Commit Graph

3996 Commits

Author SHA1 Message Date
Matthias Fischer
616edca2ba libassuan: Update to 2.4.3
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-21 21:45:57 -04:00
Arne Fitzenreiter
d1d60e001a Merge branch 'core104' into next 2016-08-17 19:51:01 +02:00
Arne Fitzenreiter
40607f8126 core104: revert adding customservices.
simply adding may use id's twice if the user has
added other services so we don't update this files.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-08-07 17:08:44 +02:00
Jonatan Schlag
678a797077 Add new package libusbredir
This package adds support for the use redirection of spice.
It is now possible to attach USB devices of the host where the spice
client run to the virtual machine.

The binary is not needed for this functionality and that's why they is
not shipped with the package

This feature is also enabled in qemu.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-07 15:03:57 +01:00
Arne Fitzenreiter
1159f711c8 core104: add changed files
customservices and openssh.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-08-06 12:09:44 +02:00
Jonatan Schlag
3a4a8b055b Libvirt: Add backup
The directory /etc/libvirt is backed up on uninstallation  and is
restored on installation.

Alle Files in  /var are commented in the rootfile so they are not
removed on uninstallation.
Because of the fact that the directories are not shipped with the
package they were created at installation time.
The permissions of 3 directories are changed because the qemu user is
nobody and the qemu group is kvm, so the permissions must be nobody:kvm

Fixes: #11151

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-02 16:07:33 +01:00
Michael Tremer
afc0f6e884 Merge remote-tracking branch 'stevee/guardian-2.0' into next 2016-08-02 12:18:29 +01:00
Arne Fitzenreiter
65a61d88c8 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2016-07-29 18:58:56 +02:00
Arne Fitzenreiter
9a300ee8b5 core104: ship screen
old binary is linked against libshadow.0*

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-07-29 18:57:49 +02:00
Stefan Schantl
6a5b83f80d Core 104: Add for guardian changed files to core update.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 15:40:30 +02:00
Stefan Schantl
a11aaa91b3 guardian: Update to 2.0.
Update guardian to the re-written version.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:19:14 +02:00
Stefan Schantl
8afd763e70 perl-Net-IP: New package
The perl-Net-IP module provides various methods for validating
and calculating IP-addresses (both IP protocols supported) and
is a runtime dependency of guardian 2.0.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:19:14 +02:00
Stefan Schantl
65c61b574f perl-common-sense: New package.
This is a runtime dependency for perl-inotify2.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:19:14 +02:00
Stefan Schantl
7f218a58ba perl-inotify2: New package.
This module contains inotify bindings for perl, used by the extendend guardian.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:18:51 +02:00
Michael Tremer
0c265f5717 nginx: Update to 1.8.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-29 09:04:04 +01:00
Arne Fitzenreiter
5a53d5947d core104: add kernel to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-07-28 18:12:13 +02:00
Matthias Fischer
24159f0952 nano 2.6.1: fix in rootfile
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-25 17:24:31 +01:00
Michael Tremer
c48a24dc14 core104: Include recent changes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-20 16:49:11 +01:00
Michael Tremer
3b7d73d1d4 Fix potential HTTPoxy vulnerability
https://httpoxy.org/

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-19 15:02:16 +01:00
Michael Tremer
71f578bbfc freeradius: New package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-19 14:54:50 +01:00
Jonatan Schlag
ccb35c191f Update qemu to version 2.6
This patch update qemu to version 2.6
For changelogs see:
http://wiki.qemu.org/ChangeLog/2.5
http://wiki.qemu.org/ChangeLog/2.6

Qemu try to built with bluez, but before version 2.6 bluez was not used
by qemu on IPFire, so I think it is better to disable bluez because
nobody needs it before version 2.6 and our bluez  is not the latest
version so I think this will cause more problems than benefits.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-16 11:38:39 +01:00
Jonatan Schlag
d4641215c7 Update spice to version 0.12.8
This is an security update.
Recent were 2 serious security vulnerabilities published.
This patch update spice to a version which is not vulnerable.

