From mboxrd@z Thu Jan 1 00:00:00 1970 From: git@ipfire.org To: ipfire-scm@lists.ipfire.org Subject: [git.ipfire.org] IPFire 2.x development tree branch, core106, created. 1b4d5ad9af5d3603331f31aef5dca67833808694 Date: Wed, 12 Oct 2016 22:42:45 +0100 Message-ID: <20161012214246.75ECD1078E81@git01.ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============0545673145516634392==" List-Id: --===============0545673145516634392== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, core106 has been created at 1b4d5ad9af5d3603331f31aef5dca67833808694 (commit) - Log ----------------------------------------------------------------- commit 1b4d5ad9af5d3603331f31aef5dca67833808694 Author: Michael Tremer Date: Wed Oct 12 22:37:26 2016 +0100 unbound: Move "listen on all" to main configuration file =20 Signed-off-by: Michael Tremer commit b06187f5b65b6911ea90f0daa20ec0a50682070f Author: Matthias Fischer Date: Wed Oct 12 21:08:50 2016 +0200 Midnight Commander: Update to 4.8.18 =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 693928d781bee3151d5108a6f68a464202e78eeb Author: Arne Fitzenreiter Date: Wed Oct 12 23:01:51 2016 +0200 unbound: start prior network =20 Signed-off-by: Arne Fitzenreiter commit 0fa8a4e98e3c7b44f0e66f9958693a66bbb7fdeb Merge: 11ecfb9 d653b43 Author: Arne Fitzenreiter Date: Wed Oct 12 22:52:34 2016 +0200 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next commit 11ecfb92a0b9b9020c646e66f15dd1a5b2720f7c Author: Arne Fitzenreiter Date: Wed Oct 12 22:51:35 2016 +0200 backup: add unbound config =20 Signed-off-by: Arne Fitzenreiter commit d221f41fbe38e32afc2fd0bab6ee80aa94b9f1a4 Author: Arne Fitzenreiter Date: Wed Oct 12 22:41:19 2016 +0200 unbound: bind to all interfaces =20 this allow to add interfaces without restart unbound. =20 Signed-off-by: Arne Fitzenreiter commit 3a6752d9282ba78283f8a31564f359868662ff79 Author: Arne Fitzenreiter Date: Wed Oct 12 22:39:41 2016 +0200 setup: restart unbound after network config change =20 Signed-off-by: Arne Fitzenreiter commit d653b433ec6ffbc92a448766852fa4202586be9a Author: Daniel Weism=C3=BCller Date: Wed Oct 12 12:17:06 2016 +0200 drop of the obsolete and deprecated vdr addon vdr_vnsiserver3 =20 Signed-off-by: Daniel Weism=C3=BCller Signed-off-by: Michael Tremer commit 86c9deb2ea39001c488b7b65f6dfac6fe88a1a35 Author: Michael Tremer Date: Tue Oct 11 19:14:33 2016 +0200 unbound: Public static leases in DNS, too =20 Signed-off-by: Michael Tremer commit 998e880b61b4c201a9483a0beafc6d139a29f0db Author: Michael Tremer Date: Mon Oct 10 20:11:57 2016 +0100 unbound: Skip invalid hostnames =20 If there are any invalid hostnames in the DHCP leases table, we just skip them and do not create and RRs for them. =20 Signed-off-by: Michael Tremer commit 5eeea642371892e0ecdd6064746a1f6c38bd32a5 Author: Matthias Fischer Date: Sun Oct 9 14:56:52 2016 +0200 guardian 2.0: fixes for rootfile =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 3a52755b973a21ac15b033f4b39a3ff4c82b0be4 Author: Michael Tremer Date: Mon Oct 10 12:05:01 2016 +0100 core106: Ship changed pakfire.cgi =20 This was actually changed over a year ago, but was never shipped in an update. =20 Commit 212fd689a30a7b2f627149ead8d45823dc8a68af =20 Signed-off-by: Michael Tremer commit b32a8aefa2dea0146df34bf6e4e785afec1600b4 Author: Michael Tremer Date: Mon Oct 10 12:04:24 2016 +0100 core106: Ship updated iptables.cgi file =20 Signed-off-by: Michael Tremer commit 58c2333bdc4494c34197432791f6d67d974f3588 Author: Matthias Fischer Date: Sat Oct 8 15:20:38 2016 +0200 iptables.cgi: cosmetics - wider columns =20 Hi, =20 Since the first three columns of 'iptables.cgi' gave a nearly unreadable = output with large numbers, so I made 'pkts', 'bytes' and 'target'-columns a bit = wider. =20 BEFORE - it was something like this: =20 Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytestarget proc opt in out source destination 32M38G BADTCP tcp -- * * 0.0.0.0/0 0.0.0.0/0 32M38G CUSTOMINPUT all -- * * 0.0.0.0/0 0.0.0.0/0 32M38G P2PBLOCK all -- * * 0.0.0.0/0 0.0.0.0/0 32M38G GUARDIAN all -- * * 0.0.0.0/0 0.0.0.0/0 00 OVPNBLOCK all -- tun+ * 0.0.0.0/0 0.0.0.0/0 32M38G IPTVINPUT all -- * * 0.0.0.0/0 0.0.0.0/0 32M38G ICMPINPUT all -- * * 0.0.0.0/0 0.0.0.0/0 32M38G LOOPBACK all -- * * 0.0.0.0/0 0.0.0.0/0 21M21G CONNTRACK all -- * * 0.0.0.0/0 0.0.0.0/0 393873484KDHCPGREENINPUTall -- green0 * 0.0.0.0/0 0.0.0.0/0 645153642KGEOIPBLOCK all -- * * 0.0.0.0/0 0.0.0.0/0 386592304KIPSECINPUT all -- * * 0.0.0.0/0 0.0.0.0/0 386592304KGUIINPUT all -- * * 0.0.0.0/0 