From Release Notes:
Security
MDEV-18686 - Add option to PAM authentication plugin to allow case insensitive username matching
bugfix - multi-update checked privileges on views incorrectly (commit 5057d46375)
MDEV-19276 - during connect, write error log warning for ER_DBACCESS_DENIED_ERROR, if log_warnings > 1
MDEV-17456 - Malicious SUPER user can possibly change audit log configuration without leaving traces.
Fixes for the following security vulnerabilities:
CVE-2019-2614
CVE-2019-2627
CVE-2019-2628
OpenWrt changes:
- added PKG_CPE_ID
- shortened default description to make "opkg info" output easier on the eyes
- refreshed patches
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Upstream makes infrequent releases while having an active git repository
with important bugfixes.
Removed maintainer from all three packages due to inactivity.
Removed systemd support as systemd is not used in OpenWrt.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
By default, the liblzma pkg-config file (liblzma.pc) is generated with
absolute paths, which $(STAGING_DIR_HOST)/bin/pkg-config is unable to
override.
This patches the file to use paths relative to ${prefix} and
${exec_prefix}.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
While scanning, sane unbinds usb device from usblp module. This
patch creates a saned wrapper that keep track of all usb devices
binded to usblp before saned is launched and rebind them back
if not still bound after saned exits.
This workaround is only effective if saned is launched by a super
daemon like xinetd as it needs to exit after scan job finish. If
not, printing will not be available while saned service is running.
Write access to /sys/bus/usb/drivers/usblp/bind is required. So,
normally it would require root access.
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
The latter is actually what is used by the build system. Increased
PKG_RELEASE for all packages as this changes the ipk.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
If you want to register more than one lua plugin, you cannot start the
collectd.
You get always the error message:
"The read function "lua/(null)" is already registered. Check for
duplicates in your configuration!"
This is not what I expect and what the documenation says.
With this change it is now possible to registrate more then one lua
Script.
See https://github.com/collectd/collectd/pull/2379
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* update nano to 4.2
Release notes at https://nano-editor.org/news.php
2019.04.24 - GNU nano 4.2
* The integrated spell checker does not crash when 'spell' is missing.
* Option --breaklonglines works also when --ignorercfiles is used.
* Automatic hard-wrapping is more persistent in pushing words to the
same overflow line.
Tested with ipq806x/R7800 and mvebu/WRT3200ACM
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* update nano to 4.1
* implement Makefile style changes proposed in #8483
Release notes at https://nano-editor.org/news.php
2019.04.15 - GNU nano 4.1
* By default, a newline character is again automatically added at the
end of a buffer, to produce valid POSIX text files by default, but
also to get back the easy adding of text at the bottom.
* The now unneeded option --finalnewline (-f) has been removed.
* Syntax files are read in alphabetical order when globbing, so that
the precedence of syntaxes becomes predictable.
* In the C syntax, preprocessor directives are highlighted differently.
* M-S now toggles soft wrapping, and M-N toggles line numbers.
* The jumpy-scrolling toggle has been removed.
* The legacy keystrokes ^W^Y and ^W^V are recognized again.
* Executing an external command is disallowed when in view mode.
* Problems with resizing during external or speller commands were fixed.
Tested with ipq806x R7800
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Also add some valueable patches from mailing-list - upstream seems not
to care so much about, but giving them a broader audience does not hurt.
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* 938897a2 Add scale and shift to modbus plugin
* 60280b80 correcting all the wrongs
* a00ab529 Add support for RS485 to modbus plugin
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
/bin/sh: 2: xxd: not found
/bin/sh: 2: xxd: not found
Makefile:24: recipe for target 'src/files.h' failed
make[4]: *** [src/files.h] Error 127
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Needed to avoid error in case xxd is not installed:
[ 16%] Generating html.h from index.html
/bin/sh: 1: CMAKE_XXD-NOTFOUND: not found
CMakeFiles/ttyd.dir/build.make:61: recipe for target 'html.h' failed
make[6]: *** [html.h] Error 127
Signed-off-by: Rosen Penev <rosenp@gmail.com>
To return the number of connected clients.
At present this can be partially inferred by using a count() over one of
the existing metrics, however this doesn't handle the case when there
are no connected clients. When that happens, the count() will return no
data instead of 0.
Signed-off-by: Alex Tomlins <alex@tomlins.org.uk>
These output a count of the number of packets transmitted/received, so
should be tracked as a counter. As it stands, promtool is warning that
these shouldn't be named ending _total if they're a gauge.
Signed-off-by: Alex Tomlins <alex@tomlins.org.uk>
Added -fno-rtti and -nodefaultlibs for slightly smaller size.
Also added LTO for a close to 25kb size reduction.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Tang is lightweight server for binding data to network presence.
---
Tang's source: https://github.com/latchset/tang
Maintainer: @Tiboris
Compile tested: (mips, TL-WR842N, 17.01.4, r3560-79f57e422d)
**Tang requires a few other software libraries:**
1. libhttp-parser
2. xinetd's socket activation
3. jose >= 8
**Two new files compared to tang upstream:**
- tangdx : configuration file for xinetd
- tangdw : wrapper for tangd service
- puts timestamp when service activated, and
- redirects stderr to log file in /var/log/
**Removed systemd requirement**
Signed-off-by: Tibor Dudlák <tdudlak@redhat.com>
If the /proc/sys/net/netfilter/nc_conntrack_* files are not present,
this exporter was outputting a blank value, which is invalid. These
files will not be present when using an image that doesn't include the
iptables and firewall packages (eg a minimal access-point type image).
This updates the collector to only output the metrics if the
corresponding /proc files are present.
Signed-off-by: Alex Tomlins <alex@tomlins.org.uk>
Sebastian Kemper
Maxim Storchak
Rosen Penev
Samuel Progin
Jeffery To
Luiz Angelo Daros de Luca
Yousong Zhou
Yuhei OKAWA
Florian Eckert
Jianhui Zhao
Hannu Nyman
Amol Bhave
Tobe Deprez
Rosy Song
Michael Heimpold
Kirill Lukonin
Daniel Golle
Marcin Jurkowski
Jan Pavlinec
Sungbo Eo
Alex Tomlins
Lucian Cristian
Tibor Dudlák
Karel Kočí
Karel Kočí