Commit graph

3509 commits

Author SHA1 Message Date
Luka Perkov
d44b07c279 nginx: bump to 1.9.6
In this bump as agreed with Thomas we are dropping out all the nginx 3rd party
addons. In case you would like to see your 3rd party addon included please send
a pull request and make sure it works with newest version.

Signed-off-by: Luka Perkov <luka@openwrt.org>
2017-11-12 18:42:54 +01:00
Paul Fertser
3c7b3d57dd nginx: add support for SPNEGO authentication
This adds a module suitable for Kerberos SSO, e.g. for integrating
into Active Directory domains.

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
2017-11-12 18:42:49 +01:00
heil
ec14ed490a nginx: fix musl compatibility
- include Patches according to issue #1129
 - refresh Makefile

Signed-off-by: heil <heil@terminal-consulting.de>
2017-11-12 18:42:45 +01:00
Nuno Goncalves
b4b69ca9c5 rtklib: fix repository and bump version (fixes #3212)
Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>
2017-11-12 09:38:00 +01:00
Nuno Goncalves
2930345a7b rtklib: bump version to 2.4.2 p11, close #1624
Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>
2017-11-12 09:38:00 +01:00
Zoltan HERPAI
4273641178 php5: bump to 5.6.32
Fixes since 5.6.26:
 - ton of bugs
 - CVE-2016-9933
 - CVE-2016-9934
 - CVE-2016-9935
 - CVE-2016-10158
 - CVE-2016-10167
 - CVE-2016-10168
 - CVE-2016-10159
 - CVE-2016-10160
 - CVE-2016-10161
 - CVE-2017-7890
 - CVE-2017-9224
 - CVE-2017-9226
 - CVE-2017-9227
 - CVE-2017-9228
 - CVE-2017-9229
 - CVE-2016-1283

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-10 22:12:34 +01:00
Michael Heimpold
b8a8d398de php5: update to 5.6.26
This fixes the following CVEs:
 - in intl: CVE-2016-7416
 - in mysqlnd: CVE-2016-7412
 - in phar: CVE-2016-7414
 - in spl: CVE-2016-7417
 - in standard: CVS-2016-7411
 - in wddx: CVE-2016-7413, CVE-2016-7418

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2017-11-10 20:31:31 +01:00
Michael Heimpold
0897526541 php5: update to 5.6.25
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2017-11-10 20:31:25 +01:00
Michael Heimpold
48b402eb65 php5: update to 5.6.23
This fixes the following CVEs:
 - in GD: CVE-2015-8874, CVE-2016-5766, CVE-2016-5767
 - in mbstring: CVE-2016-5768
 - in mcrypt: CVE-2016-5769
 - in SPL: CVE-2016-5770, CVE-2016-5771
 - in WDDX: CVE-2016-5772
 - in zip: CVE-2016-5773

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2017-11-10 20:31:20 +01:00
Michael Heimpold
01e3a2fe18 php5: update to 5.6.21
This fixes the following CVEs:
 - in BCMath: CVE-2016-4537, CVE-2016-4538
 - in EXIF: CVE-2016-4542, CVE-2016-4543, CVE-2016-4544
 - in GD: CVE-2016-3074
 - in Intl: CVE-2016-4540, CVE-2016-4541
 - in XML: CVE-2016-4539

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2017-11-10 20:31:15 +01:00
Michael Heimpold
eb71734dba php5: add mod_intl (resolves #2620)
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2017-11-10 20:31:08 +01:00
Michael Heimpold
9b44ecc86f php5: update to 5.6.19
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2017-11-10 20:31:00 +01:00
Michael Heimpold
11ed11780d php5: update to 5.6.18
Note: Upstream tagged this as security release.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2017-11-10 20:30:55 +01:00
Michael Haas
3df25df858 wifidog: Bump to 1.3.0
* Updates wifidog to latest upstream release.
* Removes patches/100-musl-compat.patch as that's included in 1.3.0

Signed-off-by: Michael Haas <haas@computerlinguist.org>
2017-11-10 18:39:13 +01:00
Jo-Philipp Wich
eb0de8f114 wifidog: fix musl compatibility
- Fix missing `fcntl.h` in `protocol.c`
 - Replace nonstandard `sys/unistd.h` includes with `unistd.h` ones

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2017-11-10 18:39:08 +01:00
Daniel Golle
481a8850ff
Merge pull request #5100 from wigyori/for-15.05-tracertools
CC: tracertools: use new git HEAD
2017-11-10 18:26:32 +01:00
Daniel Golle
0f854ba5fe tracertools: use new git HEAD
gitorious archive became available, so I could import the project
history from there into the new repo on github. Rebasing the changes
made since 2014 on top of the original git tree obviously caused
the commit hashes to differ.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-11-10 14:53:26 +01:00
Daniel Golle
852570e41e tracertools: update source, fixes bug on little-endian systems
and improves collectd support

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-11-10 14:53:08 +01:00
Daniel Golle
b4b62a17e7 tracertools: update source
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-11-10 14:53:02 +01:00
Hauke Mehrtens
e37a60ef3a tor: update to version 0.2.9.11
This fixes CVE-2017-0376

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:07:34 +01:00
Hauke Mehrtens
7d5da97506 tor: update to version 0.2.9.10
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:07:29 +01:00
Hauke Mehrtens
83dba23e0a tor: update to version 0.2.9.9
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:07:22 +01:00
Hauke Mehrtens
b05cb4e4bd tor: log to syslog by default
Make tor log to syslog by default instead of stdout.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:07:13 +01:00
Hauke Mehrtens
e6ea3339fe tor: add tor-gencert, tor-resolve and torify
These are some additional applications build by the tor package.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:07:04 +01:00
Hauke Mehrtens
5228fe11d8 tor: add geoip6 to tor-geoip
This add the IPv6 addresses to the tor-geoip6 package.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:06:56 +01:00
Hauke Mehrtens
4001649ed5 tor: preserve tor keys over sysupgrade
Mark the directories containing the keys for hidden services as
conffiles to preserve them over sysupgrade.

