webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-23 09:22:59 +02:00
Code Issues Packages Projects Releases Wiki Activity
13,743 Commits 2 Branches 1 Tag
1df47cc9eec46ac2deaee8a1314555bc08026368
Commit Graph

2047 Commits

Author SHA1 Message Date
Michael Tremer
1df47cc9ee libssh: New package 
This is required by Bird to support RPKI.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 18:19:33 +00:00
Matthias Fischer
5121f35be3 bind: Update to 9.11.11 
For details see:
https://downloads.isc.org/isc/bind9/9.11.11/RELEASE-NOTES-bind-9.11.11.html

"Security Fixes

   A race condition could trigger an assertion failure when a large
   number of incoming packets were being rejected. This flaw is disclosed
   in CVE-2019-6471. [GL #942]

...

Bug Fixes

   Glue address records were not being returned in responses to root priming
   queries; this has been corrected. [GL #1092]

   Interaction between DNS64 and RPZ No Data rule (CNAME *.) could cause
   unexpected results; this has been fixed. [GL #1106]

   named-checkconf now checks DNS64 prefixes to ensure bits 64-71 are zero.
   [GL #1159]

   named-checkconf could crash during configuration if configured to use "geoip
   continent" ACLs with legacy GeoIP. [GL #1163]

   named-checkconf now correctly reports missing dnstap-output option when dnstap
   is set. [GL #1136]

   Handle ETIMEDOUT error on connect() with a non-blocking socket. [GL #1133]"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 18:06:58 +00:00
Matthias Fischer
57354c8187 pcre: Update to 8.43 
For details see:
http://www.pcre.org/original/changelog.txt

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 18:01:13 +00:00
Matthias Fischer
5551237b1a iproute2: Update to 5.2.0 
For details see:
https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/log/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 17:56:02 +00:00
Matthias Fischer
7a03d4b08a iptables: Update to 1.8.3 
For details see:
https://www.netfilter.org/projects/iptables/files/changes-iptables-1.8.3.txt

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 17:51:19 +00:00
Stefan Schantl
deb594c1b6 libnetfilter_queue: Update to 1.0.4 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 17:47:26 +00:00
Erik Kapfer
639ce4545d IO-Socket-SSL: Update to version 2.066 
Fix for "Undefined subroutine &IO::Socket::SSL::set_client_defaults called at /usr/libexec/git-core/git-send-email" problem.

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-18 16:24:22 +00:00
Arne Fitzenreiter
ece63aa950 openssl: update to 1.1.1d 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-12 05:52:47 +00:00
Arne Fitzenreiter
f3158de0b8 usb-modeswitch-data: fix rootfile 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-04 14:15:35 +00:00
Ramax Lo
46b457393d usb_modeswitch_data: update to 20170806 
Signed-off-by: Ramax Lo <ramaxlo@gmail.com>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-02 20:42:50 +00:00
Matthias Fischer
d0fc3b2008 unbound: Update to 1.9.3 
For details see:
https://nlnetlabs.nl/pipermail/unbound-users/2019-August/011765.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-02 20:19:33 +00:00
Matthias Fischer
cf2aa683a9 bind: Update to 9.11.10 
For details see:
https://downloads.isc.org/isc/bind9/9.11.10/RELEASE-NOTES-bind-9.11.10.html

"Security Fixes

A race condition could trigger an assertion failure when a large
number of incoming packets were being rejected.
This flaw is disclosed in CVE-2019-6471. [GL #942]"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-28 08:16:48 +00:00
Arne Fitzenreiter
16bd7e43c1 aarch64: rootfile updates 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-26 10:12:56 +00:00
Arne Fitzenreiter
329f4a3fe1 perl-NetAddr-IP: move to core 
I had added this for spamassassin but now the geoip-converter needs it too.
It was not pushed yet so there is no need to remove it from pakfire databases.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-24 11:33:45 +02:00
Arne Fitzenreiter
392994dcfb geoip-generator: added to build legacy GeoIP.dat file 
program and scripts based on debian geoip packages.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-24 11:29:01 +02:00
Arne Fitzenreiter
fd24c5dcbd Merge remote-tracking branch 'arne_f/perl-5.30' into next 2019-08-20 17:43:53 +00:00
Matthias Fischer
6817d23a01 bind: Update to 9.11.9 
For details see:
https://downloads.isc.org/isc/bind9/9.11.9/RELEASE-NOTES-bind-9.11.9.html

"Security Fixes

   A race condition could trigger an assertion failure when a large
   number of incoming packets were being rejected.
   This flaw is disclosed in CVE-2019-6471. [GL #942]"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-20 17:37:26 +00:00
Matthias Fischer
e83393146f apache: Update to 2.4.41 
For details see:
http://mirror.dkd.de/apache//httpd/CHANGES_2.4.41

