Michael Tremer
478d8bb5da
Merge remote-tracking branch 'teissler/bug_10535' into next
2014-09-27 23:00:05 +02:00
Michael Tremer
627fdda8e8
Fix wording. Remove "got".
...
Fixes #10632
2014-09-27 22:59:05 +02:00
Timo Eissler
1c4308c1f2
urlfilter.cgi: enhance file extension blocking
...
Fixes #10535
Add flv, mkv and mp4 as audio/video file exentions.
Add 7z as archive file extension.
2014-09-27 22:24:26 +02:00
Michael Tremer
b7981215da
core84: Add changed urlfilter.cgi
2014-09-27 20:43:49 +02:00
Michael Tremer
0e6e5d46c1
Merge remote-tracking branch 'teissler/Bug_10415' into next
2014-09-27 20:43:23 +02:00
Timo Eissler
6ae884e5f9
urlfilter.cgi: safe search enhancements
...
Fixes : #10415
Activate bing safe search.
Add nwshp to google url patterns.
2014-09-26 22:15:13 +02:00
Alexander Marx
d71bcfce59
squid-accounting: set right permissions of html directory for graphs and logo
2014-09-26 13:05:22 +02:00
Michael Tremer
21df0788ab
core84: Add changed files from #10620
2014-09-26 13:03:48 +02:00
Michael Tremer
7e09a94a81
Merge remote-tracking branch 'amarx/BUG10620' into next
2014-09-26 13:03:22 +02:00
Michael Tremer
60bce6ba6a
Merge remote-tracking branch 'amarx/BUG10615' into next
2014-09-26 13:02:28 +02:00
Michael Tremer
2acc3cd9e7
core84: Add changed files from fw-checksubnet branch
2014-09-26 13:00:38 +02:00
Michael Tremer
b14e0f7d0e
Merge remote-tracking branch 'amarx/fw-checksubnet' into next
2014-09-26 12:59:26 +02:00
Michael Tremer
82f8d118b7
core84: Add changed files from the firewall-dnat branch
2014-09-26 12:58:13 +02:00
Michael Tremer
df6649b0fe
Merge remote-tracking branch 'amarx/firewall-dnat' into next
...
Conflicts:
config/firewall/rules.pl
2014-09-26 12:55:55 +02:00
Michael Tremer
b30890aa06
bash: Import upstream patches for CVE-2014-6271 and CVE-2014-7169
2014-09-26 12:42:27 +02:00
Michael Tremer
b7784e38bd
core84: Add dnsmasq update
2014-09-26 12:25:48 +02:00
Michael Tremer
2a3506f349
Create core update 84
2014-09-26 12:25:30 +02:00
Michael Tremer
d6796d144a
Merge branch 'master' into next
2014-09-26 12:21:18 +02:00
Michael Tremer
7a35d102cb
dnsmasq: Update to 2.72
2014-09-25 21:16:01 +02:00
Arne Fitzenreiter
61466ab18d
core83: set version to core83.
2014-09-25 20:37:55 +02:00
Arne Fitzenreiter
cea3c8cf53
core83: reload init at update because glibc changes.
2014-09-25 20:36:06 +02:00
Michael Tremer
e86c70a99f
bash: Import fix for CVE-2014-7169
...
http://www.openwall.com/lists/oss-security/2014/09/25/10
2014-09-25 19:38:23 +02:00
Michael Tremer
a4c895e569
Merge branch 'master' into next
2014-09-24 20:39:43 +02:00
Michael Tremer
5aa856ce1c
core83: add changed files
2014-09-24 20:38:59 +02:00
Michael Tremer
5f17f9f341
Create core update 83
2014-09-24 20:31:55 +02:00
Michael Tremer
6cda6f906e
bash: Fix for CVE-2014-6271
...
A flaw was found in the way Bash evaluated certain specially crafted
environment variables. An attacker could use this flaw to override
or bypass environment restrictions to execute shell commands.
