Commit Graph

2003 Commits

Author SHA1 Message Date
Michael Tremer
63420a96b6 core116: Ship updated proxy.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-23 16:29:09 +01:00
Michael Tremer
b47d4bc1ea core116: Ship snort
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-23 16:26:39 +01:00
Michael Tremer
cd8a7fc1eb Start Core Update 116
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-23 16:24:10 +01:00
Arne Fitzenreiter
9064ba72fe drop httpscert and merge to apache initskript
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-10-22 15:50:38 +02:00
Michael Tremer
0d6b6a219f core115: Add missing parameter to actually generate new certificates
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-21 11:20:02 +01:00
Arne Fitzenreiter
fb1eb40f9b core115: add extrahd.cgi to updater
this file was missing in early core114 testbuilds so ship it again.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-10-18 21:25:45 +02:00
Michael Tremer
7207d80c4e core115: Ship logrotate
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-16 19:20:20 +01:00
Michael Tremer
b62c826fd8 PDF-API2: Add optional dependencies to read TrueType fonts
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-16 17:43:32 +01:00
Michael Tremer
e3c3625c34 Make perl-PDF-API2 part of the base system
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-16 17:31:51 +01:00
Peter Müller
78fa47700d generate ECDSA key on existing installations
This is required since Apache crashes if any of the key/certificate files
does not exist.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-11 20:05:55 +01:00
Peter Müller
fbc9cfd769 ship changed files for Apache and ECDSA
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-11 20:05:53 +01:00
Michael Tremer
2f27148cbb core115: Ship updated extrahd.pl
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-11 12:20:44 +01:00
Michael Tremer
ebf697a097 core115: Ship latest OpenVPN changes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-11 11:56:07 +01:00
Peter Müller
dc6ed83537 delete unused dial.cgi file
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-10 12:22:19 +01:00
Michael Tremer
436479a29f core115: No need to reload apache after it has been restarted
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-09 14:58:41 +01:00
Michael Tremer
c8e03c7c53 core115: Regenerate IPsec configuration
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-09 14:58:26 +01:00
Michael Tremer
bfa0f1dfc0 core115: Rebuild language cache during update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-09 14:50:29 +01:00
Michael Tremer
2ac90665e8 core115: Ship updated apache
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-09 14:49:34 +01:00
Michael Tremer
6772cc8035 Download ISO images from https://downloads.ipfire.org
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-06 13:03:40 +01:00
Michael Tremer
1294c52ca5 core115: Include captive portal in updater
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-06 11:48:49 +01:00
Michael Tremer
112a09508e core115: Add captive portal cron jobs to updater
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-05 11:38:05 +01:00
Michael Tremer
e2d934cf2b core115: Ship update for OpenVPN
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-09-30 12:34:37 +01:00
Michael Tremer
36f5d20ef7 core115: Ship cosmetic improvements in proxy.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-09-24 20:23:06 +01:00
Arne Fitzenreiter
c42237247a start core115
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-09-24 15:51:12 +02:00
Arne Fitzenreiter
2083519a64 core114: add php to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-09-24 13:35:01 +02:00
Arne Fitzenreiter
595c6470dd core114: force update addons after core update
apache needs new vhost configs so all addons must updated to work with new
apache.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-09-23 10:34:54 +02:00
Michael Tremer
a041054941 core114: Update apache configuration of all add-ons that have one
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-09-04 13:09:43 +01:00
Michael Tremer
5f7487f676 core114: Ship updated apache2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-09-04 13:02:43 +01:00
Arne Fitzenreiter
a51ce2defa core114: add unbound initskript to updater.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-08-30 19:03:15 +02:00
Michael Tremer
0c55ec5a49 strongswan: Update to 5.6.0
Fixes CVE-2017-11185:

Fixed a DoS vulnerability in the gmp plugin that was caused by insufficient input validation
when verifying RSA signatures, which requires decryption with the operation m^e mod n,
where m is the signature, and e and n are the exponent and modulus of the public key.
The value m is an integer between 0 and n-1, however, the gmp plugin did not verify this.
So if m equals n the calculation results in 0, in which case mpz_export() returns NULL.
This result wasn't handled properly causing a null-pointer dereference.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-23 20:03:21 +01:00
Michael Tremer
455f261b15 core114: Ship updated squid
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-23 11:33:41 +01:00
Michael Tremer
fa9c7bd047 core114: Ship updated gnutls
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-23 11:31:56 +01:00
Michael Tremer
38b95ad5d9 core114: Ship updated unbound
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-23 11:29:55 +01:00
Michael Tremer
1d7d4460d6 core114: Ship updated hdparm
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-21 12:21:45 +01:00
Michael Tremer
05e7808cd6 Start Core Update 114
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-21 12:21:14 +01:00
Michael Tremer
3bee566f45 core113: Ship openvpn which has been missing in core112 updater
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-17 13:15:27 +01:00
Arne Fitzenreiter
e4837ceffe core113: add strongswan-padlock to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-08-16 20:12:45 +02:00
Michael Tremer
0e7d340f2b core113: Ship packages that have not been shipped with 112
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-16 11:32:43 +01:00
Arne Fitzenreiter
05478072cd unbound/ntp: move not working DNS fallback from ntp to unbound initskript
the ntp initskript will only run at first connection try. If this fails
and the connection can established later DNS will not work if the clock
is too far away.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-08-15 20:20:16 +02:00
Arne Fitzenreiter
874eabd6f5 serial-console: remove baudrate from inittab
new versions of agetty missinterpretes the baudrate and set it as TERM
without the parameter agetty use the previous rate that was set by the
kernel via console=XXX,Baudrate parameter.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-08-15 20:08:22 +02:00
Michael Tremer
5564841b10 core113: Add latest packages
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 11:58:38 +01:00
Michael Tremer
12b0bd949a Start Core Update 113
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 11:44:50 +01:00
Arne Fitzenreiter
71481bd8bb core112: reload init to allow correct unmount at reboot
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-07-07 10:14:37 +02:00
Michael Tremer
19404c954f core112: Ship updated util-linux
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-07-05 17:23:52 +01:00
Michael Tremer
9b5302d2ce Archive Core Updates 110 + 111
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-07-01 12:45:16 +01:00
Michael Tremer
ea938f6289 Package Core Update 112
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-07-01 12:44:48 +01:00
Stefan Schantl
31313db780 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2017-06-08 14:03:56 +02:00
Arne Fitzenreiter
203601bf68 Merge branch 'core110' 2017-05-30 21:29:20 +02:00
Michael Tremer
ebf64a93ee Fix shutting down unbound when red is STATIC
Unbound was trying to check availability of the upstream name servers
when /var/ipfire/red/active is present. This patch removes it first
and then brings down the red device.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-05-27 11:23:58 +01:00
Michael Tremer
206113d398 core111: Ship updated openssl
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-05-25 21:03:59 +01:00