]>
git.ipfire.org Git - people/jschlag/ipfire-2.x.git/log
Matthias Fischer [Fri, 4 Mar 2016 16:50:54 +0000 (17:50 +0100)]
clamav: Update to 0.99.1
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Fri, 4 Mar 2016 07:12:00 +0000 (08:12 +0100)]
pciutils: update to 3.4.1
Update pciutils to last version from Linux from Scratch.
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Thu, 3 Mar 2016 18:23:18 +0000 (19:23 +0100)]
texinfo: update to 5.2
Update texinfo to version 5.2 from linux from scratch
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Wed, 9 Mar 2016 06:40:25 +0000 (07:40 +0100)]
paxctl: update to 0.9
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Wed, 9 Mar 2016 06:29:48 +0000 (07:29 +0100)]
mpfr: update to 3.1.3
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Wed, 9 Mar 2016 06:36:18 +0000 (07:36 +0100)]
gmp: update to 6.0.1
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Thu, 10 Mar 2016 06:24:52 +0000 (07:24 +0100)]
htop: update to verion 2.0.1
With ncurses 6.0, htop will also support your mouse wheel for scrolling
I tried it... :) very nice tool...
http://hisham.hm/htop/
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Thu, 17 Mar 2016 14:12:29 +0000 (15:12 +0100)]
nettle: update to 3.2
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Sun, 20 Mar 2016 08:36:33 +0000 (09:36 +0100)]
set version to IPFire 2.19 core100
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sat, 19 Mar 2016 20:56:30 +0000 (21:56 +0100)]
core100: add changes to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sat, 19 Mar 2016 11:54:12 +0000 (12:54 +0100)]
mt7601u-firmware: added
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sat, 19 Mar 2016 11:46:38 +0000 (12:46 +0100)]
ath10k-firmware: added
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Fri, 18 Mar 2016 18:26:39 +0000 (19:26 +0100)]
ntp: wait for connection if dhcpcd is running
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 17 Mar 2016 22:04:54 +0000 (23:04 +0100)]
Config: update sourcecode upload url
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 17 Mar 2016 22:00:46 +0000 (23:00 +0100)]
kernel: update to 3.14.65
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 16 Mar 2016 22:05:06 +0000 (23:05 +0100)]
linux-pae: add root (hd0) to grub.conf for virt install.
jiffybox will not load the kernel without this entry.
not tested on citrix yet.
Arne Fitzenreiter [Wed, 16 Mar 2016 21:58:21 +0000 (22:58 +0100)]
u-boot: fix fat16 reader
Arne Fitzenreiter [Mon, 14 Mar 2016 17:34:45 +0000 (18:34 +0100)]
core100: touch arm kernel and initrd before unpack.
this is a workaround for a uboot bug that not find all
files.
Arne Fitzenreiter [Mon, 14 Mar 2016 17:04:38 +0000 (18:04 +0100)]
kernel: enable NFS_DEBUG
fixes #11053
Arne Fitzenreiter [Thu, 10 Mar 2016 21:29:02 +0000 (22:29 +0100)]
kernel: update to 3.14.64
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Thu, 10 Mar 2016 19:22:04 +0000 (19:22 +0000)]
setup: Fix segmentation fault with more than four NICs found
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 8 Mar 2016 22:45:04 +0000 (22:45 +0000)]
Merge branch 'bird' into next
Michael Tremer [Tue, 8 Mar 2016 22:44:01 +0000 (22:44 +0000)]
bird: New package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Tue, 8 Mar 2016 20:32:29 +0000 (21:32 +0100)]
core100: add missing openssl rootfile to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Tue, 8 Mar 2016 19:29:59 +0000 (20:29 +0100)]
core100: ship openssl (build with new gcc)
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Tue, 8 Mar 2016 19:28:12 +0000 (20:28 +0100)]
core100: ship glibc (build with new gcc)
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Tue, 8 Mar 2016 19:01:49 +0000 (20:01 +0100)]
core100: add kernel to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Tue, 8 Mar 2016 18:31:49 +0000 (19:31 +0100)]
core100: add function to set last correct installed core on update.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sat, 5 Mar 2016 16:09:32 +0000 (17:09 +0100)]
kernel: update to 3.14.63
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sat, 5 Mar 2016 16:07:23 +0000 (17:07 +0100)]
flash-images: copy kernel and initrd first
there is a u-boot bug that not find all files if the directory entries
was splittet to more sectors so copy the important files first.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Fri, 4 Mar 2016 06:09:02 +0000 (07:09 +0100)]
Merge remote-tracking branch 'origin/master' into next
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 3 Mar 2016 07:38:27 +0000 (08:38 +0100)]
openssl: add forgotten sslv2 compile option
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 2 Mar 2016 20:31:07 +0000 (21:31 +0100)]
openssl: compile with sslv2 support but disable
the new default breaks the ABI so we need to compile in but
disable it with a patch.
