ipfire-2.x.git
2 years agokernel: update to 4.14.40
Arne Fitzenreiter [Thu, 10 May 2018 19:34:07 +0000 (21:34 +0200)] 
kernel: update to 4.14.40

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agoinstall initscript for NRPE
Peter Müller [Wed, 9 May 2018 19:59:41 +0000 (21:59 +0200)] 
install initscript for NRPE

Install initscript for NRPE addon.

The second version of this patch actually includes the
initscript, which was missing due to lack of coffee the
first time. :-)

Thanks to Michael for catching it.

Resent due to crappy linewrapping in initscript by MUA.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agodisplay country data for remote IPs on ovpnmain.cgi
Peter Müller [Mon, 7 May 2018 15:23:52 +0000 (17:23 +0200)] 
display country data for remote IPs on ovpnmain.cgi

This makes debugging easier, especially when it comes to
GeoIP related firewall rules and database related issues
such as #11482.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agofix aesthetic issues in remote.cgi and ship them
Peter Müller [Mon, 7 May 2018 15:01:58 +0000 (17:01 +0200)] 
fix aesthetic issues in remote.cgi and ship them

Fix some minor cosmetic issues on remote.cgi as well as a typo in
the language files ("sesstions" -> "sessions"). The changes are
listed in "filelists" for Core Update 121.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoBUG11559: fwhosts
Alexander Marx [Wed, 2 May 2018 11:27:07 +0000 (13:27 +0200)] 
BUG11559: fwhosts

When creating firewallrules or using firewall groups,
it should be possible to select a single IpSec subnet if there is more than one.

This patch adds the changes to the firewall groups.
Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Tested-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoBUG11559: firewall-lib
Alexander Marx [Wed, 2 May 2018 11:27:06 +0000 (13:27 +0200)] 
BUG11559: firewall-lib

When creating firewallrules or using firewall groups,
it should be possible to select a single IpSec subnet if there is more than one.

This patch has neccessary changes for the firewall-lib. While the network name of the IpSec changes
on save (subnet is added to name) we need to split the name or normalise the field before using it.
Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Tested-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoBUG11559: firewall.cgi
Alexander Marx [Wed, 2 May 2018 11:27:05 +0000 (13:27 +0200)] 
BUG11559: firewall.cgi

When creating firewallrules or using firewall groups,
it should be possible to select a single IpSec subnet if there is more than one.

This patch has the changes for firewall.cgi
Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Tested-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoBUG11559: Languagefiles
Alexander Marx [Wed, 2 May 2018 11:27:04 +0000 (13:27 +0200)] 
BUG11559: Languagefiles

When creating firewallrules or using firewall groups,
it should be possible to select a single IpSec subnet if there is more than one.

This patch adds a new languagefileword "fwdfw all subnets" which is used in firewall.cgi and fwhosts.cgi
Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Tested-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoupdate language files
Peter Müller [Sat, 20 Jan 2018 17:25:47 +0000 (18:25 +0100)] 
update language files

Add new language strings to the language files.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agodisplay active logins at remote.cgi
Peter Müller [Sat, 20 Jan 2018 17:24:31 +0000 (18:24 +0100)] 
display active logins at remote.cgi

Display active user logins (both local and remote) at
the remote.cgi page in the WebUI. This might be useful
for debugging broken SSH sessions or simply checking that
nobody is currently logged in. :-)

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agowget: Update to 1.19.5
Matthias Fischer [Sun, 6 May 2018 23:02:03 +0000 (01:02 +0200)] 
wget: Update to 1.19.5

Hi,

Excerpts from official announcement:

"This version fixes CVE-2018-0494 (Cookie injection vulnerability) found
by Harry Sintonen.
This version fixes several issues, mostly found by OSS-Fuzz.
It also introduces TLS1.3 with OpenSSL, a new option --ciphers and
updates the CSS grammar to version 2.2.
...
Noteworthy changes:

