Commit Graph

11605 Commits

Author SHA1 Message Date
Arne Fitzenreiter
4df5cc2f75 rpi-firmware: update to 2018-03-16
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-24 12:41:57 +01:00
Arne Fitzenreiter
151c8dfc0b checknewlog: don't report u-boot mkimage rootfile.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-24 11:41:45 +01:00
Arne Fitzenreiter
2a0947f2e3 u-boot: update to 2018.03
todo: check wandboard version. there are internal changes to merge
the different wandboard images to one and u-boot.imx is not build
anymore. Which file is needed to boot on wandboard?

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-24 11:14:24 +01:00
Arne Fitzenreiter
832770a868 kernel: update to 4.14.29
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-22 13:16:37 +01:00
Arne Fitzenreiter
62777ff407 kernel: update to 4.14.27
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-16 20:49:22 +01:00
Arne Fitzenreiter
1682e5fc69 kernel: drop rpi config
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-16 20:48:56 +01:00
Arne Fitzenreiter
bf19f5c6a0 kernel: drop rpi kernel
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-14 19:39:23 +01:00
Arne Fitzenreiter
ce8a4ba6a0 kernel: update to 4.14.26
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-13 11:37:36 +01:00
Arne Fitzenreiter
7fab74918d kernel: update to 4.14.25
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-09 23:05:06 +01:00
Arne Fitzenreiter
d5e0428c15 kernel: 4.14.23
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-02-28 16:20:17 +01:00
Arne Fitzenreiter
031ea15b00 kernel: update to 4.14.22
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-02-27 15:25:50 +01:00
Arne Fitzenreiter
1a7cfc2f10 Merge remote-tracking branch 'origin/core119' into kernel-4.14
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-02-27 12:38:18 +01:00
Arne Fitzenreiter
7eb86ee39e mpd: bump package to remove link against tcpwrapper
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-02-26 20:08:56 +01:00
Arne Fitzenreiter
f0869181e8 core119: set pakfire version to 119
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-02-24 14:31:54 +01:00
Arne Fitzenreiter
4038a83961 core119: restart init after unpack new glibc
this is needed to prevent problems at unmout filesystems at reboot.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-02-24 14:30:19 +01:00
Michael Tremer
c560b903a9 core119: Ship updated libgcc_s.so.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-23 20:43:41 +00:00
Arne Fitzenreiter
e5ef944d6e kernel: update to 4.14.21
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-02-23 19:33:15 +01:00
Michael Tremer
2edff5e970 Merge remote-tracking branch 'origin/next' 2018-02-21 12:06:21 +00:00
Michael Tremer
83d6101b9d core119: Reload apache after configuration changes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-21 12:06:02 +00:00
Peter Müller
51bf74a1c8 disable Apache server signature
Sending the server signature is unnecessary and might leak
some internal information (although ServerTokens is already
set to "Prod").

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-21 12:06:02 +00:00
Michael Tremer
3f42cf5cb9 backup: Don't backup apache configuration, keys only
In the past the apache configuration was part of the backup
and may have been restored after Core Update 118 was installed
with PHP being dropped amongst other things.

This patch will make sure that only keys are being backuped.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-21 12:06:02 +00:00
Michael Tremer
bbe8e248fe Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-20 20:10:30 +00:00
Michael Tremer
ea3b9a4f88 strongswan: Update to 5.6.2
Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS
signatures that was caused by insufficient input validation.
One of the configurable parameters in algorithm identifier
structures for RSASSA-PSS signatures is the mask generation
function (MGF). Only MGF1 is currently specified for this purpose.
However, this in turn takes itself a parameter that specifies
the underlying hash function. strongSwan's parser did not
correctly handle the case of this parameter being absent,
causing an undefined data read.

This vulnerability has been registered as CVE-2018-6459.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-19 23:46:17 +00:00
Michael Tremer
a261cb06c6 IPsec: Try to restart always-on tunnels immediately
When a tunnel that is in always-on configuration closes
unexpectedly, we can instruct strongSwan to restart it
immediately which is precisely what we do now.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-19 23:46:17 +00:00
Arne Fitzenreiter
854b9b994c kernel: update to 4.14.20
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-02-17 20:22:39 +01:00
Michael Tremer
2ec7a53b3e Rootfile update for armv5tel
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-17 18:55:38 +00:00
Michael Tremer
e36a7e3cf2 haproxy: Link against libatomic on ARM
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-17 13:36:37 +00:00
Michael Tremer
429af17883 i2c-tools: New package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-16 20:01:55 +00:00
Michael Tremer
0f354672a2 flac: Update to 1.3.2
The previous version fails to build on i586

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-16 19:14:33 +00:00
Michael Tremer
a1a5dd5566 Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-15 19:34:50 +00:00
Michael Tremer
4ef4d82baa core119: Ship changed proxy.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-14 22:23:20 +00:00
Bernhard Held
a2b2ac7854 proxy.cgi: remove excessive newlines in generated proxy.pac
Remove excessive newlines in generated proxy.pac

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-14 22:22:49 +00:00
Michael Tremer
0642dc8923 Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-13 21:07:04 +00:00
Michael Tremer
eb93869763 Bump toolchain version
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-13 16:35:08 +00:00
Michael Tremer
1633e0146c Rootfile update for glibc on i586
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-13 16:34:55 +00:00
Michael Tremer
909ba0ad4a nagios-plugins: Update rootfiles
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-13 16:30:24 +00:00
Michael Tremer
e75dd42577 postfix: Update rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-13 16:20:55 +00:00
Arne Fitzenreiter
4cd8fd3f6d kernel: update to 4.14.19
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-02-13 14:49:32 +01:00
Michael Tremer
97b5588cf3 zlib: Fix name of logfile in toolchain build
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-13 10:24:04 +00:00
Michael Tremer
05551f7bdb sslh: Build without tcpwrappers
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-13 10:23:54 +00:00
Michael Tremer
54d5414848 toolchain: Add zlib
ccache needs this and usually comes with an own bundled
version but fails to build in version 3.4.1.

Since this is a small library only and we really want
ccache to use compression, we will build this indepently
and let ccache use it from the system.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 14:24:12 +00:00
Michael Tremer
d8ac9a162c Bump toolchain version
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 13:07:38 +00:00
Michael Tremer
2dd9f3b379 Cleanup toolchain scripts
No functional changes, just some tidy up

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 12:44:37 +00:00
Michael Tremer
d32233aa1b ccache: Update to 3.4.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 12:12:08 +00:00
Michael Tremer
71196131be PAM: Drop shipped configuration
This is outdated, broken and has hardcoded passwords.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 12:09:22 +00:00
Michael Tremer
71cf8c8a6f Drop perl-DBD-mysql
This package is not used by anything and depends on MySQL
which has been dropped, too.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 12:07:29 +00:00
Michael Tremer
2d5940daca Drop MySQL
This is outdated and still on 5.0.x and nobody volunteered to
update this package.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 12:05:46 +00:00
Michael Tremer
c4713705d1 asterisk: Do not depend on MySQL any more
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 12:02:51 +00:00
Michael Tremer
4fcf8acfea postfix: Don't depend on amavis
This can be used together but there is no need to
always install amavis when someone wants to use postfix

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 11:52:07 +00:00
Michael Tremer
db116a33d6 postfix: Don't depend on MySQL any more
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 11:51:46 +00:00