tor: update to version 0.2.9.11

This fixes CVE-2017-0376

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

tor: update to version 0.2.9.10

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

tor: update to version 0.2.9.9

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

tor: log to syslog by default

Make tor log to syslog by default instead of stdout.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

tor: add tor-gencert, tor-resolve and torify

These are some additional applications build by the tor package.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

tor: add geoip6 to tor-geoip

This add the IPv6 addresses to the tor-geoip6 package.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

tor: preserve tor keys over sysupgrade

Mark the directories containing the keys for hidden services as
conffiles to preserve them over sysupgrade.

Fixes: #2247
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

tor: update to version 0.2.9.8

In addition update some configure options and use EXTRA_CFLAGS.
Setting RunAsDaemon to 1 will be overwritten by the init script option
"--runasdaemon 0" anyway and we want it in foreground for procd.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

tor: update to version 0.2.8.11

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

Tor: update to 0.2.8.9

    - update to 0.2.8.9
    - use sha256 instead of md5 for integrity check
    - add dependency: libcap

signed-off-by: Nima Fatemi <nima@torproject.org>

tor: add missing zlib dependency

Signed-off-by: Felix Fietkau <nbd@nbd.name>

tor: correct URL for dist downloads

Original url was 404.
Fixes Github issue #2284

tor: remove tor-fw-helper

The "internal pure-C" tor-fw-helper was removed in 0.2.7.5. This removes
the tor-fw-helper package and references to its dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #5042 from kishangondaliya/libsodium

[For-15.05] libsodium: Fix download url

libsodium: Fix download url

Signed-off-by: Kishan Gondaliya <kishanpgondaliya@gmail.com>

Merge pull request #3562 from MikePetullo/for-15.05-krb5

krb5: install include properly and leave libcom_err* in place

Merge pull request #4127 from gstrauss/lighttpd-for-15.05

Lighttpd for 15.05

lighttpd: add new modules, upd URLs, add restart()

(with feedback from @hnyman and patch additions from @MikePetullo)

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>

lighttpd: fix regression in local-redir used with url.rewrite-once

This fixes upstream regression introduced in 1.4.40. It was reported &
debugged in https://redmine.lighttpd.net/issues/2793
This fix is queued for 1.4.46 in the personal/gstrauss/master upstream
branch.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>

lighttpd: update to 1.4.45

Update to 1.4.42 introduced a problem with starting lighttpd as
OpenWrt/LEDE service. It was stopping whole init process at sth like:
  783 root      1124 S    {S50lighttpd} /bin/sh /etc/rc.common /etc/rc.d/S50lighttpd boot
  799 root      1164 S    /usr/sbin/lighttpd -f /etc/lighttpd/lighttpd.conf

It was hanging until getting random pool:
[  176.340007] random: nonblocking pool is initialized
and then immediately the rest of init process followed:
[  176.423475] jffs2_scan_eraseblock(): End of filesystem marker found at 0x0
[  176.430754] jffs2_build_filesystem(): unlocking the mtd device... done.
[  176.437615] jffs2_build_filesystem(): erasing all blocks after the end marker... done.

This was fixed in 1.4.44, but bump directly to 1.4.45 while at it.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>

lighttpd: add option to build mod_authn_file.so

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Merge pull request #4061 from EricLuehrsen/trust_anchor_15_05

[for-15.05] unbound: DNSSEC trust anchor roll for 2017

unbound: DNSSEC trust anchor roll for 2017

Carry both the 2010 and 2017 DS records until 2018.
Unbound complies with RFC5011 but fresh installs
need these anchors to get started.
https://www.icann.org/resources/pages/ksk-rollover
https://www.iana.org/domains/root

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>

ocserv: updated to 0.11.7

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

ocserv: explicitly disable lz4 building

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Merge pull request #3973 from chris5560/for-15.05

[for-15.05] ddns-scripts: New update url for service duiadns.net

[for-15.05] ddns-scripts: New update url for service duiadns.net

- new update url for service "duiadns.net" #3969
- updated public_suffix_list.dat

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>

Merge pull request #3880 from chris5560/for-15.05

[for-15.05] ddns-scripts: backport of 2.7.6-12

[for-15.05] ddns-scripts: backport of 2.7.6-12

- fix detecting local ip from ip command #3834 and https://forum.lede-project.org/t/bugs-in-ddns-scripts/1000
- updated public_suffix_list.dat
- minor fixes to services files

