people/pmueller/ipfire-2.x.git
5 months agowget: Update to 1.20.2
Matthias Fischer [Thu, 4 Apr 2019 07:43:50 +0000 (09:43 +0200)] 
wget: Update to 1.20.2

For details see:
https://fossies.org/linux/wget/ChangeLog

Excerpt from "NEWS":

* Changes in Wget 1.20.2
** NTLM authentication will retry under certain cases
** Fixed a buffer overflow vulnerability"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agoclamav: Update to 0.101.2
Matthias Fischer [Wed, 27 Mar 2019 19:54:10 +0000 (20:54 +0100)] 
clamav: Update to 0.101.2

For details see:
https://blog.clamav.net/2019/03/clamav-01012-and-01003-patches-have.html

"ClamAV 0.101.2 is a patch release to address a handful of security related bugs."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 months agoipsec-interfaces: Apply static routes (again) after creating IPsec interfaces
Michael Tremer [Mon, 18 Mar 2019 15:24:56 +0000 (15:24 +0000)] 
ipsec-interfaces: Apply static routes (again) after creating IPsec interfaces

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 months agoamavisd: update to 2.11.1
Peter Müller [Mon, 11 Mar 2019 19:35:00 +0000 (19:35 +0000)] 
amavisd: update to 2.11.1

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoPostfix: update to 3.4.3
Peter Müller [Mon, 11 Mar 2019 19:28:00 +0000 (19:28 +0000)] 
Postfix: update to 3.4.3

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoinstaller: Set the clock correctly when installing over network
Michael Tremer [Wed, 13 Mar 2019 08:05:27 +0000 (08:05 +0000)] 
installer: Set the clock correctly when installing over network

If a system has a not very up to date clock, downloading files
over HTTPS is impossible.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agocore129: finish update
Arne Fitzenreiter [Wed, 13 Mar 2019 14:18:52 +0000 (15:18 +0100)] 
core129: finish update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 months agou-boot: try to boot without ramdisk if the system cannot load it
Arne Fitzenreiter [Wed, 13 Mar 2019 14:17:28 +0000 (15:17 +0100)] 
u-boot: try to boot without ramdisk if the system cannot load it

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 months agoknot: update to 2.8.0 and build/install only kdig
Arne Fitzenreiter [Wed, 13 Mar 2019 14:06:23 +0000 (15:06 +0100)] 
knot: update to 2.8.0 and build/install only kdig

This fix compile errors on small arm boards. (cc1 internal error)

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 months agogroff: update to 1.22.4
Arne Fitzenreiter [Wed, 13 Mar 2019 14:04:40 +0000 (15:04 +0100)] 
groff: update to 1.22.4

This fix compile problems on small arm boards. (cc1 internal error)

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 months agoRevert "kernel: cleanup unused rpi patch"
Arne Fitzenreiter [Wed, 13 Mar 2019 08:38:21 +0000 (09:38 +0100)] 
Revert "kernel: cleanup unused rpi patch"

This reverts commit a2d49659f3947e5a5a77cbc1bf384eb0b2760ca9.

The patch is still needed to prevent strange crashes

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 months agoUpdate list of contributors
Michael Tremer [Mon, 11 Mar 2019 15:58:45 +0000 (15:58 +0000)] 
Update list of contributors

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agocore129: Ship updated dnsforward.cgi
Michael Tremer [Mon, 11 Mar 2019 15:58:04 +0000 (15:58 +0000)] 
core129: Ship updated dnsforward.cgi

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoMerge remote-tracking branch 'ms/dns-forwarding' into next
Michael Tremer [Mon, 11 Mar 2019 15:57:15 +0000 (15:57 +0000)] 
Merge remote-tracking branch 'ms/dns-forwarding' into next

6 months agocore129: Ship updated dhcp.cgi
Michael Tremer [Mon, 11 Mar 2019 09:54:19 +0000 (09:54 +0000)] 
core129: Ship updated dhcp.cgi

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoMerge remote-tracking branch 'ms/dhcp' into next
Michael Tremer [Mon, 11 Mar 2019 09:53:56 +0000 (09:53 +0000)] 
Merge remote-tracking branch 'ms/dhcp' into next

6 months agoTor WebUI: drop relay bandwith options < 1 MBit/s
Peter Müller [Fri, 8 Mar 2019 19:17:00 +0000 (19:17 +0000)] 
Tor WebUI: drop relay bandwith options < 1 MBit/s

Tor requires at least 1 MBit/s in order to participate.

