io: Open /dev/mem with O_SYNC for uncached access

Fixes:
CVE-2019-13117
CVE-2019-13118

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Only when /dev/mem is opened with O_SYNC the write and *read* is done
uncached. We saw wrong values read out from the hardware without setting
O_SYNC, the busybox devmem tool showed different values, when O_SYNC is
also set for the io tool, it reads out the same values as devmem.
When looking at the drivers/char/mem.c file in the kernel it is behaving
differently based on the O_DSYNC flag.

Signed-off-by: Hauke Mehrtens <hauke.mehrtens@intel.com>

Move language data menu under the package itself, and shorten the titles
so that all of them show up in the menu.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

- Update haproxy download URL and hash
- Add new patches

Signed-off-by: Christian Lachner <gladiac@gmail.com>

This absolutely needs symbols from libresolv, which uClibc-ng does not
support.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

fix #9495

Signed-off-by: Rosy Song <rosysong@rosinson.com>

opendkim: Fix compilation with uClibc-ng

Changes:
remove backported patches
add bsdtar libopenssl variant
switch to github codeload
polish tab/spaces

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Maintainer: me

This commit bumps the version of pdns-recursor to the latest 4.2.0. This release brings in mostly minor changes, with the full changelog available at https://doc.powerdns.com/recursor/changelog/4.2.html

Signed-off-by: James Taylor <james@jtaylor.id.au>

Add libpcrecpp to PKG_CONFIG_DEPENDS to properly trigger
reconfiguration, avoiding unnecessary dependency.

This reverts commit 17090fecf1.
This reverts commit ec138f51ab.

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>

Small cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

python: cachelib package added

Prometheus uses an older version of fsnotify, which uses a system call
(unix.InotifyInit) that is not implemented for mips64/mips64el.

This patches Prometheus to use a newer version of fsnotify that uses a
different system call (unix.InotifyInit1) that should be available on
all Linux systems.

Fixes #9494.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

rtorrent bump

Switch to codeload. A lot simpler.

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

No actual difference. Just regenerated documentation.

Small Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Removed upstreamed patches.

Small change to IPv6 configure flag.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

sqlite3: bump to 3.29.0

softethervpn: Update to rtm version 4.29-9680

python,python3: Fix ctypes.util.find_library()

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

domoticz: Fix compilation without deprecated OpenSSL APIs

apfree-wifidog: Run init script through shellcheck

Python's ctypes.util.find_library() function currently doesn't work for
musl libraries/systems[1].

This adds a patch to fix this function, based on a patch from Alpine
Linux[2].

Fixes #9448.

[1]: https://bugs.python.org/issue21622
[2]: https://git.alpinelinux.org/aports/tree/main/python2/musl-find_library.patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Stepan Henek <stepan.henek@nic.cz>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

- Add dependencies: libopenssl, liblz4
- Correct SPDX License Identifier
- Change URL of the website

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

samba4: revert to 4.9.11

* revert to 4.9.x series (4.10 needs too many unofficial patches and has weird waf bugs)
* cleanup patches
* enable AD_DC build option again

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Upstream backport.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

No such issue with uClibc-ng.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Minor Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

nss: Replace usleep with nanosleep

libreswan: Replace usleep with nanosleep

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

Update SoftEther VPN to the latest rtm version 4.29-9680

Compile tested: Atheros AR7xxx/AR9xxx, TP-LINK Archer C7 v2, 18.06.4

Signed-off-by: Philipp Schuster <philippschuster@gmx.com>
(rebased and refreshed patches).
Signed-off-by: Rosen Penev <rosenp@gmail.com>

for coping libc.a, libpthread.a and libstdc++ to target.
Add config option to eliminate need for -lstdc++ and -lgcc_pic
switches when linking statically

Signed-off-by: Noble Pepper <noblepepper@gmail.com>

minisatip: pkg hash fix

Also drops upstreamed patch.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

mini_snmpd: Allow up to 8 network interfaces

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Daniel Kucera <daniel.kucera@gmail.com>

usleep is optionally unavailable with uClibc-ng.

Added PKG_LICENSE_FILES

Added PKG_CPE_ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

usleep is deprecated and is optionally not available with uClibc-ng.

Added PKG_LICENSE_FILES.

Added PKG_CPE_ID for proper CVE tracking.

Other minor cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>