Commit Graph

4338 Commits

Author SHA1 Message Date
Jonatan Schlag
7b616db4e2 Network: add macvtap mode
This change make it possible to use a macvtap interface as a
standard interface (green0).
This is required by libvirt, because libvirt adds macvtap interfaces to
the physical interface, but this causes a problem. A VM  with this
configuration can communicate with the whole network,
but not with the Host (IPFire).
To solve this problem, the host interface must be also a macvtap interface.
This is achieved by:
1. In /var/ipfire/ethernet/settings the mode of a interface could set
with GREEN_MODE= ...
When the mode is macvtap the physical interface is renamed to green0phys
instead of green0. If the mode is not set the normal configuration is
applied .
2. The  network-hotplug-macvtap script checks if a physical nic ends
with "phys".
When the interface ends with "phys", the script adds a macvtap interface
to the physical nic which is named green0. The MAC address of this
interface is set to the MAC address of the physical nic. The MAC address
of the physical is set to a random value. We do this because the MAC
address of green0 should not change.
All services, IP addresses then binds to the macvatap interface, the
physical nic is not used.
PS.:  The script works also with the orange or blue interface, just
replace green with orange or blue.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-01 22:22:29 +01:00
Matthias Fischer
b78a8742ae squid 3.5.19: latest patches from upstream
For details, see:
http://www.squid-cache.org/Versions/v3/3.5/changesets/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-01 22:12:15 +01:00
Arne Fitzenreiter
55c645ba48 samba: import updated rpc security patchset from red hat.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-23 23:08:01 +02:00
Arne Fitzenreiter
43d91dad51 gcc: fix bootstrap with gcc-6
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-22 10:56:57 +02:00
Matthias Fischer
3fffbe09e2 dnsmasq: Update to 2.76
Final version.

For a detailed changelog, see:
http://www.thekelleys.org.uk/dnsmasq/CHANGELOG

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-19 18:25:21 +01:00
Matthias Fischer
0d9f821661 Midnight Commander: Update to 4.8.17
For Details see:
http://www.midnight-commander.org/wiki/NEWS-4.8.17

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-18 22:23:53 +01:00
Michael Tremer
1193d00f51 nfs: Bump release to install rpcbind dependency
This update will pull in rpcbind as new dependency which
will automatically remove portmap when installed.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-18 16:41:51 +01:00
Jonatan Schlag
e93a0b06fe Replace portmap with rpcbind
Portmap is not maintained anymore that's why it is replaced by rpcbind.
Rpcbind provides also rpcinfo which is quite useful for debugging.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-17 14:08:47 +01:00
Jonatan Schlag
a1a05a444f New package libtirpc
libtirpc is a dependency of rpcbind

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-17 14:08:45 +01:00
Marcel Lorenz
cdd422b561 7zip: update to 15.14.1
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-17 14:03:54 +01:00
Matthias Fischer
c00aeae80f dnsmasq: Update to 2.76rc2
- Updated to 2.76rc2 and deleted obsolete patch files from 2.76rc1

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-16 16:04:44 +01:00
Matthias Fischer
3f877ebd25 dnsmasq: Update to 2.76rc1 - added latest patches (001-002)
Update, added latest patches and deleted obsolete patch files.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-16 16:04:39 +01:00
Matthias Fischer
4d36732fe2 dnsmasq: Update to 2.76test13 with latest patches (001-006)
Update from 'dnsmasq 2.76test10' to '2.76test13'

Includes latest patches (001-006) from upstream.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-16 16:04:19 +01:00
Matthias Fischer
15f37d7738 procps: Update to 3.2.8
For details see:
http://procps.sourceforge.net/changelog.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-16 16:03:08 +01:00
Arne Fitzenreiter
eb797e6ec0 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2016-05-11 20:59:15 +02:00
Matthias Fischer
9a4bfe0284 squid: Update to 3.5.19
Activated 'ipv6', as discussed in ipfire-list with Michael:

"I had a look what the IPv6 switch actually changes. And that is not really much.
Essentially nothing. It just probes if the system supports IPv6 and if not it
disables it internally.

http://git.ipfire.org/?p=thirdparty%2Fsquid.git&a=search&h=refs%2Fheads%2Ftrunk&st=grep&s=USE_IPV6

I think we can as well enable this."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-11 15:46:21 +01:00
Matthias Fischer
efccb43303 squid: Update to 3.5.18
Removed unecessary quotations and two configure-options, see:
ftp://ftp.fu-berlin.de/unix/www/squid/archive/3.1/squid-3.1.0.16-RELEASENOTES.html

--with-aio
Deprecated. POSIX AIO is now auto-detected and enabled.
Use --without-aio to disable, but only if you really have to.

