Commit Graph

1554 Commits

Author SHA1 Message Date
Jonatan Schlag
8bc8c282c9 Move all Initscripts of the system, into an extra directory
Till now all init scripts going into src/initscripts/init.d so they are
installed by the lfs file initscripts. Because of that they also appear
in the rootfile of the "package" initscripts.

This has some disadvantages:
- the initscripts of the packages appear in the 3 rootfiles (one for
each arch) which are annoying because for every package with an
initscript 4 rootfiles (the 3 of the initscript package + the rootfile
of the package) are important.
- The rootfiles for a package are installed by lfs/initscripts but this
should happen only in the build of the package

To solve this issues all rootfiles for the core system are moved into
src/initscripts/init.d/common. Only the initscript in this directory are
installed by lfs/initscripts. So all initscripts for packages are
located in src/initscripts/init.d and are not installed by
lfs/initscripts.
So only the initscripts of the system appear in the 3 rootfiles of the
initscripts package. The initscript of a package appear only in the
rootfile of the package. This makes the maintaining of initscript
easier.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
2017-02-22 10:23:10 +01:00
Arne Fitzenreiter
7ae3245902 newt: fix rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-02-01 10:29:27 +01:00
Arne Fitzenreiter
c9791eaa2a initscripts: fix arm rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-02-01 10:25:44 +01:00
Matthias Fischer
8d07810dce sysklogd: Update to 1.5.1
...and now to something completely different... ;-)

Changelog:

- Bugfix against invalid PRI values (CVE-2014-3634)

CVE-2014-3634:
"...sysklogd 1.5 and earlier allows remote attackers to cause a
denial of service (crash), possibly execute arbitrary code,
or have other unspecified impact via a crafted priority (PRI)
value that triggers an out-of-bounds array access."

Nothing good for a firewall...and besides, 'sysklogd' wasn't updated since 2010.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-01-29 19:30:13 +00:00
Matthias Fischer
014bbf241f libpcap: Update to 1.8.1
Change log:

Tuesday, Oct. 25, 2016 mcr@sandelman.ca
  Summary for 1.8.1 libpcap release
    Add a target in Makefile.in for Exuberant Ctags use: 'extags'.
    Rename configure.in to configure.ac: autoconf 2.59
    Clean up the name-to-DLT mapping  table.
    Add some newer DLT_ values: IPMI_HPM_2,ZWAVE_R1_R2,ZWAVE_R3,WATTSTOPPER_DLM,ISO_14443,RDS
    Clarify what the return values are for both success and failure.
    Many changes to build on windows
    Check for the "break the loop" condition in the inner loop for TPACKET_V3.
    Fix handling of packet count in the TPACKET_V3 inner loop: GitHub issue #493.
    Filter out duplicate looped back CAN frames.
    Fix the handling of loopback filters for IPv6 packets.
    Add a link-layer header type for RDS (IEC 62106) groups.
    Use different intermediate folders for x86 and x64 builds on Windows.
    On Linux, handle all CAN captures with pcap-linux.c, in cooked mode.
    Removes the need for the "host-endian" link-layer header type.
    Compile with '-Wused-but-marked-unused' in devel mode if supported
    Have separate DLTs for big-endian and host-endian SocketCAN headers.
    Reflect version.h being renamed to pcap_version.h.
    Require that version.h be generated: all build procedures we support generate version.h (autoconf, CMake, MSVC)!
    Properly check for sock_recv() errors.
    Re-impose some of Winsock's limitations on sock_recv().
    Replace sprintf() with pcap_snprintf().
    Fix signature of pcap_stats_ex_remote().
    Initial cmake support for remote packet capture.
    Have rpcap_remoteact_getsock() return a SOCKET and supply an "is active" flag.
    Clean up {DAG, Septel, Myricom SNF}-only builds.
    Do UTF-16-to-ASCII conversion into the right place.
    pcap_create_interface() needs the interface name on Linux.
    Clean up hardware time stamp support: the "any" device does not support any time stamp types.
    Add support for capturing on FreeBSD usbusN interfaces.
    Add a LINKTYPE/DLT_ value for FreeBSD USB.
    Go back to using PCAP_API on Windows.
    CMake support
    Add TurboCap support from WinPcap.
    Recognize 802.1ad nested VLAN tag in vlan filter.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-01-29 19:25:41 +00:00
Michael Tremer
408330e46e Make Python 3 an add-on package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-01-26 20:33:27 +00:00
Jonatan Schlag
2b6cce9b48 New package python3
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-01-25 13:45:42 +00:00
Matthias Fischer
1b0d73ffdb zlib: Update to 1.2.11
Based on:
http://git.ipfire.org/?p=people/mlorenz/ipfire-2.x.git;a=commit;h=b693162e9fdc7c4cae2f148e8c7832c689ac6fd2
http://git.ipfire.org/?p=people/mlorenz/ipfire-2.x.git;a=commit;h=43a3b9986b7710eb685f00d6099965ebb220c012