* Fix cookie injection (CVE-2018-0494)
* Enable TLS1.3 with recent OpenSSL environment
* New option --ciphers to set GnuTLS / OpenSSL ciphers directly
* Updated CSS grammar to CSS 2.2
* Fixed several memleaks found by OSS-Fuzz
* Fixed several buffer overflows found by OSS-Fuzz
* Fixed several integer overflows found by OSS-Fuzz
* Several minor bug fixes"

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocmake: Update to 3.11.1
Matthias Fischer [Sun, 6 May 2018 11:34:17 +0000 (13:34 +0200)] 
cmake: Update to 3.11.1

For details see:
https://cmake.org/cmake/help/v3.11/release/3.11.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agounbound: Update to 1.7.1
Matthias Fischer [Sun, 6 May 2018 10:37:31 +0000 (12:37 +0200)] 
unbound: Update to 1.7.1

For details see:
http://www.unbound.net/download.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoopenssh: Update to 7.7p1
Matthias Fischer [Sun, 6 May 2018 10:33:25 +0000 (12:33 +0200)] 
openssh: Update to 7.7p1

For details see:
http://www.openssh.com/txt/release-7.7

This release fixes:
https://bugzilla.ipfire.org/show_bug.cgi?id=11693
https://bugzilla.ipfire.org/show_bug.cgi?id=11694

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agohtop: Update to 2.2.0
Matthias Fischer [Sun, 6 May 2018 09:12:07 +0000 (11:12 +0200)] 
htop: Update to 2.2.0

For details see:
https://hisham.hm/htop/index.php?page=downloads

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agonano: Update to 2.9.6
Matthias Fischer [Sun, 6 May 2018 08:56:29 +0000 (10:56 +0200)] 
nano: Update to 2.9.6

For details see:
https://www.nano-editor.org/news.php

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agonagios_nrpe: Update for rootfile
Matthias Fischer [Sun, 6 May 2018 18:14:22 +0000 (20:14 +0200)] 
nagios_nrpe: Update for rootfile

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore121: Ship updated libidn
Michael Tremer [Sat, 5 May 2018 19:44:52 +0000 (20:44 +0100)] 
core121: Ship updated libidn

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore121: Ship updated pcre
Michael Tremer [Sat, 5 May 2018 19:44:20 +0000 (20:44 +0100)] 
core121: Ship updated pcre

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agolibidn: Update to 1.34
Matthias Fischer [Sat, 5 May 2018 07:18:04 +0000 (09:18 +0200)] 
libidn: Update to 1.34

For details see:
https://lists.gnu.org/archive/html/info-gnu/2018-04/msg00001.html

"* Version 1.34 (2018-03-31)

** libidn: Fix integer overflow in combine_hangul()
   Found by fuzzing.
** libidn: Fix integer overflow in punycode decoder
   Found by fuzzing, fix for the fix reported by Christian Weisgerber
** libidn: Fix performance issue in idna_to_unicode_internal()
   Found by fuzzing.
** libidn: Fix performance issue in stringprep functions.
   Found by fuzzing.
** libidn: Fix NULL pointer dereference in g_utf8_normalize()
   Found by fuzzing.
** libidn: Fix NULL pointer dereference in stringprep_ucs4_nfkc_normalize()
   Found by fuzzing.
** libidn: Increase performance of stringprep functions
   Found by fuzzing.
** testing: Add OSS-fuzz integration and regression testing
** build: Update gnulib files
** build: Modernize GTK-Doc build
** build: Fix parallel builds
** build: Add configure flag --disable-doc
** build: Add configure flag --enable-ubsan (enable UB Sanitizer)
** build: Add configure flag --enable-asan (enable Address Sanitizer)
** build: Fix compiler warnings
** build: Fix build for gcc-7
** i18n: Added Swedish translation.
   Thanks to Josef Andersson.
** API and ABI is backwards compatible with the previous version."

