Hannu Nyman [Mon, 23 May 2016 07:33:23 +0000 (10:33 +0300)]
Merge pull request #2723 from the-alien/master
lang/python-ldap: Update to the version 2.4.25
Hannu Nyman [Mon, 23 May 2016 07:29:46 +0000 (10:29 +0300)]
Merge pull request #2732 from xypron/make
devel/make: GNU Make 4.2
Heinrich Schuchardt [Mon, 23 May 2016 05:55:03 +0000 (07:55 +0200)]
devel/make: GNU Make 4.2
The release contains a bunch of bug fixes.
Signed-off-by: Heinrich Schuchardt <xypron.glpk@gmx.de>
Nikos Mavrogiannopoulos [Sun, 22 May 2016 15:47:33 +0000 (17:47 +0200)]
gnutls: updated to 3.4.12
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Nikos Mavrogiannopoulos [Sun, 22 May 2016 15:42:22 +0000 (17:42 +0200)]
openconnect: use proto_add_host_dependency
This ensures that a direct route to the connected host is added
by netifd.
Resolves #2548
Hannu Nyman [Sun, 22 May 2016 11:20:02 +0000 (14:20 +0300)]
vips: fix patch
Correct spelling in a patch back to the faulty original,
as the patch wes broken by #2594
This commit fixes #2719
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Michael Heimpold [Sat, 21 May 2016 20:12:25 +0000 (22:12 +0200)]
php5: update to 5.6.21
This fixes the following CVEs:
- in BCMath: CVE-2016-4537, CVE-2016-4538
- in EXIF: CVE-2016-4542, CVE-2016-4543, CVE-2016-4544
- in GD: CVE-2016-3074
- in Intl: CVE-2016-4540, CVE-2016-4541
- in XML: CVE-2016-4539
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Yousong Zhou [Sat, 21 May 2016 13:05:50 +0000 (21:05 +0800)]
Merge pull request #2721 from mogulapranay-freescale/xl2tpd-demand-option
xl2tpd: demand option is initialized.
alien [Fri, 20 May 2016 21:23:05 +0000 (00:23 +0300)]
lang/python-ldap: Update to the version 2.4.25
Michael Heimpold [Fri, 20 May 2016 15:54:36 +0000 (17:54 +0200)]
mmc-utils: upgrade to latest revision
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Jiri Slachta [Fri, 20 May 2016 11:19:11 +0000 (13:19 +0200)]
Merge pull request #2714 from jow-/tiff-ftell-fix
tiff: fix wrong declaration of ftell() compat macro
Daniel Golle [Fri, 20 May 2016 04:22:04 +0000 (06:22 +0200)]
lvm2: fix accidentally augmented goto label
also refresh patches while at it
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Daniel Golle [Thu, 19 May 2016 17:17:38 +0000 (19:17 +0200)]
lvm2: update to version 2.02.154
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Daniel Golle [Thu, 19 May 2016 17:13:53 +0000 (19:13 +0200)]
gnunet: use gnunet-config's new differential write
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Daniel Golle [Thu, 19 May 2016 17:12:25 +0000 (19:12 +0200)]
debootstrap: update to version 1.0.81
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Hannu Nyman [Thu, 19 May 2016 15:18:18 +0000 (18:18 +0300)]
Merge pull request #2718 from kooiot/master
libzmq upgrade to 4.1.4
Dirk Chang [Thu, 19 May 2016 15:13:05 +0000 (23:13 +0800)]
libzmq upgrade to 4.1.4
Signed-off-by: Dirk Chang <dirk@kooiot.com>
Jo-Philipp Wich [Thu, 19 May 2016 12:33:08 +0000 (14:33 +0200)]
Merge pull request #2713 from jow-/mc-gettext-version
mc: apply gettext version fixup
Jo-Philipp Wich [Thu, 19 May 2016 12:29:57 +0000 (14:29 +0200)]
tiff: fix wrong declaration of ftell() compat macro
The libtiff library declares an `ftell()` compat macro redirecting calls
to `ftello()` if such an implementation exists. The compat macro however
is declared with a wrong number of arguments, leading to the following
error on our buildbots:
In file included from .../usr/include/uClibc++/iostream:29:0,
from tif_stream.cxx:31:
