people/pmueller/ipfire-2.x.git
3 years agoUpdate translation
Michael Tremer [Tue, 2 Aug 2016 11:18:45 +0000 (12:18 +0100)] 
Update translation

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoMerge remote-tracking branch 'stevee/guardian-2.0' into next
Michael Tremer [Tue, 2 Aug 2016 11:18:29 +0000 (12:18 +0100)] 
Merge remote-tracking branch 'stevee/guardian-2.0' into next

3 years agohtop: Update to 2.0.2
Matthias Fischer [Sun, 31 Jul 2016 17:43:26 +0000 (19:43 +0200)] 
htop: Update to 2.0.2

For details, see:
http://hisham.hm/htop/index.php?page=downloads

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoguardian: Update to the tagged release version.
Stefan Schantl [Sat, 30 Jul 2016 09:31:08 +0000 (11:31 +0200)] 
guardian: Update to the tagged release version.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoMerge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Fri, 29 Jul 2016 16:58:56 +0000 (18:58 +0200)] 
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next

3 years agocore104: ship screen
Arne Fitzenreiter [Fri, 29 Jul 2016 16:57:49 +0000 (18:57 +0200)] 
core104: ship screen

old binary is linked against libshadow.0*

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agoCore 104: Add for guardian changed files to core update.
Stefan Schantl [Fri, 29 Jul 2016 13:40:30 +0000 (15:40 +0200)] 
Core 104: Add for guardian changed files to core update.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoinitscripts: Drop guardian related code from snort initscript.
Stefan Schantl [Fri, 29 Jul 2016 11:29:13 +0000 (13:29 +0200)] 
initscripts: Drop guardian related code from snort initscript.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoids.cgi: Drop guardian related code.
Stefan Schantl [Fri, 29 Jul 2016 11:25:28 +0000 (13:25 +0200)] 
ids.cgi: Drop guardian related code.

Guardian competely will be managed by it's own CGI.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian-legacy: Drop old guardian related files.
Stefan Schantl [Fri, 29 Jul 2016 11:21:08 +0000 (13:21 +0200)] 
guardian-legacy: Drop old guardian related files.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Fix path to snort alert file.
Stefan Schantl [Fri, 29 Jul 2016 11:16:11 +0000 (13:16 +0200)] 
guardian.cgi: Fix path to snort alert file.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agolog.dat: Added entry for 'guardian'
Matthias Fischer [Tue, 19 Jul 2016 18:17:11 +0000 (20:17 +0200)] 
log.dat: Added entry for 'guardian'

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian: Update to 2.0.
Stefan Schantl [Mon, 4 Jul 2016 09:49:39 +0000 (11:49 +0200)] 
guardian: Update to 2.0.

Update guardian to the re-written version.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Prevent from using "syslog" and "debug".
Stefan Schantl [Wed, 13 Jul 2016 07:37:30 +0000 (09:37 +0200)] 
guardian.cgi: Prevent from using "syslog" and "debug".

When using syslog as log facility and debug as log mode,
syslog does not log anything.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Also generate ignore file when building the configuration.
Stefan Schantl [Sat, 2 Jul 2016 08:21:52 +0000 (10:21 +0200)] 
guardian.cgi: Also generate ignore file when building the configuration.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoLanguage file update.
Stefan Schantl [Wed, 29 Jun 2016 07:39:39 +0000 (09:39 +0200)] 
Language file update.

Add guardian related strings to the german language file.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoperl-Net-IP: New package
Stefan Schantl [Thu, 18 Feb 2016 17:17:24 +0000 (18:17 +0100)] 
perl-Net-IP: New package

The perl-Net-IP module provides various methods for validating
and calculating IP-addresses (both IP protocols supported) and
is a runtime dependency of guardian 2.0.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoperl-common-sense: New package.
Stefan Schantl [Tue, 7 Oct 2014 17:24:11 +0000 (19:24 +0200)] 
perl-common-sense: New package.

This is a runtime dependency for perl-inotify2.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoperl-inotify2: New package.
Stefan Schantl [Tue, 7 Oct 2014 17:25:11 +0000 (19:25 +0200)] 
perl-inotify2: New package.

