Commit Graph

4328 Commits

Author SHA1 Message Date
Matthias Fischer
c00aeae80f dnsmasq: Update to 2.76rc2
- Updated to 2.76rc2 and deleted obsolete patch files from 2.76rc1

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-16 16:04:44 +01:00
Matthias Fischer
3f877ebd25 dnsmasq: Update to 2.76rc1 - added latest patches (001-002)
Update, added latest patches and deleted obsolete patch files.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-16 16:04:39 +01:00
Matthias Fischer
4d36732fe2 dnsmasq: Update to 2.76test13 with latest patches (001-006)
Update from 'dnsmasq 2.76test10' to '2.76test13'

Includes latest patches (001-006) from upstream.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-16 16:04:19 +01:00
Matthias Fischer
15f37d7738 procps: Update to 3.2.8
For details see:
http://procps.sourceforge.net/changelog.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-16 16:03:08 +01:00
Arne Fitzenreiter
eb797e6ec0 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2016-05-11 20:59:15 +02:00
Matthias Fischer
9a4bfe0284 squid: Update to 3.5.19
Activated 'ipv6', as discussed in ipfire-list with Michael:

"I had a look what the IPv6 switch actually changes. And that is not really much.
Essentially nothing. It just probes if the system supports IPv6 and if not it
disables it internally.

http://git.ipfire.org/?p=thirdparty%2Fsquid.git&a=search&h=refs%2Fheads%2Ftrunk&st=grep&s=USE_IPV6

I think we can as well enable this."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-11 15:46:21 +01:00
Matthias Fischer
efccb43303 squid: Update to 3.5.18
Removed unecessary quotations and two configure-options, see:
ftp://ftp.fu-berlin.de/unix/www/squid/archive/3.1/squid-3.1.0.16-RELEASENOTES.html

--with-aio
Deprecated. POSIX AIO is now auto-detected and enabled.
Use --without-aio to disable, but only if you really have to.

--with-pthreads
Deprecated. pthreads library is now auto-detected and enabled.
Use --without-pthreads to disable, but only if you really have to.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-07 13:25:18 +01:00
Michael Tremer
86eda7b552 tor: Update to 0.2.7.6
Fixes #11117

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-07 13:23:28 +01:00
Arne Fitzenreiter
3917eadc29 initskripts: remove obsolete checkfstab
the file update the bootdevice to uuid in fstab and grub1 config.
this is not needed since we use uuid at default and grub2

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-06 15:40:38 +02:00
Arne Fitzenreiter
4558108c4d clamav: rework initskript
display download wait, increase time to 15min and
remove tmp files at freshclam terminate.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-06 11:22:05 +02:00
Arne Fitzenreiter
fe6e5e03d5 clamav: update to 0.99.2
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-04 16:21:58 +02:00
Arne Fitzenreiter
c594bd17b1 Merge remote-tracking branch 'origin/master' into next 2016-05-04 09:14:29 +02:00
Arne Fitzenreiter
d25d7bfccf openssl: security update to 1.0.2g
see https://www.openssl.org/news/secadv/20160503.txt for details

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-03 21:28:28 +02:00
Sascha Kilian
68aa7aa602 openssh: Update to 7.2p2
Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-03 11:56:19 +01:00
Arne Fitzenreiter
b5548cbb5c toolchain: enable build on aarch64 multilib hosts
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-01 14:20:34 +02:00
Arne Fitzenreiter
840c650aa7 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2016-04-30 09:34:16 -04:00
Arne Fitzenreiter
c356c8ce6a Revert "ncurses: update to 6.0 and rename 5.9 to ncurses-compat"
This reverts commit a420b3e7b9.

toolchain build fails on all architectures.
2016-04-30 09:25:12 -04:00
Matthias Fischer
77d0467c05 squid: Update to 3.5.17
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-29 18:25:08 +01:00
Arne Fitzenreiter
c0119cfb37 samba: import rpc server and client fixes.
should fix: #11110

