Matthias Fischer
78756496c9
bind: Update to 9.11.13
...
For details see:
https://downloads.isc.org/isc/bind9/9.11.13/RELEASE-NOTES-bind-9.11.13.html
"Security Fixes
Set a limit on the number of concurrently served pipelined TCP queries.
This flaw is disclosed in CVE-2019-6477. [GL #1264 ]"
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-11-30 09:57:49 +00:00
Matthias Fischer
0786c686ea
unbound: Update to 1.9.5
...
For details see:
https://nlnetlabs.nl/pipermail/unbound-users/2019-November/011897.html
"This release is a fix for vulnerability CVE-2019-18934, that can cause
shell execution in ipsecmod.
Bug Fixes:
- Fix for the reported vulnerability.
The CVE number for this vulnerability is CVE-2019-18934"
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-11-30 09:55:22 +00:00
Erik Kapfer
eb0adc17d6
pcre: Add pcregrep to core system
...
Triggered by --> https://community.ipfire.org/t/pcregrep-on-ipfire/259 .
This patch adds pcregrep only from the actual package not from pcre-compat.
Signed-off-by: Erik Kapfer <ummeegge@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-11-30 09:49:15 +00:00
Arne Fitzenreiter
e557cecbdd
python: update to 2.7.17
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-11-28 18:41:18 +01:00
Arne Fitzenreiter
4baee8fa4c
kernel: fix x86_64 rootfile
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-11-15 16:29:42 +01:00
Arne Fitzenreiter
44b227b102
kernel: update to 4.14.154
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-11-14 22:12:12 +01:00
Arne Fitzenreiter
6eac34e431
intel-microcode: fix rootfile
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-11-14 01:55:46 +00:00
Arne Fitzenreiter
1d91ea28f9
bash: fix rootfile
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-11-14 01:55:38 +00:00
Peter Müller
415fb8b5bd
bash: update to 5.0 (patchlevel 11)
...
The third version of this patch also includes patches 1-11
for version 5.0, drops orphaned 4.3 patches, and fixes rootfile
mistakes reported by Arne.
Please refer to https://tiswww.case.edu/php/chet/bash/bashtop.html
for release notes.
Cc: Michael Tremer <michael.tremer@ipfire.org >
Cc: Arne Fitzenreiter <arne_f@ipfire.org >
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-11-13 19:42:59 +00:00
Peter Müller
c82aa03e2c
readline: update to 8.0 (patchlevel 1)
...
The third version of this patch fixes missing rootfile changes, drops
orphaned readline 5.2 patches (as they became obsolete due to
readline-compat changes), includes readline 8.0 upstream patch, and
keeps the for-loop in LFS file (as commented by Michael).
Cc: Michael Tremer <michael.tremer@ipfire.org >
Cc: Arne Fitzenreiter <arne_f@ipfire.org >
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-11-13 19:42:43 +00:00
peter.mueller@ipfire.org
f7b1fe542f
readline-compat: update to 6.3
...
This is necessary as many add-ons still need readline-compat as they
cannot link against readline 8.0, yet.
Reported-by: Arne Fitzenreiter <arne_f@ipfire.org >
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-11-13 19:42:31 +00:00
Matthias Fischer
e93959a7aa
logwatch: Update to 7.5.2
...
For details see:
https://build.opensuse.org/package/view_file/server:monitoring/logwatch/ChangeLog?expand=1
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-11-13 19:11:09 +00:00
Erik Kapfer
cb41e4a9a9
libarchiv: Update to version 3.4.0
...
Version 3.4.0 is a feature and security release. The changelog can be found in here --> https://github.com/libarchive/libarchive/releases .
Signed-off-by: Erik Kapfer <ummeegge@ipfire.org >
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-11-13 18:45:32 +00:00
Erik Kapfer
bc456dd750
lz4: Update to version 1.9.2
...
Several fixes and improvements has been integrated. The changes list through the different versions since
the current version 1.8.1.2 can be found in here --> https://github.com/lz4/lz4/releases
Signed-off-by: Erik Kapfer <ummeegge@ipfire.org >
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-11-13 18:43:04 +00:00
Matthias Fischer
4ba4645d12
bind: Update to 9.11.12
...
