[git.ipfire.org] IPFire 2.x development tree branch, core133, created. f081e454a6a0074a7ded39bbe0eb5eadd8e3ecf3 - IPFire-SCM

12 Jun 2019


      This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".
The branch, core133 has been created
        at  f081e454a6a0074a7ded39bbe0eb5eadd8e3ecf3 (commit)
- Log -----------------------------------------------------------------
commit f081e454a6a0074a7ded39bbe0eb5eadd8e3ecf3
Author: Arne Fitzenreiter arne_f@ipfire.org
Date:   Wed Jun 12 19:57:21 2019 +0200
finish core133
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit fa7de475fe745004b207eea07ba178b61197fe5e
Author: Peter Müller peter.mueller@ipfire.org
Date:   Mon Jun 10 19:02:00 2019 +0000
Tor: fix permissions after updating, too
Fixes #12088
Signed-off-by: Peter Müller peter.mueller@ipfire.org
    Reported-by: Erik Kapfer ummeegge@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 5d65813aa31685e8e70b0a2e796c9abbeae60f55
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Tue Jun 11 07:00:38 2019 +0100
core133: Ship updated wpa_supplicant
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 33fb0c91ec1f2dfc8d09550b18312cf87fd69228
Author: Matthias Fischer matthias.fischer@ipfire.org
Date:   Tue Jun 11 15:32:15 2019 +0200
wpa_supplicant: Update to 2.8
For details see:
    https://w1.fi/cgit/hostap/plain/wpa_supplicant/ChangeLog
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 894eaf5184dda4f851b01d2ed6806d0b0609b321
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Tue Jun 11 17:07:23 2019 +0000
smt: Only disable SMT when the kernel thinks it is vulnerable
On virtual machines, it does not make sense to disable SMT for the
    virtual cores. This has to be done by the hypervisor.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 8e101c0bdaea04dc759773342d719b8daeb95f67
Author: Peter Müller peter.mueller@ipfire.org
Date:   Mon Jun 10 18:22:00 2019 +0000
ship language files in Core Update 133
These were missing in Core Update 132, and some strings
    (especially on the "CPU vulnerabilities" page) missed translations.
Signed-off-by: Peter Müller peter.mueller@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 35f12f29983b0baa0df6736b10f02b6e78c85030
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Mon Jun 10 09:58:15 2019 +0100
Rootfile update
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 33afb0681feb8ef719c9b53cda05fa8698d1ba07
Author: Stefan Schantl stefan.schantl@ipfire.org
Date:   Sun Jun 9 17:55:34 2019 +0200
convert-ids-modifysids-file: Fix check if the ids is running.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 3f7cec61c9d00aab268bdf02456667db86604329
Author: Matthias Fischer matthias.fischer@ipfire.org
Date:   Sun Jun 9 12:10:07 2019 +0200
hostapd: Update to 2.8
For details see:
    https://w1.fi/cgit/hostap/plain/hostapd/ChangeLog
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 28093c8376fb8bd13ce44585fcbed49610093158
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Sat Jun 8 11:34:37 2019 +0100
Rootfile update
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 09b99106962149873a7071931afff75d84fb1ef9
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Fri Jun 7 11:14:11 2019 +0100
Rootfile update
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit c0fc25861ff4ce8acb610e43c191d1d509ae78f8
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Fri Jun 7 11:13:01 2019 +0100
core133: Ship updated knot package
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit d52b5a4c2274cbc99a1e332cb058f8542a941120
Author: Matthias Fischer matthias.fischer@ipfire.org
Date:   Thu Jun 6 20:30:56 2019 +0200
knot: Update to 2.8.2
For details see:
    https://www.knot-dns.cz/2019-06-05-version-282.html
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 171512b7a76f61669b61d234965570e40f585fee
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Wed Jun 5 12:46:37 2019 +0100
Update contributors
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 21a838238378b531551f42e2c582f0c5f82ca26f
Author: Erik Kapfer ummeegge@ipfire.org
Date:   Tue Jun 4 15:00:24 2019 +0200
suricata: Enable EVE logging
The EVE output facility outputs alerts, metadata, file info and protocol specific records through JSON.
    for further informations please see --> https://suricata.readthedocs.io/en/suricata-4.1.2/output/eve/index.html .
