Commit Graph

4839 Commits

Author SHA1 Message Date
Michael Tremer
0c55ec5a49 strongswan: Update to 5.6.0
Fixes CVE-2017-11185:

Fixed a DoS vulnerability in the gmp plugin that was caused by insufficient input validation
when verifying RSA signatures, which requires decryption with the operation m^e mod n,
where m is the signature, and e and n are the exponent and modulus of the public key.
The value m is an integer between 0 and n-1, however, the gmp plugin did not verify this.
So if m equals n the calculation results in 0, in which case mpz_export() returns NULL.
This result wasn't handled properly causing a null-pointer dereference.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-23 20:03:21 +01:00
Matthias Fischer
c60ad61a14 squid: Update to 3.5.27
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-23 11:32:33 +01:00
Matthias Fischer
3fdddd37ab gnutls: Update to 3.5.15
For details see:
https://lists.gnupg.org/pipermail/gnutls-devel/2017-August/008483.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-23 11:31:39 +01:00
Matthias Fischer
7fe22fdc0c unbound: Update to 1.6.5
Changelog:

"21 Aug 2017: Wouter
	- Fix install of trust anchor when two anchors are present, makes both
	  valid.  Checks hash of DS but not signature of new key.  This fixes installs between
	  sep11 and oct11 2017."

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-23 11:28:43 +01:00
Matthias Fischer
853a95b215 hdparm: Update to 9.52
Changes from 9.50 to 9.52:
- add support for Jmicron USB-SATA bridges, courtesy Jan Friesse <jfriesse@gmail.com>.
- New --security-prompt-for-password flag for use with the various --security- actions.
- Makefile tweak from Mike Frysinger.
- fix spelling/typos in man page and "removable", courtesy of Alex Mestiashvili.
- fix spelling/typos in --sanitize-crypto-scramble, courtesy of Tom Yan.
- fix NULL password handling in --security-unlock, courtesy of Tom Yan.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-21 12:15:07 +01:00
Stephan Feddersen
1bee37ba2c WIO: wio.cgi edit how to get the ips for the networks
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 14:24:34 +01:00
Michael Tremer
4f4f5bbbfd logrotate: Fix source tarball checksum
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 12:02:12 +01:00
Erik Kapfer
a3fe88a540 iftop: This is an Update release to ver. 1.0pre4
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 11:55:31 +01:00
Matthias Fischer
9accc1c76e logrotate: Update to 3.12.3
For details see:
https://github.com/logrotate/logrotate/releases

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 11:50:17 +01:00
Matthias Fischer
20be628a97 nano: Update to 2.8.6
For details see:
https://www.nano-editor.org/news.php

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 11:50:16 +01:00
Matthias Fischer
fe65a45955 pcre: Update to 8.41
For details see:
http://www.pcre.org/original/changelog.txt

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 11:50:14 +01:00
Matthias Fischer
a158a5a62d bind: Update to 9.11.2
For details see:
https://ftp.isc.org/isc/bind9/9.11.2/RELEASE-NOTES-bind-9.11.2.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 11:50:13 +01:00
Matthias Fischer
d44debdcc5 gnutls: Update to 3.5.14
For details see:
https://lists.gnupg.org/pipermail/gnutls-devel/2017-May/008427.html
https://lists.gnupg.org/pipermail/gnutls-devel/2017-June/008446.html
https://lists.gnupg.org/pipermail/gnutls-devel/2017-July/008469.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 11:50:12 +01:00
Matthias Fischer
5fd797bfb1 libgcrypt: Update to 1.8.0
Changes (see: https://gnupg.org/download/release_notes.html):

"gpg: Sending very large keys to the keyservers works again.
gpg: Validity strings in key listings are now again translatable.
gpg: Emit FAILURE status lines to help GPGME.
gpg: Does not anymore link to Libksba to reduce dependencies.
gpgsm: Export of secret keys via Assuan is now possible.
agent: Raise the maximum passphrase length from 100 to 255 bytes.
agent: Fix regression using EdDSA keys with ssh.
Does not anymore use a build timestamp by default.
The fallback encoding for broken locale settings changed from Latin-1 to UTF-8.
Many code cleanups and improved internal documentation.
Various minor bug fixes."

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 11:50:10 +01:00
Matthias Fischer
15b6f6f99a hostapd: Update to 2.6
For details see:
https://w1.fi/cgit/hostap/plain/hostapd/ChangeLog

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 11:50:06 +01:00
Matthias Fischer
41d06f42b7 unbound: Update to 1.6.4
Hi, ("...back in town...") ;-)

For details see:
http://www.unbound.net/download.html

I had to remove the patch file: it wouldn't apply.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 11:50:03 +01:00
Matthias Fischer
5e2daa7876 tor: Update to 0.3.0.10
Fixes CVE-2017-0377 and others.

