ocserv: don't use isolate workers as seccomp is not enabled

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

ocserv: disabled MIPS16

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

openconnect: updated to 7.06 and disabled MIPS16

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

gnutls: updated to 3.4.2

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

[sqm-scripts/luci-app-sqm] Document how to disable shaping on a per direction basis

sqm-scripts for a long time interprets a "Down- or Upload speed" of zero as
an indication that the shaper should be disabled. Note that really shaping
an individual direction down  o zero will make the link effectively dead
for tcp (think reverse ACK traffic). Son instead of allowing the user to
configure something broken, 0 was "over-loaded" to denote no shaping
since several years, but that information has not been documented visibly
to the users. This commit aims at fixing that oversight.

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>

Merge pull request #1377 from thess/for-15.05

[for-15.05] Remove elfutils & bzip2

bzip2: Moved to base on git.openwrt.org

Signed-off-by: Ted Hess <thess@kitschensync.net>

elfutils: Moved to base on git.openwrt.org

Signed-off-by: Ted Hess <thess@kitschensync.net>

argp-standalone: Moved to 15.05 base at git.openwrt.org

Signed-off-by: Ted Hess <thess@kitschensync.net>

Merge pull request #1367 from oneru/for-15.05

[For-15.05] Fwknopd: Set capture interface to wan by default

Merge pull request #1365 from chris5560/for-15.05

[for-15.05] radicale: update to 0.10-2 (not updated from trunk)

Fwknopd: Set capture interface to wan by default
Signed-off-by: Jonathan Bennett <JBennett@incomsystems.biz>

[for-15.05] radicale: update to 0.10-2 (not updated from trunk)

* fixed hotplug script (not restarting on "ifup")
* fixed init script (not stopping in 1 second)
* fixed PKG_MAINTAINER string
* removing not needed comments in config file

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>

haproxy: add patches from upstream

 - [PATCH 1/2] BUG/MEDIUM: stats: properly initialize the scope before
 - [PATCH 2/2] BUG/MEDIUM: http: don't forward client shutdown without
 - [PATCH 3/8] BUG/MINOR: check: fix tcpcheck error message
 - [PATCH 4/8] CLEANUP: checks: fix double usage of cur / current_step
 - [PATCH 5/8] BUG/MEDIUM: checks: do not dereference head of a
 - [PATCH 6/8] CLEANUP: checks: simplify the loop processing of
 - [PATCH 7/8] BUG/MAJOR: checks: always check for end of list before
 - [PATCH 8/8] BUG/MEDIUM: checks: do not dereference a list as a
 - [PATCH 09/10] BUG/MEDIUM: peers: apply a random reconnection timeout
 - [PATCH 10/10] DOC: Update doc about weight, act and bck fields in the
 - [PATCH 11/14] MINOR: ssl: add a destructor to free allocated SSL
 - [PATCH 12/14] BUG/MEDIUM: ssl: fix tune.ssl.default-dh-param value
 - [PATCH 13/14] BUG/MINOR: cfgparse: fix typo in 'option httplog' error
 - [PATCH 14/14] BUG/MEDIUM: cfgparse: segfault when userlist is misused

Signed-off-by: heil <heil@terminal-consulting.de>

pcre: fix CVE-2015-3210

 - should fix eap buffer overflow in pcre_compile2() / compile_regex()

Signed-off-by: heil <heil@terminal-consulting.de>

strongswan: bump to 5.3.2

Signed-off-by: Steven Barth <steven@midlink.org>

Merge pull request #1347 from thess/for-15.05

zmq: Make CurveZMQ security (libsodium) optional [for-15.05]

strongswan: update to 5.3.1, cleanup broken modules

Signed-off-by: Steven Barth <steven@midlink.org>

db47: Disable Replication Manager

Replication Manager accidentally got enabled by 541193d.
Fixes #1331.

Signed-off-by: Marcel Denia <naoir@gmx.net>

zmq: Make CurveZMQ security (libsodium) optional, cleanup descrition and dependencies

Signed-off-by: Ted Hess <thess@kitschensync.net>

Revert "zmq: Make CurveZMQ security (libsodium) optional, cleanup descrition and dependencies"

This reverts commit 2cd58bca3876028f15bdd6a97c50c2e614013bf8.

zmq: Make CurveZMQ security (libsodium) optional, cleanup descrition and dependencies

Signed-off-by: Ted Hess <thess@kitschensync.net>

openocd: update to final 0.9.0

Disables building documentation to avoid makeinfo v4,v5
incompatibilities.

