]> git.ipfire.org Git - ipfire-2.x.git/log
ipfire-2.x.git
7 years agoMerge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Michael Tremer [Tue, 4 Oct 2016 21:34:23 +0000 (22:34 +0100)] 
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

7 years agoRevert "core106: Add DNS root key to exclude list"
Arne Fitzenreiter [Tue, 4 Oct 2016 20:05:26 +0000 (22:05 +0200)] 
Revert "core106: Add DNS root key to exclude list"

This reverts commit f58002a83f279246cdd58bfb5e9dfbf9d5aa99c7.

7 years agounbound: fix update forwarders if unbound was not running
Arne Fitzenreiter [Tue, 4 Oct 2016 17:24:26 +0000 (19:24 +0200)] 
unbound: fix update forwarders if unbound was not running

psgrep has no "-q" switch so i use pidof.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
7 years agoMerge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Mon, 3 Oct 2016 15:55:42 +0000 (17:55 +0200)] 
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next

7 years agounbound: fix reverse lockup of webif defined hosts
Arne Fitzenreiter [Mon, 3 Oct 2016 15:53:13 +0000 (17:53 +0200)] 
unbound: fix reverse lockup of webif defined hosts

and make the own host resolveable.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
7 years agoUpdate translations
Michael Tremer [Mon, 3 Oct 2016 11:13:43 +0000 (12:13 +0100)] 
Update translations

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoguardian 2.0: suggested cosmetic changes
Matthias Fischer [Fri, 23 Sep 2016 14:33:04 +0000 (16:33 +0200)] 
guardian 2.0: suggested cosmetic changes

I did the following:

- Rearranged the fields on 'guardian.cgi' a bit - in a (hopefully) logical manner,
  so that they don't need so much room.
- Added some translation-strings and explanations to (revised) 'guardian.cgi'.
- Added missing language string(s), deleted obsolete.
- Deleted all guardian entries from standard language files in
  '/var/ipfire/langs'-directory.
- Added (upgraded) addon-specific language files to '/var/ipfire/addon-lang'-directory.

I hope, I didn't forget something...

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
7 years agocore106: Ship updated libidn
Michael Tremer [Mon, 3 Oct 2016 10:45:36 +0000 (11:45 +0100)] 
core106: Ship updated libidn

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agolibidn: Update to 1.33
Matthias Fischer [Mon, 3 Oct 2016 06:58:48 +0000 (08:58 +0200)] 
libidn: Update to 1.33

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoMerge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Sun, 2 Oct 2016 14:36:57 +0000 (16:36 +0200)] 
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next

7 years agoindex.cgi: display unbound dns servers
Arne Fitzenreiter [Sun, 2 Oct 2016 14:35:50 +0000 (16:35 +0200)] 
index.cgi: display unbound dns servers

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
7 years agoRemove IPAC stuff
Michael Tremer [Sun, 2 Oct 2016 14:13:55 +0000 (15:13 +0100)] 
Remove IPAC stuff

This is unused for a very very very long time and serves
no purpose any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoAdd search domain to /etc/resolv.conf at boot time
Arne Fitzenreiter [Sun, 2 Oct 2016 13:32:14 +0000 (15:32 +0200)] 
Add search domain to /etc/resolv.conf at boot time

unbound does not append the local domain to the request
any more (like dnsmasq did). Therefore, the client needs
to do that if desired.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
7 years agounbound: Test upstream name servers before using
Arne Fitzenreiter [Sun, 2 Oct 2016 13:25:23 +0000 (15:25 +0200)] 
unbound: Test upstream name servers before using

unbound has some trouble with validating DNSSEC-enabled
domains when the upstream name server is stripping signatures
from the authoritative responses.

This script now checks that, removes any broken upstream
name servers from the list and prints a warning.

