Commit Graph

11738 Commits

Author SHA1 Message Date
Arne Fitzenreiter
da496c8b65 crda: update to 3.18
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-04-19 18:42:03 +02:00
Arne Fitzenreiter
a9203b4f5b kernel: i586 enable cs5535 gpio module
this modul is needed for alix led support

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-04-18 06:11:15 +02:00
Arne Fitzenreiter
c4172fad43 firstsetup: fix disabling tty's on scon mode
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-04-17 13:42:17 +02:00
Arne Fitzenreiter
20406699e3 grub: update to 2.02
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-04-17 06:10:06 +02:00
Arne Fitzenreiter
cd99c47371 u-boot: fix typo in startscript
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-04-16 18:15:12 +02:00
Arne Fitzenreiter
eef0d706e8 acpid: start also if kernel has no acpi support.
acpid is also needed for gpio and hid powerbuttons if there is no
real acpi support.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-04-16 18:12:24 +02:00
Arne Fitzenreiter
26d09124b9 Merge branch 'kernel-5.14' of git.ipfire.org:/pub/git/people/arne_f/ipfire-2.x into kernel-4.14 2018-04-14 18:45:02 +02:00
Arne Fitzenreiter
0245f3b6e1 screen: build before elfutils
if it buils after elfutils it links against libelf which is an addon

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-04-14 18:42:52 +02:00
Arne Fitzenreiter
69acde2ecd acpid: build also on arm
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-04-14 18:42:00 +02:00
Arne Fitzenreiter
9a2ac6c3da kernel: update to 4.14.34
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-04-12 17:17:08 +02:00
Arne Fitzenreiter
6b56624445 flash-images: merge normal and scon to one image.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-04-12 16:36:31 +02:00
Arne Fitzenreiter
d1d06e66c0 kernel: update to 4.14.33
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-04-11 19:39:48 +02:00
Arne Fitzenreiter
96a2ff029e kernel: update config
disable isdn
disable audit
disable profiling on arm
disable scsi driver on arm

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-04-11 18:36:57 +02:00
Arne Fitzenreiter
f46d604de2 kernel: fix kirkwood config
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-04-09 07:52:46 +00:00
Arne Fitzenreiter
592896d2f4 u-boot: update bootscript to boot from other devices than mmc
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-04-03 05:26:54 +00:00
Arne Fitzenreiter
783f6aa36d Merge remote-tracking branch 'origin/master' into kernel-4.14 2018-04-03 20:15:58 +02:00
Michael Tremer
d6d058a56b core120: Update pakfire keystore
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-04-03 17:34:24 +01:00
Michael Tremer
6ae5439e5c core120: Ship changed pakfire files
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-04-03 17:33:04 +01:00
Michael Tremer
9a507db2cb pakfire: Store key material in own directory
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-04-03 17:31:50 +01:00
Arne Fitzenreiter
6703371d2d Merge remote-tracking branch 'origin/core120' into kernel-4.14 2018-04-02 17:11:45 +02:00
Arne Fitzenreiter
718119b897 Merge branch 'master' into core119 2018-04-02 16:56:02 +02:00
Michael Tremer
4d888e6854 curl: Drop old compatibility symlink
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-04-02 15:50:09 +01:00
Michael Tremer
e7cda9ac7f curl: Rootfile update
Main library was missing

