]>
git.ipfire.org Git - ipfire-2.x.git/log
Michael Tremer [Mon, 21 Sep 2020 15:43:34 +0000 (15:43 +0000)]
core151: Ship openjpeg
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 25 Aug 2020 09:50:31 +0000 (09:50 +0000)]
openjpeg: New package
This package adds encoding/decoding JPEG-2000 image files
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 21 Sep 2020 15:42:53 +0000 (15:42 +0000)]
core151: Ship freetype
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 25 Aug 2020 09:50:30 +0000 (09:50 +0000)]
freetype: Update to 2.10.2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 21 Sep 2020 15:41:54 +0000 (15:41 +0000)]
core151: Ship fontconfig
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 25 Aug 2020 09:50:29 +0000 (09:50 +0000)]
fontconfig: update to 2.13.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 21 Sep 2020 15:40:04 +0000 (15:40 +0000)]
core151: Ship libgcrypt
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Wed, 19 Aug 2020 15:57:34 +0000 (17:57 +0200)]
libgcrypt: Update to 1.8.6
For details see:
https://lists.gnu.org/archive/html/info-gnu/2020-07/msg00001.html
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 21 Sep 2020 15:39:34 +0000 (15:39 +0000)]
core151: Ship libidn
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Wed, 19 Aug 2020 15:49:11 +0000 (17:49 +0200)]
libidn: Update to 1.36
For details see:
https://lists.gnu.org/archive/html/info-gnu/2020-07/msg00004.html
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 21 Sep 2020 15:34:38 +0000 (15:34 +0000)]
core151: Ship updaated pakfire.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sat, 18 Jul 2020 12:49:51 +0000 (14:49 +0200)]
pakfire.cgi: Partially fixes Bug #12049
I added translations for package uninstallation but didn't know how to fix
the missing list of affected dependencies during uninstallation, see:
=> https://forum.ipfire.org/viewtopic.php?f=17&t=21912&p=120466#p120593
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 21 Sep 2020 15:21:55 +0000 (15:21 +0000)]
hostapd: Bump version to ship updated wlanap.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sat, 18 Jul 2020 12:44:20 +0000 (14:44 +0200)]
wlanap.cgi: Add on/off translations for Management Frame Protection radio buttons
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 21 Sep 2020 15:20:55 +0000 (15:20 +0000)]
core151: Ship dhcpcd
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Fri, 3 Jul 2020 16:18:11 +0000 (18:18 +0200)]
dhcpcd: Update to 9.1.4
For details (9.1.2 => 9.1.3 => 9.1.4) see:
https://roy.marples.name/blog/dhcpcd-9-1-3-released.html
"configure: Fix fallout with disabling embedded config
inet6: Add support for reporting Mobile IPv6 RA's
inet6: Report RA Proxy flag if set
BSD: Allow non NetBSD and OpenBSD to set IN6_IFF_AUTOCONF
privsep: Don't handle any signals meant for the main process
eloop: Try and survive a signal storm
configure: add --with-eghook=foo
dhcpcd: Add an option to poll the interface carrier state
script: Make visible some link level parameters to lease dumping
Linux: ignore unsupported interfaces by default, such as sit0
Linux: support aarch64 for reading cpu info
Linux: keep the generic netlink socket around to get ssid with privsep
Linux: restore fix when no address is returned by getifaddrs(3)
inet6: Don't regen temp addresses we didn't add
privsep: Don't limit file writes if logging to a file
DHCP6: Fix lease timings with nodelay option"
https://roy.marples.name/blog/dhcpcd-9-1-4-released.html
"Fix SMALL builds
Ensure DBDIR exists at startup"
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Thu, 2 Jul 2020 20:51:44 +0000 (22:51 +0200)]
libmicrohttpd 0.9.71: Fix for rootfile
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Wed, 1 Jul 2020 17:13:40 +0000 (19:13 +0200)]
libmicrohttpd: Update to 0.9.71
For details see:
https://www.gnu.org/software/libmicrohttpd/
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Mon, 29 Jun 2020 15:43:47 +0000 (17:43 +0200)]
Net_SSLeay 1.88: Fix for rootfile
My Devel complained that the first line was missing and wanted it commented...