Arne Fitzenreiter [Wed, 2 Mar 2016 20:13:31 +0000 (21:13 +0100)]
Revert "python-m2crypto: remove SSLv2_method"
This reverts commit
d86a24928625c47d46d17daad18f159d28678ee4 .
Arne Fitzenreiter [Tue, 1 Mar 2016 21:50:53 +0000 (22:50 +0100)]
OpenSSH: remove slogin binary in rootfile and update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Tue, 1 Mar 2016 21:25:55 +0000 (22:25 +0100)]
python-m2crypto: remove SSLv2_method
this is removed by OpenSSL 1.0.2g
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Tue, 1 Mar 2016 15:02:50 +0000 (16:02 +0100)]
core99: set version to 99
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Tue, 1 Mar 2016 15:00:19 +0000 (16:00 +0100)]
openssl: security update to 1.0.2g
this fixes diverse security problems.
check http://openssl.org/news/secadv/
20160301 .txt for details.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Tue, 1 Mar 2016 14:59:34 +0000 (15:59 +0100)]
openssh: update to 7.2p1
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Mon, 29 Feb 2016 20:53:41 +0000 (21:53 +0100)]
backup: fix vnstat path
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Mon, 29 Feb 2016 20:47:05 +0000 (21:47 +0100)]
core99: create core99 for OpenSSL security update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Sun, 28 Feb 2016 20:27:06 +0000 (12:27 -0800)]
udev: Fix calling VLAN script
The VLAN hotplugging script was called with a wrong parameter that
should just be used to rename devices. Hence the script was not
correctly executed and did not create the virtual devices.
Fixes: #11009
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sat, 27 Feb 2016 15:29:45 +0000 (16:29 +0100)]
dnsmasq: 2.76test10 with latest patch (005) and some fixes
1. Added patch 005 because of the discussion on the dnsmasq-list:
"I've noticed that replies which get their TTL from the dhcp-ttl
option always get the TTL specified in dhcp-ttl. I'd prefer
something like max(0, min(<dhcp-ttl>, <lease-expire-time> -
<now>)). Otherwise, dns might hand out a high TTL for a dhcp-lease
which expires one second later.
...
Seems a sensible addition.
Cheers,
Simon."
2. Fixed several line numbers and patch lines in
'dnsmasq-Add-support-to-read-ISC-DHCP-lease-file.patch'. On the last build
I got some "Hunk failed" messages. Patches are now applied exactly at the
given lines.
3. Nevertheless, I still get some warnings:
...
dnsmasq.c: In function 'main':
dnsmasq.c:55:7: warning: unused variable 'did_bind' [-Wunused-variable]
int did_bind = 0;
^
dnsmasq.c:54:9: warning: unused variable 'bound_device' [-Wunused-variable]
char *bound_device = NULL;
^
...
isc.c: In function 'dhcp_lease_new':
isc.c:40:3: warning: ignoring return value of 'asprintf', declared with attribute warn_unused_result [-Wunused-result]
asprintf(&lease->fqdn, "%s.%s", hostname, daemon->domain_suffix);
^
Asking about these warnings in the dnsmasq-list showed no reaction - no one answered.
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Fri, 26 Feb 2016 17:29:28 +0000 (18:29 +0100)]
dnsmasq: 2.76test10 with latest patches (001-004)
This is 'dnsmasq 2.76test10', based on current 'next', containing latest patches.
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Fri, 26 Feb 2016 12:43:33 +0000 (13:43 +0100)]
kernel: update to 3.14.62
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Fri, 26 Feb 2016 06:27:09 +0000 (07:27 +0100)]
rename core99 to core100 for inserting another OpenSSL Security update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Thu, 25 Feb 2016 06:13:36 +0000 (22:13 -0800)]
core99: Ship updated xz
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Tue, 23 Feb 2016 07:49:27 +0000 (08:49 +0100)]
bison: update to 3.0.4
Update bison to the last version from Linux from Scratch.
