Signed-off-by: Thomas Heil <heil@terminal-consulting.de>

- fixes security issues

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>

- fixes security issues
  CVE-2017-7679, CVE-2017-7668, CVE-2017-7659, CVE-2017-3169
  CVE-2017-3167, CVE-2017-9788, CVE-2017-9789

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>

- fixes reload issue with hanging process

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>

- fixes lua compilation issue

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>

nginx: update to 1.12.1

net/mwan3: add mmx config option over uci

On some environments, connecting to localhost was resolving to ::1,
which didn't match the bind to the explicit 127.0.0.1.

Signed-off-by: Karl Palsson <karlp@etactica.com>

Added many more UCI config options, particularly for bridge connections

The recently introduced username/password options for bridges are kept,
even though they have been deprecated upstream for a while.  In keeping
with this, while support is kept in UCI, the generated mosquitto.conf
file will always generate the "modern" remote_username/remote_password
options preferred by mosquitto instead.

Likewise for bridge clientid and remote_clientid options.

Signed-off-by: Karl Palsson <karlp@etactica.com>

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Add new global config option mmx_mask.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

ssh: Add umdns entry to the init script.

nlbwmon: preserve protocols mapping across sysupgrade

This is usefull for hosts to discover the ssh server, especially
on macOS.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

rpcd-mod-attendedsysupgrade: uci update_packages

add uci option to set "update_packages". this options will lead the
luci-app-attendedsysupgrade to tell the update server to check for
package updates as well (not only release upgrades)

Signed-off-by: Paul Spooren <paul@spooren.de>

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

rpcd-mod-attendedsysupgrade: simplify uci options

use named uci options

Signed-off-by: Paul Spooren <paul@spooren.de>

Aparently there are two python gnupg wrappers around
https://pypi.python.org/pypi/python-gnupg/
and
https://pypi.python.org/pypi/gnupg/

We used to package the latter, now we switched to the prior.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Define package config files to preserve
/usr/share/nlbwmon/protocols across sysupgrade

Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

"fatal: Invalid revision range XXX...YYY"

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

https://www.zabbix.com/rn3.2.7

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

Rework exec_status to use "tee" to continuously output logs
(so we don't trigger travis timeouts)

Only launch the compile test if everything else is ok
(spare Travis builders a bit)

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Fixes: CVE-2017-7529

remove PKG_MD5SUM as it is deprecated

Signed-off-by: Uwe Arnold <donvipre@gmail.com>

python-pyopenssl: bump to 17.2.0 ; add python3 variant ; add myself co-maintainer

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

This is the default value taken by ss-server and ss-redir.  After this
change ss_rules section can still use those ss-redir instances who do
not have mode explicitly specified.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

This reverts commit 8592566b76.

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

mksh: bump to R55 and use PKG_HASH

dnscrypt-proxy: change start priority

* adapt start priority to the new trigger based setup

Signed-off-by: Dirk Brenken <dev@brenken.org>

btrfs-progs: update to 4.12

update to 4.12
remove PKG_MD5SUM

Signed-off-by: Daniel Albers <Daniel.Albers@public-files.de>

travelmate: update to 0.9.2

* backend: fix typo in log message
* frontend: add/modify input datatypes in 'extra' section
* frontend: add support to edit/change wpa enterprise key phrases
* frontend: various small fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>

rpcd-mod-attendedsysupgrade: add keep_settings opt

as mentioned [here][1] some firmwares require to reset all settings.
this commit add a param "keep_settings" which changes the sysupgrade
parameter "-c" to "-n" to flush all configs

[1]: https://github.com/aparcar/gsoc17-attended-sysupgrade/issues/34

Signed-off-by: Paul Spooren <paul@spooren.de>

python-cryptography: bump to version 2.0.3 ; add python-asn1crypto (dep required for python-cryptography)