Commit Graph

10307 Commits

Author SHA1 Message Date
Arne Fitzenreiter
b29c97b168 unbound: Test upstream name servers before using
unbound has some trouble with validating DNSSEC-enabled
domains when the upstream name server is stripping signatures
from the authoritative responses.

This script now checks that, removes any broken upstream
name servers from the list and prints a warning.

If all name servers fail the test, unbound falls back
into recursor mode.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-10-02 15:25:23 +02:00
Arne Fitzenreiter
f58002a83f core106: Add DNS root key to exclude list
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-10-02 13:36:07 +02:00
Arne Fitzenreiter
9f50355a8c unbound: Update to 1.5.10
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-10-02 13:35:45 +02:00
Michael Tremer
a1de9f6fc9 core106: Ship updated /etc/login.defs
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-10-01 18:56:42 +01:00
Michael Tremer
80bc60228b unbound: Print nicer error message when already running
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-10-01 18:55:23 +01:00
Michael Tremer
46d8d50f45 unbound: Start unbound when invoked by DHCP scripts
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-10-01 18:52:07 +01:00
Michael Tremer
da31472505 shadow-utils: Create standard set of configuration files
Previously we copied the default configuration from the upstream
package and modified that. Unfortunately a patch and a sed command
changed the file which resulted in unwanted changes.

This patch removes the patch and sed command and adds a new set
of configuration files that just need to be copied to the system.

Fixes #11195

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-10-01 18:42:18 +01:00
Arne Fitzenreiter
60fc489b04 attr: rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-10-01 15:17:37 +02:00
Arne Fitzenreiter
829435bea3 ntp: fix wait for red if dhcp or wpasupplicant is running.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-09-27 20:15:53 +02:00
Arne Fitzenreiter
3cf764f338 samba: default enable SMBv2.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-09-27 19:38:38 +02:00
Arne Fitzenreiter
b547554aea core106: ship mt7601u firmware.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-09-27 19:20:14 +02:00
Arne Fitzenreiter
dee3be75f9 mpfr: fix missing eof in rootfile.
this is the reason for missing mt7601u firmware.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-09-27 19:18:21 +02:00
Michael Tremer
92aebbcddd Revert "libjpeg: update to 1.4.2"
This reverts commit feba68e4af.

Breaks building netpbm

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-27 09:44:49 +01:00
Arne Fitzenreiter
01176164b5 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2016-09-26 23:18:30 +02:00
Arne Fitzenreiter
de48b89ca1 Revert "Revert "tcl: update to 8.6.6""
with new krb5 also the tcl update works.
This reverts commit 053c554822.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-09-26 23:17:08 +02:00
Michael Tremer
e26a93322d core106: Add recently updated packages, etc.
This update removes dnsmasq and replaces it with unbound.

Also many packages are updated and shipped.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-26 21:03:33 +01:00
Michael Tremer
59bddc7989 Start Core Update 106
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-26 20:25:22 +01:00
Marcel Lorenz
feba68e4af libjpeg: update to 1.4.2
The old libjpeg is renamed to libjpeg-compat
The compat makes the old libs maintainable

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Reviewed-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-26 20:18:25 +01:00
Arne Fitzenreiter
b8987235d2 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2016-09-26 18:53:49 +02:00
Arne Fitzenreiter
724c0b8e4b attr: rootfile update.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-09-26 18:51:27 +02:00
Jonatan Schlag
4141e0aad1 Update krb5 to 1.14.4
This commit updates krb5 to version 1.14.4
The patch is removed, because he is upstream since 1.12.2.
The samba version is incremented, to link samba against the new krb5
version. Otherwise samba for example is linked against
/usr/lib/libkdb5.so.7 but the current version is /usr/lib/libkdb5.so.8

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-26 14:42:08 +01:00
Michael Tremer
78c3ea61b2 openssl: Update to 1.0.2j
Missing CRL sanity check (CVE-2016-7052)
========================================

Severity: Moderate

This issue only affects OpenSSL 1.0.2i, released on 22nd September 2016.

A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.