0.0.0.0/0 368332209KWIRELESSINPUT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate= NEW 368332209KOVPNINPUT all -- * * 0.0.0.0/0 0.0.0.0/0 368332209KTOR_INPUT all -- * * 0.0.0.0/0 0.0.0.0/0 368332209KINPUTFW all -- * * 0.0.0.0/0 0.0.0.0/0 309641833KREDINPUT all -- * * 0.0.0.0/0 0.0.0.0/0 309641833KPOLICYIN all -- * * 0.0.0.0/0 0.0.0.0/0 =20 AFTER - somehow better readable - I think: ;-) =20 Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target proc opt in out source destination 32M 38G BADTCP tcp -- * * 0.0.0.0/0 0.0.0.0/0 32M 38G CUSTOMINPUT all -- * * 0.0.0.0/0 0.0.0.0/0 32M 38G P2PBLOCK all -- * * 0.0.0.0/0 0.0.0.0/0 32M 38G GUARDIAN all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 OVPNBLOCK all -- tun+ * 0.0.0.0/0 0.0.0.0/0 32M 38G IPTVINPUT all -- * * 0.0.0.0/0 0.0.0.0/0 32M 38G ICMPINPUT all -- * * 0.0.0.0/0 0.0.0.0/0 32M 38G LOOPBACK all -- * * 0.0.0.0/0 0.0.0.0/0 21M 21G CONNTRACK all -- * * 0.0.0.0/0 0.0.0.0/0 39387 3484K DHCPGREENINPUT all -- green0 * 0.0.0.0/0 0.0.0.0/0 64515 3642K GEOIPBLOCK all -- * * 0.0.0.0/0 0.0.0.0/0 38659 2304K IPSECINPUT all -- * * 0.0.0.0/0 0.0.0.0/0 38659 2304K GUIINPUT all -- * * 0.0.0.0/0 0.0.0.0/0 36833 2209K WIRELESSINPUT all -- * * 0.0.0.0/0 0.0.0.0/0 ctst= ate NEW 36833 2209K OVPNINPUT all -- * * 0.0.0.0/0 0.0.0.0/0 36833 2209K TOR_INPUT all -- * * 0.0.0.0/0 0.0.0.0/0 36833 2209K INPUTFW all -- * * 0.0.0.0/0 0.0.0.0/0 30964 1833K REDINPUT all -- * * 0.0.0.0/0 0.0.0.0/0 30964 1833K POLICYIN all -- * * 0.0.0.0/0 0.0.0.0/0 =20 Best, Matthias =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit f824cd285b72ca1e2837614607b15e93bf6d5819 Author: Arne Fitzenreiter Date: Sun Oct 9 12:10:15 2016 +0200 setclock: accept also empty logfile timestamp =20 Signed-off-by: Arne Fitzenreiter commit 0807ce69eead5a35cdb699b61a48bffdf81ebcc4 Author: Arne Fitzenreiter Date: Sat Oct 8 15:43:54 2016 +0200 setclock: prevent time bacjump by empty rtc batteries =20 This is a work around to prevent not working dns resolution if the time jumps before the DNSSec signing key. =20 Signed-off-by: Arne Fitzenreiter commit 0d7ca700bd2c8eafbedf2261038496d4588bd5b7 Author: Arne Fitzenreiter Date: Fri Oct 7 11:27:33 2016 +0200 unbound: skip green interface if ip was set to 1.1.1.1 =20 this is a reserved marker for unused green ip. =20 Signed-off-by: Arne Fitzenreiter commit e22bcd38d6857cd1ee7292cbf634db80d0dd813c Author: Michael Tremer Date: Thu Oct 6 10:42:49 2016 +0100 unbound: Correctly format PTR records =20 Signed-off-by: Michael Tremer commit 71cf56fe53a1f561a8d11f2f354a0cc91bfe37ba Author: Michael Tremer Date: Thu Oct 6 10:41:54 2016 +0100 core106: Restart DHCP server to import leases into DNS =20 Signed-off-by: Michael Tremer commit eef9b2529c3cab522dac4f4bcfa1a0075376514e Author: Michael Tremer Date: Tue Oct 4 22:40:03 2016 +0100 setup: Store passwords in SHA format =20 htpasswd doesn't protect passwords very well. MD5 was used before and now any newly created passwords will use the SHA format. =20 Signed-off-by: Michael Tremer commit 574ee681d21b394cbc4d4b498bd4dba9a2a8ebf8 Merge: 350e29c e3a90a5 Author: Michael Tremer Date: Tue Oct 4 22:34:23 2016 +0100 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next commit e3a90a5736be84bd4292a05c006802aa26ffcc0d Author: Arne Fitzenreiter Date: Tue Oct 4 22:05:26 2016 +0200 Revert "core106: Add DNS root key to exclude list" =20 This reverts commit f58002a83f279246cdd58bfb5e9dfbf9d5aa99c7. commit a48a2034f5320baf32c10ec877d0c3c53cf4c699 Author: Arne Fitzenreiter Date: Tue Oct 4 19:24:26 2016 +0200 unbound: fix update forwarders if unbound was not running =20 psgrep has no "-q" switch so i use pidof. =20 Signed-off-by: Arne Fitzenreiter commit 9aa7b0469da00d4ba745b682f0c5874ffa8ac92d Merge: f75c279 52587ed Author: Arne Fitzenreiter Date: Mon Oct 3 17:55:42 2016 +0200 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next commit f75c279b97552118ee06ae660230465d0a469bc8 Author: Arne Fitzenreiter Date: Mon Oct 3 17:53:13 2016 +0200 unbound: fix reverse lockup of webif defined hosts =20 and make the own host resolveable. =20 Signed-off-by: Arne Fitzenreiter commit 350e29c26fe9d6cb8c075f47674db04a81f4ddc7 Author: Michael Tremer Date: Mon Oct 3 12:13:43 2016 +0100 Update translations =20 Signed-off-by: Michael Tremer commit c5f633c91712e4e1f5bb68633f4d55f030aed8a6 Author: Matthias Fischer Date: Fri Sep 23 16:33:04 2016 +0200 guardian 2.0: suggested cosmetic changes =20 I did the following: =20 - Rearranged the fields on 'guardian.cgi' a bit - in a (hopefully) logica= l manner, so that they don't need so much room. - Added some translation-strings and explanations to (revised) 'guardian.