git: update to 2.7.4

Remote Code Execution in all git versions: CVE-2016-2324 and CVE-2016-2315
Git version 2.7.4 was released with the fixes for all known vulnerabilities

https://github.com/git/git/tree/master/Documentation/RelNotes

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

e2fsprogs: Fix indentation of makefile

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

e2fsprogs: Only build in own directory

This makes it easier to clean up after the build

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

e2fsprogs: update to 1.42.13

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pkg-config: update to 0.29

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

grep: update to 2.23

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

asterisk addon: update to 11.21.1

Signed-off-by: Dirk Wagner <dirk.wagner@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libsrtp: upgrade to 1.5.4

Signed-off-by: Dirk Wagner <dirk.wagner@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

git: update to 2.7.1

Fixes CVE-2016-2324 and CVE-2016‑2315

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

patch: update to 2.7.5

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

clamav: Update to 0.99.1

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pciutils: update to 3.4.1

Update pciutils to last version from Linux from Scratch.

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

texinfo: update to 5.2

Update texinfo to version 5.2 from linux from scratch

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

paxctl: update to 0.9

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

mpfr: update to 3.1.3

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

gmp: update to 6.0.1

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

htop: update to verion 2.0.1

With ncurses 6.0, htop will also support your mouse wheel for scrolling
I tried it... :) very nice tool...

http://hisham.hm/htop/

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

nettle: update to 3.2

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

set version to IPFire 2.19 core100

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core100: add changes to updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

mt7601u-firmware: added

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

ath10k-firmware: added

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

ntp: wait for connection if dhcpcd is running

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Config: update sourcecode upload url

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 3.14.65

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

linux-pae: add root (hd0) to grub.conf for virt install.

jiffybox will not load the kernel without this entry.
not tested on citrix yet.

u-boot: fix fat16 reader

core100: touch arm kernel and initrd before unpack.

this is a workaround for a uboot bug that not find all
files.

kernel: enable NFS_DEBUG

fixes #11053

kernel: update to 3.14.64

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

setup: Fix segmentation fault with more than four NICs found

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'bird' into next

bird: New package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core100: add missing openssl rootfile to updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core100: ship openssl (build with new gcc)

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core100: ship glibc (build with new gcc)

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core100: add kernel to updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core100: add function to set last correct installed core on update.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 3.14.63

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

flash-images: copy kernel and initrd first

there is a u-boot bug that not find all files if the directory entries
was splittet to more sectors so copy the important files first.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge remote-tracking branch 'origin/master' into next

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

openssl: add forgotten sslv2 compile option

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

openssl: compile with sslv2 support but disable

the new default breaks the ABI so we need to compile in but
disable it with a patch.

Revert "python-m2crypto: remove SSLv2_method"

This reverts commit d86a24928625c47d46d17daad18f159d28678ee4.

OpenSSH: remove slogin binary in rootfile and update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

python-m2crypto: remove SSLv2_method

this is removed by OpenSSL 1.0.2g

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core99: set version to 99

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

openssl: security update to 1.0.2g

this fixes diverse security problems.
check http://openssl.org/news/secadv/20160301.txt for details.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

openssh: update to 7.2p1

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

backup: fix vnstat path

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core99: create core99 for OpenSSL security update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

udev: Fix calling VLAN script

The VLAN hotplugging script was called with a wrong parameter that
should just be used to rename devices. Hence the script was not
correctly executed and did not create the virtual devices.

Fixes: #11009
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dnsmasq: 2.76test10 with latest patch (005) and some fixes

1. Added patch 005 because of the discussion on the dnsmasq-list:
"I've noticed that replies which get their TTL from the dhcp-ttl
option always get the TTL specified in dhcp-ttl. I'd prefer
something like max(0, min(<dhcp-ttl>, <lease-expire-time> -
<now>)). Otherwise, dns might hand out a high TTL for a dhcp-lease
which expires one second later.
...
Seems a sensible addition.

Cheers,

Simon."

2. Fixed several line numbers and patch lines in
'dnsmasq-Add-support-to-read-ISC-DHCP-lease-file.patch'. On the last build
I got some "Hunk failed" messages. Patches are now applied exactly at the
given lines.

