Arne Fitzenreiter
b29c97b168
unbound: Test upstream name servers before using
...
unbound has some trouble with validating DNSSEC-enabled
domains when the upstream name server is stripping signatures
from the authoritative responses.
This script now checks that, removes any broken upstream
name servers from the list and prints a warning.
If all name servers fail the test, unbound falls back
into recursor mode.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-10-02 15:25:23 +02:00
Arne Fitzenreiter
f58002a83f
core106: Add DNS root key to exclude list
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-10-02 13:36:07 +02:00
Arne Fitzenreiter
9f50355a8c
unbound: Update to 1.5.10
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-10-02 13:35:45 +02:00
Michael Tremer
a1de9f6fc9
core106: Ship updated /etc/login.defs
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-10-01 18:56:42 +01:00
Michael Tremer
80bc60228b
unbound: Print nicer error message when already running
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-10-01 18:55:23 +01:00
Michael Tremer
46d8d50f45
unbound: Start unbound when invoked by DHCP scripts
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-10-01 18:52:07 +01:00
Michael Tremer
da31472505
shadow-utils: Create standard set of configuration files
...
Previously we copied the default configuration from the upstream
package and modified that. Unfortunately a patch and a sed command
changed the file which resulted in unwanted changes.
This patch removes the patch and sed command and adds a new set
of configuration files that just need to be copied to the system.
Fixes #11195
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-10-01 18:42:18 +01:00
Arne Fitzenreiter
60fc489b04
attr: rootfile update
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-10-01 15:17:37 +02:00
Arne Fitzenreiter
829435bea3
ntp: fix wait for red if dhcp or wpasupplicant is running.
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-09-27 20:15:53 +02:00
Arne Fitzenreiter
3cf764f338
samba: default enable SMBv2.
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-09-27 19:38:38 +02:00
Arne Fitzenreiter
b547554aea
core106: ship mt7601u firmware.
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-09-27 19:20:14 +02:00
Arne Fitzenreiter
dee3be75f9
mpfr: fix missing eof in rootfile.
...
this is the reason for missing mt7601u firmware.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-09-27 19:18:21 +02:00
Michael Tremer
92aebbcddd
Revert "libjpeg: update to 1.4.2"
...
This reverts commit feba68e4af .
Breaks building netpbm
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-27 09:44:49 +01:00
Arne Fitzenreiter
01176164b5
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
2016-09-26 23:18:30 +02:00
Arne Fitzenreiter
de48b89ca1
Revert "Revert "tcl: update to 8.6.6""
...
with new krb5 also the tcl update works.
This reverts commit 053c554822 .
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-09-26 23:17:08 +02:00
Michael Tremer
e26a93322d
core106: Add recently updated packages, etc.
...
This update removes dnsmasq and replaces it with unbound.
Also many packages are updated and shipped.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-26 21:03:33 +01:00
Michael Tremer
59bddc7989
Start Core Update 106
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-26 20:25:22 +01:00
Marcel Lorenz
feba68e4af
libjpeg: update to 1.4.2
...
The old libjpeg is renamed to libjpeg-compat
The compat makes the old libs maintainable
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Reviewed-by: Jonatan Schlag <jonatan.schlag@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-26 20:18:25 +01:00
Arne Fitzenreiter
b8987235d2
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
2016-09-26 18:53:49 +02:00
Arne Fitzenreiter
724c0b8e4b
attr: rootfile update.
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-09-26 18:51:27 +02:00
Jonatan Schlag
4141e0aad1
Update krb5 to 1.14.4
...
This commit updates krb5 to version 1.14.4
The patch is removed, because he is upstream since 1.12.2.
The samba version is incremented, to link samba against the new krb5
version. Otherwise samba for example is linked against
/usr/lib/libkdb5.so.7 but the current version is /usr/lib/libkdb5.so.8
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-26 14:42:08 +01:00
Michael Tremer
78c3ea61b2
openssl: Update to 1.0.2j
...
Missing CRL sanity check (CVE-2016-7052)
========================================
Severity: Moderate
This issue only affects OpenSSL 1.0.2i, released on 22nd September 2016.
A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.
