Commit graph

3183 commits

Author SHA1 Message Date
Etienne CHAMPETIER
551f39d4fd zabbix: switch zabbix_agentd to procd
run tested on ar71xx

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2015-07-11 00:34:31 +02:00
Etienne CHAMPETIER
f505a27607 zabbix: add option to run daemon in foreground
this will allow us to switch to procd and use jailing ...
this patch come from https://support.zabbix.com/browse/ZBXNEXT-611
big thanks to Boris Manojlovic

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2015-07-10 21:45:53 +02:00
Nikos Mavrogiannopoulos
62037ba35f openconnect: corrected call to proto_add_host_dependency
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-07-07 22:49:05 +02:00
arfett
2150ffa21f mwan3-luci update to version 1.4-3
Fixed two issues in Chaos Calmer and trunk:
-troubleshooting page not displaying
-UCI arguments out of order because of switch to musl c library from uclibc

Signed-off-by: Aedan "arfett" Renner <chipdankly@gmail.com>
2015-07-07 10:58:33 +02:00
Saverio Proto
b75488123b [for-15.05] tinc: version bump 1.0.26
Signed-off-by: Saverio Proto <zioproto@gmail.com>
2015-07-06 20:24:59 +02:00
Jiri Slachta
51f194e91f libssh2: update to version 1.6.0
Signed-off-by: Jiri Slachta <slachta@cesnet.cz>
2015-07-04 23:03:29 +02:00
heil
181b13f834 haproxy: fixes from upstream
- BUILD/MINOR: tools: rename popcount to my_popcountl
 - BUG/MAJOR: buffers: make the buffer_slow_realign() function respect output data

Signed-off-by: heil <heil@terminal-consulting.de>
2015-07-03 18:35:21 +02:00
heil
45ba9f112a haproxy: fixes from upstream
- BUG/MAJOR: buffers: make the buffer_slow_realign() function respect output data

Signed-off-by: heil <heil@terminal-consulting.de>
2015-07-02 21:58:51 +02:00
Steven Barth
fa7ed79149 Merge pull request #1490 from chris5560/for-15.05
[for-15.05] ddns-scripts: fix/update to version 2.4.3-1
2015-06-29 11:28:08 +02:00
Christian Schoenebeck
ce2b260ca5 [for-15.05] ddns-scripts: fix/update to version 2.4.3-1
fixed sed when filtering IP address from nslookup output
because "Server:" block might have multiple address lines.
Thanks to Arjen de Korte

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2015-06-27 10:37:50 +02:00
Nikos Mavrogiannopoulos
7551321fab vpnc-scripts: bumped version
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-27 08:22:20 +02:00
Nikos Mavrogiannopoulos
814f65cfb9 vpnc-script: handle multiple servers in INTERNAL_IP_DNS vars
Resolves #1372

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-27 08:20:14 +02:00
heil
d74b836a35 haproxy: bugfix release 1.5.13
Released version 1.5.13 with the following main changes :
  - BUG/MINOR: check: fix tcpcheck error message
  - CLEANUP: deinit: remove codes for cleaning p->block_rules
  - DOC: Update doc about weight, act and bck fields in the statistics
  - MINOR: ssl: add a destructor to free allocated SSL ressources
  - BUG/MEDIUM: ssl: fix tune.ssl.default-dh-param value being overwritten
  - MEDIUM: ssl: replace standards DH groups with custom ones
  - BUG/MINOR: debug: display (null) in place of "meth"
  - BUG/MINOR: cfgparse: fix typo in 'option httplog' error message
  - BUG/MEDIUM: cfgparse: segfault when userlist is misused
  - BUG/MEDIUM: stats: properly initialize the scope before dumping stats
  - BUG/MEDIUM: http: don't forward client shutdown without NOLINGER except for tunnels
  - CLEANUP: checks: fix double usage of cur / current_step in tcp-checks
  - BUG/MEDIUM: checks: do not dereference head of a tcp-check at the end
  - CLEANUP: checks: simplify the loop processing of tcp-checks
  - BUG/MAJOR: checks: always check for end of list before proceeding
  - BUG/MEDIUM: checks: do not dereference a list as a tcpcheck struct
  - BUG/MEDIUM: peers: apply a random reconnection timeout
  - BUG/MINOR: ssl: fix smp_fetch_ssl_fc_session_id
  - MEDIUM: init: don't stop proxies in parent process when exiting
  - MINOR: peers: store the pointer to the signal handler
  - MEDIUM: peers: unregister peers that were never started
  - MEDIUM: config: propagate the table's process list to the peers sections
  - MEDIUM: init: stop any peers section not bound to the correct process
  - MEDIUM: config: validate that peers sections are bound to exactly one process
  - MAJOR: peers: allow peers section to be used with nbproc > 1
  - DOC: relax the peers restriction to single-process
  - CLEANUP: config: fix misleading information in error message.
  - MINOR: config: report the number of processes using a peers section in the error case
  - BUG/MEDIUM: config: properly compute the default number of processes for a proxy