Signed-off-by: Erik Kapfer ummeegge@ipfire.org
    Acked-by: Stefan Schantl stefan.schantl@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 3c91ee80925f175cd5c599a2d46b78f31d726a35
Author: Stefan Schantl stefan.schantl@ipfire.org
Date:   Wed Jun 5 20:56:35 2019 +0200
convert-ids-modifysids-file: Adjust code to use changed write_modify_sids_file function
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit e1f8f870ea975c6c47afe8fd907ffb75980fe7db
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Wed Jun 5 12:42:53 2019 +0100
core133: Ship snort configuration converter
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit f1add9a8dd5271af669ee0831f30b207b33d158d
Author: Stefan Schantl stefan.schantl@ipfire.org
Date:   Wed Jun 5 20:56:34 2019 +0200
convert-snort: Adjust code to use changed modify_sids_file function.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 81bae51f6102a555ba50a5d42ed433288ddcfe54
Author: Stefan Schantl stefan.schantl@ipfire.org
Date:   Wed Jun 5 20:56:33 2019 +0200
ids-functions.pl: Rework function write_modify_sids_file().
Directly implement the logic to determine the used ruleset and if
    IDS or IPS mode should be used into the function instead of pass those
    details as arguments.
This helps to prevent from doing this stuff at several places again and again.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit a40bcbb02cf1012405c4a0507d4b54d4d8a45064
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Wed Jun 5 12:41:37 2019 +0100
core133: Ship IPS changes
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit a5ba473c15c73a2e88d3333c73c1f13a332010b6
Author: Tim FitzGeorge ipfr@tfitzgeorge.me.uk
Date:   Wed Jun 5 20:56:32 2019 +0200
suricata: correct rule actions in IPS mode
In IPS mode rule actions need to be have the action 'drop' for the
    protection to work, however this is not appropriate for all rules.
    Modify the generator for oinkmaster-modify-sids.conf to leave
    rules with the action 'alert' here this is appropriate.  Also add
    a script to be run on update to correct existing downloaded rules.
Fixes #12086
Signed-off-by: Tim FitzGeorge ipfr@tfitzgeorge.me.uk
    Tested-by: Peter Müller peter.mueller@ipfire.org
    Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 9734a58faf9832a708057e44092b96976401a8eb
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Wed Jun 5 12:34:44 2019 +0100
core133: Ship IDS ruleset updater
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 72ab71969fd88fc1bf78ddd77f066f86b15731c7
Author: Stefan Schantl stefan.schantl@ipfire.org
Date:   Wed Jun 5 18:27:10 2019 +0200
update-ids-ruleset: Run as unprivileged user.
Check if the script has been launched as privileged user (root) and drop all
    permissions by switching to the "nobody" user and group.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit dc9ac30c8dfb157c8ac7af5849d166f42462b08d
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Wed Jun 5 05:08:31 2019 +0100
core133: Ship updated vpnmain.cgi file and regenerate configuration
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 745915d82c3b2ca68275241425cf12f703b18f48
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Wed Jun 5 10:22:53 2019 +0100
vpnmain.cgi: Fix wrong cipher suite generation when PFS is disabled
Fixes: #12091
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 01320a141d68776abbbbe4e22d0f0c5532997371
Author: Matthias Fischer matthias.fischer@ipfire.org
Date:   Wed Jun 5 11:54:29 2019 +0200
monit: Some fixes for 'monitrc'
Just cosmetics:
    Removed all trailing spaces - there were a few...
Activated 'monit' start delay:
    I activated this option to avoid running into a race condition while started through
    '/etc/init.d/monit start'.
As mentioned in 'monit' manual:
    "...if a service is slow to start, Monit can assume that the service is not running
    and possibly try to start it [again] and raise an alert, while, in fact the service
    is already about to start or already in its startup sequence."
This happened here during testing with (e.g.) Clamav.
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit c899be2fd02e24f86f801191652d6083eb5524b9
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Wed Jun 5 00:33:36 2019 +0100
core133: Ship updated dhcp.cgi
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit e4f9ea3c1650d369f8a764605203778bfea0d390
Author: Bernhard Bitsch Bernhard.Bitsch@gmx.de
Date:   Tue Jun 4 12:24:00 2019 +0200
dhcp.cgi: Save fixed leases immediately after addition of a new lease
This changes the behaviour of the script to immediately save the added
    lease to file but still remain in edit mode to make changes.
