Commit Graph

3933 Commits

Author SHA1 Message Date
Michael Tremer
3e95f42028 openssl: Update to version 1.0.2b
https://www.openssl.org/news/secadv_20150611.txt

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-06-11 17:04:30 +02:00
Arne Fitzenreiter
3d9b9dd30e Revert "Python: Update to 2.7.9"
This reverts commit 765423cebe.

build fails.
2015-06-10 14:49:40 +02:00
Arne Fitzenreiter
be58233aee python: update optional sources package. 2015-06-09 16:14:28 +02:00
Matthias Fischer
4c777aeaf0 pcre: Update to 8.37
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-06-08 14:22:43 +02:00
Michael Tremer
41ed4795fe strongswan: Update to 5.3.1
Fixed a denial-of-service and potential remote code execution vulnerability
triggered by IKEv1/IKEv2 messages that contain payloads for the respective
other IKE version. Such payload are treated specially since 5.2.2 but because
they were still identified by their original payload type they were used as
such in some places causing invalid function pointer dereferences.
The vulnerability has been registered as CVE-2015-3991.

https://www.strongswan.org/blog/2015/06/01/strongswan-vulnerability-%28cve-2015-3991%29.html

The increased buffer size has been fixed in bug #943 upstream
  https://wiki.strongswan.org/issues/943
2015-06-04 19:26:44 +02:00
Arne Fitzenreiter
3d82ea0ab1 Merge remote-tracking branch 'origin/master' into next 2015-06-02 09:47:01 +02:00
Arne Fitzenreiter
65712deca2 postfix: bump PAK_VER to fix link against new openssl.
fixes: #10864
2015-06-02 09:09:20 +02:00
Arne Fitzenreiter
ee29c0d744 vsftpd: bump PAK_VER to fix link angainst new openssl.
fixes: 10866
2015-06-02 09:02:37 +02:00
Arne Fitzenreiter
e97d4c9896 Merge branch 'master' into next
Conflicts:
	lfs/netsnmpd
2015-05-31 20:08:58 +02:00
Arne Fitzenreiter
a21df19379 netsnmpd: bump PAK_VER. 2015-05-31 18:56:13 +02:00
Arne Fitzenreiter
cb3c00e01e cyrus-imapd: add backupinclude. 2015-05-31 16:02:39 +02:00
Matthias Fischer
454a80d1db netsnmpd: Update to 5.7.3, include backup
Conflicts:
	lfs/netsnmpd
2015-05-31 11:16:25 +02:00
Matthias Fischer
e80a7ef36a netsnmpd: Update to 5.7.3, include backup 2015-05-28 21:25:45 +02:00
Michael Tremer
1292598207 Merge remote-tracking branch 'mfischer/python' into next 2015-05-26 14:30:27 +02:00
Matthias Fischer
016e63e818 openssh: lfs-update 2015-05-26 14:29:38 +02:00
Michael Tremer
f042e1d398 Merge remote-tracking branch 'mfischer/slang' into next 2015-05-26 14:27:32 +02:00
Michael Tremer
188c4ba444 Merge remote-tracking branch 'mfischer/newt' into next 2015-05-26 14:27:02 +02:00
Michael Tremer
5bf8008bdd Merge remote-tracking branch 'mfischer/libxslt' into next 2015-05-26 14:26:23 +02:00
Michael Tremer
e448795559 Merge remote-tracking branch 'mfischer/libxml2' into next 2015-05-26 14:25:27 +02:00
Michael Tremer
1bebab6440 Merge remote-tracking branch 'mfischer/libtool' into next 2015-05-26 14:18:40 +02:00
Michael Tremer
fef975eef7 libnet: Keep the version number in source tarball filename 2015-05-26 14:17:48 +02:00
Michael Tremer
f09f3fd881 Merge remote-tracking branch 'mfischer/libnet' into next 2015-05-26 14:13:44 +02:00
Matthias Fischer
82402a051b sarg: Update to 2.3.9 2015-05-26 14:09:40 +02:00
Arne Fitzenreiter
38b8efddca netsnmpd: bump pak version. 2015-05-25 14:35:28 +02:00
Arne Fitzenreiter
465a08b629 kernel: update to 3.14.43 2015-05-21 11:30:03 +02:00
Arne Fitzenreiter
d6a15c76a7 Merge remote-tracking branch 'origin/core90' 2015-05-21 11:16:35 +02:00
Michael Tremer
bfa284b41c dnsmasq: Apply patches from upstream 2015-05-20 23:39:35 +02:00
Michael Tremer
4ec81074d1 dnsmasq: Apply patches from upstream 2015-05-20 23:37:54 +02:00
Arne Fitzenreiter
888726854f linux-pae: fix grub entry for xen hvm machines. 2015-05-20 11:00:12 +02:00
Arne Fitzenreiter
45f95add11 elinks/cyrus-imapd: bump package version openssl 0.9.8 drop.
some old installation has this addon still linked against openssl 0.9.8
so we need to update it.
2015-05-13 19:46:18 +02:00
Arne Fitzenreiter
589b334571 kernel: update to 3.14.41 2015-05-08 13:25:36 +02:00
Arne Fitzenreiter
ad39b30985 qemu: update to 2.3.0 2015-05-06 19:12:06 +02:00
Arne Fitzenreiter
5ea73f5660 dracut: add sdhci-pci module to initrd.
fixes #10792
2015-05-05 22:34:30 +02:00
Michael Tremer
afdf148388 Split web-user-interface from apache2 LFS file
It is completely unnecssary to have this in one file
and using options for the LFS is more of a hack than
a solution.
2015-05-05 14:00:20 +02:00
Michael Tremer
a8440dab51 Merge remote-tracking branch 'stevee/next-flag-icons' into next 2015-05-05 12:15:55 +02:00
Michael Tremer
afa91a4df5 fireinfo: Fix SEGV on QEMU without KVM 2015-05-04 16:02:39 +02:00
Stefan Schantl
97a5baac82 Update flag icon-set.
Move the flag icon-set into an own lfs file and replace the current
used one by a more recent version.
2015-05-03 21:51:04 +02:00
Michael Tremer
88b1e637ac squid: Disable SSL support
The SSL support parts of squid are a great security
risk. The majority of all security issues has been
in this area. As we are not using any of that in
production we can as well disable SSL support.

