Commit Graph

9841 Commits

Author SHA1 Message Date
Arne Fitzenreiter
f83c50537b core100: add function to set last correct installed core on update.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-08 19:31:49 +01:00
Arne Fitzenreiter
822b4313d1 kernel: update to 3.14.63
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-05 17:09:32 +01:00
Arne Fitzenreiter
4f472f86f8 flash-images: copy kernel and initrd first
there is a u-boot bug that not find all files if the directory entries
was splittet to more sectors so copy the important files first.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-05 17:07:23 +01:00
Arne Fitzenreiter
4a6cfe51a1 Merge remote-tracking branch 'origin/master' into next
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-04 07:09:02 +01:00
Arne Fitzenreiter
75ad2e4e88 openssl: add forgotten sslv2 compile option
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-03 09:16:05 +01:00
Arne Fitzenreiter
353e08cd77 openssl: compile with sslv2 support but disable
the new default breaks the ABI so we need to compile in but
disable it with a patch.
2016-03-02 21:31:07 +01:00
Arne Fitzenreiter
5d95fd5af1 Revert "python-m2crypto: remove SSLv2_method"
This reverts commit d86a249286.
2016-03-02 21:13:31 +01:00
Arne Fitzenreiter
ac385b2f17 OpenSSH: remove slogin binary in rootfile and update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-01 22:50:53 +01:00
Arne Fitzenreiter
d86a249286 python-m2crypto: remove SSLv2_method
this is removed by OpenSSL 1.0.2g

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-01 22:25:55 +01:00
Arne Fitzenreiter
68537369b0 core99: set version to 99
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-01 16:02:50 +01:00
Arne Fitzenreiter
eea5bfe465 openssl: security update to 1.0.2g
this fixes diverse security problems.
check http://openssl.org/news/secadv/20160301.txt for details.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-01 16:00:19 +01:00
Arne Fitzenreiter
aced5a9578 openssh: update to 7.2p1
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-01 15:59:34 +01:00
Arne Fitzenreiter
7e90cf38cb backup: fix vnstat path
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-29 21:53:41 +01:00
Arne Fitzenreiter
defc321f04 core99: create core99 for OpenSSL security update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-29 21:49:02 +01:00
Michael Tremer
64835e022c udev: Fix calling VLAN script
The VLAN hotplugging script was called with a wrong parameter that
should just be used to rename devices. Hence the script was not
correctly executed and did not create the virtual devices.

Fixes: #11009

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-28 12:29:45 -08:00
Matthias Fischer
a6cd8b9b5d dnsmasq: 2.76test10 with latest patch (005) and some fixes
1. Added patch 005 because of the discussion on the dnsmasq-list:
"I've noticed that replies which get their TTL from the dhcp-ttl
option always get the TTL specified in dhcp-ttl. I'd prefer
something like max(0, min(<dhcp-ttl>, <lease-expire-time> -
<now>)). Otherwise, dns might hand out a high TTL for a dhcp-lease
which expires one second later.
...
Seems a sensible addition.

Cheers,

Simon."

2. Fixed several line numbers and patch lines in
'dnsmasq-Add-support-to-read-ISC-DHCP-lease-file.patch'. On the last build
I got some "Hunk failed" messages. Patches are now applied exactly at the
given lines.

3. Nevertheless, I still get some warnings:
...
dnsmasq.c: In function 'main':
dnsmasq.c:55:7: warning: unused variable 'did_bind' [-Wunused-variable]
   int did_bind = 0;
       ^
dnsmasq.c:54:9: warning: unused variable 'bound_device' [-Wunused-variable]
   char *bound_device = NULL;
         ^
...
isc.c: In function 'dhcp_lease_new':
isc.c:40:3: warning: ignoring return value of 'asprintf', declared with attribute warn_unused_result [-Wunused-result]
   asprintf(&lease->fqdn, "%s.%s", hostname, daemon->domain_suffix);
   ^

Asking about these warnings in the dnsmasq-list showed no reaction - no one answered.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-28 12:15:18 -08:00
Matthias Fischer
3b9815eb87 dnsmasq: 2.76test10 with latest patches (001-004)
This is 'dnsmasq 2.76test10', based on current 'next', containing latest patches.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-28 12:15:11 -08:00
Arne Fitzenreiter
43747fae33 kernel: update to 3.14.62
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-26 13:43:33 +01:00
Arne Fitzenreiter
5f39eb2119 rename core99 to core100 for inserting another OpenSSL Security update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-26 07:27:09 +01:00
Michael Tremer
77c48fbe35 core99: Ship updated xz
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-24 22:13:36 -08:00
Marcel Lorenz
f443b4cba7 bison: update to 3.0.4
Update bison to the last version from Linux from Scratch.