Signed-off-by: heil <heil@terminal-consulting.de>
2015-06-26 18:08:24 +02:00
heil
0716433f2e haproxy: upstream fixes
- [PATCH 15/18] MEDIUM: ssl: replace standards DH groups with custom
 - [PATCH 16/18] BUG/MINOR: debug: display (null) in place of "meth"
 - [PATCH 17/18] CLEANUP: deinit: remove codes for cleaning
 - [PATCH 18/18] BUG/MINOR: ssl: fix smp_fetch_ssl_fc_session_id

Signed-off-by: heil <heil@terminal-consulting.de>
2015-06-22 14:59:02 +02:00
Nikos Mavrogiannopoulos
8cb6f4c09e transmission: bumped version
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-21 12:00:17 +02:00
Nikos Mavrogiannopoulos
4dd617c9af transmission: increase the number of retries for respawn
The default 5 per hour is too small for transmission which may
crash quite some times.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-21 11:59:31 +02:00
Nikos Mavrogiannopoulos
641ee7ce44 transmission: use procd
That allows to restart transmission when it crashes, to limit
the memory used by it, as well as be jailed in the directories
it is supposed to access.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-21 11:59:22 +02:00
Nikos Mavrogiannopoulos
90914f8054 ocserv: depend on radcli
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-20 13:57:33 +02:00
Nikos Mavrogiannopoulos
c555cb924f libradcli: added package to replace freeradius-client
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-20 13:57:26 +02:00
Steven Barth
afc558eb7d strongswan: fix musl builds, reenable lost modules
Signed-off-by: Steven Barth <steven@midlink.org>
2015-06-19 18:39:18 +02:00
John Crispin
4a44bd069e seafile-*: update to trunk version
Signed-off-by: John Crispin <blogic@openwrt.org>
2015-06-18 20:06:11 +02:00
John Crispin
a93c172c71 zmq: update to trunk version
Signed-off-by: John Crispin <blogic@openwrt.org>
2015-06-18 20:05:31 +02:00
Nikos Mavrogiannopoulos
50b79a9e86 ocserv: don't use isolate workers as seccomp is not enabled
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-17 22:55:44 +02:00
Nikos Mavrogiannopoulos
d28ab39ffa ocserv: disabled MIPS16
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-17 22:08:11 +02:00
Nikos Mavrogiannopoulos
f4e47a668d openconnect: updated to 7.06 and disabled MIPS16
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-17 22:08:11 +02:00
Nikos Mavrogiannopoulos
1dc27c47f4 gnutls: updated to 3.4.2
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-17 20:48:34 +02:00
Toke Høiland-Jørgensen
ede101a5c2 [sqm-scripts/luci-app-sqm] Document how to disable shaping on a per direction basis
sqm-scripts for a long time interprets a "Down- or Upload speed" of zero as
an indication that the shaper should be disabled. Note that really shaping
an individual direction down  o zero will make the link effectively dead
for tcp (think reverse ACK traffic). Son instead of allowing the user to
configure something broken, 0 was "over-loaded" to denote no shaping
since several years, but that information has not been documented visibly
to the users. This commit aims at fixing that oversight.

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-06-17 13:05:04 +02:00
Steven Barth
2bff28cf8f Merge pull request #1377 from thess/for-15.05
[for-15.05] Remove elfutils & bzip2
2015-06-16 08:51:52 +02:00
Ted Hess
2e394971cb bzip2: Moved to base on git.openwrt.org
Signed-off-by: Ted Hess <thess@kitschensync.net>
2015-06-15 12:37:18 -04:00
Ted Hess
4bdb4c7d8b elfutils: Moved to base on git.openwrt.org
Signed-off-by: Ted Hess <thess@kitschensync.net>
2015-06-15 12:37:01 -04:00
Ted Hess
ed8272ad80 argp-standalone: Moved to 15.05 base at git.openwrt.org
Signed-off-by: Ted Hess <thess@kitschensync.net>
2015-06-15 08:22:34 -04:00
Steven Barth
f0e68f2beb Merge pull request #1367 from oneru/for-15.05
[For-15.05] Fwknopd: Set capture interface to wan by default
2015-06-14 23:09:32 +02:00
Steven Barth
5f9e4b7830 Merge pull request #1365 from chris5560/for-15.05
[for-15.05] radicale: update to 0.10-2 (not updated from trunk)
2015-06-14 23:09:00 +02:00
Jonathan Bennett
a819f2c165 Fwknopd: Set capture interface to wan by default
Signed-off-by: Jonathan Bennett <JBennett@incomsystems.biz>
2015-06-14 08:42:31 -05:00
Christian Schoenebeck
0341970545 [for-15.05] radicale: update to 0.10-2 (not updated from trunk)
* fixed hotplug script (not restarting on "ifup")
* fixed init script (not stopping in 1 second)
* fixed PKG_MAINTAINER string
* removing not needed comments in config file