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopcre: Update to 8.42
Matthias Fischer [Sat, 5 May 2018 06:33:24 +0000 (08:33 +0200)] 
pcre: Update to 8.42

For details see:
http://www.pcre.org/original/changelog.txt

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoupdate nagios_nrpe to 3.2.1
Peter Müller [Sun, 29 Apr 2018 08:20:17 +0000 (10:20 +0200)] 
update nagios_nrpe to 3.2.1

Update NRPE to 3.2.1, which fixes various security vulnerabilities
and bugs (changelog is available at:
https://github.com/NagiosEnterprises/nrpe/blob/master/CHANGELOG.md).

Due to changes in ./configure, some options such as initsystem (sysV)
need to be specified now. Also, simple "make" does not exist anymore
and must be replaced by "make all".

Rootfile information is now included which was missing in the
first version of this patch.

This fixes #11700 and partly addresses #11551.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore121: Ship update list of trusted CAs
Michael Tremer [Mon, 30 Apr 2018 10:35:30 +0000 (11:35 +0100)] 
core121: Ship update list of trusted CAs

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoupdate ca-certificates CA bundle
Peter Müller [Sun, 29 Apr 2018 08:09:10 +0000 (10:09 +0200)] 
update ca-certificates CA bundle

Update the CA certificates list to what Mozilla NSS ships currently
(some Turktrust root CAs have been dropped).

The original file can be retrieved from:
https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore121: fix typo fileslist -> filelist
Arne Fitzenreiter [Sat, 5 May 2018 16:01:53 +0000 (18:01 +0200)] 
core121: fix typo fileslist -> filelist

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agoset pakfire core back to 120
Arne Fitzenreiter [Sat, 5 May 2018 15:49:44 +0000 (17:49 +0200)] 
set pakfire core back to 120

this should set to 121 when the updated is finished to ensure that
testers that has installed a test build install core121 again.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agoMerge branch 'kernel-4.14' into next
Arne Fitzenreiter [Sat, 5 May 2018 07:14:42 +0000 (09:14 +0200)] 
Merge branch 'kernel-4.14' into next

2 years agokernel: update to 4.14.39
Arne Fitzenreiter [Thu, 3 May 2018 13:37:39 +0000 (15:37 +0200)] 
kernel: update to 4.14.39

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agou-boot: enable HUSH_PARSER for Iomega iConnect
Arne Fitzenreiter [Wed, 2 May 2018 09:39:38 +0000 (11:39 +0200)] 
u-boot: enable HUSH_PARSER for Iomega iConnect

without this if ... then ... else is not supported.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agou-boot: remove useless rootwait double
Arne Fitzenreiter [Wed, 2 May 2018 09:38:23 +0000 (11:38 +0200)] 
u-boot: remove useless rootwait double

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agokernel: update to 4.14.38
Arne Fitzenreiter [Mon, 30 Apr 2018 10:26:30 +0000 (12:26 +0200)] 
kernel: update to 4.14.38

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agocore121: Add filelist
Michael Tremer [Mon, 30 Apr 2018 10:26:10 +0000 (11:26 +0100)] 
core121: Add filelist

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agou-boot: update rootfile
Arne Fitzenreiter [Sun, 29 Apr 2018 21:09:08 +0000 (23:09 +0200)] 
u-boot: update rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agokernel: disable crng unseeded use message spamming
Arne Fitzenreiter [Sun, 29 Apr 2018 07:48:29 +0000 (09:48 +0200)] 
kernel: disable crng unseeded use message spamming

there was a bug until 4.14.36 that this message are not printed at all
now it work and spam the log at boot.
For security it is is a nightmare to use unseeded random but we and the user
cannot do anything. This is work for platform maintainers to get the crng
working earlier.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agou-boot-kirkwood: add u-boot build for kirkwood
Arne Fitzenreiter [Sat, 28 Apr 2018 08:24:16 +0000 (10:24 +0200)] 
u-boot-kirkwood: add u-boot build for kirkwood

This file build IPFire (dtb, bootz) compatible versions for:

Marvell DreamPlug
Iomega iConnect Wireless
Raidsonic ICY-Box 62x0

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agoMerge remote-tracking branch 'origin/core120' into kernel-4.14
Arne Fitzenreiter [Sat, 28 Apr 2018 07:09:00 +0000 (09:09 +0200)] 
Merge remote-tracking branch 'origin/core120' into kernel-4.14

2 years agokernel: update to 4.14.37
Arne Fitzenreiter [Sat, 28 Apr 2018 07:01:52 +0000 (09:01 +0200)] 
kernel: update to 4.14.37

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agou-boot: update buildscript
Arne Fitzenreiter [Sat, 28 Apr 2018 06:51:01 +0000 (08:51 +0200)] 
u-boot: update buildscript

enable wandboard
update ident strings
distclean after every target

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agoremove forgotten Nagios files, if any
Peter Müller [Thu, 26 Apr 2018 19:44:56 +0000 (21:44 +0200)] 
remove forgotten Nagios files, if any

When we decided to drop Nagios, some files were not removed on the
installations. Since the package does not exist anymore, "pakfire remove
nagios" does not work so we need to clean them up manually in case they
exist.

The third version of this patch makes sure Apache is restarted
afterwards, and includes some forgotten files [sic] as well as it is
now applying for Core Update 121.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoStart Core Update 121
Peter Müller [Thu, 26 Apr 2018 15:06:51 +0000 (17:06 +0200)] 
Start Core Update 121

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoBUG:11312 Fix renaming GeoIP groups
Peter Müller [Thu, 26 Apr 2018 15:31:46 +0000 (17:31 +0200)] 
BUG:11312 Fix renaming GeoIP groups

When renaming a GeoIP Group, the corresponding names in
firewallrules (if any) are not changed accordingly. Now
when changing a GeoIP Group the firewallrules are renamed
correctly.

Slightly improved first version of this patch (contained
a blank line with trailing whitespace). No functionality
changed, patch has been confirmed as working correctly.

Fixes: #11312
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore120: Regenerate IPsec configuration core120 v2.19-core120
Michael Tremer [Tue, 24 Apr 2018 13:25:55 +0000 (14:25 +0100)] 
core120: Regenerate IPsec configuration

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoRevert "IPsec: Try to restart always-on tunnels immediately"
Michael Tremer [Thu, 19 Apr 2018 14:36:37 +0000 (15:36 +0100)] 
Revert "IPsec: Try to restart always-on tunnels immediately"

This reverts commit a261cb06c6cdd3ba14ad0163c8c9e714ae94fc5b.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agodma: Apply compile fix
Michael Tremer [Tue, 24 Apr 2018 11:34:53 +0000 (12:34 +0100)] 
dma: Apply compile fix

dma segfaulted when built without string.h.

Fixes: #11701

Submitted upstream: https://github.com/corecode/dma/pull/58

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agodma: Apply compile fix
Michael Tremer [Tue, 24 Apr 2018 11:34:53 +0000 (12:34 +0100)] 
dma: Apply compile fix

dma segfaulted when built without string.h.

Fixes: #11701

Submitted upstream: https://github.com/corecode/dma/pull/58

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoimprove error message if make.sh is executed by non-root user
Peter Müller [Mon, 23 Apr 2018 14:17:00 +0000 (16:17 +0200)] 
improve error message if make.sh is executed by non-root user

Fixes #11706.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoDrop noip updater
Michael Tremer [Tue, 24 Apr 2018 10:04:34 +0000 (11:04 +0100)] 
Drop noip updater

This package is unused since we introduced ddns. Dropped.

Fixes: #11708
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoipsec: Open ports in outgoing direction
Michael Tremer [Tue, 24 Apr 2018 09:47:16 +0000 (10:47 +0100)] 
ipsec: Open ports in outgoing direction

When the firewall policy is blocked, no outgoing IPsec connections
can be established. That is slightly counter-intuitive since we
open ports in the incoming direction automatically.

