Commit Graph

12680 Commits

Author SHA1 Message Date
Arne Fitzenreiter
2caca41217 kernel: enable PCA953X GPIO extender for ClearFog boards
fixes: #12000

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-16 21:44:52 +01:00
Arne Fitzenreiter
ede9247310 kernel: update to 4.14.101
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-15 17:46:54 +01:00
Michael Tremer
5368ccb0fc core128: Ship kdig
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-13 11:32:00 +00:00
Erik Kapfer
2397e51335 knot: Reduced version of knot with kdig only
Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-13 11:31:37 +00:00
Michael Tremer
59d673ae44 core128: Ship libedit
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-13 11:31:24 +00:00
Erik Kapfer
17b3255b7f libedit: A command line editor library
Dependency for knot (kdig).

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-13 11:30:58 +00:00
Matthias Fischer
17d9d42571 powertop: Update to 2.10
Hi,

Triggered by:
https://forum.ipfire.org/viewtopic.php?f=69&t=22274

For details see:
https://01.org/powertop/downloads/powertop-v2.10

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-13 11:29:39 +00:00
Matthias Fischer
941a3dec4e dhcpcd: Update to 7.1.1
For details see:
https://roy.marples.name/blog/dhcpcd-7-1-1-released

"A minor update, highlights include:

 IPv4LL: Fixed build with this disabled
 IPv4LL: Remember last address between carrier resets
 BSD: Fixed initial link infos reported as LINK_STATE_UNKNOWN
 FreeBSD: Avoid panicing kernel when RTA_IFP is set for IPv6 prefix routes"

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-13 11:28:30 +00:00
Matthias Fischer
d5b7f82a40 curl: Update to 7.64.0
Hi,

For details see:
https://curl.haxx.se/changes.html

This came rather unexpected - if I'd known, I'd have waited with 7.63.0.

"Changes:
cookies: leave secure cookies alone
hostip: support wildcard hosts
http: Implement trailing headers for chunked transfers
http: added options for allowing HTTP/0.9 responses
timeval: Use high resolution timestamps on Windows

Bugfixes:
CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
CVE-2019-3823: SMTP end-of-response out-of-bounds read
FAQ: remove mention of sourceforge for github
OS400: handle memory error in list conversion
OS400: upgrade ILE/RPG binding.
README: add codacy code quality badge
Revert http_negotiate: do not close connection
THANKS: added several missing names from year <= 2000
build: make 'tidy' target work for metalink builds
cmake: added checks for variadic macros
cmake: updated check for HAVE_POLL_FINE to match autotools
cmake: use lowercase for function name like the rest of the code
configure: detect xlclang separately from clang
configure: fix recv/send/select detection on Android
configure: rewrite --enable-code-coverage
conncache_unlock: avoid indirection by changing input argument type
cookie: fix comment typo
cookies: allow secure override when done over HTTPS
cookies: extend domain checks to non psl builds
cookies: skip custom cookies when redirecting cross-site
curl --xattr: strip credentials from any URL that is stored
curl -J: refuse to append to the destination file
curl/urlapi.h: include "curl.h" first
curl_multi_remove_handle() don't block terminating c-ares requests
darwinssl: accept setting max-tls with default min-tls
disconnect: separate connections and easy handles better
disconnect: set conn->data for protocol disconnect
docs/version.d: mention MultiSSL
docs: fix the --tls-max description
docs: use $(INSTALL_DATA) to install man page
docs: use meaningless port number in CURLOPT_LOCALPORT example
gopher: always include the entire gopher-path in request
http2: clear pause stream id if it gets closed
if2ip: remove unused function Curl_if_is_interface_name
libssh: do not let libssh create socket
libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
libssh: free sftp_canonicalize_path() data correctly
libtest/stub_gssapi: use "real" snprintf
mbedtls: use VERIFYHOST
multi: multiplexing improvements
multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
ntlm: fix NTMLv2 compliance
ntlm_sspi: add support for channel binding
openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
openssl: fix the SSL_get_tlsext_status_ocsp_resp call
openvms: fix OpenSSL discovery on VAX
openvms: fix typos in documentation
os400: add a missing closing bracket
os400: fix extra parameter syntax error
pingpong: change default response timeout to 120 seconds
pingpong: ignore regular timeout in disconnect phase
printf: fix format specifiers
runtests.pl: Fix perl call to include srcdir
schannel: fix compiler warning
schannel: preserve original certificate path parameter
schannel: stop calling it "winssl"
sigpipe: if mbedTLS is used, ignore SIGPIPE
smb: fix incorrect path in request if connection reused
ssh: log the libssh2 error message when ssh session startup fails
test1558: verify CURLINFO_PROTOCOL on file:// transfer
test1561: improve test name
test1653: make it survive torture tests
tests: allow tests to pass by 2037-02-12
tests: move objnames-* from lib into tests
timediff: fix math for unsigned time_t
timeval: Disable MSVC Analyzer GetTickCount warning
tool_cb_prg: avoid integer overflow
travis: added cmake build for osx
urlapi: Fix port parsing of eol colon
urlapi: distinguish possibly empty query
urlapi: fix parsing ipv6 with zone index
urldata: rename easy_conn to just conn
winbuild: conditionally use /DZLIB_WINAPI
wolfssl: fix memory-leak in threaded use
spnego_sspi: add support for channel binding"