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Tue, 23 Feb 2016 08:37:28 +0000 (09:37 +0100)]
xz: update to 5.2.2
Update xz to last version from Linux from Scratch.
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Tue, 23 Feb 2016 07:46:23 +0000 (08:46 +0100)]
m4: update to 1.4.17
Update m4 to last version from Linux from Scratch.
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 23 Feb 2016 17:44:40 +0000 (09:44 -0800)]
make.sh: Update source upload URL
There is no longer a SSH service on source.ipfire.org.
The usual login on git.ipfire.org should be used instead.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Wed, 24 Feb 2016 15:01:33 +0000 (16:01 +0100)]
flash-images: change root uuid replacer sed
i cannot really test this on my systems.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Tue, 23 Feb 2016 19:08:25 +0000 (20:08 +0100)]
flash-image: set RAMDISK_MODE=2
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Tue, 23 Feb 2016 19:01:30 +0000 (20:01 +0100)]
init-functions: enable autoramdisk with 400MB
The 512MB raspberry pi reserve some memory for buffers and gpu
so there are a bit less than 490 MB free.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Tue, 23 Feb 2016 18:49:49 +0000 (19:49 +0100)]
flash-image: fix root uuid on some build machines.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Tue, 23 Feb 2016 17:40:31 +0000 (09:40 -0800)]
stunnel: Bump release version
The version on the server seems to be still linked against
the older 0.9.8 series of openssl and needs to be updated
on all systems.
I manually pushed this update for the 2.17 branch on i586.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Fri, 19 Feb 2016 06:18:29 +0000 (07:18 +0100)]
kernel: update to 3.14.61
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 18 Feb 2016 03:31:28 +0000 (04:31 +0100)]
core98: fix typo
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 17 Feb 2016 21:01:56 +0000 (22:01 +0100)]
Merge branch 'core98' of git.ipfire.org:/pub/git/ipfire-2.x into core98
Arne Fitzenreiter [Wed, 17 Feb 2016 20:57:00 +0000 (21:57 +0100)]
core98: remove wrong grub.cfg only if it was empty.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 17 Feb 2016 18:45:08 +0000 (19:45 +0100)]
Merge remote-tracking branch 'origin/master' into next
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Conflicts:
make.sh
Arne Fitzenreiter [Wed, 17 Feb 2016 17:49:38 +0000 (18:49 +0100)]
glibc: disable patches that break build on arm.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 17 Feb 2016 12:52:51 +0000 (13:52 +0100)]
core98: new update with glibc security fixes.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 17 Feb 2016 11:46:11 +0000 (12:46 +0100)]
glibc: new RHEL6 patches / fix CVE-2015-7547 and more
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 17 Feb 2016 09:10:19 +0000 (10:10 +0100)]
rename core98 to 99 for glibc security update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Matthias Fischer [Sat, 13 Feb 2016 07:29:39 +0000 (08:29 +0100)]
squid 3.4.14: Bugfix for #4431 (C code is not compiled with CFLAGS)
For details see: http://bugs.squid-cache.org/show_bug.cgi?id=4431
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Wed, 10 Feb 2016 07:36:17 +0000 (08:36 +0100)]
backports: remove all old media modules.
more modules are renamed or merged into other modules.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Mon, 8 Feb 2016 12:53:13 +0000 (13:53 +0100)]
dracut: remove marvell sdio modules from initrd.
this allows to switch to uap module on dreamplug.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Mon, 8 Feb 2016 01:52:18 +0000 (01:52 +0000)]
core98: Ship changed /etc/ppp/ip-up
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sun, 7 Feb 2016 12:45:32 +0000 (13:45 +0100)]
New IP-address of 'ping.ipfire.org'
Telekom gateways (e.g.) don't answer 'pings', therefor '/etc/ppp/ip-up'
uses 'ping.ipfire.org' for the 'gateway Graph' in 'Status / Network (other'.
After moving the infrastructure, several IP addresses were changed.
'178.63.73.246' doesn't work anymore for 'ping.ipfire.org', its now '81.3.27.38'.
