Commit Graph

4030 Commits

Author SHA1 Message Date
Arne Fitzenreiter
3ce7662434 Merge remote-tracking branch 'origin/core105' into next 2016-09-23 18:49:06 +02:00
Arne Fitzenreiter
2d850c7944 core105: add openssl sse2 binaries
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-09-23 10:30:34 +02:00
Arne Fitzenreiter
e4ee7f0317 core105: fix rootfile.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-09-22 17:44:06 +02:00
Michael Tremer
8029c2a899 strongswan: Update to 5.5.0
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-22 14:47:47 +01:00
Michael Tremer
f5275b5930 Merge branch 'core105' into next 2016-09-22 12:05:13 +01:00
Michael Tremer
3bc177eec5 openssl: Update to 1.0.2i
https://www.openssl.org/news/openssl-1.0.2-notes.html

This release fixes various security flaws:

* OCSP Status Request extension unbounded memory growth (CVE-2016-6304)
* SWEET32 Mitigation (CVE-2016-2183)
* OOB write in MDC2_Update() (CVE-2016-6303)
* Malformed SHA512 ticket DoS (CVE-2016-6302)
* OOB write in BN_bn2dec() (CVE-2016-2182)
* OOB read in TS_OBJ_print_bio() (CVE-2016-2180)
* Pointer arithmetic undefined behaviour (CVE-2016-2177)
* Constant time flag not preserved in DSA signing (CVE-2016-2178)
* DTLS buffered message DoS (CVE-2016-2179)
* DTLS replay protection DoS (CVE-2016-2181)
* Certificate message OOB reads (CVE-2016-6306)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-22 12:03:56 +01:00
Michael Tremer
8bbed7a5b6 core105: Ship security update for libgcrypt
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-22 10:30:28 +01:00
Matthias Fischer
db7ef87902 libgcrypt: Update to 1.7.3
Fixes CVE-2016-6313

For details, see:
https://lists.gnupg.org/pipermail/gnupg-announce/2016q3/000395.html
https://bugzilla.redhat.com/show_bug.cgi?id=1366105

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-22 10:30:09 +01:00
Michael Tremer
c4a1169ed9 Start Core Update 105
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-22 10:28:36 +01:00
Jonatan Schlag
59d8f64e50 Update libvirt to 2.1
This is the update of libvirt to the latest version 2.1.
The most important change from a packager view is the new virtlogd
daemon.
This daemon handles the qemu output and wrote it to log files.

The require some changes:
- A new init script to start, stop restart the daemon called virtlogd.
The daemon is restart with SIGUSR1 (this is important because the daemon
keeps all pipelines etc. open).

This introduces a problem with the uninstall.sh install.sh script.
It is not possible to stop the daemon while virtual machines are
running, so the script update.sh execute from now not uninstall.sh and
install.sh instead it contains all steps from uninstall.sh install.sh
expect the start / stop routine for virtlogd. The daemon is just
restarted after the update, which makes sure that all changes take
effect.

- new symlinks in the uninstall.sh and install.sh script and some root
file changes because of the new virtlogd init script.
- the archive format changes from tar.gz to tar.xz

For Changelogs see:

https://libvirt.org/news-2015.html
https://libvirt.org/news.html (2017 and later:
https://libvirt.org/news-2016.html )

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-18 12:28:39 +01:00
Michael Tremer
f5ab60e9aa Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-15 11:04:11 +01:00
Michael Tremer
3f1b94b9fa python-ipaddress: New package
Required for the unbound DHCP leases bridge

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-14 16:41:12 +01:00
Michael Tremer
811f3d3050 unbound: Start service after network has been brought up
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 21:13:25 +01:00
Michael Tremer
a66c4880d9 unbound: Start service at system boot
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 20:11:47 +01:00
Michael Tremer
266735a12f Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 11:07:44 +01:00
Matthias Fischer
4e63727d2d next: rootfile updates for 'unbound' and 'initscripts'
These two came to my view during the last builds. I hope they're ok now.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 11:06:50 +01:00
Michael Tremer
69f8d8ee6c Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-09 14:57:07 +01:00
Michael Tremer
5fba8a0b1e Merge branch 'unbound' into next 2016-09-08 19:50:45 +01:00
Jonatan Schlag
d996e17ab8 Update libvirt to 2.1
This is the update of libvirt to the latest version 2.1.
The most important change from a packager view is the new virtlogd
daemon.
This daemon handles the qemu output and wrote it to log files.

The require some changes:
- A new init script to start, stop restart the daemon called virtlogd.
The daemon is restart with SIGUSR1 (this is important because the daemon
keeps all pipelines etc. open).

This introduces a problem with the uninstall.sh install.sh script.
It is not possible to stop the daemon while virtual machines are
running, so the script update.sh execute from now not uninstall.sh and
install.sh instead it contains all steps from uninstall.sh install.sh
expect the start / stop routine for virtlogd. The daemon is just
restarted after the update, which makes sure that all changes take
effect.