Fixes: #11704

Reported-by: Oliver Fuhrer <oliver.fuhrer@bluewin.ch>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoFix mistakes in Turkish translation
Ersan Yildirim [Tue, 24 Apr 2018 09:46:52 +0000 (10:46 +0100)] 
Fix mistakes in Turkish translation

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoclamav 0.100.0: Add missing update for rootfile
Matthias Fischer [Sun, 22 Apr 2018 11:38:11 +0000 (13:38 +0200)] 
clamav 0.100.0: Add missing update for rootfile

This is missing in https://patchwork.ipfire.org/patch/1722/

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoupdate ClamAV to 0.100.0
Peter Müller [Sat, 21 Apr 2018 16:44:45 +0000 (18:44 +0200)] 
update ClamAV to 0.100.0

Update ClamAV to 0.100.0, which brings some new features and bugfixes
(release notes are available here: https://blog.clamav.net/2018/04/clamav-01000-has-been-released.html).

Since the internal LLVM code is now deprecated and disabled by default,
patching clamav/libclamav/c++/llvm/lib/ExecutionEngine/JIT/Intercept.cpp
does not seem to be necessary anymore.

Further, the --disable-zlib-vcheck option has been removed since it
produces warnings during compilation.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoleds: dreamplug: the blue led has wrong name in dtb
Arne Fitzenreiter [Sun, 22 Apr 2018 08:24:36 +0000 (10:24 +0200)] 
leds: dreamplug: the blue led has wrong name in dtb

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agoleds: rename dreamplug leds for new kernel
Arne Fitzenreiter [Sun, 22 Apr 2018 08:16:37 +0000 (10:16 +0200)] 
leds: rename dreamplug leds for new kernel

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agokernel: update to 4.14.35
Arne Fitzenreiter [Fri, 20 Apr 2018 08:52:30 +0000 (10:52 +0200)] 
kernel: update to 4.14.35

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agoiw: update to 4.14
Arne Fitzenreiter [Thu, 19 Apr 2018 16:42:27 +0000 (18:42 +0200)] 
iw: update to 4.14

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agocrda: update to 3.18
Arne Fitzenreiter [Thu, 19 Apr 2018 16:42:03 +0000 (18:42 +0200)] 
crda: update to 3.18

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agosquid-accounting: Do not make menu entry executable
Michael Tremer [Thu, 19 Apr 2018 14:38:20 +0000 (15:38 +0100)] 
squid-accounting: Do not make menu entry executable

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agosquid-accounting: Do not make translations executable
Michael Tremer [Thu, 19 Apr 2018 14:37:58 +0000 (15:37 +0100)] 
squid-accounting: Do not make translations executable

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agosquid-accounting: Install Turkish translation
Michael Tremer [Thu, 19 Apr 2018 14:37:28 +0000 (15:37 +0100)] 
squid-accounting: Install Turkish translation

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoRevert "IPsec: Try to restart always-on tunnels immediately"
Michael Tremer [Thu, 19 Apr 2018 14:36:37 +0000 (15:36 +0100)] 
Revert "IPsec: Try to restart always-on tunnels immediately"

This reverts commit a261cb06c6cdd3ba14ad0163c8c9e714ae94fc5b.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agokernel: i586 enable cs5535 gpio module
Arne Fitzenreiter [Wed, 18 Apr 2018 04:11:15 +0000 (06:11 +0200)] 
kernel: i586 enable cs5535 gpio module

this modul is needed for alix led support

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agowio: Translation files do not need to be executable
Michael Tremer [Tue, 17 Apr 2018 12:50:02 +0000 (13:50 +0100)] 
wio: Translation files do not need to be executable

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agowio: Actually install Turkish translation
Michael Tremer [Tue, 17 Apr 2018 12:49:41 +0000 (13:49 +0100)] 
wio: Actually install Turkish translation

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agofirstsetup: fix disabling tty's on scon mode
Arne Fitzenreiter [Tue, 17 Apr 2018 10:20:15 +0000 (12:20 +0200)] 
firstsetup: fix disabling tty's on scon mode

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agoUpdate Turkish translation and add translation for WIO and squid accounting
Ersan Yildirim [Tue, 17 Apr 2018 08:47:48 +0000 (09:47 +0100)] 
Update Turkish translation and add translation for WIO and squid accounting

