Commit Graph

1466 Commits

Author SHA1 Message Date
Arne Fitzenreiter
b15309e9d1 transmission: update to 2.94
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-01-05 13:47:31 +01:00
Matthias Fischer
c86d893830 squid: Update to 4.5
For details see:
http://www.squid-cache.org/Versions/v4/changesets/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-12-31 00:37:51 +00:00
Matthias Fischer
a2bcb4135b squid: Update to 4.4 (stable)
For details see:
http://www.squid-cache.org/Versions/v4/changesets/

In July 2018, 'squid 4' was "released for production use", see:
https://wiki.squid-cache.org/Squid-4

"The features have been set and large code changes are reserved for later versions."

I've tested almost all 4.x-versions and patch series before with good results.
Right now, 4.4 is running here with no seen problems together with
'squidclamav', 'squidguard' and 'privoxy'.

I too would declare this version stable.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-12-18 22:30:51 +00:00
Stefan Schantl
848ac69009 grub: xfs: Accept filesystem with sparse inodes
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Tested-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-12-13 13:07:53 +00:00
Michael Tremer
7e17de5f86 fireinfo: Add authentication for upstream proxies
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-12-11 19:38:21 +00:00
Arne Fitzenreiter
ed4bbe44d1 kernel: fix dwc2 (usb) dma crashes on RPi1-3
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-12-10 20:45:54 +01:00
Arne Fitzenreiter
1e2e78e6ff Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2018-11-02 15:16:22 +00:00
Arne Fitzenreiter
5edc6b10e0 directfb: fix comile on 32bit arm
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-11-02 15:14:11 +00:00
Matthias Fischer
e2bd68dfad squid 3.5.28: latest patches (01-02)
For details see:
http://www.squid-cache.org/Versions/v3/3.5/changesets/

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-11-01 10:29:05 +00:00
Michael Tremer
02776a0dc2 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2018-10-29 10:51:44 +00:00
Arne Fitzenreiter
d823d5f072 hostapd: add switch to disable neigborhood scan
this may violate regulatory rules because 40Mhz channels should disabled
if there are other networks but nearly every commercial router ignore this.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-10-27 16:47:12 +02:00
Michael Tremer
edacf85320 libvirt: Update to 4.6.0
Fixes builds against glibc >= 2.28

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-24 09:25:57 +01:00
Michael Tremer
2678d600f9 parted: Fix build with glibc >= 2.28
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-24 09:15:28 +01:00
Michael Tremer
5814cf9931 syslinux: Fix build with glibc >= 2.28
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-24 09:14:43 +01:00
Michael Tremer
8d4da55a5d collectd: Fix compiling against newer xfsprogs
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-23 16:45:33 +01:00
Michael Tremer
c3f74288c7 nfs: Update to 2.3.3
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-22 19:52:23 +01:00
Michael Tremer
2557cea21c reiserfsprogs: Update to 3.6.27
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-22 10:53:18 +01:00
Michael Tremer
e28e813eeb ppp: Build against openssl
libcrypt has been removed from glibc and openssl
can be used instead for cryptographic operations.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-21 22:03:21 +01:00
Michael Tremer
e63cc45b48 gzip: Fix build with glibc >= 2.28
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-19 14:20:48 +01:00
Michael Tremer
d1654fd000 findutils: Fix building against glibc >= 2.28
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-19 13:39:58 +01:00
Michael Tremer
68dba55dda bison: Fix building with glibc >= 2.28
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-19 09:00:04 +01:00
Michael Tremer
7b0f7a6e1d m4: Fix building with glibc >= 2.28
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-19 08:59:46 +01:00
Michael Tremer
537401bb12 gcc: Fix building with glibc >= 2.28
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-10-19 08:59:25 +01:00
Matthias Fischer
74189c1d55 openssh: Update to 7.8p1
For details see:
http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/ChangeLog

I didn't find an official lfs-patch for openssl-1.1-compatibility,
so I used the patch from here:
https://git.archlinux.org/svntogit/packages.git/plain/trunk/openssl-1.1.0.patch?h=packages/openssh

Building ran without any errors.

I tested with both machines (test on Core 120 - and productive - on Core 122) and found no errors so far:

...
[root@ipfiretest ~]# ssh -V
OpenSSH_7.8p1, OpenSSL 1.1.0h  27 Mar 2018
...

...
root@ipfire: / # ssh -V
OpenSSH_7.8p1, OpenSSL 1.1.0h  27 Mar 2018
...

All ssh-connections ran fine but I'm not REALLY sure if this is sufficient for anyone else.

Could someone please check and confirm!?