.../usr/include/uClibc++/fstream:422:22: error: macro "ftell" requires 3 arguments, but only 1 given
retval = ftell(fp);
Add a patch to fix the macro definition in order to fix compilation of
the tiff package.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Jo-Philipp Wich [Thu, 19 May 2016 12:03:14 +0000 (14:03 +0200)]
mc: apply gettext version fixup
Apply the version fixup in order to solve the following build error on systems
not using exactly gettext version 0.18:
make[6]: Entering directory '.../build_dir/target-mips_34kc_musl-1.1.14/mc-4.8.17/po'
*** error: gettext infrastructure mismatch: using a Makefile.in.in from gettext version 0.18 but the autoconf macros are from gettext version 0.19
The fixup will ensure that embedded macro versions are replaced with the
version of the staged gettext executable in ./staging_dir/host/bin
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Nikos Mavrogiannopoulos [Thu, 19 May 2016 11:52:44 +0000 (13:52 +0200)]
Merge pull request #2711 from jow-/openconnect-nolz4
openconnect: avoid possible implicit dependency on liblz4
Ted Hess [Wed, 18 May 2016 21:54:07 +0000 (17:54 -0400)]
zile: Fix build with latest ncurses changes
Signed-off-by: Ted Hess <thess@kitschensync.net>
Jo-Philipp Wich [Thu, 19 May 2016 09:41:44 +0000 (11:41 +0200)]
openconnect: avoid possible implicit dependency on liblz4
If the liblz4 library exists within the build environment, the openconnect
configure will pick it up and start depending on it, leading to the following
build error:
Package openconnect is missing dependencies for the following libraries:
liblz4.so.1
Disable LZ4 support in configure in order to avoid this implicit,
nondeterministic dependency.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
John Crispin [Wed, 18 May 2016 14:51:25 +0000 (16:51 +0200)]
Merge pull request #2707 from nxhack/node-hid-fix-compile-error
node-hid: fix compile error, condition of not-installing 'libusb-dev' package at cross-compile host.
Nuno Goncalves [Wed, 18 May 2016 13:38:43 +0000 (14:38 +0100)]
Merge pull request #2709 from jow-/usbip-nonshared
usbip: mark as nonshared
Jo-Philipp Wich [Wed, 18 May 2016 12:59:16 +0000 (14:59 +0200)]
usbip: mark as nonshared
Mark the usbip package nonshared so that is built along with the target
specific binaries and not within the SDK environment.
This is needed since the usbip package draws its source files directly
from the kernel tree which is unavailable within the SDK.
Fixes the following build error encountered by the LEDE buildbots:
http://downloads.lede-project.org/snapshots/faillogs/mipsel_1004kc_dsp/packages/usbip/compile.txt
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Hirokazu MORIKAWA [Wed, 18 May 2016 05:54:38 +0000 (14:54 +0900)]
node-hid: fix compile error
Daniel Golle [Wed, 18 May 2016 00:16:15 +0000 (02:16 +0200)]
gnunet: fix typo in gnunet-flat post-install script
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Daniel Golle [Tue, 17 May 2016 21:36:47 +0000 (23:36 +0200)]
gnunet: update to SVN r37179 and fix SUID permissions (again)
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Hannu Nyman [Mon, 16 May 2016 21:02:10 +0000 (00:02 +0300)]
Merge pull request #2706 from dibdot/adblock
adblock: update 1.1.11
Dirk Brenken [Mon, 16 May 2016 20:51:07 +0000 (22:51 +0200)]
adblock: update 1.1.11
* fix changed winspy source url in default config
* fix adblock counters in config
* cosmetics
Signed-off-by: Dirk Brenken <dev@brenken.org>
mogulapranay [Mon, 16 May 2016 16:17:57 +0000 (21:47 +0530)]
xl2tpd: demand option is initialized.