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 21 Sep 2020 15:19:22 +0000 (15:19 +0000)]
core151: Ship Digest-HMAC
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Mon, 29 Jun 2020 15:39:03 +0000 (17:39 +0200)]
Digest-HMAC: Update to 1.03
For details see:
https://metacpan.org/source/GAAS/Digest-HMAC-1.03/Changes
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 21 Sep 2020 15:18:55 +0000 (15:18 +0000)]
core151: Ship Digest-SHA1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Mon, 29 Jun 2020 15:37:08 +0000 (17:37 +0200)]
Digest-SHA1: Update to 2.13
For details see:
https://metacpan.org/source/GAAS/Digest-SHA1-2.13/Changes
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 21 Sep 2020 15:17:47 +0000 (15:17 +0000)]
core151: Ship Net-DNS
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Mon, 29 Jun 2020 15:30:28 +0000 (17:30 +0200)]
Net-DNS: Update to 1.25
For details see:
https://metacpan.org/source/NLNETLABS/Net-DNS-1.25/Changes
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 21 Sep 2020 15:14:21 +0000 (15:14 +0000)]
make.sh: Add lshw to build
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Follert [Fri, 21 Aug 2020 19:37:44 +0000 (21:37 +0200)]
lshw-B.02.19.2
>>> https://ezix.org/project/wiki/HardwareLiSter <<<
lshw (Hardware Lister) is a small tool to provide detailed information on
the hardware configuration of the machine.
It can report exact memory configuration, firmware version,
mainboard configuration, CPU version and speed,
cache configuration, bus speed, etc.
Signed-off-by: Marcel Follert (Smooky) <smooky@16.de>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 21 Sep 2020 15:12:15 +0000 (15:12 +0000)]
make.sh: Add ncdu to build
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Follert [Fri, 21 Aug 2020 19:37:07 +0000 (21:37 +0200)]
ncdu-1.15.1
>>> https://dev.yorhel.nl/ncdu <<<
Ncdu is a disk usage analyzer with an ncurses interface.
It is designed to find space hogs on a remote server where you don't
have an entire graphical setup available,
but it is a useful tool even on regular desktop systems.
Ncdu aims to be fast, simple and easy to use,
and should be able to run in any minimal POSIX-like environment
with ncurses installed.
Signed-off-by: Marcel Follert (Smooky) <smooky@16.de>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 21 Sep 2020 15:09:20 +0000 (15:09 +0000)]
openvmtools: Depend on libtirpc
Fixes: #12487
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 21 Sep 2020 15:08:47 +0000 (15:08 +0000)]
Update languages
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 21 Sep 2020 15:08:26 +0000 (15:08 +0000)]
Start Core Update 151
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Thu, 24 Sep 2020 14:16:16 +0000 (14:16 +0000)]
Merge branch 'master' into next
Michael Tremer [Sat, 19 Sep 2020 16:13:51 +0000 (16:13 +0000)]
index.cgi: Fix CPU architecture check
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 24 Sep 2020 05:38:56 +0000 (07:38 +0200)]
make.sh fix i586 code generation.
-fcf-protection insert non i586 instructions that crash on amd k6 and geode
to build a working glibc also the toolchain compiler must build without this
so this need a new toolchain.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 24 Sep 2020 05:36:01 +0000 (07:36 +0200)]
toolchain: fix build with gcc<8 on builder.
gcc-7 not support -fcf-protection so filter it from CFLAGS.
also filter -mtune in first pass because it should optimized for the
actual host.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sat, 19 Sep 2020 19:24:51 +0000 (19:24 +0000)]
core150: fix typo at graphs.pl
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Matthias Fischer [Sat, 22 Aug 2020 22:01:17 +0000 (00:01 +0200)]
graphs.pl: Standardize localization strings for entropy graphs
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Matthias Fischer [Sat, 22 Aug 2020 21:55:36 +0000 (23:55 +0200)]
graphs.pl: Standardize localization strings for disk access graphs
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sat, 19 Sep 2020 19:17:54 +0000 (19:17 +0000)]
core150: add conntrack graph changes.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Matthias Fischer [Sat, 5 Sep 2020 15:41:13 +0000 (17:41 +0200)]
graphs.pl: Standardize temperature displays
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Matthias Fischer [Sat, 5 Sep 2020 15:41:12 +0000 (17:41 +0200)]
netother.cgi: Added missing double quotes
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Matthias Fischer [Sat, 5 Sep 2020 15:41:11 +0000 (17:41 +0200)]
Changed/fixed translation 'Connection tracking'
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Fri, 21 Aug 2020 16:33:56 +0000 (17:33 +0100)]
web UI: Add graph for connection tracking
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Fri, 21 Aug 2020 16:33:55 +0000 (17:33 +0100)]
collectd: Enable conntrack plugin
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Matthias Fischer [Sat, 5 Sep 2020 15:41:10 +0000 (17:41 +0200)]
graphs.pl: Added translation for 'ACPI Thermal Zone'
This patchset is based on https://git.ipfire.org/?p=people/ms/ipfire-2.x.git;a=commitdiff;h=
4bf0d000ffe961cdc5d9dbd27b3a11f900b3daed
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Stefan Schantl [Tue, 15 Sep 2020 17:36:15 +0000 (19:36 +0200)]
Language files: Clarify menu entries and page titles for VPN connections.