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Tested-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-09-20 14:51:44 +01:00
Michael Tremer
fd0a0384f0 rng-tools: Update to 6.4
Also add a patch that keeps RDRAND enabled on i586

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Fixes: #11853
2018-09-09 17:42:17 +01:00
Michael Tremer
046ef135e6 Merge remote-tracking branch 'origin/efi' into next 2018-08-16 12:49:13 +01:00
Arne Fitzenreiter
7529349754 kernel: apu2 leds: update string for newer bios
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-08-05 17:19:52 +02:00
Matthias Fischer
51099ddfd7 squid: Update to 3.5.28
For details see:
http://www.squid-cache.org/Versions/v3/3.5/changesets/

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-26 14:38:57 +01:00
Michael Tremer
a570226765 Merge branch 'next' into efi 2018-07-20 12:47:20 +00:00
Michael Tremer
011204d963 fireinfo: Import latest patches
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-20 12:06:11 +00:00
Michael Tremer
7c80f8c5cc syslinux: Update to 6.04-pre1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:53 +01:00
Michael Tremer
4c2343931c parted: Update to 3.2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:52 +01:00
Michael Tremer
b661333e3a syslinux: FTBFS with newer ld
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:50 +01:00
Michael Tremer
8a9605840c Remove dvdrtools for cdrkit
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:49 +01:00
Matthias Fischer
5bb288a244 dhcp: Update to 4.4.1
For details see:
https://kb.isc.org/article/AA-01571/82/DHCP-4.4.1-Release-Notes.html

This should close https://bugzilla.ipfire.org/show_bug.cgi?id=11697 and
https://bugzilla.ipfire.org/show_bug.cgi?id=11293.

This update required some changes as described in:
https://bugzilla.ipfire.org/show_bug.cgi?id=11697#c6

Thanks to all testers! ;-)

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-04 13:52:43 +01:00
Arne Fitzenreiter
4dd7df2f82 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2018-05-16 14:09:42 +02:00
Arne Fitzenreiter
959b404ee0 u-boot: add Raspberry Pi 3 Model B+
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-05-16 10:43:58 +02:00
Arne Fitzenreiter
39a73adadf kernel: kirkwood: fix iConnect leds and modell name
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-05-13 07:59:01 +00:00
Matthias Fischer
1698eb73c7 openssh: Update to 7.7p1
For details see:
http://www.openssh.com/txt/release-7.7

This release fixes:
https://bugzilla.ipfire.org/show_bug.cgi?id=11693
https://bugzilla.ipfire.org/show_bug.cgi?id=11694

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-05-07 11:33:41 +01:00
Arne Fitzenreiter
0d2cbbab85 Merge branch 'kernel-4.14' into next 2018-05-05 09:14:42 +02:00
Arne Fitzenreiter
79dbff45cb Merge remote-tracking branch 'origin/core120' into kernel-4.14 2018-04-28 09:09:00 +02:00
Michael Tremer
196b9090f9 dma: Apply compile fix
dma segfaulted when built without string.h.

Fixes: #11701

Submitted upstream: https://github.com/corecode/dma/pull/58

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-04-24 12:35:51 +01:00
Michael Tremer
86fd194766 dma: Apply compile fix
dma segfaulted when built without string.h.

Fixes: #11701

Submitted upstream: https://github.com/corecode/dma/pull/58

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-04-24 12:34:53 +01:00
Peter Müller
a83b738215 update ClamAV to 0.100.0
Update ClamAV to 0.100.0, which brings some new features and bugfixes
(release notes are available here: https://blog.clamav.net/2018/04/clamav-01000-has-been-released.html).

Since the internal LLVM code is now deprecated and disabled by default,
patching clamav/libclamav/c++/llvm/lib/ExecutionEngine/JIT/Intercept.cpp
does not seem to be necessary anymore.

Further, the --disable-zlib-vcheck option has been removed since it
produces warnings during compilation.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-04-23 11:20:52 +01:00
Arne Fitzenreiter
20406699e3 grub: update to 2.02
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-04-17 06:10:06 +02:00
Matthias Fischer
4217b4b6d8 beep 1.3: Fixes for CVE-2018-0492
For details see:
https://src.fedoraproject.org/cgit/rpms/beep.git
https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-0492

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-04-11 20:03:19 +01:00
Arne Fitzenreiter
96a2ff029e kernel: update config
disable isdn
disable audit
disable profiling on arm
disable scsi driver on arm

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-04-11 18:36:57 +02:00
Arne Fitzenreiter
302dba205b Merge remote-tracking branch 'origin/master' into kernel-4.14 2018-03-30 10:26:01 +02:00
Michael Tremer
d3cd99830a fetchmail: Permit building without SSLv3
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-27 20:53:31 +01:00
Michael Tremer
166ceacd6b openssl: Update to 1.1.0h
CVE-2018-0739 (OpenSSL advisory) [Moderate severity] 27 March 2018:

Constructed ASN.1 types with a recursive definition (such as can be
found in PKCS7) could eventually exceed the stack given malicious
input with excessive recursion. This could result in a Denial Of
Service attack. There are no such structures used within SSL/TLS
that come from untrusted sources so this is considered safe.
Reported by OSS-fuzz.

This patch also entirely removes support for SSLv3. The patch to
disable it didn't apply and since nobody has been using this before,
we will not compile it into OpenSSL any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-03-27 16:03:44 +01:00