= cgi'. - Added missing language string(s), deleted obsolete. - Deleted all guardian entries from standard language files in '/var/ipfire/langs'-directory. - Added (upgraded) addon-specific language files to '/var/ipfire/addon-la= ng'-directory. =20 I hope, I didn't forget something... =20 Best, Matthias =20 Signed-off-by: Matthias Fischer Signed-off-by: Stefan Schantl commit 52587edac4f6e3fba0923cb808740de6c5cbd61e Author: Michael Tremer Date: Mon Oct 3 11:45:36 2016 +0100 core106: Ship updated libidn =20 Signed-off-by: Michael Tremer commit 64602fdf7da260801cdf6d07b5390ab41129e32b Author: Matthias Fischer Date: Mon Oct 3 08:58:48 2016 +0200 libidn: Update to 1.33 =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 642b831b72b42c7ecab4ac05828db2ebc29c3845 Merge: e24d611 5edc06b Author: Arne Fitzenreiter Date: Sun Oct 2 16:36:57 2016 +0200 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next commit e24d6112bb364697d925ca436dddd5436448b477 Author: Arne Fitzenreiter Date: Sun Oct 2 16:35:50 2016 +0200 index.cgi: display unbound dns servers =20 Signed-off-by: Arne Fitzenreiter commit 5edc06b701548df78adf746bb4023ef61460d957 Author: Michael Tremer Date: Sun Oct 2 15:13:55 2016 +0100 Remove IPAC stuff =20 This is unused for a very very very long time and serves no purpose any more. =20 Signed-off-by: Michael Tremer commit cc60329d88d647a425812b8fb1ff31bb6752f576 Author: Arne Fitzenreiter Date: Sun Oct 2 15:32:14 2016 +0200 Add search domain to /etc/resolv.conf at boot time =20 unbound does not append the local domain to the request any more (like dnsmasq did). Therefore, the client needs to do that if desired. =20 Signed-off-by: Arne Fitzenreiter commit b29c97b1685c4eafdbc30841f5eae358befc8343 Author: Arne Fitzenreiter Date: Sun Oct 2 15:25:23 2016 +0200 unbound: Test upstream name servers before using =20 unbound has some trouble with validating DNSSEC-enabled domains when the upstream name server is stripping signatures from the authoritative responses. =20 This script now checks that, removes any broken upstream name servers from the list and prints a warning. =20 If all name servers fail the test, unbound falls back into recursor mode. =20 Signed-off-by: Arne Fitzenreiter commit f58002a83f279246cdd58bfb5e9dfbf9d5aa99c7 Author: Arne Fitzenreiter Date: Sun Oct 2 13:36:07 2016 +0200 core106: Add DNS root key to exclude list =20 Signed-off-by: Arne Fitzenreiter commit 9f50355a8c192e453998b6bd15c26b94eabcc72f Author: Arne Fitzenreiter Date: Sun Oct 2 13:35:45 2016 +0200 unbound: Update to 1.5.10 =20 Signed-off-by: Arne Fitzenreiter commit a1de9f6fc9cd011cc33708bae31a731394b6d26a Author: Michael Tremer Date: Sat Oct 1 18:56:42 2016 +0100 core106: Ship updated /etc/login.defs =20 Signed-off-by: Michael Tremer commit 80bc60228b53635aa3e742467195b63adff30c59 Author: Michael Tremer Date: Sat Oct 1 18:55:23 2016 +0100 unbound: Print nicer error message when already running =20 Signed-off-by: Michael Tremer commit 46d8d50f459be1cc2220b8b0a0de9c6943e9ab1f Author: Michael Tremer Date: Sat Oct 1 18:52:07 2016 +0100 unbound: Start unbound when invoked by DHCP scripts =20 Signed-off-by: Michael Tremer commit da314725051fe0ebf56fd9d28dae78ab7406c6f4 Author: Michael Tremer Date: Sat Oct 1 18:37:28 2016 +0100 shadow-utils: Create standard set of configuration files =20 Previously we copied the default configuration from the upstream package and modified that. Unfortunately a patch and a sed command changed the file which resulted in unwanted changes. =20 This patch removes the patch and sed command and adds a new set of configuration files that just need to be copied to the system. =20 Fixes #11195 =20 Signed-off-by: Michael Tremer commit 60fc489b045bc35ff50b15c9b263ca9a3b7d4247 Author: Arne Fitzenreiter Date: Sat Oct 1 15:17:37 2016 +0200 attr: rootfile update =20 Signed-off-by: Arne Fitzenreiter commit 829435bea3eee286cd1b1c73a81d53fcd0336c07 Author: Arne Fitzenreiter Date: Tue Sep 27 20:15:53 2016 +0200 ntp: fix wait for red if dhcp or wpasupplicant is running. =20 Signed-off-by: Arne Fitzenreiter commit 3cf764f338da36c28b348c46db1dbbdff8c97d5b Author: Arne Fitzenreiter Date: Tue Sep 27 19:38:38 2016 +0200 samba: default enable SMBv2. =20 Signed-off-by: Arne Fitzenreiter commit b547554aea406f99740eeee8c31584708a4f000f Author: Arne Fitzenreiter Date: Tue Sep 27 19:20:14 2016 +0200 core106: ship mt7601u firmware. =20 