Commit graph

742 commits

Author SHA1 Message Date
Álvaro Fernández Rojas
a47b22260c unzip: patch CVE-2014-8139, CVE-2014-8140, CVE-2014-8141 and CVE-2014-9636
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2015-02-16 15:07:46 +01:00
Maxim Storchak
90fad61a79 rsync: patch CVE-2014-9512
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2015-02-15 22:45:20 +01:00
Steven Barth
ca0d453af9 strongswan: bump to 5.2.2
Signed-off-by: Steven Barth <steven@midlink.org>
2015-02-13 12:16:55 +01:00
Steven Barth
00c2f3d436 strongswan: correctly install plugin include configs
Signed-off-by: Steven Barth <steven@midlink.org>
2015-02-13 12:16:51 +01:00
Steven Barth
29f23f24d5 strongswan: update to 5.2.1
Signed-off-by: Steven Barth <steven@midlink.org>
2015-02-13 12:16:46 +01:00
Steven Barth
e60cbd46cb strongswan: import, update, adopt
Signed-off-by: Steven Barth <steven@midlink.org>
2015-02-13 12:16:41 +01:00
Jo-Philipp Wich
071bec075d libtorrent: remove manual autoconf invocation
The Makefile already uses the proper autoreconf fixup but leaves a manual
autoconf invocation in place.

The bad autoconf call leads to the following build error in the SDK:

	configure.ac:3: installing `./config.guess'
	configure.ac:3: installing `./config.sub'
	configure.ac:20: installing `./install-sh'
	configure.ac:20: installing `./missing'
	src/Makefile.am: installing `./depcomp'
	autoreconf: Leaving directory `.'
	aclocal...
	autoheader...
	libtoolize... libtoolize nor glibtoolize not found
	make[2]: *** [.../.configured_] Error 1

Remove the entire Build/Configure override to let libtorrent build correctly.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2015-02-09 16:56:46 +01:00
Jo-Philipp Wich
83c747ea61 rtorrent: remove manual autoconf invocation
The Makefile already uses the proper autoreconf fixup but leaves a manual
autoconf invocation in place.

The bad autoconf call leads to the following build error in the SDK:

	( cd .../rtorrent-0.9.4-git; ./autogen.sh );
	aclocal...
	autoheader...
	libtoolize... libtoolize nor glibtoolize not found
	make[2]: *** [.../rtorrent-0.9.4-git/.configured_] Error 1

Remove the entire Build/Configure override to let rtorrent build correctly.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2015-02-09 16:56:38 +01:00
tripolar
60e6ab7c02 Merge pull request #753 from wildoats/for-14.07
rtorrent: reenable rtorrent-rpc in Barrier Breaker

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2015-02-01 17:12:11 +01:00
Nikos Mavrogiannopoulos
579bdc1e84 ocserv: enable min-reauth-time in default configuration
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-24 14:00:48 +01:00
Adze1502
71719ebefa mwan3: update to version 1.5-10
Fixed issue in mwan3 status output with mwan3 interfaces not yet configuerd in network config
Removed nexthop argument as it is no longer used

Signed-off-by: Jeroen Louwes <jeroen.louwes@gmail.com>
2015-01-20 22:11:31 +01:00
wildoats
e593c1c7d2 rtorrent: Reenable rtorrent-rpc in Barrier Breaker
Signed-off-by: Jan Ulrich <jan@janulrich.org>
2015-01-20 12:53:51 -08:00
Nikos Mavrogiannopoulos
099ec4a071 openconnect: use openconnect.upgrade to save configured files
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-19 23:30:16 +01:00
Nikos Mavrogiannopoulos
cdcbacdda9 Revert "openconnect: move certificate files to config/ to add graceful upgrade"
This reverts commit b53e5bfe87.
2015-01-19 23:30:10 +01:00
Nikos Mavrogiannopoulos
09c3b4df0b Revert "openconnect: cmdline parameter for CA not moved"
This reverts commit fa8f547945.
2015-01-19 23:30:05 +01:00
Nikos Mavrogiannopoulos
0d68740100 ocserv: prevent ocpasswd from using sha2crypt
That doesn't cope well with uclibc.
https://bugs.busybox.net/show_bug.cgi?id=7808

