Archive Core Updates 110 + 111

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Package Core Update 112

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update for armv5tel toolchain

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ipfire-netboot: Update to version v1.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

unbound: Fix crash of daemon at startup

getentropy() cannot be used on our platform.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Drop architecture-dependent and unused package fwhits

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

directfb: Fix compilation on ARM

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

openvpn: Update to 2.3.17

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Unbound - rootfile

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh remove double build pcre

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

boost: Disable all libraries that don't build on armv7hl

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

boost: Properly use CFLAGS & CXXFLAGS

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: fix amba modules build with gcc6

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: rpi build fix

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next

glibc: Don't use locale-archive

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

unbound: Update to 1.6.3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

cmake: update to 3.8.1

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

tor: Update to 3.0.8

For details see:
https://gitweb.torproject.org/tor.git/plain/ReleaseNotes?id=tor-0.3.0.8

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

netcat 0.7.1: Update for rootfile

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

monit: Update to 5.23.0

For details see:
https://mmonit.com/monit/changes/

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libxml2: update to 2.9.4

http://xmlsoft.org/news.html

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

gnutls: update to 3.5.11

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bird: update to 1.6.3

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Revert "Drop paxctl"

This reverts commit ae666b0c234f9204b864292e044a0c8d182e58d2.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squid: Update to 3.5.26

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squid 3.5.25: latest patches (14155-14167)

For details see:
http://www.squid-cache.org/Versions/v3/3.5/changesets/

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Dropped 'dnsmasq' from System log

I think we don't need this anymore...

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

tmux: Update to 2.5

For details see:
https://raw.githubusercontent.com/tmux/tmux/2.5/CHANGES

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Delete unused function from fwhosts.cgi

This function is not used by any other script.

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ids.cgi: Fix remote command execution vulnerability

The OINKCODE variable was only validated for proper input
when the Save button was clicked.

Did the user demand to download new rules instead, the
content of that variable was not being validated (again)
and was passed to wget on the shell.

This was done with privileges of the "nobody" user.

Fixes #11401

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

cyrus-imapd: enable on all archs

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge branch 'master' into next

samba: remove winbind tevent poll patch

this not work without matching libtevent

fixes #11390

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge remote-tracking branch 'origin/master' into core111

gzip: remove wrong zcat and gunzip symlinks

new gzip version use zcat and gunzip shell scripts that
add the needed parameter to gzip.

fixes: #11399

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

guardian: Bump package version

During commit d68ead3decfdcc4ca4a1413e33f3c47270799836 the guardian.cgi
has been changed, and therefore the package version of guardian
needs to be bumped to ship the changed files.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bash: Fix toolchain build again

I am too stupid to get this right

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

BUG11278: It is not possible to create subnets of internal networks in firewallgroups

Fixes: #11278
When creating networks which are part of an internal network, there was an errormessage displayed and the creation was prohibited.
Now it is possible to create such subnets. This is used at own risk! Users have to take care of the firewallrule sequence.
It is possible to create situations that are not wanted.

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Run strip with tools from the host system

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

stripper: Fix for newer versions of file

The output has changed and this patch will now ignore any
additional output.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

stripper: Abort if stripping fails

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libgpg-error: Update to 1.27

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libgcrypt: Update to 1.7.7

For details see:
https://github.com/gpg/libgcrypt/commits/master

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libarchive: update to 3.3.1

https://www.libarchive.org/

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

7zip: update to 16.02

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

grep: update to 2.27

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

gawk: update to 4.1.4

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

remove old bash 3.2 patches

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pkg-config: update to 2.29.2

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bc: update to 1.07.1

https://www.gnu.org/software/bc/

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

flex: update to 2.6.4

https://github.com/westes/flex/releases

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ccache: update to 3.3.4

https://ccache.samba.org/releasenotes.html#_ccache_3_3_4

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Cosmetic fix for 'make-functions'-output

'$LAST_STAGE_TIME'-output got overwritten by the following 'version/options/time/status'-line.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Big rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

u-boot: Fix compile issues with GCC 6

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next

bash: fix symlink in toolchain

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

make.sh: remove display of native gcc

this grep fails on debian and the output is useless

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

ncurses: fix toolchain build

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge branch 'master' into next

make.sh: Fix MAKETUNING

This variable was not passed any more after the toolchain stage
which caused builds to be very slow.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

strongswan: Update to 5.5.3

Has security fixes for CVE-2017-9022 and CVE-2017-9023.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dhcpcd: fix delay after dhcp down.

this also cause a delay with some nic's that cannot set the mtu in up state.
(eg. e1000e)

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

freeradius: Update to 3.0.14

For details see:
http://freeradius.org/press/ (Fixes CVE-2017-9148)

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge remote-tracking branch 'origin/master' into next

Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

cyrus-imapd: Update to 2.5.11

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

finish core111

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

samba: bump package version

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge branch 'core110'

samba 3.6.25: fixes for lfs-file

Removed 'unrecognized' configure-options.

Deleted empty tab at line end and moved line '-mkdir -p /var/ipfire/samba'
because of error message:
'mkdir: cannot create directory ‘/var/ipfire/samba’: File exists'

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

flash-image: Increase size of root partition

This should still be small enough to barely fit on a disk that
can hold 1GB of data. The actual one. Not the one that some
vendors put on it.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

samba 3.6.25: fixes for lfs-file

Removed 'unrecognized' configure-options.

Deleted empty tab at line end and moved line '-mkdir -p /var/ipfire/samba'
because of error message:
'mkdir: cannot create directory ‘/var/ipfire/samba’: File exists'

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Re-enable build of python3-libvirt

This line was dropped by accident in a merge conflict

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'master' of git.ipfire.org:/pub/git/ipfire-2.x

samba: add current RHEL6 patches

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

bash: Correctly create link to /bin/sh

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Fix shutting down unbound when red is STATIC

Unbound was trying to check availability of the upstream name servers
when /var/ipfire/red/active is present. This patch removes it first
and then brings down the red device.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core111: Ship updated openssl

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

openssl: Update to 1.0.2l

This release only contains bug fixes but no security-related fixes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

openssl: Update to 1.0.2l

This release only contains bug fixes but no security-related fixes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update for directfb (x86_64)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

flash-image: Increase size of root partition

This should still be small enough to barely fit on a disk that
can hold 1GB of data. The actual one. Not the one that some
vendors put on it.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Fix environment variables when building file list for core updates

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update for mysql

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Build libevent2-compat again

I don't know how this disappeared but the package was not built
any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Revert "Rootfile update for gdbm"

This reverts commit e5c370d0ba7f9d9722905ce9c05033f88c86879c.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Bump core update release number

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update for gdbm

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update for sudo

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update for fuse

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update for gcc (x86_64)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ncurses: Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update for boost

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update for glibc (x86_64)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

miniupnpd should listen on green0 in default configuration

Resolves issue with message log flodded by denied local clients.
"HTTP peer <ip>:<port> is not from a LAN, closing the connection"
"SSDP packet sender <ip>:<port> not from a LAN, ignoring"

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

imspector: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>