ipfire-2.x.git
3 years agoMerge branch 'next' into initscripts-cleanup
Jonatan Schlag [Fri, 3 Mar 2017 13:56:35 +0000 (14:56 +0100)] 
Merge branch 'next' into initscripts-cleanup

3 years agoBUG11296: Fix build on EFI systems
Alexander Marx [Fri, 3 Mar 2017 09:40:41 +0000 (10:40 +0100)] 
BUG11296: Fix build on EFI systems

fixes: #11296

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agosslh: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Wed, 1 Mar 2017 12:13:36 +0000 (13:13 +0100)] 
sslh: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agompd: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Wed, 1 Mar 2017 12:11:59 +0000 (13:11 +0100)] 
mpd: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agospamassassin: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Wed, 1 Mar 2017 12:10:24 +0000 (13:10 +0100)] 
spamassassin: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agolcr: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Wed, 1 Mar 2017 12:08:43 +0000 (13:08 +0100)] 
lcr: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agofetchmail: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Wed, 1 Mar 2017 12:06:52 +0000 (13:06 +0100)] 
fetchmail: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agortpproxy: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Wed, 1 Mar 2017 12:05:55 +0000 (13:05 +0100)] 
rtpproxy: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agotftpd: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Wed, 1 Mar 2017 12:04:36 +0000 (13:04 +0100)] 
tftpd: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agocore110: Ship updated lm_sensors
Michael Tremer [Tue, 28 Feb 2017 14:03:40 +0000 (14:03 +0000)] 
core110: Ship updated lm_sensors

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agolm_sensors: Update to 3.4.0
Matthias Fischer [Tue, 28 Feb 2017 13:06:28 +0000 (14:06 +0100)] 
lm_sensors: Update to 3.4.0

For details see:
https://github.com/groeck/lm-sensors/blob/master/CHANGES

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoapache: Allow more processes/connections as the same time
Michael Tremer [Tue, 28 Feb 2017 11:32:08 +0000 (11:32 +0000)] 
apache: Allow more processes/connections as the same time

In large networks, when ever multiple clients connect at the
same time and request the proxy.pac configuration file, apache
rate-limited requests so that some clients did not get a response
and therefore could not connect to the Internet.

This allows apache to handle more connections at the same time.

Suggested-by: Thoralf Söldenwagner <soeldenwagner@brecht-schule.hamburg>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoDNS: Fall back to permissive mode if recursor mode is unavailable
Michael Tremer [Mon, 27 Feb 2017 21:38:03 +0000 (21:38 +0000)] 
DNS: Fall back to permissive mode if recursor mode is unavailable

The tests when assigning DNS name servers has been extended so that
if no working forwarder can be found, we will test if the local recursor
mode is an option.

If not, we will configure unbound's validator module into permissive
mode so that at least some DNS functionality is available.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoStart Core Update 110
Michael Tremer [Mon, 27 Feb 2017 15:00:46 +0000 (15:00 +0000)] 
Start Core Update 110

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoopenssh: Update to 7.4p1
Michael Tremer [Mon, 27 Feb 2017 12:09:15 +0000 (12:09 +0000)] 
openssh: Update to 7.4p1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoRootfile updates
Michael Tremer [Sat, 25 Feb 2017 16:33:56 +0000 (16:33 +0000)] 
Rootfile updates

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoavahi: Update to 0.6.32
Michael Tremer [Sat, 25 Feb 2017 15:45:52 +0000 (15:45 +0000)] 
avahi: Update to 0.6.32

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoghostscript: Update to 9.20
Michael Tremer [Sat, 25 Feb 2017 15:43:31 +0000 (15:43 +0000)] 
ghostscript: Update to 9.20

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agocups: Use avahi and DBUS
Michael Tremer [Sat, 25 Feb 2017 15:37:29 +0000 (15:37 +0000)] 
cups: Use avahi and DBUS

These services are quite handy to make the printing
capabilities available to the network.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agounbound depends on expat
Michael Tremer [Sat, 25 Feb 2017 14:56:43 +0000 (14:56 +0000)] 
unbound depends on expat