For details see:
https://downloads.isc.org/isc/bind9/9.11.12/RELEASE-NOTES-bind-9.11.12.html
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-10-21 19:01:32 +00:00
Michael Tremer
951a9f9ba0
linux+iptables: Drop support for IMQ
...
This is no longer needed since we are using IFB now
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-10-21 18:58:08 +00:00
Arne Fitzenreiter
c27fdd8697
Revert "linux+iptables: Drop support for IMQ"
...
This reverts commit 59b9a6bd22 .
2019-10-20 20:20:26 +00:00
Arne Fitzenreiter
cafef39aa2
Revert "suricata: Enable rust support"
...
This reverts commit 5b87687cb1 .
2019-10-18 20:39:47 +02:00
Arne Fitzenreiter
eb000cd787
Revert "update rootfiles for bash and readline"
...
This reverts commit f41d936026 .
2019-10-15 07:37:23 +00:00
Michael Tremer
59b9a6bd22
linux+iptables: Drop support for IMQ
...
This is no longer needed since we are using IFB now
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-10-14 18:02:55 +00:00
peter.mueller@ipfire.org
f41d936026
update rootfiles for bash and readline
...
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-10-14 17:12:06 +00:00
Arne Fitzenreiter
2fabddb44d
rust: update armv5tel rootfile
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-10-09 20:23:05 +02:00
Arne Fitzenreiter
194c7b16e4
rust: add i586 and aarch64 rootfile
...
todo: armv5tel is still missing...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-10-09 18:11:32 +02:00
Stefan Schantl
5b87687cb1
suricata: Enable rust support
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-10-08 19:08:37 +00:00
Stefan Schantl
59fe973584
rust: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-10-08 19:08:23 +00:00
Matthias Fischer
64243e995b
libpcap: Update to 1.9.1
...
For details see:
https://www.tcpdump.org/libpcap-changes.txt
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-10-08 19:04:36 +00:00
Matthias Fischer
146c8a58ab
unbound: Update to 1.9.4
...
For details see:
https://nlnetlabs.nl/pipermail/unbound-users/2019-October/011832.html
"This release is a fix for vulnerability CVE-2019-16866 that causes a
failure when a specially crafted query is received."
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-10-08 19:01:41 +00:00
Michael Tremer
1ad45a5a09
sane: Update to 1.0.28
...
This patch updates the package and removes the sanedloop script
which was needed to launch saned, but that program can now run
in standalone mode.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-10-08 18:39:47 +00:00
Matthias Fischer
80d5bb76dd
iproute2: Update to 5.3.0
...
For details see:
https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/log/?h=v5.3.0
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-10-08 18:37:03 +00:00
Erik Kapfer
24f9c830eb
Net-SSLeay: Update to version 1.88
...
Signed-off-by: Erik Kapfer <ummeegge@ipfire.org >
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-10-08 18:24:32 +00:00
Michael Tremer
1df47cc9ee
libssh: New package
...
This is required by Bird to support RPKI.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-10-08 18:19:33 +00:00
Matthias Fischer
5121f35be3
bind: Update to 9.11.11
...
For details see:
https://downloads.isc.org/isc/bind9/9.11.11/RELEASE-NOTES-bind-9.11.11.html
"Security Fixes
A race condition could trigger an assertion failure when a large
number of incoming packets were being rejected. This flaw is disclosed
in CVE-2019-6471. [GL #942 ]
...
Bug Fixes
Glue address records were not being returned in responses to root priming
queries; this has been corrected. [GL #1092 ]
Interaction between DNS64 and RPZ No Data rule (CNAME *.) could cause
unexpected results; this has been fixed. [GL #1106 ]
named-checkconf now checks DNS64 prefixes to ensure bits 64-71 are zero.