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-13 11:27:53 +00:00
Arne Fitzenreiter
39d43c5b99 kernel: update to 4.14.98
todo: check if RPi dwc dma patch still need to reverted before release

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-08 20:50:37 +01:00
Matthias Fischer
27a9f86ec4 borgbackup: Fix build on i586
Fixes

...
'/usr/src/config/rootfiles/packages//borgbackup' -> '/install/packages/package/ROOTFILES'
tar: usr/lib/python3.6/site-packages/borg/chunker.cpython-36m-i586-linux-gnu.so: Cannot stat: No such file or directory
tar: usr/lib/python3.6/site-packages/borg/compress.cpython-36m-i586-linux-gnu.so: Cannot stat: No such file or directory
tar: usr/lib/python3.6/site-packages/borg/crypto.cpython-36m-i586-linux-gnu.so: Cannot stat: No such file or directory
tar: usr/lib/python3.6/site-packages/borg/hashindex.cpython-36m-i586-linux-gnu.so: Cannot stat: No such file or directory
tar: usr/lib/python3.6/site-packages/borg/platform_linux.cpython-36m-i586-linux-gnu.so: Cannot stat: No such file or directory
tar: Exiting with failure status due to previous errors
make: *** [borgbackup:58: dist] Error 2
...

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-07 21:35:28 +00:00
Matthias Fischer
7a7c30e119 python3-llfuse: Fix build on i586
Fixes

"tar: usr/lib/python3.6/site-packages/llfuse.cpython-36m-i586-linux-gnu.so:
Cannot stat: No such file or directory"

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-07 21:35:23 +00:00
Michael Tremer
02a8a241bb core128: Ship updated firewall initscript
Require reboot after the update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-07 15:15:37 +00:00
Peter Müller
e01e07ec8b apply default firewall policy for ORANGE, too
If firewall default policy is set to DROP, this setting was not
applied to outgoing ORANGE traffic as well, which was misleading.

Fixes #11973

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Cc: Michael Tremer <michael.tremer@ipfire.org>
Cc: Oliver Fuhrer <oliver.fuhrer@bluewin.ch>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-07 15:15:32 +00:00
Peter Müller
fd16f5d8c1 Tor: update to 0.3.5.7
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-07 15:15:26 +00:00
Jonatan Schlag
08d91c0f7a python3-msgpack: Fix build on i586
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-04 09:02:18 +00:00
Michael Tremer
e20b7de067 python3-dateutil: Update rootfiles
Changed because of new python3-setuptools

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-04 07:00:13 +00:00
Michael Tremer
1cca99e3a1 core128: Ship updated dhcpcd
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-04 00:40:02 +00:00
Matthias Fischer
2378f373dd dhcpcd: Update to 7.1.0
For some informations about this update see:
https://roy.marples.name/blog/dhcpcd-7-1-0-released

"dhcpcd-7.1.0 has been released with the following changes:

- OpenBSD: works alongside slaacd(8)
- NetBSD: sets SO_RERROR on to detect receive socket overflow
- BSD: route improvements to avoid listening for own changes
- Linux: use NETLINK_BROADCAST_ERROR
- BSD: avoid late address deletion messages by testing address existance
- IP6: implement IP6 address sharing
- BSD: catch UP/DOWN events when interfaces does support media changes
- IPv4LL: remember old address when carrier is lost

Many other minor fixes and documenation updates have been submitted by various
community members for this release..."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-04 00:39:25 +00:00
Michael Tremer
60c692e385 core128: Ship updated curl
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-04 00:15:24 +00:00
Matthias Fischer
d2b7811b15 curl: Update to 7.63.0
For details see:
https://curl.haxx.se/changes.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-04 00:14:59 +00:00
Erik Kapfer
b4285088a1 update.sh: Delete .rnd files
Since RANDFILE has been disabled in OpenSSL configurations, .rnd files are not needed anymore.

