Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

bash: Fix toolchain build again

I am too stupid to get this right

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

BUG11278: It is not possible to create subnets of internal networks in firewallgroups

Fixes: #11278
When creating networks which are part of an internal network, there was an errormessage displayed and the creation was prohibited.
Now it is possible to create such subnets. This is used at own risk! Users have to take care of the firewallrule sequence.
It is possible to create situations that are not wanted.

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Run strip with tools from the host system

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

stripper: Fix for newer versions of file

The output has changed and this patch will now ignore any
additional output.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

stripper: Abort if stripping fails

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libgpg-error: Update to 1.27

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libgcrypt: Update to 1.7.7

For details see:
https://github.com/gpg/libgcrypt/commits/master

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libarchive: update to 3.3.1

https://www.libarchive.org/

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

7zip: update to 16.02

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

grep: update to 2.27

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

gawk: update to 4.1.4

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

remove old bash 3.2 patches

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pkg-config: update to 2.29.2

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bc: update to 1.07.1

https://www.gnu.org/software/bc/

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

flex: update to 2.6.4

https://github.com/westes/flex/releases

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ccache: update to 3.3.4

https://ccache.samba.org/releasenotes.html#_ccache_3_3_4

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Cosmetic fix for 'make-functions'-output

'$LAST_STAGE_TIME'-output got overwritten by the following 'version/options/time/status'-line.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Big rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

u-boot: Fix compile issues with GCC 6

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next

bash: fix symlink in toolchain

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

make.sh: remove display of native gcc

this grep fails on debian and the output is useless

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

ncurses: fix toolchain build

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge branch 'master' into next

make.sh: Fix MAKETUNING

This variable was not passed any more after the toolchain stage
which caused builds to be very slow.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

strongswan: Update to 5.5.3

Has security fixes for CVE-2017-9022 and CVE-2017-9023.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dhcpcd: fix delay after dhcp down.

this also cause a delay with some nic's that cannot set the mtu in up state.
(eg. e1000e)

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

freeradius: Update to 3.0.14

For details see:
http://freeradius.org/press/ (Fixes CVE-2017-9148)

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge remote-tracking branch 'origin/master' into next

Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

cyrus-imapd: Update to 2.5.11

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

finish core111

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

samba: bump package version

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge branch 'core110'

samba 3.6.25: fixes for lfs-file

Removed 'unrecognized' configure-options.

Deleted empty tab at line end and moved line '-mkdir -p /var/ipfire/samba'
because of error message:
'mkdir: cannot create directory ‘/var/ipfire/samba’: File exists'

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

flash-image: Increase size of root partition

This should still be small enough to barely fit on a disk that
can hold 1GB of data. The actual one. Not the one that some
vendors put on it.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

samba 3.6.25: fixes for lfs-file

Removed 'unrecognized' configure-options.

Deleted empty tab at line end and moved line '-mkdir -p /var/ipfire/samba'
because of error message:
'mkdir: cannot create directory ‘/var/ipfire/samba’: File exists'

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Re-enable build of python3-libvirt

This line was dropped by accident in a merge conflict

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'master' of git.ipfire.org:/pub/git/ipfire-2.x

samba: add current RHEL6 patches

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

bash: Correctly create link to /bin/sh

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Fix shutting down unbound when red is STATIC

Unbound was trying to check availability of the upstream name servers
when /var/ipfire/red/active is present. This patch removes it first
and then brings down the red device.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core111: Ship updated openssl

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

openssl: Update to 1.0.2l

This release only contains bug fixes but no security-related fixes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

openssl: Update to 1.0.2l

This release only contains bug fixes but no security-related fixes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update for directfb (x86_64)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

flash-image: Increase size of root partition

This should still be small enough to barely fit on a disk that
can hold 1GB of data. The actual one. Not the one that some
vendors put on it.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Fix environment variables when building file list for core updates

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update for mysql

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Build libevent2-compat again

I don't know how this disappeared but the package was not built
any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Revert "Rootfile update for gdbm"

This reverts commit e5c370d0ba7f9d9722905ce9c05033f88c86879c.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Bump core update release number

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update for gdbm

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update for sudo

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update for fuse

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update for gcc (x86_64)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ncurses: Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update for boost

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update for glibc (x86_64)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

miniupnpd should listen on green0 in default configuration

Resolves issue with message log flodded by denied local clients.
"HTTP peer <ip>:<port> is not from a LAN, closing the connection"
"SSDP packet sender <ip>:<port> not from a LAN, ignoring"

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

imspector: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

openvpn: Update to 2.3.16

Fixes CVE-2017-7479 and CVE-2017-7478

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Disable VDR plugins from being built

These seem to be incompatible with GCC 6 and I do not have time
to sort them out right now.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core111: Ship updated OpenVPN

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

openvpn: Update to 2.3.16

Fixes CVE-2017-7479 and CVE-2017-7478

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Show architecture we are building for

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

SDL: Update to 1.2.15

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

collectd: FTBFS on aarch64

Needed automake update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

binutils: Remove any host optimisations in toolchain's first pass

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Correctly set environment variables in toolchain pass

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

clamav: Import patch to fix build issues with GCC 6

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Build lcms2 before ghostscript

Ghostscript depends on it

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

reiserfsprogs: Update to 3.6.25

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

mdadm: Update to version 4.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Fix wrong function call to setup build environment

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'master' into next

Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Bump toolchain version

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Drop vdr_vnsiserver5

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

directfb: Update to 1.7.7

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ipset: Don't (re-)build kernel module here

The reason why this comes up is that we currently don't build
a kernel for aarch64 and therefore building ipset fails.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dfb++: Drop package

This does not seem to be needed by anything

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

boost: Update to 1.64.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

iftop: Drop package

This is not maintained upstream any more and I cannot get this to build.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

tcpick: Drop package

This FTBFS and is not maintained upstream any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Build autoconf and automake before berkeley

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Drop installmake()

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Drop ipfiremake() which is identical to lfsmake2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

fuse: Update to 2.9.7

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

iperf: Update to 2.0.9

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

crda: Compile fix for newer GCC

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

lcr: Fix compilation with GCC 6

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ghostscript: Delete all bundled libraries

ghostscript ships a number of bundled libraries
that is needs to be build and at runtime.

This patch removes them all which causes ghostcript
to automatically fall back to the libraries installed
in the system.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

linux: Do not build GCC plugins

Our version of GCC has plugins enabled and built but for
some reason they are not properly detected.

Hence they are disabled for now.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

perl: Fix Errno.pm generation for GCC >= 5

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libdvbpsi: Fails to build with newer GCC

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

fontconfig: Fix build with glibc >= 2.25

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Drop paxctl

Since the new toolchain the flags are not compiled into the
binaries any more which causes paxctl to fail.

On top of that, PaX and grsecurity won't be available freely
any more which requires us to remove it from the distribution.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>