Commit Graph

1466 Commits

Author SHA1 Message Date
Adolf Belka
8ace58e8ac p7zip: Update to 17.03
- Update p7zip from 16.02 (Jul 2016) to 17.03 (Dec 2020)
- Version 16.02 was the last version by the previous dev team.
	A fork was created in May 2020 with version 17.01
- Rootfile updated
- Changelog
	Version 17.03
	=============
	  - add zstd to zip
	  - add hash algorithm
	    - XXHASH32
	    - XXHASH64
	    - MD2
	    - MD4
	    - MD5
	    - sha384
	    - sha512
	  - add Lzfse to dmg
	  - add lz5 to 7z
	  - add lizard to 7z
	  - update lz4 to v1.9.3
	  - add brotli to 7z
	  - update cmake build
	  - fix xz crc64 error
	  - use system local to select OEM code
	  - add rpm install
	  - fix lzma2 and flzma22 call the same algorithm
	  - add 7zr build
	  - fix tar format link file compress and decompress
	Version 17.02
	=============
	  - p7zip 17.02 is more like 7zip 17.01(only 7za and 7z),The difference from 7zip 17.01
	    and older version p7zip is the following description
	  - Supports Fast lzma2 1.0.1 compression method
	  - Update Zstd method to 1.4.5
	  - Add zstd method parameters in 7z format
	    ZSTD parameters NEW name:
	         strategy -> strat
	         fast -> fast
	         long -> long
	         WindowLog -> wlog
	         HashLog -> hlog
	         ChainLog -> clog
	         SearchLog -> slog
	         MinMatch -> slen
	         TargetLen -> tlen
	         OverlapLog -> ovlog
	         LdmHashLog -> ldmhlog
	         LdmSearchLength -> ldmslen
	         LdmBucketSizeLog -> ldmblog
	         LdmHashRateLog -> ldmhevery
	  - Fix symlink files contained inside tar and squashfs as regular file
	  - Add lz4 and Zstd decompress method to squashfs
	Version 17.01
	=============
	  - Fix BUG CVE-2018-10115
	  - Fix BUG CVE-2018-5996
	  - Fix BUG CVE-2017-17969
	  - Fix BUG CVE-2016-9296
- The bug fixes in version 17.01 address the same CVE bugs as the
	p7zip-16.02-consolidated_fixes-1.patch Therefore this patch is no longer needed
- The patches for CVE-2016-2334 & 2335 were for versions before 16.00 so are no longer needed

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:21:29 +00:00
Adolf Belka
d06693b487 qemu: Update to 5.2.0
- Update qemu from 5.0.0 to 5.2.0
- Changelogs for 5.1.0 and 5.2.0 available at https://wiki.qemu.org/ChangeLog/
- rootfile updated
- patch no longer needed as fix built into source. patch was not utilised
	for 5.0.0 version. Patch line was commented out in previous lfs

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:46:29 +00:00
Matthias Fischer
ae94f85b02 logwatch 7.5.5: Deleted no longer needed patch for clamav 0.103.0
I've should have read the changelog from opensuse more thoroughly:

...
4a862fa [clamav] Ignore new "Activating the newly loaded database" message
...

