Commit Graph

927 Commits

Author SHA1 Message Date
Michael Tremer
f794504ec6 dma: Don't only use TLSv1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
65a75e0ddf glibc: Update to 2.27
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
f1a5a25a40 flex: Patch against SEGV with newer glibc
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
6ffe2da8c9 iproute2: Update to 4.14.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
f6b0901df9 hostname: Update to 3.20
Drops dependency to obsolete RPCSVC code in glibc.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
dca7011c1f make: Patch against SEGV when using globbing functions
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Michael Tremer
85439ac74c toolchain: Add bison
This is required by glibc 2.27

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-02-11 20:56:12 +00:00
Arne Fitzenreiter
11b5e5cb8e toolchain: update to gcc-7.3.0 and enable retpolines on x86_64 and i586
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-02-11 20:56:12 +00:00
Arne Fitzenreiter
27ee5072c5 mdadm: fix build with gcc-7 2018-02-11 20:56:12 +00:00
Arne Fitzenreiter
eaec148fd8 sarg: update to 2.3.11 (needed for gcc-7) 2018-02-11 20:56:12 +00:00
Matthias Fischer
9a57c6cdd3 clamav: Update to 0.99.3
Excerpt from 'README':

"ClamAV 0.99.3 is a hotfix release to patch a set of vulnerabilities.

- fixes for the following CVE's: CVE-2017-6418, CVE-2017-6420,
  CVE-2017-12374, CVE-2017-12375, CVE-2017-12376, CVE-2017-12377,
  CVE-2017-12378, CVE-2017-12379, CVE-2017-12380.
- also included are 2 minor fixes to properly detect openssl install
  locations on FreeBSD 11, and prevent false warnings about zlib 1.2.1#
  version numbers."

For details see:
http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-27 16:26:45 +00:00
Erik Kapfer
adf3f4f4fe LZ4: New compression library.
New lossless data compression algorithm.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-23 13:20:58 +00:00
Matthias Fischer
eb03c511fd squid 3.5.27: Patch for SA 2018:2
As announced, here is the second patch for 'squid 3.5.27'.

For details about this and the previous patch (2018_1) regarding "ESI Response
processing" and "HTTP message processing", see:

http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-announce-ADVISORY-SQUID-2018-1-Denial-of-Service-issue-in-ESI-Response-processing-tp4684618.html

http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-announce-ADVISORY-SQUID-2018-2-Denial-of-Service-issue-in-HTTP-Message-processing-td4684617.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-23 13:08:19 +00:00
Matthias Fischer
101765c0fd squid 3.5.27: Patch for SA 2018:1
http://www.squid-cache.org/Versions/v3/3.5/changesets/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-23 13:07:43 +00:00
Jonatan Schlag
2da45fe0e1 dmidecode: update to version 3.1
The removed patches are included in this version so there is no need
that we apply them.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-20 14:33:52 +00:00
Michael Tremer
d7dde64550 Drop phpSANE
The upstream project is dead.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-12-16 12:38:01 +00:00
Michael Tremer
b2d4fa028f Drop cacti
This package was discontinued upstream and seems to be
a bit more lively again. However, nobody of the team
wants to maintain cacti. Therefore this is being dropped
for now.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-12-16 12:35:12 +00:00
Michael Tremer
ba03193ba7 fireinfo: Update to 2.1.12
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-12-14 17:44:20 +00:00
Arne Fitzenreiter
0476a6570d samba: import security updates from redhead
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-11-27 18:20:59 +01:00
Michael Tremer
d7d5774529 KRACK attack: Patch wpa_supplicant & hostapd
A vulnerability was found in how a number of implementations can be
triggered to reconfigure WPA/WPA2/RSN keys (TK, GTK, or IGTK) by
replaying a specific frame that is used to manage the keys. Such
reinstallation of the encryption key can result in two different types
of vulnerabilities: disabling replay protection and significantly
reducing the security of encryption to the point of allowing frames to
be decrypted or some parts of the keys to be determined by an attacker
depending on which cipher is used.

