Commit Graph
952 Commits
Author SHA1 Message Date
Steven Barth 61d0f260f3 Merge pull request #1791 from MikePetullo/for-15.05-krb5
krb5: update to 1.13.2
2015-10-13 10:06:28 +02:00
John Crispin fc2152034c cgi-io: add a small helper cgi that can be used by RPCD based UIs
Signed-off-by: John Crispin <blogic@openwrt.org>
2015-10-02 13:59:43 +02:00
Yousong Zhou 7f3ef93466 xl2tpd: bump version
The update is mainly for addressing some memory corruption and segementation
faults issues observed when running xl2tpd in OpenWrt.  The relevant upstream
pull request was at link [1]

 [1] Devel fix valgrind #77, https://github.com/xelerance/xl2tpd/pull/77

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2015-10-02 08:43:14 +08:00
Marko RatkajandLuka Perkov eb1254a3a0 squild: bump version to 3.5.9
Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
2015-09-27 23:42:22 +02:00
Marko RatkajandLuka Perkov 2a1409b927 e2guardian: bump version to 3.2.0
Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
2015-09-27 23:41:57 +02:00
Yousong Zhou 77e4444a27 xl2tpd: fix by backporting the version from master branch
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2015-09-26 12:03:06 +08:00
Karl Palsson 5fd21e2305 mosquitto: update to 1.4.4
More information: http://mosquitto.org/2015/09/version-1-4-4-released/

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2015-09-25 15:03:08 +00:00
W. Michael Petulloandheil 57ec0c99a5 lighttpd: update to 1.4.37
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2015-09-21 15:47:12 +02:00
W. Michael Petullo 6e1a70ad6c krb5: update to 1.13.2
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2015-09-20 19:41:16 -04:00
Markus StenbergandSteven Barth 2bcaf5fc70 mdnsresponder: fix fd leak for IPv6 sockets
Signed-off-by: Steven Barth <steven@midlink.org>
2015-09-14 14:06:53 +02:00
heil d06a94bfe6 haproxy: fixes from upstream
- [PATCH 14/16] BUG/MINOR: http: remove stupid HTTP_METH_NONE entry
 - [PATCH 15/16] BUG/MAJOR: http: don't call http_send_name_header()
 - [PATCH 16/16] BUG/MINOR: tools: make str2sa_range() report

Signed-off-by: heil <heil@terminal-consulting.de>
2015-09-09 20:50:36 +02:00
Daniel SalzmanandSteven Barth fd2374e5ff knot: update to 1.6.5
Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>
2015-09-08 11:33:46 +02:00
Daniel SalzmanandSteven Barth dadc4008ed knot: update to 1.6.4
Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>
2015-09-08 11:33:42 +02:00
Steven Barth f387d3cc81 strongswan: bump to 5.3.3
Signed-off-by: Steven Barth <steven@midlink.org>
2015-09-07 11:11:22 +02:00
Marcin JurkowskiandSteven Barth 997c932e62 strongswan: make kmod-ipsec6 dependency conditional
Makes kmod-ipsec6 requirement dependent on IPv6 support for packages.
This allows to disable unnecessary IPv6 kernel modules, saving
considerable amount of space.

Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com>
2015-09-07 11:11:15 +02:00
Dirk FeytonsandSteven Barth 29d1085028 strongswan: add a couple more plugins
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
2015-09-07 11:11:07 +02:00
Ulrich WeberandSteven Barth 046f800efb strongswan: dont overwrite ipsec.conf and ipsec.user during upgrade
Signed-off-by: Ulrich Weber <uw@ocedo.com>
2015-09-07 11:11:01 +02:00
Yousong ZhouandSteven Barth 19cf8c6105 strongswan: split out libtls.so as a separate package.
When only strongswan-minimal is selected, libtls.so will not be built
yet package strongswan will still try to copy the file causing build
failure.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2015-09-07 11:10:53 +02:00
Adam LebsackandSteven Barth 1deb958e37 strongswan: Added strongswan-mod-eap-tls
Signed-off-by: Adam Lebsack <alebsack@gmail.com>
2015-09-07 11:10:48 +02:00
Steven Barth da180706b6 strongswan: add more exceptions to musl-fixes
Signed-off-by: Steven Barth <steven@midlink.org>
2015-09-07 11:10:40 +02:00
Steven Barth 69ad693a37 strongswan: refresh musl compatibility fixes
Signed-off-by: Steven Barth <steven@midlink.org>
2015-09-07 11:10:34 +02:00
heil e51b71ad78 haproxy: fixes from upstream
- [PATCH 05/13] BUG/MINOR: http/sample: gmtime/localtime can fail
 - [PATCH 06/13] DOC: typo in 'redirect', 302 code meaning
 - [PATCH 07/13] DOC: mention that %ms is left-padded with zeroes.
 - [PATCH 08/13] CLEANUP: .gitignore: ignore more test files
 - [PATCH 09/13] CLEANUP: .gitignore: finally ignore everything but what
 - [PATCH 10/13] MEDIUM: config: emit a warning on a frontend without
 - [PATCH 11/13] BUG/MEDIUM: counters: ensure that src_{inc,clr}_gpc0
 - [PATCH 12/13] DOC: ssl: missing LF
 - [PATCH 13/13] DOC: fix example of http-request using

Signed-off-by: heil <heil@terminal-consulting.de>
2015-09-07 00:02:48 +02:00
Nikos Mavrogiannopoulos 241a8ad346 ocserv: updated to 0.10.8
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-09-04 21:33:19 +02:00
Nikos Mavrogiannopoulos 7f6a237d7d openconnect: corrected port descriptions in README
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-09-04 21:33:19 +02:00
Nikos Mavrogiannopoulos c773d4ad91 ocserv: more explicit documentation
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-09-04 21:33:19 +02:00
Nikos Mavrogiannopoulos 52bf9d5efc ocserv: updated to 0.10.6
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-09-04 21:33:19 +02:00
Daniel GimpelevichandJo-Philipp Wich 877e9fb00d vpnc: bump release
Signed-off-by: Daniel Gimpelevich <daniel@gimpelevich.san-francisco.ca.us>
2015-09-03 17:38:22 +02:00
Daniel GimpelevichandJo-Philipp Wich 5ff1b7ad51 vpnc: corrected call to proto_add_host_dependency 2015-09-03 17:38:18 +02:00
Jo-Philipp Wich cb5b508b46 vpnc: fix musl compatibility
- Add missing `sys/ttydefaults.h` include to `config.c`
 - Restrict usage of `error.h` to glibc and uclibc only
 - Avoid including `linux/if_tun.h` on non-glibc/uclibc to prevent
   musl kernel/libc header conflicts

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2015-09-03 17:38:13 +02:00
Baptiste Jonglez 1a78a488b7 bmon: Add missing runtime dependency: terminfo
Signed-off-by: Baptiste Jonglez <git@bitsofnetworks.org>
2015-09-03 17:32:13 +02:00
Toke Høiland-Jørgensen 250b11a475 sqm-scripts: Bump to v1.0.3.
Backported changes from master.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2015-09-03 15:31:56 +02:00
Noah MeyerhansandJo-Philipp Wich ffda9cc9c7 [bind] Update to 9.9.7-P3 to fix CVE-2015-5722 and CVE-2015-5986
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2015-09-03 14:03:41 +02:00
Noah MeyerhansandJo-Philipp Wich 4e3085cd05 bind: update to version 9.9.7-p2
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2015-09-03 14:03:31 +02:00
Nikos Mavrogiannopoulos e778bd4998 openconnect: disabled the resolving code from ppp in netifd script
That code was causing netifd disabling openconnect with no way
to restart it.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-08-26 23:00:45 +02:00
heil ee8052d459 haproxy: fixes for upstream version 1.5.14
- [PATCH 1/4] BUG/MINOR: log: missing some ARGC_* entries in
 - [PATCH 2/4] DOC: usesrc root privileges requirements
 - [PATCH 3/4] BUILD: ssl: Allow building against libssl without SSLv3.
 - [PATCH 4/4] DOC/MINOR: fix OpenBSD versions where haproxy works

