Commit Graph

6843 Commits

Author SHA1 Message Date
Arne Fitzenreiter
e5dab730dc kernel: fix messed up armv5tel rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:37 +02:00
Arne Fitzenreiter
393841f16a kerneltest: add dhcpcd to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:37 +02:00
Arne Fitzenreiter
66acb7f166 initskripts: networking: fix dhcpcd shutdown
with kernel 5.10 dhcpcd hung at shutdown if red was a wireless client
becuase there was two running instances. This change repeat the
dcpcd -k call.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:37 +02:00
Arne Fitzenreiter
9d1bffe083 kernel: arm* disable alg modules
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:37 +02:00
Arne Fitzenreiter
82b0e0f13d kernel: x86* disable alg modules
the application layer gateway modules can used to bypass the nat
via nat slipstreaming. I had disabled all of them. If one is really needed
we can reenable it later.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:37 +02:00
Arne Fitzenreiter
2d2476c5ae kerneltest: add leds initskript.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:37 +02:00
Arne Fitzenreiter
c70958f543 kerneltest: add xtabkes-addons, linux-atm, u-boot and firewall initskript
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:37 +02:00
Arne Fitzenreiter
7d9d6e7b03 kernel: update aarch64 config and rootfiles
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:37 +02:00
Arne Fitzenreiter
eefce9ba2e kerneltest: remove intel microcode and update ssh settings
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:37 +02:00
Arne Fitzenreiter
f721328ce2 kernel: update i586 and x86_64 rootfiles
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:37 +02:00
Arne Fitzenreiter
3c3d0be877 kernel: x86_64 rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:37 +02:00
Arne Fitzenreiter
4ef7606084 u-boot-friendlyarm: disable build
this does not built with kernel-5.10 (headers?)

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:36 +02:00
Arne Fitzenreiter
d4befb6fa1 kernel: update armv5tel config and rootfiles
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:36 +02:00
Arne Fitzenreiter
7633c52052 add kerneltest core update to build installable package for testing
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:36 +02:00
Arne Fitzenreiter
551756d35d kernel: i586 and x86_64 rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:36 +02:00
Michael Tremer
904386624c kernel: Compile RNG drivers into the kernel
The kernel will try to gather entropy really early in the boot process
where those device drivers might not have been loaded yet. They are
small and can therefore be compiled into the kernel like we already do
on ARM.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-07-05 07:42:36 +02:00
Arne Fitzenreiter
c062c7700f kernel: update to 5.10.5
todo: add armv5tel and aarch64 config and rootfiles.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:36 +02:00
Arne Fitzenreiter
696cd0cc6d xtables-addons: update to 3.13
this is needed for kernel 5.10.x

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:36 +02:00
Michael Tremer
92a5ad86e7 core158: Ship ppp
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-07-02 14:43:01 +00:00
Michael Tremer
2d6e633d7f Revert "ppp: update to 2.4.9"
This reverts commit 0cd9215b56.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-07-02 14:38:28 +00:00
Michael Tremer
5996c28157 Revert "python-six: Removal of python2 & 3 addon versions of six"
This reverts commit 3a61ae73fa.

This module is required by awscli.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-07-01 17:16:09 +00:00
Michael Tremer
29e59d8c3e core158: Fully terminate apache before restarting it
Asking apache to restart itself fails when the binary is changed and
some symbols cannot be resolved. We therefore terminate all processes
and start them again.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-07-01 10:10:17 +00:00
Michael Tremer
17f0494bf2 core158: Fix name of vnstat initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-07-01 10:09:40 +00:00
Michael Tremer
0a48e5694b core158: Actually drop motion instead of monit
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-28 19:29:27 +00:00
Michael Tremer
c304035042 core158: Uninstall all dropped add-ons
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-28 17:32:52 +00:00
Michael Tremer
27ca856f72 Merge branch 'core157' 2021-06-21 19:41:25 +00:00
Michael Tremer
05de8ec3c8 core157: Ship lua
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-21 19:39:30 +00:00
Michael Tremer
556edb5adc Merge remote-tracking branch 'origin/next' 2021-06-21 10:04:11 +00:00
Michael Tremer
de6fd0881f Drop obsolete files from bluetooth package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-18 16:17:27 +00:00
Michael Tremer
270d7c0d37 core158: Ship web-user-interface
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-17 20:12:32 +00:00
Michael Tremer
fa7f2e219a core158: Ship xfsprogs
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-17 20:06:52 +00:00
Michael Tremer
7d72dba39d core158: Ship smartmontools
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-17 20:04:31 +00:00
Michael Tremer
30b8e6a1bd core158: Ship hwdata
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-17 20:03:58 +00:00
Adolf Belka
3514a0bc0f glib: Update to 2.68.3
- Update from 2.68.2 to 2.68.3
- Update rootfile
- Changelog
   Overview of changes in GLib 2.68.3
    * Bugs fixed:
      - #2311 testfilemonitor test leaks ip_watched_file_t struct
      - #2417 GFile: `g_file_replace_contents()` reports `G_IO_ERROR_WRONG_ETAG` when saving from a symlink
      - !2133 Backport !2128 “inotify: Fix a memory leak” to glib-2-68
      - !2137 Backport !2136 “tlscertificate: Avoid possible invalid read” to glib-2-68
      - !2141 Backport !2138 “glocalfileoutputstream: Fix ETag check when replacing through a symlink” to glib-2-68