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agogrub: update to 2.02
Arne Fitzenreiter [Tue, 17 Apr 2018 04:10:06 +0000 (06:10 +0200)] 
grub: update to 2.02

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agou-boot: fix typo in startscript
Arne Fitzenreiter [Mon, 16 Apr 2018 16:15:12 +0000 (18:15 +0200)] 
u-boot: fix typo in startscript

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agoacpid: start also if kernel has no acpi support.
Arne Fitzenreiter [Mon, 16 Apr 2018 16:12:24 +0000 (18:12 +0200)] 
acpid: start also if kernel has no acpi support.

acpid is also needed for gpio and hid powerbuttons if there is no
real acpi support.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agoMerge branch 'kernel-5.14' of git.ipfire.org:/pub/git/people/arne_f/ipfire-2.x into...
Arne Fitzenreiter [Sat, 14 Apr 2018 16:45:02 +0000 (18:45 +0200)] 
Merge branch 'kernel-5.14' of git.ipfire.org:/pub/git/people/arne_f/ipfire-2.x into kernel-4.14

2 years agoscreen: build before elfutils
Arne Fitzenreiter [Sat, 14 Apr 2018 16:42:52 +0000 (18:42 +0200)] 
screen: build before elfutils

if it buils after elfutils it links against libelf which is an addon

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agoacpid: build also on arm
Arne Fitzenreiter [Sat, 14 Apr 2018 16:42:00 +0000 (18:42 +0200)] 
acpid: build also on arm

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agobump packages
Arne Fitzenreiter [Sat, 14 Apr 2018 14:14:31 +0000 (16:14 +0200)] 
bump packages

the old packages are linked against removed libs

fixes: 11685

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agobump packages
Arne Fitzenreiter [Sat, 14 Apr 2018 14:14:31 +0000 (16:14 +0200)] 
bump packages

the old packages are linked against removed libs

fixes: 11685

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agokernel: update to 4.14.34
Arne Fitzenreiter [Thu, 12 Apr 2018 15:17:08 +0000 (17:17 +0200)] 
kernel: update to 4.14.34

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agoflash-images: merge normal and scon to one image.
Arne Fitzenreiter [Thu, 12 Apr 2018 14:21:20 +0000 (16:21 +0200)] 
flash-images: merge normal and scon to one image.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agoUpdated Apache 2.4
Wolfgang Apolinarski [Fri, 6 Apr 2018 05:11:03 +0000 (07:11 +0200)] 
Updated Apache 2.4

- Updated Apache from 2.4.29 to 2.4.33
- Updated Apr from 1.6.1 to 1.6.3
- Updated Apr-Util from 1.6.0 to 1.6.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agobeep 1.3: Fixes for CVE-2018-0492
Matthias Fischer [Fri, 6 Apr 2018 11:48:19 +0000 (13:48 +0200)] 
beep 1.3: Fixes for CVE-2018-0492

For details see:
https://src.fedoraproject.org/cgit/rpms/beep.git
https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-0492

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agokernel: update to 4.14.33
Arne Fitzenreiter [Wed, 11 Apr 2018 17:39:48 +0000 (19:39 +0200)] 
kernel: update to 4.14.33

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agokernel: update config
Arne Fitzenreiter [Wed, 11 Apr 2018 16:36:57 +0000 (18:36 +0200)] 
kernel: update config

disable isdn
disable audit
disable profiling on arm
disable scsi driver on arm

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agoMerge branch 'master' into core120
Arne Fitzenreiter [Mon, 9 Apr 2018 20:25:53 +0000 (22:25 +0200)] 
Merge branch 'master' into core120

2 years agocore120: Update OepnVPN configurations for PMTU changes
Michael Tremer [Mon, 9 Apr 2018 10:36:46 +0000 (11:36 +0100)] 
core120: Update OepnVPN configurations for PMTU changes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoOpenVPN: Drop Path MTU discovery settings
Michael Tremer [Mon, 9 Apr 2018 10:32:07 +0000 (11:32 +0100)] 
OpenVPN: Drop Path MTU discovery settings

