kernel: update to 4.13.3

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make: Update to 4.2.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: update to 4.12.11

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: update config (disable AUDIT subsys)

audit support was removed from the userspace so also the kernel not need it anymore.

fixes #11465

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: update to 4.12.10

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: update to 4.12.9

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: update to 4.12.8

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dracut: Update to 045

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wpa_supplicant: Allow systemd to reload the daemon

* Add the required command to the systemd service file to allow
systemd to reload the running instances of wpa_supplicant.

* Also drop config file for logrotate, which is not needed anymore.

Fixes #11479.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

strongswan: Update to 5.6.0

Fixed a DoS vulnerability in the gmp plugin that was caused by insufficient input validation
when verifying RSA signatures, which requires decryption with the operation m^e mod n,
where m is the signature, and e and n are the exponent and modulus of the public key.
The value m is an integer between 0 and n-1, however, the gmp plugin did not verify this.
So if m equals n the calculation results in 0, in which case mpz_export() returns NULL.
This result wasn't handled properly causing a null-pointer dereference.

This vulnerability has been registered as CVE-2017-11185.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

gcc: Update to 6.4.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wpa_supplicant: Update to 2.6

Adds support for 802.11s mesh networks and drops
the configuration helper

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

systemd: Update to 233

This is a major update for systemd to version 233.

* Drop support for the audit subsystem.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

glibc: Remove audit support

* Drop support for the audit subsystem.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dbus: Update to 1.11.16

This is a minor update to the latest stable version of dbus.

* Drop support for the audit subsystem.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

passwd: Remove audit support

* Drop support for the audit subsystem.
* Adjust the project and source URL.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

cronie: Remove audit support

* Also adjust the project and download URL.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

sudo: Update to 1.8.20p2

This is an update to the latest stable version of sudo.

* Drop support for the audit subsystem

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

cups: Update to 2.2.4

This is a minor update to the latest version of cups.

* Drop support for the audit subsystem.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

openssh: Update to 7.5p1

This is a major update to the latest stable version of openssh.

* Drop support for the audit subsystem.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

shadow-utils: Update to 4.5

This is a major update to the latest available version.

* Remove support for the audit subsystem.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pam: Disable support for audit

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

util-linux: Update to 2.30.1

This is a major update to the latest stable version of util-linux.

* Remove support for audit subsystem
* New sub-package libfdisk
* Adjust download URL

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

network: Update to 009

Loads of improvements too long to list.

Does not support RSTP any more so mstpd is being dropped.

Supports VPNs now for which it needs strongswan.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

glibc: Update to version 2.26

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: remover perf

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

grub: set gfxpayload to keep

this is needed keep the grub videoresolution for vesa framebuffer

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: update to 4.12.4

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

iproute2: Update to 4.12.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

strongswan: Disable stroke and move fully towards swanctl

This commit disables stroke, charon and scepclient in favour
of the new configuration tool swanctl.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge remote-tracking branch 'arne_f/grub-2.02-final'

Merge remote-tracking branch 'arne_f/kernel-4.7'

grub: update to 2.02 final

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 4.7.9

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

setup: Disable printing kernel debug messages on console

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

mstpd: Drop package

This has never worked too reliably and I cannot test it
well. So we only support plain STP which is implemented
in the kernel and no RSTP any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

strongswan: Disable obviously broken crypto

Blowfish and RC2 are very broken and nowhere in use at all.
To avoid that these get used by accident, we just delete the
internal modules that implement it.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

frr: New package

This package is FRRouting which is a fork of quagga

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

unbound: Update to 1.6.3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

lldpd: Update to 0.9.7

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: Drop tools that we don't need and FTBFS

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

strongswan: Update to 5.5.3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: Drop support for BTRFS

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

btrfs: Drop package

It seems that the project is not very lively and the filesystem
has not been adopted at all as it was thought so far.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dhcp: Update to 4.3.5b1

This is an update to the latest available version of the isc-dhcp.

Also rework the patch handling.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bind: Rework package and update to 9.9.9-P6

This commit rapidely slims down the bind package. It now only
provides the libraries and development files, which are needed
to build the isc-dhcp server and in a subpackage some very handy
utils like dig, host and some more.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

aiccu: Drop package

SixXS is being shut down which is the only project that used
the aiccu tool.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

lcms2: Update to 2.8

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pixman: Update to 0.34.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

cups: Update to 2.2.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

avahi: Update to 0.6.32

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: Disable building perf

This won't build and we don't urgently need it right now

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

quagga: Update to 1.2.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

c-ares: Update to 1.12.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

grep: Update to 3.0

This is a major update to the new grep 3.0 series.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

glibc: Update to 2.25

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

suricata: Update to 3.2.1

This is a major update to the latest stable version of suricata.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libhtp: Update to 0.5.20

This is an update to the latest stable version of libhtp.