Signed-off-by: Paul Fertser <fercerpav@gmail.com>

Merge pull request #1328 from Naoir/db-python-cc

db47: Force pthread mutexes, bump PKG_RELEASE [for-15.05]

db47: Force pthread mutexes, bump PKG_RELEASE

Fixes #1312.

Signed-off-by: Marcel Denia <naoir@gmx.net>

gnutls: corrected regression with camellia cipher

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

ocserv: use freeradius-client library if radius support is requested

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

freeradius-client: added library

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

ulogd: add json plugin

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

sqlite: update to 3.8.10.2

quickly run tested on ar71xx

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>

zabbix: update to 2.4.5

run tested on ar71xx

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>

monit: update to 5.13

run tested on ar71xx

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>

libev: Import from management, with path fixes

Imports the latest version from the management feed, and fixes the
install paths.  All example code, and desktop linux expects and installs
libev's headers to /usr/include/<ev.h> not under a subdirectory.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>

Merge pull request #1288 from equinox0815/for-15.05-pps-tools-linux3.18

pps-tools: enable for Linux 3.18 [for-15.05]

Merge pull request #1304 from equinox0815/for-15.05-ntpd-enalbe-pps

ntpd: enable ATOM (PPS) support [for-15.05]

libqrencode: fix typo in makefile
Fix compile error due to autoconf
Signed-off-by: Jonathan Bennett <jbennett@incomsystems.biz>

freeradius2: add mirror for older releases

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

ntpd: enable ATOM (PPS) support

Signed-off-by: Christian Pointner <equinox@spreadspace.org>

openvswitch: fix build with kernel >= 3.18.13

This fixes a build problem with kernel >= 3.18.13.
This should close #1283.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

ocserv: corrected checksum

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

ocserv: updated to 0.10.5

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Merge pull request #1290 from Naoir/bash-cc

bash: Update to 4.3.39 [for-15.05]

Fwknopd: Backport patch to enable keygen in fwknopd
Signed-off-by: Jonathan Bennett <jbennett@incomsystems.biz>

pps-tools: enable for Linux 3.18

Signed-off-by: Christian Pointner <equinox@spreadspace.org>

ocserv: silence warnings and set group default value

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

bash: Update to 4.3.39

Signed-off-by: Marcel Denia <naoir@gmx.net>

Merge pull request #1276 from oneru/for-15.05

[for-15.05] libqrencode: import from old packages

Merge pull request #1273 from guillaume-d/guillaume-d/protobuf/fix-2.6.1

protobuf: Update version to 2.6.1

libqrencode: import from old packages
Update to latest release
add qrencode package which contains the qrencode binary
Remove libpng dependancy
Signed-off-by: Jonathan Bennett <jbennett@incomsystems.biz>

protobuf: Add licensing info and update copyright

Signed-off-by: Guillaume Déflache <guillaume.deflache@ibwag.com>

libdaq: add SF mirror

Signed-off-by: Luka Perkov <luka@openwrt.org>

snort: add SF mirror

Signed-off-by: Luka Perkov <luka@openwrt.org>

protobuf: Update version to 2.6.1

- Unbroke MIPS support which got entirely lost since the upgrade from 2.4.1:
  now all ISAs should work (MIPS1 would need kernel emulation though, untested)
- Fixed host installation which was broken on all targets
- Updated source origin to github and related variables
- Kept mipseb patch exception and MIPS16:=0 exclusion (needed for BB and CC compilation)

Only tested on a ZyXEL NBG6716 router which is MIPS32 (MIPS74Kc), ar71xx target.