This module contains inotify bindings for perl, used by the extendend guardian.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoLanguage file update.
Stefan Schantl [Mon, 27 Jun 2016 10:54:44 +0000 (12:54 +0200)] 
Language file update.

Add new guardian related strings.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Show/Hide options using Java Script.
Stefan Schantl [Mon, 27 Jun 2016 10:52:39 +0000 (12:52 +0200)] 
guardian.cgi: Show/Hide options using Java Script.

The options for configuring the log file location and
snort alert priority level now dynamically will be
displayed or hidden if the desired options or feature
is not used.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Add support for selecting the used firewall action.
Stefan Schantl [Thu, 23 Jun 2016 13:54:19 +0000 (15:54 +0200)] 
guardian.cgi: Add support for selecting the used firewall action.

This will allow to choose between DROP and REJECT if guardian blocks an
attackers address.

Fixes #10xxx.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Use new feature of ignore file inclusion.
Stefan Schantl [Tue, 21 Jun 2016 08:05:01 +0000 (10:05 +0200)] 
guardian.cgi: Use new feature of ignore file inclusion.

Add support and usage of the recently introduced feature of
including other files in the ignore file to add
the red related IP-addresses to the ignore list on IPFire
systems.

Also use reload-ignore-list feature instead of reloading the
whole configuration on ignore list modifications.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Create config and ignore file if they does not exist.
Stefan Schantl [Fri, 29 Apr 2016 09:54:53 +0000 (11:54 +0200)] 
guardian.cgi: Create config and ignore file if they does not exist.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Prevent from blocking the used DNS servers.
Stefan Schantl [Fri, 29 Apr 2016 09:06:40 +0000 (11:06 +0200)] 
guardian.cgi: Prevent from blocking the used DNS servers.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Use private subfunction for gateway and DNS server detection.
Stefan Schantl [Fri, 29 Apr 2016 09:06:06 +0000 (11:06 +0200)] 
guardian.cgi: Use private subfunction for gateway and DNS server detection.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Add function to generate the guardian.ignore file.
Stefan Schantl [Fri, 29 Apr 2016 08:55:32 +0000 (10:55 +0200)] 
guardian.cgi: Add function to generate the guardian.ignore file.

This function is responsible for collecting all required data,
like the green, blue, orange (if the interfaces are available),
red, gateway and used DNS server IP-addresses.

It will add als these addresses and the configured and enabled
user-defined ignored addresses/networks to the ignore file of
guardian to prevent from blocking any of them.

Note:

The IPFire and RED inteface related addresses also will be added
to the ignore file, even if there is no user-defined entry in the
list.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Use ignored config file.
Stefan Schantl [Fri, 29 Apr 2016 07:09:25 +0000 (09:09 +0200)] 
guardian.cgi: Use ignored config file.

The CGI now uses an own ignored configuration file for
storing host addresses and/or subnets which should be
ignored by guardian.

This allows to add remarks for them and to enable or disable
each entry individally at any time.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Use "getipstat" binary.
Stefan Schantl [Thu, 25 Feb 2016 10:22:19 +0000 (11:22 +0100)] 
guardian.cgi: Use "getipstat" binary.

Rework the GetBlockedHosts() to use the "getipstat" binary
instead of the not longer available "guardianctrl" binary.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Send commands through socket connection.
Stefan Schantl [Wed, 24 Feb 2016 11:41:12 +0000 (12:41 +0100)] 
guardian.cgi: Send commands through socket connection.

The guardianctrl binary does not longer exists, use
the Guardian::Socket module to send various commands
by using the provided socket client.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Adjust code for generating the config file.
Stefan Schantl [Wed, 24 Feb 2016 11:12:11 +0000 (12:12 +0100)] 
guardian.cgi: Adjust code for generating the config file.

The config file format and values have been changed, so the
code to do the generation has to be adjusted.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Drop option for configure the path to the snort alertfile.
Stefan Schantl [Wed, 24 Feb 2016 08:27:10 +0000 (09:27 +0100)] 
guardian.cgi: Drop option for configure the path to the snort alertfile.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Rename hash keys for enabled modules.
Stefan Schantl [Wed, 24 Feb 2016 08:19:39 +0000 (09:19 +0100)] 
guardian.cgi: Rename hash keys for enabled modules.

