Commit Graph

1928 Commits

Author SHA1 Message Date
Erik Kapfer
bd42f9f968 CRL updater: Update script for OpenVPNs CRL
Update script for OpenVPNs CRL cause OpenVPN refactors the CRL handling since v.2.4.0 .
    Script checks the next update field from the CRL and executes an update before it expires.
    Script is placed under fcron.daily for daily checks.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 22:20:28 +00:00
Michael Tremer
11e78f38b9 Package openssl-compat (1.0.2.n)
This is provided for compatibility with binaries that have
been compiled against this version of OpenSSL.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 22:19:45 +00:00
Michael Tremer
56f8478e4d openssl: Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 22:19:45 +00:00
Erik Kapfer
3b83dffc19 OpenVPN: Update to version 2.4.4
Changed LFS and ROOTFILE for OpenVPN 2.4.4 update.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 22:19:45 +00:00
Michael Tremer
1b7cb0484c openssl: Enable engines
Some tools that depend on openssl won't compile without it

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 22:19:45 +00:00
Michael Tremer
5c82a9f040 python-typing: Required for m2crypto
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 22:19:45 +00:00
Michael Tremer
f8ee1cfcfc cyrus-sasl: Disable OTP to build against OpenSSL 1.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 22:19:45 +00:00
Michael Tremer
5a9bbaa93d openssl: Update to version 1.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 22:19:45 +00:00
Michael Tremer
59a6d4e439 glibc: Enable obsolete NSL
This will re-activate the deprecated NIS code on which lots of
software relies on so that we can have some extra time to migrate.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
25e33293bd binutils: Update to 2.30
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
65a75e0ddf glibc: Update to 2.27
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
457fd09ddb pam: Update to 1.30.0
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
6ffe2da8c9 iproute2: Update to 4.14.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
f6b0901df9 hostname: Update to 3.20
Drops dependency to obsolete RPCSVC code in glibc.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Arne Fitzenreiter
11b5e5cb8e toolchain: update to gcc-7.3.0 and enable retpolines on x86_64 and i586
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
e64461a2bd swig: Update to 3.0.12
Required to build recent versions of m2crypto.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-02 11:16:18 +00:00
Michael Tremer
4e3ef51629 Drop libevent2-compat which doesn't build against OpenSSL 1.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-02 11:15:25 +00:00
Arne Fitzenreiter
09cdb999da Merge remote-tracking branch 'arne_f/gcc-7-retpol' into kernel-4.14 2018-01-27 10:26:11 +01:00
Arne Fitzenreiter
7520b95a8b toolchain: update to gcc-7.3.0 and enable retpolines on x86_64 and i586
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-01-26 20:48:08 +01:00
Jonatan Schlag
3019aa9970 spice-protocol: update to version 0.12.13
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-24 16:12:44 +00:00
Jonatan Schlag
e9a7dfb1fe pyparsing: update to version 2.2.0
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-24 16:12:39 +00:00
Michael Tremer
3ed1c621cf Revert "Add Intel microcode updates from Jan 2018"
This reverts commit d404b1dba2.

Intel has pulled these microcode updates because of
random system reboots and systems becoming unstable.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-24 16:08:22 +00:00
Erik Kapfer
adf3f4f4fe LZ4: New compression library.
New lossless data compression algorithm.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-23 13:20:58 +00:00
Michael Tremer
e0a048fe21 poppler is now linking against glib2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-22 13:12:56 +00:00
Matthias Fischer
6ac7b8b2a4 unbound: Update to 1.6.8
For details see:
http://www.unbound.net/download.html

Fixes CVE-2017-15105: vulnerability in the processing of wildcard synthesized NSEC records,
=> https://unbound.net/downloads/CVE-2017-15105.txt

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-20 14:37:25 +00:00
Arne Fitzenreiter
2c21c4e522 Merge remote-tracking branch 'origin/next' into kernel-4.14 2018-01-15 19:08:23 +01:00
Michael Tremer
8b0fbdc569 glib: Fix rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-14 15:44:48 +00:00
Michael Tremer
e442e02a7f glib2: Update to 2.54.3
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-14 15:44:36 +00:00
Jonatan Schlag
d404b1dba2 Add Intel microcode updates from Jan 2018
Add intel microcode to the distribution and configure dracut in a way
that the microcode is loaded early in the boot process.