Signed-off-by: Guillaume Déflache <guillaume.deflache@ibwag.com>

ddns-scripts: update to version 2.4.2-1

* fix Makefile to force compression of tld_names.dat reported in OpenWrt Ticket 19597
* change default of retry_count to "0" (retry endless) suggested by Henning Schild
* updated tld_names.dat include changes until 07.05.2015

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>

libseccomp: updated to 2.2.1

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Fwknopd: Fix a typo in the init file
Signed-off-by: Jonathan Bennett <jbennett@incomsystems.biz>

Fwknop: add flexibility to uci support
Styling cleanups
signed-off-by: Jonathan Bennett <jbennett@incomsystems.biz>

Fwknop: Update to newest release

add basic uci support
add optional gpg support

signed-off-by: Jonathan Bennett <jbennett@incomsystems.biz>

Merge pull request #1254 from lgierth/dkjson-git-15.05

dkjson: switch to LuaDist git repo (for-15.05)

dkjson: bump release

Signed-off-by: Lars Gierth <larsg@systemli.org>

dkjson: switch to LuaDist git repo

Signed-off-by: Lars Gierth <larsg@systemli.org>

Merge pull request #1251 from thess/mpd-for-15.05

mpd: Update to 0.18.23, fix ALSA support in mpd-mini, refresh patches (for 15.05)

Merge pull request #1252 from thess/libmpdclient-for-15.05

libmpdclient: Update to 2.10 (for 15.05)

mpd: Update to 0.18.23, fix ALSA support in mpd-mini, refresh patches

Signed-off-by: Ted Hess <thess@kitschensync.net>

libmpdclient: Update to 2.10

Signed-off-by: Ted Hess <thess@kitschensync.net>

mdnsresponder: No longer require IPv4 address to start.

It used to require 1+ IPv4 addresses to start on Linux. Now it starts
up with 0 addresses (of any type), as netlink can provide us more
later. This way, no stupid restart loop with procd if it is racing
with netifd at startup.

Signed-off-by: Steven Barth <steven@midlink.org>

net/mosquitto: Upgrade 1.4.1 to 1.4.2

Bugfix release.  Full changelog available at:
http://mosquitto.org/2015/05/version-1-4-2-released/

Drops a patch now included upstream.

Signed-off-by: Karl Palsson <karlp@remake.is>

nut: remove patch for old automake version

tools/automake was updated to 1.15 which removed this bug; patch no longer needed.

Signed-off-by: Martin Rowe <martin.p.rowe@gmail.com>

Merge branch 'master' into for-15.05

gnutls: updated to 3.4.1

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

gnutls: updated to 3.4.1

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

pcre: update to 8.37

 - fixes CVE-2015-2325, CVE-2015-2326, CVE-2008-2371

Signed-off-by: heil <heil@terminal-consulting.de>

memcached: upgrade to 1.4.24

Signed-off-by: heil <heil@terminal-consulting.de>

apr: upgrade to 1.5.4

Signed-off-by: heil <heil@terminal-consulting.de>

haproxy: update to 1.5.12
[RELEASE] Released version 1.5.12

    Released version 1.5.12 with the following main changes :
        - BUG/MINOR: ssl: Display correct filename in error message
        - DOC: Fix L4TOUT typo in documentation
        - BUG/MEDIUM: Do not consider an agent check as failed on L7 error
        - BUG/MINOR: pattern: error message missing
        - BUG/MEDIUM: pattern: some entries are not deleted with case insensitive match
        - BUG/MEDIUM: buffer: one byte miss in buffer free space check
        - BUG/MAJOR: http: don't read past buffer's end in http_replace_value
        - BUG/MEDIUM: http: the function "(req|res)-replace-value" doesn't respect the HTTP syntax
        - BUG/MEDIUM: peers: correctly configure the client timeout
        - BUG/MINOR: compression: consider the expansion factor in init
        - BUG/MEDIUM: http: hdr_cnt would not count any header when called without name
        - BUG/MEDIUM: listener: don't report an error when resuming unbound listeners
        - BUG/MEDIUM: init: don't limit cpu-map to the first 32 processes only
        - BUG/MEDIUM: stream-int: always reset si->ops when si->end is nullified
        - BUG/MEDIUM: http: remove content-length from chunked messages
        - DOC: http: update the comments about the rules for determining transfer-length
        - BUG/MEDIUM: http: do not restrict parsing of transfer-encoding to HTTP/1.1
        - BUG/MEDIUM: http: incorrect transfer-coding in the request is a bad request
        - BUG/MEDIUM: http: remove content-length form responses with bad transfer-encoding
        - MEDIUM: http: restrict the HTTP version token to 1 digit as per RFC7230
        - MEDIUM: http: add option-ignore-probes to get rid of the floods of 408
        - BUG/MINOR: config: clear proxy->table.peers.p for disabled proxies
        - MINOR: stick-table: don't attach to peers in stopped state
        - MEDIUM: config: initialize stick-tables after peers, not before
        - MEDIUM: peers: add the ability to disable a peers section
        - DOC: document option http-ignore-probes
        - DOC: fix the comments about the meaning of msg->sol in HTTP
        - BUG/MEDIUM: http: wait for the exact amount of body bytes in wait_for_request_body
        - BUG/MAJOR: http: prevent risk of reading past end with balance url_param
        - DOC: update the doc on the proxy protocol