If the user does not make any changes, the lease is immediately saved
    and there is no second click required to write it to file.
This a more natural flow that is expected by almost all users of this
    feature.
Fixes: #12050
    Signed-off-by: Bernhard Bitsch bbitsch@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 0bb25a4f61e494a8118bfb764625cd98fe209438
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Tue Jun 4 23:55:17 2019 +0100
SMT: Disable when system is vulnerable to L1TF (Foreshadow)
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit cfbb61a74d4729acbbc21df6488023e3e07a1408
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Tue Jun 4 23:44:49 2019 +0100
Rootfile update for ARM kernels
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 236831c0f97884d50a15fd5c18d92d63c2590cf0
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Tue Jun 4 23:41:59 2019 +0100
Rootfile update for gcc on i586
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit d62925de4fa78976779da79c27d0c82ac1692f28
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Tue Jun 4 23:32:35 2019 +0100
core133: Ship updated PAM
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 0105cedb0d5b2c6a9b4b69c8c60f8df539ca01d5
Author: Matthias Fischer matthias.fischer@ipfire.org
Date:   Wed Jun 5 09:16:58 2019 +0200
linux-pam: Update to 1.3.1
For details see:
    https://github.com/linux-pam/linux-pam/releases
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit ba329dce8f3eeeef9ac2953632bd75fb6bb71698
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Tue Jun 4 23:31:51 2019 +0100
core133: Ship updated rrdtool
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 83d4264ebaabfcb58d501e51748b13ef2e1242d8
Author: Matthias Fischer matthias.fischer@ipfire.org
Date:   Wed Jun 5 09:13:11 2019 +0200
rrdtool: Update to 1.7.2
For details see:
    https://oss.oetiker.ch/rrdtool/pub/CHANGES
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 2a1c1735893f2c6546413be820bd4ec32150c14e
Author: sfeddersen sfeddersen@ipfire.org
Date:   Tue Jun 4 21:49:22 2019 +0200
BUG 11487:solve problem with unexspected shutdown
Solve problem with unexspected shutdown problem when checking a single client.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit c7def606493b4765265c44730b5d57da901e49ef
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Mon Jun 3 09:20:05 2019 +0100
Rootfile update
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 99597de716394f665fa745d4ef3784c5b495d02e
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Sun Jun 2 22:52:57 2019 +0100
make.sh: Set default ccache size to 4G
Since we have now one cache for each architecture, we do not
    need to make it too large.
The largest build (i586 because of the two kernels) uses around
    2.5GB after one build. So 4G will give us some space.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit f748c79450589fc9046c3be832df1f91b2ac1d27
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Sun Jun 2 22:49:42 2019 +0100
core133: Ship updated ovpnmain.cgi
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit d2de0a00cefb9f4f84b7ad047fd2e3032b2954fb
Author: Erik Kapfer ummeegge@ipfire.org
Date:   Sat Jun 1 08:46:14 2019 +0200
ovpnmain.cgi: Fixed line break for LZO option
It is better readable if everything is in one line.
Signed-off-by: Erik Kapfer ummeegge@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 7c1bbc9339e33d8b6c1fa7f5a53fd9bfe6c9045a
Author: Matthias Fischer matthias.fischer@ipfire.org
Date:   Fri May 31 21:54:45 2019 +0200
monit: Update to 5.25.3
For details see:
    https://mmonit.com/monit/changes/
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 3608d485567284b52c17754c7f8809ee793db7cc
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Wed May 29 15:28:45 2019 +0100
make.sh: Have a ccache for each architecture
It does not make much sense to mix architectures into a single
    ccache:
* There is never going to be a match
    * The cache gets bigger and therefore slower
    * If both architectures are being compiled one after the other and
      the cache hits its maximum size, cached but still needed content
      will be dropped
    * Only both can be deleted together
This small change splits this into multiple caches. One per
    architecture. Therefore we should be more efficient on builders
    that build for multiple architectures.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit b0ec4158f374ccc2fe7e73caf40ce26f1db45025
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Wed May 29 15:24:29 2019 +0100
miau: Drop package
This is not maintained since 2010
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit f62f432a27a0e7d25fb4b9700b5ff35acef84f20
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Wed May 29 11:22:22 2019 +0100
openssl: Update to 1.1.1c
Fixes CVE-2019-1543
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 7b6d2972e358f7042abd3b282a2226670549119d
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Tue May 28 13:05:50 2019 +0100
strongswan: Update to 5.8.0
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 3c8aa8d75bc63c5958c758756546f9413be47676
Author: Erik Kapfer ummeegge@ipfire.org
Date:   Tue May 28 11:38:59 2019 +0200
tshark: Update to 3.0.2
Incl. one vulnerability and several bug fixes. For full overview --> https://www.wireshark.org/docs/relnotes/wireshark-3.0.2.html .