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>

Merge pull request #3829 from chris5560/for-15.05

[For 15.05] ddns-scripts: Backport of current version 2.7.6-11

[for-15.05] ddns-scripts: backport of 2.7.6-11

fix problem with detecting ip from nslookup

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>

[for-15.05] ddns-scripts: backport of 2.7.6-10

Backport of current version 2.7.6-10
- more services
- more functionality
- be prepared for next versions

compiled ipk-packages available at
https://github.com/chris5560/OpenWrt-Backports/tree/master/for-CC15.05.01/ddns-scripts_2.7.6-10

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>

Merge pull request #3323 from SvenRoederer/feature/add_snmp-mibs_for-15.05

net-snmp: [backport-15.05] add package snmp-mibs

net-snmp: add package snmp-mibs

this installs the default MIBS-files under /usr/share/snmp/mibs .
Also aligns the defines to the same sorting-scheme.

backport of daeb5fd5063d5b49829d76ee05938178acc93946

Signed-off-by: Sven Roederer <devel-sven@geroedel.de>

adblock: update to 1.5.4

Apply adblock updates 1.5.3-1.5.4

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Original commit messages:

adblock: update 1.5.3
* make wget check more flexible,
  fix for broken wget package installations

adblock: bugfix 1.5.4
* CC/uclient-fetch compatibility fix

Merge pull request #3576 from mchsk/for-15.05

libaudiofile: updated source url (v0.3.6)

libbaudiofile: updated source url to gnome repos (v0.3.6)

Signed-off-by: Marek Sedlak bodka.zavinac@gmail.com

Merge pull request #3560 from julbrygd/for-15.05

libsodium and dnscrypt-proxy url change for 15.05

krb5: install include properly and leave libcom_err* in place

Signed-off-by: W. Michael Petullo <mike@flyn.org>

dnscrypt-proxy: apended /old to download url for 15.05 branch

Signed-off-by: Stephan Conrad <stephan@conrad.pics>

libsodium: apended /old to download url for 15.05 branch

Signed-off-by: Stephan Conrad <stephan@conrad.pics>

Merge pull request #3524 from luizluca/cc/ruby-update

CC15.05 ruby: bump to 2.2.6

Merge pull request #3489 from commodo/for-15.05-backport-python-2.7.12

[for 15.05] python: backport version 2.7.12 to CC

python: backport version 2.7.12 to CC

Fixes CVE-2016-5699
  https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5699

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

ruby: bump to 2.2.6

This release includes new SSL certificates for RubyGems. And, this also
includes about 80 bug fixes after the previous release. See the
http://svn.ruby-lang.org/repos/ruby/tags/v2_2_6/ChangeLog for details.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

ocserv: updated to 0.11.6

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

libnfc: switch git repository to github

Signed-off-by: Robbie Cao <robbie.cao@gmail.com>

haproxy: revert update commits

 - Revert "package haproxy: fix typo for buildvariant nossl"
 - Revert "haproxy: bump to version 1.6.9 mainline and pending patches"

Signed-off-by: heil <heil@terminal-consulting.de>

package haproxy: fix typo for buildvariant nossl

Signed-off-by: heil <heil@terminal-consulting.de>

haproxy: bump to version 1.6.9 mainline and pending patches

Signed-off-by: heil <heil@terminal-consulting.de>

Revert "libwebsockets: sync with master version"

This reverts commit e245e2b8246d0d25892d3dc2af0d3834ef95a02e.

Signed-off-by: Luka Perkov <luka@openwrt.org>

Merge pull request #3173 from MikePetullo/for-15.05-bogofilter

bogofilter: postfix script now reads bogofilter_dir from bogofilter conf

libwebsockets: sync with master version

Signed-off-by: Luka Perkov <luka@openwrt.org>

Merge pull request #3411 from MikePetullo/for-15.05

lighttpd: update to 1.4.42

lighttpd: update to 1.4.42

Signed-off-by: W. Michael Petullo <mike@flyn.org>

adblock: update 1.5.2

* turris omnia compatibility fix

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 65bcae09867a735b098dd7375756a56ff54ee72f)

adblock: update to 1.5.1

Apply adblock updates 1.4.10-1.5.1

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Original commit messages:

adblock: update 1.4.10
- add 'enabled' check to iface hotplug event handler
- decrease startup priority from 99 to 90
- fix tab indentation in config

adblock: update 1.5.0
* add new 'envchk'function to check adblock environment only,
  i.e. check volatile firewall rules or uhttpd instances
  without list updates
* add new optional parm 'adb_loglevel',
  set it to "0" to mute output (print only errors)
* set hotplug priority to '90' as well (missed in the last commit)
* documentation update
* cosmetics

adblock: bugfix 1.5.1
* fix uhttpd detection in tcp 4+6 configurations

ffmpeg: Update to 2.6.9, Add patch to fix AAC decoder performance and memory usage (2.7 backport)

