ipfire-2.x.git
2 years agoxr819-firmware: add firmware for xradio xr-819 wlan
Arne Fitzenreiter [Sun, 25 Mar 2018 11:27:03 +0000 (13:27 +0200)] 
xr819-firmware: add firmware for xradio xr-819 wlan

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agokernel: updated arm config and image build
Arne Fitzenreiter [Sun, 25 Mar 2018 09:41:20 +0000 (11:41 +0200)] 
kernel: updated arm config and image build

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agoinittab: change tty1 to console
Arne Fitzenreiter [Sat, 24 Mar 2018 12:26:32 +0000 (13:26 +0100)] 
inittab: change tty1 to console

this reduce the differences between tty and scon installations
and make it easier to switch between.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agoswconfig: remove old swconfig utility
Arne Fitzenreiter [Sat, 24 Mar 2018 11:49:10 +0000 (12:49 +0100)] 
swconfig: remove old swconfig utility

this is not compatible with kernel 4.14
todo: replace swconfig calls in initskript

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agorpi-firmware: update to 2018-03-16
Arne Fitzenreiter [Sat, 24 Mar 2018 11:41:57 +0000 (12:41 +0100)] 
rpi-firmware: update to 2018-03-16

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agochecknewlog: don't report u-boot mkimage rootfile.
Arne Fitzenreiter [Sat, 24 Mar 2018 10:41:45 +0000 (11:41 +0100)] 
checknewlog: don't report u-boot mkimage rootfile.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agou-boot: update to 2018.03
Arne Fitzenreiter [Sat, 24 Mar 2018 10:14:24 +0000 (11:14 +0100)] 
u-boot: update to 2018.03

todo: check wandboard version. there are internal changes to merge
the different wandboard images to one and u-boot.imx is not build
anymore. Which file is needed to boot on wandboard?

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agokernel: update to 4.14.29
Arne Fitzenreiter [Thu, 22 Mar 2018 12:16:37 +0000 (13:16 +0100)] 
kernel: update to 4.14.29

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agokernel: update to 4.14.27
Arne Fitzenreiter [Fri, 16 Mar 2018 19:49:22 +0000 (20:49 +0100)] 
kernel: update to 4.14.27

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agokernel: drop rpi config
Arne Fitzenreiter [Fri, 16 Mar 2018 19:48:56 +0000 (20:48 +0100)] 
kernel: drop rpi config

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agokernel: drop rpi kernel
Arne Fitzenreiter [Wed, 14 Mar 2018 18:39:23 +0000 (19:39 +0100)] 
kernel: drop rpi kernel

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agokernel: update to 4.14.26
Arne Fitzenreiter [Tue, 13 Mar 2018 10:37:36 +0000 (11:37 +0100)] 
kernel: update to 4.14.26

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agokernel: update to 4.14.25
Arne Fitzenreiter [Fri, 9 Mar 2018 22:05:06 +0000 (23:05 +0100)] 
kernel: update to 4.14.25

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agokernel: 4.14.23
Arne Fitzenreiter [Wed, 28 Feb 2018 15:20:17 +0000 (16:20 +0100)] 
kernel: 4.14.23

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agokernel: update to 4.14.22
Arne Fitzenreiter [Tue, 27 Feb 2018 14:25:50 +0000 (15:25 +0100)] 
kernel: update to 4.14.22

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agoMerge remote-tracking branch 'origin/core119' into kernel-4.14
Arne Fitzenreiter [Mon, 26 Feb 2018 22:06:45 +0000 (23:06 +0100)] 
Merge remote-tracking branch 'origin/core119' into kernel-4.14

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agompd: bump package to remove link against tcpwrapper
Arne Fitzenreiter [Mon, 26 Feb 2018 19:08:56 +0000 (20:08 +0100)] 
mpd: bump package to remove link against tcpwrapper

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agocore119: set pakfire version to 119
Arne Fitzenreiter [Sat, 24 Feb 2018 13:31:54 +0000 (14:31 +0100)] 
core119: set pakfire version to 119

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agocore119: restart init after unpack new glibc
Arne Fitzenreiter [Sat, 24 Feb 2018 13:30:19 +0000 (14:30 +0100)] 
core119: restart init after unpack new glibc

this is needed to prevent problems at unmout filesystems at reboot.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agocore119: Ship updated libgcc_s.so.1
Michael Tremer [Fri, 23 Feb 2018 20:43:41 +0000 (20:43 +0000)] 
core119: Ship updated libgcc_s.so.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agokernel: update to 4.14.21
Arne Fitzenreiter [Fri, 23 Feb 2018 18:33:15 +0000 (19:33 +0100)] 
kernel: update to 4.14.21

