webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-27 03:07:43 +02:00
Code Issues Packages Projects Releases Wiki Activity
10,089 Commits 2 Branches 1 Tag
2249bb1d52f36a69aad36384e60de4a4c63b0fda
Commit Graph

2821 Commits

Author SHA1 Message Date
Matthias Fischer
8e6421d78e squid 3.4.14: Bugfix for #4323 (Netfilter broken cross-includes with Linux 4.2) 
For details see: http://bugs.squid-cache.org/show_bug.cgi?id=4323

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-04-05 22:56:04 +01:00
Michael Tremer
bdb319c0ca squid: Patch SQUID-2016:3/CVE-2016-3947 
http://www.squid-cache.org/Advisories/SQUID-2016_3.txt

 Due to a buffer overrun Squid pinger binary is vulnerable to
 denial of service or information leak attack when processing
 ICMPv6 packets.

 This bug also permits the server response to manipulate other
 ICMP and ICMPv6 queries processing to cause information leak.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-04-05 22:52:54 +01:00
Arne Fitzenreiter
b3b5bbb95a Merge branch 'master' into next 2016-04-01 13:29:40 +02:00
Arne Fitzenreiter
b64110cfd5 igb: fix hung at dev_get_stats() 
without this igb can bring the whole userspace to hung
with "cpu_stuck for more than 22s". I don't understand
why this bug is set to "wont-fix" at the bugtracker.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-04-01 08:20:36 +02:00
Jonatan Schlag
4ffb9f95ad New package dmidecode 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-03-31 13:43:56 +01:00
Michael Tremer
f1a015425b pcre: Delete old patches 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-03-31 13:35:57 +01:00
Jonatan Schlag
a365d9d04b add a patch for ebtables (to fix the problem with usr local) 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-03-29 14:13:35 +01:00
Arne Fitzenreiter
046894ab7f Merge remote-tracking branch 'origin/master' into next 2016-03-27 22:17:16 +02:00
Arne Fitzenreiter
ed974e08c5 hostapd: fix crash at txpower set on ath10k 
ath10k generate a fault if iwconfig try to set txpower
while the device is down.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-03-26 15:35:31 +01:00
Arne Fitzenreiter
36b2adc9ed backports: ath10k fix logspam if channel was not set. 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-03-26 15:31:32 +01:00
Arne Fitzenreiter
545c15b0a1 kernel: add PC Engines(TM) APU2 LED driver 2016-03-26 10:15:45 +01:00
Arne Fitzenreiter
9a7a6c52ed kernel: k10temp: add family 16h model 30h pci id. 
used by AMD GX-412TC in PC Engines(TM) APU 2

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-03-26 10:08:18 +01:00
Marcel Lorenz
44c63c9612 mpfr: update to 3.1.3 
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-03-21 21:55:28 +00:00
Arne Fitzenreiter
33513817fa set version to IPFire 2.19 core100 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-03-20 09:36:33 +01:00
Arne Fitzenreiter
96e31c9817 ntp: wait for connection if dhcpcd is running 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-03-18 19:26:39 +01:00
Arne Fitzenreiter
224401de72 linux-pae: add root (hd0) to grub.conf for virt install. 
jiffybox will not load the kernel without this entry.
not tested on citrix yet.
 2016-03-16 23:09:32 +01:00
Arne Fitzenreiter
8649a31ed0 u-boot: fix fat16 reader 2016-03-16 22:58:21 +01:00
Michael Tremer
46ce813e33 setup: Fix segmentation fault with more than four NICs found 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-03-10 19:22:04 +00:00
Arne Fitzenreiter
822b4313d1 kernel: update to 3.14.63 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-03-05 17:09:32 +01:00
Arne Fitzenreiter
4a6cfe51a1 Merge remote-tracking branch 'origin/master' into next 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-03-04 07:09:02 +01:00
Arne Fitzenreiter
353e08cd77 openssl: compile with sslv2 support but disable 
the new default breaks the ABI so we need to compile in but
disable it with a patch.
 2016-03-02 21:31:07 +01:00
Arne Fitzenreiter
5d95fd5af1 Revert "python-m2crypto: remove SSLv2_method" 
This reverts commit d86a249286.
 2016-03-02 21:13:31 +01:00
Arne Fitzenreiter
d86a249286 python-m2crypto: remove SSLv2_method 
this is removed by OpenSSL 1.0.2g

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-03-01 22:25:55 +01:00
Matthias Fischer
a6cd8b9b5d dnsmasq: 2.76test10 with latest patch (005) and some fixes 
1. Added patch 005 because of the discussion on the dnsmasq-list:
"I've noticed that replies which get their TTL from the dhcp-ttl
option always get the TTL specified in dhcp-ttl. I'd prefer
something like max(0, min(<dhcp-ttl>, <lease-expire-time> -
<now>)). Otherwise, dns might hand out a high TTL for a dhcp-lease
which expires one second later.
...
Seems a sensible addition.

Cheers,

Simon."

2. Fixed several line numbers and patch lines in
'dnsmasq-Add-support-to-read-ISC-DHCP-lease-file.patch'. On the last build
I got some "Hunk failed" messages. Patches are now applied exactly at the
given lines.

