Commit Graph

11843 Commits

Author SHA1 Message Date
Michael Tremer
c98304604b core120: Ship updated QoS script and gnupg
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-26 19:04:41 +01:00
Matthias Fischer
be7878d5c9 Fix typo in 'makeqosscripts.pl'
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-26 19:03:30 +01:00
Peter Müller
dd48a7aac8 curl: update to 7.59.0
Update curl to 7.59.0 which fixes a number of bugs and
some minor security issues.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-26 19:03:29 +01:00
Peter Müller
689fed340a gnupg: update to 1.4.22
Update GnuPG to 1.4.22, which fixes some security vulnerabilities,
such as the memory side channel attack CVE-2017-7526.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-26 19:03:24 +01:00
Arne Fitzenreiter
50bee0291d xr819-firmware: move rootfile to common
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-26 07:29:51 +02:00
Arne Fitzenreiter
66b5b4d12c kernel: update to 4.14.30
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-25 20:26:47 +02:00
Arne Fitzenreiter
37b86fa99b xr819-firmware: add firmware for xradio xr-819 wlan
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-25 13:27:03 +02:00
Arne Fitzenreiter
0a21d63f26 kernel: updated arm config and image build
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-25 11:41:20 +02:00
Arne Fitzenreiter
ea9d53c822 inittab: change tty1 to console
this reduce the differences between tty and scon installations
and make it easier to switch between.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-24 13:26:32 +01:00
Arne Fitzenreiter
5bc33236ca swconfig: remove old swconfig utility
this is not compatible with kernel 4.14
todo: replace swconfig calls in initskript

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-24 12:49:10 +01:00
Arne Fitzenreiter
4df5cc2f75 rpi-firmware: update to 2018-03-16
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-24 12:41:57 +01:00
Arne Fitzenreiter
151c8dfc0b checknewlog: don't report u-boot mkimage rootfile.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-24 11:41:45 +01:00
Arne Fitzenreiter
2a0947f2e3 u-boot: update to 2018.03
todo: check wandboard version. there are internal changes to merge
the different wandboard images to one and u-boot.imx is not build
anymore. Which file is needed to boot on wandboard?

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-24 11:14:24 +01:00
Arne Fitzenreiter
832770a868 kernel: update to 4.14.29
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-22 13:16:37 +01:00
Michael Tremer
dfdfafc7af core120: Ship updated vnstat
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-20 20:36:15 +00:00
Matthias Fischer
a05af852c5 vnstat: Update to 1.18
For details see: https://humdi.net/vnstat/CHANGES

Changed "SaveInterval 5" to "SaveInterval 1" in '/etc/vnstat.conf', triggered by
https://forum.ipfire.org/viewtopic.php?f=22&t=20448 to avoid data loss with 1Gbit
connections and high traffic.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-20 20:35:30 +00:00
Michael Tremer
e7ea357cec Forgot to "git add" the new pakfire init script
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-20 11:08:58 +00:00
Michael Tremer
42deeb3b45 Revert "installer: Import the Pakfire key at install time"
This reverts commit 7d995c9f56.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-19 19:45:24 +00:00
Michael Tremer
eb68e27dd2 pakfire: Import key when system boots up
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-19 19:44:50 +00:00
Michael Tremer
5876642d17 ffmpeg: Ship libraries correctly
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-19 18:07:49 +00:00
Matthias Fischer
27ef66c26c hdparm: Update to 9.55
Changelogs against 9.53:

"hdparm-9.55:
	- added #include <sys/sysmacros.h> for major()/minor() macros

hdparm-9.54:
	- Partial revert of Jmicron changes, from Jan Friesse."

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-19 11:56:35 +00:00
Matthias Fischer
71e5a29c81 dmidecode 3.1: Added patch (Fix firmware version of TPM device)
For details see:
http://git.savannah.gnu.org/cgit/dmidecode.git/commit/?id=174387405e98cd94c627832ae23abcb9be7e5623

"Both the operator (detected by clang, reported by Xorg) and the mask
for the minor firmware version field of TPM devices were wrong."

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-19 11:56:19 +00:00
Michael Tremer
35cdaa194a Fix python-m2crypto rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-19 11:52:44 +00:00
Michael Tremer
b2318b5e35 core120: Ship updated logrotate and restart unbound
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-18 13:51:38 +00:00
Matthias Fischer
9e9fdb39e6 unbound: Update to 1.7.0
For details see:
http://www.unbound.net/download.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-18 13:49:40 +00:00
Matthias Fischer
399c2f9ccc logrotate: Update to 3.14.0
For details see:
https://github.com/logrotate/logrotate/releases

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-18 13:44:27 +00:00
Matthias Fischer
4e316ae0a0 htop: Update to 2.1.0
For details see:
https://hisham.hm/htop/index.php?page=downloads

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-18 13:44:25 +00:00
Matthias Fischer
9051f3c9d7 bind: Update to 9.11.3
For details see:
http://ftp.isc.org/isc/bind9/9.11.3/RELEASE-NOTES-bind-9.11.3.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-18 13:44:19 +00:00
Matthias Fischer
1c1c1ac238 nano: Update to 2.9.4
For details see:
https://www.nano-editor.org/news.php

