]>
git.ipfire.org Git - people/pmueller/ipfire-2.x.git/log
Michael Tremer [Sat, 15 Oct 2016 17:17:44 +0000 (19:17 +0200)]
unbound-dhcp-bridge: Only update cache when lease was added/removed
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 15 Oct 2016 17:08:22 +0000 (19:08 +0200)]
unbound-dhcp-bridge: Rewrite update algorithm
Before the bridge tries reading any existing leases from unbound
but this makes it difficult to destinguish between what is a DHCP lease,
static host entry or anything else.
This patch will change the bridge back to just remember what has been
added to the cache already which makes it easier to keep track.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 15 Oct 2016 17:06:27 +0000 (19:06 +0200)]
unbound-dhcp-bridge: Skip processing leases with empty hostname
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 15 Oct 2016 15:03:31 +0000 (17:03 +0200)]
unbound-dhcp-bridge: Reading in static hosts
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 13 Oct 2016 23:01:10 +0000 (00:01 +0100)]
netpbm: Bump release version to 2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Fri, 7 Oct 2016 16:26:38 +0000 (18:26 +0200)]
netpbm: update to 10.47.61
To keep the files in the right place, the files are installed into the build directory
and only the files which are useful are copied to the usual places in /usr.
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Reviewed-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Fri, 7 Oct 2016 16:17:13 +0000 (18:17 +0200)]
libjpeg: update to 1.5.1
The old libjpeg is renamed to libjpeg-compat
The compat makes the old libs maintainable
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Reviewed-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Fri, 7 Oct 2016 16:29:26 +0000 (18:29 +0200)]
texinfo: update to 6.3
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Reviewed-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Thu, 13 Oct 2016 15:21:28 +0000 (17:21 +0200)]
unbound/dhcp: stop lease bridge if dhcp was needed to killed
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Matthias Fischer [Wed, 12 Oct 2016 19:04:48 +0000 (21:04 +0200)]
squid: Update to 3.5.22
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 12 Oct 2016 21:37:26 +0000 (22:37 +0100)]
unbound: Move "listen on all" to main configuration file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Wed, 12 Oct 2016 19:08:50 +0000 (21:08 +0200)]
Midnight Commander: Update to 4.8.18
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Wed, 12 Oct 2016 21:01:51 +0000 (23:01 +0200)]
unbound: start prior network
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 12 Oct 2016 20:52:34 +0000 (22:52 +0200)]
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Wed, 12 Oct 2016 20:51:35 +0000 (22:51 +0200)]
backup: add unbound config
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 12 Oct 2016 20:41:19 +0000 (22:41 +0200)]
unbound: bind to all interfaces
this allow to add interfaces without restart unbound.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 12 Oct 2016 20:39:41 +0000 (22:39 +0200)]
setup: restart unbound after network config change
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Daniel Weismüller [Wed, 12 Oct 2016 10:17:06 +0000 (12:17 +0200)]
drop of the obsolete and deprecated vdr addon vdr_vnsiserver3
Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 11 Oct 2016 17:14:33 +0000 (19:14 +0200)]
unbound: Public static leases in DNS, too
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 10 Oct 2016 19:11:57 +0000 (20:11 +0100)]
unbound: Skip invalid hostnames
If there are any invalid hostnames in the DHCP leases
table, we just skip them and do not create and RRs for
them.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sun, 9 Oct 2016 12:56:52 +0000 (14:56 +0200)]
guardian 2.0: fixes for rootfile
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 10 Oct 2016 11:05:01 +0000 (12:05 +0100)]
core106: Ship changed pakfire.cgi
This was actually changed over a year ago, but was
never shipped in an update.
Commit
212fd689a30a7b2f627149ead8d45823dc8a68af
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 10 Oct 2016 11:04:24 +0000 (12:04 +0100)]
core106: Ship updated iptables.cgi file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sat, 8 Oct 2016 13:20:38 +0000 (15:20 +0200)]
iptables.cgi: cosmetics - wider columns
Hi,
Since the first three columns of 'iptables.cgi' gave a nearly unreadable output
with large numbers, so I made 'pkts', 'bytes' and 'target'-columns a bit wider.