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agopostfix: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Sat, 25 Feb 2017 14:54:55 +0000 (15:54 +0100)] 
postfix: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agoclient175: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Sat, 25 Feb 2017 14:49:07 +0000 (15:49 +0100)] 
client175: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agoamavisd: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Sat, 25 Feb 2017 14:46:58 +0000 (15:46 +0100)] 
amavisd: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agognutls: New package
Michael Tremer [Sat, 25 Feb 2017 14:04:37 +0000 (14:04 +0000)] 
gnutls: New package

Another TLS library that is required by CUPS for SSL support

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoepson-inkjet-printer-escpr: Update to 1.6.12
Michael Tremer [Sat, 25 Feb 2017 13:41:24 +0000 (13:41 +0000)] 
epson-inkjet-printer-escpr: Update to 1.6.12

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agox86_64: Ship libssp.so as on all other architectures, too
Michael Tremer [Sat, 25 Feb 2017 12:56:05 +0000 (12:56 +0000)] 
x86_64: Ship libssp.so as on all other architectures, too

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agostunnel: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Sat, 25 Feb 2017 12:02:41 +0000 (13:02 +0100)] 
stunnel: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agocpufrequtils: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Sat, 25 Feb 2017 12:01:08 +0000 (13:01 +0100)] 
cpufrequtils: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agomotion: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Sat, 25 Feb 2017 11:59:40 +0000 (12:59 +0100)] 
motion: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agoMerge branch 'next' into initscripts-cleanup
Jonatan Schlag [Sat, 25 Feb 2017 11:58:27 +0000 (12:58 +0100)] 
Merge branch 'next' into initscripts-cleanup

3 years agoVarious rootfile fixes
Michael Tremer [Fri, 24 Feb 2017 20:09:03 +0000 (20:09 +0000)] 
Various rootfile fixes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoUpdate CUPS to 2.2.2
Michael Tremer [Fri, 24 Feb 2017 20:06:01 +0000 (20:06 +0000)] 
Update CUPS to 2.2.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agopound: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Fri, 24 Feb 2017 18:12:22 +0000 (19:12 +0100)] 
pound: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agotransmission: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Fri, 24 Feb 2017 18:11:00 +0000 (19:11 +0100)] 
transmission: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agoapcupsd: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Fri, 24 Feb 2017 14:58:01 +0000 (15:58 +0100)] 
apcupsd: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agosane: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Fri, 24 Feb 2017 14:56:38 +0000 (15:56 +0100)] 
sane: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agonut: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Fri, 24 Feb 2017 14:55:05 +0000 (15:55 +0100)] 
nut: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agosamba: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Fri, 24 Feb 2017 14:54:19 +0000 (15:54 +0100)] 
samba: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agomysql: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Fri, 24 Feb 2017 11:16:35 +0000 (12:16 +0100)] 
mysql: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agokeepalived: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Fri, 24 Feb 2017 11:15:23 +0000 (12:15 +0100)] 
keepalived: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agohaproxy: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Fri, 24 Feb 2017 11:14:18 +0000 (12:14 +0100)] 
haproxy: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agobluetooth: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Fri, 24 Feb 2017 11:12:52 +0000 (12:12 +0100)] 
bluetooth: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agodnsdist: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Fri, 24 Feb 2017 11:11:53 +0000 (12:11 +0100)] 
dnsdist: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agounbound: Update to 1.6.1
Matthias Fischer [Wed, 22 Feb 2017 17:39:40 +0000 (18:39 +0100)] 
unbound: Update to 1.6.1

For details see:
http://www.unbound.net/download.html

"Features

    configure --enable-systemd and lets unbound use systemd sockets if you enable use-systemd:
    yes in unbound.conf. Also there are contrib/unbound.socket and contrib/unbound.service:
    systemd files for unbound, install them in /usr/lib/systemd/system. Contributed by Sami Kerola
    and Pavel Odintsov.
    [bugzilla: 1185 ]
    Source IP rate limiting, patch from Larissa Feng.
    [bugzilla: 1184 ]
    Log DNS replies. This includes the same logging information that DNS queries and response
    code and response size, patch from Larissa Feng.
    Include root trust anchor id 20326 in unbound-anchor.
    64bit is default for windows builds.