If all name servers fail the test, unbound falls back
into recursor mode.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
7 years agocore106: Add DNS root key to exclude list
Arne Fitzenreiter [Sun, 2 Oct 2016 11:36:07 +0000 (13:36 +0200)] 
core106: Add DNS root key to exclude list

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
7 years agounbound: Update to 1.5.10
Arne Fitzenreiter [Sun, 2 Oct 2016 11:35:45 +0000 (13:35 +0200)] 
unbound: Update to 1.5.10

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
7 years agocore106: Ship updated /etc/login.defs
Michael Tremer [Sat, 1 Oct 2016 17:56:42 +0000 (18:56 +0100)] 
core106: Ship updated /etc/login.defs

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agounbound: Print nicer error message when already running
Michael Tremer [Sat, 1 Oct 2016 17:55:23 +0000 (18:55 +0100)] 
unbound: Print nicer error message when already running

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agounbound: Start unbound when invoked by DHCP scripts
Michael Tremer [Sat, 1 Oct 2016 17:52:07 +0000 (18:52 +0100)] 
unbound: Start unbound when invoked by DHCP scripts

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoshadow-utils: Create standard set of configuration files
Michael Tremer [Sat, 1 Oct 2016 17:37:28 +0000 (18:37 +0100)] 
shadow-utils: Create standard set of configuration files

Previously we copied the default configuration from the upstream
package and modified that. Unfortunately a patch and a sed command
changed the file which resulted in unwanted changes.

This patch removes the patch and sed command and adds a new set
of configuration files that just need to be copied to the system.

Fixes #11195

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoattr: rootfile update
Arne Fitzenreiter [Sat, 1 Oct 2016 13:17:37 +0000 (15:17 +0200)] 
attr: rootfile update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
7 years agontp: fix wait for red if dhcp or wpasupplicant is running.
Arne Fitzenreiter [Tue, 27 Sep 2016 18:15:53 +0000 (20:15 +0200)] 
ntp: fix wait for red if dhcp or wpasupplicant is running.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
7 years agosamba: default enable SMBv2.
Arne Fitzenreiter [Tue, 27 Sep 2016 17:38:38 +0000 (19:38 +0200)] 
samba: default enable SMBv2.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
7 years agocore106: ship mt7601u firmware.
Arne Fitzenreiter [Tue, 27 Sep 2016 17:20:14 +0000 (19:20 +0200)] 
core106: ship mt7601u firmware.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
7 years agompfr: fix missing eof in rootfile.
Arne Fitzenreiter [Tue, 27 Sep 2016 16:39:53 +0000 (18:39 +0200)] 
mpfr: fix missing eof in rootfile.

this is the reason for missing mt7601u firmware.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
7 years agoRevert "libjpeg: update to 1.4.2"
Michael Tremer [Tue, 27 Sep 2016 08:44:19 +0000 (09:44 +0100)] 
Revert "libjpeg: update to 1.4.2"

This reverts commit feba68e4af48630d0c5dcd16bd799a0e02db2b36.

Breaks building netpbm

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoMerge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Mon, 26 Sep 2016 21:18:30 +0000 (23:18 +0200)] 
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next

7 years agoRevert "Revert "tcl: update to 8.6.6""
Arne Fitzenreiter [Mon, 26 Sep 2016 16:55:51 +0000 (18:55 +0200)] 
Revert "Revert "tcl: update to 8.6.6""

with new krb5 also the tcl update works.
This reverts commit 053c554822e9d7342bf21535ccae4812100f94c5.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
7 years agocore106: Add recently updated packages, etc.
Michael Tremer [Mon, 26 Sep 2016 20:03:33 +0000 (21:03 +0100)] 
core106: Add recently updated packages, etc.

This update removes dnsmasq and replaces it with unbound.

