10-18 15:34:22 +02:00
Peter Wagner 0d260899aa openssh,ntpd: move USERID to the server only as the client utils don't need a user/group
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2014-10-14 18:00:42 +02:00
Peter Wagner 5657365935 tor: update to the latest stable version
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2014-10-07 23:30:29 +02:00
Peter Wagner bb01c49e01 dovecot: disable LDAP by default
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2014-10-07 19:55:33 +02:00
Peter Wagner 51fa6d2f9c git: update to 2.1.0
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2014-08-26 21:19:30 +02:00
Peter Wagner 72f236973a add myself as maintainer for
alsa-lib
glib2
libffi
libsndfile
libtorrent
speex
tcp_wrappers
etherwake
git
nfs-kernel-server
portmap
rtorrent

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2014-07-01 20:54:41 +02:00
Peter Wagner 285280868b Merge branch 'master' of github-openwrt:openwrt/packages 2014-07-01 19:59:02 +02:00
Peter Wagner 56350f77c3 grep: import from packages and update to the latest version 2014-07-01 18:17:52 +02:00
Peter Wagner 1696bcef81 glib2: import from packages and update to the latest version 2014-06-30 15:56:56 +02:00
Peter Wagner 1be5d608eb libffi: import from packages and update to latest version 2014-06-30 15:49:02 +02:00
Peter Wagner 28d0f1d506 portmap: import from packages 2014-06-30 15:42:44 +02:00
Peter Wagner 48340d616f tcp_wrappers: import from packages 2014-06-30 15:35:29 +02:00
Peter Wagner 4b1fad86f8 pulseaudio: remove avahi support 2014-06-30 15:28:57 +02:00
Peter Wagner 5a6ac78c5a alsa-lib: import from packages 2014-06-30 15:28:40 +02:00
Peter Wagner 29a8acab1f speex: import from packages 2014-06-30 15:28:18 +02:00
Peter Wagner aa69fde536 libsndfile: import from packages 2014-06-30 15:27:50 +02:00
Peter Wagner bf27645121 etherwake: import from packages 2014-06-28 22:54:10 +02:00
Peter Wagner a629191c5a import irssi and update to latest version
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2014-06-18 14:27:31 +02:00
Peter Wagner f8ba70a8a1 dovecot: import from packages
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2014-06-16 11:54:42 +02:00
Peter Wagner d5dd6b3c31 ntpd: import from packages
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2014-06-16 11:54:42 +02:00
Peter Wagner a49565640c pulseaudio: import from packages
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2014-06-16 11:54:42 +02:00
Peter Wagner 4c89b9da1a rtorrent: import from packages and update to 0.9.4
libtorrent: import from packages and update to 0.13.4

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2014-06-16 11:53:44 +02:00
Peter Wagner fe62d146fa openssh: import from packages
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2014-06-16 11:45:34 +02:00
Peter Wagner 7fedc0c35b nfs-kernel-server: import from packages
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2014-06-16 11:45:28 +02:00
Peter Wagner 306378c90d git: import from packages
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2014-06-16 11:45:20 +02:00
Peter Wagner 2ed81adda6 ctorrent: import from packages
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2014-06-16 11:38:45 +02:00