Signed-off-by: Arne Fitzenreiter commit dee3be75f908e083f865f6275b4f2ce7692d0f26 Author: Arne Fitzenreiter Date: Tue Sep 27 18:39:53 2016 +0200 mpfr: fix missing eof in rootfile. =20 this is the reason for missing mt7601u firmware. =20 Signed-off-by: Arne Fitzenreiter commit 92aebbcddd16a0969ab5c2f5fcd4d7217a68e3e4 Author: Michael Tremer Date: Tue Sep 27 09:44:19 2016 +0100 Revert "libjpeg: update to 1.4.2" =20 This reverts commit feba68e4af48630d0c5dcd16bd799a0e02db2b36. =20 Breaks building netpbm =20 Signed-off-by: Michael Tremer commit 01176164b5c1989cf37afad36fe967ddfe0f3612 Merge: de48b89 e26a933 Author: Arne Fitzenreiter Date: Mon Sep 26 23:18:30 2016 +0200 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next commit de48b89ca140fff432754ef8e83c9c5acbd717fe Author: Arne Fitzenreiter Date: Mon Sep 26 18:55:51 2016 +0200 Revert "Revert "tcl: update to 8.6.6"" =20 with new krb5 also the tcl update works. This reverts commit 053c554822e9d7342bf21535ccae4812100f94c5. =20 Signed-off-by: Arne Fitzenreiter commit e26a93322da5dc6d0c1537c0122b24a6dd63119d Author: Michael Tremer Date: Mon Sep 26 21:03:33 2016 +0100 core106: Add recently updated packages, etc. =20 This update removes dnsmasq and replaces it with unbound. =20 Also many packages are updated and shipped. =20 Signed-off-by: Michael Tremer commit 59bddc7989e44800b7a855e88e28d6a6eb69e9b1 Author: Michael Tremer Date: Mon Sep 26 20:24:21 2016 +0100 Start Core Update 106 =20 Signed-off-by: Michael Tremer commit feba68e4af48630d0c5dcd16bd799a0e02db2b36 Author: Marcel Lorenz Date: Sat Sep 3 14:06:19 2016 +0200 libjpeg: update to 1.4.2 =20 The old libjpeg is renamed to libjpeg-compat The compat makes the old libs maintainable =20 Signed-off-by: Marcel Lorenz Reviewed-by: Jonatan Schlag Signed-off-by: Michael Tremer commit b8987235d26e4bdf99fa1c4a574a3da0c7674d07 Merge: 724c0b8 4141e0a Author: Arne Fitzenreiter Date: Mon Sep 26 18:53:49 2016 +0200 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next commit 724c0b8e4b244bd3627d9beacb3771abc0f46a72 Author: Arne Fitzenreiter Date: Mon Sep 26 18:51:27 2016 +0200 attr: rootfile update. =20 Signed-off-by: Arne Fitzenreiter commit 4141e0aad1652d85daef1bafee85d155f8eb9129 Author: Jonatan Schlag Date: Sun Sep 25 18:50:03 2016 +0200 Update krb5 to 1.14.4 =20 This commit updates krb5 to version 1.14.4 The patch is removed, because he is upstream since 1.12.2. The samba version is incremented, to link samba against the new krb5 version. Otherwise samba for example is linked against /usr/lib/libkdb5.so.7 but the current version is /usr/lib/libkdb5.so.8 =20 Signed-off-by: Jonatan Schlag Signed-off-by: Michael Tremer commit 78c3ea61b29ed527e4854f2f03ca0614888f5dd1 Author: Michael Tremer Date: Mon Sep 26 14:37:20 2016 +0100 openssl: Update to 1.0.2j =20 Missing CRL sanity check (CVE-2016-7052) =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 Severity: Moderate =20 This issue only affects OpenSSL 1.0.2i, released on 22nd September 2016. =20 A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0 but was omitted from OpenSSL 1.0.2i. As a result any attempt to use CRLs in OpenSSL 1.0.2i will crash with a null pointer exception. =20 OpenSSL 1.0.2i users should upgrade to 1.0.2j =20 The issue was reported to OpenSSL on 22nd September 2016 by Bruce Stephen= s and Thomas Jakobi. The fix was developed by Matt Caswell of the OpenSSL devel= opment team. =20 https://www.openssl.org/news/secadv/20160926.txt =20 Signed-off-by: Michael Tremer commit def1ad3e948a8473c2443985b234180238aaf66a Author: Arne Fitzenreiter Date: Mon Sep 26 13:08:02 2016 +0200 rootfile updates: attr, ed, gawk =20 Check rootfiles before commit !!! =20 Signed-off-by: Arne Fitzenreiter commit 053c554822e9d7342bf21535ccae4812100f94c5 Author: Arne Fitzenreiter Date: Sun Sep 25 19:55:49 2016 +0200 Revert "tcl: update to 8.6.6" =20 breaks kerberos (krb5) build. =20 This reverts commit 282dfe0bb9780fa39dac5d2285719497f6a9f3d5. =20 Signed-off-by: Arne Fitzenreiter commit e70d2dc27d388e8598791e043c4c2f62937d4b04 Author: Arne Fitzenreiter Date: Sat Sep 24 16:44:47 2016 +0200 transmission: update to 2.92 =20 Signed-off-by: Arne Fitzenreiter commit 1031bcee2040803ba88126220dbb447ade2ac3c8 Author: Marcel Lorenz Date: Fri Sep 2 15:26:10 2016 +0200 iproute2: update to 4.7.0 =20 Signed-off-by: Marcel Lorenz Signed-off-by: Michael Tremer commit 54a59fd89212fee8783146ed1ae168e578440b05 Author: Marcel Lorenz Date: Fri Sep 2 11:54:37 2016 +0200 usb_modeswitch_data: update to 20160803 =20 Signed-off-by: Marcel