mcelog: new package

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

New package iperf3

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pcre 8.38: latest patches from upstream (LFS)

* Fix auto-callout (?# comment bug.
* Fix negated POSIX class within negated overall class UCP bug.
* Fix bug for isolated \E between an item and its qualifier
when auto callout is set.
* Give error for regexec with pmatch=NULL and REG_STARTEND set.
* Allow for up to 32-bit numbers in the ordin() function in  pcregrep.
* Fix \Q\E before qualifier bug when auto callouts are enabled.
* Fix /x bug when pattern starts with white space and (?-x).
* Fix copy named substring bug.
* Fix (by hacking) another length computation issue.
* Fix get_substring_list() bug when \K is used in an assertion.
* Fix pcretest bad behaviour for callout in lookbehind.
* Fix workspace overflow for (*ACCEPT) with deeply nested parentheses.
* Yet another duplicate name bugfix by overestimating the
memory needed  (i.e. another hack - PCRE2 has this "properly" fixed).
* Fix pcretest loop for global matching with an ovector size less than 2.
* Fix non-diagnosis of missing assertion after (?(?C).

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squid 3.4.14: Bugfix for #4323 (Netfilter broken cross-includes with Linux 4.2)

For details see: http://bugs.squid-cache.org/show_bug.cgi?id=4323

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squid: Patch SQUID-2016:3/CVE-2016-3947

http://www.squid-cache.org/Advisories/SQUID-2016_3.txt

 Due to a buffer overrun Squid pinger binary is vulnerable to
 denial of service or information leak attack when processing
 ICMPv6 packets.

 This bug also permits the server response to manipulate other
 ICMP and ICMPv6 queries processing to cause information leak.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

perl-Apache-Htpasswd: New module

Used to change passwords in Apache's htpasswd files

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

dmidecode: Move into core system

This should not be a package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dmidecode: Only build on x86

ARM is obviously not supported

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'master' into next

kernel: set pakver to 67

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

e1000e: update to 3.3.3

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

igb: fix hung at dev_get_stats()

without this igb can bring the whole userspace to hung
with "cpu_stuck for more than 22s". I don't understand
why this bug is set to "wont-fix" at the bugtracker.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

igb: update to 5.3.4.4

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

bind: Update to 9.10.3-P4

Changelog (excerpt):
[security] Duplicate EDNS COOKIE options in a response could
trigger an assertion failure. (CVE-2016-2088) [RT #41809]

[security] Fix resolver assertion failure due to improper
DNAME handling when parsing fetch reply messages.
(CVE-2016-1286) [RT #41753]

[security] Malformed control messages can trigger assertions
in named and rndc. (CVE-2016-1285) [RT #41666]

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bind: Update to 9.10.3-p3

Changelog (excerpt):
[bug] Fixed a regression in resolver.c:possibly_mark()
which caused known-bogus servers to be queried
anyway. [RT #41321]

[security] render_ecs errors were mishandled when printing out
a OPT record resulting in a assertion failure.
(CVE-2015-8705) [RT #41397]

[security] Specific APL data could trigger a INSIST.
(CVE-2015-8704) [RT #41396]

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

New package dmidecode

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

binutils 2.24: Fixes for rootfiles

Last builds were always complaining about changes in rootfiles...

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pcre: Delete old patches

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pcre: Update to 8.38

Bugfix release

For complete changelog see:
http://www.pcre.org/original/changelog.txt

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

opus: Build in parallel

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

opus: Don't ship development files

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Enable spice support in qemu, add spice as a dependency for qemu and bump qemu version number.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Add all new packages (opus, python-pyparsing, python-six, spice-protocol, spice) to make.sh

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

New package spice

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

New package spice-protocol (required by spice (only for build))

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

New package python-pyparsing (required by spice (only for build))

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

New package python-six (required by spice (only for build))

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

opus: Remove whitespace errors

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

New package opus (required by spice)

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libxml2: update to 2.9.3

Contains security fixes and other bug fixes:

CVE-2015-8242 Buffer overead with HTML parser in push mode (Hugh Davenport)
CVE-2015-7500 Fix memory access error due to incorrect entities boundaries (Daniel Veillard)
CVE-2015-7499-2 Detect incoherency on GROW (Daniel Veillard)
CVE-2015-7499-1 Add xmlHaltParser() to stop the parser (Daniel Veillard)
CVE-2015-5312 Another entity expansion issue (David Drysdale)
CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey (David Drysdale)
CVE-2015-7498 Avoid processing entities after encoding conversion failures (Daniel Veillard)
CVE-2015-8035 Fix XZ compression support loop (Daniel Veillard)
CVE-2015-7942-2 Fix an error in previous Conditional section patch (Daniel Veillard)
CVE-2015-7942 Another variation of overflow in Conditional sections (Daniel Veillard)
CVE-2015-1819 Enforce the reader to run in constant memory (Daniel Veillard)
CVE-2015-7941_2 Cleanup conditional section error handling (Daniel Veillard)
CVE-2015-7941_1 Stop parsing on entities boundaries errors (Daniel Veillard)

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bump ebtables version number

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

build ebtables with the new patch (nothing go into usr local)

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

add a patch for ebtables (to fix the problem with usr local)

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

nano: Update to 2.5.3

Contains several bugfixes and improvements, for details see:
http://www.nano-editor.org/dist/v2.5/ChangeLog