Also many packages are updated and shipped.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoStart Core Update 106
Michael Tremer [Mon, 26 Sep 2016 19:24:21 +0000 (20:24 +0100)] 
Start Core Update 106

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agolibjpeg: update to 1.4.2
Marcel Lorenz [Sat, 3 Sep 2016 12:06:19 +0000 (14:06 +0200)] 
libjpeg: update to 1.4.2

The old libjpeg is renamed to libjpeg-compat
The compat makes the old libs maintainable

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Reviewed-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoMerge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Mon, 26 Sep 2016 16:53:49 +0000 (18:53 +0200)] 
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next

7 years agoattr: rootfile update.
Arne Fitzenreiter [Mon, 26 Sep 2016 16:51:27 +0000 (18:51 +0200)] 
attr: rootfile update.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
7 years agoUpdate krb5 to 1.14.4
Jonatan Schlag [Sun, 25 Sep 2016 16:50:03 +0000 (18:50 +0200)] 
Update krb5 to 1.14.4

This commit updates krb5 to version 1.14.4
The patch is removed, because he is upstream since 1.12.2.
The samba version is incremented, to link samba against the new krb5
version. Otherwise samba for example is linked against
/usr/lib/libkdb5.so.7 but the current version is /usr/lib/libkdb5.so.8

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoopenssl: Update to 1.0.2j
Michael Tremer [Mon, 26 Sep 2016 13:37:20 +0000 (14:37 +0100)] 
openssl: Update to 1.0.2j

Missing CRL sanity check (CVE-2016-7052)
========================================

Severity: Moderate

This issue only affects OpenSSL 1.0.2i, released on 22nd September 2016.

A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.

OpenSSL 1.0.2i users should upgrade to 1.0.2j

The issue was reported to OpenSSL on 22nd September 2016 by Bruce Stephens and
Thomas Jakobi. The fix was developed by Matt Caswell of the OpenSSL development
team.

https://www.openssl.org/news/secadv/20160926.txt

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agorootfile updates: attr, ed, gawk
Arne Fitzenreiter [Mon, 26 Sep 2016 11:08:02 +0000 (13:08 +0200)] 
rootfile updates: attr, ed, gawk

Check rootfiles before commit !!!

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
7 years agoRevert "tcl: update to 8.6.6"
Arne Fitzenreiter [Sun, 25 Sep 2016 17:55:49 +0000 (19:55 +0200)] 
Revert "tcl: update to 8.6.6"

breaks kerberos (krb5) build.

This reverts commit 282dfe0bb9780fa39dac5d2285719497f6a9f3d5.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
7 years agotransmission: update to 2.92
Arne Fitzenreiter [Sat, 24 Sep 2016 14:44:47 +0000 (16:44 +0200)] 
transmission: update to 2.92

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
7 years agoiproute2: update to 4.7.0
Marcel Lorenz [Fri, 2 Sep 2016 13:26:10 +0000 (15:26 +0200)] 
iproute2: update to 4.7.0

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agousb_modeswitch_data: update to 20160803
Marcel Lorenz [Fri, 2 Sep 2016 09:54:37 +0000 (11:54 +0200)] 
usb_modeswitch_data: update to 20160803

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agousb_modeswitch: update to 2.4.0
Marcel Lorenz [Fri, 2 Sep 2016 09:53:20 +0000 (11:53 +0200)] 
usb_modeswitch: update to 2.4.0

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoipset: update to 6.29
Marcel Lorenz [Fri, 2 Sep 2016 09:13:56 +0000 (11:13 +0200)] 
ipset: update to 6.29

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agolibmnl: update to 1.0.
Marcel Lorenz [Fri, 2 Sep 2016 08:58:02 +0000 (10:58 +0200)] 
libmnl: update to 1.0.