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-03 21:43:23 +00:00
Michael Tremer
06232b041a core128: Ship updated apr
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-03 21:42:43 +00:00
Wolfgang Apolinarski
33f7d610fb Updated apr, stabilized apache build
- Updated apr to 1.6.5
- Stabilized apache build (rebuild)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-03 21:41:33 +00:00
Arne Fitzenreiter
22f7be0d4d python3-llfuse: fix rootfile for non x86_64 builds
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-03 15:28:52 +01:00
Arne Fitzenreiter
329788dee5 kernel: update to 4.14.97
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-03 12:45:52 +01:00
Michael Tremer
2a915f98cb haproxy: Bump version to support TLSv1.3 (and PCRE JIT)
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-01 17:34:02 +00:00
Michael Tremer
83064ee34e core128: Restart updated apache
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-01 17:12:23 +00:00
Matthias Fischer
57bc05a53d apache: Update to 2.4.38
For details see:
http://mirror.checkdomain.de/apache//httpd/CHANGES_2.4.38

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-01 17:09:49 +00:00
Michael Tremer
2d8187e8e0 core128: Ship AWS scripts again
It seems that this was missing in Core Update 125/126 so not all
bug fixes made it into the release.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-01 17:08:44 +00:00
Jonatan Schlag
46114d79d9 Add new package borgbackup
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-01 16:27:23 +00:00
Jonatan Schlag
def9f4a3e0 Add new package python3-msgpack
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-01 16:27:16 +00:00
Jonatan Schlag
3be819876b Add new package python3-llfuse
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-01 16:27:06 +00:00
Jonatan Schlag
662b2a812f Add new package python3-setuptools-scm
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-01 16:26:59 +00:00
Jonatan Schlag
2d17377aa0 Add new package python3-settuptools
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-01 16:26:39 +00:00
Michael Tremer
feeda1e4dd core128: Delete SSE2-optimised legacy OpenSSL libraries, too
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-01-30 18:37:26 +00:00
Michael Tremer
898fe209ff core128: Ship updated OpenSSL configuration files
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-01-29 13:51:37 +00:00
Erik Kapfer
a946892338 del_rand: Deletion of RAND file in openssl config
Fixes #11943

Since the kernel RNG should do this, there is no need for this anymore.

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-01-29 13:49:29 +00:00
Matthias Fischer
61ee842911 ghostscript: Update to 9.26
For details see:
https://www.ghostscript.com/doc/9.26/News.htm

This version fixes CVE-2019-6116 ("code execution via subroutines within pseudo-operators")

Some details (german) can be found here:
https://www.heise.de/security/meldung/Boeser-Bug-in-PostScript-trifft-ghostscript-und-damit-Viele-mehr-4286563.html

I saw this article and found it could be the time for an update...

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-01-27 22:26:55 +00:00
Michael Tremer
d03916e558 Enable some performance tuning
These parameters increase the throughput on various (large-ish)
systems by 5-10% on the slight expense of higher power consumption.

Socket buffers are increases and the system is configured to be
less aggressive when scheduling processes from one processor to
another one which ensures that the cache remains "hot" for longer.

On a slower system (apu1d) no performance improvement or loss
could have been measured.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-01-24 12:31:27 +00:00
Michael Tremer
7ec83993e5 proxy: Show error messages in English by default
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-01-23 06:21:53 +00:00
Peter Müller
75936b067f Postfix: update to 3.3.2
See http://www.postfix.org/announcements/postfix-3.3.2.html for release
note. This makes Postfix TLS 1.3/OpenSSL 1.1.1a ready.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-01-23 05:41:33 +00:00
Michael Tremer
0a44d9bcec core128: Ship updated ca-certificates
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-01-23 05:40:41 +00:00
Peter Müller
07c36be56f update ca-certificates CA bundle
Update the CA certificates list to what Mozilla NSS ships currently.

The original file can be retrieved from:
https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-01-23 05:40:21 +00:00
Michael Tremer
bdc8310154 core128: Ship updated openssh
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-01-23 05:40:04 +00:00
Peter Müller
fee8b1c504 OpenSSH: update to 7.9p1
Update OpenSSH to 7.9p1 (release note is available at
https://www.openssh.com/txt/release-7.9). Patching support
for OpenSSL 1.1.0 is no longer required, thus the orphaned
patchfile has been deleted.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-01-23 05:13:47 +00:00
Arne Fitzenreiter
be838808e1 Merge remote-tracking branch 'origin/master' into next 2019-01-23 21:19:01 +01:00
Arne Fitzenreiter
7c26f07dab Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2019-01-23 21:18:44 +01:00
Arne Fitzenreiter
b9d494e773 kernel: update to 4.14.95
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-01-23 18:44:26 +01:00
Peter Müller
903052ddea use HTTPS for downloading GeoIP database files
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-01-23 04:12:49 +00:00