- Disabled geoip support since libmaxminddb is not presant.
    - Added dictionary in ROOTFILE to prevent "radius: Could not open file: '/usr/share/wireshark/radius/dictionary' " .
    - Added CMAKE build type
    - Removed profile examples and htmls completly from ROOTFILE.
Signed-off-by: Erik Kapfer ummeegge@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 4e54a8e2d6d4286f85a38a492d34452092404b24
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Tue May 28 12:01:30 2019 +0100
ccache: Automatically set size to 8GB
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 992fdd3d075b995e704b55b8bc66f44c5ad6aecf
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Tue May 28 11:44:32 2019 +0100
core133: Ship toolchain changes
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 71ff23c765c76cfac8a8b5e93be5e05e2570a960
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Tue May 28 11:41:46 2019 +0100
Rootfile update
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit c9b7fc40c0084b5c09398eed133430de18492e5e
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Tue May 28 11:36:06 2019 +0100
hyperscan: Limit amount of memory being used during build
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 29fc1c8c3a23834425ac646dca26c350ebb2c52c
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Mon May 27 16:25:01 2019 +0100
ddns: Update to 011
Add support for two new providers and has some general bug fixes
    included.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit fe9dbfa1245e90edfd3389c2c532bda49fe22d0c
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Mon May 27 15:48:44 2019 +0100
core133: Ship updated IPS ruleset sources
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 79af9f69386f3ded294a802a74cc2cd9b82fcdc4
Author: Stefan Schantl stefan.schantl@ipfire.org
Date:   Sun May 26 20:11:55 2019 +0200
ruleset-sources: Update snort dl urls.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 21f21076978aea64770e18b1dac631f5f8625dad
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Mon May 27 15:47:02 2019 +0100
tor: Ship updated CGI
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit ac2fdbb15efa305b4a7f462ea37abc1448f6d069
Author: Erik Kapfer ummeegge@ipfire.org
Date:   Sun May 26 17:02:56 2019 +0200
tor.cgi: Disable debugging output
Signed-off-by: Erik Kapfer ummeegge@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit f6104aa1e016320eca91e1cf4280d612a44066de
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Mon May 27 15:42:50 2019 +0100
core133: Drop metadata for jansson package
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 86efc510f9c41486952b872819179da5837d0cf9
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Mon May 27 15:40:31 2019 +0100
core133: Ship hyperscan
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 81544f88841f205cb5f8c7c8f9d99c14b159752c
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Mon May 27 15:38:42 2019 +0100
hyperscan: Move rootfiles to arch directories
This package is only compiled on x86_64 and i586 and cannot
    be packaged in any of the other architectures.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 52ebc66bba0e44f9d70ebc29c16e877a9e23acfe
Author: Stefan Schantl stefan.schantl@ipfire.org
Date:   Sun May 26 19:56:47 2019 +0200
hyperscan: New package
This package adds hyperscan support to suricata
Fixes #12053.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 2348cfffcf9e9508d77bf42fbb59567a63d75b7f
Author: Stefan Schantl stefan.schantl@ipfire.org
Date:   Sun May 26 19:56:46 2019 +0200
ragel: New package
This is a build dependency of hyperscan
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 1a5f06491683f4092bdb1e077be207b1e9463410
Author: Stefan Schantl stefan.schantl@ipfire.org
Date:   Sun May 26 19:56:45 2019 +0200
colm: New package
This is a build dependency of ragel, which is a build dependency of
    hyperscan.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 0f75603f23bbf4f00bf87fd74c2fc35a7c9c9edd
Author: Stefan Schantl stefan.schantl@ipfire.org
Date:   Sun May 26 19:51:40 2019 +0200
asterisk: Remove dependency to jansson.