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-17 20:02:53 +00:00
Michael Tremer
e4104affc4 core158: Ship fuse
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-17 20:02:35 +00:00
Adolf Belka
b217d8a70f fuse: Update to 3.10.4
- Update from 3.10.3 to 3.10.4
- Update of rootfile
- Changelog
   * Building of unit tests is now optional.
   * Fixed a test failure when running tests under XFS.
   * Fixed memory leaks in examples.
   * Minor documentation fixes.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-17 20:02:19 +00:00
Michael Tremer
627b84f9e9 core158: Ship sudo
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-14 09:05:34 +00:00
Michael Tremer
4a5932d55d core158: Ship libpcap
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-12 09:34:36 +00:00
Matthias Fischer
200ed6b4df libpcap: Update to 1.10.1
For details see:
http://www.tcpdump.org/libpcap-changes.txt

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-12 09:32:19 +00:00
Michael Tremer
053a582d3a ipsec-policy: Do no create DROP rules for on-demand mode
This is not necessary and gets in the way if users have SNAT rules or
other things that make the check be in the wrong place.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-11 16:15:37 +00:00
Michael Tremer
1ca8bd7aa2 core157: Fix shipping boost
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-10 18:01:00 +00:00
Michael Tremer
189d41d200 core158: Ship nettle
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-10 12:23:12 +00:00
Adolf Belka
b4cb1ed58b nettle: Update to 3.7.3
- Update from 3.7.2 to 3.7.3
- Update rootfile
- Changelog
    2021-05-22  Niels Möller  <nisse@lysator.liu.se>
	* configure.ac: Bump package version, to 3.7.3.
	  (LIBNETTLE_MINOR): Bump minor number, to 8.4.
	  (LIBHOGWEED_MINOR): Bump minor number, to 6.4.
    2021-05-17  Niels Möller  <nisse@lysator.liu.se>
	* rsa-decrypt-tr.c (rsa_decrypt_tr): Check up-front that input is
	  in range.
	* rsa-sec-decrypt.c (rsa_sec_decrypt): Likewise.
	* rsa-decrypt.c (rsa_decrypt): Likewise.
	* testsuite/rsa-encrypt-test.c (test_main): Add tests with input > n.
    2021-05-14  Niels Möller  <nisse@lysator.liu.se>
	* rsa-sign-tr.c (rsa_sec_blind): Delete mn argument.
	  (_rsa_sec_compute_root_tr): Delete mn argument, instead require
	  that input size matches key size. Rearrange use of temporary
	  storage, to support in-place operation, x == m. Update all
	  callers.
	* rsa-decrypt-tr.c (rsa_decrypt_tr): Make zero-padded copy of
	  input, for calling _rsa_sec_compute_root_tr.
	* rsa-sec-decrypt.c (rsa_sec_decrypt): Likewise.
	* testsuite/rsa-encrypt-test.c (test_main): Test calling all of
	  rsa_decrypt, rsa_decrypt_tr, and rsa_sec_decrypt with zero input.
    2021-05-06  Niels Möller  <nisse@lysator.liu.se>
	* pkcs1-sec-decrypt.c (_pkcs1_sec_decrypt): Check that message
	  length is valid, for given key size.
	* testsuite/rsa-sec-decrypt-test.c (test_main): Add test cases for
	  calls to rsa_sec_decrypt specifying a too large message length.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-10 12:22:59 +00:00
Michael Tremer
3fbad7e512 core158: Ship libxcrypt
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-10 12:22:45 +00:00
Adolf Belka
85d2bb767f libogg: Update to 1.3.5
- Update from 1.3.4 to 1.3.5
- Update rootfile
- Changelog
   Version 1.3.5 (2020 June 3)
    * Fix unsigned typedef problem on macOS.
    * Fix overflow check in ogg_sync_buffer.
    * Clean up cmake and autotools build files.
    * Remove Symbian and Apple XCode build files.
    * Fix documentation cross-reference links.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-10 12:21:56 +00:00
Michael Tremer
a906734840 core158: Ship libedit
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-10 12:21:38 +00:00
Adolf Belka
5be657270f libedit: Update to 20210522-3.1
- Update from 20210419-3.1 to 20210522-3.1
- Update rootfile
- Changelog
   2021-05-22 Jess Thrysoee
      * version-info: 0:66:0
      * all: sync with upstream source
      * src/el.c: editrc not read on systems without issetugid
            Patch by Trevor Cordes

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-10 12:21:17 +00:00
Adolf Belka
5adf0ed40c elfutils: Update to 0.185
- Update from 0.184 to 0.185
- Update rootfile
- Changelog
   Version 0.185
     debuginfod-client: Simplify curl handle reuse so downloads which
                        return an error are retried.
     elfcompress: Always exit with code 0 when the operation succeeds (even
                  when nothing was done). On error the exit code is now always 1.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-10 12:21:03 +00:00
Michael Tremer
662b1d802e core158: Ship memory.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-10 09:12:40 +00:00
Michael Tremer
65171dc956 intel-microcode: Update to 20210608
Fixes various security vulnerabilities:

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-09 17:02:11 +00:00