--with-pthreads
Deprecated. pthreads library is now auto-detected and enabled.
Use --without-pthreads to disable, but only if you really have to.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-07 13:25:18 +01:00
Michael Tremer
86eda7b552 tor: Update to 0.2.7.6
Fixes #11117

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-07 13:23:28 +01:00
Arne Fitzenreiter
3917eadc29 initskripts: remove obsolete checkfstab
the file update the bootdevice to uuid in fstab and grub1 config.
this is not needed since we use uuid at default and grub2

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-06 15:40:38 +02:00
Arne Fitzenreiter
4558108c4d clamav: rework initskript
display download wait, increase time to 15min and
remove tmp files at freshclam terminate.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-06 11:22:05 +02:00
Arne Fitzenreiter
fe6e5e03d5 clamav: update to 0.99.2
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-04 16:21:58 +02:00
Arne Fitzenreiter
c594bd17b1 Merge remote-tracking branch 'origin/master' into next 2016-05-04 09:14:29 +02:00
Arne Fitzenreiter
d25d7bfccf openssl: security update to 1.0.2g
see https://www.openssl.org/news/secadv/20160503.txt for details

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-03 21:28:28 +02:00
Sascha Kilian
68aa7aa602 openssh: Update to 7.2p2
Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-03 11:56:19 +01:00
Arne Fitzenreiter
b5548cbb5c toolchain: enable build on aarch64 multilib hosts
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-01 14:20:34 +02:00
Arne Fitzenreiter
840c650aa7 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2016-04-30 09:34:16 -04:00
Arne Fitzenreiter
c356c8ce6a Revert "ncurses: update to 6.0 and rename 5.9 to ncurses-compat"
This reverts commit a420b3e7b9.

toolchain build fails on all architectures.
2016-04-30 09:25:12 -04:00
Matthias Fischer
77d0467c05 squid: Update to 3.5.17
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-29 18:25:08 +01:00
Arne Fitzenreiter
c0119cfb37 samba: import rpc server and client fixes.
should fix: #11110

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-04-28 17:04:58 +02:00
Michael Tremer
57bf762069 rtpproxy: New package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-27 18:18:20 +01:00
Sascha Kilian
be3bb6541c Update: less to 481
Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:43:54 +01:00
Sascha Kilian
e4ad596bd7 wpa_supplicant: Update to 2.5
Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:37:44 +01:00
Michael Tremer
4da318ab6f hostapd: Bump release version
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:32:17 +01:00
Sascha Kilian
3d4eb053a9 Update: hostapd to 2.5
Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:31:59 +01:00
Alexander Marx
259346c504 tzdata: Update to 2016d
fixes: #11103

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>

The 2016d release of the tz code and data is available. It reflects the
following changes, which were either circulated on the tz mailing list
or are relatively minor technical or administrative changes:

   Changes affecting future time stamps

     America/Caracas switches from -0430 to -04 on 2016-05-01 at 02:30.
     (Thanks to Alexander Krivenyshev for the heads-up.)

     Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
     (Thanks to Alexander Krivenyshev and Matt Johnson.)

     New zone Asia/Tomsk, split off from Asia/Novosibirsk. It covers
     Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29
     at 02:00.  (Thanks to Stepan Golosunov.)

   Changes affecting past time stamps

     New zone Europe/Kirov, split off from Europe/Volgograd.  It covers
     Kirov Oblast, Russia, which switched from +04/+05 to +03/+04 on
     1989-03-26 at 02:00, roughly a year after Europe/Volgograd made
     the same change.  (Thanks to Stepan Golosunov.)