Fixes #12001

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agodnsdist: Limit to fewer concurrent build processes
Michael Tremer [Mon, 11 Mar 2019 09:38:56 +0000 (09:38 +0000)] 
dnsdist: Limit to fewer concurrent build processes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agocore129: Ship updated less
Michael Tremer [Sun, 10 Mar 2019 18:23:22 +0000 (18:23 +0000)] 
core129: Ship updated less

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoless: update to 530
Peter Müller [Fri, 8 Mar 2019 19:19:00 +0000 (19:19 +0000)] 
less: update to 530

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoPostfix: update to 3.4.1
Peter Müller [Fri, 8 Mar 2019 19:22:00 +0000 (19:22 +0000)] 
Postfix: update to 3.4.1

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoslang: revert parallelized build
Matthias Fischer [Sun, 10 Mar 2019 17:04:31 +0000 (18:04 +0100)] 
slang: revert parallelized build

This partially reverts https://git.ipfire.org/?p=ipfire-2.x.git;a=blob;f=lfs/slang;h=217e74c77317d4c829913f934458779fd278bf29;hb=23164efba5f57b3d8ccb07a166b613f2f951e1b6

'slang 2.3.0' doesn't like "$(MAKETUNING)"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months ago/etc/group: Order groups by ID
Michael Tremer [Fri, 8 Mar 2019 10:11:23 +0000 (10:11 +0000)] 
/etc/group: Order groups by ID

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months ago/etc/passwd: Order users by ID
Michael Tremer [Fri, 8 Mar 2019 10:08:02 +0000 (10:08 +0000)] 
/etc/passwd: Order users by ID

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agozabbix_agent: Create /var/run/zabbix in initscript
Michael Tremer [Fri, 8 Mar 2019 10:04:28 +0000 (10:04 +0000)] 
zabbix_agent: Create /var/run/zabbix in initscript

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agozabbix_agent: Ensure that the user exists on all systems
Michael Tremer [Fri, 8 Mar 2019 09:58:56 +0000 (09:58 +0000)] 
zabbix_agent: Ensure that the user exists on all systems

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agozabbix_agentd: New addon
Alexander Koch [Wed, 13 Feb 2019 23:06:19 +0000 (00:06 +0100)] 
zabbix_agentd: New addon

New addon for monitoring IPFire by Zabbix Monitoring (https://www.zabbix.com/features).
See https://forum.ipfire.org/viewtopic.php?f=52&t=22039 and https://lists.ipfire.org/pipermail/development/2019-February/005324.html for further details.

Best regards,
Alex

Signed-off-by: Alexander Koch <ipfire@starkstromkonsument.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoiptables: Commented legacy ip(6)tables entries from ROOTFILE
Erik Kapfer [Fri, 8 Mar 2019 04:51:55 +0000 (05:51 +0100)] 
iptables: Commented legacy ip(6)tables entries from ROOTFILE

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoinstaller: Download ISO via HTTPS
Michael Tremer [Thu, 7 Mar 2019 11:27:19 +0000 (11:27 +0000)] 
installer: Download ISO via HTTPS

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoRevert "boost: Build with -O2 only"
Michael Tremer [Thu, 7 Mar 2019 10:29:31 +0000 (10:29 +0000)] 
Revert "boost: Build with -O2 only"

This reverts commit 9ff5b381eb8a4e129978c34f969e312c302ea7b1.

