ipfire-2.x.git
20 hours agocore114: add php to updater core114 master v2.19-core114
Arne Fitzenreiter [Sun, 24 Sep 2017 11:35:01 +0000 (13:35 +0200)] 
core114: add php to updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
47 hours agoMerge remote-tracking branch 'origin/next'
Arne Fitzenreiter [Sat, 23 Sep 2017 08:38:18 +0000 (10:38 +0200)] 
Merge remote-tracking branch 'origin/next'

47 hours agofinish core114
Arne Fitzenreiter [Sat, 23 Sep 2017 08:37:02 +0000 (10:37 +0200)] 
finish core114

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
47 hours agocore114: force update addons after core update
Arne Fitzenreiter [Sat, 23 Sep 2017 08:34:54 +0000 (10:34 +0200)] 
core114: force update addons after core update

apache needs new vhost configs so all addons must updated to work with new
apache.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 days agohostapd: Bump package version for updated wlanap.cgi
Michael Tremer [Wed, 20 Sep 2017 21:23:53 +0000 (22:23 +0100)] 
hostapd: Bump package version for updated wlanap.cgi

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 days agoTypo in en.pl
Matthias Fischer [Sun, 17 Sep 2017 18:32:56 +0000 (20:32 +0200)] 
Typo in en.pl

Fixes typo in
http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=15f19ed85ea3e6944c5fea623eca8ef215eae39e

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 days agowlanap.cgi: Some cosmetics...
Matthias Fischer [Sun, 17 Sep 2017 07:12:05 +0000 (09:12 +0200)] 
wlanap.cgi: Some cosmetics...

- Added missing box heading ('Access Point Configuration') in 'wlanap.cgi'.
- For this to work, added missing string 'wlanap configuration' in translations.
- Changed existing translation strings in 'de.pl' and 'en.pl': 'wlanap' means 'wlan access point', so why is it called
'wlan*ap* access point'?

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 days agoapache2: Import patch for CVE-2017-9798 ("optionsbleed")
Matthias Fischer [Wed, 20 Sep 2017 09:08:52 +0000 (11:08 +0200)] 
apache2: Import patch for CVE-2017-9798 ("optionsbleed")

Imported from:
https://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/server/core.c?r1=1805223&r2=1807754&pathrev=1807754&view=patch

For details see:
https://nvd.nist.gov/vuln/detail/CVE-2017-9798

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 days agounbound: Update to 1.6.6
Matthias Fischer [Tue, 19 Sep 2017 06:10:12 +0000 (08:10 +0200)] 
unbound: Update to 1.6.6

For details see:
http://www.unbound.net/download.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 days agotcpdump: Update to 4.9.2
Matthias Fischer [Fri, 8 Sep 2017 16:13:39 +0000 (18:13 +0200)] 
tcpdump: Update to 4.9.2

Changelog:

"Sunday September 3, 2017 denis@ovsienko.info
  Summary for 4.9.2 tcpdump release
    Do not use getprotobynumber() for protocol name resolution.  Do not do
      any protocol name resolution if -n is specified.
      Improve errors detection in the test scripts.
      Fix a segfault with OpenSSL 1.1 and improve OpenSSL usage.
      Clean up IS-IS printing.
      Fix buffer overflow vulnerabilities:
      CVE-2017-11543 (SLIP)
      CVE-2017-13011 (bittok2str_internal)
      Fix infinite loop vulnerabilities:
      CVE-2017-12989 (RESP)
      CVE-2017-12990 (ISAKMP)
      CVE-2017-12995 (DNS)
      CVE-2017-12997 (LLDP)
      Fix buffer over-read vulnerabilities:
      CVE-2017-11541 (safeputs)
      CVE-2017-11542 (PIMv1)
      CVE-2017-12893 (SMB/CIFS)
      CVE-2017-12894 (lookup_bytestring)
      CVE-2017-12895 (ICMP)
      CVE-2017-12896 (ISAKMP)
      CVE-2017-12897 (ISO CLNS)
      CVE-2017-12898 (NFS)
      CVE-2017-12899 (DECnet)
      CVE-2017-12900 (tok2strbuf)
      CVE-2017-12901 (EIGRP)
      CVE-2017-12902 (Zephyr)
      CVE-2017-12985 (IPv6)
      CVE-2017-12986 (IPv6 routing headers)
      CVE-2017-12987 (IEEE 802.11)
      CVE-2017-12988 (telnet)
      CVE-2017-12991 (BGP)
      CVE-2017-12992 (RIPng)
      CVE-2017-12993 (Juniper)
      CVE-2017-11542 (PIMv1)
      CVE-2017-11541 (safeputs)
      CVE-2017-12994 (BGP)
      CVE-2017-12996 (PIMv2)
      CVE-2017-12998 (ISO IS-IS)
      CVE-2017-12999 (ISO IS-IS)
      CVE-2017-13000 (IEEE 802.15.4)
      CVE-2017-13001 (NFS)
      CVE-2017-13002 (AODV)
      CVE-2017-13003 (LMP)
      CVE-2017-13004 (Juniper)
      CVE-2017-13005 (NFS)
      CVE-2017-13006 (L2TP)
      CVE-2017-13007 (Apple PKTAP)
      CVE-2017-13008 (IEEE 802.11)
      CVE-2017-13009 (IPv6 mobility)
      CVE-2017-13010 (BEEP)
      CVE-2017-13012 (ICMP)
      CVE-2017-13013 (ARP)
      CVE-2017-13014 (White Board)
      CVE-2017-13015 (EAP)
      CVE-2017-11543 (SLIP)
      CVE-2017-13016 (ISO ES-IS)
      CVE-2017-13017 (DHCPv6)
      CVE-2017-13018 (PGM)
      CVE-2017-13019 (PGM)
      CVE-2017-13020 (VTP)
      CVE-2017-13021 (ICMPv6)
      CVE-2017-13022 (IP)
      CVE-2017-13023 (IPv6 mobility)
      CVE-2017-13024 (IPv6 mobility)
      CVE-2017-13025 (IPv6 mobility)
      CVE-2017-13026 (ISO  IS-IS)
      CVE-2017-13027 (LLDP)
      CVE-2017-13028 (BOOTP)
      CVE-2017-13029 (PPP)
      CVE-2017-13030 (PIM)
      CVE-2017-13031 (IPv6 fragmentation header)
      CVE-2017-13032 (RADIUS)
      CVE-2017-13033 (VTP)
      CVE-2017-13034 (PGM)
      CVE-2017-13035 (ISO IS-IS)
      CVE-2017-13036 (OSPFv3)
      CVE-2017-13037 (IP)
      CVE-2017-13038 (PPP)
      CVE-2017-13039 (ISAKMP)
      CVE-2017-13040 (MPTCP)
      CVE-2017-13041 (ICMPv6)
      CVE-2017-13042 (HNCP)
      CVE-2017-13043 (BGP)
      CVE-2017-13044 (HNCP)
      CVE-2017-13045 (VQP)
      CVE-2017-13046 (BGP)
      CVE-2017-13047 (ISO ES-IS)
      CVE-2017-13048 (RSVP)
      CVE-2017-13049 (Rx)
      CVE-2017-13050 (RPKI-Router)
      CVE-2017-13051 (RSVP)
      CVE-2017-13052 (CFM)
      CVE-2017-13053 (BGP)
      CVE-2017-13054 (LLDP)
      CVE-2017-13055 (ISO IS-IS)
      CVE-2017-13687 (Cisco HDLC)
      CVE-2017-13688 (OLSR)
      CVE-2017-13689 (IKEv1)
      CVE-2017-13690 (IKEv2)
      CVE-2017-13725 (IPv6 routing headers)

Sunday July 23, 2017 denis@ovsienko.info
  Summary for 4.9.1 tcpdump release
    CVE-2017-11108/Fix bounds checking for STP.
    Make assorted documentation updates and fix a few typos in tcpdump output.
    Fixup -C for file size >2GB (GH #488).
    Show AddressSanitizer presence in version output.
    Fix a bug in test scripts (exposed in GH #613).
    On FreeBSD adjust Capsicum capabilities for netmap.
    On Linux fix a use-after-free when the requested interface does not exist."

