Commit Graph

2798 Commits

Author SHA1 Message Date
Matthias Fischer
bb91c2f744 squid init: small cosmetic fixes
- Deleted a few absolutely unneeded tabs.
- Inserted/deleted some needed/unnecessary line breaks.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-15 11:41:25 +01:00
Arne Fitzenreiter
ef553dccc8 linux-pae: fix typo at remove meta on non-pae systems.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-11 21:00:29 +02:00
Arne Fitzenreiter
eb797e6ec0 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2016-05-11 20:59:15 +02:00
Matthias Fischer
e0cba8eea9 squid 3.4: remove obsolete patch files
Obsolete, no longer needed.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-11 15:46:58 +01:00
Arne Fitzenreiter
3917eadc29 initskripts: remove obsolete checkfstab
the file update the bootdevice to uuid in fstab and grub1 config.
this is not needed since we use uuid at default and grub2

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-06 15:40:38 +02:00
Arne Fitzenreiter
f61b838fb0 linux-pae: prevent install on non pae systems
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-06 15:16:12 +02:00
Arne Fitzenreiter
4558108c4d clamav: rework initskript
display download wait, increase time to 15min and
remove tmp files at freshclam terminate.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-06 11:22:05 +02:00
Arne Fitzenreiter
c594bd17b1 Merge remote-tracking branch 'origin/master' into next 2016-05-04 09:14:29 +02:00
Arne Fitzenreiter
d25d7bfccf openssl: security update to 1.0.2g
see https://www.openssl.org/news/secadv/20160503.txt for details

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-03 21:28:28 +02:00
Arne Fitzenreiter
e78d9e4fc8 clamav: save signature database at update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-03 11:02:18 +02:00
Michael Tremer
1a26eca66e squid: Add forgetten patch file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-29 21:59:50 +01:00
Michael Tremer
b5a50b494e rtpproxy: Add initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-29 21:07:13 +01:00
Matthias Fischer
77d0467c05 squid: Update to 3.5.17
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-29 18:25:08 +01:00
Michael Tremer
3d7e6b4b61 setup: Show more than 6 NICs
http://lists.ipfire.org/pipermail/development/2016-April/002074.html

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-29 13:23:24 +01:00
Arne Fitzenreiter
c0119cfb37 samba: import rpc server and client fixes.
should fix: #11110

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-04-28 17:04:58 +02:00
Michael Tremer
54ea98e318 nfs: Fix whitespace issues in nfs-server initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:21:50 +01:00
Jonatan Schlag
54cc2c4e5d nfs: Fixes for NFS server
Fixes: #11098
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:20:15 +01:00
Matthias Fischer
198c39265b squid 3.4.14: latest patches, sorted options
The 'configure'-options were sorted (kind of) to get a better overview.

Added latest patches from upstream.

Changed '--enable-async-io=8' to '--enable-async-io=16' because of
http://www.squid-cache.org/mail-archive/squid-users/200705/0768.html :

"The default number of threads is dependent on the number of aufs
cache_dir lines, based on a reasonable estimate of how the code behaves."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:19:29 +01:00
Arne Fitzenreiter
875bd87bbd backports: ath9k fix ht40 init.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-04-25 18:02:53 +02:00
Arne Fitzenreiter
bb28d8913a Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2016-04-20 17:45:49 +02:00
Michael Tremer
8e7c5e65ad firewall: Fix connection tracking for PPTP
GRE connections were not correctly forwarded without the helper
being enabled. Choosing the wrong protocol here did not allow
us to load it properly.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-20 16:04:24 +01:00
Arne Fitzenreiter
23bb683902 firewall: fix nat module load for application layer gateways
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-04-20 10:19:46 +02:00
Sascha Kilian
41a8f7f3cc lcdproc: Update to 0.5.7
Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-14 11:20:56 +01:00
Arne Fitzenreiter
77ecb239d3 samba: import RHEL security fixes.
CVE-2015-7560
CVE-2016-2110
CVE-2016-2111
CVE-2016-2112
CVE-2016-2115
CVE-2016-2118 aka Badlock
CVE-2015-5370

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-04-13 22:25:14 +02:00
Michael Tremer
5208ceedd9 installer: Force overwriting EXT4 FS
On 64 bit systems, the installation fails if a previous XFS FS
is detected on the partition an EXT4 FS should be formatted.

This does not happen on 32 bit systems.