These have to be dropped since the entire system does not
support Path MTU discovery any more. This should not have
any disadvantage on any tunnels since PMTU didn't really
work in the first place.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agokernel: fix kirkwood config
Arne Fitzenreiter [Mon, 9 Apr 2018 07:52:46 +0000 (07:52 +0000)] 
kernel: fix kirkwood config

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agocore120: don't (re)move old packfire/gpg databases
Arne Fitzenreiter [Wed, 4 Apr 2018 19:38:24 +0000 (21:38 +0200)] 
core120: don't (re)move old packfire/gpg databases

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agoMerge branch 'master' into core119
Arne Fitzenreiter [Tue, 3 Apr 2018 18:13:34 +0000 (20:13 +0200)] 
Merge branch 'master' into core119

2 years agocore120: Update pakfire keystore
Michael Tremer [Tue, 3 Apr 2018 16:34:24 +0000 (17:34 +0100)] 
core120: Update pakfire keystore

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore120: Ship changed pakfire files
Michael Tremer [Tue, 3 Apr 2018 16:33:04 +0000 (17:33 +0100)] 
core120: Ship changed pakfire files

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopakfire: Store key material in own directory
Michael Tremer [Tue, 3 Apr 2018 16:31:50 +0000 (17:31 +0100)] 
pakfire: Store key material in own directory

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agou-boot: update bootscript to boot from other devices than mmc
Arne Fitzenreiter [Thu, 5 Apr 2018 07:15:32 +0000 (09:15 +0200)] 
u-boot: update bootscript to boot from other devices than mmc

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agoMerge remote-tracking branch 'origin/master' into kernel-4.14
Arne Fitzenreiter [Tue, 3 Apr 2018 18:15:58 +0000 (20:15 +0200)] 
Merge remote-tracking branch 'origin/master' into kernel-4.14

2 years agoMerge remote-tracking branch 'origin/core120' into kernel-4.14
Arne Fitzenreiter [Mon, 2 Apr 2018 15:11:45 +0000 (17:11 +0200)] 
Merge remote-tracking branch 'origin/core120' into kernel-4.14

2 years agoMerge branch 'master' into core119
Arne Fitzenreiter [Mon, 2 Apr 2018 14:56:02 +0000 (16:56 +0200)] 
Merge branch 'master' into core119

2 years agocurl: Drop old compatibility symlink
Michael Tremer [Mon, 2 Apr 2018 14:50:09 +0000 (15:50 +0100)] 
curl: Drop old compatibility symlink

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocurl: Rootfile update
Michael Tremer [Mon, 2 Apr 2018 14:48:50 +0000 (15:48 +0100)] 
curl: Rootfile update

Main library was missing

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore120: Import new pakfire keys
Michael Tremer [Mon, 2 Apr 2018 14:46:31 +0000 (15:46 +0100)] 
core120: Import new pakfire keys

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopakfire: Import old key, too
Michael Tremer [Mon, 2 Apr 2018 14:07:56 +0000 (15:07 +0100)] 
pakfire: Import old key, too

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopakfire: Rename new key to pakfire-2018.key
Michael Tremer [Mon, 2 Apr 2018 14:06:02 +0000 (15:06 +0100)] 
pakfire: Rename new key to pakfire-2018.key

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopakfire: Validate signatures when multiple are available
Michael Tremer [Mon, 2 Apr 2018 14:45:48 +0000 (15:45 +0100)] 
pakfire: Validate signatures when multiple are available

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore120: add pakfire script to updater
Arne Fitzenreiter [Mon, 2 Apr 2018 09:22:19 +0000 (11:22 +0200)] 
core120: add pakfire script to updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2 years agokernel: update to 4.14.32
Arne Fitzenreiter [Sun, 1 Apr 2018 14:15:27 +0000 (16:15 +0200)] 
kernel: update to 4.14.32

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>