Sadly, I couldn't avoid this configure-error while building 'clamav':

...
checking for zlib installation... using /usr
configure: error: The installed zlib version may contain a security bug.
Please upgrade to 1.2.2 or later: http://www.zlib.net.
You can omit this check with --disable-zlib-vcheck but DO NOT REPORT any stability issues then!
...

'clamav' seems to check 'zlib.h' for an appropriate zlib version ('clamav'-configure,
line 18679ff) greater v1.2.1 (line 18719ff), but I didn't find a solution for 1.2.11.

Therefore, '--disable-zlib-vcheck' was added to 'clamav'-configure options.
Any hints are welcome.

Testing zlib 1.2.11 with clamav 0.96.2 didn't find any seen problems so far.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-01-24 14:29:28 +00:00
Matthias Fischer
d38c8a6794 GeoIP: Update to 1.25 / changed database path
Database path changed to '/usr/share/GeoIP'

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-01-16 16:54:59 +00:00
Michael Tremer
5056b4f104 Drop mldonkey files
The packages has been dropped years ago. However, some
files remained in the source tree.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-01-16 16:53:35 +00:00
Arne Fitzenreiter
00d2007b04 strongswan: fix rootfile (padlock)
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-01-09 18:09:43 +01:00
Jonatan Schlag
3fbf7bed79 network: Rename MACVTAP script
This script is creating common bridges now, too and therefore
needs a more generic name.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-12-29 20:34:22 +00:00
Michael Tremer
8fa523e028 libpng: Update to version 1.2.57
These all fix a potential "NULL dereference" bug that has existed in libpng
since version 0.71 of June 26, 1995.  To be vulnerable, an application
has to load a text chunk into the png structure, then delete all text, then
add another text chunk to the same png structure, which seems to be
an unlikely sequence, but it has happened.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-12-29 16:04:29 +00:00
Matthias Fischer
ef2bb43402 unbound: Update to 1.6.0
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>

For details, see:
http://www.unbound.net/download.html
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-12-16 10:29:18 +00:00
Michael Tremer
e2b19d984c strongswan: Update to 5.5.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-11-28 21:38:29 +00:00
Marcel Lorenz
71a95ee330 libjpeg: update to 1.5.1
The old libjpeg is renamed to libjpeg-compat
The compat makes the old libs maintainable

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Reviewed-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-10-14 00:05:55 +01:00
Marcel Lorenz
1cd30812d6 texinfo: update to 6.3
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Reviewed-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-10-14 00:05:55 +01:00
Arne Fitzenreiter
693928d781 unbound: start prior network
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-10-12 23:01:51 +02:00
Matthias Fischer
64602fdf7d libidn: Update to 1.33
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-10-03 11:40:40 +01:00
Michael Tremer
5edc06b701 Remove IPAC stuff
This is unused for a very very very long time and serves
no purpose any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-10-02 15:13:55 +01:00
Arne Fitzenreiter
9f50355a8c unbound: Update to 1.5.10
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-10-02 13:35:45 +02:00
Arne Fitzenreiter
60fc489b04 attr: rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-10-01 15:17:37 +02:00
Arne Fitzenreiter
dee3be75f9 mpfr: fix missing eof in rootfile.
this is the reason for missing mt7601u firmware.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-09-27 19:18:21 +02:00
Michael Tremer
92aebbcddd Revert "libjpeg: update to 1.4.2"
This reverts commit feba68e4af.