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 weeks agoapache2: Import patch for PR61382
Michael Tremer [Thu, 7 Sep 2017 11:27:43 +0000 (12:27 +0100)] 
apache2: Import patch for PR61382

We usually do not download patches, but rather ship them with
our source.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 weeks agoFixup for apache and aprutil, do not include whole directory
Wolfgang Apolinarski [Wed, 6 Sep 2017 18:38:37 +0000 (20:38 +0200)] 
Fixup for apache and aprutil, do not include whole directory

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 weeks agocore114: Update apache configuration of all add-ons that have one
Michael Tremer [Mon, 4 Sep 2017 12:09:43 +0000 (13:09 +0100)] 
core114: Update apache configuration of all add-ons that have one

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 weeks agocore114: Ship updated apache2
Michael Tremer [Mon, 4 Sep 2017 11:58:17 +0000 (12:58 +0100)] 
core114: Ship updated apache2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 weeks agoapache2: Download source from IPFire servers
Michael Tremer [Mon, 4 Sep 2017 11:56:42 +0000 (12:56 +0100)] 
apache2: Download source from IPFire servers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 weeks agoUpdate to apache 2.4.27
Wolfgang Apolinarski [Wed, 23 Aug 2017 19:25:25 +0000 (21:25 +0200)] 
Update to apache 2.4.27

- Updated to apache 2.4
- Updated the htpasswd generation to use the more secure bcrypt algorithm

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 weeks agoapr and aprutil: Added as requirement for apache 2.4
Wolfgang Apolinarski [Wed, 23 Aug 2017 19:24:47 +0000 (21:24 +0200)] 
apr and aprutil: Added as requirement for apache 2.4

- APR 1.6.2 is a requirement for building apache httpd 2.4
- APR-Util 1.6.0 is a requirement for building apache httpd 2.4

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 weeks agofix WebUI system information leak
Peter Müller [Sun, 3 Sep 2017 14:14:53 +0000 (16:14 +0200)] 
fix WebUI system information leak

Disable unauthenticated access to cgi-bin/credits.cgi. The page
leaks the currently installed version of IPFire and the hardware
architecture.

Both information might make a successful attack much easier.

This issue can be reproduced by accessing https://[IPFire-IP]:444/cgi-bin/credits.cgi
and accepting a SSL certificate warning (if any).

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 weeks agoupdate german translations
Peter Müller [Sun, 3 Sep 2017 14:22:32 +0000 (16:22 +0200)] 
update german translations

- Unify translations of various terms.
- Unify translations of week days.
- Correct some typos and grammar errors.
- Modify some phrases which were not fully translated.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 weeks agostrongswan: rootfile update
Arne Fitzenreiter [Wed, 30 Aug 2017 17:03:25 +0000 (19:03 +0200)] 
strongswan: rootfile update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 weeks agocore114: add unbound initskript to updater.
Arne Fitzenreiter [Wed, 30 Aug 2017 17:02:08 +0000 (19:02 +0200)] 
core114: add unbound initskript to updater.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 weeks agounbound: flush negative and bogus at update forwarders
Arne Fitzenreiter [Wed, 30 Aug 2017 08:35:32 +0000 (10:35 +0200)] 
unbound: flush negative and bogus at update forwarders

this resolves problems that negative answers from
a forwarder was still used after setting new servers.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 weeks agounbound: run time fix also after update forwarder
Arne Fitzenreiter [Wed, 30 Aug 2017 08:32:44 +0000 (10:32 +0200)] 
unbound: run time fix also after update forwarder

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 weeks agoWIO: fix the bugs reported in the forum
Stephan Feddersen [Sun, 27 Aug 2017 12:41:53 +0000 (14:41 +0200)] 
WIO: fix the bugs reported in the forum

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 weeks agostrongswan: Update to 5.6.0
Michael Tremer [Wed, 23 Aug 2017 19:03:21 +0000 (20:03 +0100)] 
strongswan: Update to 5.6.0

Fixes CVE-2017-11185:

Fixed a DoS vulnerability in the gmp plugin that was caused by insufficient input validation
when verifying RSA signatures, which requires decryption with the operation m^e mod n,
where m is the signature, and e and n are the exponent and modulus of the public key.
The value m is an integer between 0 and n-1, however, the gmp plugin did not verify this.
So if m equals n the calculation results in 0, in which case mpz_export() returns NULL.
This result wasn't handled properly causing a null-pointer dereference.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 weeks agocore114: Ship updated squid
Michael Tremer [Wed, 23 Aug 2017 10:33:41 +0000 (11:33 +0100)] 
core114: Ship updated squid

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 weeks agosquid: Update to 3.5.27
Matthias Fischer [Mon, 21 Aug 2017 16:54:25 +0000 (18:54 +0200)] 
squid: Update to 3.5.27