Rename the hash key names of enabled parser modules,
(services which should be monitored by guardian) to
keep the same name sheme than in the guardian config
file.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Adjust CGI to use Locale::Codes::Country.
Stefan Schantl [Wed, 24 Feb 2016 07:59:42 +0000 (08:59 +0100)] 
guardian.cgi: Adjust CGI to use Locale::Codes::Country.

The module has been renamed some time ago.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Disable debugging.
Stefan Schantl [Sat, 28 Feb 2015 11:33:12 +0000 (12:33 +0100)] 
guardian.cgi: Disable debugging.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Suppress warnings for ${Header::colourgreen} variable.
Matthias Fischer [Sat, 28 Feb 2015 10:57:33 +0000 (11:57 +0100)] 
guardian.cgi: Suppress warnings for ${Header::colourgreen} variable.

Reference #10748.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Fix unititalized value "GUARDIAN_ENABLE_OWNCLOUD".
Matthias Fischer [Sat, 28 Feb 2015 10:54:58 +0000 (11:54 +0100)] 
guardian.cgi: Fix unititalized value "GUARDIAN_ENABLE_OWNCLOUD".

When the owncloud addon is not installed, this value was not
initialized correctly.

Reference #10748.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Use variable $pid instead of array element.
Matthias Fischer [Sat, 28 Feb 2015 10:52:33 +0000 (11:52 +0100)] 
guardian.cgi: Use variable $pid instead of array element.

This will prevent from a lot of perl suggestions in the
apache error log.

Reference #10748.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Fix path to meta-owncloud.
Stefan Schantl [Sat, 24 Jan 2015 17:41:37 +0000 (18:41 +0100)] 
guardian.cgi: Fix path to meta-owncloud.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Add configure options for owncloud.
Stefan Schantl [Sat, 17 Jan 2015 09:15:12 +0000 (10:15 +0100)] 
guardian.cgi: Add configure options for owncloud.

The related options only will be displayed when the owncloud addon
has been installed.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Allways read-in settings.
Stefan Schantl [Sat, 1 Nov 2014 12:42:53 +0000 (13:42 +0100)] 
guardian.cgi: Allways read-in settings.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Some more input validation.
Stefan Schantl [Tue, 28 Oct 2014 20:53:27 +0000 (21:53 +0100)] 
guardian.cgi: Some more input validation.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Correct indentation when writing out the config file.
Stefan Schantl [Mon, 27 Oct 2014 20:12:03 +0000 (21:12 +0100)] 
guardian.cgi: Correct indentation when writing out the config file.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Add dropdown for PriorityLevel selection.
Stefan Schantl [Mon, 27 Oct 2014 20:06:58 +0000 (21:06 +0100)] 
guardian.cgi: Add dropdown for PriorityLevel selection.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Fix and improve input validation.
Stefan Schantl [Mon, 27 Oct 2014 19:16:42 +0000 (20:16 +0100)] 
guardian.cgi: Fix and improve input validation.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Reload guardian if config or the ignorelist changes.
Stefan Schantl [Tue, 21 Oct 2014 19:55:07 +0000 (21:55 +0200)] 
guardian.cgi: Reload guardian if config or the ignorelist changes.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Add option to configure the BlockCount.
Stefan Schantl [Sun, 19 Oct 2014 17:58:45 +0000 (19:58 +0200)] 
guardian.cgi: Add option to configure the BlockCount.

Some small code fixes.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Accidently hardcoded some descriptions.
Stefan Schantl [Sun, 19 Oct 2014 14:46:38 +0000 (16:46 +0200)] 
guardian.cgi: Accidently hardcoded some descriptions.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Add dropdown to select the used loglevel.
Stefan Schantl [Sun, 19 Oct 2014 14:43:32 +0000 (16:43 +0200)] 
guardian.cgi: Add dropdown to select the used loglevel.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Remove code for options which have been dropped from guardian.
Stefan Schantl [Sun, 19 Oct 2014 12:01:48 +0000 (14:01 +0200)] 
guardian.cgi: Remove code for options which have been dropped from guardian.

Guardian does not longer require the information for the red interface from
the configfile.

Guardian does not longer support a targetfile.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Add options to enable/disable some built-in functions from guardian.
Stefan Schantl [Sun, 19 Oct 2014 11:57:30 +0000 (13:57 +0200)] 
guardian.cgi: Add options to enable/disable some built-in functions from guardian.