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-20 17:36:48 +00:00
Michael Tremer
d111587cc3 gcc: Build the Go compiler 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-20 17:21:08 +00:00
Arne Fitzenreiter
00a655fa5c rootfiles: replace x86_64 with MACHINE 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-17 16:47:34 +02:00
Arne Fitzenreiter
bdde6afa76 Unix-syslog: fix rootfile 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-17 10:51:18 +02:00
Arne Fitzenreiter
2ea3f4d95f rootfiles: perl 5.30 needs the autosplit.ix files 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-17 10:42:43 +02:00
Arne Fitzenreiter
0eff753d71 rootfile update for all common perl modules. 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-16 12:50:19 +02:00
Arne Fitzenreiter
2fa5a87dc0 MIME-Tools: update to 5.509 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-16 12:42:01 +02:00
Arne Fitzenreiter
6dac067cfe perl-Switch: add module 
perl-Switch was removed from perl core distribution

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-16 12:36:20 +02:00
Arne Fitzenreiter
2890ab712e perl-CGI: add perl-CGI module. 
perl-CGI was remoced from perl core distribution

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-16 12:35:01 +02:00
Arne Fitzenreiter
9680152977 perl: update to 5.30 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-16 12:33:40 +02:00
Arne Fitzenreiter
348cc0ddcd texinfo: update to 6.6 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-16 12:17:51 +02:00
Arne Fitzenreiter
7c30831ad2 initskripts: move unbound down after network down 
this remove a bunch of unbound errors at shutdown because
network down try to reconfigure unbond. (e.g. disable forwarders)

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-11 11:09:40 +02:00
Arne Fitzenreiter
10dd2afd6d sysctl: add seperate sysctl-x86_64.conf and move x86_64 only parameters 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-08 09:30:49 +02:00
Arne Fitzenreiter
6836e528e5 u-boot-friendlyarm: add u-boot for nanopi-r1 to boot from eMMC 
this is a heavy patched version and should replaced when stock
u-boot is able to boot from h3 eMMC.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-06 04:32:22 +00:00
Arne Fitzenreiter
a6859d889e rpi-firmware: create copy of RPI3 brcm 43430 configfile. 
the AP21xx need a different config so store the rpi version as backup.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-07-31 11:03:33 +00:00
Arne Fitzenreiter
53ece8f1f7 kernel: update arm-multi patchset 
this add FriendlyElec nanopi-r1 devicetree file.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-07-30 18:27:43 +00:00
Arne Fitzenreiter
fd7c2f3a9e initskripts: fix i586 rootfile 2019-07-17 13:12:46 +02:00
Arne Fitzenreiter
3ec3329dff unbound: rework dns-forwader handling 
add check if red interface has an IPv4 address before test the servers at
red up and simply remove forwarders at down process.

This also fix the hung at dhcpd shutdown.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-07-16 19:20:48 +02:00
Michael Tremer
acf47bfa80 cloud-init: Import experimental configuration script for Azure 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-07-01 07:53:58 +01:00
Michael Tremer
ffb37e51d4 Rename AWS initscript to cloud-init 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-07-01 07:53:58 +01:00
Matthias Fischer
1c505151cb nettle: Update to 3.5.1 
For details see:
https://git.lysator.liu.se/nettle/nettle/blob/master/ChangeLog

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-06-25 08:18:15 +01:00
Michael Tremer
759be5855f linux: Fix rootfile to ship GeoIP modules 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-06-24 14:39:30 +01:00
Matthias Fischer
f3959d13e8 bind: Update to 9.11.8 
For Details see:
https://downloads.isc.org/isc/bind9/9.11.8/RELEASE-NOTES-bind-9.11.8.html

"Security Fixes
    A race condition could trigger an assertion failure when a large number
    of incoming packets were being rejected.
    This flaw is disclosed in CVE-2019-6471. [GL #942]"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-06-21 01:39:18 +01:00
Arne Fitzenreiter
70590cef48 Kernel: update to 4.14.128 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-06-19 21:01:29 +02:00
Matthias Fischer
98f55e136f vim: Update to 8.1 
Please note:
If this gets merged, the update process must deal with the otherwise remaining
files in '/usr/share/vim74' (~16 MB).

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-06-18 22:34:55 +01:00
Arne Fitzenreiter
15ca18a3d9 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2019-06-18 18:42:02 +02:00
Arne Fitzenreiter
82c279a518 kernel: update to 4.14.127 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-06-18 18:41:19 +02:00
Matthias Fischer
2f278de868 unbound: Update to 1.9.2 
For details see:
https://nlnetlabs.nl/pipermail/unbound-users/2019-June/011632.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-06-17 17:39:37 +01:00
Michael Tremer
35f12f2998 Rootfile update 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-06-10 09:58:15 +01:00
Michael Tremer
28093c8376 Rootfile update 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-06-08 11:34:37 +01:00
Michael Tremer
09b9910696 Rootfile update 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-06-07 11:14:11 +01:00
Tim FitzGeorge
a5ba473c15 suricata: correct rule actions in IPS mode 
In IPS mode rule actions need to be have the action 'drop' for the
protection to work, however this is not appropriate for all rules.
Modify the generator for oinkmaster-modify-sids.conf to leave
rules with the action 'alert' here this is appropriate.  Also add
a script to be run on update to correct existing downloaded rules.

Fixes #12086

Signed-off-by: Tim FitzGeorge <ipfr@tfitzgeorge.me.uk>
Tested-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-06-05 12:39:57 +01:00
Michael Tremer
cfbb61a74d Rootfile update for ARM kernels 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-06-04 23:44:49 +01:00