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 weeks agocore114: Ship updated gnutls
Michael Tremer [Wed, 23 Aug 2017 10:31:56 +0000 (11:31 +0100)] 
core114: Ship updated gnutls

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 weeks agognutls: Update to 3.5.15
Matthias Fischer [Wed, 23 Aug 2017 01:54:03 +0000 (03:54 +0200)] 
gnutls: Update to 3.5.15

For details see:
https://lists.gnupg.org/pipermail/gnutls-devel/2017-August/008483.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 weeks agocore114: Ship updated unbound
Michael Tremer [Wed, 23 Aug 2017 10:29:55 +0000 (11:29 +0100)] 
core114: Ship updated unbound

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 weeks agounbound: Update to 1.6.5
Matthias Fischer [Tue, 22 Aug 2017 19:06:19 +0000 (21:06 +0200)] 
unbound: Update to 1.6.5

Changelog:

"21 Aug 2017: Wouter
- Fix install of trust anchor when two anchors are present, makes both
  valid.  Checks hash of DS but not signature of new key.  This fixes installs between
  sep11 and oct11 2017."

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 weeks agocore114: Ship updated hdparm
Michael Tremer [Mon, 21 Aug 2017 11:21:45 +0000 (12:21 +0100)] 
core114: Ship updated hdparm

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 weeks agoStart Core Update 114
Michael Tremer [Mon, 21 Aug 2017 11:21:14 +0000 (12:21 +0100)] 
Start Core Update 114

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 weeks agohdparm: Update to 9.52
Matthias Fischer [Sat, 19 Aug 2017 10:59:59 +0000 (12:59 +0200)] 
hdparm: Update to 9.52

Changes from 9.50 to 9.52:
- add support for Jmicron USB-SATA bridges, courtesy Jan Friesse <jfriesse@gmail.com>.
- New --security-prompt-for-password flag for use with the various --security- actions.
- Makefile tweak from Mike Frysinger.
- fix spelling/typos in man page and "removable", courtesy of Alex Mestiashvili.
- fix spelling/typos in --sanitize-crypto-scramble, courtesy of Tom Yan.
- fix NULL password handling in --security-unlock, courtesy of Tom Yan.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agoclose core113
Arne Fitzenreiter [Thu, 17 Aug 2017 22:28:47 +0000 (00:28 +0200)] 
close core113

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 weeks agoMerge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Thu, 17 Aug 2017 13:00:38 +0000 (15:00 +0200)] 
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next

5 weeks agounbound: update dns hints and keys
Arne Fitzenreiter [Thu, 17 Aug 2017 12:25:42 +0000 (14:25 +0200)] 
unbound: update dns hints and keys

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 weeks agocore113: Ship openvpn which has been missing in core112 updater
Michael Tremer [Thu, 17 Aug 2017 12:14:53 +0000 (13:14 +0100)] 
core113: Ship openvpn which has been missing in core112 updater

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agorootfile updates: nano, misc-progs
Arne Fitzenreiter [Thu, 17 Aug 2017 08:18:44 +0000 (10:18 +0200)] 
rootfile updates: nano, misc-progs

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 weeks agocore113: add strongswan-padlock to updater
Arne Fitzenreiter [Wed, 16 Aug 2017 18:12:45 +0000 (20:12 +0200)] 
core113: add strongswan-padlock to updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 weeks agomake.sh: Actually build iftop
Michael Tremer [Wed, 16 Aug 2017 12:47:33 +0000 (13:47 +0100)] 
make.sh: Actually build iftop

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agocore113: Ship packages that have not been shipped with 112
Michael Tremer [Wed, 16 Aug 2017 10:32:43 +0000 (11:32 +0100)] 
core113: Ship packages that have not been shipped with 112

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agolibgcrypt: Rootfile update
Michael Tremer [Tue, 15 Aug 2017 19:23:17 +0000 (20:23 +0100)] 
libgcrypt: Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agounbound/ntp: move not working DNS fallback from ntp to unbound initskript
Arne Fitzenreiter [Tue, 15 Aug 2017 18:20:16 +0000 (20:20 +0200)] 
unbound/ntp: move not working DNS fallback from ntp to unbound initskript

the ntp initskript will only run at first connection try. If this fails
and the connection can established later DNS will not work if the clock
is too far away.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 weeks agoserial-console: remove baudrate from inittab
Arne Fitzenreiter [Tue, 15 Aug 2017 18:08:22 +0000 (20:08 +0200)] 
serial-console: remove baudrate from inittab

new versions of agetty missinterpretes the baudrate and set it as TERM
without the parameter agetty use the previous rate that was set by the
kernel via console=XXX,Baudrate parameter.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 weeks agoWIO: wio.cgi edit how to get the ips for the networks
Stephan Feddersen [Tue, 15 Aug 2017 13:17:35 +0000 (15:17 +0200)] 
WIO: wio.cgi edit how to get the ips for the networks