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge remote-tracking branch 'origin/master' into next

memtest: use always precompiled version

gcc-4.9.3 build a corrupted version

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

hostapd: fix crash at txpower set on ath10k

ath10k generate a fault if iwconfig try to set txpower
while the device is down.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

backports: ath10k fix logspam if channel was not set.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: add PC Engines(TM) APU2 LED driver

kernel: k10temp: add family 16h model 30h pci id.

used by AMD GX-412TC in PC Engines(TM) APU 2

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

git: update to 2.7.4

Remote Code Execution in all git versions: CVE-2016-2324 and CVE-2016-2315
Git version 2.7.4 was released with the fixes for all known vulnerabilities

https://github.com/git/git/tree/master/Documentation/RelNotes

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

e2fsprogs: Fix indentation of makefile

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

e2fsprogs: Only build in own directory

This makes it easier to clean up after the build

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

e2fsprogs: update to 1.42.13

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pkg-config: update to 0.29

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

grep: update to 2.23

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

asterisk addon: update to 11.21.1

Signed-off-by: Dirk Wagner <dirk.wagner@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libsrtp: upgrade to 1.5.4

Signed-off-by: Dirk Wagner <dirk.wagner@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

git: update to 2.7.1

Fixes CVE-2016-2324 and CVE-2016‑2315

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

patch: update to 2.7.5

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

clamav: Update to 0.99.1

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pciutils: update to 3.4.1

Update pciutils to last version from Linux from Scratch.

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

texinfo: update to 5.2

Update texinfo to version 5.2 from linux from scratch

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

paxctl: update to 0.9

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

mpfr: update to 3.1.3

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

gmp: update to 6.0.1

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core100: update linker config

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

htop: update to verion 2.0.1

With ncurses 6.0, htop will also support your mouse wheel for scrolling
I tried it... :) very nice tool...

http://hisham.hm/htop/

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

nettle: update to 3.2

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

set version to IPFire 2.19 core100

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core100: add changes to updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

mt7601u-firmware: added

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

ath10k-firmware: added

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

ntp: wait for connection if dhcpcd is running

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Config: update sourcecode upload url

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 3.14.65

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

linux-pae: add root (hd0) to grub.conf for virt install.

jiffybox will not load the kernel without this entry.
not tested on citrix yet.

u-boot: fix fat16 reader

core100: touch arm kernel and initrd before unpack.

this is a workaround for a uboot bug that not find all
files.

kernel: enable NFS_DEBUG

fixes #11053

kernel: update to 3.14.64

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

setup: Fix segmentation fault with more than four NICs found

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'bird' into next

bird: New package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core100: add missing openssl rootfile to updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core100: ship openssl (build with new gcc)

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core100: ship glibc (build with new gcc)

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core100: add kernel to updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core100: add function to set last correct installed core on update.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 3.14.63

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

flash-images: copy kernel and initrd first

there is a u-boot bug that not find all files if the directory entries
was splittet to more sectors so copy the important files first.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge remote-tracking branch 'origin/master' into next

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

openssl: add forgotten sslv2 compile option

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

openssl: compile with sslv2 support but disable

the new default breaks the ABI so we need to compile in but
disable it with a patch.

Revert "python-m2crypto: remove SSLv2_method"

This reverts commit d86a24928625c47d46d17daad18f159d28678ee4.

OpenSSH: remove slogin binary in rootfile and update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

python-m2crypto: remove SSLv2_method

this is removed by OpenSSL 1.0.2g

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core99: set version to 99

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

openssl: security update to 1.0.2g

this fixes diverse security problems.
check http://openssl.org/news/secadv/20160301.txt for details.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

openssh: update to 7.2p1

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

backup: fix vnstat path

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core99: create core99 for OpenSSL security update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

udev: Fix calling VLAN script

The VLAN hotplugging script was called with a wrong parameter that
should just be used to rename devices. Hence the script was not
correctly executed and did not create the virtual devices.

Fixes: #11009
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dnsmasq: 2.76test10 with latest patch (005) and some fixes

1. Added patch 005 because of the discussion on the dnsmasq-list:
"I've noticed that replies which get their TTL from the dhcp-ttl
option always get the TTL specified in dhcp-ttl. I'd prefer
something like max(0, min(<dhcp-ttl>, <lease-expire-time> -
<now>)). Otherwise, dns might hand out a high TTL for a dhcp-lease
which expires one second later.
...
Seems a sensible addition.

Cheers,

Simon."

2. Fixed several line numbers and patch lines in
'dnsmasq-Add-support-to-read-ISC-DHCP-lease-file.patch'. On the last build
I got some "Hunk failed" messages. Patches are now applied exactly at the
given lines.

3. Nevertheless, I still get some warnings:
...
dnsmasq.c: In function 'main':
dnsmasq.c:55:7: warning: unused variable 'did_bind' [-Wunused-variable]
   int did_bind = 0;
       ^
dnsmasq.c:54:9: warning: unused variable 'bound_device' [-Wunused-variable]
   char *bound_device = NULL;
         ^
...
isc.c: In function 'dhcp_lease_new':
isc.c:40:3: warning: ignoring return value of 'asprintf', declared with attribute warn_unused_result [-Wunused-result]
   asprintf(&lease->fqdn, "%s.%s", hostname, daemon->domain_suffix);
   ^

Asking about these warnings in the dnsmasq-list showed no reaction - no one answered.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dnsmasq: 2.76test10 with latest patches (001-004)

This is 'dnsmasq 2.76test10', based on current 'next', containing latest patches.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: update to 3.14.62

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

rename core99 to core100 for inserting another OpenSSL Security update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core99: Ship updated xz

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bison: update to 3.0.4

Update bison to the last version from Linux from Scratch.

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>