The package has become part of the main system.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 616395f37c6d096607283cc17e5554cc03e9bcc6
Author: Stefan Schantl stefan.schantl@ipfire.org
Date:   Sun May 26 19:51:39 2019 +0200
jansson: Move to core system and update to 2.12
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit f6e18df542383698cd3d14ca98debb1b0d456bb6
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Mon May 27 14:37:23 2019 +0100
Rootfile update
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 8a104d7f02bfb8f2766c3be75219f7f8a7b644ca
Author: Arne Fitzenreiter arne_f@ipfire.org
Date:   Sun May 26 17:27:16 2019 +0200
core133: readd late core132 changes to core133
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 83809af1fb7bb648851547b7589171d326766eaa
Merge: 333125abf 637885839
Author: Arne Fitzenreiter arne_f@ipfire.org
Date:   Sun May 26 17:23:54 2019 +0200
Merge branch 'master' into next
commit 333125abf850085611922634e31b714a35b31383
Merge: 9f0295a51 508535615
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Fri May 24 06:55:03 2019 +0100
Merge branch 'toolchain' into next
commit 9f0295a5129bed325ba37aaa1e39303fef0a6c9f
Merge: 8feb0db43 54fc710b9
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Fri May 24 06:54:16 2019 +0100
Merge remote-tracking branch 'ms/faster-build' into next
commit 8feb0db4309e67f6732732735dba6a969d192791
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Fri May 24 06:39:37 2019 +0100
core133: Ship updated squid
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit d2b5f0363118741a84a01826499a2d3eecf369e0
Author: Matthias Fischer matthias.fischer@ipfire.org
Date:   Fri May 24 20:46:59 2019 +0200
squid: Update to 4.7
For details see:
http://www.squid-cache.org/Versions/v4/changesets/
Fixes among other things the old 'filedescriptors' problem, so this patch was deleted.
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 53ef2a0ffee8e8b605d137ddc3e1f80e99de951c
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Fri May 24 06:37:21 2019 +0100
core133: Ship updated bind
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit f225f3ee29685cb91fc01e8c700032791e431806
Author: Matthias Fischer matthias.fischer@ipfire.org
Date:   Fri May 24 20:53:15 2019 +0200
bind: Update to 9.11.7
For details see:
    http://ftp.isc.org/isc/bind9/9.11.7/RELEASE-NOTES-bind-9.11.7.html
"Security Fixes
The TCP client quota set using the tcp-clients option could be exceeded in some cases.
      This could lead to exhaustion of file descriptors.
      This flaw is disclosed in CVE-2018-5743. [GL #615]"
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 79967ee9c4afb291d88f83d0a2c167d9e2f02f37
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Fri May 24 06:35:46 2019 +0100
Start Core Update 133
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 90194d7f7b0b32f2733bb24b8a939f7e0112c37f
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Fri May 24 06:30:46 2019 +0100
.gitignore: Ignore some backup files
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit f8c23b43b78880522c3b161d6c83ce81417c5cf4
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Thu May 23 01:50:29 2019 +0100
tor: Depend on libseccomp
Suggested-by: Erik Kapfer erik.kapfer@ipfire.org
    Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit f617fd912ba2ae3b3c1aad74506977c43bd128df
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Wed May 22 15:29:32 2019 +0100
unbound: Safe Search: Enable Restrict-Moderate for YouTube
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 6d653734fb8b044db24f2650c740820a6e0132a0
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Wed May 22 11:23:07 2019 +0100
Update German translations
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 61498b76b6f2b85b2a6674687c0edd19ed105be6
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Wed May 22 11:08:43 2019 +0100
vulnerabilities.cgi: Regard mitigations that only mitigate something still as vulnerable
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 144ff7605d5340bad77bd032274d1423bb7084d7
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Wed May 22 11:05:20 2019 +0100
vulnerabilities.cgi: Simplify regexes
We can do the split in one.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 54fc710b992f4cd4a0af51d92db47a124e08f3c5
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Tue May 14 10:02:03 2019 +0100
Update kernel rootfiles for armv5tel
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit da636bd8b7793b459bb5ff5e6b72637a0bdc5d3c
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Mon May 13 16:31:14 2019 +0100
Update kernel rootfiles for aarch64
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit ad794614cde0225b4af871fe5e05e8bb0073c0a7
