ipfire-2.x.git
4 years agoNew package libpciaccess
Jonatan Schlag [Sat, 7 May 2016 14:01:10 +0000 (16:01 +0200)] 
New package libpciaccess

libpciacces is a dependdency of libvirt

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agoNew package util-macros
Jonatan Schlag [Sat, 7 May 2016 14:01:09 +0000 (16:01 +0200)] 
New package util-macros

This package is a build dependency of libpciaccess, we do not need this
as a package. That's why the rootfiles goes into common and all lines
are excluded.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agoNetwork: add macvtap mode
Jonatan Schlag [Sat, 7 May 2016 14:01:08 +0000 (16:01 +0200)] 
Network: add macvtap mode

This change make it possible to use a macvtap interface as a
standard interface (green0).
This is required by libvirt, because libvirt adds macvtap interfaces to
the physical interface, but this causes a problem. A VM  with this
configuration can communicate with the whole network,
but not with the Host (IPFire).
To solve this problem, the host interface must be also a macvtap interface.
This is achieved by:
1. In /var/ipfire/ethernet/settings the mode of a interface could set
with GREEN_MODE= ...
When the mode is macvtap the physical interface is renamed to green0phys
instead of green0. If the mode is not set the normal configuration is
applied .
2. The  network-hotplug-macvtap script checks if a physical nic ends
with "phys".
When the interface ends with "phys", the script adds a macvtap interface
to the physical nic which is named green0. The MAC address of this
interface is set to the MAC address of the physical nic. The MAC address
of the physical is set to a random value. We do this because the MAC
address of green0 should not change.
All services, IP addresses then binds to the macvatap interface, the
physical nic is not used.
PS.:  The script works also with the orange or blue interface, just
replace green with orange or blue.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agobuildsystem: Escape curly brackets
Michael Tremer [Wed, 1 Jun 2016 21:17:10 +0000 (22:17 +0100)] 
buildsystem: Escape curly brackets

Newer versions of perl complain about using unescaped
left curly brackets.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agolog.dat: Added 'squid' and 'snort' plus translations
Matthias Fischer [Mon, 23 May 2016 13:55:13 +0000 (15:55 +0200)] 
log.dat: Added 'squid' and 'snort' plus translations

Added 'squid' and 'snort' to section dropdown in LOGS / SYSTEM LOGS,
added translations.

Added translation string for 'web proxy' in '30-network.menu'.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agolog.dat: fix missing quotation marks for 'ddns'
Matthias Fischer [Mon, 23 May 2016 13:55:12 +0000 (15:55 +0200)] 
log.dat: fix missing quotation marks for 'ddns'

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agosquid 3.5.19: latest patches from upstream
Matthias Fischer [Mon, 23 May 2016 12:16:43 +0000 (14:16 +0200)] 
squid 3.5.19: latest patches from upstream

For details, see:
http://www.squid-cache.org/Versions/v3/3.5/changesets/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agoflex: update rootfile
Marcel Lorenz [Mon, 30 May 2016 19:27:35 +0000 (21:27 +0200)] 
flex: update rootfile

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agosamba: import updated rpc security patchset from red hat.
Arne Fitzenreiter [Mon, 23 May 2016 21:08:01 +0000 (23:08 +0200)] 
samba: import updated rpc security patchset from red hat.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agogcc: fix bootstrap with gcc-6
Arne Fitzenreiter [Sun, 22 May 2016 08:56:57 +0000 (10:56 +0200)] 
gcc: fix bootstrap with gcc-6

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agodnsmasq: Update to 2.76
Matthias Fischer [Thu, 19 May 2016 17:19:36 +0000 (19:19 +0200)] 
dnsmasq: Update to 2.76

Final version.