Signed-off-by: mogulapranay <mogulapranay57@gmail.com>
Hannu Nyman [Mon, 16 May 2016 15:07:51 +0000 (18:07 +0300)]
Merge pull request #2705 from Zokormazo/grep
grep: update to 2.25
Julen Landa Alustiza [Mon, 16 May 2016 08:04:28 +0000 (10:04 +0200)]
grep: update to 2.25
Signed-off-by: Julen Landa Alustiza <julen@zokormazo.info>
Hannu Nyman [Mon, 16 May 2016 06:31:39 +0000 (09:31 +0300)]
Merge pull request #2576 from cshore/pull-request-collectd-udev
utils/collectd: Disable libudev linking
John Crispin [Mon, 16 May 2016 06:30:09 +0000 (08:30 +0200)]
Merge pull request #2685 from nxhack/node-modules-for-v4.4.4
node-*: node update to v4.4.4
Hannu Nyman [Mon, 16 May 2016 06:25:52 +0000 (09:25 +0300)]
Merge pull request #2699 from ClaymorePT/boost_1_61_0
boost: Package Version Update to 1.61.0
Hannu Nyman [Mon, 16 May 2016 06:23:47 +0000 (09:23 +0300)]
Merge pull request #2698 from andrenarchy/icecast-2.4.3
icecast: update to 2.4.3
Daniel Dickinson [Sun, 27 Mar 2016 14:07:47 +0000 (10:07 -0400)]
utils/collectd: Disable libudev linking
At least when building with OpenWrt SDK, if libudev is present
(even if not actually used by the system), then at least the
disk plugin attempts to link against udev, which results in
packages failure due to lack of dependencies, and it's not
desirable to add a dependency on udev just because udev
was built for the SDK, so we disable libudev support
explicity.
Signed-off-by: Daniel Dickinson <openwrt@daniel.thecshore.com>
Conflicts:
utils/collectd/Makefile
carlos ferreira [Sun, 15 May 2016 23:56:57 +0000 (00:56 +0100)]
Boost: Package Version Update
This package version update brings four new libraries:
- Compute [1]
- DLL [2]
- Hana [3]
- Metaparse [4]
More information about the 1.61.0 release (bug fixes, etc), can be found
here[5].
[1]: http://www.boost.org/libs/compute/
[2]: http://www.boost.org/libs/dll/
[3]: http://www.boost.org/libs/hana/
[4]: http://www.boost.org/libs/metaparse/
[5]: http://www.boost.org/users/history/version_1_61_0.html
Signed-off-by: Carlos M. Ferreira <carlosmf.pt@gmail.com>
André Gaul [Sun, 15 May 2016 20:00:26 +0000 (22:00 +0200)]
icecast: update to 2.4.3
Signed-off-by: André Gaul <gaul@gaul.io>
Peter Wagner [Fri, 13 May 2016 10:54:35 +0000 (12:54 +0200)]
git: update to 2.8.2
Fixes:
CVE-2016-2315
CVE-2016-2324
Signed-off-by: Peter Wagner <tripolar@gmx.at>
Hannu Nyman [Fri, 13 May 2016 09:25:39 +0000 (12:25 +0300)]
Merge pull request #2695 from dibdot/adblock
adblock: update 1.1.10
Dirk Brenken [Fri, 13 May 2016 07:54:20 +0000 (09:54 +0200)]
adblock: update 1.1.10
* automatic AP mode detection (change nullip address accordingly)
* (de-)compress backups on the fly
* remove hardcoded path for logger
* documentation update
* change maintainer email address
* cosmetics
Signed-off-by: Dirk Brenken <dev@brenken.org>
Hannu Nyman [Fri, 13 May 2016 07:22:37 +0000 (10:22 +0300)]
Merge pull request #2691 from haraldg/elektra
elektra: Update to 0.8.16
Hannu Nyman [Fri, 13 May 2016 07:20:07 +0000 (10:20 +0300)]
Merge pull request #2693 from dibdot/mc
mc: bugfix 4.8.17
Hannu Nyman [Fri, 13 May 2016 07:19:30 +0000 (10:19 +0300)]
Merge pull request #2694 from dibdot/ssmtp
ssmtp: refresh package makefile
Dirk Brenken [Fri, 13 May 2016 07:14:24 +0000 (09:14 +0200)]
ssmtp: refresh package makefile
* change maintainer email address
* switch to sha256sum fingerprint
* cosmetics
Signed-off-by: Dirk Brenken <dev@brenken.org>
Dirk Brenken [Fri, 13 May 2016 06:21:13 +0000 (08:21 +0200)]
mc: bugfix 4.8.17
* revert latest gettext change, break builds on various platforms
* changed maintainer email address
Signed-off-by: Dirk Brenken <dev@brenken.org>
Daniel Golle [Mon, 9 May 2016 10:53:23 +0000 (11:53 +0100)]
gnunet: update source and actually package hostlist component
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Harald Geyer [Mon, 9 May 2016 18:11:57 +0000 (18:11 +0000)]
elektra: Update to 0.8.16
Notable changes:
Add -DCMAKE_CXX_FLAGS="-DELEKTRA_SHARED" to work around an upstream
bug (already fixed) in the Makefile.