OpenSSL 1.0.2i users should upgrade to 1.0.2j

The issue was reported to OpenSSL on 22nd September 2016 by Bruce Stephens and
Thomas Jakobi. The fix was developed by Matt Caswell of the OpenSSL development
team.

https://www.openssl.org/news/secadv/20160926.txt

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-26 14:37:20 +01:00
Arne Fitzenreiter
def1ad3e94 rootfile updates: attr, ed, gawk
Check rootfiles before commit !!!

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-09-26 13:08:02 +02:00
Arne Fitzenreiter
053c554822 Revert "tcl: update to 8.6.6"
breaks kerberos (krb5) build.

This reverts commit 282dfe0bb9.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-09-26 07:17:04 +02:00
Arne Fitzenreiter
e70d2dc27d transmission: update to 2.92
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-09-24 16:44:47 +02:00
Marcel Lorenz
1031bcee20 iproute2: update to 4.7.0
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 13:11:30 +01:00
Marcel Lorenz
54a59fd892 usb_modeswitch_data: update to 20160803
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 13:08:57 +01:00
Marcel Lorenz
96f333a627 usb_modeswitch: update to 2.4.0
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 13:08:56 +01:00
Marcel Lorenz
2429b9210f ipset: update to 6.29
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 13:07:53 +01:00
Marcel Lorenz
3fc734f0f9 libmnl: update to 1.0.
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 13:07:13 +01:00
Marcel Lorenz
0e7699cbb5 libnetfilter_conntrack: update to 1.0.6
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 13:06:53 +01:00
Marcel Lorenz
087fee9c6a attr: update to 2.4.47
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 13:05:38 +01:00
Marcel Lorenz
6f36046c81 expat: update to 2.2.0
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 13:04:42 +01:00
Marcel Lorenz
b4b56b4f5c make: update to 4.2.1
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 13:03:59 +01:00
Marcel Lorenz
cde96f746a file: update to 5.28
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 12:56:09 +01:00
Michael Tremer
1c7a3c56ef Revert "strongswan 5.5.0: update for rootfile"
The padlock module is only built on i586

This reverts commit 2ac05ca54c.
2016-09-24 12:55:24 +01:00
Marcel Lorenz
345f1f3c0b gettext: update to 0.19.8.1
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 12:47:16 +01:00
Marcel Lorenz
b48a6c971e make.sh: add autoamke to toolchain to fix coreutils build fail
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 12:41:42 +01:00
Marcel Lorenz
35f37bf02b pkg-config: update lfs file to build with new dejagnu
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 12:41:41 +01:00
Marcel Lorenz
a7054dd83c dejagnu: update to 1.6
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 12:41:39 +01:00
Marcel Lorenz
282dfe0bb9 tcl: update to 8.6.6
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 12:39:41 +01:00
Marcel Lorenz
b48c31167b flex: update to 2.6.1
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 12:38:47 +01:00
Marcel Lorenz
7c54847dc2 diffutils: update to 3.5
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 12:37:35 +01:00
Matthias Fischer
2ac05ca54c strongswan 5.5.0: update for rootfile
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 12:25:46 +01:00
Dirk Wagner
702bd2cd98 asterisk addon: update to 11.23.1
Changelog: http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11-current

Signed-off-by: Dirk Wagner <dirk.wagner@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 12:25:46 +01:00
Dirk Wagner
e0b76ebc55 monit addon: update to 5.19.0
See changelog https://mmonit.com/monit/changes for details.

Signed-off-by: Dirk Wagner <dirk.wagner@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 12:25:46 +01:00
Jonatan Schlag
4c8f144e58 Fix URL to list of public name servers in dns.cgi
We have only one english wiki, so the link to the list of public
dns servers can point directly to the right page.
(The link was also not correct).

Fixes: #11191

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 12:25:46 +01:00
Arne Fitzenreiter
3ce7662434 Merge remote-tracking branch 'origin/core105' into next 2016-09-23 18:49:06 +02:00
Arne Fitzenreiter
2d850c7944 core105: add openssl sse2 binaries
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-09-23 10:30:34 +02:00
Arne Fitzenreiter
e4ee7f0317 core105: fix rootfile.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-09-22 17:44:06 +02:00