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2015-06-14 12:51:15 +02:00
heil
30908edc95 haproxy: add patches from upstream
- [PATCH 1/2] BUG/MEDIUM: stats: properly initialize the scope before
 - [PATCH 2/2] BUG/MEDIUM: http: don't forward client shutdown without
 - [PATCH 3/8] BUG/MINOR: check: fix tcpcheck error message
 - [PATCH 4/8] CLEANUP: checks: fix double usage of cur / current_step
 - [PATCH 5/8] BUG/MEDIUM: checks: do not dereference head of a
 - [PATCH 6/8] CLEANUP: checks: simplify the loop processing of
 - [PATCH 7/8] BUG/MAJOR: checks: always check for end of list before
 - [PATCH 8/8] BUG/MEDIUM: checks: do not dereference a list as a
 - [PATCH 09/10] BUG/MEDIUM: peers: apply a random reconnection timeout
 - [PATCH 10/10] DOC: Update doc about weight, act and bck fields in the
 - [PATCH 11/14] MINOR: ssl: add a destructor to free allocated SSL
 - [PATCH 12/14] BUG/MEDIUM: ssl: fix tune.ssl.default-dh-param value
 - [PATCH 13/14] BUG/MINOR: cfgparse: fix typo in 'option httplog' error
 - [PATCH 14/14] BUG/MEDIUM: cfgparse: segfault when userlist is misused

Signed-off-by: heil <heil@terminal-consulting.de>
2015-06-11 19:05:51 +02:00
heil
f109732f56 pcre: fix CVE-2015-3210
- should fix eap buffer overflow in pcre_compile2() / compile_regex()

Signed-off-by: heil <heil@terminal-consulting.de>
2015-06-08 18:19:07 +02:00
Steven Barth
535e9ef92c strongswan: bump to 5.3.2
Signed-off-by: Steven Barth <steven@midlink.org>
2015-06-08 18:10:16 +02:00
Ted Hess
e56c31a78e Merge pull request #1347 from thess/for-15.05
zmq: Make CurveZMQ security (libsodium) optional [for-15.05]
2015-06-08 07:11:11 -04:00
Steven Barth
430408c0b2 strongswan: update to 5.3.1, cleanup broken modules
Signed-off-by: Steven Barth <steven@midlink.org>
2015-06-08 07:49:03 +02:00
Marcel Denia
4c4c2dbdae db47: Disable Replication Manager
Replication Manager accidentally got enabled by 541193d.
Fixes #1331.

Signed-off-by: Marcel Denia <naoir@gmx.net>
2015-06-05 09:48:38 +02:00
Ted Hess
4267ae50f4 zmq: Make CurveZMQ security (libsodium) optional, cleanup descrition and dependencies
Signed-off-by: Ted Hess <thess@kitschensync.net>
2015-06-04 13:19:34 -04:00
Ted Hess
20a7734215 Revert "zmq: Make CurveZMQ security (libsodium) optional, cleanup descrition and dependencies"
This reverts commit 2cd58bca38.
2015-06-04 13:09:04 -04:00
Ted Hess
2cd58bca38 zmq: Make CurveZMQ security (libsodium) optional, cleanup descrition and dependencies
Signed-off-by: Ted Hess <thess@kitschensync.net>
2015-06-04 13:01:19 -04:00
Paul Fertser
6b8276a000 openocd: update to final 0.9.0
Disables building documentation to avoid makeinfo v4,v5
incompatibilities.

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
2015-06-02 10:06:29 +00:00
Steven Barth
bb9e1ed2c0 Merge pull request #1328 from Naoir/db-python-cc
db47: Force pthread mutexes, bump PKG_RELEASE [for-15.05]
2015-05-31 14:48:44 +02:00
Marcel Denia
541193dd39 db47: Force pthread mutexes, bump PKG_RELEASE
Fixes #1312.

Signed-off-by: Marcel Denia <naoir@gmx.net>
2015-05-31 13:48:55 +02:00
Nikos Mavrogiannopoulos
f138a1ca3c gnutls: corrected regression with camellia cipher
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-05-30 22:53:01 +02:00
Nikos Mavrogiannopoulos
4ae1631f2a ocserv: use freeradius-client library if radius support is requested
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-05-30 22:46:46 +02:00
Nikos Mavrogiannopoulos
c7b9381de5 freeradius-client: added library
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-05-30 22:46:46 +02:00