Arne Fitzenreiter
24d36c80a6
p2pblock: fix flush rules if all p2p's are allowed.
2014-10-05 15:12:44 +02:00
Arne Fitzenreiter
2a5b19c56f
p2pblock: ipp2p must run before CONNTRACK.
...
And can only used for blocking, not for accept conenections bacause connections must already established for detecting protocol types.
2014-10-04 17:39:51 +02:00
Arne Fitzenreiter
e43b21264f
Merge branch 'next'
2014-10-04 13:53:49 +02:00
Michael Tremer
791c2b45d8
firewall: fix rules.pl for old rules without ratelimiting.
2014-10-04 13:52:15 +02:00
Michael Tremer
243f8ca6e9
squid: Update to 3.4.8
...
Contains some security fixes:
* CVE-2014-6270
http://www.squid-cache.org/Advisories/SQUID-2014_3.txt
* CVE-2014-7141
CVE-2014-7142
http://www.squid-cache.org/Advisories/SQUID-2014_4.txt
2014-10-02 18:21:51 +02:00
Arne Fitzenreiter
8285512a18
Merge remote-tracking branch 'origin/next'
2014-09-30 23:53:00 +02:00
Arne Fitzenreiter
34b26caca1
bash: rootfile update.
2014-09-30 23:49:47 +02:00
Arne Fitzenreiter
8930d79dc2
Merge remote-tracking branch 'origin/next'
2014-09-30 19:30:45 +02:00
Michael Tremer
da8c74ee53
parted: Update to 3.1.
2014-09-30 19:28:55 +02:00
Arne Fitzenreiter
a00d943206
set PAK_VER to core84.
2014-09-30 09:33:27 +02:00
Arne Fitzenreiter
9bdc5896dd
Merge remote-tracking branch 'origin/next'
2014-09-30 09:32:01 +02:00
Michael Tremer
efa808ba11
readline: Re-add accidentially deleted patches of -compat package
2014-09-29 22:43:04 +02:00
Michael Tremer
801dcd70b0
bash: Import patch for version 4.3.27
...
See #10633
2014-09-29 21:29:57 +02:00
Michael Tremer
625c95d2be
core84: Add updated readline
2014-09-29 13:52:16 +02:00
Michael Tremer
c02899be04
readline: Update to 6.3.
2014-09-29 13:51:26 +02:00
Michael Tremer
3347f993b6
bash: Import upstream fixes
2014-09-29 13:50:03 +02:00
Michael Tremer
56a435a001
bash: Import fix for CVE-2014-7169
...
http://www.openwall.com/lists/oss-security/2014/09/25/10
Conflicts:
lfs/bash
2014-09-29 13:49:56 +02:00
Michael Tremer
77b3d64a16
bash: Fix for CVE-2014-6271
...
A flaw was found in the way Bash evaluated certain specially crafted
environment variables. An attacker could use this flaw to override
or bypass environment restrictions to execute shell commands.
Certain services and applications allow remote unauthenticated
attackers to provide environment variables, allowing them to exploit
this issue.
2014-09-29 13:49:51 +02:00
Michael Tremer
ce84ace5bf
bash: Update to 4.3.
...
Conflicts:
lfs/bash
2014-09-29 13:49:39 +02:00
Arne Fitzenreiter
416bf5f3f9
fix merge problem.
2014-09-29 13:44:26 +02:00
Michael Tremer
9a818c0eb4
core84: Add changed /etc/rc.d/init.d/network
2014-09-28 13:32:17 +02:00
Michael Tremer
09e0890109
Merge remote-tracking branch 'teissler/bug_10454' into next
2014-09-28 13:31:53 +02:00
Timo Eissler
1d4897f308
network: move start of static-routes
...
Fixes #10454
Create static routes after network interfaces are initialised.
2014-09-27 23:28:04 +02:00
Timo Eissler
d51e490664
network: fix coding style
2014-09-27 23:16:57 +02:00
Michael Tremer
478d8bb5da
Merge remote-tracking branch 'teissler/bug_10535' into next
2014-09-27 23:00:05 +02:00
Michael Tremer
627fdda8e8
Fix wording. Remove "got".
