Commit Graph

5694 Commits

Author SHA1 Message Date
Arne Fitzenreiter
f6c97e0b44 remove dropped pakages to make sure that apache not miss php files.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-01-29 19:44:17 +01:00
Michael Tremer
61f45200cf core118: Ship forgotten menu file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-29 17:29:11 +00:00
Jonatan Schlag
e7edab7e55 libvirt: update to version 4.0
This version works for me. Some others do not ..

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-24 16:12:51 +00:00
Jonatan Schlag
34297a18a4 python3-libvirt: drop this package
Since it is some work to update this package accordingly to the libvirt
version  and facing the fact that I know nobody who using this I suggest to drop this. If we
need this later we can just revert the commit.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-24 16:12:49 +00:00
Jonatan Schlag
62cddc671e qemu: update to version 2.11
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-24 16:12:47 +00:00
Jonatan Schlag
939cc0932e spice: update to version 0.14
For changelog see:
https://cgit.freedesktop.org/spice/spice/tree/NEWS

This update alos fixes: CVE-2016-9577, CVE-2016-9578, CVE-2017-7506

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-24 16:12:46 +00:00
Jonatan Schlag
3019aa9970 spice-protocol: update to version 0.12.13
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-24 16:12:44 +00:00
Jonatan Schlag
4a9e4a91f0 opus: update to version 1.2.1
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-24 16:12:42 +00:00
Jonatan Schlag
e9a7dfb1fe pyparsing: update to version 2.2.0
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-24 16:12:39 +00:00
Michael Tremer
3ed1c621cf Revert "Add Intel microcode updates from Jan 2018"
This reverts commit d404b1dba2.

Intel has pulled these microcode updates because of
random system reboots and systems becoming unstable.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-24 16:08:22 +00:00
Michael Tremer
637eb1eda5 Revert "core118: Ship microcode updates for Intel processors"
This reverts commit c015d425d1.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-24 16:07:58 +00:00
Michael Tremer
a996dd211f core118: Ship updated wget
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-24 16:07:11 +00:00
Michael Tremer
68fa5e7810 core118: Ship updated sed
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-24 16:06:32 +00:00
Michael Tremer
cad9257ae2 core118: Ship LZ4
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-23 13:21:36 +00:00
Erik Kapfer
adf3f4f4fe LZ4: New compression library.
New lossless data compression algorithm.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-23 13:20:58 +00:00
Michael Tremer
fb55a868c6 core118: Ship updated squid
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-23 13:09:37 +00:00
Michael Tremer
1f91201011 firewall: Suppress warning about uninitialized array in GeoIP code
Fixes #11597

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-22 13:20:04 +00:00
Michael Tremer
e0a048fe21 poppler is now linking against glib2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-22 13:12:56 +00:00
Peter Müller
1a9ccdf996 ship updated CA bundle
Add new generated CA bundle files to updater and remove
accidentally inserted blank line at the end of certdata.txt .

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-20 15:37:15 +00:00
Peter Müller
4fa3d0e88e update ca-certificates CA bundle
Update the CA certificates list to what Mozilla NSS ships currently.

The original file can be retrieved from: https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-20 15:35:25 +00:00
Michael Tremer
898ff14a28 core118: Ship updated bind package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-20 15:34:56 +00:00
Michael Tremer
1e7b718cd4 syslogdctrl: Fix compiler error and SEGV
Fixes #11574

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-20 14:51:40 +00:00
Michael Tremer
ffd3c200c4 core118: Ship updated unbound
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-20 14:38:56 +00:00
Matthias Fischer
6ac7b8b2a4 unbound: Update to 1.6.8
For details see:
http://www.unbound.net/download.html

Fixes CVE-2017-15105: vulnerability in the processing of wildcard synthesized NSEC records,
=> https://unbound.net/downloads/CVE-2017-15105.txt

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-20 14:37:25 +00:00
Michael Tremer
6d91b9f707 core118: Ship dmidecode
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-20 14:35:49 +00:00
Michael Tremer
cb7c10bd24 core118: Ship updated glib2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-14 15:45:10 +00:00
Michael Tremer
8b0fbdc569 glib: Fix rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-14 15:44:48 +00:00
Michael Tremer
e442e02a7f glib2: Update to 2.54.3
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-14 15:44:36 +00:00
Michael Tremer
c015d425d1 core118: Ship microcode updates for Intel processors
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-14 15:43:57 +00:00
Jonatan Schlag
d404b1dba2 Add Intel microcode updates from Jan 2018
Add intel microcode to the distribution and configure dracut in a way
that the microcode is loaded early in the boot process.

