Michael Heimpold [Tue, 19 Jul 2016 21:14:33 +0000 (23:14 +0200)]
php5: update to 5.6.23
This fixes the following CVEs:
- in GD: CVE-2015-8874, CVE-2016-5766, CVE-2016-5767
- in mbstring: CVE-2016-5768
- in mcrypt: CVE-2016-5769
- in SPL: CVE-2016-5770, CVE-2016-5771
- in WDDX: CVE-2016-5772
- in zip: CVE-2016-5773
Fix the issue by adding build time dependencies on the `gettext` and `libiconv`
stub libraries to ensure that `gettext.m4` and `iconv.m4` are installed into
the staging directory before `procps-ng` is getting reconfigured.
ipsec-tools: fix syntax error in default racoon config
The default /etc/config/racoon shipped by ipsec-tools lacks an option keyword
on the p2_proposal line, leading to a syntax error when processing the file.
Makes use of all available runtime options that can be passed to
mini_snmpd such as -I listen_on interface
Run-tested on trunk on ar71xx. Please review the init script regarding procd
monitoring interfaces, though everything else due to the conversion to
procd should be and done properly, if not overkill compared to most
other script bundled with openwrt.
The main benefit of all this is now larger routers can run multiple
instances of mini_snmpd on different ports, to get around the MIB hard
coded 4 interface/mountpoint limits.
Due to somewhat lacking dev / package maintainer docs except for
http://wiki.prplfoundation.org/wiki/Procd_reference writing this script
took longer than it should. You can see it's evolution here:
https://github.com/hojuruku/openwrt-packages/blob/mini_snmpd/net/mini_snmpd/files/mini_snmpd.init
If everything in it is found to be sane, please include it to the
openwrt wiki on procd as an example.
Due to procd / uci /sbin/validate_data cbi element datatype (uciname) being used
to check uci config, the configuration file now only takes openwrt uci network names not
physical network names as it did before.
http://git.openwrt.org/?p=packages.git;a=commit;h=783e5578ad104d1ca3c31582add08fc8eb4ad083
Like busybox the package Makefile has depends for all runtime
dependencies needed by the init script. mini_snmpd only depends on libc
squashed commits:
mini_snmpd: fix typo to fix procd triggers calling daemon binary directly instead of init script - misuse of $PROG var
mini_snmpd: enable SSP & mini_snmpd to start by default and listen on lan
mini_snmpd: disable RELRO blocker in Makefile after consulation
mini_snmpd: add smarts to init script to detect if ubusd hasn't started yet
mini_snmpd: fix init script - ubus -S doesn't print meaningful errors to give the user
mini_snmpd: Makefile roll back Makefile PKG_RELEASE to 1 for feng shui
darkstat: Network bandwidth monitor - version 3.0.719 Signed-off-by: Jean-Michel Lacroix <redacted>
From the oldpackages.
Updated to version 3.0.719, new config file to add more options
Rewritten init file to take in account the new config file and
removing a bug when stopping the daemon.
Corrected license information in Makefile Signed-off-by: Jean-Michel Lacroix <redacted>
Maintainer: Oskari Rauta / @oskarirauta
Compile tested: x86, APU-4D, Chaos Calmer
Run tested: ar71xx, WNDR3800, Chaos Calmer and x86, APU-4D, Chaos
Calmer - tests done. Performs as should.
Description:
LuaSQLite3 is a thin wrapper around the public domain SQLite3 database
engine.
This commit adds another sqlite3 module for Lua. This is very popular
and in my opinion, suites even better for some projects requiring
sqlite3 in Lua than already luasql, even though luasql is more
versatile since it supports other databases as well. It wouldn't hurt
to include this in the repository. This can also be installed with
luarocks, but I prefer a openwrt package.
Stephen Walker [Sat, 9 Jul 2016 18:50:58 +0000 (14:50 -0400)]
packages: cleanup Makefile variables
Standard assignment is immediate expansion without any extraneous spacing, RFC822 compliant email addresses without any quotation marks and long git hashes
Fix missing `PKG_SOURCE` variable leading to a
`Download/default is missing the FILE field` error in the buildroot.
Also remove now uneeded variable as the default one matches the git clone
structure. Finally use the common variable assignment style for
`PKG_SOURCE_PROTO` and `PKG_SOURCE_VERSION`.
Stijn Tintel [Mon, 29 Feb 2016 04:21:16 +0000 (05:21 +0100)]
strongswan: run sleep with integer argument
The default busybox config used by OpenWrt does not enable floating
point number support for the sleep applet. This can cause an error when
stopping or restarting strongswan:
Daniel Dickinson [Sat, 14 May 2016 03:34:38 +0000 (23:34 -0400)]
mail/msmtp: Make msmtp ssl version depend on ca-bundle
msmtp fails when /etc/ssl/certs/ca-certifictes.crt bundle is
not present (for the SSL version), therefore add a dependency
on ca-bundle packages (newly added to trunk).
Jo-Philipp Wich [Mon, 30 May 2016 16:32:55 +0000 (18:32 +0200)]
bluelog: fix oui.txt processing
- Use a temporary file path within the package build directory to avoid
cluttering the host systems `/tmp` directory.
- Switch to a gzipped, snapshotted copy of the `oui.txt` file since the
upstream IEEE server is extremely slow, also fetching an unversioned HTTP
resource during compilation breaks reproducable builds.
Signed-off-by: Jo-Philipp Wich <redacted>
[rework to use standard download facility] Signed-off-by: Etienne CHAMPETIER <redacted>
Michal Hrusecky [Tue, 28 Jun 2016 14:08:21 +0000 (16:08 +0200)]
davfs2: No forced stack protector
davfs2 had hardcoded value for stack protector. If stack protector is disabled
in toolchain, it would break the build. Disabling the hardcoded value, counting
on settings in cross-build system.
Signed-off-by: Michal Hrusecky <redacted>
[bump PKG_RELEASE] Signed-off-by: Etienne CHAMPETIER <redacted>