These pages for RW and N2N statistics only show handle for OpenVPN connections.
Fixes #12476.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sat, 19 Sep 2020 19:06:55 +0000 (19:06 +0000)]
core150: add graphs.pl
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Fri, 18 Sep 2020 07:44:37 +0000 (07:44 +0000)]
graphs: Fix rendering CPU graphs after number of cores decreased
Fixes: #12193 - cpu graphs cannot created if smt is disabled
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sat, 19 Sep 2020 19:05:06 +0000 (19:05 +0000)]
core150: add index.cgi
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Sat, 19 Sep 2020 16:13:51 +0000 (16:13 +0000)]
index.cgi: Fix CPU architecture check
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Matthias Fischer [Sat, 19 Sep 2020 18:46:17 +0000 (20:46 +0200)]
htop: Update to 3.0.2
For details see:
https://github.com/htop-dev/htop/blob/master/ChangeLog
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Fri, 18 Sep 2020 05:28:26 +0000 (05:28 +0000)]
kernel: update aarch64 rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Fri, 18 Sep 2020 05:23:18 +0000 (05:23 +0000)]
kernel: aarch64: disable SSDT_OVERLAYS
this option was visible by enabling ACPI and is enabled by default but adds
an attacking vector.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Matthias Fischer [Thu, 27 Aug 2020 15:50:27 +0000 (17:50 +0200)]
nano: Update to 5.2
For details see:
https://www.nano-editor.org/news.php
I wasn't sure about the 'extras' - if we need more, feel free to adjust the rootfile.
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Adolf Belka [Wed, 2 Sep 2020 10:48:55 +0000 (12:48 +0200)]
postfix: Update to 3.5.7
- Update postfix from version 3.5.6 to 3.5.7
see ftp://ftp.cs.uu.nl/mirror/postfix/postfix-release/official/postfix-3.5.7.RELEASE_NOTES
Supporting request from Peter Müller
Signed-off-by: Adolf Belka<ahb@ipfire@gmail.com
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Adolf Belka [Mon, 7 Sep 2020 18:26:46 +0000 (20:26 +0200)]
nagios_nrpe: Fix for bug 12337
- added pid_file=/var/run to the configure statement
to give the required pid directory in the default nrpe.cfg file
Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Mathew McBride [Mon, 14 Sep 2020 01:32:49 +0000 (11:32 +1000)]
kernel: enable ACPI support on ARM64
ACPI (with EFI) is used on ARM systems conforming to the
Server Base Boot Requirements (SBBR) and is an optional
on embedded systems (EBBR).
Up to now the ARM64 boards supported by IPFire use U-Boot and
device tree so ACPI was not turned on.
The immediate use case here is to run under virtualization,
using my muvirt project[1] I can run IPFire on our Traverse Ten64
system. For reasons I'll explain separately it is not
currently possible to run stock IPFire on this system.
This change also enables the EFI RTC driver which is presented
by the qemu arm64 virt machine.
Signed-off-by: Mathew McBride <matt@traverse.com.au>
[1] - https://gitlab.com/traversetech/muvirt
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Matthias Fischer [Tue, 15 Sep 2020 16:34:32 +0000 (18:34 +0200)]
clamav: Update to 0.103.0
For details see:
https://blog.clamav.net/2020/09/clamav-01030-released.html
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sat, 12 Sep 2020 21:47:49 +0000 (23:47 +0200)]
kernel: update to 4.14.198
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sat, 12 Sep 2020 07:38:10 +0000 (09:38 +0200)]
kernel: add patch agains CVE-2020-14386
fixes #12483
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Fri, 11 Sep 2020 20:16:27 +0000 (22:16 +0200)]
Revert "kernel: add patch against CVE-2020-14386"
This reverts commit
f04023b1ca5675ce5463ca47186462179fd7a02a .