Bug Fixes

    [bugzilla: 1176 ] Fix stack size too small for Alpine Linux.
    Fix unbound-control and ipv6 only.
    [bugzilla: 1182 ] Fix Resource leak (socket), at startup.
    [bugzilla: 1178 ] Fix attempt to fix setup error at end, pop result values at end of install.
    iana portlist update
    Fix inet_ntop and inet_pton warnings in windows compile.
    [bugzilla: 1191 ] Fix remove comment about view deletion.
    [bugzilla: 1188 ] Fix unresolved symbol 'fake_dsa' in libunbound.so when built with Nettle
    [bugzilla: 1190 ] Fix to not echo back EDNS options in local-zone error response.
    [bugzilla: 1194 ] Fix if cross build fails when $host isn't `uname` for getentropy.
    Fix reload chdir failure when also chrooted to that directory.
    Fix to return formerr for queries for meta-types, to avoid packet amplification if this meta-type
    is sent on to upstream.
    [bugzilla: 1201 ] Fix missing unlock in answer_from_cache error condition.
    [bugzilla: 1202 ] Fix code comment that packed_rrset_data is not always 'packed'.
    Fix to also block meta types 128 through to 248 with formerr.
    [bugzilla: 1206 ] Fix that some view-related commands are missing from 'unbound-control -h'
    Fix to rename ub_callback_t to ub_callback_type, because POSIX reserves _t typedefs.
    Fix to rename internally used types from _t to _type, because _t type names are reserved by
    POSIX.
    Increase MAX_MODULE to 16.
    [bugzilla: 1211 ] Fix can't enable interface-automatic if no IPv6 with more helpful error message.
    fix root_anchor test for updated icannbundle.pem lower certificates.
    Fix compile on solaris of the fix to use $host detect.
    Fix for type name change and fix warning on windows compile.
    Fix pythonmod for typedef changes.
    Fix dnstap for warning of set but not used.
    Fix autoconf of systemd check for lack of pkg-config."

Best, Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoasterisk: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Thu, 23 Feb 2017 13:32:08 +0000 (14:32 +0100)] 
asterisk: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agoguardian: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Thu, 23 Feb 2017 13:25:06 +0000 (14:25 +0100)] 
guardian: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agorpcbind: move initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Thu, 23 Feb 2017 13:23:22 +0000 (14:23 +0100)] 
rpcbind: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agoopenvmtools: move initscripts to src/initscripts/packages and use new macro
Jonatan Schlag [Thu, 23 Feb 2017 13:21:57 +0000 (14:21 +0100)] 
openvmtools: move initscripts to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agoxinetd: move initscripts to src/initscripts/packages and use new macro
Jonatan Schlag [Wed, 22 Feb 2017 18:51:26 +0000 (19:51 +0100)] 
xinetd: move initscripts to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agofreeradius: move initscripts to src/initscripts/packages and use new macro
Jonatan Schlag [Wed, 22 Feb 2017 18:50:13 +0000 (19:50 +0100)] 
freeradius: move initscripts to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agotor: move initscripts to src/initscripts/packages and use new macro
Jonatan Schlag [Wed, 22 Feb 2017 18:48:38 +0000 (19:48 +0100)] 
tor: move initscripts to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agoclamav: move initscripts to src/initscripts/packages and use new macro
Jonatan Schlag [Wed, 22 Feb 2017 16:37:23 +0000 (17:37 +0100)] 
clamav: move initscripts to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agonfs: move initscripts to src/initscripts/packages and use new macro
Jonatan Schlag [Wed, 22 Feb 2017 15:15:06 +0000 (16:15 +0100)] 
nfs: move initscripts to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agowatchdog: move initscripts to src/initscripts/packages and use new macro
Jonatan Schlag [Wed, 22 Feb 2017 15:11:57 +0000 (16:11 +0100)] 
watchdog: move initscripts to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agoLibvirt: move initscripts to src/initscripts/packages and use new macro
Jonatan Schlag [Wed, 22 Feb 2017 12:16:12 +0000 (13:16 +0100)] 
Libvirt: move initscripts to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agoMove initscript to src/initscripts/packages and use new macro
Jonatan Schlag [Wed, 22 Feb 2017 12:13:49 +0000 (13:13 +0100)] 
Move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agoInstall initscript with the new macro
Jonatan Schlag [Wed, 22 Feb 2017 11:26:54 +0000 (12:26 +0100)] 
Install initscript with the new macro