For details see:
https://gitweb.torproject.org/tor.git/plain/ReleaseNotes?id=tor-0.3.0.10

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 11:49:59 +01:00
Matthias Fischer
6edc270abc squid 3.5.26: latest patches (14169-14182)
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 11:49:51 +01:00
Stephan Feddersen
0d6cc79d98 WIO: first addon release v1.3.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 11:45:46 +01:00
Arne Fitzenreiter
82308f5387 ncftp: drop addon package
it is outdated and will not build with new gcc/glibc

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-07-08 17:23:00 +02:00
Arne Fitzenreiter
f3c01b39e4 toolchain: filter -mfpu from CFLAGS for first pass
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-07-07 10:12:28 +02:00
Arne Fitzenreiter
025e1fe146 flash-images: remove wrong 2nd partition
the new sfdisk seems not able to skip a partition anymore.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-07-06 18:37:44 +02:00
Arne Fitzenreiter
f3e86ec56b flash-images: remove unsupported sfdisk switches
New util-linux sfdisk does not have -D and -H / -S
switches.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-07-06 08:32:13 +02:00
Marcel Lorenz
6e1cf84266 util-linux: update to 2.28.2
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Reviewed-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-07-05 17:23:52 +01:00
Arne Fitzenreiter
da504bdc57 grub: ignore missing .symtab in modules
old binutis add an empty .symtab section at stripping
and grub check that this exists also on modules that export
no symbols.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-07-05 17:42:21 +02:00
Michael Tremer
8b690bda0b ipfire-netboot: Update to version v1.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-25 15:54:22 +01:00
Michael Tremer
4f8cef803b unbound: Fix crash of daemon at startup
getentropy() cannot be used on our platform.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-25 15:45:26 +01:00
Michael Tremer
c631ded67b Drop architecture-dependent and unused package fwhits
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-22 18:29:59 +01:00
Michael Tremer
dff0a94825 directfb: Fix compilation on ARM
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-22 16:06:06 +01:00
Michael Tremer
8b0b9d79e1 openvpn: Update to 2.3.17
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-22 10:43:49 +01:00
Michael Tremer
88a8c3ac5a boost: Disable all libraries that don't build on armv7hl
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-20 19:31:50 +01:00
Michael Tremer
945d44796a boost: Properly use CFLAGS & CXXFLAGS
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-20 19:31:50 +01:00
Arne Fitzenreiter
0b4976e293 kernel: fix amba modules build with gcc6
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-06-20 06:12:45 +02:00
Arne Fitzenreiter
ad73e5ec63 kernel: rpi build fix
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-06-18 10:29:45 +02:00
Arne Fitzenreiter
6af04bf600 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2017-06-15 18:40:32 +02:00
Michael Tremer
15a2c03f5d glibc: Don't use locale-archive
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-15 11:45:19 +01:00
Michael Tremer
6b5621de90 unbound: Update to 1.6.3
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-15 11:17:35 +01:00
Marcel Lorenz
01d7a56295 cmake: update to 3.8.1
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-14 15:52:33 +01:00
Matthias Fischer
146a8b31a9 tor: Update to 3.0.8
For details see:
https://gitweb.torproject.org/tor.git/plain/ReleaseNotes?id=tor-0.3.0.8

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-14 15:52:33 +01:00
Matthias Fischer
a0767955cd monit: Update to 5.23.0
For details see:
https://mmonit.com/monit/changes/

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-14 15:52:33 +01:00
Marcel Lorenz
411fb95335 libxml2: update to 2.9.4
http://xmlsoft.org/news.html

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-14 15:52:33 +01:00
Marcel Lorenz
3b443eb83b gnutls: update to 3.5.11
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-14 15:52:33 +01:00
Marcel Lorenz
12623af5d0 bird: update to 1.6.3
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-14 15:52:33 +01:00
Michael Tremer
5e00841da0 Revert "Drop paxctl"
This reverts commit ae666b0c23.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-14 15:52:33 +01:00
Matthias Fischer
772237d99f squid: Update to 3.5.26
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-14 15:52:33 +01:00
Matthias Fischer
c63136978f squid 3.5.25: latest patches (14155-14167)
For details see:
http://www.squid-cache.org/Versions/v3/3.5/changesets/

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-14 15:52:33 +01:00
Matthias Fischer
c2390939ef tmux: Update to 2.5
For details see:
https://raw.githubusercontent.com/tmux/tmux/2.5/CHANGES

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-14 15:52:33 +01:00
Arne Fitzenreiter
191399a3c0 cyrus-imapd: enable on all archs
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-06-12 19:41:12 +02:00
Arne Fitzenreiter
65ca3f0507 Merge branch 'master' into next 2017-06-10 22:38:32 +02:00
Arne Fitzenreiter
369a04a49d samba: remove winbind tevent poll patch
this not work without matching libtevent

fixes #11390

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-06-10 17:08:05 +02:00