This commit allows to enable or disable the monitoring of the snort alertfile
and to switch off the blocking of SSH and HTTPD Brute-force attempts.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Remove code for Blockinterfaces.
Stefan Schantl [Sat, 9 Aug 2014 08:35:32 +0000 (10:35 +0200)] 
guardian.cgi: Remove code for Blockinterfaces.

We don't need this code anymore because we dropped interface support
from guardian.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Connect subboxes with input elements to the main boxes.
Stefan Schantl [Sat, 5 Jul 2014 13:09:50 +0000 (15:09 +0200)] 
guardian.cgi: Connect subboxes with input elements to the main boxes.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Sort blocked IP addresses.
Stefan Schantl [Mon, 30 Jun 2014 15:59:28 +0000 (17:59 +0200)] 
guardian.cgi: Sort blocked IP addresses.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Add hyperlink to ipinfo page for blocked hosts.
Stefan Schantl [Sun, 8 Jun 2014 10:47:58 +0000 (12:47 +0200)] 
guardian.cgi: Add hyperlink to ipinfo page for blocked hosts.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: Autodetect the used interface for red.
Stefan Schantl [Tue, 3 Jun 2014 20:36:32 +0000 (22:36 +0200)] 
guardian.cgi: Autodetect the used interface for red.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoguardian.cgi: New page to configure and interact with guardian.
Stefan Schantl [Sun, 1 Jun 2014 15:24:23 +0000 (17:24 +0200)] 
guardian.cgi: New page to configure and interact with guardian.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agonginx: Update to 1.8.1
Michael Tremer [Thu, 28 Jul 2016 09:46:21 +0000 (10:46 +0100)] 
nginx: Update to 1.8.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agokernel: update arm buildfix patch
Arne Fitzenreiter [Fri, 29 Jul 2016 05:18:37 +0000 (07:18 +0200)] 
kernel: update arm buildfix patch

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agocore104: add kernel to updater
Arne Fitzenreiter [Thu, 28 Jul 2016 16:12:13 +0000 (18:12 +0200)] 
core104: add kernel to updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update to 3.14.74
Arne Fitzenreiter [Thu, 28 Jul 2016 16:01:32 +0000 (18:01 +0200)] 
kernel: update to 3.14.74

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agobackports: add upstream driver fixes.
Arne Fitzenreiter [Thu, 28 Jul 2016 16:00:50 +0000 (18:00 +0200)] 
backports: add upstream driver fixes.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agoFirewall: Add Services SSMTP and submission
Alexander Marx [Tue, 26 Jul 2016 12:40:45 +0000 (14:40 +0200)] 
Firewall: Add Services SSMTP and submission

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agonano 2.6.1: fix in rootfile
Matthias Fischer [Fri, 22 Jul 2016 20:23:24 +0000 (22:23 +0200)] 
nano 2.6.1: fix in rootfile

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agocore104: Include recent changes
Michael Tremer [Wed, 20 Jul 2016 15:49:11 +0000 (16:49 +0100)] 
core104: Include recent changes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoChange case of the unit "bit" from "Bit" to "bit" in web UI
Alf Høgemark [Thu, 14 Jul 2016 11:14:55 +0000 (13:14 +0200)] 
Change case of the unit "bit" from "Bit" to "bit" in web UI

The correct case for "kilobit" is "kilobit", not "kiloBit".
And the same applies for Mbit, Gbit etc.
Reference is https://en.wikipedia.org/wiki/Kilobit

This commit changes the texts used in the web UI, so
that it correctly displays as "bit", "kbit", "Mbit" etc.

This fixes bugzilla item 10918.

