Commit graph

730 commits

Author SHA1 Message Date
Nikos Mavrogiannopoulos
099ec4a071 openconnect: use openconnect.upgrade to save configured files
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-19 23:30:16 +01:00
Nikos Mavrogiannopoulos
cdcbacdda9 Revert "openconnect: move certificate files to config/ to add graceful upgrade"
This reverts commit b53e5bfe87.
2015-01-19 23:30:10 +01:00
Nikos Mavrogiannopoulos
09c3b4df0b Revert "openconnect: cmdline parameter for CA not moved"
This reverts commit fa8f547945.
2015-01-19 23:30:05 +01:00
Nikos Mavrogiannopoulos
0d68740100 ocserv: prevent ocpasswd from using sha2crypt
That doesn't cope well with uclibc.
https://bugs.busybox.net/show_bug.cgi?id=7808

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-19 23:28:41 +01:00
Nikos Mavrogiannopoulos
392316bfc8 ocserv: use ocserv.upgrade to save configured files
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-19 23:28:26 +01:00
Nikos Mavrogiannopoulos
cb26e66c26 Revert "ocserv: store permanent config files in /etc/config"
This reverts commit 1c40fc1022.
2015-01-19 23:27:46 +01:00
Nikos Mavrogiannopoulos
5b09f7af1b openconnect: bumped version
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-17 09:15:23 +01:00
Jasper
6367ee0d0f openconnect: cmdline parameter for CA not moved
The location for the server CA file was moved in b53e5bfe87, but the corresponding command line option for opeconnect not updated.
2015-01-17 09:02:45 +01:00
Nikos Mavrogiannopoulos
b1534adc8b ocserv: store permanent config files in /etc/config
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-12 19:51:45 +01:00
Jo-Philipp Wich
bb160fa4d3 protobuf-c: use generic autoreconf fixup
Invoke the generic autoreconf fixup instead of calling the shipped autogen.sh.

This ensures that proper variants of libtoolize, autoconf, automake etc. are
used, otherwise it is not possible to rebuild protobuf-c in the SDK env.

The change requires backport to BB as it currently blocks the rebuild of ocerv.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2015-01-11 18:19:19 +01:00
Michael Heimpold
41a9c793c3 libxml2: fix compilation on archlinux and gentoo
Compilation of libxml2 on some distributions is problematic (at least
archlinux) for OpenWrt. This commit fixes the issue. Issue is caused
because configuration for some reason does not find gzopen from zlib.
This patch issues linker to include zlib anyway, if host system doesn't
have this issue, it is not a problem as linker should not link libs
twice anyway.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

Backported to BB to fix https://dev.openwrt.org/ticket/18295

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2015-01-10 22:59:30 +01:00
Nikos Mavrogiannopoulos
93119a4573 ocserv: updated to 0.8.9
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-10 21:43:07 +01:00
Nikos Mavrogiannopoulos
32da468cde openconnect: removed obsolete patch
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-10 11:23:21 +01:00
Nikos Mavrogiannopoulos
9cb5b3864d openconnect: update to 7.03
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-10 11:15:02 +01:00
Etienne CHAMPETIER
a4ed431521 zabbix: update to 2.4.3
run-tested on ar71xx

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2014-12-26 20:38:42 +01:00
Adze1502
7c2b22ca8d mwan3: update to version 1.5-9
Fix issue where config file would be overwritten in some cases
Fix issue where local address of wan point-to-point links were unreachable from lan

Signed-off-by: Jeroen Louwes <jeroen.louwes@gmail.com>
2014-12-22 10:13:54 +01:00
Etienne CHAMPETIER
bf5e1c3dc4 sqlite3: update to 3.8.7.4
compile tested on ar71xx

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2014-12-22 10:13:32 +01:00
Etienne CHAMPETIER
ad7c25a87f sqlite3: update to 3.8.7.1
Run tested on ar71xx