Signed-off-by: Ted Hess <thess@kitschensync.net>

ocserv: updated to 0.11.5

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

adblock: update to 1.4.9

Apply adblock updates 1.4.8-1.4.9

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Original commit messages:

adblock: update 1.4.8
* enhance the new query function:
   change the regex to find only the relevant blocklist entries
   add a recursive tld search to quickly identify domains for
whitelisting (see documentation)
     better result preparation
* add securemecca as new blocklist source
* documentation update

adblock: update 1.4.9
* refine query function (see online doc)

bogofilter: postfix script now reads bogofilter_dir from bogofilter conf

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Merge pull request #3166 from MikePetullo/for-15.05-lighttpd

lighttpd: update to 1.4.41

Merge pull request #3164 from MikePetullo/for-15.05-luasec

luasec: update to 0.6

Merge pull request #3165 from MikePetullo/for-15.05-openldap

openldap: update to 2.4.44

lighttpd: update to 1.4.41

Signed-off-by: W. Michael Petullo <mike@flyn.org>

openldap: update to 2.4.44

Signed-off-by: W. Michael Petullo <mike@flyn.org>

luasec: update to 0.6

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libuv: bump version to 1.9.1

Signed-off-by: Denis Osvald <denis.osvald@sartura.hr>

gnutls: updated to 3.4.15

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

libvorbisidec: Use HTTPS for Tremor repo

Signed-off-by: Ted Hess <thess@kitschensync.net>

mosquitto: fix compatibily with libwebsockets

Only applies to the 15.05 branch!
Apply a patch to correct usage with the (rather old) version of
libwebsockets in CC.  Has been submitted upstream.

Fixes github issue #3127

Signed-off-by: Karl Palsson <karlp@etactica.com>

adblock: update 1.4.7

Apply adblock update 1.4.5-1.4.7

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Original commit messages:

adblock: update 1.4.5
* change the default hphosts list source to ad and tracking servers
only, the overall list includes to many false positives
* new optional config parm 'adb_hotplugif' to restrict hotplug support
to a certain wan interface or to disable it at all
* documentation update
* cosmetics

adblock: update 1.4.6
* added a 'window.close()' to adblock landing page to automatically
close any pop-ups that might get loaded with a blocked ad
* simplified dnsmasq check in ap mode

adblock: update 1.4.7
* add a query function to search the active blocklists for a specific
domain (/etc/init.d/adblock query <DOMAIN>)
* fix bug in ap mode/uhttpd port detection
* check general firewall and dnsmasq package dependencies and remove
redundant checks in ap mode

mosquitto: Bump to 1.4.10

Full changelog: http://mosquitto.org/2016/08/version-1-4-10-released/

Relevant changes:
libwebsockets 2.0 compatibility
openssl 1.1.0 compatibility

Signed-off-by: Karl Palsson <karlp@etactica.com>

Merge pull request #3088 from mrpace2/for-15.05

luai2c: moved upstream project to github

moved upstream project to github

Signed-off-by: Frank Edelhaeuser <mrpace2@gmail.com>

adblock: update 1.4.4

Update for-15.05 adblock from 1.2.1 to 1.4.4

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Original commit messages of 1.2.5-1.4.4 commits:

adblock: update 1.2.5
* restructured sources
* fix logical glitches in config handling
* many corner case fixes & cosmetics
* show runtime errors in LuCI (in lastrun section)

adbock: update 1.2.6
* small addition in case of a failed list download

adblock: update 1.2.7
* provide adblock statistics as a separate function
  (/etc/init.d/adblock stats)

adblock: update 1.2.8
* fw rule changes:
force_dns now supports multiple lan devices
disable needless force_dns- & forward/output-rules in 'ap mode'
check return codes during adblock chain creation
* simplified the test for a running firewall
* documentation update

adblock: release 1.3.0
* revised hotplug script
* remove wget package dependency
* support uclient-fetch or wget with ssl support
* documentation update