BEFORE - it was something like this:
Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytestarget proc opt in out source destination
32M38G BADTCP tcp -- * * 0.0.0.0/0 0.0.0.0/0
32M38G CUSTOMINPUT all -- * * 0.0.0.0/0 0.0.0.0/0
32M38G P2PBLOCK all -- * * 0.0.0.0/0 0.0.0.0/0
32M38G GUARDIAN all -- * * 0.0.0.0/0 0.0.0.0/0
00 OVPNBLOCK all -- tun+ * 0.0.0.0/0 0.0.0.0/0
32M38G IPTVINPUT all -- * * 0.0.0.0/0 0.0.0.0/0
32M38G ICMPINPUT all -- * * 0.0.0.0/0 0.0.0.0/0
32M38G LOOPBACK all -- * * 0.0.0.0/0 0.0.0.0/0
21M21G CONNTRACK all -- * * 0.0.0.0/0 0.0.0.0/0
393873484KDHCPGREENINPUTall -- green0 * 0.0.0.0/0 0.0.0.0/0
645153642KGEOIPBLOCK all -- * * 0.0.0.0/0 0.0.0.0/0
386592304KIPSECINPUT all -- * * 0.0.0.0/0 0.0.0.0/0
386592304KGUIINPUT all -- * * 0.0.0.0/0 0.0.0.0/0
368332209KWIRELESSINPUT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate NEW
368332209KOVPNINPUT all -- * * 0.0.0.0/0 0.0.0.0/0
368332209KTOR_INPUT all -- * * 0.0.0.0/0 0.0.0.0/0
368332209KINPUTFW all -- * * 0.0.0.0/0 0.0.0.0/0
309641833KREDINPUT all -- * * 0.0.0.0/0 0.0.0.0/0
309641833KPOLICYIN all -- * * 0.0.0.0/0 0.0.0.0/0
AFTER - somehow better readable - I think: ;-)
Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target proc opt in out source destination
32M 38G BADTCP tcp -- * * 0.0.0.0/0 0.0.0.0/0
32M 38G CUSTOMINPUT all -- * * 0.0.0.0/0 0.0.0.0/0
32M 38G P2PBLOCK all -- * * 0.0.0.0/0 0.0.0.0/0
32M 38G GUARDIAN all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 OVPNBLOCK all -- tun+ * 0.0.0.0/0 0.0.0.0/0
32M 38G IPTVINPUT all -- * * 0.0.0.0/0 0.0.0.0/0
32M 38G ICMPINPUT all -- * * 0.0.0.0/0 0.0.0.0/0
32M 38G LOOPBACK all -- * * 0.0.0.0/0 0.0.0.0/0
21M 21G CONNTRACK all -- * * 0.0.0.0/0 0.0.0.0/0
39387 3484K DHCPGREENINPUT all -- green0 * 0.0.0.0/0 0.0.0.0/0
64515 3642K GEOIPBLOCK all -- * * 0.0.0.0/0 0.0.0.0/0
38659 2304K IPSECINPUT all -- * * 0.0.0.0/0 0.0.0.0/0
38659 2304K GUIINPUT all -- * * 0.0.0.0/0 0.0.0.0/0
36833 2209K WIRELESSINPUT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate NEW
36833 2209K OVPNINPUT all -- * * 0.0.0.0/0 0.0.0.0/0
36833 2209K TOR_INPUT all -- * * 0.0.0.0/0 0.0.0.0/0
36833 2209K INPUTFW all -- * * 0.0.0.0/0 0.0.0.0/0
30964 1833K REDINPUT all -- * * 0.0.0.0/0 0.0.0.0/0
30964 1833K POLICYIN all -- * * 0.0.0.0/0 0.0.0.0/0
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Sun, 9 Oct 2016 10:10:15 +0000 (12:10 +0200)]
setclock: accept also empty logfile timestamp
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sat, 8 Oct 2016 13:43:54 +0000 (15:43 +0200)]
setclock: prevent time bacjump by empty rtc batteries
This is a work around to prevent not working dns
resolution if the time jumps before the DNSSec signing key.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Fri, 7 Oct 2016 09:27:33 +0000 (11:27 +0200)]
unbound: skip green interface if ip was set to 1.1.1.1
this is a reserved marker for unused green ip.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Thu, 6 Oct 2016 09:42:49 +0000 (10:42 +0100)]
unbound: Correctly format PTR records
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 6 Oct 2016 09:41:54 +0000 (10:41 +0100)]
core106: Restart DHCP server to import leases into DNS
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 4 Oct 2016 21:40:03 +0000 (22:40 +0100)]
setup: Store passwords in SHA format
htpasswd doesn't protect passwords very well. MD5 was used
before and now any newly created passwords will use the
SHA format.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 4 Oct 2016 21:34:23 +0000 (22:34 +0100)]
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Tue, 4 Oct 2016 20:05:26 +0000 (22:05 +0200)]
Revert "core106: Add DNS root key to exclude list"
This reverts commit
f58002a83f279246cdd58bfb5e9dfbf9d5aa99c7 .