Fixes: #2247

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:06:47 +01:00
Hauke Mehrtens
88e4f98f2c tor: update to version 0.2.9.8
In addition update some configure options and use EXTRA_CFLAGS.
Setting RunAsDaemon to 1 will be overwritten by the init script option
"--runasdaemon 0" anyway and we want it in foreground for procd.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:06:32 +01:00
Hauke Mehrtens
030c7796ef tor: update to version 0.2.8.11
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:05:50 +01:00
Nima Fatemi
aa224c9ae1 Tor: update to 0.2.8.9
- update to 0.2.8.9
    - use sha256 instead of md5 for integrity check
    - add dependency: libcap

signed-off-by: Nima Fatemi <nima@torproject.org>
2017-11-10 14:05:39 +01:00
Felix Fietkau
e02b4a7793 tor: add missing zlib dependency
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2017-11-10 14:05:25 +01:00
Karl Palsson
37b5a5761e tor: correct URL for dist downloads
Original url was 404.
Fixes Github issue #2284
2017-11-10 14:05:16 +01:00
Jeffery To
da2c8cc672 tor: remove tor-fw-helper
The "internal pure-C" tor-fw-helper was removed in 0.2.7.5. This removes
the tor-fw-helper package and references to its dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2017-11-10 14:05:03 +01:00
Luka Perkov
b24f68ead8 taskwarrior: update to 2.4.4
Signed-off-by: Luka Perkov <luka@openwrt.org>
2017-11-10 13:41:46 +01:00
Zoltan HERPAI
0396883a08 stunnel: use archive/ as download source
Anything below 5.43 is archived, update download source
to use paths accordingly.

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-10 13:19:14 +01:00
Felix Fietkau
1c9d3861d8 stunnel: add missing zlib dependency
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2017-11-10 12:12:06 +01:00
Michael Haas
c544adacd4 stunnel: Update from 5.14 to 5.20
* 010_fix_getnameinfo.patch is no longer needed
* 011-cron-without-pthread-fix.patch added, fixes incorrect
  ifdef when building without pthreads

Signed-off-by: Michael Haas <haas@computerlinguist.org>
2017-11-10 12:11:59 +01:00
Zoltan HERPAI
c11b79a127 stm32flash: move download source
code.google is not available anymore, move to use SF.

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-10 12:05:57 +01:00
Zoltan HERPAI
becd747c1a net/sslh: move download source
The old download source was pulled from the net, move to github.

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-10 12:04:52 +01:00
Dirk Neukirchen
92fa2b3895 squid: disable krb5
- fix build error reported by buildbot by disabling krb5
- libcom_err from krb5 is used - configure output:
configure: WARNING: library 'com_err' is required for Heimdal Kerberos
- krb5 has its own libcom_err (see krb5 package) with its own symbols

- linking with wrong libcom_err from libext2fs produces errors during
libgssapi_krb5.so: undefined reference to `error_message@com_err_3_MIT'
libgssapi_krb5.so: undefined reference to `remove_error_table@com_err_3_MIT'
libgssapi_krb5.so: undefined reference to `add_error_table@com_err_3_MIT'
-> remove libext2fs dependency (wasnt working anyway - no PKG_BUILD_DEP)

Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>
2017-11-09 23:33:36 +01:00
Daniel Golle
c465fdc5f8 squid: build-depend on libext2fs
squid uses libcom_err, a static library provided by libext2fs

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-11-09 23:33:33 +01:00
Zoltan HERPAI
86ff9a70f1 snort: update download source
2.9.7.2 was moved into the archive section, update
source accordingly until someone upgrades it.

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-09 22:54:14 +01:00
Noah Meyerhans
6f06eb2e70 bind: update to 9.10.4-p4
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2017-11-09 21:00:41 +01:00
Noah Meyerhans
374eea23e2 bind: Set PKG_USE_MIPS16:=0 2017-11-09 21:00:25 +01:00
Noah Meyerhans
c2b892b145 bind: Update to 9.9.9-p3 for CVE-2016-2776
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2017-11-09 21:00:13 +01:00
Zoltan HERPAI
61df1559b8 net/bind: PKG_RELEASE increased
Signed-off-by: DonkZZ <donk@evhr.net>
2017-11-09 20:59:27 +01:00
DonkZZ
41a87a5ce5 net/bind: Update db.root
The contents of the file "db.root" is very old (12 years).
Here's a new version downloaded from ftp://ftp.internic.net/domain/

Signed-off-by: DonkZZ <donk@evhr.net>
2017-11-09 20:58:03 +01:00
DonkZZ
3497b7239d net/bind: Little cleaning in named.init
The variable "config_file" appears twice.

Signed-off-by: DonkZZ donk@evhr.net
2017-11-09 20:57:55 +01:00
Noah Meyerhans
fae7df9e66 bind: Update to 9.9.8-P4 to resolve CVE-2016-1285 and CVE-2016-1286
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2017-11-09 20:57:38 +01:00
Zoltan HERPAI
f297f6e6c9 perl-dbi: bump to 1.634
As the previous sources were pulled from the net, bump to this
version.

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-09 19:50:29 +01:00
Zoltan HERPAI
3656eb5464 perl-www-mechanize: bump to 1.75
As the previous sources were pulled from the net, bump to this
version.

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-09 19:49:50 +01:00