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agolibnetfilter_conntrack: update to 1.0.6
Marcel Lorenz [Fri, 2 Sep 2016 08:52:13 +0000 (10:52 +0200)] 
libnetfilter_conntrack: update to 1.0.6

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoattr: update to 2.4.47
Marcel Lorenz [Fri, 2 Sep 2016 09:12:13 +0000 (11:12 +0200)] 
attr: update to 2.4.47

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoexpat: update to 2.2.0
Marcel Lorenz [Fri, 2 Sep 2016 09:07:58 +0000 (11:07 +0200)] 
expat: update to 2.2.0

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agomake: update to 4.2.1
Marcel Lorenz [Fri, 2 Sep 2016 09:08:51 +0000 (11:08 +0200)] 
make: update to 4.2.1

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agofile: update to 5.28
Marcel Lorenz [Fri, 2 Sep 2016 08:44:59 +0000 (10:44 +0200)] 
file: update to 5.28

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoRevert "strongswan 5.5.0: update for rootfile"
Michael Tremer [Sat, 24 Sep 2016 11:54:39 +0000 (12:54 +0100)] 
Revert "strongswan 5.5.0: update for rootfile"

The padlock module is only built on i586

This reverts commit 2ac05ca54c6a49e7f4a82aae57d1924fa7c998b2.

7 years agogettext: update to 0.19.8.1
Marcel Lorenz [Fri, 2 Sep 2016 08:30:06 +0000 (10:30 +0200)] 
gettext: update to 0.19.8.1

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agomake.sh: add autoamke to toolchain to fix coreutils build fail
Marcel Lorenz [Sat, 3 Sep 2016 08:28:57 +0000 (10:28 +0200)] 
make.sh: add autoamke to toolchain to fix coreutils build fail

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agopkg-config: update lfs file to build with new dejagnu
Marcel Lorenz [Sat, 3 Sep 2016 08:28:56 +0000 (10:28 +0200)] 
pkg-config: update lfs file to build with new dejagnu

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agodejagnu: update to 1.6
Marcel Lorenz [Sat, 3 Sep 2016 08:28:55 +0000 (10:28 +0200)] 
dejagnu: update to 1.6

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agotcl: update to 8.6.6
Marcel Lorenz [Sat, 3 Sep 2016 08:28:54 +0000 (10:28 +0200)] 
tcl: update to 8.6.6

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoflex: update to 2.6.1
Marcel Lorenz [Sat, 3 Sep 2016 08:28:53 +0000 (10:28 +0200)] 
flex: update to 2.6.1

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agodiffutils: update to 3.5
Marcel Lorenz [Sat, 3 Sep 2016 08:30:44 +0000 (10:30 +0200)] 
diffutils: update to 3.5

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agostrongswan 5.5.0: update for rootfile
Matthias Fischer [Fri, 23 Sep 2016 14:51:36 +0000 (16:51 +0200)] 
strongswan 5.5.0: update for rootfile

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoasterisk addon: update to 11.23.1
Dirk Wagner [Thu, 22 Sep 2016 07:05:10 +0000 (09:05 +0200)] 
asterisk addon: update to 11.23.1

Changelog: http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11-current

Signed-off-by: Dirk Wagner <dirk.wagner@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agomonit addon: update to 5.19.0
Dirk Wagner [Thu, 22 Sep 2016 07:59:39 +0000 (09:59 +0200)] 
monit addon: update to 5.19.0

See changelog https://mmonit.com/monit/changes for details.

Signed-off-by: Dirk Wagner <dirk.wagner@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoFix URL to list of public name servers in dns.cgi
Jonatan Schlag [Thu, 22 Sep 2016 10:03:33 +0000 (12:03 +0200)] 
Fix URL to list of public name servers in dns.cgi

We have only one english wiki, so the link to the list of public
dns servers can point directly to the right page.
(The link was also not correct).

