core101: close core update.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

backports: ath9k fix ht40 init.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core101: remove old rpi kernel modules.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core101: add changed packages to updater.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

conntrack: Remove old disable_nf_sip indicator file

This is not used any more and not needed either.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core101: Migrate conntrack settings that broke in 100

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core101: Add recent changes on firewall

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

optionsfw.cgi: Clean up code

Add translation to radio buttons. No functional changes.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

firewall: Fix connection tracking for PPTP

GRE connections were not correctly forwarded without the helper
being enabled. Choosing the wrong protocol here did not allow
us to load it properly.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

firewall: fix nat module load for application layer gateways

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge remote-tracking branch 'origin/core100' into next

kernel: fix mac80211 build on rpi.

mac80211 depends on CRYPTO_GCM don't know why this was off before in
rpi config.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: change stackprotector from strong to regular.

Xen/Paravirt crash with stackprotect in strong mode.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

xen-image-maker: fix typos and missing doublequote.

core101: Ship updated dma

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dma: Update to 0.11

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

lcdproc 0.5.7: Fixes for rootfile

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Add missing end-quote to xen-image-maker

Signed-off-by: Eberhard Beilharz <eb1@sil.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core101: exclude grub.cfg and grubenv from updates.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core100: remove grub.cfg and grubenv from updater.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

lcdproc: Bump release

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

lcdproc: Update to 0.5.7

Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

samba: import RHEL security fixes.

CVE-2015-7560
CVE-2016-2110
CVE-2016-2111
CVE-2016-2112
CVE-2016-2115
CVE-2016-2118 aka Badlock
CVE-2015-5370

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

installer: Force overwriting EXT4 FS

On 64 bit systems, the installation fails if a previous XFS FS
is detected on the partition an EXT4 FS should be formatted.

This does not happen on 32 bit systems.

Fixes: #11091
Reported-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Tested-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

dnsdist: disable parallel build

on 4 core machines with 2GB ram the parallel build fails
with out of memory.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

New package ncat.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Build nmap without ncat.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Remove the nc symlink from netcat package and rename to gnu-netcat (gnu-netcat is no longer our standard netcat)

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core101: Ship latest changes in CGI files

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

{proxy,chpasswd}.cgi: Fix a remote code execution vulnerability

Handcrafted requests with shell commands could be sent to these
CGI files and gain shell access as unprivileged user.

References: #11087

Reported-by: Yann Cam <yann.cam@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ipinfo.cgi: Remove XSS vulnerability

References: #11087

Reported-by: Yann Cam <yann.cam@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bwm-ng: update to 0.6.1

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dmidecode: fix rootfile.

symlink is not working at common/arch because the check will seek files.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

perl-Apache-Htpasswd: fix rootfiles

Signel-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

squid: Update rootfile

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core101: start update.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

mcelog: new package

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

New package iperf3

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pcre 8.38: latest patches from upstream (LFS)

* Fix auto-callout (?# comment bug.
* Fix negated POSIX class within negated overall class UCP bug.
* Fix bug for isolated \E between an item and its qualifier
when auto callout is set.
* Give error for regexec with pmatch=NULL and REG_STARTEND set.
* Allow for up to 32-bit numbers in the ordin() function in  pcregrep.
* Fix \Q\E before qualifier bug when auto callouts are enabled.
* Fix /x bug when pattern starts with white space and (?-x).
* Fix copy named substring bug.
* Fix (by hacking) another length computation issue.
* Fix get_substring_list() bug when \K is used in an assertion.
* Fix pcretest bad behaviour for callout in lookbehind.
* Fix workspace overflow for (*ACCEPT) with deeply nested parentheses.
* Yet another duplicate name bugfix by overestimating the
memory needed  (i.e. another hack - PCRE2 has this "properly" fixed).
* Fix pcretest loop for global matching with an ovector size less than 2.
* Fix non-diagnosis of missing assertion after (?(?C).

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squid 3.4.14: Bugfix for #4323 (Netfilter broken cross-includes with Linux 4.2)

For details see: http://bugs.squid-cache.org/show_bug.cgi?id=4323

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squid: Patch SQUID-2016:3/CVE-2016-3947

http://www.squid-cache.org/Advisories/SQUID-2016_3.txt

 Due to a buffer overrun Squid pinger binary is vulnerable to
 denial of service or information leak attack when processing
 ICMPv6 packets.