- Move the cups initscript to src/initscripts/packages

3 years agoAdd new make macro for installing initscripts
Jonatan Schlag [Wed, 22 Feb 2017 11:20:09 +0000 (12:20 +0100)] 
Add new make macro for installing initscripts

We also move the initscript for also to src/initscripts/packages
and use this new macro to install the initscript
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agoMove network initscripts to src/initscripts/networking
Jonatan Schlag [Wed, 22 Feb 2017 10:57:20 +0000 (11:57 +0100)] 
Move network initscripts to src/initscripts/networking

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agoMove all initscripts for the system to src/initscripts/system
Jonatan Schlag [Wed, 22 Feb 2017 10:54:00 +0000 (11:54 +0100)] 
Move all initscripts for the system to src/initscripts/system

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agoMove the initscript of the hostapd package into the packages directory
Jonatan Schlag [Wed, 22 Feb 2017 10:24:00 +0000 (11:24 +0100)] 
Move the initscript of the hostapd package into the packages directory

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agoMove the initscripts of the libvirt package into the packages directory
Jonatan Schlag [Wed, 22 Feb 2017 10:21:17 +0000 (11:21 +0100)] 
Move the initscripts of the libvirt package into the packages directory

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agoMove the initscript of the cups package into the packages directory
Jonatan Schlag [Wed, 22 Feb 2017 10:18:36 +0000 (11:18 +0100)] 
Move the initscript of the cups package into the packages directory

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agoMove all Initscripts of the system, into an extra directory
Jonatan Schlag [Wed, 22 Feb 2017 09:23:10 +0000 (10:23 +0100)] 
Move all Initscripts of the system, into an extra directory

Till now all init scripts going into src/initscripts/init.d so they are
installed by the lfs file initscripts. Because of that they also appear
in the rootfile of the "package" initscripts.

This has some disadvantages:
- the initscripts of the packages appear in the 3 rootfiles (one for
each arch) which are annoying because for every package with an
initscript 4 rootfiles (the 3 of the initscript package + the rootfile
of the package) are important.
- The rootfiles for a package are installed by lfs/initscripts but this
should happen only in the build of the package

To solve this issues all rootfiles for the core system are moved into
src/initscripts/init.d/common. Only the initscript in this directory are
installed by lfs/initscripts. So all initscripts for packages are
located in src/initscripts/init.d and are not installed by
lfs/initscripts.
So only the initscripts of the system appear in the 3 rootfiles of the
initscripts package. The initscript of a package appear only in the
rootfile of the package. This makes the maintaining of initscript
easier.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
3 years agocups: Depend on cups-filters
Michael Tremer [Wed, 22 Feb 2017 09:18:43 +0000 (09:18 +0000)] 
cups: Depend on cups-filters

Without the filters package, CUPS is faily useless

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agocups-filters: New package
Michael Tremer [Wed, 22 Feb 2017 09:17:36 +0000 (09:17 +0000)] 
cups-filters: New package

Allows CUPS to process input data (e.g. PDF documents and/or images)
and convert them into the correct format to be printed

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agopoppler: New package
Michael Tremer [Wed, 22 Feb 2017 09:16:09 +0000 (09:16 +0000)] 
poppler: New package

PDF rendering library

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoqpdf: New package
Michael Tremer [Wed, 22 Feb 2017 09:14:22 +0000 (09:14 +0000)] 
qpdf: New package

PDF rendering library

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agolcms2: New package
Michael Tremer [Wed, 22 Feb 2017 09:12:35 +0000 (09:12 +0000)] 
lcms2: New package

Image processing library

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoepson-inkjet-printer-escpr: New package
Michael Tremer [Wed, 22 Feb 2017 09:11:11 +0000 (09:11 +0000)] 
epson-inkjet-printer-escpr: New package

Supports plenty of EPSON printers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoBuild avahi before CUPS so that CUPS can depend on it
Michael Tremer [Wed, 22 Feb 2017 09:10:14 +0000 (09:10 +0000)] 
Build avahi before CUPS so that CUPS can depend on it

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agocairo: Update to 1.14.8
Michael Tremer [Wed, 22 Feb 2017 09:02:41 +0000 (09:02 +0000)] 
cairo: Update to 1.14.8

