Commit Graph

11434 Commits

Author SHA1 Message Date
Michael Tremer
d8ac9a162c Bump toolchain version
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 13:07:38 +00:00
Michael Tremer
2dd9f3b379 Cleanup toolchain scripts
No functional changes, just some tidy up

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 12:44:37 +00:00
Michael Tremer
d32233aa1b ccache: Update to 3.4.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 12:12:08 +00:00
Michael Tremer
71196131be PAM: Drop shipped configuration
This is outdated, broken and has hardcoded passwords.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 12:09:22 +00:00
Michael Tremer
71cf8c8a6f Drop perl-DBD-mysql
This package is not used by anything and depends on MySQL
which has been dropped, too.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 12:07:29 +00:00
Michael Tremer
2d5940daca Drop MySQL
This is outdated and still on 5.0.x and nobody volunteered to
update this package.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 12:05:46 +00:00
Michael Tremer
c4713705d1 asterisk: Do not depend on MySQL any more
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 12:02:51 +00:00
Michael Tremer
4fcf8acfea postfix: Don't depend on amavis
This can be used together but there is no need to
always install amavis when someone wants to use postfix

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 11:52:07 +00:00
Michael Tremer
db116a33d6 postfix: Don't depend on MySQL any more
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 11:51:46 +00:00
Michael Tremer
abf2b05474 postfix: Don't ship our own configuration
This is outdated and half of it is not maintained any more.

Users should configure postfix themselves based on the
default configuration.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 11:50:51 +00:00
Michael Tremer
3e8ce0dd86 Drop pammysql
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 11:44:28 +00:00
Michael Tremer
e3e17107ba Drop tcpwrapper
This library has been unused for quite a while

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 11:42:47 +00:00
Michael Tremer
a350ea6dea Drop mISDN userspace tools
This is unsupported for quite a while and nobody should be using this.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 11:41:50 +00:00
Michael Tremer
922ec43f99 Drop capi4k-utils
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 11:33:51 +00:00
Michael Tremer
690a8b9d89 core119: Remove dropped lcr package during update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 11:31:14 +00:00
Michael Tremer
0d29afc2c1 core119: Import changed packages
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 11:29:53 +00:00
Michael Tremer
338087530c Start Core Update 119
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 11:22:58 +00:00
Michael Tremer
77930de834 Rootfile update for bison
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-12 11:18:01 +00:00
Erik Kapfer
ea6dd5b0ac OpenVPN: Mark unsecure ciphers and DH-parameter as 'weak' in WUI menu
64 bit block ciphers like Blowfish, TDEA and CAST5 are vulnerable to the so called 'Birthday attacks' .
    Infos for 'Sweet32' Birthday attacks can be found in here
        https://sweet32.info/ .
    An Overview of 64 bit clock ciphers can also be found in here
        http://en.citizendium.org/wiki/Block_cipher/Catalogs/Cipher_list#64-bit_blocks

1024 bit Diffie-Hellman parameter has also been marked as weak causing the 'Logjam Attack' .
   Infos for 'Logjam Attack' can be found in here
        https://weakdh.org/ .

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 23:41:42 +00:00
Michael Tremer
cb18f19307 index.cgi: Properly show IPsec subnets
Fixes: #11604

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 23:23:54 +00:00
Michael Tremer
0102fcabdb make.sh: Bump toolchain version
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
e9e3dd9fee qemu: Make it build with newer glibcs
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
c19196e1c5 nfs: Fix building with newer glibcs
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
59a6d4e439 glibc: Enable obsolete NSL
This will re-activate the deprecated NIS code on which lots of
software relies on so that we can have some extra time to migrate.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
c0878e43e1 Config: Set PREFIX either to TOOLS_DIR or /usr
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
b034e75303 make.sh: CFLAGS: There is no evidence that supports enabling retpoline in user space is a good idea
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
ce7f9c3a0e libtirpc: Fix build against newer glibcs
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
25e33293bd binutils: Update to 2.30
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
f794504ec6 dma: Don't only use TLSv1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
b349f4da63 postfix: Temporarily disable NIS
This makes postfix FTBFS because glibc has removed their
RPC headers.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
65a75e0ddf glibc: Update to 2.27
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
f1a5a25a40 flex: Patch against SEGV with newer glibc
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
840f0b9fc2 Revert "make.sh: Add -fstack-clash-protection on platforms that support it"
This reverts commit 18b82970b81a5bbd31b8922440a97e43d6f01566.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
54114eb0a5 make.sh: Enable cheap out-of-bounds checks in C++ standard library
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
e8611c9ece make.sh: Add -fstack-clash-protection on platforms that support it
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
9a9c12104c make.sh: CFLAGS remove --param=ssp-buffer-size=4
This flag is useless with -fstack-protector-strong

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
457fd09ddb pam: Update to 1.30.0
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
4720fa0d1e make.sh: make requires pkg-config to run autoconf
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
6ffe2da8c9 iproute2: Update to 4.14.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
f6b0901df9 hostname: Update to 3.20
Drops dependency to obsolete RPCSVC code in glibc.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
dca7011c1f make: Patch against SEGV when using globbing functions
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
85439ac74c toolchain: Add bison
This is required by glibc 2.27

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Arne Fitzenreiter
176b1cc62b gcc: fix gmp download
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-02-11 20:56:12 +00:00
Arne Fitzenreiter
11b5e5cb8e toolchain: update to gcc-7.3.0 and enable retpolines on x86_64 and i586
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-02-11 20:56:12 +00:00
Arne Fitzenreiter
27ee5072c5 mdadm: fix build with gcc-7 2018-02-11 20:56:12 +00:00
Arne Fitzenreiter
eaec148fd8 sarg: update to 2.3.11 (needed for gcc-7) 2018-02-11 20:56:12 +00:00
Arne Fitzenreiter
f205319ca0 powertop: update to v2.9 (needed for gcc-7) 2018-02-11 20:56:12 +00:00
Arne Fitzenreiter
60612b5aae bwm-ng: update to 0.6.1-f54b3fa (needed for gcc-7) 2018-02-11 20:56:12 +00:00
Arne Fitzenreiter
1f4e50ca4c diffultis: update to 3.1.6 (needed for gcc-7) 2018-02-11 20:56:12 +00:00
Arne Fitzenreiter
951798ed68 u-boot: link missing header for gcc-7 2018-02-11 20:56:12 +00:00