Signed-off-by: Harald Geyer <harald@ccbib.org>
Felix Fietkau [Wed, 11 May 2016 16:34:24 +0000 (18:34 +0200)]
libffi: fix include path in pkg-config file, fixes glib2 build
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Thomas Heil [Wed, 11 May 2016 15:59:11 +0000 (17:59 +0200)]
Merge pull request #2678 from dirkfeytons/nginx_startlevel
nginx: change start level to 80
Ted Hess [Wed, 11 May 2016 15:51:34 +0000 (11:51 -0400)]
libvorbisidec: Fix git URL for tremor repo.
Signed-off-by: Ted Hess <thess@kitschensync.net>
Felix Fietkau [Wed, 11 May 2016 10:52:47 +0000 (12:52 +0200)]
mocp: fix ncurses dependency
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Wed, 11 May 2016 10:36:32 +0000 (12:36 +0200)]
bmon: fix ncurses dependency
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Hirokazu MORIKAWA [Wed, 11 May 2016 08:10:49 +0000 (17:10 +0900)]
node-*: node update to v4.4.4
Alexey Brodkin [Thu, 28 Apr 2016 22:12:30 +0000 (01:12 +0300)]
libffi: bump to version 3.2.1
Among many fixes and improvements this new version adds
support of ARC architecture (ARC port was actually introduced
in v3.1 but while at it why not to update to the most recent version).
Which allows to build dependent projects like Python etc.
Signed-off-by: Alexey Brodkin <abrodkin@synopsys.com>
Hannu Nyman [Tue, 10 May 2016 19:26:58 +0000 (22:26 +0300)]
Merge pull request #2680 from KurdyMalloy/master
poco: update to 1.7.3
jmjulien [Tue, 10 May 2016 16:16:15 +0000 (12:16 -0400)]
poco: update to 1.7.3
Update package to latest stable version (1.7.3)
Signed-off-by: Jean-Michel Julien <jean-michel.julien@trilliantinc.com>
Hannu Nyman [Tue, 10 May 2016 14:37:39 +0000 (17:37 +0300)]
Merge pull request #2679 from dubek/rsyslog-upgrade-to-8.18.0
net/rsyslog: update to 8.18.0
Dov Murik [Tue, 10 May 2016 14:33:31 +0000 (10:33 -0400)]
net/rsyslog: update to 8.18.0
Signed-off-by: Dov Murik <dmurik@us.ibm.com>
Dirk Feytons [Tue, 10 May 2016 13:54:27 +0000 (15:54 +0200)]
nginx: change start level to 80
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
Thomas Heil [Tue, 10 May 2016 10:29:36 +0000 (12:29 +0200)]
Merge pull request #2677 from dirkfeytons/nginx_correct_f3c7cc6
nginx: correct
f3c7cc6
Dirk Feytons [Mon, 9 May 2016 16:09:41 +0000 (18:09 +0200)]
nginx: correct
f3c7cc6
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
champtar [Mon, 9 May 2016 20:22:33 +0000 (22:22 +0200)]
Merge pull request #2661 from salzmdan/master
Update liburcu, add libedit and update knot
John Crispin [Mon, 9 May 2016 20:02:51 +0000 (22:02 +0200)]
Merge pull request #2675 from NeoRaider/update-node
node: update and fix GCC 6 miscompile
Matthias Schiffer [Mon, 9 May 2016 14:21:57 +0000 (16:21 +0200)]
node: fix undefined behaviour leading to broken code with GCC 6
Fixes segfaults occuring in the node host build when GCC 6 is used.
Backport of upstream commit
96198d5bc710a4e3ca49eeeb3b3fa7b8cb61547d.
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Matthias Schiffer [Mon, 9 May 2016 13:57:18 +0000 (15:57 +0200)]
node: update to v4.4.4
While we're at it, also enable parallel builds.