adblock: update 1.3.1
* fix uclient-fetch detection
* cosmetics

adblock: update 1.3.2
* only a few more fixes

adblock: update 1.3.3
* enable automatic restore on empty source downloads

adblock: release 1.4.0
* rework/speed up overall sort
* simplified dns error handling

adblock: update 1.4.1
* fix two possible overflows in adblock statistics

adblock: update 1.4.2
* ad broad blocklist source 'hphosts' https://hosts-file.net

adblock: update 1.4.3
* fix race condition in restricted mode
* cosmetics

adblock: update 1.4.4
* filter non-printable characters/binary data in input stream
* fix IPv4 adblock statistics in CC

Merge pull request #3051 from bernhardschmidt/fix-ldns

[for-15.05] ldns: Avoid perl bug for manpages.

ldns: Avoid perl bug for manpages.

Fix #2663

Signed-off-by: Konstantin Shalygin <k0ste@cn.ru>
[refresh patch]
Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
(cherry picked from commit a4a9038f58c4876d419a173bb17d34c0800fae75)

ocserv: updated to 0.11.4

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Merge pull request #2951 from MikePetullo/for-15.05

dmapd: update to 0.0.73

dmapd: update to 0.0.73

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gnutls: updated to 3.4.14

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Merge pull request #2914 from br101/for-15.05

horst: Use version 5.0

nfs-kernel-server: fix segfault on x86_64/uClibc

Signed-off-by: W. Michael Petullo <mike@flyn.org>
[refresh patch]
Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>

horst: Use version 5.0

Signed-off-by: Bruno Randolf <br1@einfach.org>

haproxy: bump to version 1.5.18 and pending patches

Signed-off-by: heil <heil@terminal-consulting.de>

pcre: bump to version 8.39

Signed-off-by: heil <heil@terminal-consulting.de>

openconnect: updated license

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

ocserv: updated license

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

libtasn1: corrected library license

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

ocserv: updated to 0.11.3

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

adblock: update 1.2.1

* small optimizations & cosmetics

adblock: release 1.2.0

* rework download/backup/restore handling
* rework firewall handling
* refine whitelist parsing
* changed default null-ip to 198.18.0.1 to prevent conflicts with bcp38
* spread traffic from ad servers (port 80/443) on two uhttpd instances,
this fixes timeouts on sites with many ssl ad server connections, i.e.
youtube.com
* provide statistics & last runtime for LuCI interface
* documentation update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 8ab3d8bdc2535c208d3baa04fbf9269c080030de)
(cherry picked from commit 672dd10b101de5013e2df1d6a4b2d287b782e42f)

Merge pull request #2782 from feckert/licenses-for-15.05

libtasn1: add license tag

gnutls: updated to 3.4.13

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

net/mosquitto: update maintainer email address

Signed-off-by: Karl Palsson <karlp@remake.is>
Signed-off-by: Karl Palsson <karlp@etactica.com>

net/mosquitto: bump to v1.4.9

Bugfix release.  Full changelog available at
http://mosquitto.org/2016/06/version-1-4-9-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>

adblock: update 1.1.17

* change winspy url again
* various cosmetics left out in former release
Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit d0eceb6b2540bf5c06a0405245803052d032a82e)

adblock: update 1.1.16, release 2
* workaround for LuCI search path issue
Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 26fa1c5df070d7cbbe24791ba0696e035d01cdde)

adblock: update 1.1.16
* new config option 'adb_restricted' to disable updates of the adblock
config during runtime (no flash writes, disabled by default)
* new update function, to apply latest configuration changes if needed
(/etc/init.d/adblock cfgup)
* fix dns redirect rule
* various optimizations
Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 41b05a5532c8442b60ef731008248f339e128cc9)

adblock: update 1.1.15

* toggle to quickly switch adblocking 'on' or 'off' (/etc/init.d/adblock
toggle)
* new config option 'fetchttl' to set download timeouts (default: 5
seconds)
* better config check, distinct between major/minor changes
* documentation update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 4f3f239ff22bd1c3c16e40c784ae212366b75e42)

libtasn1: add license tag

show the license for this package in opkg

Signed-off-by: Florian Eckert <Eckert.Florian@googlemail.com>

adblock: update 1.1.12

* change wget binary naming
* change winspy source url
* documentation update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit bad84563dc511f25eb4390f4a74767c5ecfbaac1)