For a detailed changelog, see:
http://www.thekelleys.org.uk/dnsmasq/CHANGELOG

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agoMidnight Commander: Update to 4.8.17
Matthias Fischer [Tue, 17 May 2016 18:44:33 +0000 (20:44 +0200)] 
Midnight Commander: Update to 4.8.17

For Details see:
http://www.midnight-commander.org/wiki/NEWS-4.8.17

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agoRootfile update
Michael Tremer [Wed, 18 May 2016 18:28:01 +0000 (19:28 +0100)] 
Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agonfs: Bump release to install rpcbind dependency
Michael Tremer [Wed, 18 May 2016 15:41:51 +0000 (16:41 +0100)] 
nfs: Bump release to install rpcbind dependency

This update will pull in rpcbind as new dependency which
will automatically remove portmap when installed.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agosquid: Fix indentation
Michael Tremer [Wed, 18 May 2016 15:17:21 +0000 (16:17 +0100)] 
squid: Fix indentation

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agosquid: Kill redirector processes only after squid has stopped
Michael Tremer [Wed, 18 May 2016 15:16:12 +0000 (16:16 +0100)] 
squid: Kill redirector processes only after squid has stopped

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agosquid: Rework initscript
Matthias Fischer [Tue, 17 May 2016 19:33:24 +0000 (21:33 +0200)] 
squid: Rework initscript

The initscript now takes care that the squid proxy server process
is properly shut down. If that fails, it will remove the cache
index and let it be recreated at the next start. A warning is
shown to the user.

The "flush" command will now remove the entire proxy cache.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agoReplace portmap with rpcbind
Jonatan Schlag [Sat, 7 May 2016 14:16:35 +0000 (16:16 +0200)] 
Replace portmap with rpcbind

Portmap is not maintained anymore that's why it is replaced by rpcbind.
Rpcbind provides also rpcinfo which is quite useful for debugging.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agoNew package libtirpc
Jonatan Schlag [Sat, 7 May 2016 14:16:34 +0000 (16:16 +0200)] 
New package libtirpc

libtirpc is a dependency of rpcbind

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years ago7zip: update to 15.14.1
Marcel Lorenz [Fri, 13 May 2016 15:50:57 +0000 (17:50 +0200)] 
7zip: update to 15.14.1

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agocore103: Ship updated dnsmasq
Michael Tremer [Mon, 16 May 2016 17:02:03 +0000 (18:02 +0100)] 
core103: Ship updated dnsmasq

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agodnsmasq: Update to 2.76rc2
Matthias Fischer [Sun, 15 May 2016 11:29:54 +0000 (13:29 +0200)] 
dnsmasq: Update to 2.76rc2

- Updated to 2.76rc2 and deleted obsolete patch files from 2.76rc1

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agodnsmasq: Update to 2.76rc1 - added latest patches (001-002)
Matthias Fischer [Fri, 13 May 2016 17:06:10 +0000 (19:06 +0200)] 
dnsmasq: Update to 2.76rc1 - added latest patches (001-002)

Update, added latest patches and deleted obsolete patch files.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agodnsmasq: Update to 2.76test13 with latest patches (001-006)
Matthias Fischer [Thu, 5 May 2016 17:54:42 +0000 (19:54 +0200)] 
dnsmasq: Update to 2.76test13 with latest patches (001-006)

Update from 'dnsmasq 2.76test10' to '2.76test13'

Includes latest patches (001-006) from upstream.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agoprocps: Update to 3.2.8
Matthias Fischer [Sun, 15 May 2016 21:19:46 +0000 (23:19 +0200)] 
procps: Update to 3.2.8

For details see:
http://procps.sourceforge.net/changelog.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agosquid init: small cosmetic fixes
Matthias Fischer [Sat, 14 May 2016 17:17:03 +0000 (19:17 +0200)] 
squid init: small cosmetic fixes

- Deleted a few absolutely unneeded tabs.
- Inserted/deleted some needed/unnecessary line breaks.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agolinux-pae: fix typo at remove meta on non-pae systems.
Arne Fitzenreiter [Wed, 11 May 2016 19:00:29 +0000 (21:00 +0200)] 
linux-pae: fix typo at remove meta on non-pae systems.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoMerge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Wed, 11 May 2016 18:59:15 +0000 (20:59 +0200)] 
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next