Sorry for the noise.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:46:21 +00:00
Adolf Belka
9ab74511da screen: Update to 4.8.0
- Update screen from 4.2.1 to 4.8.0
- Changelog
	Version 4.8.0 (05/02/2020)
	  * Improve startup time by only polling for files to close
	  Fixes:
		- Fix for segfault if termcap doesn't have Km entry
		- Make screen exit code be 0 when checking --version
		- Fix potential memory corruption when using OSC 49
	Version 4.7.0 (02/10/2019)
	  * Add support for SGR (1006) mouse mode
	  * Add support for OSC 11
	  * Update Unicode ambiguous and wide tables to 12.1.0
	  * Fixes:
	  - cross-compilation support (bug #43223)
	  - a lot of manpage fixes and cleanups
	Version 4.6.2 (23/10/2017):
	  * Fixes:
		- revert changes to cursor position restore behavour (bug #51832)
		- set freed pointer to NULL (bug #52133)
		- documentation fixes
		- fix windowlist crashes (bug #43054 & #51500)
	Version 4.6.1 (10/07/2017):
	  * Fixes:
		- problems with starting session in some cases
		- parallel make install
		- segfault when querying info on nonUTF locale (bug #51402)
	Version 4.6.0 (28/06/2017):
	  * Update Unicode wide tables to 9.0 (bug #50044)
	  * Support more serial speeds
	  * Improved namespaces support
	  * Migrate from fifos to sockets
	  * Start viewing scrollback at first line of output (bug #49377)
	Version 4.5.1 (25/02/2017):
	  * Fixes:
		- logfile permissions problem (CVE-2017-5618)
		- SunOS build problem (bug #50089)
		- FreeBSD core dumps (bug #50143)
	Version 4.5.0 (10/12/2016):
	  * Allow specifying logfile's name via command line parameter '-L'
	  * Fixes:
		- broken handling of "bind u digraph U+" (bug #48691)
		- crash with long $TERM (bug #48983)
		- crash when bumping blank window
		- build for AIX (bug #49149)
		- %x improperly separating arguments
		- install with custom DESTDIR (bug #48370)
	Version 4.4.0 (19/06/2016):
	  * Support up to 24 function keys
	  * Fix runtime issues
	  * 'logfile' command, starts logging into new file upon changing
	Version 4.3.1 (28/06/2015):
	  * Fix resize bug
	Version 4.3.0 (13/06/2015):
	  * Introduce Xx string escape showing the executed command of a window
	  * Implement dead/zombie window polling, allowing for auto reconnecting
	  * Allow setting hardstatus on first line
	  New Commands:
	  * 'sort' command sorting windows by title
	  * 'bumpleft', 'bumpright' - manually move windows on window list
	  * 'collapse' removing numbering 'gaps' between windows, by renumbering
	  * 'windows' command now accepts arguments for use with querying
- Rootfile updated
- Two screen patchfiles deleted as the patch changes are now built into
	the source files

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:45:45 +00:00
Matthias Fischer
bf2ff65e6c logwatch: Update to 7.5.5
For details see:
https://build.opensuse.org/package/view_file/server:monitoring/logwatch/ChangeLog?expand=1

Plus: deleted no longer need dhcpd-patch.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:36:54 +00:00
Michael Tremer
85f5656aca Revert "make: update to 4.3"
This reverts commit f1d98a1c3f.

The new version of make seems to break building u-boot on armv5tel.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-26 11:15:04 +00:00
Arne Fitzenreiter
f1d98a1c3f make: update to 4.3
this this needed to build on systems with kernel >=5.5

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-25 19:30:45 +00:00
Michael Tremer
5b2fc5d65f hostapd: Update to development version
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-18 13:03:36 +00:00
Stefan Schantl
7d425e7cfa ddns: Add latest upstream patches.
* Add patch to support listing of token providers.
* Add fix to proper encode python string.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-06 15:31:48 +00:00
Adolf Belka
35b8dc552d fuse: Update to 3.10.1
- Update fuse from 2.9.7 to 3.10.1
- Update also required by sshfs update
- Changelog is available at https://github.com/libfuse/libfuse/releases
- Build had to be changed from autools to meson/ninja
- Rootfiles changed
- namespace conflict fix patch no longer required. Fix now built into kernel.h

Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-06 15:21:02 +00:00
Matthias Fischer
15194c7c52 dhcpcd: Update to 9.4.0
For details see:
https://roy.marples.name/archives/dhcpcd-discuss/0003420.html

