webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-05-04 02:51:28 +02:00
Code Issues Packages Projects Releases Wiki Activity
17,332 Commits 2 Branches 1 Tag
496dfedfa2df5c30187f0b35ce017929fdc7413b
Commit Graph

2662 Commits

Author SHA1 Message Date
Arne Fitzenreiter
5e6f343b7d python: update to 2.7.15 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-06 15:51:53 +01:00
Matthias Fischer
6e1aa54da0 attr 2.4.47: Update for rootfile 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-03 14:57:00 +00:00
Erik Kapfer
e6f7f8e7ba database_attribute: Deliver/create index.txt.attr 
Fixes #11904

Since OpenSSL-1.1.0x the database attribute file for IPSec and OpenVPN wasn´t created while initial PKI generation.
OpenVPN delivered an error message but IPSec did crashed within the first attempt.
This problem persists also after X509 deletion and new generation.

index.txt.attr will now be delivered by the system but also deleted and recreated while setting up a new x509.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-03 14:52:53 +00:00
Stefan Schantl
7b6f8596ed Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next-suricata 2018-12-28 07:36:59 +01:00
Stefan Schantl
ed809cf07a Ship update-ids-ruleset script also on x86_64 and aarch64 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2018-12-28 07:36:19 +01:00
Matthias Fischer
a2bcb4135b squid: Update to 4.4 (stable) 
For details see:
http://www.squid-cache.org/Versions/v4/changesets/

In July 2018, 'squid 4' was "released for production use", see:
https://wiki.squid-cache.org/Squid-4

"The features have been set and large code changes are reserved for later versions."

I've tested almost all 4.x-versions and patch series before with good results.
Right now, 4.4 is running here with no seen problems together with
'squidclamav', 'squidguard' and 'privoxy'.

I too would declare this version stable.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-18 22:30:51 +00:00
Matthias Fischer
cab2314ac4 bind: Update to 9.11.5-P1 
For details see:
http://ftp.isc.org/isc/bind9/9.11.5-P1/RELEASE-NOTES-bind-9.11.5-P1.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-18 22:29:39 +00:00
Matthias Fischer
53ac9dd222 unbound: Update to 1.8.3 
For details see:
https://nlnetlabs.nl/svn/unbound/tags/release-1.8.3/doc/Changelog

"Fix dns64 allocation in wrong region for returned internal queries."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-13 13:14:35 +00:00
Stefan Schantl
a13ddf04d9 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next-suricata 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2018-12-12 09:27:59 +01:00
Matthias Fischer
707846392e unbound: Update to 1.8.2 
For details see:
https://nlnetlabs.nl/projects/unbound/download/

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-11 19:45:28 +00:00
Michael Tremer
f354601bbe initscripts: Import pakfire keys before importing AWS configuration 
This is useful when the user-data script is installing
packages. For that it will need valid keys for course.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-07 11:38:55 +00:00
Matthias Fischer
9a12784047 BUG 11929: Build 'bind'-binaries dynamically and install needed libraries (V2) 
Hi,

To save space linking the 'bind 9.11.5'-binaries was changed from statically to dynamically.

Changes to V2:
Removed unnecessary '*.so'-links.

Complete file sizes shrinked from ~4800K to ~1700K. Needs testing and confirmation!

I'm running this version right now under Core 124 - no seen problems so far.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-01 16:13:25 +00:00
Michael Tremer
77729e5be8 nfs: Install configuration in package 
This was lost in the last update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-11-28 19:02:53 +00:00
Michael Tremer
380350300f openssl: Rootfile update 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-11-25 13:45:11 +00:00
Michael Tremer
928b3cbf66 openssl: Update to 1.1.0j 
*) Timing vulnerability in DSA signature generation

     The OpenSSL DSA signature algorithm has been shown to be vulnerable to a
     timing side channel attack. An attacker could use variations in the signing
     algorithm to recover the private key.

     This issue was reported to OpenSSL on 16th October 2018 by Samuel Weiser.
     (CVE-2018-0734)
     [Paul Dale]

  *) Timing vulnerability in ECDSA signature generation

     The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a
     timing side channel attack. An attacker could use variations in the signing
     algorithm to recover the private key.

     This issue was reported to OpenSSL on 25th October 2018 by Samuel Weiser.
     (CVE-2018-0735)
     [Paul Dale]

  *) Add coordinate blinding for EC_POINT and implement projective
     coordinate blinding for generic prime curves as a countermeasure to
     chosen point SCA attacks.
     [Sohaib ul Hassan, Nicola Tuveri, Billy Bob Brumley]

