python: add dependency to bz2 host build

Signed-off-by: John Crispin <blogic@openwrt.org>

squild: bump version to 3.5.9

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

lxc: bump version to 1.1.3

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

file: bump version to 5.25

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

e2guardian: bump version to 3.2.0

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

xl2tpd: fix by backporting the version from master branch

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

mosquitto: update to 1.4.4

More information: http://mosquitto.org/2015/09/version-1-4-4-released/

Signed-off-by: Karl Palsson <karlp@tweak.net.au>

libtasn1: updated to 4.7

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

gnutls: updated to 3.4.5

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

radcli: updated to 1.2.3

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Merge pull request #1794 from MikePetullo/for-15.05-lighttpd

lighttpd: update to 1.4.37

lighttpd: update to 1.4.37

Signed-off-by: W. Michael Petullo <mike@flyn.org>

lighttpd: update to 1.4.37

Signed-off-by: W. Michael Petullo <mike@flyn.org>

tracertools: update source URL

rip gitorious.org

[backport of commit c6b65ce on master]
Signed-off-by: Daniel Golle <daniel@makrotopia.org>

sudo: upgrade to version 1.8.14p3

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

sudo: preserve sudoers.d during sysupgrade

Signed-off-by: Alexander Tsoy <alexander@tsoy.me>

Merge pull request #1733 from hnyman/collectd-entropy

collectd: backport the entropy plugin and changes to example config file

mdnsresponder: fix fd leak for IPv6 sockets

Signed-off-by: Steven Barth <steven@midlink.org>

tcsh: update source mirrors

Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>

Merge pull request #1762 from pdxmeshnet/for-15.05

zmq fixes from master

haproxy: fixes from upstream

 - [PATCH 14/16] BUG/MINOR: http: remove stupid HTTP_METH_NONE entry
 - [PATCH 15/16] BUG/MAJOR: http: don't call http_send_name_header()
 - [PATCH 16/16] BUG/MINOR: tools: make str2sa_range() report

Signed-off-by: heil <heil@terminal-consulting.de>

luarocks: update to 2.2.2

Signed-off-by: Nicolas Thill <nico@openwrt.org>

knot: update to 1.6.5

Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>

knot: update to 1.6.4

Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>

zmq: Make 2 variants, refresh patches, fix C++ build issues

Signed-off-by: Ted Hess <thess@kitschensync.net>

libzmq upgrade to 4.1.1
lzmq upgrade to 0.4.3

Signed-off-by: Dirk Chang <dirk@kooiot.com>

lzmq: Use smaller .tar.gz  source package

Signed-off-by: Ted Hess <thess@kitschensync.net>

strongswan: bump to 5.3.3

Signed-off-by: Steven Barth <steven@midlink.org>

strongswan: make kmod-ipsec6 dependency conditional

Makes kmod-ipsec6 requirement dependent on IPv6 support for packages.
This allows to disable unnecessary IPv6 kernel modules, saving
considerable amount of space.

Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com>

strongswan: add a couple more plugins

Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>

strongswan: dont overwrite ipsec.conf and ipsec.user during upgrade

Signed-off-by: Ulrich Weber <uw@ocedo.com>

strongswan: split out libtls.so as a separate package.

When only strongswan-minimal is selected, libtls.so will not be built
yet package strongswan will still try to copy the file causing build
failure.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

strongswan: Added strongswan-mod-eap-tls

Signed-off-by: Adam Lebsack <alebsack@gmail.com>

strongswan: add more exceptions to musl-fixes

Signed-off-by: Steven Barth <steven@midlink.org>

strongswan: refresh musl compatibility fixes

Signed-off-by: Steven Barth <steven@midlink.org>

haproxy: fixes from upstream

 - [PATCH 05/13] BUG/MINOR: http/sample: gmtime/localtime can fail
 - [PATCH 06/13] DOC: typo in 'redirect', 302 code meaning
 - [PATCH 07/13] DOC: mention that %ms is left-padded with zeroes.
 - [PATCH 08/13] CLEANUP: .gitignore: ignore more test files
 - [PATCH 09/13] CLEANUP: .gitignore: finally ignore everything but what
 - [PATCH 10/13] MEDIUM: config: emit a warning on a frontend without
 - [PATCH 11/13] BUG/MEDIUM: counters: ensure that src_{inc,clr}_gpc0
 - [PATCH 12/13] DOC: ssl: missing LF
 - [PATCH 13/13] DOC: fix example of http-request using

Signed-off-by: heil <heil@terminal-consulting.de>

unixodbc: bump to version 2.3.4

Signed-off-by: heil <heil@terminal-consulting.de>

unixodbc: update to 2.3.3

Signed-off-by: heil <heil@terminal-consulting.de>

ocserv: updated to 0.10.8

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

openconnect: corrected port descriptions in README

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

ocserv: more explicit documentation

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

ocserv: updated to 0.10.6

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

collectd: backport "Clarify config file example/placeholder" from #1736

The config file shipped with collectd dates from 2010 and
leads to error messages if luci-statistics & collectd are installed,
as it references several plugins not usually installed, or such ones
that have been renamed since then.