Arne Fitzenreiter [Tue, 4 Oct 2016 17:24:26 +0000 (19:24 +0200)]
unbound: fix update forwarders if unbound was not running
psgrep has no "-q" switch so i use pidof.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Mon, 3 Oct 2016 15:55:42 +0000 (17:55 +0200)]
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Mon, 3 Oct 2016 15:53:13 +0000 (17:53 +0200)]
unbound: fix reverse lockup of webif defined hosts
and make the own host resolveable.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Mon, 3 Oct 2016 11:13:43 +0000 (12:13 +0100)]
Update translations
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Fri, 23 Sep 2016 14:33:04 +0000 (16:33 +0200)]
guardian 2.0: suggested cosmetic changes
I did the following:
- Rearranged the fields on 'guardian.cgi' a bit - in a (hopefully) logical manner,
so that they don't need so much room.
- Added some translation-strings and explanations to (revised) 'guardian.cgi'.
- Added missing language string(s), deleted obsolete.
- Deleted all guardian entries from standard language files in
'/var/ipfire/langs'-directory.
- Added (upgraded) addon-specific language files to '/var/ipfire/addon-lang'-directory.
I hope, I didn't forget something...
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Mon, 3 Oct 2016 10:45:36 +0000 (11:45 +0100)]
core106: Ship updated libidn
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Mon, 3 Oct 2016 06:58:48 +0000 (08:58 +0200)]
libidn: Update to 1.33
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Sun, 2 Oct 2016 14:36:57 +0000 (16:36 +0200)]
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Sun, 2 Oct 2016 14:35:50 +0000 (16:35 +0200)]
index.cgi: display unbound dns servers
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Sun, 2 Oct 2016 14:13:55 +0000 (15:13 +0100)]
Remove IPAC stuff
This is unused for a very very very long time and serves
no purpose any more.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Sun, 2 Oct 2016 13:32:14 +0000 (15:32 +0200)]
Add search domain to /etc/resolv.conf at boot time
unbound does not append the local domain to the request
any more (like dnsmasq did). Therefore, the client needs
to do that if desired.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sun, 2 Oct 2016 13:25:23 +0000 (15:25 +0200)]
unbound: Test upstream name servers before using
unbound has some trouble with validating DNSSEC-enabled
domains when the upstream name server is stripping signatures
from the authoritative responses.
This script now checks that, removes any broken upstream
name servers from the list and prints a warning.
If all name servers fail the test, unbound falls back
into recursor mode.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sun, 2 Oct 2016 11:36:07 +0000 (13:36 +0200)]
core106: Add DNS root key to exclude list
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sun, 2 Oct 2016 11:35:45 +0000 (13:35 +0200)]
unbound: Update to 1.5.10
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Sat, 1 Oct 2016 17:56:42 +0000 (18:56 +0100)]
core106: Ship updated /etc/login.defs
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 1 Oct 2016 17:55:23 +0000 (18:55 +0100)]
unbound: Print nicer error message when already running
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 1 Oct 2016 17:52:07 +0000 (18:52 +0100)]
unbound: Start unbound when invoked by DHCP scripts
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 1 Oct 2016 17:37:28 +0000 (18:37 +0100)]
shadow-utils: Create standard set of configuration files
Previously we copied the default configuration from the upstream
package and modified that. Unfortunately a patch and a sed command
changed the file which resulted in unwanted changes.
This patch removes the patch and sed command and adds a new set
of configuration files that just need to be copied to the system.
Fixes #11195
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Sat, 1 Oct 2016 13:17:37 +0000 (15:17 +0200)]
attr: rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Tue, 27 Sep 2016 18:15:53 +0000 (20:15 +0200)]
ntp: fix wait for red if dhcp or wpasupplicant is running.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Tue, 27 Sep 2016 17:38:38 +0000 (19:38 +0200)]
samba: default enable SMBv2.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Tue, 27 Sep 2016 17:20:14 +0000 (19:20 +0200)]
core106: ship mt7601u firmware.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Tue, 27 Sep 2016 16:39:53 +0000 (18:39 +0200)]
mpfr: fix missing eof in rootfile.
this is the reason for missing mt7601u firmware.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Tue, 27 Sep 2016 08:44:19 +0000 (09:44 +0100)]
Revert "libjpeg: update to 1.4.2"
This reverts commit
feba68e4af48630d0c5dcd16bd799a0e02db2b36 .