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agoMerge remote-tracking branch 'origin/next'
Michael Tremer [Wed, 21 Feb 2018 12:06:21 +0000 (12:06 +0000)] 
Merge remote-tracking branch 'origin/next'

2 years agocore119: Reload apache after configuration changes
Michael Tremer [Wed, 21 Feb 2018 12:05:14 +0000 (12:05 +0000)] 
core119: Reload apache after configuration changes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agodisable Apache server signature
Peter Müller [Tue, 5 Dec 2017 13:43:17 +0000 (14:43 +0100)] 
disable Apache server signature

Sending the server signature is unnecessary and might leak
some internal information (although ServerTokens is already
set to "Prod").

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agobackup: Don't backup apache configuration, keys only
Michael Tremer [Wed, 21 Feb 2018 11:24:48 +0000 (11:24 +0000)] 
backup: Don't backup apache configuration, keys only

In the past the apache configuration was part of the backup
and may have been restored after Core Update 118 was installed
with PHP being dropped amongst other things.

This patch will make sure that only keys are being backuped.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoRootfile update
Michael Tremer [Tue, 20 Feb 2018 20:10:30 +0000 (20:10 +0000)] 
Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agostrongswan: Update to 5.6.2
Michael Tremer [Mon, 19 Feb 2018 23:44:57 +0000 (23:44 +0000)] 
strongswan: Update to 5.6.2

Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS
signatures that was caused by insufficient input validation.
One of the configurable parameters in algorithm identifier
structures for RSASSA-PSS signatures is the mask generation
function (MGF). Only MGF1 is currently specified for this purpose.
However, this in turn takes itself a parameter that specifies
the underlying hash function. strongSwan's parser did not
correctly handle the case of this parameter being absent,
causing an undefined data read.

This vulnerability has been registered as CVE-2018-6459.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoIPsec: Try to restart always-on tunnels immediately
Michael Tremer [Mon, 19 Feb 2018 23:42:17 +0000 (23:42 +0000)] 
IPsec: Try to restart always-on tunnels immediately

When a tunnel that is in always-on configuration closes
unexpectedly, we can instruct strongSwan to restart it
immediately which is precisely what we do now.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agokernel: update to 4.14.20
Arne Fitzenreiter [Sat, 17 Feb 2018 19:22:39 +0000 (20:22 +0100)] 
kernel: update to 4.14.20

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agoRootfile update for armv5tel
Michael Tremer [Sat, 17 Feb 2018 18:55:38 +0000 (18:55 +0000)] 
Rootfile update for armv5tel

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agohaproxy: Link against libatomic on ARM
Michael Tremer [Sat, 17 Feb 2018 13:36:37 +0000 (13:36 +0000)] 
haproxy: Link against libatomic on ARM

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoi2c-tools: New package
Michael Tremer [Fri, 16 Feb 2018 20:01:55 +0000 (20:01 +0000)] 
i2c-tools: New package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoflac: Update to 1.3.2
Michael Tremer [Fri, 16 Feb 2018 19:14:33 +0000 (19:14 +0000)] 
flac: Update to 1.3.2

The previous version fails to build on i586

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoRootfile update
Michael Tremer [Thu, 15 Feb 2018 19:34:50 +0000 (19:34 +0000)] 
Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore119: Ship changed proxy.cgi
Michael Tremer [Wed, 14 Feb 2018 22:23:20 +0000 (22:23 +0000)] 
core119: Ship changed proxy.cgi

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoproxy.cgi: remove excessive newlines in generated proxy.pac
Bernhard Held [Mon, 12 Feb 2018 22:25:47 +0000 (23:25 +0100)] 
proxy.cgi: remove excessive newlines in generated proxy.pac

Remove excessive newlines in generated proxy.pac

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoRootfile update
Michael Tremer [Tue, 13 Feb 2018 21:07:04 +0000 (21:07 +0000)] 
Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoBump toolchain version
Michael Tremer [Tue, 13 Feb 2018 16:35:08 +0000 (16:35 +0000)] 
Bump toolchain version

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoRootfile update for glibc on i586
Michael Tremer [Tue, 13 Feb 2018 16:34:55 +0000 (16:34 +0000)] 
Rootfile update for glibc on i586

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agonagios-plugins: Update rootfiles
Michael Tremer [Tue, 13 Feb 2018 16:30:05 +0000 (16:30 +0000)] 
nagios-plugins: Update rootfiles

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopostfix: Update rootfile
Michael Tremer [Tue, 13 Feb 2018 16:20:55 +0000 (16:20 +0000)] 
postfix: Update rootfile

