- [PATCH 11/13] BUG/MEDIUM: peers: table entries learned from a remote
 - [PATCH 12/13] BUG/MEDIUM: peers: old stick table updates could be
 - [PATCH 13/13] CLEANUP: haproxy: using _GNU_SOURCE instead of

Signed-off-by: heil <heil@terminal-consulting.de>

- this brings back naxsi support aka WAF for nginx

Signed-off-by: heil <heil@terminal-consulting.de>

Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>

Many user api changes, largely to cleanup and make more consistent.
Full changelog available at
http://git.libwebsockets.org/cgi-bin/cgit/libwebsockets/tree/changelog

Signed-off-by: Karl Palsson <karlp@remake.is>

Signed-off-by: Karl Palsson <karlp@remake.is>

- corect fetch url

Signed-off-by: heil <heil@terminal-consulting.de>

fixes:
  * CVE 2015-2327 CVE 2015-2328 CVE 2015-8380 CVE 2015-8381 CVE
  * 2015-8382
  * CVE 2015-8383 CVE 2015-8384 CVE 2015-8385 CVE 2015-8386 CVE
  * 2015-8387
  * CVE 2015-8388 CVE 2015-8389 CVE 2015-8390 CVE 2015-8391 CVE
  * 2015-8392
  * CVE 2015-8393 CVE 2015-8394 CVE 2015-8395

Signed-off-by: heil <heil@terminal-consulting.de>

fixes:
    * path traversal vulnerability in mod_http_files (CVE-2016-1231)
    * use of weak PRNG in generation of dialback secrets (CVE-2016-1232)

Signed-off-by: heil <heil@terminal-consulting.de>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

devel/libtool-bin: new package

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

GNU libtool is used to ease the usage of shared libraries in Makefiles.

The new package libtool-bin contains the script libtoolize which is used
to prepare a package to use libtool.

Signed-off-by: Heinrich Schuchardt <xypron.glpk@gmx.de>

Import cifs-utils from old packages:

* update to 6.4
* add upstream patch to fix builds with musl
* add license information
* add myself as maintainer

Signed-off-by: Florian Fainelli <florian@openwrt.org>

Signed-off-by: Noah Meyerhans <frodo@morgul.net>

Fixes:
 * CVE-2015-8704
 * CVE-2015-3193
 * CVE-2015-8000
 * CVE-2015-8461

Signed-off-by: Noah Meyerhans <frodo@morgul.net>

perl: ensure File::Spec::canonpath() preserves taint [CVE-2015-8607]

Signed-off-by: Marcel Denia <naoir@gmx.net>

Signed-off-by: Marcel Denia <naoir@gmx.net>

Signed-off-by: Marcel Denia <naoir@gmx.net>

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

minidlna: update to 1.1.5

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Signed-off-by: Steven Barth <steven@midlink.org>

strongswan: preserve /etc/ipsec.d during upgrade

mdnsresponder: bump to 576.30.4.

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

cryptodev-linux: bump to 1.8

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Building both variants improperly tried to include the passwd utility
for the non-ssl variant, as the variable was set for the ssl variant.

Use properly separated install tasks to install additional files, rather
than hacking around inside the single target.

Signed-off-by: Karl Palsson <karlp@remake.is>

Introduced back in 2014

Fixes: cd21cbb82e
Signed-off-by: Karl Palsson <karlp@tweak.net.au>

and improves collectd support

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

flashrom: include io.h to fix compile error

This fixes compile time errors using kernel 4.3 and above

Signed-off-by: Rob Mosher <nyt-openwrt@countercultured.net>

This patch includes sys/io.h from flash.h to fix compile errors

Signed-off-by: Rob Mosher <nyt-openwrt@countercultured.net>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Minor changes mostly unrelated to OpenWRT.
Full changelog at http://mosquitto.org/2015/12/version-1-4-7-released/

Signed-off-by: Karl Palsson <karlp@remake.is>

Many users of the SSL build of mosquitto need the passwd utility for
managing keys.

Fixes github issue #1909

Signed-off-by: Karl Palsson <karlp@remake.is>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Beginning in PathTools 3.47 and/or perl 5.20.0, the File::Spec::canonpath()
routine returned untained strings even if passed tainted input. This defect
undermines the guarantee of taint propagation, which is sometimes used to
ensure that unvalidated user input does not reach sensitive code.

This defect was found and reported by David Golden of MongoDB, and a patch
was provided by Tony Cook.

References:

 * https://rt.perl.org/Public/Bug/Display.html?id=126862
 * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8607

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>