This won't affect squid's possibility to forward
SSL connections with the CONNECT method.
2015-05-02 12:56:09 +02:00
Michael Tremer
49c3105cc3 squid: Update to 3.4.13 2015-05-02 11:21:14 +02:00
Arne Fitzenreiter
8d1e36cca5 clamav: update to 0.98.7 2015-04-30 06:50:15 +02:00
Arne Fitzenreiter
f0dba37096 xz: update to 5.2.1 2015-04-29 19:47:44 +02:00
Arne Fitzenreiter
57e527c84a kernel: update to 3.14.40 2015-04-29 19:42:06 +02:00
Michael Tremer
6caea1086d Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2015-04-29 11:26:35 +02:00
Michael Tremer
85a6f39c39 Merge remote-tracking branch 'stevee/core-90-ddnsctrl' into next 2015-04-29 11:26:20 +02:00
Michael Tremer
5f20677864 dnsmasq: Import more upstream fixes
Fixes: #10786

Fixes DNSSEC validation when falling back to TCP.
2015-04-29 11:24:23 +02:00
Stefan Schantl
2bcd81934d ddns: Add more upstream patches. 2015-04-28 21:06:19 +02:00
Arne Fitzenreiter
0e2f9b011b openssl: disable ssse3 on amd cpu's
amd with ssse3 (bulldozer and fusion) has serious performance problems
with the vpaes code. (-evp is 40% slower)
2015-04-28 20:51:03 +02:00
Michael Tremer
cbdee67e06 openssl: Don't ship an SSE-optimised version of libssl
This one does not benefit at all from any optimisations
of this kind. Only libcrypto.so.10 which holds the implementation
of ciphers and hashes gains better performance by using SSE2.
2015-04-28 11:15:38 +02:00
Michael Tremer
1cbc5ca0a4 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2015-04-28 11:14:45 +02:00
Michael Tremer
eb7e5ec69f tzdata: Update to version 2015d 2015-04-28 11:13:03 +02:00