summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #2867 from dgazineu/patch-1for-14.07Daniel Golle2016-06-161-2/+2
|\ | | | | debootstrap: Filename, version and MD5SUM
| * debootstrap: Filename, versionand MD5SUMDouglas Gazineu2016-06-161-2/+2
|/ | | Update debootstrap package data to reflect available file on Debian pool
* BB: freeradius2: bump package releaseJo-Philipp Wich2016-01-101-1/+1
| | | | Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
* BB: freeradius2: fix disabling of OpenSSL version checkJo-Philipp Wich2016-01-101-3/+14
| | | | | | | The previously added patch for removing the check accidentally disabled the library init as well. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
* libpng: update to 1.2.56Oliver Middleton2016-01-091-2/+2
| | | | | | Fixes CVE-2015-8126 and CVE-2015-8540. Signed-off-by: Oliver Middleton <olliemail27@gmail.com>
* libpng: update to 1.2.54Oliver Middleton2016-01-091-3/+3
| | | | | | Includes fixes for CVE-2015-7981 and CVE-2015-8126. Signed-off-by: Oliver Middleton <olliemail27@gmail.com>
* libpng: update to 1.2.52Ian Leonard2016-01-091-2/+2
| | | | Signed-off-by: Ian Leonard <antonlacon@gmail.com>
* Merge pull request #2194 from jow-/for-14.07Jo-Philipp Wich2016-01-043-63/+19
|\ | | | | BB: freeradius2: completely disable runtime OpenSSL version checks
| * freeradius2: completely disable runtime OpenSSL version checksJo-Philipp Wich2015-12-283-63/+19
|/ | | | | | | | | | | | Whenever we ship fixed libopenssl binaries in BB, the Freeradius daemon fails at startup because it detects a mismatch of the build time and runtime OpenSSL version. Since our OpenSSL updates for BB are ABI compatible we do not need or even want this superflous check. Removing it saves us the effort to rebuild Freeradius after every OpenSSL version bump. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
* sqm-scripts: Bump to v1.0.3.Toke Høiland-Jørgensen2015-09-0317-1767/+45
| | | | | | Backported changes from master. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* libevent: update to 1.4.15 (fixes CVE-2014-6272)Jan Čermák2015-09-011-7/+7
| | | | | | | This update fixes CVE-2014-6272. Change of source URL was needed, because the older location does not contain the latest version. Signed-off-by: Jan Čermák <jan.cermak@nic.cz>
* freeradius2: backport fix for CVE-2015-4680Jo-Philipp Wich2015-07-202-2/+73
| | | | | | | | | | | | | | | | | | | | | | | | Backport upstream commit 5e698b407dcac2bc45cf03484bac4398109d25c3 to fix missing intermediate certificate validation in Freeradius2. Advisory: The FreeRADIUS server relies on OpenSSL to perform certificate validation, including Certificate Revocation List (CRL) checks. The FreeRADIUS usage of OpenSSL, in CRL application, limits the checks to leaf certificates, therefore not detecting revocation of intermediate CA certificates. An unexpired client certificate, issued by an intermediate CA with a revoked certificate, is therefore accepted by FreeRADIUS. Specifically sets the X509_V_FLAG_CRL_CHECK flag for leaf certificate CRL checks, but does not use X509_V_FLAG_CRL_CHECK_ALL for CRL checks on the complete trust chain. The FreeRADIUS project advises that the recommended configuration is to use self-signed CAs for all EAP-TLS methods. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
* [SQM/luci-app-sqm] Fix SQM GUI help messages.Sebastian Moeller2015-07-122-4/+4
| | | | | | | | | | | | Make clear that configuration options guarded by checkboxes are only effective as long as those boxes are checked. The sqm gui has giarded some advanced configuration options behind exposing checkboxes, meaning these optiopn's values were only used as long as those boxes were checked. This commit just improves the description of the checkboxes to included this useage instruction... Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
* [SQM/luci-app-sqm] Enable sqm initiscript if a single sqm instance gets enabledSebastian Moeller2015-07-122-2/+23
| | | | | | | | | | | | | | | The SQM gui has confused its users with an enable button, that only served to selecively activate/de-activate sqm instances instead of controlling sqm's initscript (which needs to be enabled so the sqm properly starts up after a reboot and also for hotplug to work properly). luci-app-sqm will now enable sqm's initscript when a single sqm instance get enabled. It also informs the user about this fact in the top margin of the sqm page. Note sqm will not disable the initscript behind the user's back if sqm instances get disabled. While I would have prefered this notice to be more prominent an attentive user should notice, and most users should not care anyway. This also increases the package release number. Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
* haproxy: bump to version 1.5.14heil2015-07-127-288/+54
| | | | | | - this fixes CVE-2015-3281 and CVE-2014-6269 Signed-off-by: heil <heil@terminal-consulting.de>
* gnutls: updated to 3.3.16Nikos Mavrogiannopoulos2015-07-121-2/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* [packages] vsftpd: CVE-2015-1419 Unspecified vulnerability in vsftp 3.0.2 ↵Cezary Jackiewicz2015-06-292-1/+99
| | | | and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to deny_file parsing.