Signed-off-by: Alf Høgemark <alf@i100.no>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agonano: Update to 2.6.1
Matthias Fischer [Mon, 18 Jul 2016 09:50:45 +0000 (11:50 +0200)] 
nano: Update to 2.6.1

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoFix potential HTTPoxy vulnerability
Michael Tremer [Tue, 19 Jul 2016 14:01:05 +0000 (15:01 +0100)] 
Fix potential HTTPoxy vulnerability

https://httpoxy.org/

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agofreeradius: New package
Michael Tremer [Tue, 12 Jul 2016 13:51:18 +0000 (14:51 +0100)] 
freeradius: New package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoUpdate qemu to version 2.6
Jonatan Schlag [Tue, 5 Jul 2016 09:56:52 +0000 (11:56 +0200)] 
Update qemu to version 2.6

This patch update qemu to version 2.6
For changelogs see:
http://wiki.qemu.org/ChangeLog/2.5
http://wiki.qemu.org/ChangeLog/2.6

Qemu try to built with bluez, but before version 2.6 bluez was not used
by qemu on IPFire, so I think it is better to disable bluez because
nobody needs it before version 2.6 and our bluez  is not the latest
version so I think this will cause more problems than benefits.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoUpdate spice to version 0.12.8
Jonatan Schlag [Sat, 16 Jul 2016 10:18:52 +0000 (12:18 +0200)] 
Update spice to version 0.12.8

This is an security update.
Recent were 2 serious security vulnerabilities published.
This patch update spice to a version which is not vulnerable.

Changelog:

Changes in 0.12.8:

==================
* Fixes for CVE-2016-0749 and CVE-2016-2150

Changes in 0.12.7:
==================
* spice-server will now send TCP keepalive probes on the TCP connections
  it
  uses. This can prevent unwanted idle disconnections if proxies are
  used
  between the client and the host.
* Fix important memory usage when the webdav channel is used
* Do not disconnect when the client requests an unsupported compression
  type
* Fix a few race conditions
* Fix display glitch when using XSpice
* Improve help string for 'replay -s'
* Fix crashes in corner cases (buggy spice-html5 + win10, vnc + SPICE
  port
  configured, USB webcam redirection over a slow link)
* Fix various compilation warning when building on 32 bit machines
* Some fixes for big-endian machines, more work is likely to be needed
* Do not build static libraries by default, this can be reenabled with
  --enable-static
* Fix small leak in MJPEG code

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agolibtiff: Bump release
Michael Tremer [Sat, 16 Jul 2016 10:24:41 +0000 (11:24 +0100)] 
libtiff: Bump release

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agolibtiff: update to 4.0.6
Marcel Lorenz [Fri, 15 Jul 2016 17:13:07 +0000 (19:13 +0200)] 
libtiff: update to 4.0.6

The pak version from spandsp sane and foomatic are increased by one
to ship packages build against new libtiff.

A compat is not needed

http://www.remotesensing.org/libtiff/v4.0.6.html

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Reviewed-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agocore104: Ship recently updated which
Michael Tremer [Sat, 16 Jul 2016 09:57:04 +0000 (10:57 +0100)] 
core104: Ship recently updated which

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agowhich: update to 2.21
Marcel Lorenz [Fri, 15 Jul 2016 16:42:46 +0000 (18:42 +0200)] 
which: update to 2.21

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoUpdate spice-protocol to 0.12.11
Jonatan Schlag [Fri, 15 Jul 2016 15:27:15 +0000 (17:27 +0200)] 
Update spice-protocol to 0.12.11

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agokernel: Fix broken syntax in configuration file
Michael Tremer [Fri, 15 Jul 2016 10:08:56 +0000 (11:08 +0100)] 
kernel: Fix broken syntax in configuration file

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoBuild bzip2 before pcre
Michael Tremer [Fri, 15 Jul 2016 08:55:49 +0000 (09:55 +0100)] 
Build bzip2 before pcre

pcre is now depending on bzip2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoFix in libvirt install.sh/uninstall.sh
Jonatan Schlag [Fri, 15 Jul 2016 08:28:17 +0000 (10:28 +0200)] 
Fix in libvirt install.sh/uninstall.sh

The libvirt daemon was not started after installation because the
initscritp is named 'libvirtd' not like the package 'libvirt'.
The same problem appear in the uninstall.sh. The service was not
stopped.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agocore104: Ship recently updated packages
Michael Tremer [Thu, 14 Jul 2016 22:36:49 +0000 (23:36 +0100)] 
core104: Ship recently updated packages

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoacpid: update to 2.0.26
Marcel Lorenz [Sun, 26 Jun 2016 07:58:14 +0000 (09:58 +0200)] 
acpid: update to 2.0.26