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Fri, 11 Sep 2020 19:30:15 +0000 (21:30 +0200)]
kernel: cleanup kirkwood patch apply lines
kirkwood support is removed long time ago and the patch already
removed from tree.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Fri, 11 Sep 2020 19:27:15 +0000 (21:27 +0200)]
kernel: add patch against CVE-2020-14386
fixes #12483
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 10 Sep 2020 18:20:28 +0000 (20:20 +0200)]
kernel: update to 4.14.197
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sat, 5 Sep 2020 14:57:55 +0000 (14:57 +0000)]
core149: restart init at update
this is needed to allow clean unmount at reboot because
init has some files open and the binary was replaced
at glibc update.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Fri, 4 Sep 2020 16:12:38 +0000 (18:12 +0200)]
Kernel: update to 4.14.196
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Mon, 31 Aug 2020 16:39:01 +0000 (18:39 +0200)]
libvirt: add libtirpc to dependencies
libvirt is linked against libtirpc so this need to installed.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Mon, 31 Aug 2020 16:39:01 +0000 (18:39 +0200)]
libvirt: add libtirpc to dependencies
libvirt is linked against libtirpc so this need to installed.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Mon, 31 Aug 2020 05:06:41 +0000 (07:06 +0200)]
core150: start core150 and add kernel
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Mon, 31 Aug 2020 04:58:32 +0000 (06:58 +0200)]
kernel: update to 4.14.195
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sun, 30 Aug 2020 07:52:55 +0000 (07:52 +0000)]
Merge remote-tracking branch 'origin/next'
Arne Fitzenreiter [Sat, 29 Aug 2020 18:12:19 +0000 (18:12 +0000)]
core149: add vim to update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sat, 29 Aug 2020 15:13:58 +0000 (17:13 +0200)]
vim: update to 8.2 and fix crash with gcc-10
the configure.ac has a bug that detects gcc-10 as gcc-1 and so not use
some quirks. Also there is a bug with FORTIFY-SOURCE=2 that crash
if the matchparen plugin is used (enabled by default).
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 26 Aug 2020 13:58:02 +0000 (13:58 +0000)]
core149: add files to exclude from older updates
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 26 Aug 2020 13:50:50 +0000 (13:50 +0000)]
Merge branch 'next'
Stefan Schantl [Tue, 25 Aug 2020 18:46:56 +0000 (20:46 +0200)]
Core 148: Exclude location related settings files.
This prevents from overwriting existing files, with empty ones
and finally to lose the stored settings.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Stefan Schantl [Tue, 25 Aug 2020 18:46:56 +0000 (20:46 +0200)]
Core 148: Exclude location related settings files.
This prevents from overwriting existing files, with empty ones
and finally to lose the stored settings.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Mon, 24 Aug 2020 09:48:36 +0000 (09:48 +0000)]
core149: Restart squid
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sun, 23 Aug 2020 12:42:58 +0000 (14:42 +0200)]
squid: Update to 4.13
For details see:
http://www.squid-cache.org/Versions/v4/changesets/
and
http://lists.squid-cache.org/pipermail/squid-users/2020-August/022566.html
Fixes (excerpt):
"* SQUID-2020:8 HTTP(S) Request Splitting
(CVE-2020-15811)
This problem is serious because it allows any client, including
browser scripts, to bypass local security and poison the browser
cache and any downstream caches with content from an arbitrary
source.
* SQUID-2020:9 Denial of Service processing Cache Digest Response
(CVE pending allocation)
This problem allows a trusted peer to deliver to perform Denial
of Service by consuming all available CPU cycles on the machine
running Squid when handling a crafted Cache Digest response
message.
* SQUID-2020:10 HTTP(S) Request Smuggling
(CVE-2020-15810)
This problem is serious because it allows any client, including
browser scripts, to bypass local security and poison the proxy
cache and any downstream caches with content from an arbitrary
source.
* Bug 5051: Some collapsed revalidation responses never expire
* SSL-Bump: Support parsing GREASEd (and future) TLS handshakes
* Honor on_unsupported_protocol for intercepted https_port"
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Fri, 21 Aug 2020 09:51:10 +0000 (11:51 +0200)]
smt: Fix check to detect if a system is running virtually
/sys/hypervisor exists when a host has loaded the kvm modules.
