Commit Graph

5128 Commits

Author SHA1 Message Date
Michael Tremer
0c265f5717 nginx: Update to 1.8.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-29 09:04:04 +01:00
Arne Fitzenreiter
5a53d5947d core104: add kernel to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-07-28 18:12:13 +02:00
Alexander Marx
0eccc8a97c Firewall: Add Services SSMTP and submission
Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-26 14:53:06 +01:00
Matthias Fischer
24159f0952 nano 2.6.1: fix in rootfile
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-25 17:24:31 +01:00
Michael Tremer
c48a24dc14 core104: Include recent changes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-20 16:49:11 +01:00
Alf Høgemark
f00699e8bb Change case of the unit "bit" from "Bit" to "bit" in web UI
The correct case for "kilobit" is "kilobit", not "kiloBit".
And the same applies for Mbit, Gbit etc.
Reference is https://en.wikipedia.org/wiki/Kilobit

This commit changes the texts used in the web UI, so
that it correctly displays as "bit", "kbit", "Mbit" etc.

This fixes bugzilla item 10918.

Signed-off-by: Alf Høgemark <alf@i100.no>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-20 16:46:23 +01:00
Michael Tremer
3b7d73d1d4 Fix potential HTTPoxy vulnerability
https://httpoxy.org/

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-19 15:02:16 +01:00
Michael Tremer
71f578bbfc freeradius: New package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-19 14:54:50 +01:00
Jonatan Schlag
ccb35c191f Update qemu to version 2.6
This patch update qemu to version 2.6
For changelogs see:
http://wiki.qemu.org/ChangeLog/2.5
http://wiki.qemu.org/ChangeLog/2.6

Qemu try to built with bluez, but before version 2.6 bluez was not used
by qemu on IPFire, so I think it is better to disable bluez because
nobody needs it before version 2.6 and our bluez  is not the latest
version so I think this will cause more problems than benefits.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-16 11:38:39 +01:00
Jonatan Schlag
d4641215c7 Update spice to version 0.12.8
This is an security update.
Recent were 2 serious security vulnerabilities published.
This patch update spice to a version which is not vulnerable.

Changelog:

Changes in 0.12.8:

==================
* Fixes for CVE-2016-0749 and CVE-2016-2150

Changes in 0.12.7:
==================
* spice-server will now send TCP keepalive probes on the TCP connections
  it
  uses. This can prevent unwanted idle disconnections if proxies are
  used
  between the client and the host.
* Fix important memory usage when the webdav channel is used
* Do not disconnect when the client requests an unsupported compression
  type
* Fix a few race conditions
* Fix display glitch when using XSpice
* Improve help string for 'replay -s'
* Fix crashes in corner cases (buggy spice-html5 + win10, vnc + SPICE
  port
  configured, USB webcam redirection over a slow link)
* Fix various compilation warning when building on 32 bit machines
* Some fixes for big-endian machines, more work is likely to be needed
* Do not build static libraries by default, this can be reenabled with
  --enable-static
* Fix small leak in MJPEG code

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-16 11:28:57 +01:00
Marcel Lorenz
25bb3677e9 libtiff: update to 4.0.6
The pak version from spandsp sane and foomatic are increased by one
to ship packages build against new libtiff.

A compat is not needed

http://www.remotesensing.org/libtiff/v4.0.6.html

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Reviewed-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-16 11:23:16 +01:00
Michael Tremer
035e2b4a9b core104: Ship recently updated which
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-16 10:57:04 +01:00
Marcel Lorenz
10f8c6f421 which: update to 2.21
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-16 10:53:53 +01:00
Michael Tremer
f5194e7a38 kernel: Fix broken syntax in configuration file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-15 11:09:42 +01:00
Michael Tremer
19a4317093 core104: Ship recently updated packages
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-14 23:36:49 +01:00
Marcel Lorenz
aa3ff233c2 acpid: update to 2.0.26
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-14 23:30:58 +01:00
Marcel Lorenz
602696704c pcre: update to 8.39
http://www.pcre.org/original/changelog.txt

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-14 23:28:39 +01:00
Marcel Lorenz
c11dfb9295 popt: update to 1.16
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-14 23:27:04 +01:00
Marcel Lorenz
2a53bafffe curl: update to 7.49.1
https://curl.haxx.se/changes.html#7_49_1

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-14 23:24:56 +01:00
Marcel Lorenz
2249bb1d52 acl: update to 2.2.52
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-14 23:20:52 +01:00
Marcel Lorenz
04251def7f libcap: update to 2.25
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-14 14:00:30 +01:00
Michael Tremer
cc97d7b417 collectd: Ignore *phys, macvtap* and vnet* interfaces
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-13 16:55:29 +01:00
Arne Fitzenreiter
7959134a55 kernel: disable amd ccp support
ccp based trng of the apu2 produce none random data.
Aes accleration is also not used because IPFire prefere
AES-NI if this is supported.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-07-11 11:00:55 +02:00
Arne Fitzenreiter
795147c7d9 kernel: arm7-multi: enable ohci_hcd
needed for usb1.1 support on BananaPi