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agologrotate: Fix source tarball checksum
Michael Tremer [Tue, 15 Aug 2017 11:02:12 +0000 (12:02 +0100)] 
logrotate: Fix source tarball checksum

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agocore113: Add latest packages
Michael Tremer [Tue, 15 Aug 2017 10:58:38 +0000 (11:58 +0100)] 
core113: Add latest packages

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agoiftop: This is an Update release to ver. 1.0pre4
Erik Kapfer [Thu, 10 Aug 2017 13:03:31 +0000 (15:03 +0200)] 
iftop: This is an Update release to ver. 1.0pre4

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agologrotate: Update to 3.12.3
Matthias Fischer [Mon, 14 Aug 2017 16:30:34 +0000 (18:30 +0200)] 
logrotate: Update to 3.12.3

For details see:
https://github.com/logrotate/logrotate/releases

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agonano: Update to 2.8.6
Matthias Fischer [Mon, 14 Aug 2017 16:27:29 +0000 (18:27 +0200)] 
nano: Update to 2.8.6

For details see:
https://www.nano-editor.org/news.php

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agopcre: Update to 8.41
Matthias Fischer [Mon, 14 Aug 2017 16:22:57 +0000 (18:22 +0200)] 
pcre: Update to 8.41

For details see:
http://www.pcre.org/original/changelog.txt

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agobind: Update to 9.11.2
Matthias Fischer [Mon, 14 Aug 2017 16:17:20 +0000 (18:17 +0200)] 
bind: Update to 9.11.2

For details see:
https://ftp.isc.org/isc/bind9/9.11.2/RELEASE-NOTES-bind-9.11.2.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agognutls: Update to 3.5.14
Matthias Fischer [Mon, 14 Aug 2017 16:06:52 +0000 (18:06 +0200)] 
gnutls: Update to 3.5.14

For details see:
https://lists.gnupg.org/pipermail/gnutls-devel/2017-May/008427.html
https://lists.gnupg.org/pipermail/gnutls-devel/2017-June/008446.html
https://lists.gnupg.org/pipermail/gnutls-devel/2017-July/008469.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agolibgcrypt: Update to 1.8.0
Matthias Fischer [Sun, 13 Aug 2017 14:03:34 +0000 (16:03 +0200)] 
libgcrypt: Update to 1.8.0

Changes (see: https://gnupg.org/download/release_notes.html):

"gpg: Sending very large keys to the keyservers works again.
gpg: Validity strings in key listings are now again translatable.
gpg: Emit FAILURE status lines to help GPGME.
gpg: Does not anymore link to Libksba to reduce dependencies.
gpgsm: Export of secret keys via Assuan is now possible.
agent: Raise the maximum passphrase length from 100 to 255 bytes.
agent: Fix regression using EdDSA keys with ssh.
Does not anymore use a build timestamp by default.
The fallback encoding for broken locale settings changed from Latin-1 to UTF-8.
Many code cleanups and improved internal documentation.
Various minor bug fixes."

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agohostapd: Update to 2.6
Matthias Fischer [Sun, 13 Aug 2017 13:56:28 +0000 (15:56 +0200)] 
hostapd: Update to 2.6

For details see:
https://w1.fi/cgit/hostap/plain/hostapd/ChangeLog

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agounbound: Update to 1.6.4
Matthias Fischer [Sun, 13 Aug 2017 13:30:01 +0000 (15:30 +0200)] 
unbound: Update to 1.6.4

Hi, ("...back in town...") ;-)

For details see:
http://www.unbound.net/download.html

I had to remove the patch file: it wouldn't apply.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agotor: Update to 0.3.0.10
Matthias Fischer [Sun, 13 Aug 2017 13:37:29 +0000 (15:37 +0200)] 
tor: Update to 0.3.0.10

Fixes CVE-2017-0377 and others.