* vsftpd: fix musl compatibilityHannu Nyman2015-06-292-2/+23
| | | | | | | | | | Make vsftpd to compile with musl, while preserving uclibc compatibility. When using musl: * disable UTMPX functionality * disable -lnsl option in upstream Makefile Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* strongswan: fix musl builds, reenable lost modulesSteven Barth2015-06-192-2/+78
| | | | Signed-off-by: Steven Barth <steven@midlink.org>
* [sqm-scripts/luci-app-sqm] Document how to disable shaping on a per ↵Toke Høiland-Jørgensen2015-06-172-3/+3
| | | | | | | | | | | | | | direction basis sqm-scripts for a long time interprets a "Down- or Upload speed" of zero as an indication that the shaper should be disabled. Note that really shaping an individual direction down o zero will make the link effectively dead for tcp (think reverse ACK traffic). Son instead of allowing the user to configure something broken, 0 was "over-loaded" to denote no shaping since several years, but that information has not been documented visibly to the users. This commit aims at fixing that oversight. Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
* strongswan: bump to 5.3.2Steven Barth2015-06-101-2/+2
| | | | Signed-off-by: Steven Barth <steven@midlink.org>
* strongswan: update to 5.3.1, cleanup broken modulesSteven Barth2015-06-101-11/+5
| | | | Signed-off-by: Steven Barth <steven@midlink.org>
* strongswan: add missing dependencySteven Barth2015-06-101-1/+1
| | | | Signed-off-by: Steven Barth <steven@midlink.org>
* strongswan: bump to 5.3.0Steven Barth2015-06-103-54/+6
| | | | Signed-off-by: Steven Barth <steven@midlink.org>
* strongswan: fix IKEv1 supportSteven Barth2015-06-102-1/+49
| | | | Signed-off-by: Steven Barth <steven@midlink.org>
* freeradius2: add mirror for older releasesMislav Novakovic2015-05-261-1/+3
| | | | Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
* mosquitto: upgrade 1.3.4 to 1.3.5Karl Palsson2015-05-081-2/+2
| | | | | | | | Minor bugfix release Full changelog http://mosquitto.org/2014/10/version-1-3-5-released/ Signed-off-by: Karl Palsson <karlp@remake.is>
* gnutls: updated to 3.3.15Nikos Mavrogiannopoulos2015-05-051-2/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* sqm-scripts: Only run on hotplug if the init script is enabled.Toke Høiland-Jørgensen2015-04-302-2/+2
| | | | | | Fixes #1202. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* Remove dependeny on iptables-mod-filter from sqm-scriptsSebastian Moeller2015-04-191-2/+2
| | | | | | | | As Hnyman noted in https://github.com/dtaht/ceropackages-3.10/issues/13 we carry a few unnecessary dependecies in sqm-scripts, so remove one of them (iptables-mod-filter) as we neither use it nor plan to use it. Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
* libtasn1: updated to 4.4Nikos Mavrogiannopoulos2015-03-291-2/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: list the defaultroute optionNikos Mavrogiannopoulos2015-03-291-0/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Merge pull request #1079 from wlanslovenija/for-14.07Ted Hess2015-03-271-1/+1
|\ | | | | mjpg-streamer: Fixed cambozola MD5 sum.