Fixes: #11091

Reported-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Tested-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
2016-04-11 10:20:00 +01:00
Jonatan Schlag
5a9c93964b New package iperf3
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-05 23:47:36 +01:00
Matthias Fischer
c07053012f pcre 8.38: latest patches from upstream (LFS)
* Fix auto-callout (?# comment bug.
* Fix negated POSIX class within negated overall class UCP bug.
* Fix bug for isolated \E between an item and its qualifier
when auto callout is set.
* Give error for regexec with pmatch=NULL and REG_STARTEND set.
* Allow for up to 32-bit numbers in the ordin() function in  pcregrep.
* Fix \Q\E before qualifier bug when auto callouts are enabled.
* Fix /x bug when pattern starts with white space and (?-x).
* Fix copy named substring bug.
* Fix (by hacking) another length computation issue.
* Fix get_substring_list() bug when \K is used in an assertion.
* Fix pcretest bad behaviour for callout in lookbehind.
* Fix workspace overflow for (*ACCEPT) with deeply nested parentheses.
* Yet another duplicate name bugfix by overestimating the
memory needed  (i.e. another hack - PCRE2 has this "properly" fixed).
* Fix pcretest loop for global matching with an ovector size less than 2.
* Fix non-diagnosis of missing assertion after (?(?C).

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-05 22:56:33 +01:00
Matthias Fischer
8e6421d78e squid 3.4.14: Bugfix for #4323 (Netfilter broken cross-includes with Linux 4.2)
For details see: http://bugs.squid-cache.org/show_bug.cgi?id=4323

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-05 22:56:04 +01:00
Michael Tremer
bdb319c0ca squid: Patch SQUID-2016:3/CVE-2016-3947
http://www.squid-cache.org/Advisories/SQUID-2016_3.txt

 Due to a buffer overrun Squid pinger binary is vulnerable to
 denial of service or information leak attack when processing
 ICMPv6 packets.

 This bug also permits the server response to manipulate other
 ICMP and ICMPv6 queries processing to cause information leak.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-05 22:52:54 +01:00
Arne Fitzenreiter
b3b5bbb95a Merge branch 'master' into next 2016-04-01 13:29:40 +02:00
Arne Fitzenreiter
b64110cfd5 igb: fix hung at dev_get_stats()
without this igb can bring the whole userspace to hung
with "cpu_stuck for more than 22s". I don't understand
why this bug is set to "wont-fix" at the bugtracker.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-04-01 08:20:36 +02:00
Jonatan Schlag
4ffb9f95ad New package dmidecode
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-03-31 13:43:56 +01:00
Michael Tremer
f1a015425b pcre: Delete old patches
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-03-31 13:35:57 +01:00
Jonatan Schlag
a365d9d04b add a patch for ebtables (to fix the problem with usr local)
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-03-29 14:13:35 +01:00
Arne Fitzenreiter
046894ab7f Merge remote-tracking branch 'origin/master' into next 2016-03-27 22:17:16 +02:00
Arne Fitzenreiter
ed974e08c5 hostapd: fix crash at txpower set on ath10k
ath10k generate a fault if iwconfig try to set txpower
while the device is down.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-26 15:35:31 +01:00
Arne Fitzenreiter
36b2adc9ed backports: ath10k fix logspam if channel was not set.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-26 15:31:32 +01:00
Arne Fitzenreiter
545c15b0a1 kernel: add PC Engines(TM) APU2 LED driver 2016-03-26 10:15:45 +01:00
Arne Fitzenreiter
9a7a6c52ed kernel: k10temp: add family 16h model 30h pci id.
used by AMD GX-412TC in PC Engines(TM) APU 2

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-26 10:08:18 +01:00
Marcel Lorenz
44c63c9612 mpfr: update to 3.1.3
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-03-21 21:55:28 +00:00
Arne Fitzenreiter
33513817fa set version to IPFire 2.19 core100
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-20 09:36:33 +01:00
Arne Fitzenreiter
96e31c9817 ntp: wait for connection if dhcpcd is running
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-18 19:26:39 +01:00
Arne Fitzenreiter
224401de72 linux-pae: add root (hd0) to grub.conf for virt install.
jiffybox will not load the kernel without this entry.
not tested on citrix yet.
2016-03-16 23:09:32 +01:00
Arne Fitzenreiter
8649a31ed0 u-boot: fix fat16 reader 2016-03-16 22:58:21 +01:00
Michael Tremer
46ce813e33 setup: Fix segmentation fault with more than four NICs found
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-03-10 19:22:04 +00:00
Arne Fitzenreiter
822b4313d1 kernel: update to 3.14.63
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-05 17:09:32 +01:00
Arne Fitzenreiter
4a6cfe51a1 Merge remote-tracking branch 'origin/master' into next
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-04 07:09:02 +01:00
Arne Fitzenreiter
353e08cd77 openssl: compile with sslv2 support but disable
the new default breaks the ABI so we need to compile in but
disable it with a patch.
2016-03-02 21:31:07 +01:00
Arne Fitzenreiter
5d95fd5af1 Revert "python-m2crypto: remove SSLv2_method"
This reverts commit d86a249286.
2016-03-02 21:13:31 +01:00
Arne Fitzenreiter
d86a249286 python-m2crypto: remove SSLv2_method
this is removed by OpenSSL 1.0.2g

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-01 22:25:55 +01:00