For details see:
https://gitweb.torproject.org/tor.git/plain/ReleaseNotes?id=tor-0.3.0.10

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agosquid 3.5.26: latest patches (14169-14182)
Matthias Fischer [Sun, 13 Aug 2017 13:41:07 +0000 (15:41 +0200)] 
squid 3.5.26: latest patches (14169-14182)

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agoWIO: minor changes
Stephan Feddersen [Tue, 18 Jul 2017 19:26:34 +0000 (21:26 +0200)] 
WIO: minor changes

correct typo in wio.en.pl language file
add button in wio.cgi to change to systems logs (section wio)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agoWIO: patch log.dat to show wio logs
Stephan Feddersen [Tue, 18 Jul 2017 18:26:17 +0000 (20:26 +0200)] 
WIO: patch log.dat to show wio logs

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agoWIO: first addon release v1.3.1
Stephan Feddersen [Fri, 14 Jul 2017 10:26:55 +0000 (12:26 +0200)] 
WIO: first addon release v1.3.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agoStart Core Update 113
Michael Tremer [Tue, 15 Aug 2017 10:44:50 +0000 (11:44 +0100)] 
Start Core Update 113

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoutil-linux: update rootfile (armv5tel) core112
Arne Fitzenreiter [Tue, 11 Jul 2017 03:59:18 +0000 (05:59 +0200)] 
util-linux: update rootfile (armv5tel)

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 months agoncftp: drop addon package
Arne Fitzenreiter [Sat, 8 Jul 2017 15:23:00 +0000 (17:23 +0200)] 
ncftp: drop addon package

it is outdated and will not build with new gcc/glibc

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 months agomake-functions: move MAKETUNING before make
Arne Fitzenreiter [Sat, 8 Jul 2017 13:31:15 +0000 (15:31 +0200)] 
make-functions: move MAKETUNING before make

this is needed to edit MAKTUNING in the lfs file
which is used by boost and cmake to build on
machines with less than 4GB Memory.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 months agoclose core112 v2.19-core112
Arne Fitzenreiter [Fri, 7 Jul 2017 09:57:41 +0000 (11:57 +0200)] 
close core112

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 months agocore112: reload init to allow correct unmount at reboot
Arne Fitzenreiter [Fri, 7 Jul 2017 08:14:37 +0000 (10:14 +0200)] 
core112: reload init to allow correct unmount at reboot

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 months agotoolchain: filter -mfpu from CFLAGS for first pass
Arne Fitzenreiter [Fri, 7 Jul 2017 08:12:28 +0000 (10:12 +0200)] 
toolchain: filter -mfpu from CFLAGS for first pass

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 months agoflash-images: remove wrong 2nd partition
Arne Fitzenreiter [Thu, 6 Jul 2017 16:37:44 +0000 (18:37 +0200)] 
flash-images: remove wrong 2nd partition

the new sfdisk seems not able to skip a partition anymore.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 months agobump TOOLCHAIN version
Arne Fitzenreiter [Thu, 6 Jul 2017 06:34:50 +0000 (08:34 +0200)] 
bump TOOLCHAIN version

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 months agoflash-images: remove unsupported sfdisk switches
Arne Fitzenreiter [Thu, 6 Jul 2017 06:32:13 +0000 (08:32 +0200)] 
flash-images: remove unsupported sfdisk switches

New util-linux sfdisk does not have -D and -H / -S
switches.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 months agocore112: Ship updated util-linux
Michael Tremer [Wed, 5 Jul 2017 16:23:19 +0000 (17:23 +0100)] 
core112: Ship updated util-linux

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoutil-linux: update to 2.28.2
Marcel Lorenz [Tue, 6 Jun 2017 08:38:21 +0000 (10:38 +0200)] 
util-linux: update to 2.28.2

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Reviewed-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agogrub: ignore missing .symtab in modules
Arne Fitzenreiter [Wed, 5 Jul 2017 15:42:21 +0000 (17:42 +0200)] 
grub: ignore missing .symtab in modules

old binutis add an empty .symtab section at stripping
and grub check that this exists also on modules that export
no symbols.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 months agoMerge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Wed, 5 Jul 2017 06:05:13 +0000 (08:05 +0200)] 
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next

2 months agochecknewlog: skip cmake because log contain space in filenames
Arne Fitzenreiter [Wed, 5 Jul 2017 06:03:46 +0000 (08:03 +0200)] 
checknewlog: skip cmake because log contain space in filenames

