Commit Graph

4202 Commits

Author SHA1 Message Date
Arne Fitzenreiter
ee552b7e1a kernel: update to 3.14.61
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-19 07:18:29 +01:00
Arne Fitzenreiter
802b916d10 Merge remote-tracking branch 'origin/master' into next
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Conflicts:
	make.sh
2016-02-17 19:47:50 +01:00
Arne Fitzenreiter
1ffbca6e4f glibc: disable patches that break build on arm.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-17 18:49:38 +01:00
Arne Fitzenreiter
bb330e25e9 glibc: new RHEL6 patches / fix CVE-2015-7547 and more
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-17 12:46:11 +01:00
Matthias Fischer
fd3b90c875 squid 3.4.14: Bugfix for #4431 (C code is not compiled with CFLAGS)
For details see: http://bugs.squid-cache.org/show_bug.cgi?id=4431

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-13 18:51:08 +00:00
Arne Fitzenreiter
e039df8613 backports: remove all old media modules.
more modules are renamed or merged into other modules.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-10 08:36:17 +01:00
Matthias Fischer
c9ed30440a grep: Update to 2.22
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-08 01:36:56 +00:00
Matthias Fischer
9dc6723a0a sed: Update to 4.2.2
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-08 01:33:53 +00:00
Michael Tremer
ff43197b01 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2016-02-04 14:35:55 +00:00
Arne Fitzenreiter
552fb4b8b5 dhcpcd: rework mtu handling on buggy nic's
some nic's loose the carrier after setting new mtu.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-01 07:31:46 +01:00
Matthias Fischer
f83b3c65a3 tzdata: Update to 2016a
Fixes https://bugzilla.ipfire.org/show_bug.cgi?id=11034

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-30 16:35:41 +00:00
Arne Fitzenreiter
57d98918a1 kernel: update to 3.14.60
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-29 14:25:25 +01:00
Arne Fitzenreiter
2f221a50e3 openssl: security update to 1.0.2f
changes:
* DH small subgroups - CVE-2016-0701
* SSLv2 doesn't block disabled ciphers - CVE-2015-3197
* Reject DH handshakes with parameters shorter than 1024 bits

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-28 16:22:21 +01:00
Arne Fitzenreiter
a6c7164277 openssl: security update to 1.0.2f
changes:
* DH small subgroups - CVE-2016-0701
* SSLv2 doesn't block disabled ciphers - CVE-2015-3197
* Reject DH handshakes with parameters shorter than 1024 bits

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-28 15:58:46 +01:00
Arne Fitzenreiter
d3fbc392a7 vdr_eepg: fix source download.
the external server has changed the compression so the md5 has changed.
Always use the IPFire server as primary download source.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-28 13:39:09 +01:00
Matthias Fischer
1b8c3e2362 openssh: Update to 7.1p2
Fixes CVE-2016-0777

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-28 13:38:18 +01:00
Arne Fitzenreiter
235888599a backports: update to 4.2.6
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-28 13:02:09 +01:00
Arne Fitzenreiter
8998dde892 rsync: update to 3.1.2
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-26 18:02:00 +01:00
Arne Fitzenreiter
00ee4eb13c kernel: update to 3.14.59
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-25 20:15:06 +01:00
Michael Tremer
02a60a9b9e squid: Actually make --with-filedescriptors work
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-23 01:49:37 +00:00
Daniel Weismüller
92e4521572 cmake: Disable parallelism
Building cmake uses a high amount of memory (>2G) and
fails to build on my system. Using less processes reduces
memory usage and lets the build succeed.

Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-22 11:48:51 +00:00
Michael Tremer
8a1a3bf393 Merge remote-tracking branch 'ms/iptables-conntrack' into next 2016-01-22 00:54:14 +00:00
Michael Tremer
41410d197b Merge branch 'hyper-v-fixes' into next 2016-01-22 00:49:15 +00:00
Arne Fitzenreiter
22a504c69c toolchain: fix build on hosts that not support strong stackprotect
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-20 19:28:56 +01:00
Matthias Fischer
cc9f461f74 nano: Update to 2.5.1
Excerpt form 'NEWS':
"It includes fixes for a syntax-highlighting bug and a positionlog bug,
it disables a time-eating multiline regex in the C syntax,
and it adds an escape hatch to the WriteOut menu when
--tempfile is used: the discardbuffer command, ^Q.  It
also has translation updates for fifteen languages, and
a small fix in the softwrap code."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-17 18:52:09 +00:00
Matthias Fischer
43e5fe9ded openssh: Update to 7.1p2
Fixes CVE-2016-0777