...
Fixes #10632
2014-09-27 22:59:05 +02:00
Timo Eissler
1c4308c1f2
urlfilter.cgi: enhance file extension blocking
...
Fixes #10535
Add flv, mkv and mp4 as audio/video file exentions.
Add 7z as archive file extension.
2014-09-27 22:24:26 +02:00
Michael Tremer
b7981215da
core84: Add changed urlfilter.cgi
2014-09-27 20:43:49 +02:00
Michael Tremer
0e6e5d46c1
Merge remote-tracking branch 'teissler/Bug_10415' into next
2014-09-27 20:43:23 +02:00
Timo Eissler
6ae884e5f9
urlfilter.cgi: safe search enhancements
...
Fixes : #10415
Activate bing safe search.
Add nwshp to google url patterns.
2014-09-26 22:15:13 +02:00
Alexander Marx
d71bcfce59
squid-accounting: set right permissions of html directory for graphs and logo
2014-09-26 13:05:22 +02:00
Michael Tremer
21df0788ab
core84: Add changed files from #10620
2014-09-26 13:03:48 +02:00
Michael Tremer
7e09a94a81
Merge remote-tracking branch 'amarx/BUG10620' into next
2014-09-26 13:03:22 +02:00
Michael Tremer
60bce6ba6a
Merge remote-tracking branch 'amarx/BUG10615' into next
2014-09-26 13:02:28 +02:00
Michael Tremer
2acc3cd9e7
core84: Add changed files from fw-checksubnet branch
2014-09-26 13:00:38 +02:00
Michael Tremer
b14e0f7d0e
Merge remote-tracking branch 'amarx/fw-checksubnet' into next
2014-09-26 12:59:26 +02:00
Michael Tremer
82f8d118b7
core84: Add changed files from the firewall-dnat branch
2014-09-26 12:58:13 +02:00
Michael Tremer
df6649b0fe
Merge remote-tracking branch 'amarx/firewall-dnat' into next
...
Conflicts:
config/firewall/rules.pl
2014-09-26 12:55:55 +02:00
Michael Tremer
b30890aa06
bash: Import upstream patches for CVE-2014-6271 and CVE-2014-7169
2014-09-26 12:42:27 +02:00
Michael Tremer
b7784e38bd
core84: Add dnsmasq update
2014-09-26 12:25:48 +02:00
Michael Tremer
2a3506f349
Create core update 84
2014-09-26 12:25:30 +02:00
Michael Tremer
d6796d144a
Merge branch 'master' into next
2014-09-26 12:21:18 +02:00
Michael Tremer
7a35d102cb
dnsmasq: Update to 2.72
2014-09-25 21:16:01 +02:00
Arne Fitzenreiter
61466ab18d
core83: set version to core83.
2014-09-25 20:37:55 +02:00
Arne Fitzenreiter
cea3c8cf53
core83: reload init at update because glibc changes.
2014-09-25 20:36:06 +02:00
Michael Tremer
e86c70a99f
bash: Import fix for CVE-2014-7169
...
http://www.openwall.com/lists/oss-security/2014/09/25/10
2014-09-25 19:38:23 +02:00
Michael Tremer
a4c895e569
Merge branch 'master' into next
2014-09-24 20:39:43 +02:00
Michael Tremer
5aa856ce1c
core83: add changed files
2014-09-24 20:38:59 +02:00
Michael Tremer
5f17f9f341
Create core update 83
2014-09-24 20:31:55 +02:00
Michael Tremer
6cda6f906e
bash: Fix for CVE-2014-6271
...
A flaw was found in the way Bash evaluated certain specially crafted
environment variables. An attacker could use this flaw to override
or bypass environment restrictions to execute shell commands.
Certain services and applications allow remote unauthenticated
attackers to provide environment variables, allowing them to exploit
this issue.
2014-09-24 18:48:35 +02:00
