This release includes security fixes for the following vulnerabilities:

* CVE-2014-8080: Denial of Service XML Expansion
* Changed default settings of ext/openssl related to CVE-2014-3566

And there are some bug-fixes.

Ref: https://www.ruby-lang.org/en/news/2014/10/27/ruby-2-1-4-released/

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

Signed-off-by: Roger D <rogerdammit@gmail.com>

Signed-off-by: Roger D <rogerdammit@gmail.com>

Signed-off-by: Han Chen chen1324@gmail.com

mailman: fixed compilation errors (Issue #498)

Signed-off-by: Denis Shulyaka <Shulyaka@gmail.com>

python-dns: fixed URL

Signed-off-by: Denis Shulyaka <Shulyaka@gmail.com>

Example call:

$ ubus call lxc create '{ "name": "bar", "template": "download", "args": [ "--no-validate", "--dist", "debian", "--release", "sid", "--arch", "i386" ] }'

Signed-off-by: Luka Perkov <luka@openwrt.org>

Signed-off-by: Steven Barth <steven@midlink.org>

micropython(-lib): update and add package category

sqm-scripts: use masks with markings

Signed-off-by: Roger D <rogerdammit@gmail.com>

Signed-off-by: Roger D <rogerdammit@gmail.com>

Apply mask for markings to enable co-existence with multiwan, mwan3 etc.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Signed-off-by: Ted Hess <thess@kitschensync.net>

Signed-off-by: Ted Hess <thess@kitschensync.net>

Signed-off-by: Ted Hess <thess@kitschensync.net>

postfix: Added experimental support for Berkeley DB (btree files).

Note that hash files are currently not supported by OpenWRT package of Berkeley DB.
CDB is still default.

Signed-off-by: Denis Shulyaka <Shulyaka@gmail.com>

bogofilter: set BOGOFILTER_DIR to /etc/bogofilter, as /var/lib is wiped ...

Signed-off-by: W. Michael Petullo <mike@flyn.org>

openvswitch: add +kmod-vxlan dependency for kernels >= 3.12

Import bmon from oldpackages

Signed-off-by: Baptiste Jonglez <bjonglez@illyse.org>

Signed-off-by: Baptiste Jonglez <bjonglez@illyse.org>

When OVS detects a kernel version >= 3.12 it does not build
it's own vxlan module and tries to use the kernel's, when building
the OVS kernel module.

I also pushed a patch to the OpenWRT trunk to add a +kmod-vxlan package.

This will add the kernel's vxlan.ko kernel module if it exists.
So, for kernel >= 3.12, this package should exist and be installed
when installing OVS.

Tested on OpenWRT trunk with kernel 3.14.18.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Number of suggested rewrites:
* use lua ubus bindings instead of os.execute
* combine multiple actions to use same handler 'lxc_action' and pass
actions as arguments to consolidate code
* read openwrt version from lua directly
* start using String.prototype.format for string formatting

Also, drop 'rename' and 'clone' until they are fully functional on all
platforms.

Thanks Jo-Philipp for suggestions on how to improve the code.

Signed-off-by: Petar Koretic <petar.koretic@sartura.hr>

openvswitch: add patch "datapath: Backport __ip_select_ident() function"

openvswitch: fix build for gcc versions below 4.9

Signed-off-by: Alexandru Ardelean <aa@ocedo.com>

kismet: new kismet wireless package

bogofilter: depend on libdb47, not libdb47-full (related to #459)

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Signed-off-by: Petar Koretic <petar.koretic@sartura.hr>

Signed-off-by: Luka Perkov <luka@openwrt.org>

wget: update to v1.16

Seems that while fixing the build for GCC 4.9
I broke the build for GCC 4.8, because that KCFLAG I added
causes a build error (since it's not recognized).

The fix is to add KCFLAG only when GCC 4.9 is used.

OpenVSwitch now builds successfully with GCC 4.8 and 4.9.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Sebastian Wendel<packages@sourceindex.de>

Signed-off-by: Sebastian Wendel <packages@sourceindex.de>

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

The update fixes CVE-2014-4877 which allows malicious FTP servers
to modify local filesystem contents through specificially crafted
symlinks.

Please backport to for-14.07 too.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Signed-off-by: Marcel Denia <naoir@gmx.net>

Signed-off-by: Ted Hess <thess@kitschensync.net>

shairport: improve config and init script

Signed-off-by: Luka Perkov <luka@openwrt.org>

Signed-off-by: Luka Perkov <luka@openwrt.org>