Commit Graph

821 Commits

Author SHA1 Message Date
Marcel Lorenz
4900fdc963 automake: update to 1.15
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-01 22:40:00 +01:00
Jonatan Schlag
272ac1b454 New package libvirt
Libvirt is buidl only on i585 and x86_64 because qemu is build only
on this arches.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-01 22:26:01 +01:00
Matthias Fischer
b78a8742ae squid 3.5.19: latest patches from upstream
For details, see:
http://www.squid-cache.org/Versions/v3/3.5/changesets/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-01 22:12:15 +01:00
Arne Fitzenreiter
55c645ba48 samba: import updated rpc security patchset from red hat.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-23 23:08:01 +02:00
Jonatan Schlag
e93a0b06fe Replace portmap with rpcbind
Portmap is not maintained anymore that's why it is replaced by rpcbind.
Rpcbind provides also rpcinfo which is quite useful for debugging.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-17 14:08:47 +01:00
Matthias Fischer
c00aeae80f dnsmasq: Update to 2.76rc2
- Updated to 2.76rc2 and deleted obsolete patch files from 2.76rc1

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-16 16:04:44 +01:00
Matthias Fischer
3f877ebd25 dnsmasq: Update to 2.76rc1 - added latest patches (001-002)
Update, added latest patches and deleted obsolete patch files.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-16 16:04:39 +01:00
Matthias Fischer
4d36732fe2 dnsmasq: Update to 2.76test13 with latest patches (001-006)
Update from 'dnsmasq 2.76test10' to '2.76test13'

Includes latest patches (001-006) from upstream.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-16 16:04:19 +01:00
Matthias Fischer
15f37d7738 procps: Update to 3.2.8
For details see:
http://procps.sourceforge.net/changelog.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-16 16:03:08 +01:00
Matthias Fischer
e0cba8eea9 squid 3.4: remove obsolete patch files
Obsolete, no longer needed.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-11 15:46:58 +01:00
Arne Fitzenreiter
c594bd17b1 Merge remote-tracking branch 'origin/master' into next 2016-05-04 09:14:29 +02:00
Arne Fitzenreiter
d25d7bfccf openssl: security update to 1.0.2g
see https://www.openssl.org/news/secadv/20160503.txt for details

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-03 21:28:28 +02:00
Michael Tremer
1a26eca66e squid: Add forgetten patch file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-29 21:59:50 +01:00
Matthias Fischer
77d0467c05 squid: Update to 3.5.17
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-29 18:25:08 +01:00
Arne Fitzenreiter
c0119cfb37 samba: import rpc server and client fixes.
should fix: #11110

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-04-28 17:04:58 +02:00
Matthias Fischer
198c39265b squid 3.4.14: latest patches, sorted options
The 'configure'-options were sorted (kind of) to get a better overview.

Added latest patches from upstream.

Changed '--enable-async-io=8' to '--enable-async-io=16' because of
http://www.squid-cache.org/mail-archive/squid-users/200705/0768.html :

"The default number of threads is dependent on the number of aufs
cache_dir lines, based on a reasonable estimate of how the code behaves."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:19:29 +01:00
Arne Fitzenreiter
875bd87bbd backports: ath9k fix ht40 init.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-04-25 18:02:53 +02:00
Sascha Kilian
41a8f7f3cc lcdproc: Update to 0.5.7
Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-14 11:20:56 +01:00
Arne Fitzenreiter
77ecb239d3 samba: import RHEL security fixes.
CVE-2015-7560
CVE-2016-2110
CVE-2016-2111
CVE-2016-2112
CVE-2016-2115
CVE-2016-2118 aka Badlock
CVE-2015-5370

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-04-13 22:25:14 +02:00
Jonatan Schlag
5a9c93964b New package iperf3
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-05 23:47:36 +01:00
Matthias Fischer
c07053012f pcre 8.38: latest patches from upstream (LFS)
* Fix auto-callout (?# comment bug.
* Fix negated POSIX class within negated overall class UCP bug.
* Fix bug for isolated \E between an item and its qualifier
when auto callout is set.
* Give error for regexec with pmatch=NULL and REG_STARTEND set.
* Allow for up to 32-bit numbers in the ordin() function in  pcregrep.
* Fix \Q\E before qualifier bug when auto callouts are enabled.
* Fix /x bug when pattern starts with white space and (?-x).
* Fix copy named substring bug.
* Fix (by hacking) another length computation issue.
* Fix get_substring_list() bug when \K is used in an assertion.
* Fix pcretest bad behaviour for callout in lookbehind.
* Fix workspace overflow for (*ACCEPT) with deeply nested parentheses.
* Yet another duplicate name bugfix by overestimating the
memory needed  (i.e. another hack - PCRE2 has this "properly" fixed).
* Fix pcretest loop for global matching with an ovector size less than 2.
* Fix non-diagnosis of missing assertion after (?(?C).

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-05 22:56:33 +01:00
Matthias Fischer
8e6421d78e squid 3.4.14: Bugfix for #4323 (Netfilter broken cross-includes with Linux 4.2)
For details see: http://bugs.squid-cache.org/show_bug.cgi?id=4323

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-05 22:56:04 +01:00
Michael Tremer
bdb319c0ca squid: Patch SQUID-2016:3/CVE-2016-3947
http://www.squid-cache.org/Advisories/SQUID-2016_3.txt

 Due to a buffer overrun Squid pinger binary is vulnerable to
 denial of service or information leak attack when processing
 ICMPv6 packets.

