Commit Graph

5083 Commits

Author SHA1 Message Date
Michael Tremer
01604708c3 Merge remote-tracking branch 'stevee/next-suricata' into next 2019-03-14 13:19:35 +00:00
Michael Tremer
c578cbd35f core130: Ship updated firewall script
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-14 13:16:33 +00:00
Michael Tremer
b450e7e3e6 Start Core Update 130
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-14 13:15:03 +00:00
Arne Fitzenreiter
668119063c u-boot: try to boot without ramdisk if the system cannot load it
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-03-13 15:17:28 +01:00
Arne Fitzenreiter
eaf004a468 knot: update to 2.8.0 and build/install only kdig
This fix compile errors on small arm boards. (cc1 internal error)

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-03-13 15:06:23 +01:00
Arne Fitzenreiter
b57220aacd groff: update to 1.22.4
This fix compile problems on small arm boards. (cc1 internal error)

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-03-13 15:04:40 +01:00
Stefan Schantl
e8b1b397c1 suricata: Remove unneeded stuff during build
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2019-03-13 10:03:48 +01:00
Michael Tremer
e26e86dcaa core129: Ship updated dnsforward.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-11 15:58:04 +00:00
Michael Tremer
f1042a5d44 core129: Ship updated dhcp.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-11 09:54:19 +00:00
Michael Tremer
61424e9c67 core129: Ship updated less
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-10 18:23:22 +00:00
Peter Müller
e29c6d29c9 Postfix: update to 3.4.1
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-10 18:22:39 +00:00
Stefan Schantl
2bec60c347 suricata: Update to 4.1.3
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2019-03-10 17:34:03 +01:00
Alexander Koch
06fc6170a2 zabbix_agentd: New addon
New addon for monitoring IPFire by Zabbix Monitoring (https://www.zabbix.com/features).
See https://forum.ipfire.org/viewtopic.php?f=52&t=22039 and https://lists.ipfire.org/pipermail/development/2019-February/005324.html for further details.

Best regards,
Alex

Signed-off-by: Alexander Koch <ipfire@starkstromkonsument.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-08 09:55:18 +00:00
Erik Kapfer
57d1564b3e iptables: Commented legacy ip(6)tables entries from ROOTFILE
Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-08 09:49:07 +00:00
Michael Tremer
ea9cb48ae7 core129: Ship wpa_supplicant
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-04 09:26:58 +00:00
Michael Tremer
146c837e78 netsnmp: Fix rootfile to build on other architectures
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-04 09:26:58 +00:00
Erik Kapfer
758a1893a1 netsnmpd: Update to version 5.8
Overview of the changes can be found in here https://sourceforge.net/p/net-snmp/mailman/message/36386084/ .

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-04 09:26:58 +00:00
Erik Kapfer
3f2341da8d iptables: Update to 1.8.2
netfilter-layer7 has also been updated to v2.23 .

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-04 09:26:58 +00:00
Stefan Schantl
b051eb68b6 libcap-ng: New package
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2019-03-03 15:10:02 +01:00
Michael Tremer
a079f7aaee core129: Ship updated proxy.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-02 14:14:14 +00:00
Michael Tremer
3d01a8f1a6 core129: Ship updated ipset
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-02 14:12:18 +00:00
Erik Kapfer
46a073f1b5 ipset: Update to version 7.1
Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-02 14:11:19 +00:00
Michael Tremer
7c57cbe24b core129: Ship updated tar
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-02 14:11:02 +00:00
Michael Tremer
15c71234ca core129: Ship updated bind
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-02 14:10:21 +00:00
Matthias Fischer
ae45fb5193 bind: Update to 9.11.6
For details see:
http://ftp.isc.org/isc/bind9/9.11.6/RELEASE-NOTES-bind-9.11.6.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-02 14:10:03 +00:00
Michael Tremer
ae4ca7ef13 core129: Ship updated squid
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-02 14:09:00 +00:00
Michael Tremer
e1982c695c spectre-meltdown-checker: New package
This makes it easy to install the script and check the vulnerability status
of a system IPFire is running on.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-02 13:24:44 +00:00
Michael Tremer
771c9b78ee binutils: Ship strings & readelf
This is needed by the spectre meltdown checker script

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-02 13:01:42 +00:00
Michael Tremer
ebda3cb93b Update openssl rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-27 03:52:26 +00:00
Michael Tremer
f907865389 core129: Ship updated OpenSSL
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-26 17:25:11 +00:00
Michael Tremer
2f7e8b59a6 core129: Ship updated credits.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-25 02:31:23 +00:00
Michael Tremer
97499aa8a3 core129: Ship updated OpenVPN
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-25 02:29:29 +00:00
Michael Tremer
cc0104dce3 core129: Ship updated libgcrypt
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-25 00:58:04 +00:00
Peter Müller
b66c2faac2 libgcrypt: update to 1.8.4
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-25 00:57:18 +00:00
Michael Tremer
07b73b195c core129: Ship updated unbound
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-25 00:56:49 +00:00
Matthias Fischer
97a238f4bf unbound: Update to 1.9.0
For details see:
https://nlnetlabs.nl/svn/unbound/tags/release-1.9.0/doc/Changelog

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-25 00:56:05 +00:00
Michael Tremer
59db01c753 core129: Ship changes from ipsec branch
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-25 00:55:31 +00:00
Michael Tremer
50d1bbf0f5 Merge branch 'ipsec' into next 2019-02-25 00:48:08 +00:00
Michael Tremer
b5ef99df2c Start Core Update 129
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-25 00:47:28 +00:00
Michael Tremer
232c42e14d core128: Drop old openssl engines
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-24 04:06:52 +00:00
Arne Fitzenreiter
1e1273df1d core128: add openldap to update
openldap was linked against old openssl lib

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-24 20:50:16 +01:00
Arne Fitzenreiter
ed971af3a4 core128: add sse2 openssl libs
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-24 17:04:44 +01:00
Arne Fitzenreiter
42e48984ad core128: apply local sshd config
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-24 10:55:49 +01:00
Arne Fitzenreiter
186402fbe8 core128: stop apache before replacing files
apache will not restart without stopped before
the files was replaced.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-22 19:26:08 +01:00
Arne Fitzenreiter
4a25ada199 core128: add kernel to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-21 19:23:05 +01:00
Michael Tremer
9bc1760052 unbound: Drop certificates for local control connection
These are a cause of worry because they are sometimes generated with
an invalid timestamp and therefore render unbound being unusable.

There is no strong reason to use self-signed certificates for extra
security here.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-17 13:46:51 +00:00
Arne Fitzenreiter
56ec56a819 borgbackup: fix build on armv5tel
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-16 22:49:47 +01:00
Stefan Schantl
99b2e30636 ids-ruleset-sources: Fix rootfile
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2019-02-14 11:43:31 +01:00
Stefan Schantl
c980ac7f2a Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next-suricata 2019-02-13 19:46:45 +01:00
Michael Tremer
5368ccb0fc core128: Ship kdig
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-13 11:32:00 +00:00