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agokernel: update to 4.14.19
Arne Fitzenreiter [Tue, 13 Feb 2018 13:49:32 +0000 (14:49 +0100)] 
kernel: update to 4.14.19

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agozlib: Fix name of logfile in toolchain build
Michael Tremer [Tue, 13 Feb 2018 10:24:04 +0000 (10:24 +0000)] 
zlib: Fix name of logfile in toolchain build

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agosslh: Build without tcpwrappers
Michael Tremer [Tue, 13 Feb 2018 10:23:54 +0000 (10:23 +0000)] 
sslh: Build without tcpwrappers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agotoolchain: Add zlib
Michael Tremer [Mon, 12 Feb 2018 14:24:12 +0000 (14:24 +0000)] 
toolchain: Add zlib

ccache needs this and usually comes with an own bundled
version but fails to build in version 3.4.1.

Since this is a small library only and we really want
ccache to use compression, we will build this indepently
and let ccache use it from the system.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoBump toolchain version
Michael Tremer [Mon, 12 Feb 2018 13:07:38 +0000 (13:07 +0000)] 
Bump toolchain version

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoCleanup toolchain scripts
Michael Tremer [Mon, 12 Feb 2018 12:44:37 +0000 (12:44 +0000)] 
Cleanup toolchain scripts

No functional changes, just some tidy up

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoccache: Update to 3.4.1
Michael Tremer [Mon, 12 Feb 2018 12:12:08 +0000 (12:12 +0000)] 
ccache: Update to 3.4.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoPAM: Drop shipped configuration
Michael Tremer [Mon, 12 Feb 2018 12:09:22 +0000 (12:09 +0000)] 
PAM: Drop shipped configuration

This is outdated, broken and has hardcoded passwords.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoDrop perl-DBD-mysql
Michael Tremer [Mon, 12 Feb 2018 12:07:29 +0000 (12:07 +0000)] 
Drop perl-DBD-mysql

This package is not used by anything and depends on MySQL
which has been dropped, too.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoDrop MySQL
Michael Tremer [Mon, 12 Feb 2018 12:05:46 +0000 (12:05 +0000)] 
Drop MySQL

This is outdated and still on 5.0.x and nobody volunteered to
update this package.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoasterisk: Do not depend on MySQL any more
Michael Tremer [Mon, 12 Feb 2018 11:55:28 +0000 (11:55 +0000)] 
asterisk: Do not depend on MySQL any more

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopostfix: Don't depend on amavis
Michael Tremer [Mon, 12 Feb 2018 11:52:07 +0000 (11:52 +0000)] 
postfix: Don't depend on amavis

This can be used together but there is no need to
always install amavis when someone wants to use postfix

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopostfix: Don't depend on MySQL any more
Michael Tremer [Mon, 12 Feb 2018 11:51:46 +0000 (11:51 +0000)] 
postfix: Don't depend on MySQL any more

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopostfix: Don't ship our own configuration
Michael Tremer [Mon, 12 Feb 2018 11:50:51 +0000 (11:50 +0000)] 
postfix: Don't ship our own configuration

This is outdated and half of it is not maintained any more.

Users should configure postfix themselves based on the
default configuration.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoDrop pammysql
Michael Tremer [Mon, 12 Feb 2018 11:44:28 +0000 (11:44 +0000)] 
Drop pammysql

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoDrop tcpwrapper
Michael Tremer [Mon, 12 Feb 2018 11:42:47 +0000 (11:42 +0000)] 
Drop tcpwrapper

This library has been unused for quite a while

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoDrop mISDN userspace tools
Michael Tremer [Mon, 12 Feb 2018 11:40:07 +0000 (11:40 +0000)] 
Drop mISDN userspace tools

This is unsupported for quite a while and nobody should be using this.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoDrop capi4k-utils
Michael Tremer [Mon, 12 Feb 2018 11:33:51 +0000 (11:33 +0000)] 
Drop capi4k-utils

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore119: Remove dropped lcr package during update
Michael Tremer [Mon, 12 Feb 2018 11:31:14 +0000 (11:31 +0000)] 
core119: Remove dropped lcr package during update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore119: Import changed packages
Michael Tremer [Mon, 12 Feb 2018 11:29:53 +0000 (11:29 +0000)] 
core119: Import changed packages

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoStart Core Update 119
Michael Tremer [Mon, 12 Feb 2018 11:22:58 +0000 (11:22 +0000)] 
Start Core Update 119

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoRootfile update for bison
Michael Tremer [Mon, 12 Feb 2018 11:18:01 +0000 (11:18 +0000)] 
Rootfile update for bison