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-19 23:28:41 +01:00
Nikos Mavrogiannopoulos
392316bfc8 ocserv: use ocserv.upgrade to save configured files
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-19 23:28:26 +01:00
Nikos Mavrogiannopoulos
cb26e66c26 Revert "ocserv: store permanent config files in /etc/config"
This reverts commit 1c40fc1022.
2015-01-19 23:27:46 +01:00
Nikos Mavrogiannopoulos
5b09f7af1b openconnect: bumped version
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-17 09:15:23 +01:00
Jasper
6367ee0d0f openconnect: cmdline parameter for CA not moved
The location for the server CA file was moved in b53e5bfe87, but the corresponding command line option for opeconnect not updated.
2015-01-17 09:02:45 +01:00
Nikos Mavrogiannopoulos
b1534adc8b ocserv: store permanent config files in /etc/config
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-12 19:51:45 +01:00
Jo-Philipp Wich
bb160fa4d3 protobuf-c: use generic autoreconf fixup
Invoke the generic autoreconf fixup instead of calling the shipped autogen.sh.

This ensures that proper variants of libtoolize, autoconf, automake etc. are
used, otherwise it is not possible to rebuild protobuf-c in the SDK env.

The change requires backport to BB as it currently blocks the rebuild of ocerv.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2015-01-11 18:19:19 +01:00
Michael Heimpold
41a9c793c3 libxml2: fix compilation on archlinux and gentoo
Compilation of libxml2 on some distributions is problematic (at least
archlinux) for OpenWrt. This commit fixes the issue. Issue is caused
because configuration for some reason does not find gzopen from zlib.
This patch issues linker to include zlib anyway, if host system doesn't
have this issue, it is not a problem as linker should not link libs
twice anyway.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

Backported to BB to fix https://dev.openwrt.org/ticket/18295

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2015-01-10 22:59:30 +01:00
Nikos Mavrogiannopoulos
93119a4573 ocserv: updated to 0.8.9
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-10 21:43:07 +01:00
Nikos Mavrogiannopoulos
32da468cde openconnect: removed obsolete patch
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-10 11:23:21 +01:00
Nikos Mavrogiannopoulos
9cb5b3864d openconnect: update to 7.03
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-10 11:15:02 +01:00
Etienne CHAMPETIER
a4ed431521 zabbix: update to 2.4.3
run-tested on ar71xx

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2014-12-26 20:38:42 +01:00
Adze1502
7c2b22ca8d mwan3: update to version 1.5-9
Fix issue where config file would be overwritten in some cases
Fix issue where local address of wan point-to-point links were unreachable from lan

Signed-off-by: Jeroen Louwes <jeroen.louwes@gmail.com>
2014-12-22 10:13:54 +01:00
Etienne CHAMPETIER
bf5e1c3dc4 sqlite3: update to 3.8.7.4
compile tested on ar71xx

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2014-12-22 10:13:32 +01:00
Etienne CHAMPETIER
ad7c25a87f sqlite3: update to 3.8.7.1
Run tested on ar71xx

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2014-11-15 11:48:22 +01:00
Etienne CHAMPETIER
5c84294192 zabbix: update to 2.4.2
Remove 001-cross_compile.patch, it's fixed upstream (ZBX-5561)
Run tested on ar71xx

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2014-11-15 11:47:03 +01:00
Etienne CHAMPETIER
3123b176e9 admin/zabbix: put myself as maintainer
Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2014-11-15 11:47:03 +01:00
Christoph König
ada4d17911 zabbix: update to 2.4.0, refresh patches
Signed-off-by: Christoph König <christoph.koenig@gmail.com>
Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2014-11-15 11:47:02 +01:00
Etienne CHAMPETIER
e1dc92d52e monit: update to 5.10
Run tested on ar71xx