Breaks building netpbm
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Mon, 26 Sep 2016 21:18:30 +0000 (23:18 +0200)]
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Mon, 26 Sep 2016 16:55:51 +0000 (18:55 +0200)]
Revert "Revert "tcl: update to 8.6.6""
with new krb5 also the tcl update works.
This reverts commit
053c554822e9d7342bf21535ccae4812100f94c5 .
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Mon, 26 Sep 2016 20:03:33 +0000 (21:03 +0100)]
core106: Add recently updated packages, etc.
This update removes dnsmasq and replaces it with unbound.
Also many packages are updated and shipped.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 26 Sep 2016 19:24:21 +0000 (20:24 +0100)]
Start Core Update 106
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Sat, 3 Sep 2016 12:06:19 +0000 (14:06 +0200)]
libjpeg: update to 1.4.2
The old libjpeg is renamed to libjpeg-compat
The compat makes the old libs maintainable
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Reviewed-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Mon, 26 Sep 2016 16:53:49 +0000 (18:53 +0200)]
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Mon, 26 Sep 2016 16:51:27 +0000 (18:51 +0200)]
attr: rootfile update.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Jonatan Schlag [Sun, 25 Sep 2016 16:50:03 +0000 (18:50 +0200)]
Update krb5 to 1.14.4
This commit updates krb5 to version 1.14.4
The patch is removed, because he is upstream since 1.12.2.
The samba version is incremented, to link samba against the new krb5
version. Otherwise samba for example is linked against
/usr/lib/libkdb5.so.7 but the current version is /usr/lib/libkdb5.so.8
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 26 Sep 2016 13:37:20 +0000 (14:37 +0100)]
openssl: Update to 1.0.2j
Missing CRL sanity check (CVE-2016-7052)
========================================
Severity: Moderate
This issue only affects OpenSSL 1.0.2i, released on 22nd September 2016.
A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.
OpenSSL 1.0.2i users should upgrade to 1.0.2j
The issue was reported to OpenSSL on 22nd September 2016 by Bruce Stephens and
Thomas Jakobi. The fix was developed by Matt Caswell of the OpenSSL development
team.
https://www.openssl.org/news/secadv/
20160926 .txt
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Mon, 26 Sep 2016 11:08:02 +0000 (13:08 +0200)]
rootfile updates: attr, ed, gawk
Check rootfiles before commit !!!
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sun, 25 Sep 2016 17:55:49 +0000 (19:55 +0200)]
Revert "tcl: update to 8.6.6"
breaks kerberos (krb5) build.
This reverts commit
282dfe0bb9780fa39dac5d2285719497f6a9f3d5 .
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sat, 24 Sep 2016 14:44:47 +0000 (16:44 +0200)]
transmission: update to 2.92
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Marcel Lorenz [Fri, 2 Sep 2016 13:26:10 +0000 (15:26 +0200)]
iproute2: update to 4.7.0
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Fri, 2 Sep 2016 09:54:37 +0000 (11:54 +0200)]
usb_modeswitch_data: update to
20160803
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Fri, 2 Sep 2016 09:53:20 +0000 (11:53 +0200)]
usb_modeswitch: update to 2.4.0
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Fri, 2 Sep 2016 09:13:56 +0000 (11:13 +0200)]
ipset: update to 6.29
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Fri, 2 Sep 2016 08:58:02 +0000 (10:58 +0200)]
libmnl: update to 1.0.
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Fri, 2 Sep 2016 08:52:13 +0000 (10:52 +0200)]
libnetfilter_conntrack: update to 1.0.6
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Fri, 2 Sep 2016 09:12:13 +0000 (11:12 +0200)]
attr: update to 2.4.47
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Fri, 2 Sep 2016 09:07:58 +0000 (11:07 +0200)]
expat: update to 2.2.0
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Fri, 2 Sep 2016 09:08:51 +0000 (11:08 +0200)]
make: update to 4.2.1
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Fri, 2 Sep 2016 08:44:59 +0000 (10:44 +0200)]
file: update to 5.28
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 24 Sep 2016 11:54:39 +0000 (12:54 +0100)]
Revert "strongswan 5.5.0: update for rootfile"
The padlock module is only built on i586
This reverts commit
2ac05ca54c6a49e7f4a82aae57d1924fa7c998b2 .