Breaks building netpbm

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-27 09:44:49 +01:00
Arne Fitzenreiter
01176164b5 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2016-09-26 23:18:30 +02:00
Arne Fitzenreiter
de48b89ca1 Revert "Revert "tcl: update to 8.6.6""
with new krb5 also the tcl update works.
This reverts commit 053c554822.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-09-26 23:17:08 +02:00
Marcel Lorenz
feba68e4af libjpeg: update to 1.4.2
The old libjpeg is renamed to libjpeg-compat
The compat makes the old libs maintainable

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Reviewed-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-26 20:18:25 +01:00
Arne Fitzenreiter
724c0b8e4b attr: rootfile update.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-09-26 18:51:27 +02:00
Arne Fitzenreiter
def1ad3e94 rootfile updates: attr, ed, gawk
Check rootfiles before commit !!!

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-09-26 13:08:02 +02:00
Arne Fitzenreiter
053c554822 Revert "tcl: update to 8.6.6"
breaks kerberos (krb5) build.

This reverts commit 282dfe0bb9.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-09-26 07:17:04 +02:00
Marcel Lorenz
1031bcee20 iproute2: update to 4.7.0
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 13:11:30 +01:00
Marcel Lorenz
54a59fd892 usb_modeswitch_data: update to 20160803
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 13:08:57 +01:00
Marcel Lorenz
3fc734f0f9 libmnl: update to 1.0.
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 13:07:13 +01:00
Marcel Lorenz
0e7699cbb5 libnetfilter_conntrack: update to 1.0.6
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 13:06:53 +01:00
Marcel Lorenz
087fee9c6a attr: update to 2.4.47
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 13:05:38 +01:00
Marcel Lorenz
6f36046c81 expat: update to 2.2.0
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 13:04:42 +01:00
Michael Tremer
1c7a3c56ef Revert "strongswan 5.5.0: update for rootfile"
The padlock module is only built on i586

This reverts commit 2ac05ca54c.
2016-09-24 12:55:24 +01:00
Marcel Lorenz
345f1f3c0b gettext: update to 0.19.8.1
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 12:47:16 +01:00
Marcel Lorenz
282dfe0bb9 tcl: update to 8.6.6
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 12:39:41 +01:00
Marcel Lorenz
b48c31167b flex: update to 2.6.1
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 12:38:47 +01:00
Marcel Lorenz
7c54847dc2 diffutils: update to 3.5
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 12:37:35 +01:00
Matthias Fischer
2ac05ca54c strongswan 5.5.0: update for rootfile
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 12:25:46 +01:00
Michael Tremer
8029c2a899 strongswan: Update to 5.5.0
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-22 14:47:47 +01:00
Michael Tremer
f5ab60e9aa Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-15 11:04:11 +01:00
Michael Tremer
3f1b94b9fa python-ipaddress: New package
Required for the unbound DHCP leases bridge

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-14 16:41:12 +01:00
Michael Tremer
811f3d3050 unbound: Start service after network has been brought up
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 21:13:25 +01:00
Michael Tremer
a66c4880d9 unbound: Start service at system boot
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 20:11:47 +01:00
Michael Tremer
266735a12f Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 11:07:44 +01:00
Matthias Fischer
4e63727d2d next: rootfile updates for 'unbound' and 'initscripts'
These two came to my view during the last builds. I hope they're ok now.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 11:06:50 +01:00
Michael Tremer
69f8d8ee6c Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-09 14:57:07 +01:00