Lorenz Signed-off-by: Michael Tremer commit 96f333a627176a8e9880250855dec6b76ce10661 Author: Marcel Lorenz Date: Fri Sep 2 11:53:20 2016 +0200 usb_modeswitch: update to 2.4.0 =20 Signed-off-by: Marcel Lorenz Signed-off-by: Michael Tremer commit 2429b9210f65d875155861a3369df7bd0617c2f2 Author: Marcel Lorenz Date: Fri Sep 2 11:13:56 2016 +0200 ipset: update to 6.29 =20 Signed-off-by: Marcel Lorenz Signed-off-by: Michael Tremer commit 3fc734f0f9e64ffeaea8b5c4b1c26951456979a7 Author: Marcel Lorenz Date: Fri Sep 2 10:58:02 2016 +0200 libmnl: update to 1.0. =20 Signed-off-by: Marcel Lorenz Signed-off-by: Michael Tremer commit 0e7699cbb5855728f32ea3180e95997fa9e00654 Author: Marcel Lorenz Date: Fri Sep 2 10:52:13 2016 +0200 libnetfilter_conntrack: update to 1.0.6 =20 Signed-off-by: Marcel Lorenz Signed-off-by: Michael Tremer commit 087fee9c6a782c7e566de9505ea2b1d272bb0993 Author: Marcel Lorenz Date: Fri Sep 2 11:12:13 2016 +0200 attr: update to 2.4.47 =20 Signed-off-by: Michael Tremer commit 6f36046c814a8cae5306ad9e28c45e40adf2d68c Author: Marcel Lorenz Date: Fri Sep 2 11:07:58 2016 +0200 expat: update to 2.2.0 =20 Signed-off-by: Marcel Lorenz Signed-off-by: Michael Tremer commit b4b56b4f5c224398c7e29093babe352aed10d8e5 Author: Marcel Lorenz Date: Fri Sep 2 11:08:51 2016 +0200 make: update to 4.2.1 =20 Signed-off-by: Marcel Lorenz Signed-off-by: Michael Tremer commit cde96f746a3bffd98bc3e2b2e0787b849136436b Author: Marcel Lorenz Date: Fri Sep 2 10:44:59 2016 +0200 file: update to 5.28 =20 Signed-off-by: Marcel Lorenz Signed-off-by: Michael Tremer commit 1c7a3c56ef10d5bc2bb2905846210606bfe1cd9c Author: Michael Tremer Date: Sat Sep 24 12:54:39 2016 +0100 Revert "strongswan 5.5.0: update for rootfile" =20 The padlock module is only built on i586 =20 This reverts commit 2ac05ca54c6a49e7f4a82aae57d1924fa7c998b2. commit 345f1f3c0bbb8e8e82783475d4c3f189f3020b0b Author: Marcel Lorenz Date: Fri Sep 2 10:30:06 2016 +0200 gettext: update to 0.19.8.1 =20 Signed-off-by: Marcel Lorenz Signed-off-by: Michael Tremer commit b48a6c971e24f4eb991781df4108e5d4c3826207 Author: Marcel Lorenz Date: Sat Sep 3 10:28:57 2016 +0200 make.sh: add autoamke to toolchain to fix coreutils build fail =20 Signed-off-by: Marcel Lorenz Signed-off-by: Michael Tremer commit 35f37bf02b6de4a4b2bd15c672e6dd408ea56564 Author: Marcel Lorenz Date: Sat Sep 3 10:28:56 2016 +0200 pkg-config: update lfs file to build with new dejagnu =20 Signed-off-by: Marcel Lorenz Signed-off-by: Michael Tremer commit a7054dd83c5f8c79ad2a5001f914a4638e75e562 Author: Marcel Lorenz Date: Sat Sep 3 10:28:55 2016 +0200 dejagnu: update to 1.6 =20 Signed-off-by: Marcel Lorenz Signed-off-by: Michael Tremer commit 282dfe0bb9780fa39dac5d2285719497f6a9f3d5 Author: Marcel Lorenz Date: Sat Sep 3 10:28:54 2016 +0200 tcl: update to 8.6.6 =20 Signed-off-by: Marcel Lorenz Signed-off-by: Michael Tremer commit b48c31167bef08f6a2b41e5b72a1cf7016f7331c Author: Marcel Lorenz Date: Sat Sep 3 10:28:53 2016 +0200 flex: update to 2.6.1 =20 Signed-off-by: Marcel Lorenz Signed-off-by: Michael Tremer commit 7c54847dc2909297afcbc905a6759a9ced3a570e Author: Marcel Lorenz Date: Sat Sep 3 10:30:44 2016 +0200 diffutils: update to 3.5 =20 Signed-off-by: Marcel Lorenz Signed-off-by: Michael Tremer commit 2ac05ca54c6a49e7f4a82aae57d1924fa7c998b2 Author: Matthias Fischer Date: Fri Sep 23 16:51:36 2016 +0200 strongswan 5.5.0: update for rootfile =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 702bd2cd9834181276cbb772e637dd53e8e79392 Author: Dirk Wagner Date: Thu Sep 22 09:05:10 2016 +0200 asterisk addon: update to 11.23.1 =20 Changelog: http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog= -11-current =20 Signed-off-by: Dirk Wagner Signed-off-by: Michael Tremer commit e0b76ebc55ebacf0745e1086824dec83278e1f77 Author: Dirk Wagner Date: Thu Sep 22 09:59:39 2016 +0200 monit addon: update to 5.19.0 =20 See=C2=A0changelog=C2=A0https://mmonit.com/monit/changes=C2=A0for=C2=A0de= tails. =20 Signed-off-by: Dirk Wagner Signed-off-by: Michael Tremer commit 4c8f144e582dc5bd7d3415777cf496efb68697b0 Author: Jonatan Schlag Date: Thu Sep 22 12:03:33 2016 +0200 Fix URL to list of public name servers in dns.cgi =20 We have only one english wiki, so the link to the list of public dns servers can point directly to the right page. (The link was also not correct). =20 Fixes: #11191 =20 Signed-off-by: Jonatan Schlag Signed-off-by: Michael Tremer commit 3ce76624346e0ce66a6f1fc3f6b37feeab1a25b2 Merge: 8029c2a 2d850c7 Author: Arne Fitzenreiter Date: Fri Sep 23 