| * mjpg-streamer: Fixed cambozola MD5 sum.Jernej Kos2015-03-271-1/+1
|/ | | | Signed-off-by: Jernej Kos <jernej@kos.mx>
* sqm-scripts: clean up interface selection for hotpluggingSebastian Moeller2015-03-253-15/+25
| | | | | | | | | | | | | The initial conversion to restart sqm on interfaces it is configured for in case of (transient) dis- and reappearance was half finished. These changes clean up the handling of exlicitly passed interfaces in run.sh: no second argument defaults to all configured interfaces the alternative is an individual interface name passed as 2nd argument to run.sh. The first argument either is start or stop. No argument at all will behave as if start was passed. Survives light testing... Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
* sqm-scripts: change default for qdisc target parameterSebastian Moeller2015-03-252-9/+37
| | | | | | | | | | | | | | | | | | | | | | Alan Jenkins noted a bug in the smq luci GUI that effectively erased several configuration paramters if two checkboxes were deselected. This behaviour seems consistent in luci but certainly has the potential to confuse users. While confusion can not really be avoided generally it seems wise to change the default interpretation for empty or non-existent itarget and etarget variables from the qdisc's default (5ms in the case of one of the codels) to automatic determination of tghis variable dependent on the configured bandwidth, as codels target variable should be large enough to contain at least one full packet. With this change sqm-scripts will do the right thing by default, but will yet allow the user to specify over-ridding values (as long as the user does not un-check the entry-field exposing check boxes). Survives light testing... This change set also changes the sqm-scripts luci gui to note the user of the change. For compatibility with existing setups sqm-scripts will still honor "auto" as an alternative explicit way of requesting automatic target selection. This might turn into a warning in the future and might be phased out... Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
* Merge pull request #918 from hnyman/sqm-backportToke Høiland-Jørgensen2015-03-2517-0/+1750
|\ | | | | Sqm-scripts backport to BB14.07
| * sqm-scripts: backport "make run.sh ignore spurious incomplete hotplug ifups"Hannu Nyman2015-03-053-6/+10
| | | | | | | | | | | | | | Backport from trunk the commit improving hotplug action. https://github.com/openwrt/packages/commit/1b5afe8f464bae8fa38317548ec95fe303334c0d Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
| * sqm-scripts: backport from trunk "Teach SQM hotplug tricks"Hannu Nyman2015-03-044-4/+42
| | | | | | | | | | | | | | Backport from trunk the commit that adds support for hotplug action. https://github.com/openwrt/packages/commit/5b61cfba076c61cf09783a7f6ef4150e55b74a3f Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
| * luci-app-sqm: backport package from trunkHannu Nyman2015-02-174-0/+322
| | | | | | | | | | | | | | Backport of luci-app-sqm package from trunk. I have been using it in my BB14.07 build without any problems. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
| * sqm-scripts: backport package from trunkHannu Nyman2015-02-1712-0/+1386
|/ | | | | | | Backport of sqm-scripts package from trunk. I have been using it in my BB14.07 build without any problems. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* grep: Fix CVE-2015-1345 heap buffer overrunJulen Landa Alustiza2015-02-172-1/+16
| | | | Signed-off-by: Julen Landa Alustiza <julen@zokormazo.info>
* grep: update to 2.21, add license and maintainerJulen Landa Alustiza2015-02-171-2/+11
| | | | Signed-off-by: Julen Landa Alustiza <julen@zokormazo.info>
* Merge pull request #914 from openwrt-es/for-14.07-nextJo-Philipp Wich2015-02-175-2/+232
|\ | | | | unzip: patch CVE-2014-8139, CVE-2014-8140, CVE-2014-8141 and CVE-2014-9636
| * unzip: patch CVE-2014-8139, CVE-2014-8140, CVE-2014-8141 and CVE-2014-9636Álvaro Fernández Rojas2015-02-165-2/+232
|/ | | | Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* rsync: patch CVE-2014-9512Maxim Storchak2015-02-152-1/+107
| | | | Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
* strongswan: bump to 5.2.2Steven Barth2015-02-131-4/+4
| | | | Signed-off-by: Steven Barth <steven@midlink.org>
* strongswan: correctly install plugin include configsSteven Barth2015-02-131-9/+3
| | | | Signed-off-by: Steven Barth <steven@midlink.org>
* strongswan: update to 5.2.1Steven Barth2015-02-131-2/+2
| | | | Signed-off-by: Steven Barth <steven@midlink.org>
* strongswan: import, update, adoptSteven Barth2015-02-138-0/+611
| | | | Signed-off-by: Steven Barth <steven@midlink.org>
generated by cgit (git 2.46.0) at 2026-10-12 00:21:53 +0000