Difuse/packages
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
Community maintained packages for difos.
3727 commits 8 branches 0 tags 65 MiB
Makefile 54.9%
Shell 29.9%
C 9%
C++ 2%
Lua 1.3%
Other 2.6%
Find a file
Hannu Nyman f1b60bac41 vsftpd: update to 3.0.3 
Update vsftpd to 3.0.3 released in July 2015.

Changelog: https://security.appspot.com/vsftpd/Changelog.txt
Release blog: http://scarybeastsecurity.blogspot.fi/2015/07/vsftpd-303-released-and-horrors-of-ftp.html

- Increase VSFTP_AS_LIMIT to 200MB; various reports.
- Make the PWD response more RFC compliant; report from Barry Kelly
<barry@modeltwozero.com>.
- Remove the trailing period from EPSV response to work around BT Internet
issues; report from Tim Bishop <tdb@mirrorservice.org>.
- Fix syslog_enable issues vs. seccomp filtering. Report from Michal Vyskocil
<mvyskocil@suse.cz>. At least, syslogging seems to work on my Fedora now.
- Allow gettimeofday() in the seccomp sandbox. I can't repro failures, but I
probably have a different distro / libc / etc. and there are multiple reports.
- Some kernels support PR_SET_NO_NEW_PRIVS but not PR_SET_SECCOMP, so handle
this case gracefully. Report from Vasily Averin <vvs@odin.com>.
- List the TLS1.2 cipher AES128-GCM-SHA256 as first preference by default.
- Make some compile-time SSL defaults (such as correct client shutdown
handling) stricter.
- Disable Nagle algorithm during SSL data connection shutdown, to avoid 200ms
delays. From Tim Kosse <tim.kosse@filezilla-project.org>.
- Kill the FTP session if we see HTTP protocol commands, to avoid
cross-protocol attacks. A report from Jann Horn <jann@thejh.net>.
- Kill the FTP session if we see session re-use failure. A report from
Tim Kosse <tim.kosse@filezilla-project.org>.
(vsftpd-3.0.3pre1)
- Enable ECDHE, Tim Kosse <tim.kosse@filezilla-project.org>.
- Default cipher list is now just ECDHE-RSA-AES256-GCM-SHA384.
- Minor SSL logging improvements.
- Un-default tunable_strict_ssl_write_shutdown again. We still have
tunable_strict_ssl_read_eof defaulted now, which is the important one to prove
upload integrity.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2015-08-17 22:21:23 +03:00
admin monit: update to 5.14 2015-07-11 00:28:28 +02:00
devel gcc: fix build with musl. 2015-07-21 16:01:59 +02:00
ipv6 aiccu: fix uClibc build after #1389 2015-06-29 19:50:01 +02:00
kernel/exfat-nofuse exfat-nofuse: Depend on BUILD_PATENTED 2015-04-28 18:15:52 +01:00
lang php5-pecl-raphf: update to 1.1.0 2015-08-11 22:18:15 +02:00
libs Merge pull request #1655 from dangowrt/update-postgresql 2015-08-13 23:52:41 +02:00
mail postfix: fix musl compatibility 2015-06-26 14:55:33 +02:00
multimedia tvheadend: add missing install of default Uci config file 2015-08-11 15:29:11 +02:00
net vsftpd: update to 3.0.3 2015-08-17 22:21:23 +03:00
sound mpg123: add package with release 1.22.3 2015-08-08 18:31:55 +02:00
utils pcsc-lite: update source 2015-08-13 10:44:56 +02:00
CONTRIBUTING.md CONTRIBUTING: Add paragraph about the use of PKG_RELEASE tag. 2015-02-04 15:45:08 -05:00
LICENSE Add GPLv2 pro-forma license 2014-06-16 08:14:04 +02:00
README.md Fixed broken link in README.md 2015-07-10 13:51:22 -05:00

README.md

OpenWrt packages feed

Description

This is the OpenWrt "packages"-feed containing community-maintained build scripts, options and patches for applications, modules and libraries used within OpenWrt.

Installation of pre-built packages is handled directly by the opkg utility within your running OpenWrt system or by using the OpenWrt SDK on a build system.

Usage

This repository is intended to be layered on-top of an OpenWrt buildroot. If you do not have an OpenWrt buildroot installed, see the documentation at: OpenWrt Buildroot – Installation on the OpenWrt support site.

This feed is enabled by default. To install all its package definitions, run:

./scripts/feeds update packages
./scripts/feeds install -a -p packages

License

See LICENSE file.

Package Guidelines

See CONTRIBUTING.md file.