Former patch for Bug #12552 is now included.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-03 11:12:55 +00:00
Matthias Fischer
e49289c9ea logwatch: Fix unmatched entries from clamav
This - cosmetic - patch fixes the unnecessary unmatched "Activating the newly
loaded database..."-entries introduced with 'clamav 0.103.0'.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-29 10:18:25 +00:00
Adolf Belka
2b4353a436 iperf3: Update to version 3.9
- Update iperf3 from 3.7 to 3.9
- No changes to rootfiles
- Update patch file to remove pg flag
- Release notes from version 3.8 onwards:-

iperf 3.9 2020-08-17
--------------------
* Notable user-visible changes
  * A --timestamps flag has been added, which prepends a timestamp to
    each output line.  An optional argument to this flag, which is a
    format specification to strftime(3), allows for custom timestamp
    formats (#909, #1028).
  * A --server-bitrate-limit flag has been added as a server-side
    command-line argument.  It allows a server to enforce a maximum
    throughput rate; client connections that specify a higher bitrate
    or exceed this bitrate during a test will be terminated.  The
    bitrate is expressed in bits per second, with an optional trailing
    slash and integer count that specifies an averaging interval over
    which to enforce the limit (#999).
  * A bug that caused increased CPU usage with the --bidir option has
    been fixed (#1011).
* Notable developer-visible changes
  * Fixed various minor memory leaks (#1023).

iperf 3.8.1 2020-06-10
----------------------
* Notable user-visible changes
  * A regression with "make install", where the libiperf shared
    library files were not getting installed, has been fixed (#1013 /
    #1014).

iperf 3.8 2020-06-08
--------------------
* Notable user-visible changes
  * Profiled libraries and binaries are no longer built by default
    (#950).
  * A minimal Dockerfile has been added (#824).
  * A bug with burst mode and unlimited rate has been fixed (#898).
  * Configuring with the --enable-static-bin flag will now cause
    a statically-linked iperf3 binary to be built (#989).
  * Configuring with the --without-sctp flag will now prevent SCTP
    from being auto-detected (#1008).  This flag allows building a
    static binary (see above item) on a CentOS system with SCTP
    installed, because no static SCTP libraries are available.
  * Clock skew between the iperf3 client and server will no longer
    skew the computation of jitter during UDP tests (#842 / #990).
  * A possible buffer overflow in the authentication feature has been
    fixed.  This was only relevant when configuration authentication
    using the libiperf3 API, and did not affect command-line usage.
    Various other improvements and fixes in this area were also made
    (#996).
* Notable developer-visible changes
  * The embedded version of cJSON has been updated to 1.7.13 (#978).
  * Some server authentication functions have been added to the API
    (#911).
  * API access has been added to the connection timeout parameter
    (#1001).
  * Tests for some authentication functions have been added.
  * Various compiler errors and warnings have been fixed.

Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-28 13:15:27 +00:00
Adolf Belka
50992c7321 procps: Update to 3.3.16
- update from 3.2.8 to 3.3.16
	This is also an update from procps to procps-ng
	The previous version was no longer being maintained.
- Added autogen.sh into lfs as ity is needed to create the config script.
- Added libdir=/lib line into configure command as default is /usr/lib
- Added mv commands for kill, ps & sysctl to place them into the same locations
	as the previous version of procps
- Moved lfsmake2 procps line to after pkg-config in make.sh
	The autogen line requires autoconf, libtool, gettext and pkg-config
	to be available so procps moved to after them.
- procps-3.2.8-fix_unknown_HZ_value.patch no longer required with new
	version so removed.
- rootfile updated.
- libprocps library being maintained by the same people now maitaining this
	version of procps.
- information on the releases from 3.3.13 to 3.3.16 available on
	https://gitlab.com/procps-ng/procps/-/releases

Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-27 10:55:03 +00:00
Matthias Fischer
d96d979e2a dhcpcd: Update to 9.3.4
For details see:
https://roy.marples.name/archives/dhcpcd-discuss/0003334.html

This version contains the official fix from here:
https://roy.marples.name/cgit/dhcpcd.git/commit/?id=12cdb2be46e25e1ab99df18324b787ad8749dff7

This should fix Bug #12552 (dhcpcd-9.3.4 crash with bad system call)
on 32bit/i686 systems.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-24 11:57:17 +00:00
Peter Müller
f31c8d2ade libloc: update to 0.9.5 and backport fix for #12554
This patch updates libloc to 0.9.5, deletes the upstream patchset from
version 0.9.4, and includes a latest upstream patch to backport a fix
for #12554.

Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-23 14:32:51 +00:00
Arne Fitzenreiter
7e09bcbc45 dracut: add hyperv-keyboard module to initrd.
the missing module should be the reason for not responding setup on some
hyper-v configurations.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-12-17 17:10:04 +00:00
ummeegge
50752f1b61 kerberos: Update to version 1.18.3
Since version 1.15.2 several fixes and enhancements has been introduced.
For a full overview the release notes can be found in the next lines.

https://web.mit.edu/kerberos/krb5-1.16/
https://web.mit.edu/kerberos/krb5-1.17/
https://web.mit.edu/kerberos/krb5-1.18/

Signed-off-by: ummeegge <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-10 12:32:11 +00:00
Stefan Schantl
6dc6de4c4e ddns: Import upstream patch for provider DuckDNS.
Fixes #12415.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-02 14:56:46 +00:00
Stefan Schantl
882db5cd03 ddns: Import upstream patch for provider DDNSS.
Fixes #12328.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-02 14:56:44 +00:00
Michael Tremer
460741fd14 libloc: Import latest fixes from upstream
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-01 17:05:43 +00:00
Matthias Fischer
e8ecc81a70 logwatch: Disable iptables output in summary.dat, fixes #12533
This patch disables the output of 'iptables' in 'summary.dat' by
modifying '/usr/share/conf/logwatch.conf'.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-27 15:54:27 +00:00
Michael Tremer
4a388bc9f0 libloc: Import changes from upstream
This fixes the segmentation fault on 32 bit systems.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-27 15:46:39 +00:00
Michael Tremer
b952a52b70 libloc: Import latest changes from upstream
This is now a unified patch instead of being split into
individual commits from upstream.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-26 16:15:07 +00:00
Michael Tremer
0be475ca36 libloc: Import changes from upstream
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-25 20:02:30 +00:00
Arne Fitzenreiter
e4f287a268 vdr: update to 2.4.4
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-23 18:15:48 +00:00
Michael Tremer
78a6918d34 libloc: Import more changes from upstream
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-19 13:08:22 +00:00
Michael Tremer
05db64d0ea libloc: Import recent patches from upstream
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-18 19:18:40 +00:00
Arne Fitzenreiter
2e1bf458e2 kernel: update to 4.14.206
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-11-12 09:02:02 +01:00
Peter Müller
987826deb1 Bash: apply patches 12 through 18 as well
Those fix some unintentional behaviour regarding autocompletion I
stumbled across the other day. While there seems nothing security
relevant in this, it irons out a few bugs.

The full and up-to-date list of all Bash 5.0 patches can be obtained
from https://ftp.gnu.org/gnu/bash/bash-5.0-patches/ .

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-03 10:38:25 +00:00
Matthias Fischer
5e11ef0f67 logwatch: Added upstream patch for Bug #12242
Added upstream patch from:

https://sourceforge.net/p/logwatch/mailman/message/37106642/

and

https://sourceforge.net/p/logwatch/mailman/message/37106883/

Fixes the display of "Unknown Entries: reuse_lease: ... " in dhpcd-logs.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-28 11:55:16 +00:00
Arne Fitzenreiter
1dd31d858e samba: update to 4.13.0
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-06 12:19:04 +00:00
Erik Kapfer
aa4ed7637c iptraf-ng: Update to version 1.2.1
Update includes several fixes and enhancements.
The full overview of changes are located in here --> https://github.com/iptraf-ng/iptraf-ng/blob/master/CHANGES .

rvnamed has been merged into iptraf-ng. Fix division by zero patch has been merged into new version, patch is not needed anymore. logrotate configuration for iptraf-ng has been included.

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-09-30 09:58:51 +00:00
Stefan Schantl
8be7a2206c libloc: Update to 0.9.4
Also update to the shipped database to 2020-09-21.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-09-24 17:36:38 +00:00
Matthias Fischer
fcb991813b logwatch: Update to 7.5.4
Sorry, there is no changelog available.