Signed-off-by: heil <heil@terminal-consulting.de>

Merge pull request #1229 from ClaymorePT/master

boost: patch update

Boost Patch update
  This update follows after the previous update[1]
  Due to the Boost Dev patch submited in [2], this commit also updates
    the boost patch in order to, instead of excluding all architectures
    that do not support -m32 and -m64 options, it now includes only the
    architectures that do support it.

 [1]: https://github.com/openwrt/packages/pull/1186
 [2]: https://github.com/boostorg/build/pull/76

Signed-off-by: Carlos M. Ferreira carlosmf.pt@gmail.com

Merge pull request #1227 from antonlacon/libvorbis-1.3.x

libvorbis: upgrade to 1.3.5

Merge pull request #1228 from dangowrt/fix-cryptodev-on-kernel-4

cryptodev: get rid of get_unused_fd()

lvm2: finally fix memory locking issues on musl

Always use mlockall fixes it, still trying to keep everything else
as untouched as possible.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

cryptodev: get rid of get_unused_fd()

The get_unused_fd() macro was removed upstream by
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f938612dd97d481b8b5bf960c992ae577f081c17

Thus replace get_unused_fd() by get_unused_fd_flags(0) which used to
be the definition of the get_unused_fd() macro before it was removed.

This fixes cryptodev compilation on kernel 4.0.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

lvm2: better workaround for missing mallinfo on musl

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

lvm2: bump version

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Merge pull request #1222 from thess/mjpg-streamer-update

mjpg-streamer: Update cambozola to specific version, add yuv and jpeg qu...

mjpg-streamer: Update cambozola to specific version, add yuv and jpeg quality init/config options

Signed-off-by: Ted Hess <thess@kitschensync.net>

luarocks: don't use github conflicting tag archives (#1051)

Signed-off-by: Nicolas Thill <nico@openwrt.org>

json4lua: don't use github conflicting tag archives (#1051)

Signed-off-by: Nicolas Thill <nico@openwrt.org>

lua-mosquitto: don't use github conflicting tag archives (#1051)

Signed-off-by: Nicolas Thill <nico@openwrt.org>

uuid: don't use github conflicting tag archives (#1051)

Signed-off-by: Nicolas Thill <nico@openwrt.org>

luasql: don't use github conflicting tag archives (#1051)

Signed-off-by: Nicolas Thill <nico@openwrt.org>

libwebsockets: don't use github conflicting tag archives (#1051)

Signed-off-by: Nicolas Thill <nico@openwrt.org>

e2guardian: don't use github conflicting tag archives (#1051)

Signed-off-by: Nicolas Thill <nico@openwrt.org>

wavemon: don't use github conflicting tag archives (#1051)

Signed-off-by: Nicolas Thill <nico@openwrt.org>

redsocks: don't use github conflicting tag archives (#1051)

Signed-off-by: Nicolas Thill <nico@openwrt.org>

Merge branch 'coova-chilli-patch' of https://github.com/teslamint/packages

krb5: fix build failure on rebuild (closes: #1143)

Signed-off-by: Nicolas Thill <nico@openwrt.org>

Merge branch 'ser2net-led-support' of https://github.com/mhei/packages

ocserv: updated to 0.10.4

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Merge pull request #1217 from wongsyrone/patch-1

ffmpeg: upgrade to 2.6.2

sqm-scripts: Only run on hotplug if the init script is enabled.

Fixes #1202.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>