webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-22 00:42:59 +02:00
Code Issues Packages Projects Releases Wiki Activity
13,666 Commits 2 Branches 1 Tag
2b20d0cfc630dc76fe4742634417ea6e006ccc1a
Commit Graph

5944 Commits

Author SHA1 Message Date
Matthias Fischer
2b20d0cfc6 clamav: Update to 0.101.4 
For details see:
https://blog.clamav.net/2019/08/clamav-01014-security-patch-release-has.html

"An out of bounds write was possible within ClamAV's NSIS bzip2
library when attempting decompression in cases where the number
of selectors exceeded the max limit set by the library (CVE-2019-12900).
The issue has been resolved by respecting that limit.

Thanks to Martin Simmons for reporting the issue here.

The zip bomb vulnerability mitigated in 0.101.3 has been assigned
the CVE identifier CVE-2019-12625. Unfortunately, a workaround for
the zip-bomb mitigation was immediately identified. To remediate
the zip-bomb scan time issue, a scan time limit has been introduced
in 0.101.4.
This limit now resolves ClamAV's vulnerability to CVE-2019-12625."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-28 08:16:50 +00:00
Matthias Fischer
cf2aa683a9 bind: Update to 9.11.10 
For details see:
https://downloads.isc.org/isc/bind9/9.11.10/RELEASE-NOTES-bind-9.11.10.html

"Security Fixes

A race condition could trigger an assertion failure when a large
number of incoming packets were being rejected.
This flaw is disclosed in CVE-2019-6471. [GL #942]"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-28 08:16:48 +00:00
Michael Tremer
84d5f2faf9 freeradius: Add a logrotate configuration file 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-28 08:16:41 +00:00
Michael Tremer
4f66bad488 dnsdist: Increase number of open files to 64k 
dnsdist might need to open large number of connections
and therefore the default limit of 1024 needs to be
raised.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-28 08:16:32 +00:00
Arne Fitzenreiter
329f4a3fe1 perl-NetAddr-IP: move to core 
I had added this for spamassassin but now the geoip-converter needs it too.
It was not pushed yet so there is no need to remove it from pakfire databases.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-24 11:33:45 +02:00
Arne Fitzenreiter
392994dcfb geoip-generator: added to build legacy GeoIP.dat file 
program and scripts based on debian geoip packages.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-24 11:29:01 +02:00
Arne Fitzenreiter
fd24c5dcbd Merge remote-tracking branch 'arne_f/perl-5.30' into next 2019-08-20 17:43:53 +00:00
Matthias Fischer
4bb1d994b0 knot: Update to 2.8.3 
For details see:
https://www.knot-dns.cz/2019-07-16-version-283.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-20 17:38:19 +00:00
Matthias Fischer
6817d23a01 bind: Update to 9.11.9 
For details see:
https://downloads.isc.org/isc/bind9/9.11.9/RELEASE-NOTES-bind-9.11.9.html

"Security Fixes

   A race condition could trigger an assertion failure when a large
   number of incoming packets were being rejected.
   This flaw is disclosed in CVE-2019-6471. [GL #942]"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-20 17:37:26 +00:00
Matthias Fischer
e83393146f apache: Update to 2.4.41 
For details see:
http://mirror.dkd.de/apache//httpd/CHANGES_2.4.41

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-20 17:36:48 +00:00
Matthias Fischer
0184e5806d dhcpcd: Update to 8.0.2 
For details see:
https://roy.marples.name/

"NetBSD: Can be build without ARP support but listen to kernel DaD
ND6: Removed NA support from SMALL builds
ND6: Remove and warn about NA issues on OS's other than NetBSD and Linux
script: /tmp files are now cleaned up for systems without open_memstream(3)
configure: open_memstream(3) detected on recent glibc
DHCP: Avoid duplicate read of UDP socket when BPF is also open
IP: Avoid adding address if already exists on OS other than Linux
IP6: Avoid adding address is already exists on Solaris
route: Fixed a NULL de-reference error on statically configured routes
DHCP6: Move to REQUEST when any IA has error no-binding in RENEW/REBIND
DragonFlyBSD: Now compiles and works for
IP: Accept packets with IP header options"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-20 17:36:39 +00:00
Peter Müller
f3900bc44b Postfix: update to 3.4.6 
See http://www.postfix.org/announcements/postfix-3.4.6.html
for release notes.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-20 17:36:26 +00:00
Peter Müller
6fd6ab5e6f patch: update to 2.7.6 
Note: This does not fix CVE-2019-13636 and CVE-2019-13638
as fixes did not make it into upstream vanilla patch, yet.

See also: https://www.debian.org/security/2019/dsa-4489

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-20 17:36:19 +00:00
Peter Müller
8de132b53d update ca-certificates CA bundle 
Update the CA certificates list to what Mozilla NSS ships currently.

The original file can be retrieved from:
https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-20 17:35:54 +00:00
Michael Tremer
d111587cc3 gcc: Build the Go compiler 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-20 17:21:08 +00:00
Michael Tremer
f53d80f60d tshark: Fix parallel build 
The variable name was incorrect and therefore a parallel
build was never attempted.