 This bug also permits the server response to manipulate other
 ICMP and ICMPv6 queries processing to cause information leak.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

perl-Apache-Htpasswd: New module

Used to change passwords in Apache's htpasswd files

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

dmidecode: Move into core system

This should not be a package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dmidecode: Only build on x86

ARM is obviously not supported

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'master' into next

kernel: set pakver to 67

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

e1000e: update to 3.3.3

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

igb: fix hung at dev_get_stats()

without this igb can bring the whole userspace to hung
with "cpu_stuck for more than 22s". I don't understand
why this bug is set to "wont-fix" at the bugtracker.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

igb: update to 5.3.4.4

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

bind: Update to 9.10.3-P4

Changelog (excerpt):
[security] Duplicate EDNS COOKIE options in a response could
trigger an assertion failure. (CVE-2016-2088) [RT #41809]

[security] Fix resolver assertion failure due to improper
DNAME handling when parsing fetch reply messages.
(CVE-2016-1286) [RT #41753]

[security] Malformed control messages can trigger assertions
in named and rndc. (CVE-2016-1285) [RT #41666]

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bind: Update to 9.10.3-p3

Changelog (excerpt):
[bug] Fixed a regression in resolver.c:possibly_mark()
which caused known-bogus servers to be queried
anyway. [RT #41321]

[security] render_ecs errors were mishandled when printing out
a OPT record resulting in a assertion failure.
(CVE-2015-8705) [RT #41397]

[security] Specific APL data could trigger a INSIST.
(CVE-2015-8704) [RT #41396]

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

New package dmidecode

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

binutils 2.24: Fixes for rootfiles

Last builds were always complaining about changes in rootfiles...

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pcre: Delete old patches

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pcre: Update to 8.38

Bugfix release

For complete changelog see:
http://www.pcre.org/original/changelog.txt

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

opus: Build in parallel

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

opus: Don't ship development files

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Enable spice support in qemu, add spice as a dependency for qemu and bump qemu version number.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Add all new packages (opus, python-pyparsing, python-six, spice-protocol, spice) to make.sh

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

New package spice

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

New package spice-protocol (required by spice (only for build))

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

New package python-pyparsing (required by spice (only for build))

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

New package python-six (required by spice (only for build))

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

opus: Remove whitespace errors

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

New package opus (required by spice)

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libxml2: update to 2.9.3

Contains security fixes and other bug fixes:

CVE-2015-8242 Buffer overead with HTML parser in push mode (Hugh Davenport)
CVE-2015-7500 Fix memory access error due to incorrect entities boundaries (Daniel Veillard)
CVE-2015-7499-2 Detect incoherency on GROW (Daniel Veillard)
CVE-2015-7499-1 Add xmlHaltParser() to stop the parser (Daniel Veillard)
CVE-2015-5312 Another entity expansion issue (David Drysdale)
CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey (David Drysdale)
CVE-2015-7498 Avoid processing entities after encoding conversion failures (Daniel Veillard)
CVE-2015-8035 Fix XZ compression support loop (Daniel Veillard)
CVE-2015-7942-2 Fix an error in previous Conditional section patch (Daniel Veillard)
CVE-2015-7942 Another variation of overflow in Conditional sections (Daniel Veillard)
CVE-2015-1819 Enforce the reader to run in constant memory (Daniel Veillard)
CVE-2015-7941_2 Cleanup conditional section error handling (Daniel Veillard)
CVE-2015-7941_1 Stop parsing on entities boundaries errors (Daniel Veillard)

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bump ebtables version number

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

build ebtables with the new patch (nothing go into usr local)

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

add a patch for ebtables (to fix the problem with usr local)

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

nano: Update to 2.5.3

Contains several bugfixes and improvements, for details see:
http://www.nano-editor.org/dist/v2.5/ChangeLog

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge remote-tracking branch 'origin/master' into next

memtest: use always precompiled version

gcc-4.9.3 build a corrupted version

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

hostapd: fix crash at txpower set on ath10k

ath10k generate a fault if iwconfig try to set txpower
while the device is down.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

backports: ath10k fix logspam if channel was not set.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: add PC Engines(TM) APU2 LED driver

kernel: k10temp: add family 16h model 30h pci id.

used by AMD GX-412TC in PC Engines(TM) APU 2

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

git: update to 2.7.4

Remote Code Execution in all git versions: CVE-2016-2324 and CVE-2016-2315
Git version 2.7.4 was released with the fixes for all known vulnerabilities

https://github.com/git/git/tree/master/Documentation/RelNotes

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

e2fsprogs: Fix indentation of makefile

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

e2fsprogs: Only build in own directory

This makes it easier to clean up after the build

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

e2fsprogs: update to 1.42.13

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pkg-config: update to 0.29

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

grep: update to 2.23

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

asterisk addon: update to 11.21.1

Signed-off-by: Dirk Wagner <dirk.wagner@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libsrtp: upgrade to 1.5.4

Signed-off-by: Dirk Wagner <dirk.wagner@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

git: update to 2.7.1

Fixes CVE-2016-2324 and CVE-2016‑2315

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

patch: update to 2.7.5

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

clamav: Update to 0.99.1

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pciutils: update to 3.4.1

Update pciutils to last version from Linux from Scratch.

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

texinfo: update to 5.2

Update texinfo to version 5.2 from linux from scratch

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

paxctl: update to 0.9

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

mpfr: update to 3.1.3

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

gmp: update to 6.0.1

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core100: update linker config

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

htop: update to verion 2.0.1

With ncurses 6.0, htop will also support your mouse wheel for scrolling
I tried it... :) very nice tool...

http://hisham.hm/htop/

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

nettle: update to 3.2

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>