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-11-21 11:21:42 +00:00
Michael Tremer
6170b25363 Rootfile update 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-11-19 18:58:48 +00:00
Arne Fitzenreiter
67640833a2 kernel: arm32 bit fix config and update rootfile 
Some drivers was disabled by oldconfig because i had
arm multiarch patchsed. This commit reenable it.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-11-18 20:24:43 +01:00
Arne Fitzenreiter
16c18024bb kernel: compress kernel modules with xz 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-11-18 14:30:14 +01:00
Michael Tremer
f3e6230125 libconfig: New package 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-11-11 17:23:20 +00:00
Arne Fitzenreiter
966b92a83b glibc: rootfile update armv5tel 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-11-03 12:09:47 +01:00
Michael Tremer
b3cc1932e4 Rootfile update 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-31 10:56:24 +00:00
Michael Tremer
ed1349aa76 Merge remote-tracking branch 'ms/frr' into next 2018-10-31 09:31:38 +00:00
Michael Tremer
92505ef003 Drop paxctl 
We do not have grsecurity and more and there is no point
in shipping this tool.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-29 11:27:34 +00:00
Michael Tremer
9040a476cc core125: Ship glibc for i586 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-29 10:50:35 +00:00
Michael Tremer
f4027e9b41 Remove removed files from rootfiles 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-29 10:47:10 +00:00
Michael Tremer
1a7db13406 json-c: New package 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-26 11:23:55 +00:00
Michael Tremer
9af7531136 glibc: Update to 2.28 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-24 11:16:38 +01:00
Michael Tremer
14fb55a555 keyutils: New package 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-22 19:51:19 +01:00
Michael Tremer
64ce3098b5 ntfs-3g: Update to 2017.3.23 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-22 14:58:29 +01:00
Michael Tremer
8d3fb4309b xfsprogs: Update to 4.18.0 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-22 14:56:34 +01:00
Michael Tremer
7504d54145 LVM2: Update to 2.02.181 
Update required to build against newer versions of glibc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-21 22:18:35 +01:00
Michael Tremer
de18b4de65 libaio: New package 
This library is required by newer version of LVM2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-21 22:17:54 +01:00
Michael Tremer
2db1a399c5 udev: Migrate to eudev 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-21 12:43:37 +01:00
Michael Tremer
35d007f277 kmod: Update to version 25 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-21 12:43:12 +01:00
Michael Tremer
f21313ccb5 e2fsprogs: Update to 1.44.4 
Fixes build with glibc >= 2.28

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-19 09:07:56 +01:00
Matthias Fischer
795d89e943 unbound: Update to 1.8.1 
For details see:
https://nlnetlabs.nl/projects/unbound/download/

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-18 14:50:58 +01:00
Matthias Fischer
5747b6ebfb gnutls: Update to 3.5.19 
Hi,

For changelogs since '3.5.15' see:

https://lists.gnupg.org/pipermail/gnutls-devel/2017-October/008523.html
https://lists.gnupg.org/pipermail/gnutls-devel/2018-January/008538.html
https://lists.gnupg.org/pipermail/gnutls-devel/2018-February/008540.html
https://lists.gnupg.org/pipermail/gnutls-devel/2018-July/008583.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-18 14:36:27 +01:00
Matthias Fischer
028eafe79f Apache: Update to 2.4.35 
For details see:

http://apache.mirror.digionline.de//httpd/CHANGES_2.4.35

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-18 14:30:39 +01:00
Stefan Schantl
5d3b16c6df suricata: Rootfile update 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2018-10-12 13:08:35 +02:00
Stefan Schantl
2d475a3c6c Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next-suricata 2018-09-26 14:49:34 +02:00
Stefan Schantl
3aadbbca38 stage2: Rootfile update for update-ids-ruleset script 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2018-09-26 14:38:46 +02:00
Matthias Fischer
b1bfe61711 iproute2: Update to 4.18.0 
Triggered by https://bugzilla.ipfire.org/show_bug.cgi?id=11866 ;-)

For details see:
https://lwn.net/Articles/762515/

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-09-20 14:53:35 +01:00
Arne Fitzenreiter
06131f41e4 kernel: arm32-bit: update rootfiles 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-09-17 07:44:55 +02:00
Arne Fitzenreiter
a834285d1b kernel: arm: enable chacha poly 
fixes: #11855
todo: add rootfiles for arm 32-bit

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-09-15 15:58:13 +02:00
Matthias Fischer
76e26c7f69 unbound: Update to 1.8.0 
For details see:

  https://nlnetlabs.nl/svn/unbound/tags/release-1.8.0/doc/Changelog

and

  https://nlnetlabs.nl/projects/unbound/download/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-09-13 15:03:59 +01:00
Arne Fitzenreiter
924b48c789 kernel: update to 4.14.69 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-09-12 21:04:07 +02:00
Stefan Schantl
21cab141ec suricata: Rule files are now located in /var/lib/suricata 
Place the rulefiles from now in "/var/lib/suricata".

Fixes #11834

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2018-08-29 12:37:44 +02:00
Stefan Schantl
d2e6bf6e5f suricata: Do not ship an example configuration file 
Stop shipping a full example configuration file for suricata.

Fixes #11836.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2018-08-29 12:27:12 +02:00
Stefan Schantl
4892f82ca1 suricata: Fix rootfile 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2018-08-25 15:22:53 +02:00
Stefan Schantl
baeae34658 lfs/suricata: Move classification and reference config to /etc/suricata/rules 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2018-08-24 15:15:09 +02:00