This this package already takes a lot of time to build, even
more is being saved now.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-08-18 17:54:01 +01:00
Arne Fitzenreiter
b1752aa86a perl: fix installation at toolchain build 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-16 21:32:56 +02:00
Arne Fitzenreiter
8f520a2d1d rootfile update and bump of all addons with perl modules 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-16 12:59:46 +02:00
Arne Fitzenreiter
7d95d6feeb spamassassin: update to 3.4.2 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-16 12:48:25 +02:00
Arne Fitzenreiter
cdf45e41df gnump3d: update for new perl path 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-16 12:47:05 +02:00
Arne Fitzenreiter
9720a361d5 mpfire: update to new perl path 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-16 12:45:14 +02:00
Arne Fitzenreiter
2fa5a87dc0 MIME-Tools: update to 5.509 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-16 12:42:01 +02:00
Arne Fitzenreiter
1ef84a720e perl-Authen-SASL: fix build and bump for new perl 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-16 12:40:22 +02:00
Arne Fitzenreiter
f878c27e82 perl-NetAddr-IP: add addon module 
perl-NetAddr-IP is needed for Spamassassin

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-16 12:38:01 +02:00
Arne Fitzenreiter
6dac067cfe perl-Switch: add module 
perl-Switch was removed from perl core distribution

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-16 12:36:20 +02:00
Arne Fitzenreiter
2890ab712e perl-CGI: add perl-CGI module. 
perl-CGI was remoced from perl core distribution

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-16 12:35:01 +02:00
Arne Fitzenreiter
9680152977 perl: update to 5.30 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-16 12:33:40 +02:00
Arne Fitzenreiter
348cc0ddcd texinfo: update to 6.6 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-16 12:17:51 +02:00
Arne Fitzenreiter
7c30831ad2 initskripts: move unbound down after network down 
this remove a bunch of unbound errors at shutdown because
network down try to reconfigure unbond. (e.g. disable forwarders)

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-11 11:09:40 +02:00
Michael Tremer
071d7754f7 freeradius: Build without SSL 
The version check is entirely broken.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-08-10 03:48:49 +01:00
Michael Tremer
6580bdeb6b freeradius: Build package without generating certificates 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-08-10 03:12:04 +01:00
Michael Tremer
a0cc5faf71 freeradius: Disable openssl version check 
freeradius seems to care about which version it has been
compiled with and refuses to start. This switch disables
this behaviour.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-08-10 03:12:04 +01:00
Michael Tremer
1282a2e1af keepalived: Enable auto-start 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-08-10 03:12:04 +01:00
Michael Tremer
4a53156001 keepalived: Backup the whole configuration directory 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-08-10 03:12:04 +01:00
Arne Fitzenreiter
520e6a1dd4 kernel: update to 4.14.138 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-09 23:47:55 +02:00
Arne Fitzenreiter
3b415347bb kernel: update to 4.14.137 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-07 20:38:25 +00:00
Arne Fitzenreiter
c934c5ff19 clamav: update to 0.101.3 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-07 22:16:46 +02:00
Arne Fitzenreiter
6836e528e5 u-boot-friendlyarm: add u-boot for nanopi-r1 to boot from eMMC 
this is a heavy patched version and should replaced when stock
u-boot is able to boot from h3 eMMC.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-06 04:32:22 +00:00
Arne Fitzenreiter
e47e01f60c u-boot: enable boot from additional mmc device 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-04 13:43:44 +00:00
Arne Fitzenreiter
a6859d889e rpi-firmware: create copy of RPI3 brcm 43430 configfile. 
the AP21xx need a different config so store the rpi version as backup.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-07-31 11:03:33 +00:00
Arne Fitzenreiter
2e65d316a7 kernel: remove old modules folder before kernel build 
the build fails at creating source symlinks for external
modules build if it already exists.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-07-30 18:28:57 +00:00
Arne Fitzenreiter
53ece8f1f7 kernel: update arm-multi patchset 
this add FriendlyElec nanopi-r1 devicetree file.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-07-30 18:27:43 +00:00
Arne Fitzenreiter
1fd34bd2ec pcenginges-firmware: skip build on arm 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-07-24 12:37:10 +02:00
Michael Tremer
efc5cb1d34 bird: Update to 2.0.4 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-07-22 21:12:20 +01:00
Arne Fitzenreiter
eb5cd9fa57 pcengines-firmware: update to 4.9.0.7 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-07-17 17:16:25 +02:00
Arne Fitzenreiter
de8810fbaa iperf3: update to 3.7 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-07-17 13:15:33 +02:00
Arne Fitzenreiter
e4e1b8718e iperf: update to 2.0.13 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-07-17 13:15:01 +02:00
Matthias Fischer
61e1ad2703 squid: Update to 4.8 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-07-09 09:49:47 +01:00
Peter Müller
fd244f4327 tzdata: update to 2019b 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-07-04 08:23:27 +01:00
Michael Tremer
c4dd9dfc46 Revert "Generate a VHD image" 
This reverts commit ee0e3beb39.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-07-01 07:54:19 +01:00