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-24 22:12:53 -08:00
Marcel Lorenz
962fade2d4 xz: update to 5.2.2
Update xz to last version from Linux from Scratch.

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-24 22:12:53 -08:00
Marcel Lorenz
28ef7a6a9e m4: update to 1.4.17
Update m4 to last version from Linux from Scratch.

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-24 22:12:53 -08:00
Michael Tremer
86b759785b make.sh: Update source upload URL
There is no longer a SSH service on source.ipfire.org.

The usual login on git.ipfire.org should be used instead.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-24 22:12:53 -08:00
Arne Fitzenreiter
efd02229ae flash-images: change root uuid replacer sed
i cannot really test this on my systems.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-24 16:01:33 +01:00
Arne Fitzenreiter
920f195095 flash-image: set RAMDISK_MODE=2
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-23 20:08:25 +01:00
Arne Fitzenreiter
c83d161463 init-functions: enable autoramdisk with 400MB
The 512MB raspberry pi reserve some memory for buffers and gpu
so there are a bit less than 490 MB free.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-23 20:01:30 +01:00
Arne Fitzenreiter
38956241bb flash-image: fix root uuid on some build machines.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-23 19:49:49 +01:00
Michael Tremer
aacab139dc stunnel: Bump release version
The version on the server seems to be still linked against
the older 0.9.8 series of openssl and needs to be updated
on all systems.

I manually pushed this update for the 2.17 branch on i586.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-23 09:43:25 -08:00
Arne Fitzenreiter
ee552b7e1a kernel: update to 3.14.61
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-19 07:18:29 +01:00
Arne Fitzenreiter
829b0ba851 core98: fix typo
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-18 04:31:28 +01:00
Arne Fitzenreiter
8c065b268d Merge branch 'core98' of git.ipfire.org:/pub/git/ipfire-2.x into core98 2016-02-17 22:01:56 +01:00
Arne Fitzenreiter
2e51e8607e core98: remove wrong grub.cfg only if it was empty.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-17 21:57:00 +01:00
Arne Fitzenreiter
802b916d10 Merge remote-tracking branch 'origin/master' into next
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Conflicts:
	make.sh
2016-02-17 19:47:50 +01:00
Arne Fitzenreiter
1ffbca6e4f glibc: disable patches that break build on arm.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-17 18:49:38 +01:00
Arne Fitzenreiter
5a9039f132 core98: new update with glibc security fixes.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-17 14:05:15 +01:00
Arne Fitzenreiter
bb330e25e9 glibc: new RHEL6 patches / fix CVE-2015-7547 and more
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-17 12:46:11 +01:00
Arne Fitzenreiter
879458d41f rename core98 to 99 for glibc security update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-17 10:10:19 +01:00
Matthias Fischer
fd3b90c875 squid 3.4.14: Bugfix for #4431 (C code is not compiled with CFLAGS)
For details see: http://bugs.squid-cache.org/show_bug.cgi?id=4431

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-13 18:51:08 +00:00
Arne Fitzenreiter
e039df8613 backports: remove all old media modules.
more modules are renamed or merged into other modules.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-10 08:36:17 +01:00
Arne Fitzenreiter
a760a5cfa9 dracut: remove marvell sdio modules from initrd.
this allows to switch to uap module on dreamplug.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-08 13:53:13 +01:00
Michael Tremer
7b757df70f core98: Ship changed /etc/ppp/ip-up
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-08 01:52:18 +00:00
Matthias Fischer
c1bf984e05 New IP-address of 'ping.ipfire.org'
Telekom gateways (e.g.) don't answer 'pings', therefor '/etc/ppp/ip-up'
uses 'ping.ipfire.org' for the 'gateway Graph' in 'Status / Network (other'.
After moving the infrastructure, several IP addresses were changed.
'178.63.73.246' doesn't work anymore for 'ping.ipfire.org', its now '81.3.27.38'.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-08 01:51:26 +00:00
Michael Tremer
8260fb7e0e core98: Ship recently updated grep and sed
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-08 01:40:50 +00:00
Matthias Fischer
c9ed30440a grep: Update to 2.22
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-08 01:36:56 +00:00
Matthias Fischer
9dc6723a0a sed: Update to 4.2.2
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-08 01:33:53 +00:00
Michael Tremer
067db4d53a Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2016-02-08 01:33:15 +00:00
Arne Fitzenreiter
d651e48f70 kernel: disable grsecurity KSTACKOVERFLOW.
this is the reason for crashes usb lan dongles and media devices.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-02-07 09:40:03 +01:00
Michael Tremer
645378fbb9 firewall: Fix MAC filter
Packets destined for the firewall coming in from the blue
device where accepted too early to be processed by the
firewall input chain rules.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-05 10:24:03 +00:00
Michael Tremer
ff43197b01 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2016-02-04 14:35:55 +00:00