network: Depend on bird instead of frr

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bird: Update to 2.0.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Revert "bird: Drop package"

This reverts commit 09c3106fb13fde1c815c9513fd89b402e344c05b.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

strongswan: Update to 5.7.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

nano: Update to 3.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

systemd: Update to version 239

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

meson: New package

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ninja: New package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

python-lxml: Update to 4.2.5

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

python-setuputils: Update to 40.4.3

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

lldpd: Update to 1.0.1

This also disables sending the kernel release over
the wire and will only announce the release version
of the distribution.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

asciidoc: Update to 8.6.9

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

network: Update version to 010

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

iw: Update to 4.14

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

systemd: Don't let udev fiddle with network settings

systemd/udev has some builtin stuff that changes network
settings we are handling in network

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: Update to 4.18.9

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: Update to 4.17.19

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: Remove usage of oldnoconfig

This is going to be dropped with 4.19

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: Update to 4.16.18

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: Update to 4.15.18

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: Update to 4.14.71

Notable changes are removal of ISDN, and setting
CONFIG_DEFAULT_MMAP_MIN_ADDR to 64k.

Signed-off-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hostapd: Enable 802.11ac support and taxonomy

Signed-off-by: root <root@ipfire.localdomain>

linux-firmware: Update to 20180918

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

glibc: Update to 2.28

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

gcc: Update to 8.2.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Remove fastd and libuecc

This was added to support VPN peering with Freifunk with which
we have no afiliation any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

iproute2: Update to 4.18.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

strongswan: Add network.conf with our own settings

These settings are required to make everything in the
network package work.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

rp-pppoe: Update to 3.12

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

rp-pppoe: Depend on pppd for which this has been compiled for

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

nftables: Update to version 0.9.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libnftnl: Update to version 1.1.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Revert "nftables: Drop package"

This reverts commit 8c785caba7469a9db7700c7217411dada93107e0.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: Re-enable support for nftables

This reverts commit 5d17c06060b206bb8043f355fa9f21f23995c0ef.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Revert "iptables: New package"

This reverts commit 46ad8236e7cda033d43d9132bc72881f87b09fb1.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

strongswan: 5.6.3 and enable ChaCha20Poly1305 plugin

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

unbound: Update to 1.7.3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libevent: Remove any superfluous configure options

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

glibc: Update to 2.27

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

coreutils: Update to 8.29

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

iptables: New package

This patch brings back the userspace tools for iptables

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: Re-enable support for iptables

This patch re-enabled iptables for IPv6 and IPv4 and removes
support for nftables.

nftables is likely to be discontinued by the kernel developers
in favour of bpfilter.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

nftables: Drop package

nftables is likely to be discontinued in favour of bpfilter

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

systemd: Enable spwaning getty's on serial devices

Fixes #11678.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Drop support for iSCSI

We used to use this for our own builders, but SANs are dead.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make: Fix SEGV with glibc >= 2.26

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

iproute2: Update to 4.15.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ccache: Update to version 3.3.6

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

openssl: Update to 1.1.0g

This patch adds a compat package for openssl 1.0.2 which will
be dropped when 1.0.2 is EOL. We leave the headers here because
there will be applications that can't be built against openssl
1.1.0, yet.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

python3: Update to 3.6.4

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

clamav: Update to 0.99.3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

git: Update to 2.16.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pcre2: New package

This is a fork of PCRE with a new API and enhanced capabilities.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pcre: Update to 8.41

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

binutils: Update to 2.30

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

gcc: Update to version 7.3.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

glib2: Update to version 2.55.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

glibc: Drop some patches

glibc has been a bit unstable and we are going to drop
patches that we don't essentially need in the hope to
mitigate any random segfaults.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hostapd: Update to version 2.6

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

vsftpd: Drop package

This has been dropped from IPFire 2 as well because
upstream is not maintaaining this very actively any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

gmp: Update to version 6.1.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

mpfr: Update to version 4.0.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

unbound: Update to version 1.6.8

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

tzdata: Update to 2018c

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

nano: Update to 2.9.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

gnupg2: Update to 2.2.3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libksba: Update to 1.3.5

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libgpg-error: Update to 1.27

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libgcrypt: Update to 1.8.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libassuan: Update to 2.4.4

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

strongswan: Update to 5.6.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wget: Update to 1.19.4

* A major bug that caused GZip'ed pages to never be decompressed has been fixed

* Support for Content-Encoding and Transfer-Encoding have been marked as
  experimental and disabled by default

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dbus: Update to 1.11.20

This is a minor update to the latest available version
of dbus.

* Enable testsuite.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libselinux: Drop package

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libsepol: Drop package

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libsemanage: Drop package

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

sssd: Update to 1.14.2

This is a minor update to the latest stable version of the
1.14 series of sssd.

* Drop support for SELinux.
* Adjust project and source URL.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ding-libs: Update to 0.6.1

This is a minor update to the latest available version of the
ding-libs.

* Adjust project and source URL

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

python-pyblock: Drop package

This package is not used anymore and therefore can be dropped.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

krb5: Fix dependencies of krb5-devel package

In commit 6ea98370152c0de4d0da35fe58708a3dba574895 the support
for SElinux has been removed from krb5. Accidently selinux-devel
has been keept as a dependency when installing the development package.
This commit removes this kind of dependency.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

vim: Update to 8.0

This is a major update to the latest stable version of vim.

* Introduce patchlevel.
* Move dowload URL to github, which allows us to get a source tarball,
  including the whole patchset until the given patchlevel.
* Drop old patchset for version 7.3.
* Drop script for getting available patches. (Not needed anymore.)
* Build dynamic interpreter for python3 now.
* Disable support for SElinux.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

python3: Update to 3.6.3

This is a minor update to the latest stable version of the python 3.6
series.

* Drop support for X11 and GL (mesa)

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

cairo: Update to 1.14.10

This is a minor update to the latest available version of the cairo
1.14 series.

* Drop backend support for X11 and Xext.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dracut: Update to 046

* Drop runtime dependency to libselinux.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

binutils: Update to 2.29.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: update to 4.13.3

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make: Update to 4.2.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: update to 4.12.11

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: update config (disable AUDIT subsys)

audit support was removed from the userspace so also the kernel not need it anymore.

fixes #11465

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: update to 4.12.10

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: update to 4.12.9

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: update to 4.12.8

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dracut: Update to 045

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wpa_supplicant: Allow systemd to reload the daemon

* Add the required command to the systemd service file to allow
systemd to reload the running instances of wpa_supplicant.

* Also drop config file for logrotate, which is not needed anymore.

Fixes #11479.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

strongswan: Update to 5.6.0

Fixed a DoS vulnerability in the gmp plugin that was caused by insufficient input validation
when verifying RSA signatures, which requires decryption with the operation m^e mod n,
where m is the signature, and e and n are the exponent and modulus of the public key.
The value m is an integer between 0 and n-1, however, the gmp plugin did not verify this.
So if m equals n the calculation results in 0, in which case mpz_export() returns NULL.
This result wasn't handled properly causing a null-pointer dereference.

This vulnerability has been registered as CVE-2017-11185.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

gcc: Update to 6.4.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wpa_supplicant: Update to 2.6

Adds support for 802.11s mesh networks and drops
the configuration helper

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

systemd: Update to 233

This is a major update for systemd to version 233.

* Drop support for the audit subsystem.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

glibc: Remove audit support

* Drop support for the audit subsystem.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dbus: Update to 1.11.16

This is a minor update to the latest stable version of dbus.

* Drop support for the audit subsystem.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>