18:49:06 2016 +0200 Merge remote-tracking branch 'origin/core105' into next commit 8029c2a899b3b70e5e35f8461daddc288b9abe75 Author: Michael Tremer Date: Thu Sep 22 14:47:47 2016 +0100 strongswan: Update to 5.5.0 =20 Signed-off-by: Michael Tremer commit f5275b5930016b466e136dd6fb8ce535be618c4a Merge: bbe8e00 cd805ce Author: Michael Tremer Date: Thu Sep 22 12:05:13 2016 +0100 Merge branch 'core105' into next commit bbe8e009b824aef745c9ab9718dce9a1b557f5fc Author: Alexander Marx Date: Thu Sep 15 15:31:48 2016 +0200 BUG11184: Error if DNAT address ends with 0 or 255 now disabled =20 When using dnat addresses, it is possible to use big subnets and host add= resses like 172.16.0.0/12. These addresses where rejected because it was recognised as network addre= ss. The check is now removed. =20 Signed-off-by: Alexander Marx Signed-off-by: Michael Tremer commit f5ab60e9aa9d77fd9ef4b29f082eb6b00cb211f3 Author: Michael Tremer Date: Thu Sep 15 11:04:11 2016 +0100 Rootfile update =20 Signed-off-by: Michael Tremer commit 48b1876a48ae485f371fe6baa5fe3c1d000ef7d8 Merge: 3f1b94b ccba939 Author: Michael Tremer Date: Wed Sep 14 16:41:38 2016 +0100 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next commit 3f1b94b9faf319ef82f1fde727563b02c9772c6b Author: Michael Tremer Date: Wed Sep 14 16:41:12 2016 +0100 python-ipaddress: New package =20 Required for the unbound DHCP leases bridge =20 Signed-off-by: Michael Tremer commit d20ef9d703dd4f4c16d8ce68f6b093d21d1a04ca Author: Michael Tremer Date: Wed Sep 14 16:35:41 2016 +0100 unbound+DHCP: Make sure to only remove old leases and not static hosts =20 Signed-off-by: Michael Tremer commit 74a5ab67fef3726f1d47bee6181423cd9d18a2c1 Author: Michael Tremer Date: Wed Sep 14 16:29:53 2016 +0100 unbound+DHCP: Read correct DHCP domain name for lease =20 Signed-off-by: Michael Tremer commit b8dd42b9a6b42d69bcabbedb962bc13ecc44d22a Author: Michael Tremer Date: Wed Sep 14 15:54:36 2016 +0100 unbound+DHCP: Read existing leases from unbound =20 This allows us to restart unbound and all DHCP leases will be re-imported even if the unbound-dhcp-leases-bridge is not restarted. =20 Signed-off-by: Michael Tremer commit ccba93959baf64aefe8c63d4e44888bb7500b036 Merge: 077ea71 7331b24 Author: Arne Fitzenreiter Date: Tue Sep 13 19:41:36 2016 +0200 Merge branch 'core104' into next commit 077ea717e035aa5fa37ce670957d3312fcaabcf1 Author: Michael Tremer Date: Mon Sep 12 21:14:44 2016 +0100 unbound+DHCP: Set TTL for local leases to 1m =20 Signed-off-by: Michael Tremer commit 811f3d3050c713c9e86572c922734a5f44d70797 Author: Michael Tremer Date: Mon Sep 12 21:13:25 2016 +0100 unbound: Start service after network has been brought up =20 Signed-off-by: Michael Tremer commit cc53e7ef230255bbf2ebf6ed6af8206d88206e8e Author: Michael Tremer Date: Mon Sep 12 20:52:51 2016 +0100 unbound: Restart after local hosts have been modified =20 Signed-off-by: Michael Tremer commit 36792be6ce3775b86a58e4696f793ead2dc97e7f Author: Michael Tremer Date: Mon Sep 12 20:46:02 2016 +0100 DNS: Import local hosts into unbound =20 Signed-off-by: Michael Tremer commit 6f5d8f0cce3c8eeab754f00ad2e367ffc83112b2 Author: Michael Tremer Date: Mon Sep 12 20:20:08 2016 +0100 Start unbound+DHCP bridge only when DHCP server is running =20 Signed-off-by: Michael Tremer commit a66c4880d9a43893933bdaf19ca64654a6ebe210 Author: Michael Tremer Date: Mon Sep 12 20:11:47 2016 +0100 unbound: Start service at system boot =20 Signed-off-by: Michael Tremer commit 266735a12faddf4635d2b3a772c4f4e9a472763c Author: Michael Tremer Date: Mon Sep 12 11:07:44 2016 +0100 Rootfile update =20 Signed-off-by: Michael Tremer commit 4e63727d2d3f71760b09e4be9e6d7543ce0a24ea Author: Matthias Fischer Date: Sat Sep 10 19:25:22 2016 +0200 next: rootfile updates for 'unbound' and 'initscripts' =20 These two came to my view during the last builds. I hope they're ok now. =20 Best, Matthias =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit a80606ecb568f9def80015ed961362a276f1e4aa Author: Matthias Fischer Date: Sat Sep 10 14:35:39 2016 +0200 squid: Update to 3.5.21 =20 For details, see: http://www.squid-cache.org/Versions/v3/3.5/changesets/SQUID_3_5_21.html =20 Best, Matthias =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 69f8d8ee6cc005c7ca9e0f5bdb0ea017f7a7c0c7 Author: Michael Tremer Date: Fri Sep 9 14:57:07 2016 +0100 Rootfile update =20 Signed-off-by: Michael Tremer commit 5fba8a0b1ebcb29340e225707193c0147c4cb64a Merge: 3364c93 b658a45 Author: Michael Tremer Date: Thu Sep 8 19:50:45 2016 +0100 Merge