4 years agosquid 3.4: remove obsolete patch files
Matthias Fischer [Tue, 10 May 2016 16:50:25 +0000 (18:50 +0200)] 
squid 3.4: remove obsolete patch files

Obsolete, no longer needed.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agosquid: Update to 3.5.19
Matthias Fischer [Tue, 10 May 2016 16:58:28 +0000 (18:58 +0200)] 
squid: Update to 3.5.19

Activated 'ipv6', as discussed in ipfire-list with Michael:

"I had a look what the IPv6 switch actually changes. And that is not really much.
Essentially nothing. It just probes if the system supports IPv6 and if not it
disables it internally.

http://git.ipfire.org/?p=thirdparty%2Fsquid.git&a=search&h=refs%2Fheads%2Ftrunk&st=grep&s=USE_IPV6

I think we can as well enable this."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agosquid: Update to 3.5.18
Matthias Fischer [Sat, 7 May 2016 11:01:58 +0000 (13:01 +0200)] 
squid: Update to 3.5.18

Removed unecessary quotations and two configure-options, see:
ftp://ftp.fu-berlin.de/unix/www/squid/archive/3.1/squid-3.1.0.16-RELEASENOTES.html

--with-aio
Deprecated. POSIX AIO is now auto-detected and enabled.
Use --without-aio to disable, but only if you really have to.

--with-pthreads
Deprecated. pthreads library is now auto-detected and enabled.
Use --without-pthreads to disable, but only if you really have to.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agotor: Update to 0.2.7.6
Michael Tremer [Sat, 7 May 2016 12:23:28 +0000 (13:23 +0100)] 
tor: Update to 0.2.7.6

Fixes #11117

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agoMerge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Michael Tremer [Sat, 7 May 2016 11:32:27 +0000 (12:32 +0100)] 
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

4 years agoinitskripts: remove obsolete checkfstab
Arne Fitzenreiter [Fri, 6 May 2016 13:40:38 +0000 (15:40 +0200)] 
initskripts: remove obsolete checkfstab

the file update the bootdevice to uuid in fstab and grub1 config.
this is not needed since we use uuid at default and grub2

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore103: start
Arne Fitzenreiter [Fri, 6 May 2016 13:32:01 +0000 (15:32 +0200)] 
core103: start

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agolinux-pae: prevent install on non pae systems
Arne Fitzenreiter [Fri, 6 May 2016 13:16:12 +0000 (15:16 +0200)] 
linux-pae: prevent install on non pae systems

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoclamav: rework initskript
Arne Fitzenreiter [Fri, 6 May 2016 09:22:05 +0000 (11:22 +0200)] 
clamav: rework initskript

display download wait, increase time to 15min and
remove tmp files at freshclam terminate.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoclamav: update to 0.99.2
Arne Fitzenreiter [Wed, 4 May 2016 14:21:58 +0000 (16:21 +0200)] 
clamav: update to 0.99.2

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoMerge remote-tracking branch 'origin/master' into next
Arne Fitzenreiter [Wed, 4 May 2016 07:14:29 +0000 (09:14 +0200)] 
Merge remote-tracking branch 'origin/master' into next

4 years agogeneral-functions.pl: Allow underscores in domain names
Michael Tremer [Tue, 3 May 2016 21:50:53 +0000 (22:50 +0100)] 
general-functions.pl: Allow underscores in domain names

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agocore102: ship openssl and openssl updates v2.19-core102
Arne Fitzenreiter [Tue, 3 May 2016 19:30:14 +0000 (21:30 +0200)] 
core102: ship openssl and openssl updates

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoopenssl: security update to 1.0.2g
Arne Fitzenreiter [Tue, 3 May 2016 19:28:28 +0000 (21:28 +0200)] 
openssl: security update to 1.0.2g

see https://www.openssl.org/news/secadv/20160503.txt for details

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoopenssh: Update to 7.2p2
Sascha Kilian [Fri, 15 Apr 2016 09:07:52 +0000 (09:07 +0000)] 
openssh: Update to 7.2p2

Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agoclamav: save signature database at update
Arne Fitzenreiter [Tue, 3 May 2016 09:02:18 +0000 (11:02 +0200)] 
clamav: save signature database at update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agotoolchain: enable build on aarch64 multilib hosts
Arne Fitzenreiter [Sun, 1 May 2016 12:20:34 +0000 (14:20 +0200)] 
toolchain: enable build on aarch64 multilib hosts

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoMerge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Sat, 30 Apr 2016 13:34:16 +0000 (09:34 -0400)] 
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next

4 years agoRevert "ncurses: update to 6.0 and rename 5.9 to ncurses-compat"
Arne Fitzenreiter [Sat, 30 Apr 2016 13:25:12 +0000 (09:25 -0400)] 
Revert "ncurses: update to 6.0 and rename 5.9 to ncurses-compat"

This reverts commit a420b3e7b9f3672b6c436cd7b773683fbf0c1f90.

toolchain build fails on all architectures.

4 years agomake-functions: enable build on aarch64 multilib
Arne Fitzenreiter [Sat, 30 Apr 2016 07:49:06 +0000 (03:49 -0400)] 
make-functions: enable build on aarch64 multilib

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agosquid: Add forgetten patch file
Michael Tremer [Fri, 29 Apr 2016 20:59:50 +0000 (21:59 +0100)] 
squid: Add forgetten patch file

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agortpproxy: Add initscript
Michael Tremer [Fri, 29 Apr 2016 20:07:13 +0000 (21:07 +0100)] 
rtpproxy: Add initscript

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agosquid: Update to 3.5.17
Matthias Fischer [Fri, 22 Apr 2016 09:15:10 +0000 (11:15 +0200)] 
squid: Update to 3.5.17

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agosetup: Show more than 6 NICs
Michael Tremer [Fri, 29 Apr 2016 12:22:34 +0000 (13:22 +0100)] 
setup: Show more than 6 NICs

http://lists.ipfire.org/pipermail/development/2016-April/002074.html

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agosamba: import rpc server and client fixes.
Arne Fitzenreiter [Thu, 28 Apr 2016 15:04:58 +0000 (17:04 +0200)] 
samba: import rpc server and client fixes.

should fix: #11110

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agortpproxy: New package
Michael Tremer [Wed, 27 Apr 2016 17:18:20 +0000 (18:18 +0100)] 
rtpproxy: New package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agoRootfile update
Michael Tremer [Wed, 27 Apr 2016 11:53:10 +0000 (12:53 +0100)] 
Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agoUpdate: less to 481
Sascha Kilian [Fri, 15 Apr 2016 09:19:50 +0000 (09:19 +0000)] 
Update: less to 481

Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agowpa_supplicant: Update to 2.5
Sascha Kilian [Mon, 18 Apr 2016 14:23:07 +0000 (14:23 +0000)] 
wpa_supplicant: Update to 2.5

Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agohostapd: Bump release version
Michael Tremer [Tue, 26 Apr 2016 21:32:17 +0000 (22:32 +0100)] 
hostapd: Bump release version

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agoUpdate: hostapd to 2.5
Sascha Kilian [Mon, 18 Apr 2016 14:23:38 +0000 (14:23 +0000)] 
Update: hostapd to 2.5

Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agotzdata: Update to 2016d
Alexander Marx [Thu, 21 Apr 2016 06:56:25 +0000 (08:56 +0200)] 
tzdata: Update to 2016d

fixes: #11103

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
The 2016d release of the tz code and data is available. It reflects the
following changes, which were either circulated on the tz mailing list
or are relatively minor technical or administrative changes:

   Changes affecting future time stamps

     America/Caracas switches from -0430 to -04 on 2016-05-01 at 02:30.
     (Thanks to Alexander Krivenyshev for the heads-up.)

     Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
     (Thanks to Alexander Krivenyshev and Matt Johnson.)

     New zone Asia/Tomsk, split off from Asia/Novosibirsk. It covers
     Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29
     at 02:00.  (Thanks to Stepan Golosunov.)

   Changes affecting past time stamps

     New zone Europe/Kirov, split off from Europe/Volgograd.  It covers
     Kirov Oblast, Russia, which switched from +04/+05 to +03/+04 on
     1989-03-26 at 02:00, roughly a year after Europe/Volgograd made
     the same change.  (Thanks to Stepan Golosunov.)

     Russia and nearby locations had daylight-saving transitions on
     1992-03-29 at 02:00 and 1992-09-27 at 03:00, instead of on
     1992-03-28 at 23:00 and 1992-09-26 at 23:00.  (Thanks to Stepan
     Golosunov.)

     Many corrections to historical time in Kazakhstan from 1991
     through 2005.  (Thanks to Stepan Golosunov.)  Replace Kazakhstan's
     invented time zone abbreviations with numeric abbreviations.

Here are links to the release files:

   ftp://ftp.iana.org/tz/releases/tzcode2016d.tar.gz
   ftp://ftp.iana.org/tz/releases/tzdata2016d.tar.gz

The files are also available via HTTP as follows:

http://www.iana.org/time-zones/repository/releases/tzcode2016d.tar.gz
http://www.iana.org/time-zones/repository/releases/tzdata2016d.tar.gz

As usual, links to the latest release files are here:

http://www.iana.org/time-zones/repository/tzcode-latest.tar.gz
http://www.iana.org/time-zones/repository/tzdata-latest.tar.gz

   ftp://ftp.iana.org/tz/tzcode-latest.tar.gz
   ftp://ftp.iana.org/tz/tzdata-latest.tar.gz
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agoUpdate: grep to 2.24
Sascha Kilian [Fri, 22 Apr 2016 09:11:30 +0000 (09:11 +0000)] 
Update: grep to 2.24

Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agoUpdate: curl to 7.48.0
Sascha Kilian [Fri, 22 Apr 2016 15:55:26 +0000 (15:55 +0000)] 
Update: curl to 7.48.0

Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agosdparm: Update to 1.10
Matthias Fischer [Sat, 23 Apr 2016 16:54:59 +0000 (18:54 +0200)] 
sdparm: Update to 1.10

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agoncurses: update to 6.0 and rename 5.9 to ncurses-compat
Marcel Lorenz [Sat, 23 Apr 2016 06:33:19 +0000 (08:33 +0200)] 
ncurses: update to 6.0 and rename 5.9 to ncurses-compat

This patch updates the ncurses to 6.0. The old 5.9 are renamed to ncurses-compat.
The compat makes the old libs maintainable and the compat rootfile is cleaned up.
The 6.0 is build after 5.9 and all IPFire componentes will build with 6.0
In version 6 only the wide-character libraries are build. The are usable
in both multibyte and traditional 8-bit locales while normal libraries work
properly only in 8-bit locales. The toolchain is only bild with 6.0.

Please ignore my first ncurses 6.0 patch.

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agonfs: Fix whitespace issues in nfs-server initscript
Michael Tremer [Tue, 26 Apr 2016 21:21:50 +0000 (22:21 +0100)] 
nfs: Fix whitespace issues in nfs-server initscript

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agonfs: Fixes for NFS server
Jonatan Schlag [Mon, 25 Apr 2016 15:15:18 +0000 (17:15 +0200)] 
nfs: Fixes for NFS server

Fixes: #11098
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agosquid 3.4.14: latest patches, sorted options
Matthias Fischer [Tue, 26 Apr 2016 16:50:14 +0000 (18:50 +0200)] 
squid 3.4.14: latest patches, sorted options

The 'configure'-options were sorted (kind of) to get a better overview.

Added latest patches from upstream.

