webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-11 03:25:54 +02:00
Code Issues Packages Projects Releases Wiki Activity
9,429 Commits 2 Branches 1 Tag
49c64a099303ef7e970366f9fcb359aeeeb4c301
Commit Graph

2658 Commits

Author SHA1 Message Date
Michael Tremer
257ce821ee fireinfo: Import upstream fixes 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-09-09 15:32:09 +01:00
Michael Tremer
71940784ef fireinfo: Import upstream patch 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-09-01 00:12:31 +01:00
matthias.fischer@ipfire.org
f10a246946 squid 3.4.14: Import latest patch from upstream 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-31 23:26:38 +01:00
Alexander Marx
0f14446a89 Squid-accounting: New Version using dma mailservice 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-28 12:42:53 +01:00
Michael Tremer
8f4af2b25a Merge branch 'dma' into next 2015-08-25 13:57:40 +01:00
Michael Tremer
191976efbd pcre: Fix more buffer overflows 
This reverts commit cec620efdf.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-21 21:29:46 +01:00
Michael Tremer
982ac2f7a2 postfix: Uninstall sendmail alternative when uninstalling 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-21 09:54:20 +01:00
Alexander Marx
5267e19c3a make postfix ready for alternatives (chkconfig) 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-21 09:36:13 +01:00
Michael Tremer
ea0033d962 SSH: Replace old RSA keys with a new set 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-20 23:26:49 +01:00
Michael Tremer
04da8aa70a Do not create any DSA keys any more 
DSA is considered weak cryptography

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-20 23:22:08 +01:00
Michael Tremer
cec620efdf Revert "pcre: Fix more buffer overflows" 
This reverts commit b62425e3e3.
 2015-08-19 20:30:50 +01:00
Michael Tremer
b62425e3e3 pcre: Fix more buffer overflows 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-17 23:36:36 +01:00
Matthias Fischer
f831e573d4 dnsmasq: latest upstream patches 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-17 20:53:21 +01:00
Michael Tremer
9eb008dc92 glibc: Import security fixes from upstream 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-17 20:49:34 +01:00
Michael Tremer
e628f99413 Remove left-over squid patch file 2015-08-07 20:37:53 +01:00
Michael Tremer
d08045eaa6 dnsmasq: Update to 2.75 
Rather severe regression in handling DNSSEC with CNAMEs.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-01 20:23:34 +01:00
Larsen
60f8111d53 squid-accounting: Fix typos in src/squid-accounting/acct.en.pl 
Fix typos in src/squid-accounting/acct.en.pl

Signed-off-by: Lars Schuhmacher <larsen007@web.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-07-29 16:20:37 +01:00
Michael Tremer
a722eae9dd ddns: Update to version 008 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-07-16 12:02:08 +02:00
Michael Tremer
b720e70288 cups: Update to 1.7.5 and fix for CVE-2015-1158 and CVE-2015-1159 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-07-14 17:15:00 +02:00
Michael Tremer
5929298ea1 pcre: Fix CVE-2015-5073 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-07-14 17:14:13 +02:00
Arne Fitzenreiter
c9ab30c5d3 kernel: fix trim dataloss on some solid state discs 
disable trim on SuperSSpeed S238
update queued trim blacklist from kernel 4.2rc1
(add Samsung SSD 8xx and some Crucial and Micron SSD)
 2015-07-13 22:00:57 +02:00
Michael Tremer
031becc0e2 pakfire: Resolve dependencies for upgraded packages 
When updating more than one package, only new dependencies
for the first one are resolved. The rest was ignored.

This patch fixes that.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-07-09 21:01:10 +02:00
Michael Tremer
5555c4b887 pakfire: Fix installing dependencies when updating packages 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-07-09 20:53:33 +02:00
Michael Tremer
8c8383e55e Remove dnsmasq patches 
These are not applied any more because dnsmasq was updated
to the latest release version.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-07-09 13:10:46 +02:00
Michael Tremer
d6c40f585d squid: Apply fix for Squid Advisory SQUID-2015:2 
Squid configured with cache_peer and operating on explicit proxy
traffic does not correctly handle CONNECT method peer responses.

The bug is important because it allows remote clients to bypass
security in an explicit gateway proxy.

