Peter Müller
3e0bab5e02
update ca-certificates CA bundle
...
Update the CA certificates list to what Mozilla NSS ships currently
(some Turktrust root CAs have been dropped).
The original file can be retrieved from:
https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt
Signed-off-by: Peter Müller <peter.mueller@link38.eu >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-05-05 20:39:50 +01:00
Arne Fitzenreiter
0d2cbbab85
Merge branch 'kernel-4.14' into next
2018-05-05 09:14:42 +02:00
Arne Fitzenreiter
c800cec71f
kernel: update to 4.14.39
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-05-03 15:37:39 +02:00
Arne Fitzenreiter
ea76b08bc3
u-boot: enable HUSH_PARSER for Iomega iConnect
...
without this if ... then ... else is not supported.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-05-02 11:39:38 +02:00
Arne Fitzenreiter
b69338e0e8
kernel: update to 4.14.38
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-04-30 12:26:30 +02:00
Arne Fitzenreiter
bf1e75985f
u-boot-kirkwood: add u-boot build for kirkwood
...
This file build IPFire (dtb, bootz) compatible versions for:
Marvell DreamPlug
Iomega iConnect Wireless
Raidsonic ICY-Box 62x0
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-04-28 10:24:16 +02:00
Arne Fitzenreiter
79dbff45cb
Merge remote-tracking branch 'origin/core120' into kernel-4.14
2018-04-28 09:09:00 +02:00
Arne Fitzenreiter
630040c830
kernel: update to 4.14.37
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-04-28 09:01:52 +02:00
Arne Fitzenreiter
e10049b357
u-boot: update buildscript
...
enable wandboard
update ident strings
distclean after every target
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-04-28 08:51:01 +02:00
Michael Tremer
196b9090f9
dma: Apply compile fix
...
dma segfaulted when built without string.h.
Fixes : #11701
Submitted upstream: https://github.com/corecode/dma/pull/58
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-04-24 12:35:51 +01:00
Michael Tremer
86fd194766
dma: Apply compile fix
...
dma segfaulted when built without string.h.
Fixes : #11701
Submitted upstream: https://github.com/corecode/dma/pull/58
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-04-24 12:34:53 +01:00
Michael Tremer
f4a91e23d9
Drop noip updater
...
This package is unused since we introduced ddns. Dropped.
Fixes : #11708
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-04-24 11:04:34 +01:00
Peter Müller
a83b738215
update ClamAV to 0.100.0
...
Update ClamAV to 0.100.0, which brings some new features and bugfixes
(release notes are available here: https://blog.clamav.net/2018/04/clamav-01000-has-been-released.html ).
Since the internal LLVM code is now deprecated and disabled by default,
patching clamav/libclamav/c++/llvm/lib/ExecutionEngine/JIT/Intercept.cpp
does not seem to be necessary anymore.
Further, the --disable-zlib-vcheck option has been removed since it
produces warnings during compilation.
Signed-off-by: Peter Müller <peter.mueller@link38.eu >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-04-23 11:20:52 +01:00
Arne Fitzenreiter
7f1b6ea3c2
kernel: update to 4.14.35
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-04-20 10:52:30 +02:00
Arne Fitzenreiter
5ca5270409
iw: update to 4.14
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-04-19 18:42:27 +02:00
Arne Fitzenreiter
da496c8b65
crda: update to 3.18
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-04-19 18:42:03 +02:00
Michael Tremer
1c28319e1e
squid-accounting: Do not make menu entry executable
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-04-19 15:38:20 +01:00
Michael Tremer
1d95329925
squid-accounting: Do not make translations executable
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-04-19 15:37:58 +01:00
Michael Tremer
d0d2e8c4ad
squid-accounting: Install Turkish translation
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-04-19 15:37:28 +01:00
Michael Tremer
bbaa7993bd
wio: Translation files do not need to be executable
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-04-17 13:50:02 +01:00
Michael Tremer
5990b2882b
wio: Actually install Turkish translation
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-04-17 13:49:41 +01:00
Ersan Yildirim
f8bb9b1578
Update Turkish translation and add translation for WIO and squid accounting
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-04-17 09:47:48 +01:00
Arne Fitzenreiter
20406699e3
grub: update to 2.02
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-04-17 06:10:06 +02:00
Arne Fitzenreiter
69acde2ecd
acpid: build also on arm
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-04-14 18:42:00 +02:00
Arne Fitzenreiter
3509cd985f
bump packages
...
the old packages are linked against removed libs
fixes: 11685
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-04-14 16:17:48 +02:00
Arne Fitzenreiter
2c1a6768d0
bump packages
...
the old packages are linked against removed libs
fixes: 11685
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-04-14 16:14:31 +02:00
Arne Fitzenreiter
9a2ac6c3da
kernel: update to 4.14.34
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-04-12 17:17:08 +02:00
Arne Fitzenreiter
6b56624445
flash-images: merge normal and scon to one image.