Fixes #11590

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Acknowledged-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-14 15:25:08 +00:00
Arne Fitzenreiter
5901793b61 intel-microcode: ship microcode updates (20180108)
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-01-14 11:33:13 +01:00
Michael Tremer
91bd66d6d1 Drop PHP
This is no longer needed and in the telephone conference
on Dec 4th, it was decided to drop it.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-05 13:37:25 +00:00
Michael Tremer
fbcb5b749a Drop mediatomb
This didn't build and run in ages and has been removed from
the repositories quite a while ago.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-05 13:26:33 +00:00
Arne Fitzenreiter
d952f7557e Merge remote-tracking branch 'origin/next' into kernel-4.14 2017-12-18 18:22:06 +01:00
Michael Tremer
a412f472d9 Drop tunctl
We don't use this at all

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-12-16 12:39:31 +00:00
Michael Tremer
f3ddea42c6 Drop openmailadmin package
This is EOL upstream for over ten years now and therefore
we cannot continue to support this either.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-12-16 12:33:05 +00:00
Michael Tremer
4d86ce7021 Drop nagios
This is no longer maintained and icinga is available.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-12-16 12:31:47 +00:00
Arne Fitzenreiter
02c36af4ba linux-firmare: update to 5d98692
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-12-12 09:18:11 +01:00
Arne Fitzenreiter
796c5e73cb Merge remote-tracking branch 'origin/next' into kernel-4.14 2017-12-01 00:58:27 +01:00
Michael Tremer
14d0e151b6 Update strongswan rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-11-30 16:09:48 +00:00
Arne Fitzenreiter
5b117ef49a Merge remote-tracking branch 'origin/next' into kernel-4.14 2017-11-29 17:37:51 +01:00
Michael Tremer
87ad0c591b strongswan: Update to 5.6.1
Drop support for Padlock which is not in wide usage
any more and creates some rootfile trouble every time.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-11-29 12:39:04 +00:00
Arne Fitzenreiter
f952832418 kernel: updated i586 config and rootfiles
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-11-26 09:32:47 +01:00
Arne Fitzenreiter
2e1fe3c816 kernel: update to 4.14.1
only x86_config has updated yet and grsecurity is removed.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-11-22 12:29:36 +01:00
Arne Fitzenreiter
2c6e0e8eb3 Merge remote-tracking branch 'origin/master' into kernel-4.9 2017-11-02 23:40:49 +01:00
Wolfgang Apolinarski
bf24eeec20 Update to Apache 2.4.29
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-28 13:35:43 +01:00
Matthias Fischer
49f7ee5d72 snort: Update to 2.9.11
For details see:

Release notes:
https://snort.org/downloads/snort/release_notes_2.9.11.txt

Changelog:
https://snort.org/downloads/snort/changelog_2.9.11.txt

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-23 16:24:46 +01:00
Matthias Fischer
a809d7fa68 xz: Update to 5.2.3
For details see:
https://git.tukaani.org/?p=xz.git;a=blob;f=NEWS;hb=HEAD

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-23 13:22:01 +01:00
Arne Fitzenreiter
d12ad00385 Merge remote-tracking branch 'origin/master' into kernel-4.9
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-10-22 21:57:30 +02:00
Arne Fitzenreiter
9064ba72fe drop httpscert and merge to apache initskript
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-10-22 15:50:38 +02:00
Michael Tremer
440cd2cbfd Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-17 12:29:22 +01:00