webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-12 04:05:53 +02:00
Code Issues Packages Projects Releases Wiki Activity
11,706 Commits 2 Branches 1 Tag
302dba205bf58b3def6163b85b4decfce4538fac
Commit Graph

11706 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Arne Fitzenreiter
302dba205b Merge remote-tracking branch 'origin/master' into kernel-4.14 2018-03-30 10:26:01 +02:00
Arne Fitzenreiter
018a19af64 kernel: update to 4.14.31 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-30 10:21:49 +02:00
Arne Fitzenreiter
36600cef36 Merge branch 'core119' into next 2018-03-30 09:35:28 +02:00
Arne Fitzenreiter
6a8b2ef977 core120: set pafire version to 120 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-30 09:25:06 +02:00
Michael Tremer
f7e9c14842 Rootfile update 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-29 13:49:44 +01:00
Michael Tremer
4b072d640e pakfire: Use upstream proxy for HTTPS, too 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-28 16:55:18 +01:00
Peter Müller
66a0f3646a use protocol defined in server-list.db for mirror communication 
For each mirror server, a protocol can be specified in the
server-list.db database. However, it was not used for the
actual URL query to a mirror before.

This might be useful for deploy HTTPS pinning for Pakfire.
If a mirror is known to support HTTPS, all queries to it
will be made with this protocol.

This saves some overhead if HTTPS is enforced on a mirror
via 301 redirects. To enable this, the server-list.db
needs to be adjusted.

The second version of this patch only handles protocols
HTTP and HTTPS, since we do not expect anything else here
at the moment.

Partially fixes #11661.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-28 16:42:21 +01:00
Michael Tremer
9f0999325d unbound: Fix crash on startup 
Zone names should not be terminated with a dot.

Fixes: #11689

Reported-by: Pontus Larsson <pontuslarsson51@yahoo.se>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-28 16:39:35 +01:00
Michael Tremer
d97f43b309 Rootfile update for curl 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-28 11:22:06 +01:00
Michael Tremer
d9e656bb82 asterisk: Ship documentation 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-27 20:56:31 +01:00
Michael Tremer
d3cd99830a fetchmail: Permit building without SSLv3 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-27 20:53:31 +01:00
Michael Tremer
76f422025f openssl: Update to 1.0.2o 
CVE-2018-0739 (OpenSSL advisory) [Moderate severity] 27 March 2018:

Constructed ASN.1 types with a recursive definition (such as can be
found in PKCS7) could eventually exceed the stack given malicious
input with excessive recursion. This could result in a Denial Of
Service attack. There are no such structures used within SSL/TLS
that come from untrusted sources so this is considered safe.
Reported by OSS-fuzz.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-27 16:05:07 +01:00
Michael Tremer
166ceacd6b openssl: Update to 1.1.0h 
CVE-2018-0739 (OpenSSL advisory) [Moderate severity] 27 March 2018:

Constructed ASN.1 types with a recursive definition (such as can be
found in PKCS7) could eventually exceed the stack given malicious
input with excessive recursion. This could result in a Denial Of
Service attack. There are no such structures used within SSL/TLS
that come from untrusted sources so this is considered safe.
Reported by OSS-fuzz.

This patch also entirely removes support for SSLv3. The patch to
disable it didn't apply and since nobody has been using this before,
we will not compile it into OpenSSL any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-27 16:03:44 +01:00
Michael Tremer
c98304604b core120: Ship updated QoS script and gnupg 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-26 19:04:41 +01:00
Matthias Fischer
be7878d5c9 Fix typo in 'makeqosscripts.pl' 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-26 19:03:30 +01:00
Peter Müller
dd48a7aac8 curl: update to 7.59.0 
Update curl to 7.59.0 which fixes a number of bugs and
some minor security issues.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-26 19:03:29 +01:00
Peter Müller
689fed340a gnupg: update to 1.4.22 
Update GnuPG to 1.4.22, which fixes some security vulnerabilities,
such as the memory side channel attack CVE-2017-7526.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-26 19:03:24 +01:00
Arne Fitzenreiter
50bee0291d xr819-firmware: move rootfile to common 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-26 07:29:51 +02:00
Arne Fitzenreiter
66b5b4d12c kernel: update to 4.14.30 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-25 20:26:47 +02:00
Arne Fitzenreiter
37b86fa99b xr819-firmware: add firmware for xradio xr-819 wlan 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-25 13:27:03 +02:00
Arne Fitzenreiter
0a21d63f26 kernel: updated arm config and image build 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-25 11:41:20 +02:00
Arne Fitzenreiter
ea9d53c822 inittab: change tty1 to console 
this reduce the differences between tty and scon installations
and make it easier to switch between.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-24 13:26:32 +01:00
Arne Fitzenreiter
5bc33236ca swconfig: remove old swconfig utility 
this is not compatible with kernel 4.14
todo: replace swconfig calls in initskript

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-24 12:49:10 +01:00
Arne Fitzenreiter
4df5cc2f75 rpi-firmware: update to 2018-03-16 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-24 12:41:57 +01:00
Arne Fitzenreiter
151c8dfc0b checknewlog: don't report u-boot mkimage rootfile. 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-24 11:41:45 +01:00
Arne Fitzenreiter
2a0947f2e3 u-boot: update to 2018.03 
todo: check wandboard version. there are internal changes to merge
the different wandboard images to one and u-boot.imx is not build
anymore. Which file is needed to boot on wandboard?