Fixes #11590

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Acknowledged-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-14 15:25:08 +00:00
Michael Tremer
c91f74b988 core118: Ship updated urlfilter.dat
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-10 16:55:46 +00:00
Michael Tremer
7902d679eb core118: Ship modified captive.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-10 16:44:53 +00:00
Michael Tremer
bca3f3bdbf mdns-repeater: Stupid me has botched the rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-10 11:31:54 +00:00
Michael Tremer
e7fe1adfce core118: Ship updated hdparm
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-09 14:14:37 +00:00
Matthias Fischer
80908b44b7 Fixed missing 'Captive' localization string for 'logs.dat'
Added 'Captive' localization string in 'de/en.pl'.

After a fresh install of Core 117, the system log shows a blank line
for 'Captive Portal' entries.

Deleted translation for 'Captive menu' and changed '30-network.menu' accordingly
to avoid duplicate translation strings.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-09 14:14:37 +00:00
Michael Tremer
24d31a0065 core118: Ship updated gzip
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-09 14:14:37 +00:00
Michael Tremer
9fda5e9258 core118: Ship update accelerator downloader
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-07 19:51:07 +00:00
Justin Luth
e04f86b449 Fix bug 11567 updxlrator: don't prematurely release lock file
With Microsoft's new style of downloading updates,
where portions of a patch are requested multiple times per second,
it has become extremely common for downloads to reach > 100%.
Due to an early unlinking of the "lock" file, there is a big window of
opportunity (between the unlink and wget actually saving some data)
for multiple download/wget threads to start, adding to the same file.
So not only is bandwidth wasted by duplicate downloads running
simultaneously, but the resulting file is corrupt anyway.

The problem is noticed more often by low bandwidth users
(who need the benefits of updxlrator the most)
because then wget's latency is even longer, creating
a very wide window of opportunity.

Ultimately, this needs something like "flock", where the
file is set and tested in one operation. But for now,
settle with the current test / create lock solution, and
just stop unnecessarily releasing the lock.

Since the file already exists as a lock when wget starts,
wget now must ALWAYS run with --continue, which
works fine on a zero-sized file.

Signed-off-by: Justin Luth  <jluth@mail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-07 19:49:53 +00:00
Justin Luth
e331e22bda updxlrator: show hostaddr in debuglog
There is nowhere in the debuglog any indication of
which client is requesting the file that updxlrator
is providing (or caching). Especially for those
huge Windows 10 downloads, it is valuable to
see which client is requesting them, especially
when the same client requests the same download
multiple times a second.

This only impacts users who turn on debugging.

Signed-off-by: Justin Luth  <jluth@mail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-07 19:49:47 +00:00
Justin Luth
329631dee9 Fix bug 11558 updxlrator: use mirror mode for SHA1, filenames
Most Microsoft updates now contain an SHA1 hash in the filename.
Since these files are uniquely identifiable, use mirror mode
(which creates a hash of just the filename instead of the entire URL)
to cache them. (But first check the URL cache to see if it
has been downloaded as a URL already.)

This is a HUGELY needed fix. Windows 10 updates are 5+ GB
per month, and we lose several days of bandwidth downloading
duplicates from different mirrors. Sometimes a single client
will request the same patch from multiple mirrors. That's bad.
This patch will save a ton of bandwidth, and lots of disk space.

The patch limits the SHA1 test to microsoft only, but it
could be easily expanded to other vendors if there is a need.

Signed-off-by: Justin Luth  <jluth@mail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-07 19:47:03 +00:00
Michael Tremer
645da4f33d core118: Ship updated update accelerator
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-07 19:28:28 +00:00
Justin Luth
39c0b5b3bc Fix bug 10504: match download's sourceurl mangling in, updxlrator
Updatexlrator stores its files in a hash of the URL.

The download utility mangles the URL for [+/~], but
the updxlrator only does it for [/]. Thus, download
stores the result as one hash, and updxlrator looks for it
with a different hash. The result is that the file is
re-downloaded every time by both the client, and updxlrator.

This is fixed by making updxlrator mangle the url in the
same way as the downloader. apt-get install g++ would
be a good test for this.

Signed-off-by: Justin Luth  <jluth@mail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-07 19:27:47 +00:00
Michael Tremer
e7bf3de34b core118: Ship updated ids.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-07 19:22:27 +00:00
Michael Tremer
d093117fe4 core118: Ship updated snort
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-07 19:21:35 +00:00
Michael Tremer
375c4480d7 core118: Ship updated fireinfo.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-07 19:19:12 +00:00
Peter Müller
15f7b86597 ship updated showrequestfromcountry.cgi file
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-07 19:17:43 +00:00
Michael Tremer
bc6257f490 Update rootfiles
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-05 18:04:47 +00:00
Michael Tremer
11f0b6923b core118: Drop PHP files in updater
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-05 13:45:37 +00:00
Michael Tremer
66b2fabd40 core118: Restart apache to drop PHP module
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-05 13:41:32 +00:00
Michael Tremer
91bd66d6d1 Drop PHP
This is no longer needed and in the telephone conference
on Dec 4th, it was decided to drop it.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-05 13:37:25 +00:00