Boost wants to build with -O3 no matter what

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agounbound: Mark domains as insecure from DNS forwarding
Michael Tremer [Tue, 5 Mar 2019 16:58:29 +0000 (16:58 +0000)] 
unbound: Mark domains as insecure from DNS forwarding

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoDNS Forwarding: Add UI to Allow to disable DNSSEC for a zone
Michael Tremer [Tue, 5 Mar 2019 16:10:17 +0000 (16:10 +0000)] 
DNS Forwarding: Add UI to Allow to disable DNSSEC for a zone

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoMerge branch 'ipsec-on-demand' into next
Michael Tremer [Tue, 5 Mar 2019 15:25:36 +0000 (15:25 +0000)] 
Merge branch 'ipsec-on-demand' into next

6 months agovpnmain.cgi: Make on-demand mode default for IPsec VPNs
Michael Tremer [Tue, 5 Mar 2019 15:24:19 +0000 (15:24 +0000)] 
vpnmain.cgi: Make on-demand mode default for IPsec VPNs

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agovpnmain.cgi: Carry over START_ACTION attribute correctly
Michael Tremer [Tue, 5 Mar 2019 15:23:33 +0000 (15:23 +0000)] 
vpnmain.cgi: Carry over START_ACTION attribute correctly

This setting was not carried correctly and therefore the default was ignored.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agomake.sh: Fit more processes into memory
Michael Tremer [Mon, 4 Mar 2019 17:21:15 +0000 (17:21 +0000)] 
make.sh: Fit more processes into memory

Because we have a good way to limit processes now, we should
increase the default size a little bit

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoboost: Build with -O2 only
Michael Tremer [Mon, 4 Mar 2019 17:20:52 +0000 (17:20 +0000)] 
boost: Build with -O2 only

This should increase build speed

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoConfig: Builds don't seem to like the space
Michael Tremer [Mon, 4 Mar 2019 11:57:22 +0000 (11:57 +0000)] 
Config: Builds don't seem to like the space

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoperl: Limit build to 23 parallel processes
Michael Tremer [Mon, 4 Mar 2019 11:52:34 +0000 (11:52 +0000)] 
perl: Limit build to 23 parallel processes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agomake.sh: Introduce MAX_PARALLELISM
Michael Tremer [Mon, 4 Mar 2019 11:51:08 +0000 (11:51 +0000)] 
make.sh: Introduce MAX_PARALLELISM

This will now adjust MAKETUNING to not launch more processes
than MAX_PARALLELISM. Handy to limit builds that use a lot of memory.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agomake.sh: Drop MAKETUNING
Michael Tremer [Mon, 4 Mar 2019 11:45:30 +0000 (11:45 +0000)] 
make.sh: Drop MAKETUNING

This is now set in lfs/Config

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agomake.sh: Introduce DEFAULT_PARALLELISM
Michael Tremer [Mon, 4 Mar 2019 11:43:47 +0000 (11:43 +0000)] 
make.sh: Introduce DEFAULT_PARALLELISM

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agomake.sh: Use variable instead of calling system_processors function again
Michael Tremer [Mon, 4 Mar 2019 11:38:38 +0000 (11:38 +0000)] 
make.sh: Use variable instead of calling system_processors function again

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agomake.sh: Rename HOST_MEM to SYSTEM_MEMORY
Michael Tremer [Mon, 4 Mar 2019 11:35:15 +0000 (11:35 +0000)] 
make.sh: Rename HOST_MEM to SYSTEM_MEMORY

We had two variables holding the same data

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agomake.sh: Pass number of processors and total memory so that we can adjust MAKETUNING
Michael Tremer [Mon, 4 Mar 2019 11:33:50 +0000 (11:33 +0000)] 
make.sh: Pass number of processors and total memory so that we can adjust MAKETUNING

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoParallelized build for several packages
Wolfgang Apolinarski [Wed, 20 Feb 2019 19:18:06 +0000 (20:18 +0100)] 
Parallelized build for several packages

Added $(MAKETUNING) to several packages.
Marked packages that do not support parallel build.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agocore129: Ship wpa_supplicant
Michael Tremer [Mon, 4 Mar 2019 09:25:13 +0000 (09:25 +0000)] 
core129: Ship wpa_supplicant

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agowpa_supplicant: Update to 2.7
Matthias Fischer [Tue, 5 Mar 2019 18:12:52 +0000 (19:12 +0100)] 
wpa_supplicant: Update to 2.7