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-24 11:14:24 +01:00
Arne Fitzenreiter
832770a868 kernel: update to 4.14.29 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-22 13:16:37 +01:00
Michael Tremer
dfdfafc7af core120: Ship updated vnstat 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-20 20:36:15 +00:00
Matthias Fischer
a05af852c5 vnstat: Update to 1.18 
For details see: https://humdi.net/vnstat/CHANGES

Changed "SaveInterval 5" to "SaveInterval 1" in '/etc/vnstat.conf', triggered by
https://forum.ipfire.org/viewtopic.php?f=22&t=20448 to avoid data loss with 1Gbit
connections and high traffic.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-20 20:35:30 +00:00
Michael Tremer
e7ea357cec Forgot to "git add" the new pakfire init script 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-20 11:08:58 +00:00
Michael Tremer
42deeb3b45 Revert "installer: Import the Pakfire key at install time" 
This reverts commit 7d995c9f56.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-19 19:45:24 +00:00
Michael Tremer
eb68e27dd2 pakfire: Import key when system boots up 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-19 19:44:50 +00:00
Michael Tremer
5876642d17 ffmpeg: Ship libraries correctly 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-19 18:07:49 +00:00
Matthias Fischer
27ef66c26c hdparm: Update to 9.55 
Changelogs against 9.53:

"hdparm-9.55:
	- added #include <sys/sysmacros.h> for major()/minor() macros

hdparm-9.54:
	- Partial revert of Jmicron changes, from Jan Friesse."

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-19 11:56:35 +00:00
Matthias Fischer
71e5a29c81 dmidecode 3.1: Added patch (Fix firmware version of TPM device) 
For details see:
http://git.savannah.gnu.org/cgit/dmidecode.git/commit/?id=174387405e98cd94c627832ae23abcb9be7e5623

"Both the operator (detected by clang, reported by Xorg) and the mask
for the minor firmware version field of TPM devices were wrong."

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-19 11:56:19 +00:00
Michael Tremer
35cdaa194a Fix python-m2crypto rootfile 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-19 11:52:44 +00:00
Michael Tremer
b2318b5e35 core120: Ship updated logrotate and restart unbound 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-18 13:51:38 +00:00
Matthias Fischer
9e9fdb39e6 unbound: Update to 1.7.0 
For details see:
http://www.unbound.net/download.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-18 13:49:40 +00:00
Matthias Fischer
399c2f9ccc logrotate: Update to 3.14.0 
For details see:
https://github.com/logrotate/logrotate/releases

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-18 13:44:27 +00:00
Matthias Fischer
4e316ae0a0 htop: Update to 2.1.0 
For details see:
https://hisham.hm/htop/index.php?page=downloads

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-18 13:44:25 +00:00
Matthias Fischer
9051f3c9d7 bind: Update to 9.11.3 
For details see:
http://ftp.isc.org/isc/bind9/9.11.3/RELEASE-NOTES-bind-9.11.3.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-18 13:44:19 +00:00
Matthias Fischer
1c1c1ac238 nano: Update to 2.9.4 
For details see:
https://www.nano-editor.org/news.php

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-18 13:44:14 +00:00
Matthias Fischer
8aeec0ba89 rsync: Update to 3.1.3 
For details see:
https://download.samba.org/pub/rsync/src/rsync-3.1.3-NEWS

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-18 13:44:12 +00:00
Erik Kapfer
e779b6bc7a PAM: Delete old lib and symlinks 
Core 119 update delivers an updated PAM whereby the libdir has been changed from /lib to /usr/lib
but the old libraries and symlinks are still presant. Since the system searches /lib before
/usr/lib , the old libs and symlinks are used which ends up in an `LIBPAM_EXTENSION_1.1' not found.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-18 13:44:04 +00:00
Arne Fitzenreiter
62777ff407 kernel: update to 4.14.27 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-16 20:49:22 +01:00
Arne Fitzenreiter
1682e5fc69 kernel: drop rpi config 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-16 20:48:56 +01:00
Erik Kapfer
cdc1a0e901 OpenVPN: Update to version 2.4.5 
This is primarily a maintenance release, with further improved OpenSSL 1.1 integration, several minor bug fixes and other minor improvements.
Further information can be found in here https://github.com/OpenVPN/openvpn/blob/release/2.4/Changes.rst#version-245 and
here https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24 .

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-16 14:38:02 +00:00
Michael Tremer
35b892b0dd pakfire: Drop old key import mechanism 
This was error-prone and allowed to potentially inject another
key.

Fixes: #11539
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-16 14:37:21 +00:00
Michael Tremer
7d995c9f56 installer: Import the Pakfire key at install time 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-16 14:33:42 +00:00
Michael Tremer
ceed3534e1 core120: Import new pakfire PGP key 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-16 14:28:17 +00:00