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 months agothis grep fails on debian and the output is useless II
Arne Fitzenreiter [Tue, 4 Jul 2017 10:44:42 +0000 (12:44 +0200)] 
this grep fails on debian and the output is useless II

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 months agoRootfile update
Michael Tremer [Mon, 3 Jul 2017 18:10:39 +0000 (19:10 +0100)] 
Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoRootfile update
Michael Tremer [Mon, 3 Jul 2017 18:08:40 +0000 (19:08 +0100)] 
Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoArchive Core Updates 110 + 111
Michael Tremer [Sat, 1 Jul 2017 11:45:16 +0000 (12:45 +0100)] 
Archive Core Updates 110 + 111

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoPackage Core Update 112
Michael Tremer [Sat, 1 Jul 2017 11:44:48 +0000 (12:44 +0100)] 
Package Core Update 112

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoRootfile update for armv5tel toolchain
Michael Tremer [Sat, 1 Jul 2017 11:34:00 +0000 (12:34 +0100)] 
Rootfile update for armv5tel toolchain

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoRootfile update
Michael Tremer [Mon, 26 Jun 2017 09:17:56 +0000 (10:17 +0100)] 
Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agoipfire-netboot: Update to version v1.1
Michael Tremer [Fri, 16 Oct 2015 21:53:31 +0000 (23:53 +0200)] 
ipfire-netboot: Update to version v1.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agounbound: Fix crash of daemon at startup
Michael Tremer [Sun, 25 Jun 2017 14:44:33 +0000 (15:44 +0100)] 
unbound: Fix crash of daemon at startup

getentropy() cannot be used on our platform.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agoDrop architecture-dependent and unused package fwhits
Michael Tremer [Thu, 22 Jun 2017 17:29:59 +0000 (18:29 +0100)] 
Drop architecture-dependent and unused package fwhits

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agodirectfb: Fix compilation on ARM
Michael Tremer [Thu, 22 Jun 2017 15:00:48 +0000 (16:00 +0100)] 
directfb: Fix compilation on ARM

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agoopenvpn: Update to 2.3.17
Michael Tremer [Thu, 22 Jun 2017 09:43:49 +0000 (10:43 +0100)] 
openvpn: Update to 2.3.17

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agoUnbound - rootfile
Wolfgang Apolinarski [Sun, 18 Jun 2017 15:06:01 +0000 (17:06 +0200)] 
Unbound - rootfile

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agomake.sh remove double build pcre
Marcel Lorenz [Thu, 15 Jun 2017 05:57:20 +0000 (07:57 +0200)] 
make.sh remove double build pcre

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agoboost: Disable all libraries that don't build on armv7hl
Michael Tremer [Thu, 15 Jun 2017 10:16:58 +0000 (11:16 +0100)] 
boost: Disable all libraries that don't build on armv7hl

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agoboost: Properly use CFLAGS & CXXFLAGS
Michael Tremer [Thu, 8 Jun 2017 14:43:01 +0000 (15:43 +0100)] 
boost: Properly use CFLAGS & CXXFLAGS

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: fix amba modules build with gcc6
Arne Fitzenreiter [Tue, 20 Jun 2017 04:12:45 +0000 (06:12 +0200)] 
kernel: fix amba modules build with gcc6

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 months agokernel: rpi build fix
Arne Fitzenreiter [Sun, 18 Jun 2017 08:28:20 +0000 (10:28 +0200)] 
kernel: rpi build fix

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 months agoMerge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Thu, 15 Jun 2017 16:40:32 +0000 (18:40 +0200)] 
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next

3 months agoglibc: Don't use locale-archive
Michael Tremer [Thu, 15 Jun 2017 10:45:19 +0000 (11:45 +0100)] 
glibc: Don't use locale-archive

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agounbound: Update to 1.6.3
Michael Tremer [Thu, 15 Jun 2017 10:17:35 +0000 (11:17 +0100)] 
unbound: Update to 1.6.3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agocmake: update to 3.8.1
Marcel Lorenz [Thu, 8 Jun 2017 20:19:16 +0000 (22:19 +0200)] 
cmake: update to 3.8.1

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agotor: Update to 3.0.8
Matthias Fischer [Fri, 9 Jun 2017 08:31:04 +0000 (10:31 +0200)] 
tor: Update to 3.0.8

For details see:
https://gitweb.torproject.org/tor.git/plain/ReleaseNotes?id=tor-0.3.0.8

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>