For a better overview I moved 'logwatch-7.3.6-date_manip6.patch' to a directory of its own.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-09-24 17:36:38 +00:00
Michael Tremer
b171c68349 collectd: Link against libip4tc
libiptc is no longer being shipped by iptables and has been split
into a version for IPv4 and IPv6.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-09-24 17:36:38 +00:00
Michael Tremer
57b277786e fontconfig: update to 2.13.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-09-24 17:36:37 +00:00
Arne Fitzenreiter
3a69555f90 kernel: add patch agains CVE-2020-14386
fixes #12483

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-09-12 09:38:10 +02:00
Arne Fitzenreiter
9dafa28a1c Revert "kernel: add patch against CVE-2020-14386"
This reverts commit f04023b1ca.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-09-11 22:16:27 +02:00
Arne Fitzenreiter
f04023b1ca kernel: add patch against CVE-2020-14386
fixes #12483

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-09-11 21:27:15 +02:00
Arne Fitzenreiter
2c8819992e vim: update to 8.2 and fix crash with gcc-10
the configure.ac has a bug that detects gcc-10 as gcc-1 and so not use
some quirks. Also there is a bug with FORTIFY-SOURCE=2 that crash
if the matchparen plugin is used (enabled by default).

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-08-29 18:08:57 +00:00
Peter Müller
159cab272a OpenSSL: remove ciphers without Forward Secrecy from default ciphersuite
Ciphers not supplying (Perfect) Forward Secrecy are considered dangerous
since they allow content decryption in retrospect, if an attacker is
able to gain access to the servers' private key used for the
corresponding TLS session.

Since IPFire machines establish very few TLS connections by themselves, and
destinations (IPFire.org infrastructure, mirrors, IPS rule sources, etc.)
provide support for Forward Secrecy ciphers - some are even enforcing
them -, it is safe to drop support for anything else.