[GL #1159 ]
named-checkconf could crash during configuration if configured to use "geoip
continent" ACLs with legacy GeoIP. [GL #1163 ]
named-checkconf now correctly reports missing dnstap-output option when dnstap
is set. [GL #1136 ]
Handle ETIMEDOUT error on connect() with a non-blocking socket. [GL #1133 ]"
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-10-08 18:06:58 +00:00
Matthias Fischer
57354c8187
pcre: Update to 8.43
...
For details see:
http://www.pcre.org/original/changelog.txt
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-10-08 18:01:13 +00:00
Matthias Fischer
5551237b1a
iproute2: Update to 5.2.0
...
For details see:
https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/log/
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-10-08 17:56:02 +00:00
Matthias Fischer
7a03d4b08a
iptables: Update to 1.8.3
...
For details see:
https://www.netfilter.org/projects/iptables/files/changes-iptables-1.8.3.txt
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-10-08 17:51:19 +00:00
Stefan Schantl
deb594c1b6
libnetfilter_queue: Update to 1.0.4
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-10-08 17:47:26 +00:00
Erik Kapfer
639ce4545d
IO-Socket-SSL: Update to version 2.066
...
Fix for "Undefined subroutine &IO::Socket::SSL::set_client_defaults called at /usr/libexec/git-core/git-send-email" problem.
Signed-off-by: Erik Kapfer <ummeegge@ipfire.org >
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-09-18 16:24:22 +00:00
Arne Fitzenreiter
ece63aa950
openssl: update to 1.1.1d
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-09-12 05:52:47 +00:00
Arne Fitzenreiter
f3158de0b8
usb-modeswitch-data: fix rootfile
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-09-04 14:15:35 +00:00
Ramax Lo
46b457393d
usb_modeswitch_data: update to 20170806
...
Signed-off-by: Ramax Lo <ramaxlo@gmail.com >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-09-02 20:42:50 +00:00
Matthias Fischer
d0fc3b2008
unbound: Update to 1.9.3
...
For details see:
https://nlnetlabs.nl/pipermail/unbound-users/2019-August/011765.html
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-09-02 20:19:33 +00:00
Matthias Fischer
cf2aa683a9
bind: Update to 9.11.10
...
For details see:
https://downloads.isc.org/isc/bind9/9.11.10/RELEASE-NOTES-bind-9.11.10.html
"Security Fixes
A race condition could trigger an assertion failure when a large
number of incoming packets were being rejected.
This flaw is disclosed in CVE-2019-6471. [GL #942 ]"
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-08-28 08:16:48 +00:00
Arne Fitzenreiter
16bd7e43c1
aarch64: rootfile updates
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-08-26 10:12:56 +00:00
Arne Fitzenreiter
329f4a3fe1
perl-NetAddr-IP: move to core
...
I had added this for spamassassin but now the geoip-converter needs it too.
It was not pushed yet so there is no need to remove it from pakfire databases.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-08-24 11:33:45 +02:00
Arne Fitzenreiter
392994dcfb
geoip-generator: added to build legacy GeoIP.dat file
...
program and scripts based on debian geoip packages.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-08-24 11:29:01 +02:00
Arne Fitzenreiter
fd24c5dcbd
Merge remote-tracking branch 'arne_f/perl-5.30' into next
2019-08-20 17:43:53 +00:00
Matthias Fischer
6817d23a01
bind: Update to 9.11.9
...
For details see:
https://downloads.isc.org/isc/bind9/9.11.9/RELEASE-NOTES-bind-9.11.9.html
"Security Fixes
A race condition could trigger an assertion failure when a large
number of incoming packets were being rejected.
This flaw is disclosed in CVE-2019-6471. [GL #942 ]"
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-08-20 17:37:26 +00:00
Matthias Fischer
e83393146f
apache: Update to 2.4.41
...
For details see:
http://mirror.dkd.de/apache//httpd/CHANGES_2.4.41
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-08-20 17:36:48 +00:00
Michael Tremer
d111587cc3
gcc: Build the Go compiler
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-08-20 17:21:08 +00:00
Arne Fitzenreiter
00a655fa5c
rootfiles: replace x86_64 with MACHINE
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-08-17 16:47:34 +02:00