Commit Graph

4964 Commits

Author SHA1 Message Date
Arne Fitzenreiter
802b916d10 Merge remote-tracking branch 'origin/master' into next
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Conflicts:
	make.sh
2016-02-17 19:47:50 +01:00
Arne Fitzenreiter
5a9039f132 core98: new update with glibc security fixes.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-17 14:05:15 +01:00
Arne Fitzenreiter
879458d41f rename core98 to 99 for glibc security update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-17 10:10:19 +01:00
Arne Fitzenreiter
a760a5cfa9 dracut: remove marvell sdio modules from initrd.
this allows to switch to uap module on dreamplug.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-08 13:53:13 +01:00
Michael Tremer
7b757df70f core98: Ship changed /etc/ppp/ip-up
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-08 01:52:18 +00:00
Michael Tremer
8260fb7e0e core98: Ship recently updated grep and sed
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-08 01:40:50 +00:00
Michael Tremer
067db4d53a Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2016-02-08 01:33:15 +00:00
Arne Fitzenreiter
d651e48f70 kernel: disable grsecurity KSTACKOVERFLOW.
this is the reason for crashes usb lan dongles and media devices.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-07 09:40:03 +01:00
Michael Tremer
645378fbb9 firewall: Fix MAC filter
Packets destined for the firewall coming in from the blue
device where accepted too early to be processed by the
firewall input chain rules.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-05 10:24:03 +00:00
Michael Tremer
ff43197b01 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2016-02-04 14:35:55 +00:00
Arne Fitzenreiter
552fb4b8b5 dhcpcd: rework mtu handling on buggy nic's
some nic's loose the carrier after setting new mtu.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-01 07:31:46 +01:00
Michael Tremer
a06723b1f4 core98: Ship updated tzdata
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-30 16:37:21 +00:00
Matthias Fischer
f83b3c65a3 tzdata: Update to 2016a
Fixes https://bugzilla.ipfire.org/show_bug.cgi?id=11034

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-30 16:35:41 +00:00
Arne Fitzenreiter
35b24ff8a9 set core to 98 and move 97 to oldcore
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-28 22:10:11 +01:00
Arne Fitzenreiter
a439a239bc core97: remove some core98 files from update filelist.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-28 19:29:02 +01:00
Arne Fitzenreiter
7f4c06e7a4 finish core97
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-28 16:26:32 +01:00
Arne Fitzenreiter
78574c1846 finish core97
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-28 16:20:16 +01:00
Arne Fitzenreiter
44ec3a759a hwdate: update databases
pci.ids: 2016.01.28
usb.ids: 2015.12.17

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-28 13:40:54 +01:00
Arne Fitzenreiter
d3228e2c6c core97: prepare new core97 with openssl and openssh update.
the update itself has to be done...

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-28 13:40:31 +01:00
Arne Fitzenreiter
eb2f4a4d26 hwdate: update databases
pci.ids: 2016.01.28
usb.ids: 2015.12.17

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-28 13:24:50 +01:00
Arne Fitzenreiter
ecd5019097 core97: prepare new core97 with openssl and openssh update.
the update itself has to be done...

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-28 13:08:59 +01:00
Arne Fitzenreiter
6fa8a1a9cc rename core97 to 98 because we have to insert OpenSSL security update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-28 13:03:39 +01:00
Arne Fitzenreiter
23c6a8d710 core96: don't overwrite grub defaults.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-23 15:19:58 +01:00
Michael Tremer
02a60a9b9e squid: Actually make --with-filedescriptors work
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-23 01:49:37 +00:00
Michael Tremer
cf82da6b37 core97: Ship updated CGI files
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-23 00:41:02 +00:00
Michael Tremer
665f79926d Merge remote-tracking branch 'origin/master' into next 2016-01-23 00:39:19 +00:00
Michael Tremer
2775ab9cc6 core97: Ship iptables conntrack changes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-22 00:55:25 +00:00
Michael Tremer
8a1a3bf393 Merge remote-tracking branch 'ms/iptables-conntrack' into next 2016-01-22 00:54:14 +00:00
Michael Tremer
928eba27a5 core97: Ship updated webaccess.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-19 00:07:07 +00:00
Michael Tremer
857b2c795e Improve hardening by using -fstack-protector-strong
This functionality is now available for us since we updated
to GCC 4.9 and just improves the stack smashing protector
in GCC.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-18 22:26:23 +00:00
Matthias Fischer
cc9f461f74 nano: Update to 2.5.1
Excerpt form 'NEWS':
"It includes fixes for a syntax-highlighting bug and a positionlog bug,
it disables a time-eating multiline regex in the C syntax,
and it adds an escape hatch to the WriteOut menu when
--tempfile is used: the discardbuffer command, ^Q.  It
also has translation updates for fifteen languages, and
a small fix in the softwrap code."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-17 18:52:09 +00:00
Michael Tremer
037cf8d20d core97: Ship updated openssh
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-17 18:51:47 +00:00
Michael Tremer
64285d23eb Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2016-01-17 18:49:03 +00:00
Arne Fitzenreiter
905d1afd4e kernel: disable RANDSTRUCT
RANDSRUCT is incompatible with ccache build.

fixes #10905
fixes #11012

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-13 07:24:34 +01:00
Michael Tremer
cfdeb28050 core97: Ship updated ntp
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-10 21:20:49 +00:00
Matthias Fischer
c1de76704a ntp: Update to 4.2.8p5
"...addresses 1 medium-severity security issue, 14 bugfixes,
and contains other improvements over 4.2.8p4."

For a complete list, see:
http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-10 21:18:20 +00:00
Michael Tremer
b75b6382ab grub: Disable hardening for grub-script-check
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-10 19:35:42 +00:00
Michael Tremer
cec5c724f5 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2016-01-09 14:56:33 +00:00
Michael Tremer
16260e2c69 timectrl: Stop ntp daemon when disabled
Fixes #11000

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-07 23:47:39 +00:00
Arne Fitzenreiter
2eb67894ef binutils: update to 2.24
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-07 17:41:16 +01:00
Daniel Weismüller
820a4ab564 owncloud: updated to version 7.0.11
Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-06 15:09:16 +00:00
Michael Tremer
b0a014b7f8 QoS: Improve saving enabled/disable state
It was reported that the QoS did not stop when
the user clicked the "stop" button. This patch
fixes that.

Fixes #10664

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Acked-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
2016-01-05 21:04:05 +00:00
Michael Tremer
84032d0845 core97: Ship updated openvpn package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-04 22:46:13 +00:00
Michael Tremer
21ac63688a core97: Ship dnsmasq
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-12-28 15:37:02 +01:00
Michael Tremer
2135528774 core97: Ship pgrep with the updater
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-12-28 15:30:13 +01:00
Arne Fitzenreiter
4df3276bb4 ncurses: rootfile update.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2015-12-26 17:37:53 +01:00
Arne Fitzenreiter
b94e0ffc68 dnsdist: rootfile update.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2015-12-26 17:34:13 +01:00
Arne Fitzenreiter
b37e91c3b5 diffutils: rootfile update.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2015-12-26 17:33:30 +01:00
Arne Fitzenreiter
eddda7f9bd gcc: include libstdc++ to rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2015-12-26 13:16:59 +01:00
Arne Fitzenreiter
c26171b4b4 core96: remove rrd ramdisk entry from fstab 2015-12-23 11:32:53 +01:00