Commit Graph

2160 Commits

Author SHA1 Message Date
Michael Tremer
20253656fc Add /etc/os-release
This file is being read by some packages to find out on what
distribution they are running on.

This file needs to be included in every Core Update.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-04-20 15:27:50 +00:00
Michael Tremer
6b75121120 gcc: Drop Go on i586
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-04-20 15:25:51 +00:00
Michael Tremer
6d5e9f40f8 gcc: Drop Go on armv5tel
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-04-20 15:25:42 +00:00
Michael Tremer
c22cee9288 gcc: Drop Go on aarch64
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-04-20 15:25:34 +00:00
Michael Tremer
d2315d00c2 Package the official Go compiler
Since Go has a horrible build system which requires a Go
compiler to build the Go compiler and takes a very long
time to compile, we are following Rust and are using the
"official" pre-compiled release tarball.

We no longer ship the Go runtime, which mitigates the
risk of shipping any malware.

Because we currently only have one package using this
and which is only being compiled for x86_64, we are
only making Go available on this architecture.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-04-20 15:24:51 +00:00
Michael Tremer
eed179acdc gcc: Drop support for Go
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-04-20 15:24:38 +00:00
Matthias Fischer
fb241a29c5 apache: Update to 2.4.43
For details see:
http://mirror.dkd.de/apache//httpd/CHANGES_2.4.43

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-04-20 15:19:25 +00:00
Arne Fitzenreiter
b3e2c3ce26 dhcpcd: update to 9.00
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-04-12 08:16:28 +02:00
Arne Fitzenreiter
975bd8bc17 Revert "Revert "OpenSSH: update to 8.2p1""
This reverts commit e7fcf874e7.
2020-04-10 16:23:09 +02:00
Arne Fitzenreiter
e7fcf874e7 Revert "OpenSSH: update to 8.2p1"
ssh skips login before asking for credentials at i586.

This reverts commit 3fd3f4de44.
2020-04-09 20:26:33 +00:00
Michael Tremer
2ff56df4e0 strongswan: Build sha3 plugin
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-04-01 14:40:39 +00:00
Michael Tremer
e4a0b55881 fcron: Fix reloading crontab
fcrontab -z fails on a freshly installed system since
/var/spool/cron is now owned by cron:cron and a temporary
file cannot be created.

This will have to be manually changed in the updater by
calling:

  chown cron:cron /var/spool/cron

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-30 16:37:38 +00:00
Arne Fitzenreiter
54e6ded417 smartmontools: update rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-29 06:34:18 +00:00
Matthias Fischer
454c77d4c4 bind: Update to 9.11.17
For details see:
https://downloads.isc.org/isc/bind9/9.11.17/RELEASE-NOTES-bind-9.11.17.html

"Notes for BIND 9.11.17

Feature Changes

The configure option --with-libxml2 now uses pkg-config to detect
libxml2 library availability. You will either have to install pkg-config
or specify the exact path where libxml2 has been installed on your
system. [GL #1635]

Bug Fixes

Fixed re-signing issues with inline zones which resulted in records
being re-signed late or not at all."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-28 18:38:24 +00:00
Arne Fitzenreiter
5562f26f69 vnstat: remove wrong tag file
fixes #12305

I had created this tag file to ship the folder but vnstat doesn't like empty files.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-26 17:56:23 +00:00
Peter Müller
3fd3f4de44 OpenSSH: update to 8.2p1
Please refer to https://www.openssh.com/txt/release-8.2 for release
announcements. Since glibc < 2.31 is used, no additional patching was
required in order to restore correct login functionality.

Cc: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-26 17:40:06 +00:00
Arne Fitzenreiter
a48d35f3ff smartmontools: update rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-26 17:38:32 +00:00
Matthias Fischer
a7e9342c18 ncurses: Update to 6.2
For details see:
https://invisible-island.net/ncurses/announce.html#h2-release-notes

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-26 09:42:12 +00:00
Marcel Lorenz
3b891a2d90 xz: update to 5.2.5 2020-03-23 18:38:17 +00:00
Peter Müller
d519f1239f coreutils: update rootfiles
Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-23 18:32:33 +00:00
Michael Tremer
29cb9e478a glibc: Update to 2.31
Fixes: #12288
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-22 07:30:45 +00:00
Peter Müller
b427793a58 strongSwan: update to 5.8.2
Please refer to https://wiki.strongswan.org/versions/75 for release notes.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-21 16:27:22 +00:00
Michael Tremer
6b3b3a32ab swap: Start swap after mounting filesystems
When using a swap file, it is not being activated correctly
when the filesystem it is residing on is not mounted, yet.