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-06-30 20:29:40 +02:00
Arne Fitzenreiter
484e62046e kernel: update to 3.14.74
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-06-29 17:04:28 +02:00
Michael Tremer
dc2e0320d3 core104: Ship updated libarchive
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-27 23:18:39 +01:00
Marcel Lorenz
a3cab8134a libarchive: update to 3.2.1
Fixes CVE-2016-4301
Libarchive mtree parse_device Code Execution Vulnerability

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-27 23:16:56 +01:00
Stefan Schantl
f7029f2057 core 104: Add updated snort.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-06-22 14:19:24 +02:00
Stefan Schantl
fee796dcb7 core 104: Add changed ids.cgi.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-06-22 14:18:36 +02:00
Stefan Schantl
b1e8c4b521 snort: Rootfile update.
Rootfile update for snort 2.9.8.2 which has been overlocked in
commit 5a5e5f04a7.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-06-22 14:13:49 +02:00
Stefan Schantl
60ef4f6704 Add updated ddns to core 104.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-06-21 12:02:49 +02:00
Stefan Schantl
59232d7225 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2016-06-21 10:08:07 +02:00
Jonatan Schlag
5cc7ae0926 Qemu: add a group kvm to access /dev/kvm eaiser
As a normal user, it is not possible to use qemu with KVM. This is bad
because it is better when it is possible to start the machine with a
less privileged user. To achieve this a group KVM is created and the
access to /dev/kvm is allowed for this group. So every user in this
group can use qemu with KVM.
This change is also useful for libvirt because the VMs can be started
with user nobody and group kvm.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-20 16:25:29 +01:00
Michael Tremer
1dd61e0594 Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-19 09:54:32 +01:00
Michael Tremer
0204a3c5bf core104: Ship updated shadow-utils and remove old files
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-17 13:07:10 +01:00
Marcel Lorenz
4787315b6e shadow: update to 4.2.1
The "groups" from the coreutils package is used (/usr/bin/groups)

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-17 13:03:34 +01:00
Michael Tremer
1bddfa5abf core104: Ship updated pakfire functions.sh
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-16 09:34:24 +01:00
Michael Tremer
6c2720cac6 core104: Add ntp update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-16 09:28:34 +01:00
Michael Tremer
44285d92a2 core104: Add wget update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-16 09:26:55 +01:00
Michael Tremer
b6c0145236 Start Core Update 104
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-16 09:24:22 +01:00
Michael Tremer
6bff907d71 core103: Restart squid and rebuild cache
The swap.state file may be broken and so we delete this here and
let squid rebuild the cache at the next start.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-15 18:47:29 +01:00
Arne Fitzenreiter
6621f8bb27 rootfile updates: newt, linux-rpi
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-06-13 21:37:11 +02:00
Arne Fitzenreiter
48c8961a4f libvirt: move initskript to package.
this also fix build on arm.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-06-13 07:19:05 +02:00
Arne Fitzenreiter
fe8ecc26d2 core103: forgot to add the packages
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-06-11 16:00:50 +02:00
Arne Fitzenreiter
e2dbe078fe core103: Ship more updated files and packages.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-06-11 09:19:10 +02:00
Michael Tremer
3855b7d33f core103: Ship updated files and packages
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-03 16:42:01 +01:00
Heino Gutschmidt
ecc9c73bb5 BUG11131: fix errormessage when more ipsec subnets defined
When having more than one subnet in an ipsec connection it is not
possible to create a new openvpn static subnet.

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Heino Gutschmidt <heino.gutschmidt@managedhosting.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-03 16:19:49 +01:00
Marcel Lorenz
ec149ba026 ncurses: update to 6.0 and rename 5.9 to ncurses-compat v3
This patch updates the ncurses to 6.0. The old 5.9 are renamed to ncurses-compat.
The compat makes the old libs maintainable and the compat rootfile is cleaned up.
The 6.0 is build after 5.9 and all IPFire componentes will build with 6.0
In version 6 only the wide-character libraries are build. The are usable
in both multibyte and traditional 8-bit locales while normal libraries work
properly only in 8-bit locales. The toolchain is only bild with 6.0.

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-03 16:19:36 +01:00
Marcel Lorenz
c935a26988 igmpproxy: fix build fail and move binary to /usr/sbin
Add "--prefix=/usr" to lfs file

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-02 15:34:11 +01:00
Marcel Lorenz
55118ae9aa findutils: update to 4.6.0
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-01 22:46:10 +01:00