Signed-off-by: heil <heil@terminal-consulting.de>
2015-08-24 10:46:34 +02:00
Rafał Miłecki 01717c05a0 lighttpd: backport a fix for running out of filedescriptors
It was breaking uploads of files 4 MiB+. This patch fixes:
https://github.com/openwrt/packages/issues/1658

Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
2015-08-19 17:53:50 +02:00
heil a7d66cec4c apache: bump to version 2.2.31
Signed-off-by: heil <heil@terminal-consulting.de>
2015-08-17 14:37:14 +02:00
Toke Høiland-Jørgensen 1ee31bdfd2 netperf: update to v2.7.0 2015-08-03 18:13:58 +02:00
Toke Høiland-Jørgensen aa75904c0b Adopt the netperf package.
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2015-08-03 18:13:54 +02:00
Steven Barth e96cf8db91 Merge pull request #1616 from tru7/for-15.05
[for-15.05] knxd: bump to newest version for CC
2015-07-27 23:24:39 +02:00
W. Michael Petullo 1e2bf20acf lighttpd: update to 1.4.36
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2015-07-26 12:56:12 -04:00
Alexander RyzhovandW. Michael Petullo da756e239f lighttpd: add liblua deps for lighttpd-mod-cml and lighttpd-mod-magnet
Signed-off-by: Alexander Ryzhov <openwrt@ryzhov-al.ru>
2015-07-26 12:55:12 -04:00
Othmar Truniger 805c6e6924 knxd: bump to newest version for CC
Signed-off-by: Othmar Truniger <github@truniger.ch>
2015-07-26 18:27:01 +02:00
Jeroen LouwesandEtienne CHAMPETIER 75f978879e mwan3: update to version 1.6-2
Fix malformed uci commands. (issue #1502)

Signed-off-by: Jeroen Louwes <jeroen.louwes@gmail.com>
2015-07-23 13:51:04 +02:00
Cezary JackiewiczandJo-Philipp Wich bcedf17632 [packages] vsftpd: CVE-2015-1419
Unspecified vulnerability in vsftp 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to deny_file parsing.
2015-07-22 09:47:48 +02:00
Daniel GolleandJo-Philipp Wich 64c458ba8c freeradius2: update to 2.2.8
Fixes oCert CVE-2015-4680.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2015-07-20 10:14:31 +02:00
Toke Høiland-Jørgensen 876ee51cc8 sqm-scripts: Default to ECN on for egress.
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2015-07-12 22:25:12 +02:00
Sebastian MoellerandToke Høiland-Jørgensen e9a7e58ba3 [SQM] Fix simple.qos to allow using cake as ingress shaper
simple.qos had accidentally set up the egress shaper twice, once
with the true egress parameters and a second time using the ingress
parameters, effectively misconfiguring both directions. This bub
only affected situations where 3-tier ingress classification was
used.

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-07-12 22:25:12 +02:00
Sebastian MoellerandToke Høiland-Jørgensen 478903aea1 [SQM] Fix sqm_logger to accept empty strings as input
sqm_logger tried tro wait indefinitely if passed an empty string.
This in turn makes sqm-scripts hang. Quoting the input argument in sqm_logger
seems to fix the problem.

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-07-12 22:25:12 +02:00
Sebastian MoellerandToke Høiland-Jørgensen 30e02086c5 [SQM] Fix changes relating to cake lnk layer adjustments
The last batch of changes tried to teach the GUI to pass link layer
options to cake but forgot to actually call the function that parses
the GUI variables and used it as a string insteead. So this fixes that
it also tries to allow the use of the tc_stab link layer adjustment
method with cake so the implementations can be validated against each other
easily. Needs testing...

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-07-12 22:25:12 +02:00