Changelog:

Changes in 0.12.8:

==================
* Fixes for CVE-2016-0749 and CVE-2016-2150

Changes in 0.12.7:
==================
* spice-server will now send TCP keepalive probes on the TCP connections
  it
  uses. This can prevent unwanted idle disconnections if proxies are
  used
  between the client and the host.
* Fix important memory usage when the webdav channel is used
* Do not disconnect when the client requests an unsupported compression
  type
* Fix a few race conditions
* Fix display glitch when using XSpice
* Improve help string for 'replay -s'
* Fix crashes in corner cases (buggy spice-html5 + win10, vnc + SPICE
  port
  configured, USB webcam redirection over a slow link)
* Fix various compilation warning when building on 32 bit machines
* Some fixes for big-endian machines, more work is likely to be needed
* Do not build static libraries by default, this can be reenabled with
  --enable-static
* Fix small leak in MJPEG code

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-16 11:28:57 +01:00
Marcel Lorenz
25bb3677e9 libtiff: update to 4.0.6
The pak version from spandsp sane and foomatic are increased by one
to ship packages build against new libtiff.

A compat is not needed

http://www.remotesensing.org/libtiff/v4.0.6.html

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Reviewed-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-16 11:23:16 +01:00
Michael Tremer
035e2b4a9b core104: Ship recently updated which
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-16 10:57:04 +01:00
Marcel Lorenz
10f8c6f421 which: update to 2.21
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-16 10:53:53 +01:00
Michael Tremer
19a4317093 core104: Ship recently updated packages
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-14 23:36:49 +01:00
Marcel Lorenz
aa3ff233c2 acpid: update to 2.0.26
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-14 23:30:58 +01:00
Marcel Lorenz
602696704c pcre: update to 8.39
http://www.pcre.org/original/changelog.txt

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-14 23:28:39 +01:00
Marcel Lorenz
c11dfb9295 popt: update to 1.16
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-14 23:27:04 +01:00
Marcel Lorenz
2a53bafffe curl: update to 7.49.1
https://curl.haxx.se/changes.html#7_49_1

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-14 23:24:56 +01:00
Marcel Lorenz
2249bb1d52 acl: update to 2.2.52
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-14 23:20:52 +01:00
Marcel Lorenz
04251def7f libcap: update to 2.25
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-14 14:00:30 +01:00
Michael Tremer
cc97d7b417 collectd: Ignore *phys, macvtap* and vnet* interfaces
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-13 16:55:29 +01:00
Arne Fitzenreiter
484e62046e kernel: update to 3.14.74
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-06-29 17:04:28 +02:00
Michael Tremer
dc2e0320d3 core104: Ship updated libarchive
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-27 23:18:39 +01:00
Marcel Lorenz
a3cab8134a libarchive: update to 3.2.1
Fixes CVE-2016-4301
Libarchive mtree parse_device Code Execution Vulnerability

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-27 23:16:56 +01:00
Stefan Schantl
f7029f2057 core 104: Add updated snort.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-06-22 14:19:24 +02:00
Stefan Schantl
fee796dcb7 core 104: Add changed ids.cgi.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-06-22 14:18:36 +02:00
Stefan Schantl
b1e8c4b521 snort: Rootfile update.
Rootfile update for snort 2.9.8.2 which has been overlocked in
commit 5a5e5f04a7.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-06-22 14:13:49 +02:00
Stefan Schantl
60ef4f6704 Add updated ddns to core 104.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-06-21 12:02:49 +02:00
Stefan Schantl
59232d7225 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2016-06-21 10:08:07 +02:00
Jonatan Schlag
5cc7ae0926 Qemu: add a group kvm to access /dev/kvm eaiser
As a normal user, it is not possible to use qemu with KVM. This is bad
because it is better when it is possible to start the machine with a
less privileged user. To achieve this a group KVM is created and the
access to /dev/kvm is allowed for this group. So every user in this
group can use qemu with KVM.
This change is also useful for libvirt because the VMs can be started
with user nobody and group kvm.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-20 16:25:29 +01:00
Michael Tremer
1dd61e0594 Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-19 09:54:32 +01:00
Michael Tremer
0204a3c5bf core104: Ship updated shadow-utils and remove old files
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-17 13:07:10 +01:00
Marcel Lorenz
4787315b6e shadow: update to 4.2.1
The "groups" from the coreutils package is used (/usr/bin/groups)

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-17 13:03:34 +01:00
Michael Tremer
1bddfa5abf core104: Ship updated pakfire functions.sh
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-16 09:34:24 +01:00
Michael Tremer
6c2720cac6 core104: Add ntp update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-16 09:28:34 +01:00
Michael Tremer
44285d92a2 core104: Add wget update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-16 09:26:55 +01:00
Michael Tremer
b6c0145236 Start Core Update 104
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-16 09:24:22 +01:00
Michael Tremer
6bff907d71 core103: Restart squid and rebuild cache
The swap.state file may be broken and so we delete this here and
let squid rebuild the cache at the next start.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-15 18:47:29 +01:00