     Russia and nearby locations had daylight-saving transitions on
     1992-03-29 at 02:00 and 1992-09-27 at 03:00, instead of on
     1992-03-28 at 23:00 and 1992-09-26 at 23:00.  (Thanks to Stepan
     Golosunov.)

     Many corrections to historical time in Kazakhstan from 1991
     through 2005.  (Thanks to Stepan Golosunov.)  Replace Kazakhstan's
     invented time zone abbreviations with numeric abbreviations.

Here are links to the release files:

   ftp://ftp.iana.org/tz/releases/tzcode2016d.tar.gz
   ftp://ftp.iana.org/tz/releases/tzdata2016d.tar.gz

The files are also available via HTTP as follows:

http://www.iana.org/time-zones/repository/releases/tzcode2016d.tar.gz
http://www.iana.org/time-zones/repository/releases/tzdata2016d.tar.gz

As usual, links to the latest release files are here:

http://www.iana.org/time-zones/repository/tzcode-latest.tar.gz
http://www.iana.org/time-zones/repository/tzdata-latest.tar.gz

   ftp://ftp.iana.org/tz/tzcode-latest.tar.gz
   ftp://ftp.iana.org/tz/tzdata-latest.tar.gz
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:30:26 +01:00
Sascha Kilian
171b8dbc74 Update: grep to 2.24
Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:29:42 +01:00
Sascha Kilian
cd4ca08231 Update: curl to 7.48.0
Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:28:18 +01:00
Matthias Fischer
bfe96f68b4 sdparm: Update to 1.10
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:24:07 +01:00
Marcel Lorenz
a420b3e7b9 ncurses: update to 6.0 and rename 5.9 to ncurses-compat
This patch updates the ncurses to 6.0. The old 5.9 are renamed to ncurses-compat.
The compat makes the old libs maintainable and the compat rootfile is cleaned up.
The 6.0 is build after 5.9 and all IPFire componentes will build with 6.0
In version 6 only the wide-character libraries are build. The are usable
in both multibyte and traditional 8-bit locales while normal libraries work
properly only in 8-bit locales. The toolchain is only bild with 6.0.

Please ignore my first ncurses 6.0 patch.

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:24:05 +01:00
Jonatan Schlag
54cc2c4e5d nfs: Fixes for NFS server
Fixes: #11098
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:20:15 +01:00
Matthias Fischer
198c39265b squid 3.4.14: latest patches, sorted options
The 'configure'-options were sorted (kind of) to get a better overview.

Added latest patches from upstream.

Changed '--enable-async-io=8' to '--enable-async-io=16' because of
http://www.squid-cache.org/mail-archive/squid-users/200705/0768.html :

"The default number of threads is dependent on the number of aufs
cache_dir lines, based on a reasonable estimate of how the code behaves."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:19:29 +01:00
Arne Fitzenreiter
875bd87bbd backports: ath9k fix ht40 init.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-04-25 18:02:53 +02:00
Michael Tremer
9fcba2b5df Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2016-04-20 16:24:12 +01:00
Michael Tremer
32d91ecad8 conntrack: Remove old disable_nf_sip indicator file
This is not used any more and not needed either.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-20 16:23:22 +01:00
Arne Fitzenreiter
c485f38c99 Merge remote-tracking branch 'origin/core100' into next 2016-04-19 22:04:24 +02:00
Arne Fitzenreiter
4bee1eb491 kernel: change stackprotector from strong to regular.
Xen/Paravirt crash with stackprotect in strong mode.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-04-17 23:31:43 +02:00
Matthias Fischer
b01d8a6830 dma: Update to 0.11
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-17 20:21:55 +01:00
Michael Tremer
d00032e765 lcdproc: Bump release
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-14 11:24:40 +01:00
Sascha Kilian
41a8f7f3cc lcdproc: Update to 0.5.7
Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-14 11:20:56 +01:00
Arne Fitzenreiter
77ecb239d3 samba: import RHEL security fixes.
CVE-2015-7560
CVE-2016-2110
CVE-2016-2111
CVE-2016-2112
CVE-2016-2115
CVE-2016-2118 aka Badlock
CVE-2015-5370

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-04-13 22:25:14 +02:00