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2014-11-13 21:17:30 +01:00
Christoph König
3894ae38d5 monit: Update to 5.9
Signed-off-by: Christoph König <christoph.koenig@gmail.com>
2014-11-13 21:16:47 +01:00
Ian Leonard
2bce5b294f monit: add PKG_LICENSE_FILES
Signed-off-by: Ian Leonard <antonlacon@gmail.com>
2014-11-13 21:16:47 +01:00
Aedan ARFETT Renner
e27831d568 mwan3-luci: update to 1.3-5
new naming/wording - more generically mwan than mwan3
renamed cryptic variables/functions/etc everywhere
removed unused and unnecessary variables everywhere
cleaned up ugly and inefficient Lua and Javascript

Signed-off-by: Aedan Renner chipdankly@gmail.com
2014-11-11 23:00:13 +01:00
Aedan Renner
a1d8519b7d mwan3-luci: update to 1.3-4
put dummy echo command back in hotplug script send_alert function to avoid errors

Signed-off-by: Aedan Renner chipdankly@gmail.com
2014-11-11 23:00:13 +01:00
Aedan Renner
b128beaf2a mwan3-luci: update to 1.3-3
corrected name of last_resort option from "main" to "default"
added blackhole option to policy selection on rule configuration

Signed-off-by: Aedan Renner <chipdankly@gmail.com>
2014-11-11 23:00:13 +01:00
Aedan ARFETT Renner
6c1e1705b1 mwan3-luci: update to 1.3-2
added support for new last_resort option for policy configuration
added dependencies for luci-mod-admin-full and luci-lib-nixio
shortened length of menuconfig description lines
reworded things on various pages
changed date formatting in custom hotplug script
default route checks now verify both destination/netmask are 0.0.0.0
condensed messy javascript lines and removed -F' ' from awk commands

Signed-off-by: Aedan Renner <chipdankly@gmail.com>
2014-11-11 23:00:13 +01:00
Nikos Mavrogiannopoulos
4e70aa58e8 gnutls: updated to address CVE-2014-8564
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2014-11-11 19:56:39 +01:00
Nicolas Thill
e07a0c5ceb gnutls: force rebuuld when config changes
Signed-off-by: Nicolas Thill <nico@openwrt.org>
2014-11-11 19:56:33 +01:00
Nikos Mavrogiannopoulos
2f285717a2 gnutls: updated to 3.3.9
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2014-11-11 19:56:26 +01:00
Jo-Philipp Wich
6f089246a1 freeradius2: relax SSL version checks
Merge upstream commit 5ae2a70a135062a025d8fabc104eeae3a2c53a7a to relax the
SSL library version check at runtime.

The objective is to avoid the need for rebuilding freeradius2 whenever we push
binary updates for libopenssl. See https://dev.openwrt.org/ticket/18169 for
reference.

Please backport this change to the for-14.07 branch as well.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2014-11-11 11:14:17 +01:00
Jo-Philipp Wich
e9189f2efd wget: update to v1.16
The update fixes CVE-2014-4877 which allows malicious FTP servers
to modify local filesystem contents through specificially crafted
symlinks.

Please backport to for-14.07 too.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2014-10-30 11:31:56 +01:00
Marcel Denia
1c0bf8c605 perl: Don't link against libnsl, fix PPC signedness
perl: Don't try to link against libnsl

And also remove all other references to avoid confusion.
libnsl isn't really needed. Removing it allows glibc based
toolchains to build perl.

perl: Make I8/I16/I32 types explicitly signed for PPC

Type signedness is undefined for char. char may actually be unsigned for
some CPUs.
This fixes various bugs on PPC, like negative array indices.

Signed-off-by: Marcel Denia <naoir@gmx.net>
2014-10-28 18:50:59 +01:00
Steven Barth
1426670b8a libxml2: update to 2.9.2
fixes CVE-2014-3660, CVE-2014-0191 among other issues

Signed-off-by: Steven Barth <steven@midlink.org>
2014-10-21 08:57:32 +02:00
Nikos Mavrogiannopoulos
d83d5f6806 openconnect: fixed description of ca file location
Resolves #407
2014-10-09 22:15:20 +02:00
Thomas Heil
a093151650 Merge pull request #406 from npodolak/patch-1
fix apr-util URL
2014-10-07 20:54:26 +02:00
npodolak
3483c40819 fix apr-util URL
apr-util 1.5.3 is no longer hosted on biblio.org.  Get it from archive.apache.org.
2014-10-07 14:51:04 -04:00