| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
|
| |
|
|
|
|
| |
Needed for certbot
|
| |
|
| |
|
|
|
|
|
|
|
|
|
| |
grub-mkconfig will generate a root=ZFS=pool/path line. Fix nlplug-findfs
to deal with search device ZFS=... and fix initramfs to also deal with a
missing rootfstype=zfs
A side-effect of this is that it is faster to boot zfs root since we no
longer need to wait for nlplug-findfs timeout of 5 seconds.
|
|
|
|
|
| |
- add plugins nginx apache postfix
- move to python3
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
This is added to community for certbot.
|
|
|
|
| |
This is added to community for certbot.
|
|
|
|
| |
this is added into community as its needed for certbot.
|
|
|
|
|
|
| |
- upgrade to 4.4.0
- move from testing to commnity
- add support for python3
|
|
|
|
| |
Fixes #9920 (https://bugs.alpinelinux.org/issues/9920)
|
|
|
|
|
| |
Library for asynchronous I/O readiness notification
http://libivykis.sourceforge.net/
|
|
|
|
|
|
| |
This reverts commit 56fbe2e7518dc89fc065fd02c24823ee1e51a888.
acme-client has been moved from community to testing... >_<
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
fixes #9906
|
| |
|
| |
|
|
|
|
| |
fixes #9903
|
|
|
|
|
| |
we need time to be correct for https certificate validation.
fixes #9911
|
| |
|
|
|
|
|
| |
fixes: #9913
add options with '!check' because package doesn't have test
|
|
|
|
|
|
|
|
|
|
| |
This is a follow up for 58fc65d2b14f59efea945f9dc2dc39d9db45d72e which
fixed CVE-2018-6951 but didn't fix CVE-2018-6952 as a patch for it
wasn't available back then.
Should probably fix #8563 (can't see the issues as it is confidential).
https://savannah.gnu.org/bugs/index.php?53133
|
|
|
|
|
|
|
|
| |
I took the patch from https://codereview.qt-project.org/#/c/247777/
and I changed the file paths from chromium to src/3rdparty/chromium
to match the structure of the source tarball.
I can confirm that qt5-qtwebengine now compiles for x86.
|
|
|
|
|
|
|
| |
import boot options to /etc/default/grub on upgrade to make sure we can
still boot.
ref #9903
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* tools: curve25519: handle unaligned loads/stores safely
This should fix sporadic crashes with `wg pubkey` on certain architectures.
* netlink: auth socket changes against namespace of socket
In WireGuard, the underlying UDP socket lives in the namespace where the
interface was created and doesn't move if the interface is moved. This
allows one to create the interface in some privileged place that has
Internet access, and then move it into a container namespace that only
has the WireGuard interface for egress. Consider the following
situation:
1. Interface created in namespace A. Socket therefore lives in namespace A.
2. Interface moved to namespace B. Socket remains in namespace A.
3. Namespace B now has access to the interface and changes the listen
port and/or fwmark of socket. Change is reflected in namespace A.
This behavior is arguably _fine_ and perhaps even expected or
acceptable. But there's also an argument to be made that B should have
A's cred to do so. So, this patch adds a simple ns_capable check.
* ratelimiter: build tests with !IPV6
Should reenable building in debug mode for systems without IPv6.
* noise: replace getnstimeofday64 with ktime_get_real_ts64
* ratelimiter: totalram_pages is now a function
* qemu: enable FP on MIPS
Linux 5.0 support.
* keygen-html: bring back pure javascript implementation
Benoît Viguier has proofs that values will stay well within 2^53. We
also have an improved carry function that's much simpler. Probably more
constant time than emscripten's 64-bit integers.
* contrib: introduce simple highlighter library
This is the highlighter library being used in:
- https://twitter.com/EdgeSecurity/status/1085294681003454465
- https://twitter.com/EdgeSecurity/status/1081953278248796165
It's included here as a contrib example, so that others can paste it into
their own GUI clients for having the same strictly validating highlighting.
* netlink: use __kernel_timespec for handshake time
This readies us for Y2038. See https://lwn.net/Articles/776435/ for more info.
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|