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoOpenVPN: Mark unsecure ciphers and DH-parameter as 'weak' in WUI menu
Erik Kapfer [Thu, 8 Feb 2018 08:54:58 +0000 (09:54 +0100)] 
OpenVPN: Mark unsecure ciphers and DH-parameter as 'weak' in WUI menu

64 bit block ciphers like Blowfish, TDEA and CAST5 are vulnerable to the so called 'Birthday attacks' .
    Infos for 'Sweet32' Birthday attacks can be found in here
        https://sweet32.info/ .
    An Overview of 64 bit clock ciphers can also be found in here
        http://en.citizendium.org/wiki/Block_cipher/Catalogs/Cipher_list#64-bit_blocks

1024 bit Diffie-Hellman parameter has also been marked as weak causing the 'Logjam Attack' .
   Infos for 'Logjam Attack' can be found in here
        https://weakdh.org/ .

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoindex.cgi: Properly show IPsec subnets
Michael Tremer [Sun, 11 Feb 2018 23:23:54 +0000 (23:23 +0000)] 
index.cgi: Properly show IPsec subnets

Fixes: #11604

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Bump toolchain version
Michael Tremer [Sun, 11 Feb 2018 19:22:01 +0000 (19:22 +0000)] 
make.sh: Bump toolchain version

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoqemu: Make it build with newer glibcs
Michael Tremer [Sun, 11 Feb 2018 19:21:20 +0000 (19:21 +0000)] 
qemu: Make it build with newer glibcs

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agonfs: Fix building with newer glibcs
Michael Tremer [Sun, 11 Feb 2018 17:12:23 +0000 (17:12 +0000)] 
nfs: Fix building with newer glibcs

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoglibc: Enable obsolete NSL
Michael Tremer [Sun, 11 Feb 2018 16:58:10 +0000 (16:58 +0000)] 
glibc: Enable obsolete NSL

This will re-activate the deprecated NIS code on which lots of
software relies on so that we can have some extra time to migrate.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoConfig: Set PREFIX either to TOOLS_DIR or /usr
Michael Tremer [Sun, 11 Feb 2018 11:35:41 +0000 (11:35 +0000)] 
Config: Set PREFIX either to TOOLS_DIR or /usr

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: CFLAGS: There is no evidence that supports enabling retpoline in user space...
Michael Tremer [Sun, 11 Feb 2018 11:34:47 +0000 (11:34 +0000)] 
make.sh: CFLAGS: There is no evidence that supports enabling retpoline in user space is a good idea

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agolibtirpc: Fix build against newer glibcs
Michael Tremer [Sun, 11 Feb 2018 11:34:17 +0000 (11:34 +0000)] 
libtirpc: Fix build against newer glibcs

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agobinutils: Update to 2.30
Michael Tremer [Sun, 11 Feb 2018 11:31:56 +0000 (11:31 +0000)] 
binutils: Update to 2.30

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agodma: Don't only use TLSv1
Michael Tremer [Sun, 11 Feb 2018 11:20:01 +0000 (11:20 +0000)] 
dma: Don't only use TLSv1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopostfix: Temporarily disable NIS
Michael Tremer [Sat, 10 Feb 2018 14:42:36 +0000 (14:42 +0000)] 
postfix: Temporarily disable NIS

This makes postfix FTBFS because glibc has removed their
RPC headers.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoglibc: Update to 2.27
Michael Tremer [Sat, 10 Feb 2018 14:31:21 +0000 (14:31 +0000)] 
glibc: Update to 2.27

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoflex: Patch against SEGV with newer glibc
Michael Tremer [Sat, 10 Feb 2018 13:50:53 +0000 (13:50 +0000)] 
flex: Patch against SEGV with newer glibc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoRevert "make.sh: Add -fstack-clash-protection on platforms that support it"
Michael Tremer [Sat, 10 Feb 2018 13:30:58 +0000 (13:30 +0000)] 
Revert "make.sh: Add -fstack-clash-protection on platforms that support it"

This reverts commit 18b82970b81a5bbd31b8922440a97e43d6f01566.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Enable cheap out-of-bounds checks in C++ standard library
Michael Tremer [Sat, 10 Feb 2018 13:20:14 +0000 (13:20 +0000)] 
make.sh: Enable cheap out-of-bounds checks in C++ standard library

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Add -fstack-clash-protection on platforms that support it
Michael Tremer [Sat, 10 Feb 2018 13:18:42 +0000 (13:18 +0000)] 
make.sh: Add -fstack-clash-protection on platforms that support it