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2014-11-15 11:48:22 +01:00
Etienne CHAMPETIER
5c84294192 zabbix: update to 2.4.2
Remove 001-cross_compile.patch, it's fixed upstream (ZBX-5561)
Run tested on ar71xx

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2014-11-15 11:47:03 +01:00
Etienne CHAMPETIER
3123b176e9 admin/zabbix: put myself as maintainer
Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2014-11-15 11:47:03 +01:00
Christoph König
ada4d17911 zabbix: update to 2.4.0, refresh patches
Signed-off-by: Christoph König <christoph.koenig@gmail.com>
Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2014-11-15 11:47:02 +01:00
Etienne CHAMPETIER
e1dc92d52e monit: update to 5.10
Run tested on ar71xx

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2014-11-13 21:17:30 +01:00
Christoph König
3894ae38d5 monit: Update to 5.9
Signed-off-by: Christoph König <christoph.koenig@gmail.com>
2014-11-13 21:16:47 +01:00
Ian Leonard
2bce5b294f monit: add PKG_LICENSE_FILES
Signed-off-by: Ian Leonard <antonlacon@gmail.com>
2014-11-13 21:16:47 +01:00
Aedan ARFETT Renner
e27831d568 mwan3-luci: update to 1.3-5
new naming/wording - more generically mwan than mwan3
renamed cryptic variables/functions/etc everywhere
removed unused and unnecessary variables everywhere
cleaned up ugly and inefficient Lua and Javascript

Signed-off-by: Aedan Renner chipdankly@gmail.com
2014-11-11 23:00:13 +01:00
Aedan Renner
a1d8519b7d mwan3-luci: update to 1.3-4
put dummy echo command back in hotplug script send_alert function to avoid errors

Signed-off-by: Aedan Renner chipdankly@gmail.com
2014-11-11 23:00:13 +01:00
Aedan Renner
b128beaf2a mwan3-luci: update to 1.3-3
corrected name of last_resort option from "main" to "default"
added blackhole option to policy selection on rule configuration

Signed-off-by: Aedan Renner <chipdankly@gmail.com>
2014-11-11 23:00:13 +01:00
Aedan ARFETT Renner
6c1e1705b1 mwan3-luci: update to 1.3-2
added support for new last_resort option for policy configuration
added dependencies for luci-mod-admin-full and luci-lib-nixio
shortened length of menuconfig description lines
reworded things on various pages
changed date formatting in custom hotplug script
default route checks now verify both destination/netmask are 0.0.0.0
condensed messy javascript lines and removed -F' ' from awk commands

Signed-off-by: Aedan Renner <chipdankly@gmail.com>
2014-11-11 23:00:13 +01:00
Nikos Mavrogiannopoulos
4e70aa58e8 gnutls: updated to address CVE-2014-8564
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2014-11-11 19:56:39 +01:00
Nicolas Thill
e07a0c5ceb gnutls: force rebuuld when config changes
Signed-off-by: Nicolas Thill <nico@openwrt.org>
2014-11-11 19:56:33 +01:00
Nikos Mavrogiannopoulos
2f285717a2 gnutls: updated to 3.3.9
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2014-11-11 19:56:26 +01:00
Jo-Philipp Wich
6f089246a1 freeradius2: relax SSL version checks
Merge upstream commit 5ae2a70a135062a025d8fabc104eeae3a2c53a7a to relax the
SSL library version check at runtime.

The objective is to avoid the need for rebuilding freeradius2 whenever we push
binary updates for libopenssl. See https://dev.openwrt.org/ticket/18169 for
reference.

Please backport this change to the for-14.07 branch as well.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2014-11-11 11:14:17 +01:00
Jo-Philipp Wich
e9189f2efd wget: update to v1.16
The update fixes CVE-2014-4877 which allows malicious FTP servers
to modify local filesystem contents through specificially crafted
symlinks.