branch 'unbound' into next commit b658a451fbb2f551f4e2765ab14eac34e0eca7b1 Author: Michael Tremer Date: Thu Sep 8 19:46:43 2016 +0100 unbound: Automatically scale configuration to system =20 Signed-off-by: Michael Tremer commit 3364c93e37c65ed8544066ed55afe1941b2b6f8d Author: Alexander Marx Date: Thu Sep 8 08:36:58 2016 +0200 BUG11177: pppoe password not required anymore =20 fixes: #11177 =20 There are providers which do not use passwords anymore. For this reason the password field is no longer mandatory. =20 Signed-off-by: Alexander Marx Signed-off-by: Michael Tremer commit 3943a54036fcce71d57b1bbd2c2759c64c5f1f86 Author: Jonatan Schlag Date: Fri Sep 2 20:35:23 2016 +0200 Libvirt: Fix update.sh script =20 The virtlogd could only be restarted when the daemons run. The update.sh script tried to restart the daemon no matter if the daemons run or not. This behaviour produce problems. =20 An If statement now checks if the daemon runs or not and execute the command that is suitable for the situation. =20 Fixes: #11172 =20 Signed-off-by: Jonatan Schlag Signed-off-by: Michael Tremer commit d996e17ab80ce674e3facc04aaa6e918e4d66fbb Author: Jonatan Schlag Date: Sun Aug 28 19:59:19 2016 +0200 Update libvirt to 2.1 =20 This is the update of libvirt to the latest version 2.1. The most important change from a packager view is the new virtlogd daemon. This daemon handles the qemu output and wrote it to log files. =20 The require some changes: - A new init script to start, stop restart the daemon called virtlogd. The daemon is restart with SIGUSR1 (this is important because the daemon keeps all pipelines etc. open). =20 This introduces a problem with the uninstall.sh install.sh script. It is not possible to stop the daemon while virtual machines are running, so the script update.sh execute from now not uninstall.sh and install.sh instead it contains all steps from uninstall.sh install.sh expect the start / stop routine for virtlogd. The daemon is just restarted after the update, which makes sure that all changes take effect. =20 - new symlinks in the uninstall.sh and install.sh script and some root file changes because of the new virtlogd init script. - the archive format changes from tar.gz to tar.xz =20 For Changelogs see: =20 https://libvirt.org/news-2015.html https://libvirt.org/news.html (2017 and later: https://libvirt.org/news-2016.html ) =20 Signed-off-by: Jonatan Schlag Signed-off-by: Michael Tremer commit 457367e13d23ac774ba62005e9ec6b294a935527 Merge: a07b8a2 5e35881 Author: Michael Tremer Date: Wed Aug 31 22:40:16 2016 +0100 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next commit 5e358816c5aca1fd62ab307235cc1f1278a4fa70 Author: Matthias Fischer Date: Wed Aug 17 18:30:02 2016 +0200 dnsmasq 2.76: latest patches (015-016) =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit bfce482806f59fc178aeec48e84d5f330ddd7bf5 Author: Matthias Fischer Date: Tue Aug 23 18:30:03 2016 +0200 gnupg: Update to 1.4.21 =20 Second try: =20 Update from 1.4.18 to 1.4.21, based on current 'next'. =20 Best, Matthias =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 0542a945703fd7a20e0001b0d9daa2ca4ec8a410 Author: Matthias Fischer Date: Tue Aug 23 18:32:54 2016 +0200 nano: Update to 2.6.3 =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 71434e5b4abd45f59a9ab9d519c38f29d471dbc2 Merge: 53aad60 69f3684 Author: Arne Fitzenreiter Date: Mon Aug 22 07:26:37 2016 +0200 Merge branch 'core104' into next commit 53aad60d6f35b622ea571faf3fc1c5d4ee28e1f0 Author: Matthias Fischer Date: Sat Aug 20 23:51:20 2016 +0200 smartmontools: Update to 6.5 =20 For details, see: https://www.smartmontools.org/browser/tags/RELEASE_6_5/smartmontools/NEWS =20 Best, Matthias =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit d8e31f431168d8eb56fb314a2d0f5e9e7e90fadc Author: Matthias Fischer Date: Sat Aug 20 12:39:17 2016 +0200 libgpg-error: Update to 1.24 =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit a59e2e1c65c8061627acfaddf7a44f5f716071e4 Author: Matthias Fischer Date: Sat Aug 20 12:33:55 2016 +0200 libgcrypt: Update to 1.7.3 =20 Fixes CVE-2016-6313 =20 For details, see: https://lists.gnupg.org/pipermail/gnupg-announce/2016q3/000395.html https://bugzilla.redhat.com/show_bug.cgi?id=3D1366105 =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 616edca2ba4cfe8d8ad6d628d9d2cab4a91cd047 Author: Matthias Fischer Date: Sat Aug 20 12:20:10 2016 +0200 libassuan: Update to 2.4.3 =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit d8efad249a19fb3a9a43b087685aabde7b534de9 