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: CFLAGS remove --param=ssp-buffer-size=4
Michael Tremer [Sat, 10 Feb 2018 13:09:00 +0000 (13:09 +0000)] 
make.sh: CFLAGS remove --param=ssp-buffer-size=4

This flag is useless with -fstack-protector-strong

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopam: Update to 1.30.0
Michael Tremer [Sat, 10 Feb 2018 12:37:46 +0000 (12:37 +0000)] 
pam: Update to 1.30.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: make requires pkg-config to run autoconf
Michael Tremer [Fri, 9 Feb 2018 17:38:08 +0000 (17:38 +0000)] 
make.sh: make requires pkg-config to run autoconf

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoiproute2: Update to 4.14.1
Michael Tremer [Fri, 9 Feb 2018 17:34:50 +0000 (17:34 +0000)] 
iproute2: Update to 4.14.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agohostname: Update to 3.20
Michael Tremer [Fri, 9 Feb 2018 17:21:59 +0000 (17:21 +0000)] 
hostname: Update to 3.20

Drops dependency to obsolete RPCSVC code in glibc.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake: Patch against SEGV when using globbing functions
Michael Tremer [Fri, 9 Feb 2018 17:21:12 +0000 (17:21 +0000)] 
make: Patch against SEGV when using globbing functions

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agotoolchain: Add bison
Michael Tremer [Thu, 8 Feb 2018 22:03:28 +0000 (22:03 +0000)] 
toolchain: Add bison

This is required by glibc 2.27

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agogcc: fix gmp download
Arne Fitzenreiter [Sat, 27 Jan 2018 12:47:09 +0000 (13:47 +0100)] 
gcc: fix gmp download

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agotoolchain: update to gcc-7.3.0 and enable retpolines on x86_64 and i586
Arne Fitzenreiter [Fri, 26 Jan 2018 19:48:08 +0000 (20:48 +0100)] 
toolchain: update to gcc-7.3.0 and enable retpolines on x86_64 and i586

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agomdadm: fix build with gcc-7
Arne Fitzenreiter [Fri, 26 Jan 2018 11:23:00 +0000 (12:23 +0100)] 
mdadm: fix build with gcc-7

2 years agosarg: update to 2.3.11 (needed for gcc-7)
Arne Fitzenreiter [Fri, 26 Jan 2018 11:20:57 +0000 (12:20 +0100)] 
sarg: update to 2.3.11 (needed for gcc-7)

2 years agopowertop: update to v2.9 (needed for gcc-7)
Arne Fitzenreiter [Fri, 26 Jan 2018 11:18:36 +0000 (12:18 +0100)] 
powertop: update to v2.9 (needed for gcc-7)

2 years agobwm-ng: update to 0.6.1-f54b3fa (needed for gcc-7)
Arne Fitzenreiter [Fri, 26 Jan 2018 11:16:37 +0000 (12:16 +0100)] 
bwm-ng: update to 0.6.1-f54b3fa (needed for gcc-7)

2 years agodiffultis: update to 3.1.6 (needed for gcc-7)
Arne Fitzenreiter [Fri, 26 Jan 2018 11:15:30 +0000 (12:15 +0100)] 
diffultis: update to 3.1.6 (needed for gcc-7)

2 years agou-boot: link missing header for gcc-7
Arne Fitzenreiter [Fri, 26 Jan 2018 10:00:37 +0000 (11:00 +0100)] 
u-boot: link missing header for gcc-7

2 years agovdr: disabled because it will not build with gcc-7
Arne Fitzenreiter [Fri, 26 Jan 2018 09:58:59 +0000 (10:58 +0100)] 
vdr: disabled because it will not build with gcc-7

2 years agounbound: Fix reverse lookup zones
Michael Tremer [Sun, 11 Feb 2018 17:43:43 +0000 (17:43 +0000)] 
unbound: Fix reverse lookup zones

These should be stubs and overlay the internal zones that
unbound comes with.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Fixes: #11625

2 years agoMerge remote-tracking branch 'origin/master' into kernel-4.14
Arne Fitzenreiter [Sat, 10 Feb 2018 08:54:55 +0000 (09:54 +0100)] 
Merge remote-tracking branch 'origin/master' into kernel-4.14

2 years agokernel: update to 4.14.18
Arne Fitzenreiter [Fri, 9 Feb 2018 20:09:31 +0000 (21:09 +0100)] 
kernel: update to 4.14.18

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agoMerge commit '0da2f155fdfa9b060840e9d7ee6229577cb52162' core118 v2.19-core118
Arne Fitzenreiter [Thu, 8 Feb 2018 17:14:31 +0000 (18:14 +0100)] 
Merge commit '0da2f155fdfa9b060840e9d7ee6229577cb52162'

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>