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agofontconfig: Update to 2.12.1
Michael Tremer [Wed, 22 Feb 2017 09:02:04 +0000 (09:02 +0000)] 
fontconfig: Update to 2.12.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agofreetype: Update to 2.7.1
Michael Tremer [Wed, 22 Feb 2017 08:59:18 +0000 (08:59 +0000)] 
freetype: Update to 2.7.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agopixman: Update to 0.34.0
Michael Tremer [Wed, 22 Feb 2017 08:57:49 +0000 (08:57 +0000)] 
pixman: Update to 0.34.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agosquid 3.5.24: latest patch (14142)
Matthias Fischer [Sat, 11 Feb 2017 14:39:26 +0000 (15:39 +0100)] 
squid 3.5.24: latest patch (14142)

(Fixed: wrong squid version from previous commit)

"Bump SSL client on [more] errors encountered before ssl_bump evaluation"

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoShow better connection information for on-demand IPsec connections
Michael Tremer [Wed, 15 Feb 2017 12:15:42 +0000 (12:15 +0000)] 
Show better connection information for on-demand IPsec connections

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoIPsec: Close on-demand tunnels after 15 min of inactivity
Michael Tremer [Wed, 15 Feb 2017 11:22:27 +0000 (11:22 +0000)] 
IPsec: Close on-demand tunnels after 15 min of inactivity

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoIPsec: Allow to create on-demand connections
Michael Tremer [Wed, 15 Feb 2017 10:11:58 +0000 (10:11 +0000)] 
IPsec: Allow to create on-demand connections

This will create IPsec VPN connections with auto=route set
instead of auto=start which will cause the connection being
created, but not brought up yet.

As soon as the first packet is received, the connection will
be established and data will be passed through it.

This allows IPFire to handle more VPN connections on weaker
systems and avoids negotiating many connections which are
rarely used.

Suggested-by: Tom Rymes <tomvend@rymes.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Fixes: #10733

3 years agowget: Update to 1.19.1
Matthias Fischer [Tue, 14 Feb 2017 17:45:43 +0000 (18:45 +0100)] 
wget: Update to 1.19.1

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agobind: Update to 9.11.0-P3
Matthias Fischer [Fri, 10 Feb 2017 21:44:58 +0000 (22:44 +0100)] 
bind: Update to 9.11.0-P3

For details see:
https://ftp.isc.org/isc/bind9/9.11.0-P3/RELEASE-NOTES-bind-9.11.0-P3.html

"BIND 9.11.0-P3 addresses the security issue described in CVE-2017-3135,
and fixes a regression introduced in a prior security release.

BIND 9.11.0-P2 addresses the security issues described in CVE-2016-9131,
CVE-2016-9147, CVE-2016-9444 and CVE-2016-9778.

BIND 9.11.0-P1 addresses the security issue described in CVE-2016-8864.

...

Security Fixes

If a server is configured with a response policy zone (RPZ) that rewrites an
answer with local data, and is also configured for DNS64 address mapping, a
NULL pointer can be read triggering a server crash. This flaw is disclosed in
CVE-2017-3135. [RT #44434]

A coding error in the nxdomain-redirect feature could lead to an assertion
failure if the redirection namespace was served from a local authoritative
data source such as a local zone or a DLZ instead of via recursive lookup.
This flaw is disclosed in CVE-2016-9778. [RT #43837]

named could mishandle authority sections with missing RRSIGs, triggering an
assertion failure. This flaw is disclosed in CVE-2016-9444. [RT #43632]

named mishandled some responses where covering RRSIG records were returned
without the requested data, resulting in an assertion failure. This flaw is
disclosed in CVE-2016-9147.
[RT #43548]

named incorrectly tried to cache TKEY records which could trigger an assertion
failure when there was a class mismatch. This flaw is disclosed in CVE-2016-9131.
[RT #43522]

It was possible to trigger assertions when processing responses containing answers
of type DNAME. This flaw is disclosed in CVE-2016-8864. [RT #43465]"

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoTypo in it.pl
Gabriel Rolland [Tue, 7 Feb 2017 10:44:05 +0000 (11:44 +0100)] 
Typo in it.pl