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agopcre: update to 8.39
Marcel Lorenz [Sun, 26 Jun 2016 07:42:04 +0000 (09:42 +0200)] 
pcre: update to 8.39

http://www.pcre.org/original/changelog.txt

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agopopt: update to 1.16
Marcel Lorenz [Sun, 26 Jun 2016 08:02:54 +0000 (10:02 +0200)] 
popt: update to 1.16

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agocurl: update to 7.49.1
Marcel Lorenz [Sun, 26 Jun 2016 08:07:44 +0000 (10:07 +0200)] 
curl: update to 7.49.1

https://curl.haxx.se/changes.html#7_49_1

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoiputils: update to s20160308
Marcel Lorenz [Sun, 26 Jun 2016 08:08:58 +0000 (10:08 +0200)] 
iputils: update to s20160308

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoacl: update to 2.2.52
Marcel Lorenz [Sun, 26 Jun 2016 08:38:18 +0000 (10:38 +0200)] 
acl: update to 2.2.52

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agolibcap: update to 2.25
Marcel Lorenz [Sun, 26 Jun 2016 08:33:03 +0000 (10:33 +0200)] 
libcap: update to 2.25

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agocollectd: Ignore *phys, macvtap* and vnet* interfaces
Michael Tremer [Wed, 13 Jul 2016 15:55:29 +0000 (16:55 +0100)] 
collectd: Ignore *phys, macvtap* and vnet* interfaces

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agodnsmasq 2.76: latest patches from upstream (004-009)
Matthias Fischer [Tue, 12 Jul 2016 10:37:19 +0000 (12:37 +0200)] 
dnsmasq 2.76: latest patches from upstream (004-009)

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agodnsmasq 2.76: latest patches from upstream (001-003)
Matthias Fischer [Sat, 9 Jul 2016 10:27:37 +0000 (12:27 +0200)] 
dnsmasq 2.76: latest patches from upstream (001-003)

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agop7zip: add CVE-2016-2334 and CVE-2016-2335 patches
Arne Fitzenreiter [Mon, 11 Jul 2016 14:27:58 +0000 (16:27 +0200)] 
p7zip: add CVE-2016-2334 and CVE-2016-2335 patches

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agoMerge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Mon, 11 Jul 2016 13:39:53 +0000 (15:39 +0200)] 
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next

3 years agokernel: disable amd ccp support
Arne Fitzenreiter [Mon, 11 Jul 2016 08:42:51 +0000 (10:42 +0200)] 
kernel: disable amd ccp support

ccp based trng of the apu2 produce none random data.
Aes accleration is also not used because IPFire prefere
AES-NI if this is supported.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agoFix compound nouns for mail service feature
Michael Tremer [Sat, 2 Jul 2016 10:18:38 +0000 (12:18 +0200)] 
Fix compound nouns for mail service feature

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agokernel: arm7-multi: enable ohci_hcd
Arne Fitzenreiter [Thu, 30 Jun 2016 18:29:40 +0000 (20:29 +0200)] 
kernel: arm7-multi: enable ohci_hcd

needed for usb1.1 support on BananaPi

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update to 3.14.74
Arne Fitzenreiter [Wed, 29 Jun 2016 15:04:28 +0000 (17:04 +0200)] 
kernel: update to 3.14.74

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agobackports: r8152 add lenovo and nvidia usb id
Arne Fitzenreiter [Wed, 29 Jun 2016 15:00:29 +0000 (17:00 +0200)] 
backports: r8152 add lenovo and nvidia usb id

this id's are blacklisted in new cdc_ether module
because the r8152 module should used but the
3.14 module not know this id's.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agocore104: Ship updated libarchive
Michael Tremer [Mon, 27 Jun 2016 22:18:39 +0000 (23:18 +0100)] 
core104: Ship updated libarchive

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agolibarchive: update to 3.2.1
Marcel Lorenz [Sun, 26 Jun 2016 07:27:58 +0000 (09:27 +0200)] 
libarchive: update to 3.2.1

Fixes CVE-2016-4301
Libarchive mtree parse_device Code Execution Vulnerability

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agocore 104: Add updated snort.
Stefan Schantl [Wed, 22 Jun 2016 12:19:24 +0000 (14:19 +0200)] 
core 104: Add updated snort.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>