Commit Graph

2150 Commits

Author SHA1 Message Date
Michael Tremer
2ff56df4e0 strongswan: Build sha3 plugin
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-04-01 14:40:39 +00:00
Michael Tremer
e4a0b55881 fcron: Fix reloading crontab
fcrontab -z fails on a freshly installed system since
/var/spool/cron is now owned by cron:cron and a temporary
file cannot be created.

This will have to be manually changed in the updater by
calling:

  chown cron:cron /var/spool/cron

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-30 16:37:38 +00:00
Arne Fitzenreiter
54e6ded417 smartmontools: update rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-29 06:34:18 +00:00
Matthias Fischer
454c77d4c4 bind: Update to 9.11.17
For details see:
https://downloads.isc.org/isc/bind9/9.11.17/RELEASE-NOTES-bind-9.11.17.html

"Notes for BIND 9.11.17

Feature Changes

The configure option --with-libxml2 now uses pkg-config to detect
libxml2 library availability. You will either have to install pkg-config
or specify the exact path where libxml2 has been installed on your
system. [GL #1635]

Bug Fixes

Fixed re-signing issues with inline zones which resulted in records
being re-signed late or not at all."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-28 18:38:24 +00:00
Arne Fitzenreiter
5562f26f69 vnstat: remove wrong tag file
fixes #12305

I had created this tag file to ship the folder but vnstat doesn't like empty files.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-26 17:56:23 +00:00
Peter Müller
3fd3f4de44 OpenSSH: update to 8.2p1
Please refer to https://www.openssh.com/txt/release-8.2 for release
announcements. Since glibc < 2.31 is used, no additional patching was
required in order to restore correct login functionality.

Cc: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-26 17:40:06 +00:00
Arne Fitzenreiter
a48d35f3ff smartmontools: update rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-26 17:38:32 +00:00
Matthias Fischer
a7e9342c18 ncurses: Update to 6.2
For details see:
https://invisible-island.net/ncurses/announce.html#h2-release-notes

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-26 09:42:12 +00:00
Marcel Lorenz
3b891a2d90 xz: update to 5.2.5 2020-03-23 18:38:17 +00:00
Peter Müller
d519f1239f coreutils: update rootfiles
Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-23 18:32:33 +00:00
Michael Tremer
29cb9e478a glibc: Update to 2.31
Fixes: #12288
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-22 07:30:45 +00:00
Peter Müller
b427793a58 strongSwan: update to 5.8.2
Please refer to https://wiki.strongswan.org/versions/75 for release notes.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-21 16:27:22 +00:00
Michael Tremer
6b3b3a32ab swap: Start swap after mounting filesystems
When using a swap file, it is not being activated correctly
when the filesystem it is residing on is not mounted, yet.

The root file system is mounted read-only here before
S40mountfs is being executed.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-21 16:19:54 +00:00
Matthias Fischer
98bd7ab1be unbound: Update to 1.10.0
For details see:
https://lists.nlnetlabs.nl/pipermail/unbound-users/2020-February/006711.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-21 16:16:40 +00:00
Wolfgang Apolinarski
ddda384a44 Update Apache Dependencies
Update apache dependencies:
APR: update to version 1.7.0
PCRE: update to version 8.44
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-21 16:14:08 +00:00
Erik Kapfer
5b9e7d37c3 libssh: Update to version 0.9.3 .
Fixes CVE-2019-14889 and several issues after an security audit.
The complete changelog can be found in here --> https://www.libssh.org/category/release/ .
This version is also needed for tshark-3.2.2 to prevent
'error while loading shared libraries: libssh.so.4' for sshdump and ciscodump.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-21 16:03:54 +00:00
Michael Tremer
3a17ab3893 openssl: Update to 1.1.1e
Fixed an overflow bug in the x64_64 Montgomery squaring procedure used
in exponentiation with 512-bit moduli (CVE-2019-1551).