For most users, this file is just a placeholder during collectd installation,
as /usr/bin/stat-genconfig from /etc/init.d/luci_statistics will overwrite it.

Sanitize and shorten the placeholder config file:
* Reference actively only the default plugins installed by luci statistics.
* Match the placeholder config with the genuine config from luci statistics.

If somebody uses collectd separately from luci statistics, he will need to
edit these settings anyway.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

collectd: backport the enablement of entropy plugin to for-15.05

Enable 'entropy' plugin also for collectd 5.4.2.
Works ok.

( backport of https://github.com/openwrt/packages/commit/35552db4ee8162b5c85f2a9e370177681a70431c )

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

vpnc: bump release

Signed-off-by: Daniel Gimpelevich <daniel@gimpelevich.san-francisco.ca.us>

vpnc: corrected call to proto_add_host_dependency

vpnc: fix musl compatibility

 - Add missing `sys/ttydefaults.h` include to `config.c`
 - Restrict usage of `error.h` to glibc and uclibc only
 - Avoid including `linux/if_tun.h` on non-glibc/uclibc to prevent
   musl kernel/libc header conflicts

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Merge pull request #1753 from zorun/bmon_15.05_

bmon: Add missing runtime dependency: terminfo

bmon: Add missing runtime dependency: terminfo

Signed-off-by: Baptiste Jonglez <git@bitsofnetworks.org>

sqm-scripts: Bump to v1.0.3.

Backported changes from master.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

[bind] Update to 9.9.7-P3 to fix CVE-2015-5722 and CVE-2015-5986

Signed-off-by: Noah Meyerhans <frodo@morgul.net>

bind: update to version 9.9.7-p2

Signed-off-by: Noah Meyerhans <frodo@morgul.net>

xz: add xz-utils meta package
Signed-off-by: Alexander Ryzhov <openwrt@ryzhov-al.ru>

libevent: update to 1.4.15 (fixes CVE-2014-6272)

This update fixes CVE-2014-6272. Change of source URL was needed,
because the older location does not contain the latest version.

Signed-off-by: Jan Čermák <jan.cermak@nic.cz>

Merge pull request #1728 from roger-/micropython-15.05

micropython: update to latest (15.05)

micropython: update to latest

Signed-off-by: Roger D <rogerdammit@gmail.com>

python: remove bz2 build dep

Revert "python: add dependency to bz2 host build"

This reverts commit da6d7b57f501eaece621f8f834646aa22b618fa5.

Signed-off-by: John Crispin <blogic@openwrt.org>

openconnect: disabled the resolving code from ppp in netifd script

That code was causing netifd disabling openconnect with no way
to restart it.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

avrdude: enable linux-gpio by default

Signed-off-by: John Crispin <blogic@openwrt.org>

bluelog: mark as BROKEN

the CC Buildservers are failing on this package as the OUI download timesout indefinatley.

Signed-off-by: John Crispin <blogic@openwrt.org>

haproxy: fixes for upstream version 1.5.14

 - [PATCH 1/4] BUG/MINOR: log: missing some ARGC_* entries in
 - [PATCH 2/4] DOC: usesrc root privileges requirements
 - [PATCH 3/4] BUILD: ssl: Allow building against libssl without SSLv3.
 - [PATCH 4/4] DOC/MINOR: fix OpenBSD versions where haproxy works

Signed-off-by: heil <heil@terminal-consulting.de>

libuv: fix download path

Signed-off-by: John Crispin <blogic@openwrt.org>

python: add dependency to bz2 host build

Signed-off-by: John Crispin <blogic@openwrt.org>

zabbix: update to 2.4.6 (and refresh patches)

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>

sqlite3: update source to 3.8.11.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>

Merge pull request #1678 from luizluca/for-15.05-ruby_update

ruby: bump version to 2.2.3 [backport from trunk]

ruby: bump version to 2.2.3

This is a bug and security fix release, including:

- CVE-2015-3900 Request hijacking vulnerability in RubyGems 2.4.6 and earlier

http://svn.ruby-lang.org/repos/ruby/tags/v2_2_3/ChangeLog

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

lighttpd: backport a fix for running out of filedescriptors

It was breaking uploads of files 4 MiB+. This patch fixes:
https://github.com/openwrt/packages/issues/1658