Author: Matthias Fischer Date: Sat Aug 20 00:15:55 2016 +0200 squid: Update to 3.5.20 with latest patches (14067-14075) =20 For details, see: http://www.squid-cache.org/Versions/v3/3.5/changesets/ =20 Since there were problems with "trailing white spaces" I started a new 's= quid_3' branch from scratch, based on current 'next'. I hope this is what is needed and that it helps. =20 This one was built without errors and is running here without seen proble= ms. =20 Best, Matthias =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit a07b8a2d554234780b95b0f2d005e5fa3a8df8ac Author: Jonatan Schlag Date: Sun Aug 14 11:25:01 2016 +0200 Libvirt: load vhost_net before libvirtd start. =20 If the kernel module vhot_net is loaded, the performance of virtio networking is better then without vhost_net. So the module is loaded before libvirtd ist started to get the benefit of vhost_net. =20 Signed-off-by: Jonatan Schlag Signed-off-by: Michael Tremer commit cf5c7c9f2bb5dd2af43ab3ff39a4fd06efaaef24 Author: Jonatan Schlag Date: Sun Aug 14 11:10:36 2016 +0200 Libvirt: fix configuration options =20 Adds a missed - to -without-dbus and -with-interface. =20 Signed-off-by: Jonatan Schlag Signed-off-by: Michael Tremer commit ae2919a502a0a2f26f2e849e6fe4e9e42cda3b80 Author: Jonatan Schlag Date: Sun Aug 14 10:55:38 2016 +0200 Libvirt: enable storage-fs =20 Fixes: 11154 =20 Signed-off-by: Jonatan Schlag Signed-off-by: Michael Tremer commit b4255d757f98cc5bd6cf60ac245c60b78871849f Author: Michael Tremer Date: Sun Aug 7 15:02:08 2016 +0100 Rootfile update =20 Forgot to commit this one =20 Signed-off-by: Michael Tremer commit 47c3e83253693f80a5ef38af6e9cdd276bf9a5da Author: Michael Tremer Date: Sun Aug 7 12:45:11 2016 +0100 unbound is not supposed to be a package =20 Signed-off-by: Michael Tremer commit 6302a24890f8530924e4468daca575e7336f4a87 Author: Michael Tremer Date: Sat Aug 6 20:58:50 2016 +0100 make.sh: Unbound depends on libevent =20 Signed-off-by: Michael Tremer commit 1b4f2493a5beeb38336c6d98a4dd3bc6a24b1aa4 Author: Michael Tremer Date: Sat Aug 6 19:41:27 2016 +0100 unbound: Update dynamically configured DNS servers after connecting RED =20 Signed-off-by: Michael Tremer commit df7340d2f3232a87ae6e3e11a6cb4e15b74e55a3 Author: Michael Tremer Date: Sat Aug 6 19:32:34 2016 +0100 Add unboundctrl =20 Control binary to relaunch unbound from the web user interface =20 Signed-off-by: Michael Tremer commit 9625be6f24f73a40f987b9a79657f026405f9c29 Author: Michael Tremer Date: Sat Aug 6 19:30:14 2016 +0100 webinterface: Replace dnsmasq with unbound =20 Signed-off-by: Michael Tremer commit 61b4250af56cdd8cb97187098ed5b4b6b93acb85 Author: Michael Tremer Date: Sat Aug 6 19:25:48 2016 +0100 Drop dnsmasq =20 This will be replaced by unbound =20 Signed-off-by: Michael Tremer commit b8f5eda86b6d1c7270e858214a96e5eded18876a Author: Michael Tremer Date: Sat Aug 6 19:20:27 2016 +0100 unbound: Rewrite configuration and initscript =20 Signed-off-by: Michael Tremer commit 0fbd7c3c81ca0740cf8e6f4c47253ff4dd48e7df Author: Michael Tremer Date: Sat Aug 6 16:48:39 2016 +0100 Import Unbound DHCP Lease Bridge =20 Signed-off-by: Michael Tremer commit cb21683968ddc0d5eab4c131c69aa665ff5d7dc8 Author: Michael Tremer Date: Sat Aug 6 15:24:00 2016 +0100 unbound: Ship ICANN's certificates for trust anchor validation =20 Signed-off-by: Michael Tremer commit c648dd88f57309f08d2703bdb4596aaa75d776aa Author: Michael Tremer Date: Sat Aug 6 15:20:07 2016 +0100 unbound: Update trust anchor once a day =20 Signed-off-by: Michael Tremer commit 76f5c54236fdb2714fbb6d890a7b079d5aa4f9fc Author: Michael Tremer Date: Sat Aug 6 15:12:01 2016 +0100 unbound: Install trust anchor in /var/lib/unbound =20 Signed-off-by: Michael Tremer commit 89b0810b240967e4ae4101ad2736b74792a3c80a Author: Michael Tremer Date: Sat Aug 6 14:43:47 2016 +0100 python-daemon: New package =20 Signed-off-by: Michael Tremer commit 08f6cdcf828aa6e03e59b9054b68eede80a13ebe Author: Michael Tremer Date: Fri Aug 5 13:33:47 2016 +0100 New package: python inotify =20 Signed-off-by: Michael Tremer commit d0e5f71f77e5bcbeef1edbded3ca0a0bd564a34f Author: Marcel Lorenz Date: Tue Aug 2 20:48:17 2016 +0200 New package: unbound 1.5.9 =20 Unbound is a validating, recursive, and caching DNS resolver. =20 https://www.unbound.net =20 Signed-off-by: Marcel Lorenz Signed-off-by: Michael Tremer ----------------------------------------------------------------------- hooks/post-receive -- IPFire 2.x development tree --===============0545673145516634392==--