Fixes: #12472
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 20 Aug 2020 17:56:03 +0000 (17:56 +0000)]
general-functions.pl: Do not check IPsec subnets for VTI/GRE connections
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 19 Aug 2020 14:08:10 +0000 (16:08 +0200)]
libvirt: Depend on ebtables
libvirtd requires this to create some custom firewall rules
Reported-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 19 Aug 2020 14:08:09 +0000 (16:08 +0200)]
libvirt: Ship all CPU maps
Reported-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 19 Aug 2020 12:12:08 +0000 (12:12 +0000)]
core149: Ship zstd which is now part of the base system
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 19 Aug 2020 12:11:43 +0000 (12:11 +0000)]
zstd: Do not ship libstd.so
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Tue, 18 Aug 2020 15:42:49 +0000 (17:42 +0200)]
rsync: Update to 3.2.3
For details see:
https://download.samba.org/pub/rsync/NEWS#3.2.3
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 19 Aug 2020 11:56:56 +0000 (11:56 +0000)]
core149: Fix typo in apache initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Tue, 18 Aug 2020 15:37:22 +0000 (17:37 +0200)]
zstd 1.4.5: Deleted obsolete files from '/src/paks/'
No longer needed => deleted because of:
https://git.ipfire.org/?p=ipfire-2.x.git;a=commit;h=
c67ff7d72c2232b6994e1ff97277d4040711f97d
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Erik Kapfer [Tue, 18 Aug 2020 14:34:37 +0000 (14:34 +0000)]
tshark: Update to version 3.2.6
The version jump from 3.2.3 to 3.2.6 includes several changes.
3.2.4 includes only bugfixes.
3.2.5 includes bugfixes and updated protocols.
3.2.6 includes also bugfixes and updated protocols.
For a full overview, the release notes can be found in here -->
https://www.wireshark.org/docs/relnotes/ .
Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Mon, 17 Aug 2020 19:30:21 +0000 (19:30 +0000)]
Postfix: update to 3.5.6
Please refer to http://www.postfix.org/announcements/postfix-3.5.6.html
for release announcements.
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 18 Aug 2020 10:13:01 +0000 (10:13 +0000)]
zstd: Make this part of the core distributions
Many packages link against it and we should make use of it
when we have it.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 18 Aug 2020 10:11:33 +0000 (10:11 +0000)]
qemu: Update rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 18 Aug 2020 10:10:13 +0000 (10:10 +0000)]
rsync: Update rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 17 Aug 2020 17:55:55 +0000 (17:55 +0000)]
core149: Ship popt
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sun, 28 Jun 2020 07:36:33 +0000 (09:36 +0200)]
popt: Update to 1.18
Recommended for 'rsync 3.2.1'.
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sun, 28 Jun 2020 07:36:32 +0000 (09:36 +0200)]
rsync: Update to 3.2.1
For details see:
https://download.samba.org/pub/rsync/NEWS#3.2.1
Although 3.2.2 is in "release testing", I decided to push this release now to get things running.
I activated zstd-support and added 'DEPS = zstd'.
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sun, 28 Jun 2020 07:36:31 +0000 (09:36 +0200)]
zstd 1.4.5: New package
This packages adds a "lossless compression algorithm" - supported by 'rsync 3.2.1'.
For details see:
https://github.com/facebook/zstd/releases/tag/v1.4.5
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sat, 4 Jul 2020 23:04:51 +0000 (01:04 +0200)]
qemu: Update to 5.0.0
For details see:
https://wiki.qemu.org/ChangeLog/5.0
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sat, 4 Jul 2020 23:04:50 +0000 (01:04 +0200)]
usbredir: Update to 0.8.0
For details see:
https://gitlab.freedesktop.org/spice/usbredir/-/blob/master/ChangeLog
"-Source code and bug tracker hosted in Freedesktop's instance of Gitlab
-https://gitlab.freedesktop.org/spice/usbredir
-usbredirfilter
-Fix busy wait due endless recursion when interface_count is zero
-usbredirhost:
-Fix leak on error
-usbredirserver:
-Use 'busnum-devnum' instead of 'usbbus-usbaddr'
-Add support for bind specific address -4 for ipv4, -6 for ipv6
-Reject empty vendorid from command line
-Enable TCP keepalive"
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>