net/dnscrypt-proxy: update 1.6.1, security update see https://github.com/jedisct1/dnscrypt-proxy/releases/tag/1.6.1

Signed-off-by: Damiano Renfer damiano.renfer@gmail.com

Merge pull request #2352 from chris5560/radicale

Radicale: bump to version 1.1.1

Merge pull request #2351 from chris5560/ddns-scripts

ddns-scripts: update to 2.6.1-1 with several fixes

php5: update to 5.6.18

Note: Upstream tagged this as security release.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Radicale: bump to version 1.1.1

* upstream to Radicale 1.1.1
* add file list to be saved on sysupgrade

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>

ddns-scripts: update to 2.6.1-1 with several fixes

- new function expand_ipv6()
- expand IPv6 before compare https://dev.openwrt.org/ticket/21725
- Fix split_FQDN() to return host.subdomain correctly  #2334
- modified check for musl library used by nslookup #2341 #2346 thanks to Arjen de Korte

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>

Merge pull request #2344 from dibdot/adblock

adblock: 0.60.1

adblock: 0.60.1

- fix possible race condition during startup
- fix duplicate logging during startup
- fix wget parms to prevent partitial downloads
- fix iptables rules to meet openwrt user chains
- added a rule in output chain to reject local ad related requests as
well
- changed default IPv4/IPv6 blackhole ip address to fix routing issues
with windows clients

Signed-off-by: Dirk Brenken <openwrt@brenken.org>

gnutls: updated to 3.4.9

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Merge pull request #2339 from diizzyy/patch-1

nfs-kernel-server: use libevent2, update copyright and bump PKG_RELEASE

nfs-kernel-server: use libevent2, update copyright and bump PKG_RELEASE

Use libevent2 instead of libevent
Update copyright to 2016
Bump PKG_RELEASE due to package changes

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Merge pull request #2336 from diizzyy/patch-1

exfat-nofuse: update version

exfat-nofuse: update version

Fixes filesystem corruption reports after writing on Linux and running chkdsk afterwards on Windows.

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Merge pull request #2333 from dubek/rsyslog-8.16.0

net/rsyslog: update to 8.16.0

net/rsyslog: update to 8.16.0

Signed-off-by: Dov Murik <dmurik@us.ibm.com>

Merge pull request #2326 from ffainelli/iptraf

net: Add iptraf-ng

Merge pull request #2316 from yunfan/master

dvtm: initial version 0.15

Merge pull request #2264 from dangowrt/squid-libcom_err-builddep

squid: build-depend on libext2fs

Merge pull request #2321 from karlp/pulls/file-typos

libs: file: fix typo in default call

dvtm: initial version 0.15

Signed-off-by: Yunfan Jiang <jyf1987@gmail.com>

Merge pull request #2324 from ffainelli/bonnieplus

utils: Import bonnie++

net: Add iptraf-ng

Add iptraf-ng 1.1.4 which is the successor of iptraf. Tested on
the realview target.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

Merge pull request #2325 from Wedmer/master

[utils/zoneinfo] Updated to the latest release version

Merge pull request #2317 from mhei/fix-automake

automake: fix unversioned links during package build

[utils/zoneinfo] Updated to the latest release version

Signed-off-by: Vladimir Ulrich <admin@evl.su>

utils: Import bonnie++

Import bonnie++ from oldpackages:

* update to 1.97
* refresh patches
* add license tags
* add myself as maintainer

Signed-off-by: Florian Fainelli <florian@openwrt.org>

libs: file: fix typo in default call

Corrects the display and help text for file and libmagic in menuconfig.

Signed-off-by: Karl Palsson <karlp@remake.is>

automake: fix unversioned links during package build

Reported by buildbots (shortened and line-wrapped):
...
ln -sf -r .../ipkg-ramips_24kec/automake/usr/bin/automake-1.15
   .../ipkg-ramips_24kec/automake/usr/bin/automake
ln: invalid option -- 'r'

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #2273 from xypron/apr

libs/apr: use @APACHE download facility

Merge pull request #2274 from xypron/apr-util

libs/apr-util: use @APACHE download facility

Merge pull request #2275 from xypron/apache

net/apache: use @APACHE download facility

Merge pull request #2304 from dibdot/adblock

adblock: update to 0.60.0

Merge pull request #2310 from chris5560/master

ddns-scripts: Ver.2.6.0 - support hostip and uclient-fetch

Merge pull request #2306 from mlichvar/chrony-update-2.2.1

chrony: update to 2.2.1

Merge pull request #2282 from commodo/python3-setuptools-upgrade

python3-setuptools: upgrade to version 19.4

Merge pull request #2281 from commodo/python-setuptools-upgrade

python-setuptools: upgrade to version 19.4

ntpd: update to 4.2.8p6

Signed-off-by: Peter Wagner <tripolar@gmx.at>

adblock: update to 0.60.0

* "zero-conf" installation & setup, usually no manual config changes
required (i.e. ip address, network devices etc.)
* full IPv4 and IPv6 support
* new adblock list source (malwaredomainlist.com)
* adblock related statistics will be done by iptables
* removed curl dependency
* for IPv6 support you need 'kmod-ipt-nat6'
* fix Chaos Calmer compability
* various small changes & fixes
* updated documentation
* updated maintainer email address