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
heil [Mon, 9 May 2016 12:25:18 +0000 (14:25 +0200)]
nginx: correct errors from previous merge
Signed-off-by: heil <heil@terminal-consulting.de>
Daniel Golle [Mon, 9 May 2016 11:28:00 +0000 (12:28 +0100)]
Merge pull request #2671 from dangowrt/libmicrohttpd-dont-use-PROVIDES
libmicrohttpd: don't use PROVIDES for non-virtual package
Thomas Heil [Mon, 9 May 2016 11:26:48 +0000 (13:26 +0200)]
Merge pull request #2640 from dirkfeytons/nginx_1.10.0
nginx: upstep to 1.10.0, add Lua module, footprint optimizations
Daniel Golle [Mon, 9 May 2016 10:53:55 +0000 (11:53 +0100)]
libmicrohttpd: don't use PROVIDES for non-virtual package
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Álvaro Fernández Rojas [Sun, 8 May 2016 19:02:44 +0000 (21:02 +0200)]
sumo: update to v0.26.0
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
champtar [Sun, 8 May 2016 17:22:44 +0000 (19:22 +0200)]
Merge pull request #2669 from dibdot/adblock
adblock: update 1.1.2
Dirk Brenken [Sun, 8 May 2016 16:57:54 +0000 (18:57 +0200)]
adblock: update 1.1.2
* remove hardcoded paths for system tools like iptables, uci & fetch
(wget)
* support openwrt & lede spin-off
* cosmetics & cleanups
Signed-off-by: Dirk Brenken <openwrt@brenken.org>
champtar [Sun, 8 May 2016 14:24:49 +0000 (16:24 +0200)]
Merge pull request #2668 from dibdot/mc
mc: update 4.8.17
Dirk Brenken [Sun, 8 May 2016 14:13:49 +0000 (16:13 +0200)]
mc: update 4.1.17
* changelog: https://www.midnight-commander.org/wiki/NEWS-4.8.17
* fix for #2664
Signed-off-by: Dirk Brenken <openwrt@brenken.org>
champtar [Sun, 8 May 2016 11:28:15 +0000 (13:28 +0200)]
Merge pull request #2667 from chris5560/master
dns-scripts: add DNS lookup support for "drill" and "khost" (Knot DNS)
Christian Schoenebeck [Sun, 8 May 2016 11:14:45 +0000 (13:14 +0200)]
dns-scripts: add DNS lookup support for "drill" and "khost" (Knot DNS)
- add DNS lookup support for "drill" and "khost" (Knot DNS) #2637
- new service nsupdate.info (IPv4 and IPv6) #2433
- new services dyndnss.net, dyns.net (IPv4 only)
- new services dnshome.de, goip.de, myonlineportal.net (IPv4 and IPv6)
Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
Daniel Golle [Sat, 7 May 2016 18:10:24 +0000 (19:10 +0100)]
gnunet: update source and improve packaging
* push gnurl, gnutls and libmicrohttpd dependencies down to modules
* use standard UID/GID for gnunet (958/958)
* use GID adjecent (452) to dnsmasq (453) for gnunetdns to allow
using the owner match with a range of GIDs (452-452)
* package new gnunet-social pub/sub CLI tool
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Ted Hess [Fri, 6 May 2016 22:11:42 +0000 (18:11 -0400)]
Merge pull request #2662 from ejurgensen/master
forked-daapd: Update to version 24.1
ejurgensen [Fri, 6 May 2016 18:06:09 +0000 (20:06 +0200)]
forked-daapd: Update to version 24.1
Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>
Daniel Salzman [Fri, 6 May 2016 13:16:16 +0000 (15:16 +0200)]
knot: update to 2.2.0
Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>
Daniel Salzman [Fri, 6 May 2016 13:15:38 +0000 (15:15 +0200)]
libedit: add new package
Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>
Daniel Salzman [Fri, 6 May 2016 13:15:21 +0000 (15:15 +0200)]
liburcu: update to 0.9.2
Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>
champtar [Thu, 5 May 2016 10:51:52 +0000 (12:51 +0200)]
Merge pull request #2660 from stweil/master
Fix two small typos (found by codespell)
Stefan Weil [Sat, 26 Mar 2016 10:53:46 +0000 (11:53 +0100)]
sound/svox: Fix typo (found by codespell)
Signed-off-by: Stefan Weil <sw@weilnetz.de>
Stefan Weil [Sat, 26 Mar 2016 10:49:56 +0000 (11:49 +0100)]
mail/alpine: Fix typo (found by codespell)