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 8 Feb 2016 01:40:35 +0000 (01:40 +0000)]
core98: Ship recently updated grep and sed
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sun, 31 Jan 2016 13:49:17 +0000 (14:49 +0100)]
grep: Update to 2.22
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sun, 31 Jan 2016 13:44:05 +0000 (14:44 +0100)]
sed: Update to 4.2.2
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 8 Feb 2016 01:33:15 +0000 (01:33 +0000)]
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Sun, 7 Feb 2016 08:38:20 +0000 (09:38 +0100)]
kernel: disable grsecurity KSTACKOVERFLOW.
this is the reason for crashes usb lan dongles and media devices.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Fri, 5 Feb 2016 10:24:03 +0000 (10:24 +0000)]
firewall: Fix MAC filter
Packets destined for the firewall coming in from the blue
device where accepted too early to be processed by the
firewall input chain rules.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 4 Feb 2016 14:35:55 +0000 (14:35 +0000)]
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Michael Tremer [Thu, 4 Feb 2016 14:31:53 +0000 (14:31 +0000)]
wirelessctrl: Remove some unused code
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Mon, 1 Feb 2016 06:28:03 +0000 (07:28 +0100)]
dhcpcd: rework mtu handling on buggy nic's
some nic's loose the carrier after setting new mtu.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Sat, 30 Jan 2016 16:37:21 +0000 (16:37 +0000)]
core98: Ship updated tzdata
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sat, 30 Jan 2016 10:07:46 +0000 (11:07 +0100)]
tzdata: Update to 2016a
Fixes https://bugzilla.ipfire.org/show_bug.cgi?id=11034
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Fri, 29 Jan 2016 13:25:25 +0000 (14:25 +0100)]
kernel: update to 3.14.60
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 28 Jan 2016 21:08:08 +0000 (22:08 +0100)]
set core to 98 and move 97 to oldcore
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 28 Jan 2016 18:29:02 +0000 (19:29 +0100)]
core97: remove some core98 files from update filelist.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 28 Jan 2016 15:20:16 +0000 (16:20 +0100)]
finish core97
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 28 Jan 2016 14:58:46 +0000 (15:58 +0100)]
openssl: security update to 1.0.2f
changes:
* DH small subgroups - CVE-2016-0701
* SSLv2 doesn't block disabled ciphers - CVE-2015-3197
* Reject DH handshakes with parameters shorter than 1024 bits
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 28 Jan 2016 15:20:16 +0000 (16:20 +0100)]
finish core97
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 28 Jan 2016 14:58:46 +0000 (15:58 +0100)]
openssl: security update to 1.0.2f
changes:
* DH small subgroups - CVE-2016-0701
* SSLv2 doesn't block disabled ciphers - CVE-2015-3197
* Reject DH handshakes with parameters shorter than 1024 bits
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 28 Jan 2016 12:24:50 +0000 (13:24 +0100)]
hwdate: update databases
pci.ids: 2016.01.28
usb.ids: 2015.12.17
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 28 Jan 2016 12:08:59 +0000 (13:08 +0100)]
core97: prepare new core97 with openssl and openssh update.
the update itself has to be done...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Fri, 25 Dec 2015 11:45:05 +0000 (12:45 +0100)]
vdr_eepg: fix source download.
the external server has changed the compression so the md5 has changed.
Always use the IPFire server as primary download source.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Matthias Fischer [Fri, 15 Jan 2016 16:43:50 +0000 (17:43 +0100)]
openssh: Update to 7.1p2
Fixes CVE-2016-0777
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Thu, 28 Jan 2016 12:24:50 +0000 (13:24 +0100)]
hwdate: update databases
pci.ids: 2016.01.28
usb.ids: 2015.12.17
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 28 Jan 2016 12:08:59 +0000 (13:08 +0100)]
core97: prepare new core97 with openssl and openssh update.
the update itself has to be done...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 28 Jan 2016 12:03:39 +0000 (13:03 +0100)]
rename core97 to 98 because we have to insert OpenSSL security update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 28 Jan 2016 12:02:09 +0000 (13:02 +0100)]
backports: update to 4.2.6
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Tue, 26 Jan 2016 17:02:00 +0000 (18:02 +0100)]
rsync: update to 3.1.2
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Mon, 25 Jan 2016 19:15:06 +0000 (20:15 +0100)]
kernel: update to 3.14.59
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sat, 23 Jan 2016 14:19:58 +0000 (15:19 +0100)]
core96: don't overwrite grub defaults.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Sat, 23 Jan 2016 01:46:42 +0000 (01:46 +0000)]
squid: Actually make --with-filedescriptors work
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>