Signed-off-by: Dirk Brenken <dirk@brenken.org>

haproxy: add pending patches from upstream

 - [PATCH 11/13] BUG/MEDIUM: peers: table entries learned from a remote
 - [PATCH 12/13] BUG/MEDIUM: peers: old stick table updates could be
 - [PATCH 13/13] CLEANUP: haproxy: using _GNU_SOURCE instead of

Signed-off-by: heil <heil@terminal-consulting.de>

nginx: add naxsi module

 - this brings back naxsi support aka WAF for nginx

Signed-off-by: heil <heil@terminal-consulting.de>

nginx: upstep to 1.9.9

Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>

libwebsockets: bump to v1.6.2

Many user api changes, largely to cleanup and make more consistent.
Full changelog available at
http://git.libwebsockets.org/cgi-bin/cgit/libwebsockets/tree/changelog

Signed-off-by: Karl Palsson <karlp@remake.is>

libwebsockets: Correctly enable IPv6 support

Signed-off-by: Karl Palsson <karlp@remake.is>

unixodbc:
 - corect fetch url

Signed-off-by: heil <heil@terminal-consulting.de>

pcre: upgrade to 0.8.38

fixes:
  * CVE 2015-2327 CVE 2015-2328 CVE 2015-8380 CVE 2015-8381 CVE
  * 2015-8382
  * CVE 2015-8383 CVE 2015-8384 CVE 2015-8385 CVE 2015-8386 CVE
  * 2015-8387
  * CVE 2015-8388 CVE 2015-8389 CVE 2015-8390 CVE 2015-8391 CVE
  * 2015-8392
  * CVE 2015-8393 CVE 2015-8394 CVE 2015-8395

Signed-off-by: heil <heil@terminal-consulting.de>

prosody: upgrade to 0.9.9

  fixes:
    * path traversal vulnerability in mod_http_files (CVE-2016-1231)
    * use of weak PRNG in generation of dialback secrets (CVE-2016-1232)

Signed-off-by: heil <heil@terminal-consulting.de>

u2pnpd: update to 0.3

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #2269 from xypron/libtool-bin

devel/libtool-bin: new package

ddns-scripts: Ver.2.6.0 - support hostip and uclient-fetch

- add support for "hostip" to get_registered_ip() as alternative to "Bind host" package https://dev.openwrt.org/ticket/20893#comment:5
- allow to send updates using compiled-in certificate file/path of curl/wget #2242 #2243 #2245
- add support for uclient-fetch / libustream-ssl.so
- remove /128 prefix-filter in get_local_ip() via interface #2268
- add dyndns.org to services_ipv6 https://forum.openwrt.org/viewtopic.php?id=62103
- readd duckdns.org to services #2251 (lost somewhere in data heaven)
- add zzzz.io service #2302
- updated tld_names.dat

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>

chrony: update to 2.2.1

Fixes CVE-2016-1567.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>

tgt: depend on @KERNEL_AIO and @KERNEL_DIRECT_IO instead of modifying the global kernel config

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

devel/libtool-bin: new package

GNU libtool is used to ease the usage of shared libraries in Makefiles.

The new package libtool-bin contains the script libtoolize which is used
to prepare a package to use libtool.

Signed-off-by: Heinrich Schuchardt <xypron.glpk@gmx.de>

net: Import cifs-utils

Import cifs-utils from old packages:

* update to 6.4
* add upstream patch to fix builds with musl
* add license information
* add myself as maintainer

Signed-off-by: Florian Fainelli <florian@openwrt.org>

bind: Allow packages to be built with optional filter-aaaa option

Signed-off-by: Noah Meyerhans <frodo@morgul.net>

bind: upgrade to 9.9.8-P3

Fixes:
 * CVE-2015-8704
 * CVE-2015-3193
 * CVE-2015-8000
 * CVE-2015-8461

Signed-off-by: Noah Meyerhans <frodo@morgul.net>

Merge pull request #2267 from jow-/CVE-2015-8607

perl: ensure File::Spec::canonpath() preserves taint [CVE-2015-8607]

perl-test-harness: Update to 3.36

Signed-off-by: Marcel Denia <naoir@gmx.net>

perl-html-parser: Update to 3.72

Signed-off-by: Marcel Denia <naoir@gmx.net>

perl-uri: Update to 1.71

Signed-off-by: Marcel Denia <naoir@gmx.net>

gdbm: add a gettext dependency

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

boost: do not select @BUILD_NLS, it affects the whole tree

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

treewide: use $(STAGING_DIR)/host instead of $(STAGING_DIR_HOST), sync with changes in trunk