Signed-off-by: Stefan Weil <sw@weilnetz.de>
champtar [Wed, 4 May 2016 17:23:09 +0000 (19:23 +0200)]
Merge pull request #2126 from lynxis/libmicrohttpd
Libmicrohttpd: add build variant for ssl + no-ssl + build parallel
champtar [Wed, 4 May 2016 17:14:33 +0000 (19:14 +0200)]
Merge pull request #2659 from lynxis/maintainer
libmicrohttpd: take over maintainership
champtar [Wed, 4 May 2016 17:10:36 +0000 (19:10 +0200)]
Merge pull request #2644 from stweil/master
utils/watchcat: Fix some typos (mostly found by codespell)
Peter Wagner [Wed, 4 May 2016 16:49:28 +0000 (18:49 +0200)]
ntpd: update to 4.2.8p7
Fixes the following CVEs:
Bug 3020 / CVE-2016-1551: Refclock impersonation vulnerability, AKA: refclock-peering
Reported by Matt Street and others of Cisco ASIG
Bug 3012 / CVE-2016-1549: Sybil vulnerability: ephemeral association attack, AKA: ntp-sybil - MITIGATION ONLY
Reported by Matthew Van Gundy of Cisco ASIG
Bug 3011 / CVE-2016-2516: Duplicate IPs on unconfig directives will cause an assertion botch
Reported by Yihan Lian of the Cloud Security Team, Qihoo 360
Bug 3010 / CVE-2016-2517: Remote configuration trustedkey/requestkey values are not properly validated
Reported by Yihan Lian of the Cloud Security Team, Qihoo 360
Bug 3009 / CVE-2016-2518: Crafted addpeer with hmode > 7 causes array wraparound with MATCH_ASSOC
Reported by Yihan Lian of the Cloud Security Team, Qihoo 360
Bug 3008 / CVE-2016-2519: ctl_getitem() return value not always checked
Reported by Yihan Lian of the Cloud Security Team, Qihoo 360
Bug 3007 / CVE-2016-1547: Validate crypto-NAKs, AKA: nak-dos
Reported by Stephen Gray and Matthew Van Gundy of Cisco ASIG
Bug 2978 / CVE-2016-1548: Interleave-pivot - MITIGATION ONLY
Reported by Miroslav Lichvar of RedHat and separately by Jonathan Gardner of Cisco ASIG
Bug 2952 / CVE-2015-7704: KoD fix: peer associations were broken by the fix for NtpBug2901, AKA: Symmetric active/passive mode is broken
Reported by Michael Tatarinov, NTP Project Developer Volunteer
Bug 2945 / Bug 2901 / CVE-2015-8138: Zero Origin Timestamp Bypass, AKA: Additional KoD Checks
Reported by Jonathan Gardner of Cisco ASIG
Bug 2879 / CVE-2016-1550: Improve NTP security against buffer comparison timing attacks, authdecrypt-timing, AKA: authdecrypt-timing
Reported independently by Loganaden Velvindron, and Matthew Van Gundy and Stephen Gray of Cisco ASIG.
Signed-off-by: Peter Wagner <tripolar@gmx.at>
Alexander Couzens [Wed, 4 May 2016 15:44:27 +0000 (17:44 +0200)]
libmicrohttpd: take over maintainership
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
Daniel Golle [Wed, 4 May 2016 14:26:19 +0000 (15:26 +0100)]
gnunet: no longer fail if gnunetdns doesn't exist (yet)
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Daniel Golle [Tue, 3 May 2016 14:33:26 +0000 (15:33 +0100)]
gnunet: fix priority of ip rule for gnunet-dns
OpenWrt offers a special 'prelocal' routing table at priority 0.
Use it, so local-to-local DNS traffic also gets redirected properly.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Hannu Nyman [Wed, 4 May 2016 11:25:06 +0000 (14:25 +0300)]
Merge pull request #2610 from antxxxx/master
ddns-scripts: Update mythic-beasts URL so that fully qualified hostname can be passed
Anthony Brown [Wed, 4 May 2016 10:28:05 +0000 (11:28 +0100)]
ddns-scripts: update mythic-beasts ipv4 and add mythic-beasts ipv6
Signed-off-by: Anthony Brown <anthony@found-it.net>
champtar [Tue, 3 May 2016 19:48:05 +0000 (21:48 +0200)]
Merge pull request #2514 from jefferyto/tor-remove-tor-fw-helper
tor: remove tor-fw-helper
champtar [Tue, 3 May 2016 19:12:33 +0000 (21:12 +0200)]
Merge pull request #2495 from cshore/pull-request-vpnc-auth-fail
net/vpnc: Add option to prevent retry on authentication failure