For details see:
https://w1.fi/cgit/hostap/plain/wpa_supplicant/ChangeLog

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agohostapd: Update to 2.7
Matthias Fischer [Tue, 5 Mar 2019 18:12:51 +0000 (19:12 +0100)] 
hostapd: Update to 2.7

For details see:
https://w1.fi/cgit/hostap/plain/hostapd/ChangeLog

This patch sticks to 'wpa_supplicant: Update to 2.7'.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agonetsnmp: Fix rootfile to build on other architectures
Michael Tremer [Sun, 3 Mar 2019 13:33:52 +0000 (13:33 +0000)] 
netsnmp: Fix rootfile to build on other architectures

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agonetsnmpd: OpenSSL patch is incl. in new version
Erik Kapfer [Wed, 27 Feb 2019 05:03:48 +0000 (06:03 +0100)] 
netsnmpd: OpenSSL patch is incl. in new version

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agonetsnmpd: Update to version 5.8
Erik Kapfer [Wed, 27 Feb 2019 05:03:47 +0000 (06:03 +0100)] 
netsnmpd: Update to version 5.8

Overview of the changes can be found in here https://sourceforge.net/p/net-snmp/mailman/message/36386084/ .

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoiptables: Update to 1.8.2
Erik Kapfer [Sun, 3 Mar 2019 08:09:18 +0000 (09:09 +0100)] 
iptables: Update to 1.8.2

netfilter-layer7 has also been updated to v2.23 .

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoUnpack intel microcode before initramfs images are being built
Michael Tremer [Sat, 2 Mar 2019 14:55:04 +0000 (14:55 +0000)] 
Unpack intel microcode before initramfs images are being built

Previously, the microcode updates were not packaged in the shipped
initramfs images which causes that Intel processors are still running
on outdated microcode.

This patch moves intel-microcode before we build the initramfs images.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agocore129: Ship updated proxy.cgi
Michael Tremer [Sat, 2 Mar 2019 14:14:14 +0000 (14:14 +0000)] 
core129: Ship updated proxy.cgi

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoBug 12008 - Typo in 'proxy.cgi' leads to wrong path for 'basic_ldap_auth'
Matthias Fischer [Sun, 3 Mar 2019 08:37:01 +0000 (09:37 +0100)] 
Bug 12008 - Typo in 'proxy.cgi' leads to wrong path for 'basic_ldap_auth'

Hi,

This should fix https://bugzilla.ipfire.org/show_bug.cgi?id=12008

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agocore129: Ship updated ipset
Michael Tremer [Sat, 2 Mar 2019 14:12:18 +0000 (14:12 +0000)] 
core129: Ship updated ipset

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoipset: Update to version 7.1
Erik Kapfer [Sun, 3 Mar 2019 08:22:50 +0000 (09:22 +0100)] 
ipset: Update to version 7.1

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agocore129: Ship updated tar
Michael Tremer [Sat, 2 Mar 2019 14:11:02 +0000 (14:11 +0000)] 
core129: Ship updated tar

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agotar: Update to 1.32
Matthias Fischer [Sat, 2 Mar 2019 20:24:15 +0000 (21:24 +0100)] 
tar: Update to 1.32

For details see:
http://git.savannah.gnu.org/cgit/tar.git/log/

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agocore129: Ship updated bind
Michael Tremer [Sat, 2 Mar 2019 14:10:21 +0000 (14:10 +0000)] 
core129: Ship updated bind

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agobind: Update to 9.11.6
Matthias Fischer [Sat, 2 Mar 2019 20:19:03 +0000 (21:19 +0100)] 
bind: Update to 9.11.6

For details see:
http://ftp.isc.org/isc/bind9/9.11.6/RELEASE-NOTES-bind-9.11.6.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agocore129: Ship updated squid
Michael Tremer [Sat, 2 Mar 2019 14:09:00 +0000 (14:09 +0000)] 
core129: Ship updated squid

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agosquid: Update to 4.6
Matthias Fischer [Sat, 2 Mar 2019 20:08:06 +0000 (21:08 +0100)] 
squid: Update to 4.6

For details see:
http://www.squid-cache.org/Versions/v4/changesets/

The 'configure'-option "--disable-ipv6" was removed, it is no longer necessary.

