Commit Graph

5817 Commits

Author SHA1 Message Date
Matthias Fischer
45e4d6af99 knot: Update to 2.8.1
For details see:
https://www.knot-dns.cz/2019-04-09-version-281.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-05-07 23:49:29 +01:00
Matthias Fischer
9177b69830 bind: Update to 9.11.6-P1
For details see:
http://ftp.isc.org/isc/bind9/9.11.6-P1/RELEASE-NOTES-bind-9.11.6-P1.html

"Security Fixes

 The TCP client quota set using the tcp-clients option could be exceeded in some cases.
 This could lead to exhaustion of file descriptors. This flaw is disclosed in CVE-2018-5743.
 [GL #615]"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-05-07 23:48:24 +01:00
Matthias Fischer
60bc3a4b7a dhcpcd: Update to 7.2.2
For details see:
https://roy.marples.name/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-05-07 23:45:52 +01:00
Stefan Schantl
a59052cec6 suricata: Update to 4.1.4
This is a minor update to the latest available version from
the suricata 4.1 series.

Fixes #12068.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-05-02 19:33:38 +02:00
Michael Tremer
4987d0ed19 grub: Fix relocation type issue
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-28 09:43:37 +01:00
Michael Tremer
bab38dad60 ipfire-netboot: Fix compiling and linking with new GCC & binutils
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-28 09:43:24 +01:00
Michael Tremer
7f156022b5 sarg: Fix build with newer GCCs
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-28 09:43:08 +01:00
Arne Fitzenreiter
20c7552e0d Merge branch 'master' into next
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-04-26 19:39:55 +02:00
Michael Tremer
2cecfd0fdb grub: Fix build error with GCC 8
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-26 16:19:51 +01:00
Michael Tremer
452d2b6eaa grub: Disable efiemu on PC builds
This won't compile with GCC 8 and we do not need it

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-26 16:19:42 +01:00
Michael Tremer
999e17bf9e nasm: Update to 2.14.02
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-26 16:19:17 +01:00
Michael Tremer
a0c9850c77 ltrace: Bump package version
This package needs to be rebuilt because it uses elfutils
which has had an soname bump.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-26 16:19:16 +01:00
Michael Tremer
95028c1ce2 elfutils: Update to 0.176
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-26 16:18:46 +01:00
Arne Fitzenreiter
31568a1982 hostapd: bump package version
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-04-26 07:43:21 +02:00
Michael Tremer
dc850cb32f hostap: Enable 80MHz bandwidth by default (when using ACS)
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-24 10:43:50 +01:00
Michael Tremer
37a83c83cd hostap: Enable option to force clients to use 802.11w
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-24 10:39:25 +01:00
Michael Tremer
ea10f1a0b5 hostap: Allow to use Automatic Channel Selection (ACS)
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-24 10:12:29 +01:00
Arne Fitzenreiter
08639bc2a9 kernel: update 4.14.113
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-04-20 17:21:03 +02:00
Jonatan Schlag
010d4a85a9 Enable seccomp support for qemu
Fixes: #11941

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-20 14:13:50 +01:00
Jonatan Schlag
43c3a386d1 Add new package libseccomp
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-20 14:12:50 +01:00
Arne Fitzenreiter
5fa063f859 kernel: update to 4.14.112
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-04-17 22:30:19 +02:00
Arne Fitzenreiter
e91c83490b wireless-regdb: update to 2019.03.01
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-04-16 18:05:18 +02:00
Michael Tremer
fea27a56f7 haproxy: Backup certificates, too
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-16 13:23:17 +01:00
Michael Tremer
a32c219fa4 zabbix_agentd: Bump package version
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-11 07:55:36 +01:00
Alexander Koch
41b7369f80 zabbix_agentd: Bugfix for /etc/sudoers.d/zabbix.user
Files containing an '~' or '.' are ignored by sudo when placed in the includedir /etc/sudoers.d This makes the file useless. The file is renamed to "zabbix" instead of "zabbix.user" to fix this.

See: https://www.sudo.ws/man/1.8.13/sudoers.man.html#Including_other_files_from_within_sudoers

Signed-off-by: Alexander Koch <ipfire@starkstromkonsument.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-11 07:55:10 +01:00
Alexander Koch
854b63c42a zabbix_agentd: update to 4.2.0
Relase Notes: https://www.zabbix.com/rn/rn4.2.0

Signed-off-by: Alexander Koch <ipfire@starkstromkonsument.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-11 07:55:07 +01:00
Arne Fitzenreiter
f2afd5e70d kernel: update to 4.14.111
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-04-08 21:47:23 +02:00
Michael Tremer
918ee4a4cf strongswan: Manually install all routes for non-routed VPNs
This is a regression from disabling charon.install_routes.