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-21 15:56:05 +00:00
Michael Tremer
50a04f785d cairo: Update to 1.16.0
This updates the package and adds a patch so that it compiles
with binutils 2.34.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-21 15:44:08 +00:00
Peter Müller
cfd2f07cf0 binutils: update to 2.34
Cc: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-21 15:44:06 +00:00
Michael Tremer
067a6fd040 gcc: Update to 9.3.0
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-21 15:43:41 +00:00
Arne Fitzenreiter
592be1d206 bluetooth: drop outdated bluetooth addon
The cgi support only rfcomm modem dialup. This is not used by modern hardware.
Also the used bluez stack version is outdated long time.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-21 15:41:22 +00:00
Arne Fitzenreiter
a344d3c902 unbound/red.up: run unbound update-forwarders after suricata init.
The old suricata instance blocks dns requests if the red ip has changed.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-04 08:52:56 +01:00
Arne Fitzenreiter
3b5131c1a3 unbound: drop remove-dns-fowarders at red.down
this functions has only reloaded unbound config
which is useless at shutting down the red interface.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-02 17:54:48 +00:00
Michael Tremer
1ece41ec51 kmod: Update to 26
This patch links kmod against OpenSSL which is required to
decode the kernel modules' PKCS#7 signatures.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-01 19:44:24 +00:00
Arne Fitzenreiter
8569b3e11b red.up: move update-dns-forwareders behind the firewall
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-19 14:51:48 +00:00
Stefan Schantl
8f60b4ff30 ppp: Update to 2.4.8
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-18 17:10:50 +00:00
Arne Fitzenreiter
c2b6c29a0d elinks: suppress welcome dialog
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-18 06:01:44 +00:00
Arne Fitzenreiter
24fd2e0b90 ddns: rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-17 08:50:46 +00:00
Arne Fitzenreiter
e0dbe21e09 u-boot-kirkwood: drop package
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 17:01:02 +00:00
Michael Tremer
3c7d55c55a Drop setserial
This package was used internally and we have no script that uses it
any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 16:56:13 +00:00
Michael Tremer
65b08a04da Drop ez-ipupdate
We do not use this at all any more, because it has been replaced
by ddns.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 16:55:39 +00:00
Michael Tremer
d4b31f13d5 Drop multicat & bitstream
This reverts commit 0a21ce42e1.

These packages have never been updated and nodody in the team
is willing to support them.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 16:55:00 +00:00
Michael Tremer
bad2292034 Drop batctl
This package is no longer used. BATMAN is slightly out of fashion
and can be disabled in our kernel, too.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 16:54:48 +00:00
Arne Fitzenreiter
dc1362e888 kernel: armv5tel rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-13 17:08:20 +00:00
Arne Fitzenreiter
ee9bc7c477 kernel: rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-08 15:21:16 +01:00
Arne Fitzenreiter
831ff05d89 kernel: enable and enforce signed kernel modules
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-06 15:09:52 +01:00
Arne Fitzenreiter
57b17167eb kernel: drop kirkwood kernel
perl 5.30 will not work on kirkwood platform and firewinfo reports less than 10 users so we will drop the support for the platform.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-03 17:44:49 +00:00
Arne Fitzenreiter
4f175a1f57 rust: rootfiles updates
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-25 21:14:54 +01:00
Michael Tremer
8893881160 lvm2: Add initscript for lvmetad
This daemon needs to be launched in order to use LVM
devices in IPFire.

It will run on all installations after this patch has been
merged but only consumes very little memory.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-16 18:23:30 +00:00
Michael Tremer
c835011d6e lvm2: Enable lvmetad
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-16 18:22:51 +00:00
Michael Tremer
f9f79c662c lvm2: Build with support for udev
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-16 18:22:40 +00:00
Michael Tremer
03d559964c lvm2: Ship with core system
This was requested by some users to mount devices
with LVM.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-16 18:22:30 +00:00
Stefan Schantl
b48379d5ba configroot: Create /var/ipfire/dns/servers file
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-16 18:20:58 +00:00
Arne Fitzenreiter
9662858bd8 Revert "stage2: update rootfile"
This reverts commit a877032915.
2020-01-15 17:15:48 +00:00
Arne Fitzenreiter
a877032915 stage2: update rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-14 06:54:45 +00:00
Arne Fitzenreiter
61cc563558 Merge remote-tracking branch 'ms/next-dns-ng' into next 2020-01-13 21:42:49 +00:00
Arne Fitzenreiter
23dc6e0b23 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2020-01-13 21:38:16 +00:00
Michael Tremer
97756e2124 filesystem-cleanup: Automatically remove old libraries
This script runs through /usr/lib and /lib and tries to find
all libraries which are no longer being used and more and
deletes them.

This will help us to free space on root partitions that
are limited to 2GB.

However, the script does not cover 100% of the cases, so that
some files still need to be deleted manually (e.g. boost with
their weird versioning schema).

This script should be executed after a Core Update has been
installed.

Fixes: #12270
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-13 21:35:37 +00:00
Michael Tremer
04b7a78140 unbound: Do not reset safe search again
This is now done in the reload stage and we do not need to
take care about it again.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-13 21:25:10 +01:00
Arne Fitzenreiter
eba8e481e1 geoip: ship database 20191217
Maxmind has disabled the download so we ship the last free (creative commons)
database with the iso and core until we build an alternative.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-12 12:39:25 +01:00