Changed '--enable-async-io=8' to '--enable-async-io=16' because of
http://www.squid-cache.org/mail-archive/squid-users/200705/0768.html :

"The default number of threads is dependent on the number of aufs
cache_dir lines, based on a reasonable estimate of how the code behaves."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agocore101: close core update. core101 v2.19-core101
Arne Fitzenreiter [Mon, 25 Apr 2016 19:44:47 +0000 (21:44 +0200)] 
core101: close core update.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agobackports: ath9k fix ht40 init.
Arne Fitzenreiter [Mon, 25 Apr 2016 16:02:53 +0000 (18:02 +0200)] 
backports: ath9k fix ht40 init.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore101: remove old rpi kernel modules.
Arne Fitzenreiter [Thu, 21 Apr 2016 15:58:07 +0000 (17:58 +0200)] 
core101: remove old rpi kernel modules.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore101: add changed packages to updater.
Arne Fitzenreiter [Thu, 21 Apr 2016 15:53:08 +0000 (17:53 +0200)] 
core101: add changed packages to updater.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoMerge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Wed, 20 Apr 2016 15:45:49 +0000 (17:45 +0200)] 
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

4 years agoMerge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Michael Tremer [Wed, 20 Apr 2016 15:24:12 +0000 (16:24 +0100)] 
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

4 years agoconntrack: Remove old disable_nf_sip indicator file
Michael Tremer [Wed, 20 Apr 2016 15:23:22 +0000 (16:23 +0100)] 
conntrack: Remove old disable_nf_sip indicator file

This is not used any more and not needed either.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agocore101: Migrate conntrack settings that broke in 100
Michael Tremer [Wed, 20 Apr 2016 15:22:31 +0000 (16:22 +0100)] 
core101: Migrate conntrack settings that broke in 100

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agocore101: Add recent changes on firewall
Michael Tremer [Wed, 20 Apr 2016 15:15:55 +0000 (16:15 +0100)] 
core101: Add recent changes on firewall

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agooptionsfw.cgi: Clean up code
Michael Tremer [Wed, 20 Apr 2016 15:14:14 +0000 (16:14 +0100)] 
optionsfw.cgi: Clean up code

Add translation to radio buttons. No functional changes.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agofirewall: Fix connection tracking for PPTP
Michael Tremer [Wed, 20 Apr 2016 15:04:24 +0000 (16:04 +0100)] 
firewall: Fix connection tracking for PPTP

GRE connections were not correctly forwarded without the helper
being enabled. Choosing the wrong protocol here did not allow
us to load it properly.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agofirewall: fix nat module load for application layer gateways
Arne Fitzenreiter [Wed, 20 Apr 2016 08:19:46 +0000 (10:19 +0200)] 
firewall: fix nat module load for application layer gateways

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoMerge remote-tracking branch 'origin/core100' into next
Arne Fitzenreiter [Tue, 19 Apr 2016 20:04:24 +0000 (22:04 +0200)] 
Merge remote-tracking branch 'origin/core100' into next

4 years agokernel: fix mac80211 build on rpi.
Arne Fitzenreiter [Tue, 19 Apr 2016 16:41:32 +0000 (18:41 +0200)] 
kernel: fix mac80211 build on rpi.

mac80211 depends on CRYPTO_GCM don't know why this was off before in
rpi config.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agokernel: change stackprotector from strong to regular. core100
Arne Fitzenreiter [Sun, 17 Apr 2016 20:25:16 +0000 (22:25 +0200)] 
kernel: change stackprotector from strong to regular.

Xen/Paravirt crash with stackprotect in strong mode.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoxen-image-maker: fix typos and missing doublequote.
Arne Fitzenreiter [Sun, 17 Apr 2016 20:23:11 +0000 (22:23 +0200)] 
xen-image-maker: fix typos and missing doublequote.