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-18 13:44:14 +00:00
Matthias Fischer
8aeec0ba89 rsync: Update to 3.1.3
For details see:
https://download.samba.org/pub/rsync/src/rsync-3.1.3-NEWS

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-18 13:44:12 +00:00
Erik Kapfer
e779b6bc7a PAM: Delete old lib and symlinks
Core 119 update delivers an updated PAM whereby the libdir has been changed from /lib to /usr/lib
but the old libraries and symlinks are still presant. Since the system searches /lib before
/usr/lib , the old libs and symlinks are used which ends up in an `LIBPAM_EXTENSION_1.1' not found.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-18 13:44:04 +00:00
Arne Fitzenreiter
62777ff407 kernel: update to 4.14.27
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-16 20:49:22 +01:00
Arne Fitzenreiter
1682e5fc69 kernel: drop rpi config
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-16 20:48:56 +01:00
Erik Kapfer
cdc1a0e901 OpenVPN: Update to version 2.4.5
This is primarily a maintenance release, with further improved OpenSSL 1.1 integration, several minor bug fixes and other minor improvements.
Further information can be found in here https://github.com/OpenVPN/openvpn/blob/release/2.4/Changes.rst#version-245 and
here https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24 .

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-16 14:38:02 +00:00
Michael Tremer
35b892b0dd pakfire: Drop old key import mechanism
This was error-prone and allowed to potentially inject another
key.

Fixes: #11539
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-16 14:37:21 +00:00
Michael Tremer
7d995c9f56 installer: Import the Pakfire key at install time
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-16 14:33:42 +00:00
Michael Tremer
ceed3534e1 core120: Import new pakfire PGP key
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-16 14:28:17 +00:00
Michael Tremer
5e5c2e5413 Import new Pakfire Signing Key
We will swap the key that we use to sign Pakfire packages
since the current one is considered outdated cryptography.

Fixes: #11539

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-16 14:26:07 +00:00
Arne Fitzenreiter
bf19f5c6a0 kernel: drop rpi kernel
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-14 19:39:23 +01:00
Arne Fitzenreiter
ce8a4ba6a0 kernel: update to 4.14.26
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-13 11:37:36 +01:00
Arne Fitzenreiter
7fab74918d kernel: update to 4.14.25
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-09 23:05:06 +01:00
Stephan Feddersen
f0e9ed78a2 WIO: increment PAK_VER
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-09 15:39:56 +00:00
Stephan Feddersen via Development
c1fc92a9b8 WIO: Fix a problem with the Network-Table-Button
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-09 15:39:52 +00:00
Stephan Feddersen via Development
cc222a8e62 WIO: Fix some typos
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-09 15:39:50 +00:00
Stephan Feddersen via Development
a25c95b3a0 WIO: Update to Version 1.3.2 several changes in many files
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-09 15:39:48 +00:00
Matthias Fischer
d536c178ec ntp: Update to 4.2.8p11
For details see:
http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities

"This release addresses five security issues in ntpd:

	LOW/MEDIUM: Sec 3012 / CVE-2016-1549 / VU#961909: Sybil vulnerability: ephemeral
	association attack
		While fixed in ntp-4.2.8p7, there are significant additional protections for
		this issue in 4.2.8p11.
		Reported by Matt Van Gundy of Cisco.
	INFO/MEDIUM: Sec 3412 / CVE-2018-7182 / VU#961909: ctl_getitem(): buffer read overrun
	leads to undefined behavior and information leak
		Reported by Yihan Lian of Qihoo 360.
	LOW: Sec 3415 / CVE-2018-7170 / VU#961909: Multiple authenticated ephemeral associations
		Reported on the questions@ list.
	LOW: Sec 3453 / CVE-2018-7184 / VU#961909: Interleaved symmetric mode cannot recover
	from bad state
		Reported by Miroslav Lichvar of Red Hat.
	LOW/MEDIUM: Sec 3454 / CVE-2018-7185 / VU#961909: Unauthenticated packet can reset
	authenticated interleaved association
		Reported by Miroslav Lichvar of Red Hat.

one security issue in ntpq:

	MEDIUM: Sec 3414 / CVE-2018-7183 / VU#961909: ntpq:decodearr() can write beyond its
	buffer limit
		Reported by Michael Macnair of Thales-esecurity.com.

and provides over 33 bugfixes and 32 other improvements."

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-07 18:44:04 +00:00
Matthias Fischer
cc4816a1af clamav 0.99.4: removed gcc patch
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-07 18:43:44 +00:00
Michael Tremer
dcd60d274e core120: Ship updated qos.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-06 15:13:56 +00:00
Daniel Weismüller
20ffa7d1a8 As described in bug 11257 there is a mistake in the qos templates. The sum of the guaranteed bandwidth of the classes 101 - 120 is bigger than the available bandwidth. I adjusted the guaranteed bandwidth of the classes 101 - 104 so that each of them has a
Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-06 15:13:16 +00:00
Michael Tremer
318434affb core120: Ship updated proxy.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-06 15:12:42 +00:00