Fixes: #11191
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoMerge remote-tracking branch 'origin/core105' into next
Arne Fitzenreiter [Fri, 23 Sep 2016 16:49:06 +0000 (18:49 +0200)] 
Merge remote-tracking branch 'origin/core105' into next

7 years agocore105: add openssl sse2 binaries core105 v2.19-core105
Arne Fitzenreiter [Fri, 23 Sep 2016 08:30:34 +0000 (10:30 +0200)] 
core105: add openssl sse2 binaries

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
7 years agocore105: fix rootfile.
Arne Fitzenreiter [Thu, 22 Sep 2016 15:44:06 +0000 (17:44 +0200)] 
core105: fix rootfile.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
7 years agostrongswan: Update to 5.5.0
Michael Tremer [Thu, 22 Sep 2016 13:47:47 +0000 (14:47 +0100)] 
strongswan: Update to 5.5.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoMerge branch 'core105' into next
Michael Tremer [Thu, 22 Sep 2016 11:05:13 +0000 (12:05 +0100)] 
Merge branch 'core105' into next

7 years agoTag Core Update 105
Michael Tremer [Thu, 22 Sep 2016 11:04:18 +0000 (12:04 +0100)] 
Tag Core Update 105

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoopenssl: Update to 1.0.2i
Michael Tremer [Thu, 22 Sep 2016 11:02:32 +0000 (12:02 +0100)] 
openssl: Update to 1.0.2i

https://www.openssl.org/news/openssl-1.0.2-notes.html

This release fixes various security flaws:

* OCSP Status Request extension unbounded memory growth (CVE-2016-6304)
* SWEET32 Mitigation (CVE-2016-2183)
* OOB write in MDC2_Update() (CVE-2016-6303)
* Malformed SHA512 ticket DoS (CVE-2016-6302)
* OOB write in BN_bn2dec() (CVE-2016-2182)
* OOB read in TS_OBJ_print_bio() (CVE-2016-2180)
* Pointer arithmetic undefined behaviour (CVE-2016-2177)
* Constant time flag not preserved in DSA signing (CVE-2016-2178)
* DTLS buffered message DoS (CVE-2016-2179)
* DTLS replay protection DoS (CVE-2016-2181)
* Certificate message OOB reads (CVE-2016-6306)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agocore105: Ship security update for libgcrypt
Michael Tremer [Thu, 22 Sep 2016 09:30:28 +0000 (10:30 +0100)] 
core105: Ship security update for libgcrypt

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agolibgcrypt: Update to 1.7.3
Matthias Fischer [Sat, 20 Aug 2016 10:33:55 +0000 (12:33 +0200)] 
libgcrypt: Update to 1.7.3

Fixes CVE-2016-6313

For details, see:
https://lists.gnupg.org/pipermail/gnupg-announce/2016q3/000395.html
https://bugzilla.redhat.com/show_bug.cgi?id=1366105

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoStart Core Update 105
Michael Tremer [Thu, 22 Sep 2016 09:28:36 +0000 (10:28 +0100)] 
Start Core Update 105

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoLibvirt: Fix update.sh script
Jonatan Schlag [Fri, 2 Sep 2016 18:35:23 +0000 (20:35 +0200)] 
Libvirt: Fix update.sh script

The virtlogd could only be restarted when the daemons run. The update.sh
script tried to restart the daemon no matter if the daemons run or not.
This behaviour produce problems.

An If statement now checks if the daemon runs or not and execute the
command that is suitable for the situation.

Fixes: #11172
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoUpdate libvirt to 2.1
Jonatan Schlag [Sun, 28 Aug 2016 17:59:19 +0000 (19:59 +0200)] 
Update libvirt to 2.1

This is the update of libvirt to the latest version 2.1.
The most important change from a packager view is the new virtlogd
daemon.
This daemon handles the qemu output and wrote it to log files.

The require some changes:
- A new init script to start, stop restart the daemon called virtlogd.
The daemon is restart with SIGUSR1 (this is important because the daemon
keeps all pipelines etc. open).

This introduces a problem with the uninstall.sh install.sh script.
It is not possible to stop the daemon while virtual machines are
running, so the script update.sh execute from now not uninstall.sh and
install.sh instead it contains all steps from uninstall.sh install.sh
expect the start / stop routine for virtlogd. The daemon is just
restarted after the update, which makes sure that all changes take
effect.