See:
https://lists.ipfire.org/pipermail/development/2016-April/002046.html

"The --disable-ipv6 build option is now deprecated.
...
Squid-3.5.7 and later will perform IPv6 availability tests on startup in
all builds.

- Where IPv6 is unavailable Squid will continue exactly as it would
have had the build option not been used.

These Squid can have the build option removed now."

The warning message concerning a "BCP 177 violation" while
starting 'squid' can be ignored.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agospectre-meltdown-checker: New package
Michael Tremer [Sat, 2 Mar 2019 13:24:44 +0000 (13:24 +0000)] 
spectre-meltdown-checker: New package

This makes it easy to install the script and check the vulnerability status
of a system IPFire is running on.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agobinutils: Ship strings & readelf
Michael Tremer [Sat, 2 Mar 2019 13:01:42 +0000 (13:01 +0000)] 
binutils: Ship strings & readelf

This is needed by the spectre meltdown checker script

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoUpdate German translation
Michael Tremer [Sat, 2 Mar 2019 12:01:06 +0000 (12:01 +0000)] 
Update German translation

Mainly adds translation for new IPsec features

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoUpdate of French translation
Stéphane Pautrel [Sat, 2 Mar 2019 11:48:05 +0000 (11:48 +0000)] 
Update of French translation

- Several syntax / vocabulary improvements
- A 2 text missing in the French version
- Improvement of text offering a donation for the users

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agosysctl.conf: Revert enabling busy loop waiting on sockets
Michael Tremer [Thu, 28 Feb 2019 18:53:22 +0000 (18:53 +0000)] 
sysctl.conf: Revert enabling busy loop waiting on sockets

This causes the firmware in my ath10k module to crash.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoUpdate openssl rootfile
Michael Tremer [Wed, 27 Feb 2019 03:52:26 +0000 (03:52 +0000)] 
Update openssl rootfile

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agocore129: Ship updated OpenSSL
Michael Tremer [Tue, 26 Feb 2019 17:25:11 +0000 (17:25 +0000)] 
core129: Ship updated OpenSSL

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoopenssl: Update to 1.1.1b
Michael Tremer [Tue, 26 Feb 2019 16:42:49 +0000 (16:42 +0000)] 
openssl: Update to 1.1.1b

This is a bug fix only release

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoDHCP: Fix error when editing a newly added fixed lease
Michael Tremer [Tue, 26 Feb 2019 11:02:56 +0000 (11:02 +0000)] 
DHCP: Fix error when editing a newly added fixed lease

They key was remembered but then the array was sorted which resulted
the key showing a wrong line.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoDHCP: Restart server in background
Michael Tremer [Tue, 26 Feb 2019 10:18:33 +0000 (10:18 +0000)] 
DHCP: Restart server in background

This allows for the CGI to return quicker.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoDHCP: Escape slashes in filename
Michael Tremer [Tue, 26 Feb 2019 10:16:21 +0000 (10:16 +0000)] 
DHCP: Escape slashes in filename

Fixes: #12006
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agocore129: Ship updated credits.cgi
Michael Tremer [Mon, 25 Feb 2019 02:31:23 +0000 (02:31 +0000)] 
core129: Ship updated credits.cgi

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoUpdate list of contributors
Michael Tremer [Mon, 25 Feb 2019 02:30:56 +0000 (02:30 +0000)] 
Update list of contributors

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agocore129: Ship updated OpenVPN
Michael Tremer [Mon, 25 Feb 2019 02:29:29 +0000 (02:29 +0000)] 
core129: Ship updated OpenVPN

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoOpenVPN: Update to version 2.4.7
Erik Kapfer [Tue, 26 Feb 2019 10:56:47 +0000 (11:56 +0100)] 
OpenVPN: Update to version 2.4.7

Changelog can be found in here https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24 .

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoupdate Tor to 0.3.5.8
Peter Müller [Sat, 23 Feb 2019 16:54:00 +0000 (16:54 +0000)] 
update Tor to 0.3.5.8

See https://blog.torproject.org/new-releases-tor-0402-alpha-0358-03411-and-03312
for release notes.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoupdate metrics links in Tor WebUI
Peter Müller [Sat, 23 Feb 2019 16:54:00 +0000 (16:54 +0000)] 
update metrics links in Tor WebUI

https://atlas.torproject.org/ is deprecated in favour of
https://metrics.torproject.org/ by now.