* Adjust github URL to official ones.
* Enable testsuite.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

guile: Update to 2.0.14

This is a minor update to the latest stable release of guile.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wget: Update to 1.19.1

This is a minor update to the latest available version of wget.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wget: Update to 1.19

This is a major update to the latest available version of wget.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

zlib: Update to 1.2.11

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

python3: Update to version 3.6.0

This is a major update to the latest stable version of the
Python 3 series.

Fixes #11086.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

git: Add systemd file for git-daemon

Add systemd unit file for a socket-based activation
of git-deamon to export the git repositories.

Fixes #10983.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xfsprogs: Update to 4.9.0

This is an update to the latest available version of xfsprogs.

* Change source URL and tarball format.
* Add note for the non existing testsuite.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

openssh: Update to 7.4

This is a minor update to the latest stable version of OpenSSH.

* Enable root login with password.
* Drop selinux related modules from pam file.
* Rework Systemd unit files and add files for socked based
activation.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

net-snmp: Update to 5.7.3

This is a minor update to the latest available version of net-snmp.

* Drop SELinux support.

Fixes #11216.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ntp: Do not use a RPATH

Fixes #11243.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

intltool: Enable testsuite

* Drop automatically set configure switch.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

m4: Update to 1.4.18

This is an update to the latest stable version of m4.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

net-tools: Drop SELinux support.

Fixes #11217.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

sed: Disable SELinux support

Fixes #11227.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

passwd: Update to 0.79

This is a minor update to the lates available version of passwd.

* Add download URL.
* Drop SELinux support.

Fixes #11221.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libuser: Drop SELinux support.

Fixes #11211.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

compat-gnutls: Only ship libgnutls.

There is an error on the transaktion test when, installing
compat-gnutls because libgnutlsxx.so.28 is provided by this package
and the main gnutls package.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

compat-gnutls: New package

This package provides the following libraries:

* libgnutls.so.28
* libgnutlsxx.so.28

Both have been bumped with the gnutls 3.4 and 3.5 series, but
there is still software which is linked against those old libraries.

Fixes #11277.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

coreutils: Update to 8.26

This is an major update to the latest stable version.

* Drop SELinux support.

Fixes #11200.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ccache: Update to 3.3.3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

sysvinit: Honour LDFLAGS

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xz: Update to 5.2.3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

systemd: Allow RPATH

The systemd tool now requires an rpath for libsystemd-shared
library to run properly.

Fixes #11272

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bash-completion: Drop files which will be shipped by util-linux for now

The mount and umount binaries have been moved to util-linux and therefore
the bash-completions scripts too.

Drop them from the bash-completion package, because they get maintained
in the util-linux package from now.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

krb5: Update to 1.15

This is a major update to the latest available version of kerberos.

* Drop SELinux support.

Fixes #11210.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bison: Requires at least m4 1.4.17-2

Otherwise the forked child of bison will terminated
with a SEQV.

* Drop perl as build dependency which is not longer required.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

m4: Rebuild against glibc 2.24

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Update nmap to 7.30

This patch updates nmap to version 7.30 and introduce a new package
nmap-ncat.

The nmap project provides since version 7.0 a netcat implementation
which is ipv4 and ipv6 able.

Netcat is a dependency of libvirt and to avoid unnecessary dependencies
the tool ncat is shipped in an extra package.
The symlink nc point to the ncat implementation and is necessary because
libvirt use /usr/bin/nc to execute netcat.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

openssh: Update to 7.3p1.

This is a major update to the latest stable version of OpenSSH.

* Drop not longer required patches.
* Drop SElinux support.

Fixes #11218.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

python3-systemd: New package.

This package contains the python3 bindings for systemd.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

systemd: Update to version 232.

* Drop sub-package for compat-libs which will not be provided
  anymore since systemd 230.

* Drop sub-package for python binding, which have been moved to
  an own package.

* Remove unneeded file for X11 and ZSH.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

boost: Fix RPATH issue on i686.

Fixes #11176.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

python-urlgrabber: Update to 3.10.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libarchive: Update to 3.2.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libsolv: Update to 0.6.24

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ddrescue: New package

ddrescue is a data recovery tool

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libvirt: Make Jonatan Schlag maintainer

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Update libvirt to 2.4

This patch update libvirt to version 2.4 for changelog see:
https://libvirt.org/news-2016.html

This patch also add some new configure switches:

* We build now only for qemu/kvm. The build for VMware and
  phyp are now disabled.

* And libvirt is now explicitly built without SELinux.
  This change was necessary because of the fact that
  a build dependency of libvirt required SELinux
  and so libvirt is also linked against SELinux
  because it is available in the build environment.

  Until we get completely rid of SELinux we should use
  these switches.
  So we have a libvirt that does not require SELinux
  otherwise, we would have to release a version when we
  dropped SELinux completely, which would be stupid.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

net-snmp: Fix FTBFS by passing -Wformat with CFLAGS

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

perl-Net-SMTP-SSL: Update to 1.04

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

perl: Update to 5.20.3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

perl-DBI: Update to 1.636

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>