VPNs are routing fine as long as traffic is passing through
the firewall. Traps are not propertly used as long as these
routes are not present and therefore we won't trigger any
tunnels when traffic originates from the firewall.

Fixes: #12045
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-08 16:44:57 +01:00
Peter Müller
f40cd26de2 Postfix: update to 3.4.5
See http://www.postfix.org/announcements/postfix-3.4.5.html for
release notes.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-06 16:09:02 +01:00
Matthias Fischer
ee44d509b6 wget: Update to 1.20.3
For details see:
https://fossies.org/linux/wget/ChangeLog

Excerpt from "NEWS":

"2019-04-05  Tim Ruehsen  <tim.ruehsen@gmx.de>

Fix a buffer overflow vulnerability
* src/iri.c(do_conversion): Reallocate the output buffer to a larger
  size if it is already full"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-06 16:08:53 +01:00
Arne Fitzenreiter
aa20f1b277 kernel: update to 4.14.110
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-04-05 07:46:34 +02:00
Matthias Fischer
7dd8193684 wget: Update to 1.20.2
For details see:
https://fossies.org/linux/wget/ChangeLog

Excerpt from "NEWS":

* Changes in Wget 1.20.2
** NTLM authentication will retry under certain cases
** Fixed a buffer overflow vulnerability"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-04 02:07:01 +01:00
Matthias Fischer
a4cc65bc48 nettle: Update to 3.4.1
For details see:
https://fossies.org/linux/nettle/ChangeLog

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-04 02:06:19 +01:00
Matthias Fischer
34bbcff61f gnutls: Update to 3.6.7.1
For details see:
https://lists.gnupg.org/pipermail/gnutls-help/2019-March/004497.html

Please note:
A few days after the "3.6.7" release, "3.6.7.1" came out.

See:
https://www.gnupg.org/ftp/gcrypt/gnutls/v3.6/

But the compressed directory version is still versioned 3.6.7.

Because of this, the fourth (sub)-version number required some lfs adjustments.

And:
This version requires "nettle 3.4.1", which is sent in another commit.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-04 02:05:18 +01:00
Matthias Fischer
5f2e713ec8 apache: Update to 2.4.39
For details see:
http://mirror.checkdomain.de/apache//httpd/CHANGES_2.4.39

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-04 02:03:22 +01:00
Michael Tremer
7299559611 freeradius: Fix extra whitespace
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-04 02:00:29 +01:00
Arne Fitzenreiter
df95c62f3a Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2019-04-03 21:53:22 +00:00
Michael Tremer
94f89b821e freeradius: handle special LDFLAGS to configure
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-04-03 21:52:04 +00:00
Michael Tremer
0e54ca2602 pcengines-apu-firmware: New package
This package ships the latest BIOS for PC Engines APU boards.

With help of the firmware-update package, this can be very easily
updated when running IPFire.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-03 00:42:19 +01:00
Michael Tremer
2aca6aa061 firmware-update: New package
This is a script that can update firmware on PC Engines APU systems

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-03 00:33:44 +01:00
Michael Tremer
82d176d33b flashrom: New package
This is required to flash firmware

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-03 00:26:13 +01:00
Michael Tremer
4038d70b76 freeradius: Fix build on armv5tel
Reported-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-04-01 21:35:56 +01:00
Arne Fitzenreiter
78c8fe06a5 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2019-03-31 18:36:44 +02:00
Jonatan Schlag
56f4ba9b01 Update borgbackup to version 1.1.9
Fixes: #12016

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-31 13:32:10 +01:00
Arne Fitzenreiter
d00d788be4 kernel: update to 4.14.109
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-03-31 11:46:34 +02:00
Arne Fitzenreiter
3005eb2234 kernel: update user regd patch from openwrt
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-03-30 16:56:56 +01:00
Erik Kapfer
9f52e35066 freeradius: Update to version 3.0.18
Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-29 13:50:18 +00:00
Matthias Fischer
10945e38f3 clamav: Update to 0.101.2
For details see:
https://blog.clamav.net/2019/03/clamav-01012-and-01003-patches-have.html

"ClamAV 0.101.2 is a patch release to address a handful of security related bugs."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-29 13:50:18 +00:00
Erik Kapfer
effa44650e nginx: Update to 1.15.9
Fixes #12023 .
Added support for http2.

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-25 23:44:24 +00:00
Michael Tremer
2547e73e6b freeradius: Bump version because package is linked against old version of OpenSSL
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-22 07:28:23 +00:00