Fixes #11781.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agocore129: Ship updated libgcrypt
Michael Tremer [Mon, 25 Feb 2019 00:58:04 +0000 (00:58 +0000)] 
core129: Ship updated libgcrypt

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agolibgcrypt: update to 1.8.4
Peter Müller [Sat, 23 Feb 2019 16:58:00 +0000 (16:58 +0000)] 
libgcrypt: update to 1.8.4

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agocore129: Ship updated unbound
Michael Tremer [Mon, 25 Feb 2019 00:56:49 +0000 (00:56 +0000)] 
core129: Ship updated unbound

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agounbound: Update to 1.9.0
Matthias Fischer [Sat, 9 Feb 2019 09:40:36 +0000 (10:40 +0100)] 
unbound: Update to 1.9.0

For details see:
https://nlnetlabs.nl/svn/unbound/tags/release-1.9.0/doc/Changelog

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agocore129: Ship changes from ipsec branch
Michael Tremer [Mon, 25 Feb 2019 00:55:31 +0000 (00:55 +0000)] 
core129: Ship changes from ipsec branch

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoMerge branch 'ipsec' into next
Michael Tremer [Mon, 25 Feb 2019 00:48:08 +0000 (00:48 +0000)] 
Merge branch 'ipsec' into next

6 months agoStart Core Update 129
Michael Tremer [Mon, 25 Feb 2019 00:47:28 +0000 (00:47 +0000)] 
Start Core Update 129

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agoAdd script to search for missing libraries
Michael Tremer [Sun, 24 Feb 2019 11:45:55 +0000 (11:45 +0000)] 
Add script to search for missing libraries

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agocore128: Drop old openssl engines
Michael Tremer [Sun, 24 Feb 2019 04:06:52 +0000 (04:06 +0000)] 
core128: Drop old openssl engines

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agocups: Depends on bluetooth library
Michael Tremer [Sun, 24 Feb 2019 04:04:51 +0000 (04:04 +0000)] 
cups: Depends on bluetooth library

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 months agocore128: add openldap to update
Arne Fitzenreiter [Sun, 24 Feb 2019 19:50:16 +0000 (20:50 +0100)] 
core128: add openldap to update

openldap was linked against old openssl lib

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 months agocore128: add sse2 openssl libs
Arne Fitzenreiter [Sun, 24 Feb 2019 16:04:44 +0000 (17:04 +0100)] 
core128: add sse2 openssl libs

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 months agocore128: apply local sshd config
Arne Fitzenreiter [Sun, 24 Feb 2019 09:55:49 +0000 (10:55 +0100)] 
core128: apply local sshd config

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 months agokernel: update to 4.14.103
Arne Fitzenreiter [Sat, 23 Feb 2019 14:56:21 +0000 (15:56 +0100)] 
kernel: update to 4.14.103

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 months agocore128: finish core128
Arne Fitzenreiter [Fri, 22 Feb 2019 20:33:45 +0000 (21:33 +0100)] 
core128: finish core128

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 months agokernel: import cve-2019-8912 patch
Arne Fitzenreiter [Fri, 22 Feb 2019 20:20:57 +0000 (21:20 +0100)] 
kernel: import cve-2019-8912 patch

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 months agocore128: stop apache before replacing files
Arne Fitzenreiter [Fri, 22 Feb 2019 18:26:08 +0000 (19:26 +0100)] 
core128: stop apache before replacing files

apache will not restart without stopped before
the files was replaced.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 months agokernel: apu leds: add more id's
Arne Fitzenreiter [Fri, 22 Feb 2019 17:02:45 +0000 (18:02 +0100)] 
kernel: apu leds: add more id's

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 months agopartresize: add "apu1" for apus with new bios.
Arne Fitzenreiter [Fri, 22 Feb 2019 17:01:18 +0000 (18:01 +0100)] 
partresize: add "apu1" for apus with new bios.