- new symlinks in the uninstall.sh and install.sh script and some root
file changes because of the new virtlogd init script.
- the archive format changes from tar.gz to tar.xz

For Changelogs see:

https://libvirt.org/news-2015.html
https://libvirt.org/news.html (2017 and later:
https://libvirt.org/news-2016.html )

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoBUG11184: Error if DNAT address ends with 0 or 255 now disabled
Alexander Marx [Thu, 15 Sep 2016 13:31:48 +0000 (15:31 +0200)] 
BUG11184: Error if DNAT address ends with 0 or 255 now disabled

When using dnat addresses, it is possible to use big subnets and host addresses like 172.16.0.0/12.
These addresses where rejected because it was recognised as network address.
The check is now removed.

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoRootfile update
Michael Tremer [Thu, 15 Sep 2016 10:04:11 +0000 (11:04 +0100)] 
Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoMerge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Michael Tremer [Wed, 14 Sep 2016 15:41:38 +0000 (16:41 +0100)] 
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

7 years agopython-ipaddress: New package
Michael Tremer [Wed, 14 Sep 2016 15:41:12 +0000 (16:41 +0100)] 
python-ipaddress: New package

Required for the unbound DHCP leases bridge

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agounbound+DHCP: Make sure to only remove old leases and not static hosts
Michael Tremer [Wed, 14 Sep 2016 15:35:41 +0000 (16:35 +0100)] 
unbound+DHCP: Make sure to only remove old leases and not static hosts

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agounbound+DHCP: Read correct DHCP domain name for lease
Michael Tremer [Wed, 14 Sep 2016 15:29:53 +0000 (16:29 +0100)] 
unbound+DHCP: Read correct DHCP domain name for lease

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agounbound+DHCP: Read existing leases from unbound
Michael Tremer [Wed, 14 Sep 2016 14:54:36 +0000 (15:54 +0100)] 
unbound+DHCP: Read existing leases from unbound

This allows us to restart unbound and all DHCP leases
will be re-imported even if the unbound-dhcp-leases-bridge is
not restarted.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoMerge branch 'core104' into next
Arne Fitzenreiter [Tue, 13 Sep 2016 17:41:36 +0000 (19:41 +0200)] 
Merge branch 'core104' into next

7 years agokernel: update to 3.14.79. core104
Arne Fitzenreiter [Tue, 13 Sep 2016 17:39:43 +0000 (19:39 +0200)] 
kernel: update to 3.14.79.

7 years agoxen-image: fix kernel installation.
Arne Fitzenreiter [Tue, 13 Sep 2016 17:37:58 +0000 (19:37 +0200)] 
xen-image: fix kernel installation.

linux-pae will refuse to install if pae is not detected but /proc was not exist at image cration. fixed by adding a fake cpuinfo file...

7 years agounbound+DHCP: Set TTL for local leases to 1m
Michael Tremer [Mon, 12 Sep 2016 20:14:44 +0000 (21:14 +0100)] 
unbound+DHCP: Set TTL for local leases to 1m

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agounbound: Start service after network has been brought up
Michael Tremer [Mon, 12 Sep 2016 20:13:25 +0000 (21:13 +0100)] 
unbound: Start service after network has been brought up

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agounbound: Restart after local hosts have been modified
Michael Tremer [Mon, 12 Sep 2016 19:52:51 +0000 (20:52 +0100)] 
unbound: Restart after local hosts have been modified

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoDNS: Import local hosts into unbound
Michael Tremer [Mon, 12 Sep 2016 19:46:02 +0000 (20:46 +0100)] 
DNS: Import local hosts into unbound

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoStart unbound+DHCP bridge only when DHCP server is running
Michael Tremer [Mon, 12 Sep 2016 19:20:08 +0000 (20:20 +0100)] 
Start unbound+DHCP bridge only when DHCP server is running

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agounbound: Start service at system boot
Michael Tremer [Mon, 12 Sep 2016 19:11:47 +0000 (20:11 +0100)] 
unbound: Start service at system boot