3. Nevertheless, I still get some warnings:
...
dnsmasq.c: In function 'main':
dnsmasq.c:55:7: warning: unused variable 'did_bind' [-Wunused-variable]
   int did_bind = 0;
       ^
dnsmasq.c:54:9: warning: unused variable 'bound_device' [-Wunused-variable]
   char *bound_device = NULL;
         ^
...
isc.c: In function 'dhcp_lease_new':
isc.c:40:3: warning: ignoring return value of 'asprintf', declared with attribute warn_unused_result [-Wunused-result]
   asprintf(&lease->fqdn, "%s.%s", hostname, daemon->domain_suffix);
   ^

Asking about these warnings in the dnsmasq-list showed no reaction - no one answered.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dnsmasq: 2.76test10 with latest patches (001-004)

This is 'dnsmasq 2.76test10', based on current 'next', containing latest patches.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: update to 3.14.62

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

rename core99 to core100 for inserting another OpenSSL Security update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core99: Ship updated xz

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bison: update to 3.0.4

Update bison to the last version from Linux from Scratch.

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xz: update to 5.2.2

Update xz to last version from Linux from Scratch.

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

m4: update to 1.4.17

Update m4 to last version from Linux from Scratch.

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Update source upload URL

There is no longer a SSH service on source.ipfire.org.

The usual login on git.ipfire.org should be used instead.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

flash-images: change root uuid replacer sed

i cannot really test this on my systems.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

flash-image: set RAMDISK_MODE=2

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

init-functions: enable autoramdisk with 400MB

The 512MB raspberry pi reserve some memory for buffers and gpu
so there are a bit less than 490 MB free.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

flash-image: fix root uuid on some build machines.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

stunnel: Bump release version

The version on the server seems to be still linked against
the older 0.9.8 series of openssl and needs to be updated
on all systems.

I manually pushed this update for the 2.17 branch on i586.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: update to 3.14.61

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core98: fix typo

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge branch 'core98' of git.ipfire.org:/pub/git/ipfire-2.x into core98

core98: remove wrong grub.cfg only if it was empty.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge remote-tracking branch 'origin/master' into next

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Conflicts:
make.sh

glibc: disable patches that break build on arm.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core98: new update with glibc security fixes.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

glibc: new RHEL6 patches / fix CVE-2015-7547 and more

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

rename core98 to 99 for glibc security update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

squid 3.4.14: Bugfix for #4431 (C code is not compiled with CFLAGS)

For details see: http://bugs.squid-cache.org/show_bug.cgi?id=4431

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

backports: remove all old media modules.

more modules are renamed or merged into other modules.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

dracut: remove marvell sdio modules from initrd.

this allows to switch to uap module on dreamplug.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core98: Ship changed /etc/ppp/ip-up

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

New IP-address of 'ping.ipfire.org'

Telekom gateways (e.g.) don't answer 'pings', therefor '/etc/ppp/ip-up'
uses 'ping.ipfire.org' for the 'gateway Graph' in 'Status / Network (other'.
After moving the infrastructure, several IP addresses were changed.
'178.63.73.246' doesn't work anymore for 'ping.ipfire.org', its now '81.3.27.38'.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core98: Ship recently updated grep and sed

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

grep: Update to 2.22

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

sed: Update to 4.2.2

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

kernel: disable grsecurity KSTACKOVERFLOW.

this is the reason for crashes usb lan dongles and media devices.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

firewall: Fix MAC filter

Packets destined for the firewall coming in from the blue
device where accepted too early to be processed by the
firewall input chain rules.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

wirelessctrl: Remove some unused code

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dhcpcd: rework mtu handling on buggy nic's

some nic's loose the carrier after setting new mtu.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core98: Ship updated tzdata

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

tzdata: Update to 2016a

Fixes https://bugzilla.ipfire.org/show_bug.cgi?id=11034

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: update to 3.14.60

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

set core to 98 and move 97 to oldcore

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core97: remove some core98 files from update filelist.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

finish core97

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

openssl: security update to 1.0.2f

changes:
* DH small subgroups - CVE-2016-0701
* SSLv2 doesn't block disabled ciphers - CVE-2015-3197
* Reject DH handshakes with parameters shorter than 1024 bits

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

finish core97

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

openssl: security update to 1.0.2f

changes:
* DH small subgroups - CVE-2016-0701
* SSLv2 doesn't block disabled ciphers - CVE-2015-3197
* Reject DH handshakes with parameters shorter than 1024 bits

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

hwdate: update databases

pci.ids: 2016.01.28
usb.ids: 2015.12.17

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core97: prepare new core97 with openssl and openssh update.

the update itself has to be done...

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>