3. Nevertheless, I still get some warnings:
...
dnsmasq.c: In function 'main':
dnsmasq.c:55:7: warning: unused variable 'did_bind' [-Wunused-variable]
   int did_bind = 0;
       ^
dnsmasq.c:54:9: warning: unused variable 'bound_device' [-Wunused-variable]
   char *bound_device = NULL;
         ^
...
isc.c: In function 'dhcp_lease_new':
isc.c:40:3: warning: ignoring return value of 'asprintf', declared with attribute warn_unused_result [-Wunused-result]
   asprintf(&lease->fqdn, "%s.%s", hostname, daemon->domain_suffix);
   ^

Asking about these warnings in the dnsmasq-list showed no reaction - no one answered.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-02-28 12:15:18 -08:00
Matthias Fischer
3b9815eb87 dnsmasq: 2.76test10 with latest patches (001-004) 
This is 'dnsmasq 2.76test10', based on current 'next', containing latest patches.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-02-28 12:15:11 -08:00
Arne Fitzenreiter
c83d161463 init-functions: enable autoramdisk with 400MB 
The 512MB raspberry pi reserve some memory for buffers and gpu
so there are a bit less than 490 MB free.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-02-23 20:01:30 +01:00
Arne Fitzenreiter
802b916d10 Merge remote-tracking branch 'origin/master' into next 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Conflicts:
	make.sh
 2016-02-17 19:47:50 +01:00
Arne Fitzenreiter
bb330e25e9 glibc: new RHEL6 patches / fix CVE-2015-7547 and more 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-02-17 12:46:11 +01:00
Matthias Fischer
fd3b90c875 squid 3.4.14: Bugfix for #4431 (C code is not compiled with CFLAGS) 
For details see: http://bugs.squid-cache.org/show_bug.cgi?id=4431

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-02-13 18:51:08 +00:00
Matthias Fischer
c1bf984e05 New IP-address of 'ping.ipfire.org' 
Telekom gateways (e.g.) don't answer 'pings', therefor '/etc/ppp/ip-up'
uses 'ping.ipfire.org' for the 'gateway Graph' in 'Status / Network (other'.
After moving the infrastructure, several IP addresses were changed.
'178.63.73.246' doesn't work anymore for 'ping.ipfire.org', its now '81.3.27.38'.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-02-08 01:51:26 +00:00
Michael Tremer
645378fbb9 firewall: Fix MAC filter 
Packets destined for the firewall coming in from the blue
device where accepted too early to be processed by the
firewall input chain rules.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-02-05 10:24:03 +00:00
Michael Tremer
ff43197b01 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2016-02-04 14:35:55 +00:00
Michael Tremer
0aa71600ef wirelessctrl: Remove some unused code 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-02-04 14:31:53 +00:00
Arne Fitzenreiter
552fb4b8b5 dhcpcd: rework mtu handling on buggy nic's 
some nic's loose the carrier after setting new mtu.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-02-01 07:31:46 +01:00
Arne Fitzenreiter
44ec3a759a hwdate: update databases 
pci.ids: 2016.01.28
usb.ids: 2015.12.17

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-01-28 13:40:54 +01:00
Arne Fitzenreiter
eb2f4a4d26 hwdate: update databases 
pci.ids: 2016.01.28
usb.ids: 2015.12.17

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-01-28 13:24:50 +01:00
Arne Fitzenreiter
235888599a backports: update to 4.2.6 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-01-28 13:02:09 +01:00
Michael Tremer
02a60a9b9e squid: Actually make --with-filedescriptors work 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-01-23 01:49:37 +00:00
Michael Tremer
8a1a3bf393 Merge remote-tracking branch 'ms/iptables-conntrack' into next 2016-01-22 00:54:14 +00:00
Michael Tremer
41410d197b Merge branch 'hyper-v-fixes' into next 2016-01-22 00:49:15 +00:00
Matthias Fischer
db017b4b6e ntp 4.2.8p5: removed obsolete patch file 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-01-10 21:18:22 +00:00
Michael Tremer
16260e2c69 timectrl: Stop ntp daemon when disabled 
Fixes #11000

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-01-07 23:47:39 +00:00
Arne Fitzenreiter
2eb67894ef binutils: update to 2.24 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-01-07 17:41:16 +01:00
Michael Tremer
b0a014b7f8 QoS: Improve saving enabled/disable state 
It was reported that the QoS did not stop when
the user clicked the "stop" button. This patch
fixes that.

Fixes #10664

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Acked-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
 2016-01-05 21:04:05 +00:00
Michael Tremer
9a09d94ee3 qosctrl: Cleanup code by replacing hardcoded paths 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-01-05 20:44:26 +00:00
Matthias Fischer
c3b4c861f5 dnsmasq 2.75: latest patches from upstream 
Same procedure as... :-)

Best to all for xmas and 2016!

Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-12-28 15:35:34 +01:00
Arne Fitzenreiter
aa66842358 kernel: apply arm-multi grsecurity fixes only at arm-multi build 2015-12-23 10:14:26 +01:00
Michael Tremer
98b8cabf4d dnsdist: New package 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-12-22 22:27:58 +00:00
Michael Tremer
6138d53bdd lua: New package 
Simple scripting language. Supposed to be fast. Needed for dnsdist.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-12-22 22:27:39 +00:00
Michael Tremer
a7b0967db4 linux: Backport Hyper-V network driver 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-12-22 14:47:43 +00:00