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-04-12 16:36:31 +02:00
Wolfgang Apolinarski
ff2b65c193
Updated Apache 2.4
...
- Updated Apache from 2.4.29 to 2.4.33
- Updated Apr from 1.6.1 to 1.6.3
- Updated Apr-Util from 1.6.0 to 1.6.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-04-11 20:03:53 +01:00
Matthias Fischer
4217b4b6d8
beep 1.3: Fixes for CVE-2018-0492
...
For details see:
https://src.fedoraproject.org/cgit/rpms/beep.git
https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-0492
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-04-11 20:03:19 +01:00
Arne Fitzenreiter
d1d06e66c0
kernel: update to 4.14.33
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-04-11 19:39:48 +02:00
Arne Fitzenreiter
96a2ff029e
kernel: update config
...
disable isdn
disable audit
disable profiling on arm
disable scsi driver on arm
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-04-11 18:36:57 +02:00
Arne Fitzenreiter
6703371d2d
Merge remote-tracking branch 'origin/core120' into kernel-4.14
2018-04-02 17:11:45 +02:00
Michael Tremer
4d888e6854
curl: Drop old compatibility symlink
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-04-02 15:50:09 +01:00
Arne Fitzenreiter
0d98de5a44
kernel: update to 4.14.32
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-04-01 16:15:27 +02:00
Arne Fitzenreiter
302dba205b
Merge remote-tracking branch 'origin/master' into kernel-4.14
2018-03-30 10:26:01 +02:00
Arne Fitzenreiter
018a19af64
kernel: update to 4.14.31
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-03-30 10:21:49 +02:00
Arne Fitzenreiter
36600cef36
Merge branch 'core119' into next
2018-03-30 09:35:28 +02:00
Michael Tremer
d9e656bb82
asterisk: Ship documentation
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-03-27 20:56:31 +01:00
Michael Tremer
d3cd99830a
fetchmail: Permit building without SSLv3
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-03-27 20:53:31 +01:00
Michael Tremer
76f422025f
openssl: Update to 1.0.2o
...
CVE-2018-0739 (OpenSSL advisory) [Moderate severity] 27 March 2018:
Constructed ASN.1 types with a recursive definition (such as can be
found in PKCS7) could eventually exceed the stack given malicious
input with excessive recursion. This could result in a Denial Of
Service attack. There are no such structures used within SSL/TLS
that come from untrusted sources so this is considered safe.
Reported by OSS-fuzz.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-03-27 16:05:07 +01:00
Michael Tremer
166ceacd6b
openssl: Update to 1.1.0h
...
CVE-2018-0739 (OpenSSL advisory) [Moderate severity] 27 March 2018:
Constructed ASN.1 types with a recursive definition (such as can be
found in PKCS7) could eventually exceed the stack given malicious
input with excessive recursion. This could result in a Denial Of
Service attack. There are no such structures used within SSL/TLS
that come from untrusted sources so this is considered safe.
Reported by OSS-fuzz.
This patch also entirely removes support for SSLv3. The patch to
disable it didn't apply and since nobody has been using this before,
we will not compile it into OpenSSL any more.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-03-27 16:03:44 +01:00
Peter Müller
dd48a7aac8
curl: update to 7.59.0
...
Update curl to 7.59.0 which fixes a number of bugs and
some minor security issues.
Signed-off-by: Peter Müller <peter.mueller@link38.eu >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-03-26 19:03:29 +01:00
Peter Müller
689fed340a
gnupg: update to 1.4.22
...
Update GnuPG to 1.4.22, which fixes some security vulnerabilities,
such as the memory side channel attack CVE-2017-7526.
Signed-off-by: Peter Müller <peter.mueller@link38.eu >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-03-26 19:03:24 +01:00
Arne Fitzenreiter
66b5b4d12c
kernel: update to 4.14.30
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-03-25 20:26:47 +02:00
Arne Fitzenreiter
37b86fa99b
xr819-firmware: add firmware for xradio xr-819 wlan
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-03-25 13:27:03 +02:00
Arne Fitzenreiter
0a21d63f26
kernel: updated arm config and image build
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-03-25 11:41:20 +02:00
Arne Fitzenreiter
ea9d53c822
inittab: change tty1 to console
...
this reduce the differences between tty and scon installations
and make it easier to switch between.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-03-24 13:26:32 +01:00
Arne Fitzenreiter
5bc33236ca
swconfig: remove old swconfig utility
...
this is not compatible with kernel 4.14
todo: replace swconfig calls in initskript
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-03-24 12:49:10 +01:00
Arne Fitzenreiter
4df5cc2f75
rpi-firmware: update to 2018-03-16
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-03-24 12:41:57 +01:00