Certain services and applications allow remote unauthenticated
attackers to provide environment variables, allowing them to exploit
this issue.
2014-09-24 18:48:35 +02:00
Stefan Schantl
34ebab463b
urlfilter.cgi: Fix path to squidGuard binary when converting custom blacklists.
...
Fixes #10626 .
2014-09-20 11:49:39 +02:00
Alexander Marx
d8cc443938
fw-groups: fix language strings
2014-09-19 13:44:20 +02:00
Stefan Schantl
9cc46b56ad
logs.cgi/ids.dat: Change url for snort sid details.
...
Fixes #10578 .
2014-09-16 20:37:16 +02:00
Alexander Marx
ca4259a758
BUG10620: reload firewall.local in rules.pl, no longer in initscript
2014-09-11 17:13:07 +02:00
Alexander Marx
5751876534
BUG10615: fix wrong values in firewall.cgi
2014-09-11 15:10:48 +02:00
Alexander Marx
d2793ea805
BUG10615 part3: adapt rules.pl to use connectionlimit and ratelimit
2014-09-11 15:06:26 +02:00
Alexander Marx
d8deec0b4f
BUG10615 part2: Add ratelimit to firewallgui
2014-09-11 13:59:54 +02:00
Alexander Marx
79ad6f7e53
BUG10615 part1: Add connectionlimit to firewallgui
2014-09-11 10:59:25 +02:00
Arne Fitzenreiter
cce37f04af
openssl-compat: update to 0.9.8zb.
2014-09-09 19:20:54 +02:00
Arne Fitzenreiter
7b0afb50d3
Merge remote-tracking branch 'origin/master' into core82
2014-09-09 17:57:27 +02:00
Arne Fitzenreiter
51d8e33093
xen-image: add xz-aware xen version hint to README.
2014-09-09 17:54:27 +02:00
Michael Tremer
499e7fc33f
general-functions.pl: Fix perl coding error
2014-09-06 18:45:43 +02:00
Michael Tremer
7bfaaa0d35
general-functions.pl: Fix syntax error
2014-09-06 18:45:39 +02:00
Michael Tremer
9f64c06d94
general-functions.pl: Subroutine getnetworkip() accepted multiple arguments
2014-09-06 18:45:35 +02:00
Michael Tremer
c14203248c
general-functions.pl: Fix perl coding error
2014-09-06 18:44:50 +02:00
Arne Fitzenreiter
35880220b0
rsync: update to 3.1.1.
2014-09-05 21:56:01 +02:00
Alexander Marx
3928f52b39
fw-groups: cleanup checksubnets
...
Now the checksubnets function from general-functions.pl is used.
2014-09-05 08:09:54 +02:00
Michael Tremer
da05e07629
general-functions.pl: Fix syntax error
2014-09-04 11:13:41 +02:00
Michael Tremer
6a2a62cf25
general-functions.pl: Subroutine getnetworkip() accepted multiple arguments
2014-09-03 22:23:04 +02:00
Michael Tremer
bd76bcb8b4
glibc: Import several fixes from RHEL.
...
Fixes #10611 , CVE-2014-5119 among other bug fixes.
2014-09-03 21:49:01 +02:00
Alexander Marx
67bda607ca
Squid-accounting: revert setlocale because thevalues are not correctly with this setting
2014-09-01 19:39:35 +02:00
Michael Tremer
8fbcf730ae
proxy.cgi: Move ACL definitions up
...
ACl definitions could not be used in some other directives
unless they are defined earlier.
2014-08-28 17:01:44 +02:00
Michael Tremer
94b3d7d2f2
squid: Update to 3.4.7
...
Solves a DoS issue "Ignore Range headers with unidentifiable byte-range values"
filed under security advisory SQUID-2014:2 and CVE-2014-3609.
2014-08-28 16:09:31 +02:00
Michael Tremer
d79fbce44e
findutils: Cannot use exec here or the lockfile won't be removed
2014-08-24 15:22:04 +02:00