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoRootfile update
Michael Tremer [Mon, 12 Sep 2016 10:07:44 +0000 (11:07 +0100)] 
Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agonext: rootfile updates for 'unbound' and 'initscripts'
Matthias Fischer [Sat, 10 Sep 2016 17:25:22 +0000 (19:25 +0200)] 
next: rootfile updates for 'unbound' and 'initscripts'

These two came to my view during the last builds. I hope they're ok now.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agosquid: Update to 3.5.21
Matthias Fischer [Sat, 10 Sep 2016 12:35:39 +0000 (14:35 +0200)] 
squid: Update to 3.5.21

For details, see:
http://www.squid-cache.org/Versions/v3/3.5/changesets/SQUID_3_5_21.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoRootfile update
Michael Tremer [Fri, 9 Sep 2016 13:57:07 +0000 (14:57 +0100)] 
Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoMerge branch 'unbound' into next
Michael Tremer [Thu, 8 Sep 2016 18:50:45 +0000 (19:50 +0100)] 
Merge branch 'unbound' into next

7 years agounbound: Automatically scale configuration to system
Michael Tremer [Thu, 8 Sep 2016 18:46:43 +0000 (19:46 +0100)] 
unbound: Automatically scale configuration to system

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoBUG11177: pppoe password not required anymore
Alexander Marx [Thu, 8 Sep 2016 06:36:58 +0000 (08:36 +0200)] 
BUG11177: pppoe password not required anymore

fixes: #11177

There are providers which do not use passwords anymore.
For this reason the password field is no longer mandatory.

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoLibvirt: Fix update.sh script
Jonatan Schlag [Fri, 2 Sep 2016 18:35:23 +0000 (20:35 +0200)] 
Libvirt: Fix update.sh script

The virtlogd could only be restarted when the daemons run. The update.sh
script tried to restart the daemon no matter if the daemons run or not.
This behaviour produce problems.

An If statement now checks if the daemon runs or not and execute the
command that is suitable for the situation.

Fixes: #11172
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoUpdate libvirt to 2.1
Jonatan Schlag [Sun, 28 Aug 2016 17:59:19 +0000 (19:59 +0200)] 
Update libvirt to 2.1

This is the update of libvirt to the latest version 2.1.
The most important change from a packager view is the new virtlogd
daemon.
This daemon handles the qemu output and wrote it to log files.

The require some changes:
- A new init script to start, stop restart the daemon called virtlogd.
The daemon is restart with SIGUSR1 (this is important because the daemon
keeps all pipelines etc. open).

This introduces a problem with the uninstall.sh install.sh script.
It is not possible to stop the daemon while virtual machines are
running, so the script update.sh execute from now not uninstall.sh and
install.sh instead it contains all steps from uninstall.sh install.sh
expect the start / stop routine for virtlogd. The daemon is just
restarted after the update, which makes sure that all changes take
effect.

- new symlinks in the uninstall.sh and install.sh script and some root
file changes because of the new virtlogd init script.
- the archive format changes from tar.gz to tar.xz

For Changelogs see:

https://libvirt.org/news-2015.html
https://libvirt.org/news.html (2017 and later:
https://libvirt.org/news-2016.html )

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agoMerge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Michael Tremer [Wed, 31 Aug 2016 21:40:16 +0000 (22:40 +0100)] 
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

7 years agodnsmasq 2.76: latest patches (015-016)
Matthias Fischer [Wed, 17 Aug 2016 16:30:02 +0000 (18:30 +0200)] 
dnsmasq 2.76: latest patches (015-016)

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 years agognupg: Update to 1.4.21
Matthias Fischer [Tue, 23 Aug 2016 16:30:03 +0000 (18:30 +0200)] 
gnupg: Update to 1.4.21

Second try:

Update from 1.4.18 to 1.4.21, based on current 'next'.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>