 This bug also permits the server response to manipulate other
 ICMP and ICMPv6 queries processing to cause information leak.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-05 22:52:54 +01:00
Arne Fitzenreiter
b3b5bbb95a Merge branch 'master' into next 2016-04-01 13:29:40 +02:00
Arne Fitzenreiter
b64110cfd5 igb: fix hung at dev_get_stats()
without this igb can bring the whole userspace to hung
with "cpu_stuck for more than 22s". I don't understand
why this bug is set to "wont-fix" at the bugtracker.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-04-01 08:20:36 +02:00
Jonatan Schlag
4ffb9f95ad New package dmidecode
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-03-31 13:43:56 +01:00
Michael Tremer
f1a015425b pcre: Delete old patches
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-03-31 13:35:57 +01:00
Jonatan Schlag
a365d9d04b add a patch for ebtables (to fix the problem with usr local)
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-03-29 14:13:35 +01:00
Arne Fitzenreiter
046894ab7f Merge remote-tracking branch 'origin/master' into next 2016-03-27 22:17:16 +02:00
Arne Fitzenreiter
36b2adc9ed backports: ath10k fix logspam if channel was not set.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-26 15:31:32 +01:00
Arne Fitzenreiter
545c15b0a1 kernel: add PC Engines(TM) APU2 LED driver 2016-03-26 10:15:45 +01:00
Arne Fitzenreiter
9a7a6c52ed kernel: k10temp: add family 16h model 30h pci id.
used by AMD GX-412TC in PC Engines(TM) APU 2

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-26 10:08:18 +01:00
Marcel Lorenz
44c63c9612 mpfr: update to 3.1.3
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-03-21 21:55:28 +00:00
Arne Fitzenreiter
8649a31ed0 u-boot: fix fat16 reader 2016-03-16 22:58:21 +01:00
Arne Fitzenreiter
822b4313d1 kernel: update to 3.14.63
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-05 17:09:32 +01:00
Arne Fitzenreiter
4a6cfe51a1 Merge remote-tracking branch 'origin/master' into next
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-04 07:09:02 +01:00
Arne Fitzenreiter
353e08cd77 openssl: compile with sslv2 support but disable
the new default breaks the ABI so we need to compile in but
disable it with a patch.
2016-03-02 21:31:07 +01:00
Arne Fitzenreiter
5d95fd5af1 Revert "python-m2crypto: remove SSLv2_method"
This reverts commit d86a249286.
2016-03-02 21:13:31 +01:00
Arne Fitzenreiter
d86a249286 python-m2crypto: remove SSLv2_method
this is removed by OpenSSL 1.0.2g

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-01 22:25:55 +01:00
Matthias Fischer
a6cd8b9b5d dnsmasq: 2.76test10 with latest patch (005) and some fixes
1. Added patch 005 because of the discussion on the dnsmasq-list:
"I've noticed that replies which get their TTL from the dhcp-ttl
option always get the TTL specified in dhcp-ttl. I'd prefer
something like max(0, min(<dhcp-ttl>, <lease-expire-time> -
<now>)). Otherwise, dns might hand out a high TTL for a dhcp-lease
which expires one second later.
...
Seems a sensible addition.

Cheers,

Simon."

2. Fixed several line numbers and patch lines in
'dnsmasq-Add-support-to-read-ISC-DHCP-lease-file.patch'. On the last build
I got some "Hunk failed" messages. Patches are now applied exactly at the
given lines.

3. Nevertheless, I still get some warnings:
...
dnsmasq.c: In function 'main':
dnsmasq.c:55:7: warning: unused variable 'did_bind' [-Wunused-variable]
   int did_bind = 0;
       ^
dnsmasq.c:54:9: warning: unused variable 'bound_device' [-Wunused-variable]
   char *bound_device = NULL;
         ^
...
isc.c: In function 'dhcp_lease_new':
isc.c:40:3: warning: ignoring return value of 'asprintf', declared with attribute warn_unused_result [-Wunused-result]
   asprintf(&lease->fqdn, "%s.%s", hostname, daemon->domain_suffix);
   ^

Asking about these warnings in the dnsmasq-list showed no reaction - no one answered.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-28 12:15:18 -08:00
Matthias Fischer
3b9815eb87 dnsmasq: 2.76test10 with latest patches (001-004)
This is 'dnsmasq 2.76test10', based on current 'next', containing latest patches.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-28 12:15:11 -08:00
Arne Fitzenreiter
802b916d10 Merge remote-tracking branch 'origin/master' into next
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Conflicts:
	make.sh
2016-02-17 19:47:50 +01:00
Arne Fitzenreiter
bb330e25e9 glibc: new RHEL6 patches / fix CVE-2015-7547 and more
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-17 12:46:11 +01:00
Matthias Fischer
fd3b90c875 squid 3.4.14: Bugfix for #4431 (C code is not compiled with CFLAGS)
For details see: http://bugs.squid-cache.org/show_bug.cgi?id=4431

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-13 18:51:08 +00:00
Arne Fitzenreiter
235888599a backports: update to 4.2.6
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-28 13:02:09 +01:00
Michael Tremer
02a60a9b9e squid: Actually make --with-filedescriptors work
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-23 01:49:37 +00:00
Michael Tremer
41410d197b Merge branch 'hyper-v-fixes' into next 2016-01-22 00:49:15 +00:00
Matthias Fischer
db017b4b6e ntp 4.2.8p5: removed obsolete patch file
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-10 21:18:22 +00:00
Arne Fitzenreiter
2eb67894ef binutils: update to 2.24
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-07 17:41:16 +01:00
Matthias Fischer
c3b4c861f5 dnsmasq 2.75: latest patches from upstream
Same procedure as... :-)

Best to all for xmas and 2016!

Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-12-28 15:35:34 +01:00