The root file system is mounted read-only here before
S40mountfs is being executed.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-21 16:19:54 +00:00
Matthias Fischer
98bd7ab1be unbound: Update to 1.10.0
For details see:
https://lists.nlnetlabs.nl/pipermail/unbound-users/2020-February/006711.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-21 16:16:40 +00:00
Wolfgang Apolinarski
ddda384a44 Update Apache Dependencies
Update apache dependencies:
APR: update to version 1.7.0
PCRE: update to version 8.44
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-21 16:14:08 +00:00
Erik Kapfer
5b9e7d37c3 libssh: Update to version 0.9.3 .
Fixes CVE-2019-14889 and several issues after an security audit.
The complete changelog can be found in here --> https://www.libssh.org/category/release/ .
This version is also needed for tshark-3.2.2 to prevent
'error while loading shared libraries: libssh.so.4' for sshdump and ciscodump.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-21 16:03:54 +00:00
Michael Tremer
3a17ab3893 openssl: Update to 1.1.1e
Fixed an overflow bug in the x64_64 Montgomery squaring procedure used
in exponentiation with 512-bit moduli (CVE-2019-1551).

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-21 15:56:05 +00:00
Michael Tremer
50a04f785d cairo: Update to 1.16.0
This updates the package and adds a patch so that it compiles
with binutils 2.34.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-21 15:44:08 +00:00
Peter Müller
cfd2f07cf0 binutils: update to 2.34
Cc: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-21 15:44:06 +00:00
Michael Tremer
067a6fd040 gcc: Update to 9.3.0
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-21 15:43:41 +00:00
Arne Fitzenreiter
592be1d206 bluetooth: drop outdated bluetooth addon
The cgi support only rfcomm modem dialup. This is not used by modern hardware.
Also the used bluez stack version is outdated long time.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-21 15:41:22 +00:00
Arne Fitzenreiter
a344d3c902 unbound/red.up: run unbound update-forwarders after suricata init.
The old suricata instance blocks dns requests if the red ip has changed.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-04 08:52:56 +01:00
Arne Fitzenreiter
3b5131c1a3 unbound: drop remove-dns-fowarders at red.down
this functions has only reloaded unbound config
which is useless at shutting down the red interface.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-02 17:54:48 +00:00
Michael Tremer
1ece41ec51 kmod: Update to 26
This patch links kmod against OpenSSL which is required to
decode the kernel modules' PKCS#7 signatures.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-01 19:44:24 +00:00
Arne Fitzenreiter
8569b3e11b red.up: move update-dns-forwareders behind the firewall
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-19 14:51:48 +00:00
Stefan Schantl
8f60b4ff30 ppp: Update to 2.4.8
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-18 17:10:50 +00:00
Arne Fitzenreiter
c2b6c29a0d elinks: suppress welcome dialog
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-18 06:01:44 +00:00
Arne Fitzenreiter
24fd2e0b90 ddns: rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-17 08:50:46 +00:00
Arne Fitzenreiter
e0dbe21e09 u-boot-kirkwood: drop package
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 17:01:02 +00:00
Michael Tremer
3c7d55c55a Drop setserial
This package was used internally and we have no script that uses it
any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 16:56:13 +00:00
Michael Tremer
65b08a04da Drop ez-ipupdate
We do not use this at all any more, because it has been replaced
by ddns.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 16:55:39 +00:00
Michael Tremer
d4b31f13d5 Drop multicat & bitstream
This reverts commit 0a21ce42e1.

These packages have never been updated and nodody in the team
is willing to support them.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 16:55:00 +00:00
Michael Tremer
bad2292034 Drop batctl
This package is no longer used. BATMAN is slightly out of fashion
and can be disabled in our kernel, too.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 16:54:48 +00:00
Arne Fitzenreiter
dc1362e888 kernel: armv5tel rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-13 17:08:20 +00:00
Arne Fitzenreiter
ee9bc7c477 kernel: rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-08 15:21:16 +01:00
Arne Fitzenreiter
831ff05d89 kernel: enable and enforce signed kernel modules
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-06 15:09:52 +01:00
Arne Fitzenreiter
57b17167eb kernel: drop kirkwood kernel
perl 5.30 will not work on kirkwood platform and firewinfo reports less than 10 users so we will drop the support for the platform.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-03 17:44:49 +00:00
Arne Fitzenreiter
4f175a1f57 rust: rootfiles updates
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-25 21:14:54 +01:00
Michael Tremer
8893881160 lvm2: Add initscript for lvmetad
This daemon needs to be launched in order to use LVM
devices in IPFire.

It will run on all installations after this patch has been
merged but only consumes very little memory.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-16 18:23:30 +00:00
Michael Tremer
c835011d6e lvm2: Enable lvmetad
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-16 18:22:51 +00:00