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

glib2: sync with default host prefix change

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

glib2: the host build also needs --with-libiconv=gnu

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Merge pull request #2279 from antonlacon/minidlna-1.1.x

minidlna: update to 1.1.5

glib2: use --with-libiconv=gnu, always required as of trunk r48396

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

strongswan: bump to 5.3.5

Signed-off-by: Steven Barth <steven@midlink.org>

Merge pull request #2289 from stintel/strongswan

strongswan: preserve /etc/ipsec.d during upgrade

Merge pull request #2263 from jsiverskog/mdnsresponder_bump_version

mdnsresponder: bump to 576.30.4.

libffi: fix MIPS softfloat build issue with current binutils

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Merge pull request #2277 from notnyt/feature_cryptodev

cryptodev-linux: bump to 1.8

strongswan: preserve /etc/ipsec.d during upgrade

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

mosquitto: properly separate the passwd utility

Building both variants improperly tried to include the passwd utility
for the non-ssl variant, as the variable was set for the ssl variant.

Use properly separated install tasks to install additional files, rather
than hacking around inside the single target.

Signed-off-by: Karl Palsson <karlp@remake.is>

mosquitto: fix old whitespace bug

Introduced back in 2014

Fixes: cd21cbb82eacf5c2dc60a8dd8dfa51f978b98193
Signed-off-by: Karl Palsson <karlp@tweak.net.au>

tracertools: update source, fixes bug on little-endian systems

and improves collectd support

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

python3-setuptools: upgrade to version 19.4

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

python-setuptools: upgrade to version 19.4

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

mosquitto: fix whitespace error introduced with 7a6a575887db81934369f38616d137005ed9ea96

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Merge pull request #2276 from notnyt/master

flashrom: include io.h to fix compile error

cryptodev-linux: bump to 1.8

This fixes compile time errors using kernel 4.3 and above

Signed-off-by: Rob Mosher <nyt-openwrt@countercultured.net>

flashrom: include io.h to fix compile error

This patch includes sys/io.h from flash.h to fix compile errors

Signed-off-by: Rob Mosher <nyt-openwrt@countercultured.net>

net/apache: use @APACHE download facility

Instead of explicitly specyfing an Apache mirror use the
@APACHE download facility.

Signed-off-by: Heinrich Schuchardt <xypron.glpk@gmx.de>

libs/apr-util: use @APACHE download facility

Instead of explicitly specyfing an Apache mirror use the
@APACHE download facility.

Signed-off-by: Heinrich Schuchardt <xypron.glpk@gmx.de>

libs/apr: use @APACHE download facility

Instead of explicitly specyfing an Apache mirror use the
@APACHE download facility.

Signed-off-by: Heinrich Schuchardt <xypron.glpk@gmx.de>

openssh: update to 7.1p2

Signed-off-by: Peter Wagner <tripolar@gmx.at>

mosquitto: Bump to version 1.4.7

Minor changes mostly unrelated to OpenWRT.
Full changelog at http://mosquitto.org/2015/12/version-1-4-7-released/

Signed-off-by: Karl Palsson <karlp@remake.is>

mosquitto: optionally include mosquitto_passwd utility

Many users of the SSL build of mosquitto need the passwd utility for
managing keys.

Fixes github issue #1909

Signed-off-by: Karl Palsson <karlp@remake.is>

ntpd: update to 4.2.8p5

Signed-off-by: Peter Wagner <tripolar@gmx.at>

perl: ensure File::Spec::canonpath() preserves taint [CVE-2015-8607]

Beginning in PathTools 3.47 and/or perl 5.20.0, the File::Spec::canonpath()
routine returned untained strings even if passed tainted input. This defect
undermines the guarantee of taint propagation, which is sometimes used to
ensure that unvalidated user input does not reach sensitive code.

This defect was found and reported by David Golden of MongoDB, and a patch
was provided by Tony Cook.

References:

 * https://rt.perl.org/Public/Bug/Display.html?id=126862
 * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8607

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

lvm2: update to 2.02.139

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

ccid: update to 1.4.22

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

pcsc-lite: update to 1.8.15

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

libinput: include cmdline tools in package

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

libinput: update to 1.1.4

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

libevdev: update to 1.4.6

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

squid: build-depend on libext2fs

squid uses libcom_err, a static library provided by libext2fs

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

mdnsresponder: bump to 576.30.4.

Signed-off-by: Jacob Siverskog <jacob@teenage.engineering>

Merge pull request #2260 from cshore/pull-request-collectd-prevent-perl-bindings

utils/collectd:  Really prevent perl bindings

utils/collectd:  Really prevent perl bindings

--with-perl-bindings= is insufficient, --without-perl-bindings is required
to actually prevent perl bindings when perl has been built for the target.

Signed-off-by: Daniel Dickinson <openwrt@daniel.thecshore.com>

Merge pull request #2252 from lbschenkel/cloudflare-rec_id

ddns-scripts: allow setting CloudFlare 'rec_id' in the config