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-04-28 17:04:58 +02:00
Michael Tremer
57bf762069 rtpproxy: New package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-27 18:18:20 +01:00
Sascha Kilian
be3bb6541c Update: less to 481
Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:43:54 +01:00
Sascha Kilian
e4ad596bd7 wpa_supplicant: Update to 2.5
Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:37:44 +01:00
Michael Tremer
4da318ab6f hostapd: Bump release version
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:32:17 +01:00
Sascha Kilian
3d4eb053a9 Update: hostapd to 2.5
Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:31:59 +01:00
Alexander Marx
259346c504 tzdata: Update to 2016d
fixes: #11103

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>

The 2016d release of the tz code and data is available. It reflects the
following changes, which were either circulated on the tz mailing list
or are relatively minor technical or administrative changes:

   Changes affecting future time stamps

     America/Caracas switches from -0430 to -04 on 2016-05-01 at 02:30.
     (Thanks to Alexander Krivenyshev for the heads-up.)

     Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
     (Thanks to Alexander Krivenyshev and Matt Johnson.)

     New zone Asia/Tomsk, split off from Asia/Novosibirsk. It covers
     Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29
     at 02:00.  (Thanks to Stepan Golosunov.)

   Changes affecting past time stamps

     New zone Europe/Kirov, split off from Europe/Volgograd.  It covers
     Kirov Oblast, Russia, which switched from +04/+05 to +03/+04 on
     1989-03-26 at 02:00, roughly a year after Europe/Volgograd made
     the same change.  (Thanks to Stepan Golosunov.)

     Russia and nearby locations had daylight-saving transitions on
     1992-03-29 at 02:00 and 1992-09-27 at 03:00, instead of on
     1992-03-28 at 23:00 and 1992-09-26 at 23:00.  (Thanks to Stepan
     Golosunov.)

     Many corrections to historical time in Kazakhstan from 1991
     through 2005.  (Thanks to Stepan Golosunov.)  Replace Kazakhstan's
     invented time zone abbreviations with numeric abbreviations.

Here are links to the release files:

   ftp://ftp.iana.org/tz/releases/tzcode2016d.tar.gz
   ftp://ftp.iana.org/tz/releases/tzdata2016d.tar.gz

The files are also available via HTTP as follows:

http://www.iana.org/time-zones/repository/releases/tzcode2016d.tar.gz
http://www.iana.org/time-zones/repository/releases/tzdata2016d.tar.gz

As usual, links to the latest release files are here:

http://www.iana.org/time-zones/repository/tzcode-latest.tar.gz
http://www.iana.org/time-zones/repository/tzdata-latest.tar.gz

   ftp://ftp.iana.org/tz/tzcode-latest.tar.gz
   ftp://ftp.iana.org/tz/tzdata-latest.tar.gz
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:30:26 +01:00
Sascha Kilian
171b8dbc74 Update: grep to 2.24
Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:29:42 +01:00
Sascha Kilian
cd4ca08231 Update: curl to 7.48.0
Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:28:18 +01:00
Matthias Fischer
bfe96f68b4 sdparm: Update to 1.10
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:24:07 +01:00
Marcel Lorenz
a420b3e7b9 ncurses: update to 6.0 and rename 5.9 to ncurses-compat
This patch updates the ncurses to 6.0. The old 5.9 are renamed to ncurses-compat.
The compat makes the old libs maintainable and the compat rootfile is cleaned up.
The 6.0 is build after 5.9 and all IPFire componentes will build with 6.0
In version 6 only the wide-character libraries are build. The are usable
in both multibyte and traditional 8-bit locales while normal libraries work
properly only in 8-bit locales. The toolchain is only bild with 6.0.

Please ignore my first ncurses 6.0 patch.

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:24:05 +01:00
Jonatan Schlag
54cc2c4e5d nfs: Fixes for NFS server
Fixes: #11098
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:20:15 +01:00
Matthias Fischer
198c39265b squid 3.4.14: latest patches, sorted options
The 'configure'-options were sorted (kind of) to get a better overview.

Added latest patches from upstream.

