James Taylor [Sun, 19 May 2019 14:25:20 +0000 (00:25 +1000)]
dnsdist: add package
Maintainer: me
Compile tested: armv7l, OpenWRT SDK
Run tested: armv7l Linksys WRT1900ACS, OpenWrt SNAPSHOT, r9987-655fff1571 -
confirmed dnsdist links correctly against dependencies and doesn't experience
errors at run-time when enabling features.
Description:
dnsdist is a highly DNS-, DoS- and abuse-aware loadbalancer. Its goal in life is
to route traffic to the best server, delivering top performance to legitimate
users while shunting or blocking abusive traffic.
dnsdist is dynamic, its configuration language is Lua and it can be changed at
runtime, and its statistics can be queried from a console-like interface or an
HTTP API.
https://dnsdist.org/
Closes: PowerDNS/pdns#3294 Signed-off-by: James Taylor <redacted>
Daniel Golle [Sat, 18 May 2019 12:55:49 +0000 (14:55 +0200)]
postgresql: update ot version 9.6.13
Fixes CVE-2019-10129: Memory disclosure in partition routing
Does **NOT** fix CVE-2019-9193 which PostgreSQL doesn't consider a
security issue, see [1].
James Taylor [Tue, 14 May 2019 12:25:38 +0000 (22:25 +1000)]
libfstrm: add package
fstrm is an optimized C implementation of Frame Streams that includes a fast, lockless circular queue implementation and exposes library interfaces for setting up a dedicated Frame Streams I/O thread and asynchronously submitting data frames for transport from worker threads. It was originally written to facilitate the addition of high speed binary logging to DNS servers written in C using the dnstap log format.
Maintainer: me
Compile Tested: armv7l, SNAPSHOT 655fff1571 SDK
Run Tested: armv7l, Linksys WRT1900ACS, OpenWrt SNAPSHOT, r9987-655fff1571
The defusedxml package contains several Python-only workarounds and
fixes for denial of service and other vulnerabilities in Python's XML
libraries. In order to benefit from the protection you just have to
import and use the listed functions / classes from the right defusedxml
module instead of the original module.
Currently, openpyxl detects, and uses defusedxml, if installed.
Dirk Brenken [Thu, 16 May 2019 09:16:03 +0000 (11:16 +0200)]
banip: update 0.1.1
* remove needless sort step to reduce system load
* change maxqueue default in backend and LuCI frontend
to '4' to reduce (default) system load
* cosmetics
Rosen Penev [Wed, 15 May 2019 21:46:13 +0000 (14:46 -0700)]
libftdi1: Fix compilation with most recent CMake
Description from Amol Bhave:
This package fails to compile with boost 1.70 when the boost cmake
config gets used.
As far as I can tell, Boost 1.70 introduced
BoostConfigVersion.cmake. In that file, the value of PACKAGE_VERSION is
set to 1.70. This makes CMake auto set the variable Boost_VERSION to
1.70. Historically, Boost_VERSION has been using the format like 170000,
and not 1.70. Some package cmake files still depend on this behavior
and make assertions such as Boost_VERSION > 168000. This is incompatible
with the new scheme.
Rosen Penev [Wed, 15 May 2019 21:43:14 +0000 (14:43 -0700)]
libftdi: Fix compilation with most recent CMake
Description from Amol Bhave:
This package fails to compile with boost 1.70 when the boost cmake
config gets used.
As far as I can tell, Boost 1.70 introduced
BoostConfigVersion.cmake. In that file, the value of PACKAGE_VERSION is
set to 1.70. This makes CMake auto set the variable Boost_VERSION to
1.70. Historically, Boost_VERSION has been using the format like 170000,
and not 1.70. Some package cmake files still depend on this behavior
and make assertions such as Boost_VERSION > 168000. This is incompatible
with the new scheme.
Karl Palsson [Thu, 2 May 2019 12:27:09 +0000 (12:27 +0000)]
mosquitto: major upgrade to 1.6.x
Major new release of mosquitto.
This release rolls up the initial 1.6.0 release, plus the subsequent
build/bug fixes of 1.6.1 and 1.6.2.
Original upstream changelogs:
https://mosquitto.org/blog/2019/04/version-1-6-released/
https://mosquitto.org/blog/2019/04/version-1-6-1-released/
https://mosquitto.org/blog/2019/04/version-1-6-2-released/
Major features of interest:
* MQTTv5 support
* performance improvements
* ALPN support
* OCSP staping support
* OpenSSL Engine support
* TLSv1.0 support dropped
Currently adds two patches to continue supporting OpenSSL engine support
being disabled, and a missing header include. These are both tracked
upstream and are expected to be dropped in a subsequent release.
DEPENDS:=@!arc is causing a recursive dependency because of the optional
selection of libseccomp by util/lxc. The workaround hides the package
in Package/libseccomp/config instead.
Commit b32f8d4ff035272706a1d559992cfd6bc1ffe560 broke compilation
of Subversion on systems where unixodbc package is present.
This partial revert fixes issue #8975.
Amol Bhave [Sat, 11 May 2019 00:18:06 +0000 (17:18 -0700)]
fbthrift: Add fbthrift package
[Depends on libwangle]
Facebook's branch of Apache Thrift, including a new C++ server.
Thrift is a serialization and RPC framework for service communication.
Thrift enables these features in all major languages, and there is
strong support for C++, Python, Hack, and Java.
Test Plan: compile fbthrift on openwrt master for nbg6817
git.99rst.org / openwrt-packages.git / log