4 years agocore101: Ship updated dma
Michael Tremer [Sun, 17 Apr 2016 19:22:44 +0000 (20:22 +0100)] 
core101: Ship updated dma

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agodma: Update to 0.11
Matthias Fischer [Sun, 17 Apr 2016 17:34:47 +0000 (19:34 +0200)] 
dma: Update to 0.11

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agolcdproc 0.5.7: Fixes for rootfile
Matthias Fischer [Sun, 17 Apr 2016 18:50:49 +0000 (20:50 +0200)] 
lcdproc 0.5.7: Fixes for rootfile

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agoAdd missing end-quote to xen-image-maker
Eberhard Beilharz [Sat, 16 Apr 2016 21:28:11 +0000 (23:28 +0200)] 
Add missing end-quote to xen-image-maker

Signed-off-by: Eberhard Beilharz <eb1@sil.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agocore101: exclude grub.cfg and grubenv from updates.
Arne Fitzenreiter [Fri, 15 Apr 2016 12:19:19 +0000 (14:19 +0200)] 
core101: exclude grub.cfg and grubenv from updates.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore100: remove grub.cfg and grubenv from updater.
Arne Fitzenreiter [Fri, 15 Apr 2016 11:19:25 +0000 (13:19 +0200)] 
core100: remove grub.cfg and grubenv from updater.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agolcdproc: Bump release
Michael Tremer [Thu, 14 Apr 2016 10:24:40 +0000 (11:24 +0100)] 
lcdproc: Bump release

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agolcdproc: Update to 0.5.7
Sascha Kilian [Wed, 13 Apr 2016 15:04:39 +0000 (15:04 +0000)] 
lcdproc: Update to 0.5.7

Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agosamba: import RHEL security fixes.
Arne Fitzenreiter [Wed, 13 Apr 2016 20:20:58 +0000 (22:20 +0200)] 
samba: import RHEL security fixes.

CVE-2015-7560
CVE-2016-2110
CVE-2016-2111
CVE-2016-2112
CVE-2016-2115
CVE-2016-2118 aka Badlock
CVE-2015-5370

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoinstaller: Force overwriting EXT4 FS
Michael Tremer [Mon, 11 Apr 2016 09:20:00 +0000 (10:20 +0100)] 
installer: Force overwriting EXT4 FS

On 64 bit systems, the installation fails if a previous XFS FS
is detected on the partition an EXT4 FS should be formatted.

This does not happen on 32 bit systems.

Fixes: #11091

Reported-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Tested-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
4 years agodnsdist: disable parallel build
Arne Fitzenreiter [Sun, 10 Apr 2016 07:41:08 +0000 (09:41 +0200)] 
dnsdist: disable parallel build

on 4 core machines with 2GB ram the parallel build fails
with out of memory.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoMerge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Michael Tremer [Fri, 8 Apr 2016 15:16:57 +0000 (16:16 +0100)] 
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

4 years agoNew package ncat.
Jonatan Schlag [Fri, 8 Apr 2016 13:18:03 +0000 (15:18 +0200)] 
New package ncat.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agoBuild nmap without ncat.
Jonatan Schlag [Fri, 8 Apr 2016 13:18:02 +0000 (15:18 +0200)] 
Build nmap without ncat.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agoRemove the nc symlink from netcat package and rename to gnu-netcat (gnu-netcat is...
Jonatan Schlag [Fri, 8 Apr 2016 13:18:01 +0000 (15:18 +0200)] 
Remove the nc symlink from netcat package and rename to gnu-netcat (gnu-netcat is no longer our standard netcat)

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years agocore101: Ship latest changes in CGI files
Michael Tremer [Fri, 8 Apr 2016 14:55:46 +0000 (15:55 +0100)] 
core101: Ship latest changes in CGI files

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 years ago{proxy,chpasswd}.cgi: Fix a remote code execution vulnerability
Michael Tremer [Mon, 4 Apr 2016 15:41:30 +0000 (16:41 +0100)] 
{proxy,chpasswd}.cgi: Fix a remote code execution vulnerability

Handcrafted requests with shell commands could be sent to these
CGI files and gain shell access as unprivileged user.

References: #11087

Reported-by: Yann Cam <yann.cam@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>