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-04-02 15:48:50 +01:00
Michael Tremer
0471d32b85 core120: Import new pakfire keys
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-04-02 15:46:40 +01:00
Michael Tremer
74e715a5a2 pakfire: Import old key, too
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-04-02 15:46:40 +01:00
Michael Tremer
397d3a8e15 pakfire: Rename new key to pakfire-2018.key
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-04-02 15:46:40 +01:00
Michael Tremer
3e29608f82 pakfire: Validate signatures when multiple are available
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-04-02 15:45:48 +01:00
Arne Fitzenreiter
3e7dee5951 core120: add pakfire script to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-04-02 11:22:19 +02:00
Arne Fitzenreiter
0d98de5a44 kernel: update to 4.14.32
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-04-01 16:15:27 +02:00
Arne Fitzenreiter
1b06675c00 openssl: update rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-31 10:02:01 +02:00
Arne Fitzenreiter
e12d216eec kernel: x86_64 rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-31 09:56:48 +02:00
Arne Fitzenreiter
b465322d7c kernel: x86_64 enable DEVFREQ modules
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-30 16:39:02 +02:00
Arne Fitzenreiter
302dba205b Merge remote-tracking branch 'origin/master' into kernel-4.14 2018-03-30 10:26:01 +02:00
Arne Fitzenreiter
018a19af64 kernel: update to 4.14.31
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-30 10:21:49 +02:00
Arne Fitzenreiter
36600cef36 Merge branch 'core119' into next 2018-03-30 09:35:28 +02:00
Arne Fitzenreiter
6a8b2ef977 core120: set pafire version to 120
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-30 09:25:06 +02:00
Michael Tremer
f7e9c14842 Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-29 13:49:44 +01:00
Michael Tremer
4b072d640e pakfire: Use upstream proxy for HTTPS, too
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-28 16:55:18 +01:00
Peter Müller
66a0f3646a use protocol defined in server-list.db for mirror communication
For each mirror server, a protocol can be specified in the
server-list.db database. However, it was not used for the
actual URL query to a mirror before.

This might be useful for deploy HTTPS pinning for Pakfire.
If a mirror is known to support HTTPS, all queries to it
will be made with this protocol.

This saves some overhead if HTTPS is enforced on a mirror
via 301 redirects. To enable this, the server-list.db
needs to be adjusted.

The second version of this patch only handles protocols
HTTP and HTTPS, since we do not expect anything else here
at the moment.

Partially fixes #11661.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-28 16:42:21 +01:00
Michael Tremer
9f0999325d unbound: Fix crash on startup
Zone names should not be terminated with a dot.

Fixes: #11689

Reported-by: Pontus Larsson <pontuslarsson51@yahoo.se>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-28 16:39:35 +01:00
Michael Tremer
d97f43b309 Rootfile update for curl
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-28 11:22:06 +01:00
Michael Tremer
d9e656bb82 asterisk: Ship documentation
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-27 20:56:31 +01:00
Michael Tremer
d3cd99830a fetchmail: Permit building without SSLv3
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-27 20:53:31 +01:00
Michael Tremer
76f422025f openssl: Update to 1.0.2o
CVE-2018-0739 (OpenSSL advisory) [Moderate severity] 27 March 2018:

Constructed ASN.1 types with a recursive definition (such as can be
found in PKCS7) could eventually exceed the stack given malicious
input with excessive recursion. This could result in a Denial Of
Service attack. There are no such structures used within SSL/TLS
that come from untrusted sources so this is considered safe.
Reported by OSS-fuzz.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-27 16:05:07 +01:00
Michael Tremer
166ceacd6b openssl: Update to 1.1.0h
CVE-2018-0739 (OpenSSL advisory) [Moderate severity] 27 March 2018:

Constructed ASN.1 types with a recursive definition (such as can be
found in PKCS7) could eventually exceed the stack given malicious
input with excessive recursion. This could result in a Denial Of
Service attack. There are no such structures used within SSL/TLS
that come from untrusted sources so this is considered safe.
Reported by OSS-fuzz.

This patch also entirely removes support for SSLv3. The patch to
disable it didn't apply and since nobody has been using this before,
we will not compile it into OpenSSL any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-27 16:03:44 +01:00
Michael Tremer
c98304604b core120: Ship updated QoS script and gnupg
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-26 19:04:41 +01:00
Matthias Fischer
be7878d5c9 Fix typo in 'makeqosscripts.pl'
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-26 19:03:30 +01:00
Peter Müller
dd48a7aac8 curl: update to 7.59.0
Update curl to 7.59.0 which fixes a number of bugs and
some minor security issues.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-26 19:03:29 +01:00
Peter Müller
689fed340a gnupg: update to 1.4.22
Update GnuPG to 1.4.22, which fixes some security vulnerabilities,
such as the memory side channel attack CVE-2017-7526.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-26 19:03:24 +01:00
Arne Fitzenreiter
50bee0291d xr819-firmware: move rootfile to common
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-03-26 07:29:51 +02:00