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoTranslation fixes in it.pl
Gabriel Rolland [Tue, 7 Feb 2017 11:17:12 +0000 (12:17 +0100)] 
Translation fixes in it.pl

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoBUG11271 / GeoIP: Download GeoIP database via HTTPS
Matthias Fischer [Sat, 4 Feb 2017 10:23:26 +0000 (11:23 +0100)] 
BUG11271 / GeoIP: Download GeoIP database via HTTPS

For details see:
https://bugzilla.ipfire.org/show_bug.cgi?id=11271

Download GEoIP database per HTTPS download.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoBUG10972: Typo in 'de.pl'
Matthias Fischer [Sat, 4 Feb 2017 10:59:58 +0000 (11:59 +0100)] 
BUG10972: Typo in 'de.pl'

Second try... ;-)
First: "Submitted by IT Superhack on Dec. 18, 2015, 5:48 p.m."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Timmothy Wilson <itsuperhack@web.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoBUG11284: Typo in 'it.pl'
Matthias Fischer [Sat, 4 Feb 2017 10:31:58 +0000 (11:31 +0100)] 
BUG11284: Typo in 'it.pl'

"On line 2380
'urlfilter configuration' => 'Configurazione filttri per URL'

must be corrected in
'urlfilter configuration' => 'Configurazione filtri per URL'"

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agowget: Update to 1.19
Matthias Fischer [Fri, 3 Feb 2017 17:13:29 +0000 (18:13 +0100)] 
wget: Update to 1.19

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agotcpdump: Update to 4.9.0
Matthias Fischer [Fri, 3 Feb 2017 16:41:13 +0000 (17:41 +0100)] 
tcpdump: Update to 4.9.0

For details see:
http://www.tcpdump.org/tcpdump-changes.txt

Removed unrecognized options: --disable-nls

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agocore109: finish update
Arne Fitzenreiter [Wed, 1 Feb 2017 21:34:53 +0000 (22:34 +0100)] 
core109: finish update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agonewt: fix rootfile
Arne Fitzenreiter [Wed, 1 Feb 2017 09:29:27 +0000 (10:29 +0100)] 
newt: fix rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agoinitscripts: fix arm rootfile
Arne Fitzenreiter [Wed, 1 Feb 2017 09:25:44 +0000 (10:25 +0100)] 
initscripts: fix arm rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agopython3: fix rootfile for arm
Arne Fitzenreiter [Tue, 31 Jan 2017 17:21:05 +0000 (18:21 +0100)] 
python3: fix rootfile for arm

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agocore109: Ship updated sysklogd
Michael Tremer [Sun, 29 Jan 2017 19:33:29 +0000 (19:33 +0000)] 
core109: Ship updated sysklogd

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agosysklogd: Update to 1.5.1
Matthias Fischer [Sun, 29 Jan 2017 13:37:43 +0000 (14:37 +0100)] 
sysklogd: Update to 1.5.1

...and now to something completely different... ;-)

Changelog:

- Bugfix against invalid PRI values (CVE-2014-3634)

CVE-2014-3634:
"...sysklogd 1.5 and earlier allows remote attackers to cause a
denial of service (crash), possibly execute arbitrary code,
or have other unspecified impact via a crafted priority (PRI)
value that triggers an out-of-bounds array access."

Nothing good for a firewall...and besides, 'sysklogd' wasn't updated since 2010.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agocore109: Ship updated libpcap
Michael Tremer [Sun, 29 Jan 2017 19:28:39 +0000 (19:28 +0000)] 
core109: Ship updated libpcap

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agosquid: Update to 3.5.24
Matthias Fischer [Sat, 28 Jan 2017 22:31:50 +0000 (23:31 +0100)] 
squid: Update to 3.5.24

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agotcpdump: Update to 4.8.1
Matthias Fischer [Sat, 28 Jan 2017 18:05:01 +0000 (19:05 +0100)] 
tcpdump: Update to 4.8.1

Change log:

Tuesday October 25, 2016 mcr@sandelman.ca
  Summary for 4.8.1 tcpdump release
  Fix "-x" for Apple PKTAP and PPI packets
  Use PRIx64 to print a 64-bit number in hex.
  Printer for HNCP (RFCs 7787 and 7788).
  dagid is always an IPv6 address, not an opaque 128-bit string, and other fixes to RPL printer.
  RSVP: Add bounds and length checks
  OSPF: Do more bounds checking
  Handle OpenSSL 1.1.x.
  Initial support for the REdis Serialization Protocol known as RESP.
  Add printing function for Generic Protocol Extension for VXLAN
      draft-ietf-nvo3-vxlan-gpe-01
  Network Service Header: draft-ietf-sfc-nsh-01
  Don't recompile the filter if the new file has the same DLT.
  Pass an adjusted struct pcap_pkthdr to the sub-printer.
  Add three test cases for already fixed CVEs
      CVE-2014-8767: OLSR
      CVE-2014-8768: Geonet
      CVE-2014-8769: AODV
  Don't do the DDP-over-UDP heuristic first: GitHub issue #499.
  Use the new debugging routines in libpcap.
  Harmonize TCP source or destination ports tests with UDP ones
  Introduce data types to use for integral values in packet structures.
  RSVP: Fix an infinite loop
  Support of Type 3 and Type 4 LISP packets.
  Don't require IPv6 library support in order to support IPv6 addresses.
  Many many changes to support libnetdissect usage.
  Add a test that makes unaligned accesses: GitHub issue #478.
  add a DNSSEC test case: GH #445 and GH #467.
  BGP: add decoding of ADD-PATH capability
    fixes to LLC header printing, and RFC948-style IP packets

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agolibpcap: Update to 1.8.1
Matthias Fischer [Sat, 28 Jan 2017 17:56:08 +0000 (18:56 +0100)] 
libpcap: Update to 1.8.1

Change log:

Tuesday, Oct. 25, 2016 mcr@sandelman.ca
  Summary for 1.8.1 libpcap release
    Add a target in Makefile.in for Exuberant Ctags use: 'extags'.
    Rename configure.in to configure.ac: autoconf 2.59
    Clean up the name-to-DLT mapping  table.
    Add some newer DLT_ values: IPMI_HPM_2,ZWAVE_R1_R2,ZWAVE_R3,WATTSTOPPER_DLM,ISO_14443,RDS
    Clarify what the return values are for both success and failure.
    Many changes to build on windows
    Check for the "break the loop" condition in the inner loop for TPACKET_V3.
    Fix handling of packet count in the TPACKET_V3 inner loop: GitHub issue #493.
    Filter out duplicate looped back CAN frames.
    Fix the handling of loopback filters for IPv6 packets.
    Add a link-layer header type for RDS (IEC 62106) groups.
    Use different intermediate folders for x86 and x64 builds on Windows.
    On Linux, handle all CAN captures with pcap-linux.c, in cooked mode.
    Removes the need for the "host-endian" link-layer header type.
    Compile with '-Wused-but-marked-unused' in devel mode if supported
    Have separate DLTs for big-endian and host-endian SocketCAN headers.
    Reflect version.h being renamed to pcap_version.h.
    Require that version.h be generated: all build procedures we support generate version.h (autoconf, CMake, MSVC)!
    Properly check for sock_recv() errors.
    Re-impose some of Winsock's limitations on sock_recv().
    Replace sprintf() with pcap_snprintf().
    Fix signature of pcap_stats_ex_remote().
    Initial cmake support for remote packet capture.
    Have rpcap_remoteact_getsock() return a SOCKET and supply an "is active" flag.
    Clean up {DAG, Septel, Myricom SNF}-only builds.
    Do UTF-16-to-ASCII conversion into the right place.
    pcap_create_interface() needs the interface name on Linux.
    Clean up hardware time stamp support: the "any" device does not support any time stamp types.
    Add support for capturing on FreeBSD usbusN interfaces.
    Add a LINKTYPE/DLT_ value for FreeBSD USB.
    Go back to using PCAP_API on Windows.
    CMake support
    Add TurboCap support from WinPcap.
    Recognize 802.1ad nested VLAN tag in vlan filter.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agopython3: Fixes for (i586-)rootfile
Matthias Fischer [Sat, 28 Jan 2017 17:39:02 +0000 (18:39 +0100)] 
python3: Fixes for (i586-)rootfile

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoMake Python 3 an add-on package
Michael Tremer [Thu, 26 Jan 2017 20:33:27 +0000 (20:33 +0000)] 
Make Python 3 an add-on package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>