OpenSSL 1.0.2i users should upgrade to 1.0.2j
The issue was reported to OpenSSL on 22nd September 2016 by Bruce Stephens and
Thomas Jakobi. The fix was developed by Matt Caswell of the OpenSSL development
team.
https://www.openssl.org/news/secadv/20160926.txt
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-26 14:37:20 +01:00
Arne Fitzenreiter
def1ad3e94
rootfile updates: attr, ed, gawk
...
Check rootfiles before commit !!!
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-09-26 13:08:02 +02:00
Arne Fitzenreiter
053c554822
Revert "tcl: update to 8.6.6"
...
breaks kerberos (krb5) build.
This reverts commit 282dfe0bb9 .
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-09-26 07:17:04 +02:00
Arne Fitzenreiter
e70d2dc27d
transmission: update to 2.92
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-09-24 16:44:47 +02:00
Marcel Lorenz
1031bcee20
iproute2: update to 4.7.0
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 13:11:30 +01:00
Marcel Lorenz
54a59fd892
usb_modeswitch_data: update to 20160803
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 13:08:57 +01:00
Marcel Lorenz
96f333a627
usb_modeswitch: update to 2.4.0
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 13:08:56 +01:00
Marcel Lorenz
2429b9210f
ipset: update to 6.29
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 13:07:53 +01:00
Marcel Lorenz
3fc734f0f9
libmnl: update to 1.0.
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 13:07:13 +01:00
Marcel Lorenz
0e7699cbb5
libnetfilter_conntrack: update to 1.0.6
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 13:06:53 +01:00
Marcel Lorenz
087fee9c6a
attr: update to 2.4.47
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 13:05:38 +01:00
Marcel Lorenz
6f36046c81
expat: update to 2.2.0
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 13:04:42 +01:00
Marcel Lorenz
b4b56b4f5c
make: update to 4.2.1
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 13:03:59 +01:00
Marcel Lorenz
cde96f746a
file: update to 5.28
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 12:56:09 +01:00
Michael Tremer
1c7a3c56ef
Revert "strongswan 5.5.0: update for rootfile"
...
The padlock module is only built on i586
This reverts commit 2ac05ca54c .
2016-09-24 12:55:24 +01:00
Marcel Lorenz
345f1f3c0b
gettext: update to 0.19.8.1
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 12:47:16 +01:00
Marcel Lorenz
b48a6c971e
make.sh: add autoamke to toolchain to fix coreutils build fail
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 12:41:42 +01:00
Marcel Lorenz
35f37bf02b
pkg-config: update lfs file to build with new dejagnu
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 12:41:41 +01:00
Marcel Lorenz
a7054dd83c
dejagnu: update to 1.6
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 12:41:39 +01:00
Marcel Lorenz
282dfe0bb9
tcl: update to 8.6.6
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 12:39:41 +01:00
Marcel Lorenz
b48c31167b
flex: update to 2.6.1
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 12:38:47 +01:00
Marcel Lorenz
7c54847dc2
diffutils: update to 3.5
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 12:37:35 +01:00
Matthias Fischer
2ac05ca54c
strongswan 5.5.0: update for rootfile
...
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 12:25:46 +01:00
Dirk Wagner
702bd2cd98
asterisk addon: update to 11.23.1
...
Changelog: http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11-current
Signed-off-by: Dirk Wagner <dirk.wagner@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 12:25:46 +01:00
Dirk Wagner
e0b76ebc55
monit addon: update to 5.19.0
...
See changelog https://mmonit.com/monit/changes for details.
Signed-off-by: Dirk Wagner <dirk.wagner@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 12:25:46 +01:00
Jonatan Schlag
4c8f144e58
Fix URL to list of public name servers in dns.cgi
...
We have only one english wiki, so the link to the list of public
dns servers can point directly to the right page.
(The link was also not correct).
Fixes : #11191
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 12:25:46 +01:00
Arne Fitzenreiter
3ce7662434
Merge remote-tracking branch 'origin/core105' into next
2016-09-23 18:49:06 +02:00
Arne Fitzenreiter
2d850c7944
core105: add openssl sse2 binaries
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-09-23 10:30:34 +02:00
Arne Fitzenreiter
e4ee7f0317
core105: fix rootfile.
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-09-22 17:44:06 +02:00