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-17 18:49:38 +00:00
Michael Tremer
64285d23eb Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2016-01-17 18:49:03 +00:00
Arne Fitzenreiter
3da3ac9856 gcc: remove gdb python files also in root build.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-14 16:08:24 +01:00
Arne Fitzenreiter
8f2ac12a87 toolchain: move *.py remove to correct pass.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-14 03:55:54 +01:00
Arne Fitzenreiter
6e96dd142a toolchain: enable bootstrap and remove *.py files from lib.
only with bootstrap the gcc pass2 build works on arm.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-13 19:04:56 +01:00
Matthias Fischer
c1de76704a ntp: Update to 4.2.8p5
"...addresses 1 medium-severity security issue, 14 bugfixes,
and contains other improvements over 4.2.8p4."

For a complete list, see:
http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-10 21:18:20 +00:00
Michael Tremer
b75b6382ab grub: Disable hardening for grub-script-check
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-10 19:35:42 +00:00
Michael Tremer
1d9be34e2a ccache: Include hash of compiler specs in hashing
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-09 19:48:48 +00:00
Michael Tremer
cec5c724f5 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2016-01-09 14:56:33 +00:00
Arne Fitzenreiter
764a3f1ff2 toolchain: fix full toolchain crossbuild
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-07 17:41:43 +01:00
Arne Fitzenreiter
2eb67894ef binutils: update to 2.24
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-01-07 17:41:16 +01:00
Daniel Weismüller
820a4ab564 owncloud: updated to version 7.0.11
Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-06 15:09:16 +00:00
Michael Tremer
f81e27e1c8 dnsdist: Don't build on ARM
There seem to be some serious C++ issues in this so that
it won't build on ARM.

At the moment I do not have any resources to look further
into this, so I just disable building this package for
all ARM architectures.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-06 15:05:37 +00:00
Erik Kapfer
964700d414 openvpn: Update to version 2.3.7, added --verify-x509-name directive.
The tls-remote directive is deprecated and will be removed with
OpenVPN version 2.4 . Added instead --verify-x509-name HOST name
into ovpnmain.cgi.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-01-04 22:41:46 +00:00
Matthias Fischer
9977da131b bind: Update to 9.10.3-P2
Changelog:

[security]
Update allowed OpenSSL versions as named is potentially
vulnerable to CVE-2015-3193.

[maint]
H.ROOT-SERVERS.NET is 198.97.190.53 and 2001:500:1::53. [RT #40556]

[security]
Insufficient testing when parsing a message allowed
records with an incorrect class to be be accepted,
triggering a REQUIRE failure when those records
were subsequently cached. (CVE-2015-8000) [RT #40987]

[security]
Address fetch context reference count handling error
on socket error. (CVE-2015-8461) [RT#40945]

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-12-28 15:37:41 +01:00
Matthias Fischer
c3b4c861f5 dnsmasq 2.75: latest patches from upstream
Same procedure as... :-)

Best to all for xmas and 2016!

Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-12-28 15:35:34 +01:00
Arne Fitzenreiter
f25314afd7 vdr_eepg: fix source download.
the external server has changed the compression so the md5 has changed.
Always use the IPFire server as primary download source.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2015-12-25 12:45:05 +01:00
Arne Fitzenreiter
aa66842358 kernel: apply arm-multi grsecurity fixes only at arm-multi build 2015-12-23 10:14:26 +01:00
Michael Tremer
98b8cabf4d dnsdist: New package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-12-22 22:27:58 +00:00
Michael Tremer
6138d53bdd lua: New package
Simple scripting language. Supposed to be fast. Needed for dnsdist.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-12-22 22:27:39 +00:00
Michael Tremer
ffea9709f8 linux: Fix build of kernel and headers package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-12-22 22:25:18 +00:00
Michael Tremer
a7b0967db4 linux: Backport Hyper-V network driver
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-12-22 14:47:43 +00:00
Michael Tremer
f295ca0cf7 kernel: Add grsecurity compile fix
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-12-22 13:58:46 +00:00
Michael Tremer
8675b78af9 gcc: Update to version 4.9.3
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-12-22 12:43:51 +00:00
Michael Tremer
9098b1e1c0 glibc: Fix headers to build with new GCC
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-12-22 12:40:38 +00:00