Merge branch 'master' of ssh://git.ipfire.org/pub/git/ipfire-3.x

gettext: Update to 0.19.5

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

gnupg2: Update to version 2.1.6

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

npth: New package

Required for gnupg2 >= 2.1 which decided to invent yet
another threading library.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ed: Update to 1.12

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

strongswan: Update to version 5.3.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'master' of ssh://git.ipfire.org/pub/git/ipfire-3.x

screen: Update to version 4.3.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libunistring: Update to version 0.9.6

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libidn: Update to version 1.31

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

openssl: Enable optimised code for ARM

There are assembly implementations available for the
ARM architectures that will speed up execution speed
of some hashes, ciphers and so on.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

openssl: Update to 1.0.2d (CVE-2015-1793)

Alternative chains certificate forgery (CVE-2015-1793)
======================================================

Severity: High

During certificate verification, OpenSSL (starting from version 1.0.1n and
1.0.2b) will attempt to find an alternative certificate chain if the first
attempt to build such a chain fails. An error in the implementation of this
logic can mean that an attacker could cause certain checks on untrusted
certificates to be bypassed, such as the CA flag, enabling them to use a valid
leaf certificate to act as a CA and "issue" an invalid certificate.

This issue will impact any application that verifies certificates including
SSL/TLS/DTLS clients and SSL/TLS/DTLS servers using client authentication.

  http://openssl.org/news/secadv_20150709.txt

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

gummiboot: Remove package

gummiboot is not developed as a standalone project any
more and has been merged into systemd.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: Remove iptables support

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

tzdata: Fix installation location of the files

The files were installed in a wrong sub-directory
and therefore could not be properly found by programs
using time.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

openssl: Update to version 1.0.2c

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'master' of ssh://git.ipfire.org/pub/git/ipfire-3.x

collecty: Import upstream changes

The latency plugin was rewritten and uses liboping now.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

liboping: New package

A simple library that sends ICMP echo requests.

Required for collecty

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

git: Install git-email automatically and add its dependencies

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

perl-GSSAPI: New package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

perl-Digest-HMAC: New package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

perl-Authen-SASL: New package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

perl-Net-SSLeay: New package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

perl-IO-Socket-SSL: New package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

perl-Net-SMTP-SSL: New package

Required by git send-email

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

systemd: Reexec systemd after update.

Reexec the systemd init daemon after update from now. This will prevent
from leaving the system in an undefined / unuseable status.

Fixes #10820.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Remove Christian Schmidt as package maintainer from various packages

No rebuild required

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge remote-tracking branch 'stevee/compat-xz'

python3: Update to version 3.4.3

This is a major version bump and will probably render
some python3-* packages incompatible.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

perl: Rebuild against libdb

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

compat-libgcrypt: New package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pyfire: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

subversion: Update to 1.8.13

Also rebuild against libdb

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squidGuard: Drop package

This will be replaced by c_icap.

squidGuard is not maintained for many many years and
does not fulfill all our requirements that we have today.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

openldap: Rebuild against libdb

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libsolv: Drop dependency to db4(-devel)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

cyrus-sasl: Rebuild against libdb

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bind: Drop dependency to db4(-devel)

The library is not used

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

c_icap_modules: Rebuild against libdb

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

gc: Disable testsuite

The testsuite hangs forever on armv5tel

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

c_icap: Rebuild against libdb

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

man-db: Drop dependency to db4(-devel)

The library is not used at all

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

compat-db: Add db 5.2 and 4.8

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

mpfr: Update to 3.1.3

Minor bug fixes only

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bird: Update to 1.5.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

rp-pppoe: Update to 3.11

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diffutils: Disable gnulib testsuite

This testsuite does not work well on grsecurity-enabled kernels.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'master' of ssh://git.ipfire.org/pub/git/ipfire-3.x

ulogd2: Update to version 2.0.5

This package adds logging of the flows and packets to an sqlite
database that can be used to get statistical output.

Logging to syslog as known from IPFire 2 has been added as well
but is only temporary until there is a way to view the logged
packets on the console.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libmpc: Update to version 1.0.3

Fixes #10802

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libidn: Update to version 1.30

Fixes #10800

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libgcrypt: Update to version 1.6.3

Fixes #10801

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wget: Update to version 1.16.3

Fixes #10799

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

zlib: Update to version 1.2.8

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

firewall: Drop the old firewall package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

iptables: Remove package

This is replaced by nftables.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pdns-recursor: Drop package

pdns-recursor is not needed any more has we have replaced it
mostly by unbound already where ever we are using it. The
main reason for that is the lack of support for DNSSEC.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

nftables: Update to snapshot 20150531

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libnftl: Update to snapshot 20150531

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

collecty: Add -debuginfo package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'master' of ssh://git.ipfire.org/pub/git/ipfire-3.x

collecty: Update to version 003

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Mass rebuild of perl and perl modules.

Perl and all binary modules needs a rebuild with the latest version of pakfire (0.9.26-3.1)
to provide and requires the correct perl API information for a correct dependency resolving.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pango: Generate modules cache on install and update if not present.

Now the modules cache automatically will be created on install or after
pango has been updated.

The module cache is required for any usage of pango.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pakfire: Add upstream patch for perl version.

This patch is required in order to automatically detect the perl version
and to track the perl API which a module is built against.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

tmux: Update to version 2.0.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: Update to version 4.0.4

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

python-rrdtool: Add rrdtool python module for Python 3

collecty: Update to version 002

rrdtool: Update to version 1.5.2

This updates the rrdtool to the latest version and adds
systemd support and pulls in a viable font so that graphs
can be generated with actual text on them.

nettle: Update to version 3.1.1

ed: Update to version 1.11

Fixes #10798

lzip: New package

The GNU project is starting to distribute some packages compressed
with the lzip algorithm (tar.lz). This algorithm is based on LZMA
and adds integrity of the compressed data.

The lzip package is added to the default build environment.

gawk: Update to version 4.1.2

Merge branch 'master' of ssh://git.ipfire.org/pub/git/ipfire-3.x

ethtool: Update to version 3.18

dhcp: Add dhclient6 systemd service file

Rebuild for strlcpy removed from glibc

Our glibc used to bring an implementation of strlcpy
that has been used by tmux and tcpdump. We do not add
the patch since glibc 2.19 any more, so these need to
be rebuilt in order to function.

nettle: Update to version 3.1

This build enables FAT binaries for ARM and adds a compat package
for programs that are linked against older versions of nettle.

Fixes #10794

xz: Move compat libraries into own package.

Fixes #10751.

Merge remote-tracking branch 'stevee/shadow-manpages'

Merge remote-tracking branch 'stevee/net-tools'

Merge remote-tracking branch 'stevee/openssh-update'

Merge remote-tracking branch 'stevee/perl-module-updates'

Merge remote-tracking branch 'stevee/perl-fix'

multipath-tools: Update to snapshot from 2013-02-22

sysvinit: Remove pidof

This one is now built in procps-ng

fontconfig: Update to version 2.11.93

diffutils: Fix build (format security)

libaio: Update to version 0.3.110

cairo: Update to version 1.14.2

grubby: Depend on u-boot-tools only on 32-bit ARM arches

avahi: Update to version 0.6.31

lcms2: Update to version 2.7

libpcap: Update to version 1.7.2

openvpn: Update to version 2.3.6

pango: Update to 1.36.8

pinentry: Update to version 0.9.0

rrdtool: Update to version 1.4.9