- new symlinks in the uninstall.sh and install.sh script and some root
file changes because of the new virtlogd init script.
- the archive format changes from tar.gz to tar.xz

For Changelogs see:

https://libvirt.org/news-2015.html
https://libvirt.org/news.html (2017 and later:
https://libvirt.org/news-2016.html )

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-31 22:40:35 +01:00
Matthias Fischer
bfce482806 gnupg: Update to 1.4.21
Second try:

Update from 1.4.18 to 1.4.21, based on current 'next'.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-23 13:04:47 -04:00
Matthias Fischer
d8e31f4311 libgpg-error: Update to 1.24
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-21 21:46:03 -04:00
Matthias Fischer
a59e2e1c65 libgcrypt: Update to 1.7.3
Fixes CVE-2016-6313

For details, see:
https://lists.gnupg.org/pipermail/gnupg-announce/2016q3/000395.html
https://bugzilla.redhat.com/show_bug.cgi?id=1366105

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-21 21:45:58 -04:00
Matthias Fischer
616edca2ba libassuan: Update to 2.4.3
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-21 21:45:57 -04:00
Arne Fitzenreiter
d1d60e001a Merge branch 'core104' into next 2016-08-17 19:51:01 +02:00
Arne Fitzenreiter
40607f8126 core104: revert adding customservices.
simply adding may use id's twice if the user has
added other services so we don't update this files.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-08-07 17:08:44 +02:00
Jonatan Schlag
678a797077 Add new package libusbredir
This package adds support for the use redirection of spice.
It is now possible to attach USB devices of the host where the spice
client run to the virtual machine.

The binary is not needed for this functionality and that's why they is
not shipped with the package

This feature is also enabled in qemu.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-07 15:03:57 +01:00
Michael Tremer
b4255d757f Rootfile update
Forgot to commit this one

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-07 15:02:08 +01:00
Michael Tremer
47c3e83253 unbound is not supposed to be a package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-07 12:45:11 +01:00
Michael Tremer
1b4f2493a5 unbound: Update dynamically configured DNS servers after connecting RED
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 19:41:27 +01:00
Michael Tremer
df7340d2f3 Add unboundctrl
Control binary to relaunch unbound from the web user interface

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 19:34:39 +01:00
Michael Tremer
61b4250af5 Drop dnsmasq
This will be replaced by unbound

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 19:25:48 +01:00
Michael Tremer
b8f5eda86b unbound: Rewrite configuration and initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 19:20:27 +01:00
Michael Tremer
0fbd7c3c81 Import Unbound DHCP Lease Bridge
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 16:48:39 +01:00
Michael Tremer
cb21683968 unbound: Ship ICANN's certificates for trust anchor validation
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 15:24:00 +01:00
Michael Tremer
76f5c54236 unbound: Install trust anchor in /var/lib/unbound
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 15:12:01 +01:00
Michael Tremer
89b0810b24 python-daemon: New package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 14:43:47 +01:00
Arne Fitzenreiter
1159f711c8 core104: add changed files
customservices and openssh.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-08-06 12:09:44 +02:00
Michael Tremer
08f6cdcf82 New package: python inotify
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-05 13:33:47 +01:00
Marcel Lorenz
d0e5f71f77 New package: unbound 1.5.9
Unbound is a validating, recursive, and caching DNS resolver.

https://www.unbound.net

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-05 13:29:09 +01:00
Jonatan Schlag
3a4a8b055b Libvirt: Add backup
The directory /etc/libvirt is backed up on uninstallation  and is
restored on installation.

Alle Files in  /var are commented in the rootfile so they are not
removed on uninstallation.
Because of the fact that the directories are not shipped with the
package they were created at installation time.
The permissions of 3 directories are changed because the qemu user is
nobody and the qemu group is kvm, so the permissions must be nobody:kvm

Fixes: #11151

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-02 16:07:33 +01:00
Michael Tremer
afc0f6e884 Merge remote-tracking branch 'stevee/guardian-2.0' into next 2016-08-02 12:18:29 +01:00
Arne Fitzenreiter
65a61d88c8 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2016-07-29 18:58:56 +02:00
Arne Fitzenreiter
9a300ee8b5 core104: ship screen
old binary is linked against libshadow.0*

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-07-29 18:57:49 +02:00
Stefan Schantl
6a5b83f80d Core 104: Add for guardian changed files to core update.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 15:40:30 +02:00
Stefan Schantl
a11aaa91b3 guardian: Update to 2.0.
Update guardian to the re-written version.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:19:14 +02:00
Stefan Schantl
8afd763e70 perl-Net-IP: New package
The perl-Net-IP module provides various methods for validating
and calculating IP-addresses (both IP protocols supported) and
is a runtime dependency of guardian 2.0.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:19:14 +02:00
Stefan Schantl
65c61b574f perl-common-sense: New package.
This is a runtime dependency for perl-inotify2.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:19:14 +02:00
Stefan Schantl
7f218a58ba perl-inotify2: New package.
This module contains inotify bindings for perl, used by the extendend guardian.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:18:51 +02:00
Michael Tremer
0c265f5717 nginx: Update to 1.8.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-29 09:04:04 +01:00
Arne Fitzenreiter
5a53d5947d core104: add kernel to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-07-28 18:12:13 +02:00