Signed-off-by: Rafał Miłecki <zajec5@gmail.com>

apache: bump to version 2.2.31

Signed-off-by: heil <heil@terminal-consulting.de>

libidn: Update to 1.32

Signed-off-by: Marcel Denia <naoir@gmx.net>

gnutls: updated to 3.4.4

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

netperf: update to v2.7.0

Adopt the netperf package.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

Merge pull request #1616 from tru7/for-15.05

[for-15.05] knxd: bump to newest version for CC

Merge pull request #1618 from MikePetullo/for-15.05

For 15.05: lighttpd: update to 1.4.36

lighttpd: update to 1.4.36

Signed-off-by: W. Michael Petullo <mike@flyn.org>

lighttpd: add liblua deps for lighttpd-mod-cml and lighttpd-mod-magnet

Signed-off-by: Alexander Ryzhov <openwrt@ryzhov-al.ru>

knxd: bump to newest version for CC

Signed-off-by: Othmar Truniger <github@truniger.ch>

mwan3: update to version 1.6-2

Fix malformed uci commands. (issue #1502)

Signed-off-by: Jeroen Louwes <jeroen.louwes@gmail.com>

[packages] vsftpd: CVE-2015-1419

Unspecified vulnerability in vsftp 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to deny_file parsing.

Merge pull request #1599 from MikePetullo/for-15.05

For 15.05: openldap: update to 2.4.41

openldap: remove --without-cyrus-sasl to build SASL support

Signed-off-by: W. Michael Petullo <mike@flyn.org>

openldap: update copyright dates

Signed-off-by: W. Michael Petullo <mike@flyn.org>

openldap: update to 2.4.41

Signed-off-by: W. Michael Petullo <mike@flyn.org>

freeradius2: update to 2.2.8

Fixes oCert CVE-2015-4680.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Merge pull request #1572 from dvlemplgk/patch-4

open-plc-utils: backport of update on master branch

open-plc-utils: Update to commit 885a1b7e2e663b5ab8797db6d40a0318131fdf18

This particularly fixes unusable amphost utility on big endian targets.

Signed-off-by: Günther Kelleter <guenther.kelleter@devolo.de>

sqm-scripts/luci-app-sqm: Merge upstream changes.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

sqm-scripts: Default to ECN on for egress.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

[SQM] Fix simple.qos to allow using cake as ingress shaper

simple.qos had accidentally set up the egress shaper twice, once
with the true egress parameters and a second time using the ingress
parameters, effectively misconfiguring both directions. This bub
only affected situations where 3-tier ingress classification was
used.

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>

[SQM] Fix sqm_logger to accept empty strings as input

sqm_logger tried tro wait indefinitely if passed an empty string.
This in turn makes sqm-scripts hang. Quoting the input argument in sqm_logger
seems to fix the problem.

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>

[SQM] Fix changes relating to cake lnk layer adjustments

The last batch of changes tried to teach the GUI to pass link layer
options to cake but forgot to actually call the function that parses
the GUI variables and used it as a string insteead. So this fixes that
it also tries to allow the use of the tc_stab link layer adjustment
method with cake so the implementations can be validated against each other
easily. Needs testing...

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>

[SQM/luci-app-sqm] Wire up link layer dandling for cake

The cake traffic-shaper qdisc omne stop solution knows how to handle
link layer adjustments for ATM and can account for per packet overhead.
This commit adds cake as link layer adjustment mechanism in the GUI and
passes numerically specified overhead as well as the ATM linklayer
keywords on to cake. This change also passes the "advanced option strings"
from the Queue Discipline tab to cake. But as before no error checking.
This needs testing, as I have no working cake qdisc available so
caveat emptor...

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>

luci-app-sqm: add cake support

sqm-scripts: Support the cake qdisc.

Signed-off-by: Dave Taht <dave.taht@bufferbloat.net>

[SQM/luci-app-sqm] Fix SQM GUI help messages.

Make clear that configuration options guarded by checkboxes are only
effective as long as those boxes are checked.

The sqm gui has giarded some advanced configuration options behind exposing
checkboxes, meaning these optiopn's values were only used as long
as those boxes were checked. This commit just improves the description of
the checkboxes to included this useage instruction...

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>

[SQM/luci-app-sqm] Enable sqm initiscript if a single sqm instance gets enabled

The SQM gui has confused its users with an enable button, that only served to
selecively activate/de-activate sqm instances instead of controlling sqm's
initscript (which needs to be enabled so the sqm properly starts up after a reboot
and also for hotplug to work properly). luci-app-sqm will now enable sqm's
initscript when a single sqm instance get enabled. It also informs the user about
this fact in the top margin of the sqm page. Note sqm will not disable the
initscript behind the user's back if sqm instances get disabled.
While I would have prefered this notice to be more prominent an attentive user
should notice, and most users should not care anyway. This also increases the
package release number.

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>

libidn: Update to 1.31

Signed-off-by: Marcel Denia <naoir@gmx.net>

gnutls: updated to 3.4.3

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

screen: update to 4.3.1

quickly run tested on ar71xx

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>