This fixes: CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,
  CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086,
  CVE-2017-13087, CVE-2017-13088

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-16 15:49:35 +01:00
Matthias Fischer
e3fc1d0a2b apache: Update to 2.4.28
http://apache.mirror.digionline.de//httpd/CHANGES_2.4.28

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-09 14:46:00 +01:00
Matthias Fischer
b76d0433be apache2: Import patch for CVE-2017-9798 ("optionsbleed")
Imported from:
https://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/server/core.c?r1=1805223&r2=1807754&pathrev=1807754&view=patch

For details see:
https://nvd.nist.gov/vuln/detail/CVE-2017-9798

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-09-20 22:01:50 +01:00
Michael Tremer
b9863c8845 apache2: Import patch for PR61382
We usually do not download patches, but rather ship them with
our source.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-09-07 12:27:43 +01:00
Matthias Fischer
c60ad61a14 squid: Update to 3.5.27
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-23 11:32:33 +01:00
Matthias Fischer
41d06f42b7 unbound: Update to 1.6.4
Hi, ("...back in town...") ;-)

For details see:
http://www.unbound.net/download.html

I had to remove the patch file: it wouldn't apply.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 11:50:03 +01:00
Matthias Fischer
6edc270abc squid 3.5.26: latest patches (14169-14182)
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 11:49:51 +01:00
Arne Fitzenreiter
da504bdc57 grub: ignore missing .symtab in modules
old binutis add an empty .symtab section at stripping
and grub check that this exists also on modules that export
no symbols.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-07-05 17:42:21 +02:00
Michael Tremer
dff0a94825 directfb: Fix compilation on ARM
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-22 16:06:06 +01:00
Arne Fitzenreiter
0b4976e293 kernel: fix amba modules build with gcc6
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-06-20 06:12:45 +02:00
Arne Fitzenreiter
ad73e5ec63 kernel: rpi build fix
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-06-18 10:29:45 +02:00
Michael Tremer
15a2c03f5d glibc: Don't use locale-archive
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-15 11:45:19 +01:00
Matthias Fischer
772237d99f squid: Update to 3.5.26
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-14 15:52:33 +01:00
Matthias Fischer
c63136978f squid 3.5.25: latest patches (14155-14167)
For details see:
http://www.squid-cache.org/Versions/v3/3.5/changesets/

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-14 15:52:33 +01:00
Marcel Lorenz
35d4925c74 7zip: update to 16.02
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-07 10:09:50 +01:00
Marcel Lorenz
d31ef401a6 gawk: update to 4.1.4
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-07 10:03:50 +01:00
Marcel Lorenz
8e700473ac remove old bash 3.2 patches
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-07 10:00:43 +01:00
Marcel Lorenz
5dd7cec068 pkg-config: update to 2.29.2
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-07 09:56:11 +01:00
Michael Tremer
63ba176be3 u-boot: Fix compile issues with GCC 6
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-02 16:23:00 +01:00
Michael Tremer
9376c3ae92 Merge remote-tracking branch 'origin/master' into next 2017-05-31 21:26:45 +01:00
Arne Fitzenreiter
1d13e6373a samba: add current RHEL6 patches
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-05-28 10:40:09 +02:00
Michael Tremer
e65d5a0061 imspector: Drop package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-05-22 20:03:01 +01:00
Michael Tremer
0ff77cf478 SDL: Update to 1.2.15
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-05-20 09:52:53 +01:00
Michael Tremer
63c94c5185 clamav: Import patch to fix build issues with GCC 6
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-05-19 20:25:30 +01:00
Michael Tremer
7502d6f898 fuse: Update to 2.9.7
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-05-18 12:10:23 +01:00
Michael Tremer
26d7f93ed9 perl: Fix Errno.pm generation for GCC >= 5
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-05-18 12:08:48 +01:00
Michael Tremer
8480dabca3 fontconfig: Fix build with glibc >= 2.25
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-05-18 12:08:32 +01:00
Michael Tremer
a18c2318d8 grub: Fix compile error in gnulib with newer GCCs
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-05-18 12:08:10 +01:00
Michael Tremer
66f3b51d6d python: Update to 2.7.13
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-05-18 12:08:00 +01:00
Michael Tremer
990eb18bd9 pam: Compile fix for newer glibcs
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-05-18 12:06:57 +01:00
Michael Tremer
bff88a482c openssl: Make package compile on all arches
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-05-18 12:06:48 +01:00