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Sun May 12 10:21:32 2019 +0100
xtables-addons: Explicitely add path for alternative kernels
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 3f60a1e10efb2c169a0165a046fb26465e0b9f5e
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Sun May 12 10:20:57 2019 +0100
linux: Fix touching incorrect version.h
This file has moved and the touch command created an empty version
    of the file which caused that builds depending on that did not
    complete.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit c1e8c954bd54c85c85cdfb115e3e72c4c7415bbd
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Sun May 12 09:28:10 2019 +0100
linux: objtool does not exist on all platforms
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 0aa82849052c63a01d6b098d7ea968c7af708790
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Fri May 10 10:25:46 2019 +0100
xtables-addons: Automatically detect location of kernel source
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 0ad5f6a1fcc82cdfd936a4f2e01c1521df022c25
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Fri May 10 10:12:50 2019 +0100
linux: Install kernel build system to /lib/modules
This is necessary so that we can clean up /usr/src after
    each build and do not waste any space on the massive kernel
    source.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 8634797e8a1ccc3b293adcec090c57832c4e9363
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Fri May 10 10:10:25 2019 +0100
make.sh: Append -ipfire to fake kernel string
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 15b005d8378df38938e11aebff0488095c771754
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Fri May 10 03:38:49 2019 +0100
make.sh: Automatically enable build ramdisk on systems with 4GB RAM or more
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 3966b1e58fc31bcd1e1676145992286fc92d1b34
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Thu May 9 18:16:20 2019 +0100
iptables: Fix build without kernel source
The layer7 filter header files were not installed into /usr/include
    and therefore we needed to keep the whole kernel source tree.
This is just a waste of space and this patch fixes this.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 7c984de699951ef610158fce0dd6371f22eccb93
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Wed May 8 19:16:26 2019 +0100
make.sh: Mount /usr/src in memory for faster build
This patch enables that /usr/src is a ramdisk which should
    give us fewer I/O operations when extracting tarballs or
    writing small intermediate files by the compiler.
In some virtualised environments this should bring a good
    performance boost.
There is no persistent data stored in this directory and
    some persistent directories are mounted over it.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 5085356151105f4cdbcb24c21fc0b36ccf23f732
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Mon Apr 29 13:44:28 2019 +0100
glibc: Update rootfile for i586
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 864a5befd91260597a8deba265d5de63ea34df48
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Sun Apr 28 09:38:45 2019 +0100
glibc: Update to 2.29
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 46bbc13b91ff79598cd14d5dd1108e96c58687c7
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Sat Apr 27 17:43:41 2019 +0100
python3: Build package in toolchain
This will be required to build glibc 2.29
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit e81233173febfb6f81d409e7eee3e04a9603060c
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Sat Apr 27 13:28:34 2019 +0100
gcc: Update rootfile for aarch64
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit ecc9e5efb4c8b4d885868c949826a261f15ca7ee
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Sat Apr 27 13:28:24 2019 +0100
binutils: Update rootfile for aarch64
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 968a17d64cb744355b0aa2a611647f5fe12b477d
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Fri Apr 26 16:16:10 2019 +0100
make.sh: Bump toolchain version
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 525f5d29595ecc3e1b7d329afac2591e48eb05f2
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Fri Apr 26 16:15:46 2019 +0100
gcc: Update to 8.3.0
This patch carries the rootfile for x86_64 only.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 35969374408404ed096db0cdb72b289adb012529
Author: Michael Tremer michael.tremer@ipfire.org
Date:   Fri Apr 26 16:15:12 2019 +0100
binutils: Update to 2.32
This patch carries the rootfile for x86_64 only.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
-----------------------------------------------------------------------
hooks/post-receive
--
IPFire 2.x development tree