Marcel Lorenz [Fri, 2 Sep 2016 08:30:06 +0000 (10:30 +0200)]
gettext: update to 0.19.8.1
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Sat, 3 Sep 2016 08:28:57 +0000 (10:28 +0200)]
make.sh: add autoamke to toolchain to fix coreutils build fail
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Sat, 3 Sep 2016 08:28:56 +0000 (10:28 +0200)]
pkg-config: update lfs file to build with new dejagnu
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Sat, 3 Sep 2016 08:28:55 +0000 (10:28 +0200)]
dejagnu: update to 1.6
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Sat, 3 Sep 2016 08:28:54 +0000 (10:28 +0200)]
tcl: update to 8.6.6
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Sat, 3 Sep 2016 08:28:53 +0000 (10:28 +0200)]
flex: update to 2.6.1
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Sat, 3 Sep 2016 08:30:44 +0000 (10:30 +0200)]
diffutils: update to 3.5
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Fri, 23 Sep 2016 14:51:36 +0000 (16:51 +0200)]
strongswan 5.5.0: update for rootfile
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Dirk Wagner [Thu, 22 Sep 2016 07:05:10 +0000 (09:05 +0200)]
asterisk addon: update to 11.23.1
Changelog: http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11-current
Signed-off-by: Dirk Wagner <dirk.wagner@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Dirk Wagner [Thu, 22 Sep 2016 07:59:39 +0000 (09:59 +0200)]
monit addon: update to 5.19.0
See changelog https://mmonit.com/monit/changes for details.
Signed-off-by: Dirk Wagner <dirk.wagner@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Jonatan Schlag [Thu, 22 Sep 2016 10:03:33 +0000 (12:03 +0200)]
Fix URL to list of public name servers in dns.cgi
We have only one english wiki, so the link to the list of public
dns servers can point directly to the right page.
(The link was also not correct).
Fixes: #11191
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Fri, 23 Sep 2016 16:49:06 +0000 (18:49 +0200)]
Merge remote-tracking branch 'origin/core105' into next
Arne Fitzenreiter [Fri, 23 Sep 2016 08:30:34 +0000 (10:30 +0200)]
core105: add openssl sse2 binaries
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 22 Sep 2016 15:44:06 +0000 (17:44 +0200)]
core105: fix rootfile.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Thu, 22 Sep 2016 13:47:47 +0000 (14:47 +0100)]
strongswan: Update to 5.5.0
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 22 Sep 2016 11:05:13 +0000 (12:05 +0100)]
Merge branch 'core105' into next
Michael Tremer [Thu, 22 Sep 2016 11:04:18 +0000 (12:04 +0100)]
Tag Core Update 105
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 22 Sep 2016 11:02:32 +0000 (12:02 +0100)]
openssl: Update to 1.0.2i
https://www.openssl.org/news/openssl-1.0.2-notes.html
This release fixes various security flaws:
* OCSP Status Request extension unbounded memory growth (CVE-2016-6304)
* SWEET32 Mitigation (CVE-2016-2183)
* OOB write in MDC2_Update() (CVE-2016-6303)
* Malformed SHA512 ticket DoS (CVE-2016-6302)
* OOB write in BN_bn2dec() (CVE-2016-2182)
* OOB read in TS_OBJ_print_bio() (CVE-2016-2180)
* Pointer arithmetic undefined behaviour (CVE-2016-2177)
* Constant time flag not preserved in DSA signing (CVE-2016-2178)
* DTLS buffered message DoS (CVE-2016-2179)
* DTLS replay protection DoS (CVE-2016-2181)
* Certificate message OOB reads (CVE-2016-6306)
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 22 Sep 2016 09:30:28 +0000 (10:30 +0100)]
core105: Ship security update for libgcrypt
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sat, 20 Aug 2016 10:33:55 +0000 (12:33 +0200)]
libgcrypt: Update to 1.7.3
Fixes CVE-2016-6313
For details, see:
https://lists.gnupg.org/pipermail/gnupg-announce/2016q3/000395.html
https://bugzilla.redhat.com/show_bug.cgi?id=
1366105
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 22 Sep 2016 09:28:36 +0000 (10:28 +0100)]
Start Core Update 105
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>