Please backport to for-14.07 too.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2014-10-30 11:31:56 +01:00
Marcel Denia
1c0bf8c605 perl: Don't link against libnsl, fix PPC signedness
perl: Don't try to link against libnsl

And also remove all other references to avoid confusion.
libnsl isn't really needed. Removing it allows glibc based
toolchains to build perl.

perl: Make I8/I16/I32 types explicitly signed for PPC

Type signedness is undefined for char. char may actually be unsigned for
some CPUs.
This fixes various bugs on PPC, like negative array indices.

Signed-off-by: Marcel Denia <naoir@gmx.net>
2014-10-28 18:50:59 +01:00
Steven Barth
1426670b8a libxml2: update to 2.9.2
fixes CVE-2014-3660, CVE-2014-0191 among other issues

Signed-off-by: Steven Barth <steven@midlink.org>
2014-10-21 08:57:32 +02:00
Nikos Mavrogiannopoulos
d83d5f6806 openconnect: fixed description of ca file location
Resolves #407
2014-10-09 22:15:20 +02:00
Thomas Heil
a093151650 Merge pull request #406 from npodolak/patch-1
fix apr-util URL
2014-10-07 20:54:26 +02:00
npodolak
3483c40819 fix apr-util URL
apr-util 1.5.3 is no longer hosted on biblio.org.  Get it from archive.apache.org.
2014-10-07 14:51:04 -04:00
Adze1502
e6ea22ec3c mwan3: update to version 1.5-8
Fix bug introduced in version 1.5-7; args were not parsed to script.

Signed-off-by: Jeroen Louwes <jeroen.louwes@gmail.com>
2014-10-07 14:04:53 +02:00
Adze1502
4c5ee1bc42 mwan3: update to version 1.5-7
Fixed issue where an manual ifup-ed interface would immediatly go down again
Remove from init as mwan3 is not a service

Signed-off-by: Jeroen Louwes <jeroen.louwes@gmail.com>
2014-10-07 14:04:39 +02:00
Adze1502
4cc7f9d09d mwan3: update to version 1.5-6
Fixed issue where mwan3 would not immediately set interface down on link-loss event
Added feature to define last-resort action on policies with no members

Signed-off-by: Jeroen Louwes <jeroen.louwes@gmail.com>
2014-10-07 14:04:22 +02:00
Adze1502
5a6a54e377 mwan3: update to version 1.5-4
Fix issue with more than one link route on a wan interface

Signed-off-by: Jeroen Louwes <jeroen.louwes@gmail.com>
2014-10-07 14:04:00 +02:00
sbyx
c7d2a4feef Merge pull request #400 from Naoir/bash-4.2
bash: Update to 4.2.53
2014-10-07 07:59:54 +02:00
Marcel Denia
d3397ab01d bash: Update to 4.2.53
Includes the latest bunch of security fixes

Signed-off-by: Marcel Denia <naoir@gmx.net>
2014-10-07 06:26:28 +02:00
sbyx
4280780f6c Merge pull request #364 from br101/for-14.07
horst: Add horst version 4.2
2014-10-06 10:23:23 +02:00
Bruno Randolf
02ae80a871 horst: Add horst version 4.2
horst 3.0 from oldpackages does not work well with the new mac80211 drivers
of 14.07, so please consider to merge this...

Signed-off-by: Bruno Randolf <br1@einfach.org>
2014-10-02 09:16:41 +01:00
Nikos Mavrogiannopoulos
04e21e66e2 openconnect: increased the timeout value for retrying
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2014-09-28 18:26:45 +02:00
Naoir
4080390848 Merge pull request #358 from Naoir/bash-bb
bash: Import from oldpackages, update to 4.2.49
2014-09-26 16:54:15 +02:00
Marcel Denia
42b154bf8c bash: Update to 4.2.49
Fixes CVE-2014-7169 and CVE-2014-7186.

Signed-off-by: Marcel Denia <naoir@gmx.net>
2014-09-26 16:48:07 +02:00
Marcel Denia
b32f0657de bash: Add myself as maintainer, add licensing information
Signed-off-by: Marcel Denia <naoir@gmx.net>
2014-09-26 00:44:03 +02:00