Changed '--enable-async-io=8' to '--enable-async-io=16' because of
http://www.squid-cache.org/mail-archive/squid-users/200705/0768.html :

"The default number of threads is dependent on the number of aufs
cache_dir lines, based on a reasonable estimate of how the code behaves."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-26 22:19:29 +01:00
Arne Fitzenreiter
875bd87bbd backports: ath9k fix ht40 init.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-04-25 18:02:53 +02:00
Michael Tremer
9fcba2b5df Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2016-04-20 16:24:12 +01:00
Michael Tremer
32d91ecad8 conntrack: Remove old disable_nf_sip indicator file
This is not used any more and not needed either.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-20 16:23:22 +01:00
Arne Fitzenreiter
c485f38c99 Merge remote-tracking branch 'origin/core100' into next 2016-04-19 22:04:24 +02:00
Arne Fitzenreiter
4bee1eb491 kernel: change stackprotector from strong to regular.
Xen/Paravirt crash with stackprotect in strong mode.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-04-17 23:31:43 +02:00
Matthias Fischer
b01d8a6830 dma: Update to 0.11
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-17 20:21:55 +01:00
Michael Tremer
d00032e765 lcdproc: Bump release
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-14 11:24:40 +01:00
Sascha Kilian
41a8f7f3cc lcdproc: Update to 0.5.7
Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-14 11:20:56 +01:00
Arne Fitzenreiter
77ecb239d3 samba: import RHEL security fixes.
CVE-2015-7560
CVE-2016-2110
CVE-2016-2111
CVE-2016-2112
CVE-2016-2115
CVE-2016-2118 aka Badlock
CVE-2015-5370

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-04-13 22:25:14 +02:00
Arne Fitzenreiter
17d270d5c9 dnsdist: disable parallel build
on 4 core machines with 2GB ram the parallel build fails
with out of memory.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-04-10 09:41:08 +02:00
Jonatan Schlag
b395d3289d New package ncat.
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-08 16:12:19 +01:00
Jonatan Schlag
45b7ed8519 Build nmap without ncat.
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-08 16:12:16 +01:00
Jonatan Schlag
33a24fccc2 Remove the nc symlink from netcat package and rename to gnu-netcat (gnu-netcat is no longer our standard netcat)
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-08 16:12:14 +01:00
Marcel Lorenz
c954b6acdc bwm-ng: update to 0.6.1
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-08 14:59:40 +01:00
Arne Fitzenreiter
9f19223e4e mcelog: new package
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-04-06 19:44:34 +02:00
Jonatan Schlag
5a9c93964b New package iperf3
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-05 23:47:36 +01:00
Matthias Fischer
c07053012f pcre 8.38: latest patches from upstream (LFS)
* Fix auto-callout (?# comment bug.
* Fix negated POSIX class within negated overall class UCP bug.
* Fix bug for isolated \E between an item and its qualifier
when auto callout is set.
* Give error for regexec with pmatch=NULL and REG_STARTEND set.
* Allow for up to 32-bit numbers in the ordin() function in  pcregrep.
* Fix \Q\E before qualifier bug when auto callouts are enabled.
* Fix /x bug when pattern starts with white space and (?-x).
* Fix copy named substring bug.
* Fix (by hacking) another length computation issue.
* Fix get_substring_list() bug when \K is used in an assertion.
* Fix pcretest bad behaviour for callout in lookbehind.
* Fix workspace overflow for (*ACCEPT) with deeply nested parentheses.
* Yet another duplicate name bugfix by overestimating the
memory needed  (i.e. another hack - PCRE2 has this "properly" fixed).
* Fix pcretest loop for global matching with an ovector size less than 2.
* Fix non-diagnosis of missing assertion after (?(?C).

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-05 22:56:33 +01:00
Matthias Fischer
8e6421d78e squid 3.4.14: Bugfix for #4323 (Netfilter broken cross-includes with Linux 4.2)
For details see: http://bugs.squid-cache.org/show_bug.cgi?id=4323

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-05 22:56:04 +01:00
Michael Tremer
bdb319c0ca squid: Patch SQUID-2016:3/CVE-2016-3947
http://www.squid-cache.org/Advisories/SQUID-2016_3.txt

 Due to a buffer overrun Squid pinger binary is vulnerable to
 denial of service or information leak attack when processing
 ICMPv6 packets.

 This bug also permits the server response to manipulate other
 ICMP and ICMPv6 queries processing to cause information leak.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-05 22:52:54 +01:00