This patch reduces the OpenSSL default cipher list to:
TLS_AES_256_GCM_SHA384  TLSv1.3 Kx=any      Au=any  Enc=AESGCM(256) Mac=AEAD
TLS_CHACHA20_POLY1305_SHA256 TLSv1.3 Kx=any      Au=any  Enc=CHACHA20/POLY1305(256) Mac=AEAD
TLS_AES_128_GCM_SHA256  TLSv1.3 Kx=any      Au=any  Enc=AESGCM(128) Mac=AEAD
ECDHE-ECDSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH     Au=ECDSA Enc=AESGCM(256) Mac=AEAD
ECDHE-ECDSA-CHACHA20-POLY1305 TLSv1.2 Kx=ECDH     Au=ECDSA Enc=CHACHA20/POLY1305(256) Mac=AEAD
ECDHE-ECDSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH     Au=ECDSA Enc=AESGCM(128) Mac=AEAD
ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH     Au=RSA  Enc=AESGCM(256) Mac=AEAD
ECDHE-RSA-CHACHA20-POLY1305 TLSv1.2 Kx=ECDH     Au=RSA  Enc=CHACHA20/POLY1305(256) Mac=AEAD
ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH     Au=RSA  Enc=AESGCM(128) Mac=AEAD
ECDHE-ECDSA-AES256-SHA384 TLSv1.2 Kx=ECDH     Au=ECDSA Enc=AES(256)  Mac=SHA384
ECDHE-ECDSA-CAMELLIA256-SHA384 TLSv1.2 Kx=ECDH     Au=ECDSA Enc=Camellia(256) Mac=SHA384
ECDHE-RSA-AES256-SHA384 TLSv1.2 Kx=ECDH     Au=RSA  Enc=AES(256)  Mac=SHA384
ECDHE-RSA-CAMELLIA256-SHA384 TLSv1.2 Kx=ECDH     Au=RSA  Enc=Camellia(256) Mac=SHA384
ECDHE-ECDSA-AES128-SHA256 TLSv1.2 Kx=ECDH     Au=ECDSA Enc=AES(128)  Mac=SHA256
ECDHE-ECDSA-CAMELLIA128-SHA256 TLSv1.2 Kx=ECDH     Au=ECDSA Enc=Camellia(128) Mac=SHA256
ECDHE-RSA-AES128-SHA256 TLSv1.2 Kx=ECDH     Au=RSA  Enc=AES(128)  Mac=SHA256
ECDHE-RSA-CAMELLIA128-SHA256 TLSv1.2 Kx=ECDH     Au=RSA  Enc=Camellia(128) Mac=SHA256
DHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=DH       Au=RSA  Enc=AESGCM(256) Mac=AEAD
DHE-RSA-CHACHA20-POLY1305 TLSv1.2 Kx=DH       Au=RSA  Enc=CHACHA20/POLY1305(256) Mac=AEAD
DHE-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=DH       Au=RSA  Enc=AESGCM(128) Mac=AEAD
DHE-RSA-AES256-SHA256   TLSv1.2 Kx=DH       Au=RSA  Enc=AES(256)  Mac=SHA256
DHE-RSA-CAMELLIA256-SHA256 TLSv1.2 Kx=DH       Au=RSA  Enc=Camellia(256) Mac=SHA256
DHE-RSA-AES128-SHA256   TLSv1.2 Kx=DH       Au=RSA  Enc=AES(128)  Mac=SHA256
DHE-RSA-CAMELLIA128-SHA256 TLSv1.2 Kx=DH       Au=RSA  Enc=Camellia(128) Mac=SHA256
ECDHE-ECDSA-AES256-SHA  TLSv1 Kx=ECDH     Au=ECDSA Enc=AES(256)  Mac=SHA1
ECDHE-ECDSA-AES128-SHA  TLSv1 Kx=ECDH     Au=ECDSA Enc=AES(128)  Mac=SHA1
ECDHE-RSA-AES256-SHA    TLSv1 Kx=ECDH     Au=RSA  Enc=AES(256)  Mac=SHA1
ECDHE-RSA-AES128-SHA    TLSv1 Kx=ECDH     Au=RSA  Enc=AES(128)  Mac=SHA1
DHE-RSA-AES256-SHA      SSLv3 Kx=DH       Au=RSA  Enc=AES(256)  Mac=SHA1
DHE-RSA-CAMELLIA256-SHA SSLv3 Kx=DH       Au=RSA  Enc=Camellia(256) Mac=SHA1
DHE-RSA-AES128-SHA      SSLv3 Kx=DH       Au=RSA  Enc=AES(128)  Mac=SHA1
DHE-RSA-CAMELLIA128-SHA SSLv3 Kx=DH       Au=RSA  Enc=Camellia(128) Mac=SHA1

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-08-17 10:07:56 +00:00
Michael Tremer
6d6f306179 perl: Fix build in toolchain stage
perl searches for headers and libraries in the wrong paths
and detects GCC 10 as GCC 1.x.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-08-16 10:29:43 +00:00
Michael Tremer
30ddc2e27a kbd: Update to 2.2.0
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-08-16 10:29:42 +00:00
Michael Tremer
8ba15ff89a syslinux: Fix build with GCC 10
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-08-16 10:29:42 +00:00
Michael Tremer
ac2d807d1c ipfire-netboot: Fix build with GCC 10
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-08-16 10:29:42 +00:00
Michael Tremer
fed525f280 7zip: Fix build against GCC 10
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-08-16 10:29:42 +00:00
Arne Fitzenreiter
f8561a5c16 grub: update to 2.04
fixes: #12463

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
2020-08-14 15:10:14 +00:00
Arne Fitzenreiter
03cd6810d3 libloc: fix i586 perl module
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-08-03 19:52:38 +02:00
Stefan Schantl
99659ce50b libloc: Only update database once a week
Ensure to download and update the database only once a week, even the
script will be called by cron each hour.

Fixes #12462.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-07-29 17:15:56 +00:00