However, the bug is exploitable only if you have configured
cache_peer to receive CONNECT requests.

  http://www.squid-cache.org/Advisories/SQUID-2015_2.txt

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-07-09 13:10:38 +02:00
Arne Fitzenreiter
c50d4f54b6 kernel: fix missing rootdev on xen installation. 2015-07-09 13:10:23 +02:00
Michael Tremer
15d5073d5b Merge branch 'next' 2015-07-07 10:42:56 +02:00
Michael Tremer
3a9a74d839 python: Cleanup patches 
I accidentially added a wrong patch and left in a reference
to a removed one.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-18 21:22:51 +02:00
Michael Tremer
67bc7ab222 python: Build libffi before python and link against it 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-18 21:04:19 +02:00
Michael Tremer
1ae0db1a74 Python: Update to 2.7.9 
This reverts commit 3d9b9dd30e.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-18 21:04:18 +02:00
Michael Tremer
dff6612b02 Merge remote-tracking branch 'mfischer/dnsmasq' into next 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Conflicts:
	lfs/dnsmasq
 2015-06-18 13:12:33 +02:00
Michael Tremer
697b4f04bf dnsmasq: Import patches from upstream 
These fix minor bugs and contain smaller improvements.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-18 12:38:38 +02:00
Matthias Fischer
348334b6eb Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into dnsmasq 2015-06-16 21:40:16 +02:00
Michael Tremer
c3e1954331 strongswan: Update to 5.3.2 
This release fixes a security issue filed under CVE-2015-4171.

https://www.strongswan.org/blog/2015/06/08/strongswan-vulnerability-(cve-2015-4171).html

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-12 17:15:51 +02:00
Michael Tremer
e36af11945 paks: Remove unintentional tab 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-10 21:12:04 +02:00
Arne Fitzenreiter
b65251c87d postfix: add backup/restore at package update. 2015-06-10 18:45:29 +02:00
Arne Fitzenreiter
8bd45f85ef cyrus-imapd: fix typo at backup include extraction. 2015-06-10 18:38:41 +02:00
Arne Fitzenreiter
3d9b9dd30e Revert "Python: Update to 2.7.9" 
This reverts commit 765423cebe.

build fails.
 2015-06-10 14:49:40 +02:00
Michael Tremer
41ed4795fe strongswan: Update to 5.3.1 
Fixed a denial-of-service and potential remote code execution vulnerability
triggered by IKEv1/IKEv2 messages that contain payloads for the respective
other IKE version. Such payload are treated specially since 5.2.2 but because
they were still identified by their original payload type they were used as
such in some places causing invalid function pointer dereferences.
The vulnerability has been registered as CVE-2015-3991.

https://www.strongswan.org/blog/2015/06/01/strongswan-vulnerability-%28cve-2015-3991%29.html

The increased buffer size has been fixed in bug #943 upstream
  https://wiki.strongswan.org/issues/943
 2015-06-04 19:26:44 +02:00
Michael Tremer
e528fb2c73 rebuildhosts: Don't break when RED not online 
The hosts file was not regenerated when RED was not connected
which should not be happening.

This patch checks if the file exists. If not, the gateway
line will not be written to /etc/hosts.
 2015-06-03 18:00:13 +02:00
Michael Tremer
bd33c33227 rebuildhosts: Fix SEGV when not online 
Fixes #10867
 2015-06-03 17:55:55 +02:00
Lars Schuhmacher
b29a624081 pakfire: Add information about probable causes when pakfire cannot connect 
Add information about probable causes when pakfire cannot connect. This
includes port 11371 TCP and incorrect date/time settings.

Signed-off-by: Lars Schuhmacher <larsen007@web.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-02 23:47:46 +02:00
Arne Fitzenreiter
e97d4c9896 Merge branch 'master' into next 
Conflicts:
	lfs/netsnmpd
 2015-05-31 20:08:58 +02:00
Arne Fitzenreiter
cb3c00e01e cyrus-imapd: add backupinclude. 2015-05-31 16:02:39 +02:00
Arne Fitzenreiter
79fac0111b remove unused net-snmp pakfiles. 2015-05-31 11:37:10 +02:00
Arne Fitzenreiter
648f200187 netsnmpd: extract backup include at update. 2015-05-31 11:35:34 +02:00
Michael Tremer
1292598207 Merge remote-tracking branch 'mfischer/python' into next 2015-05-26 14:30:27 +02:00
Arne Fitzenreiter
d6a15c76a7 Merge remote-tracking branch 'origin/core90' 2015-05-21 11:16:35 +02:00
Michael Tremer
888c41dea8 dnsmasq: Import patches from upstream 2015-05-20 23:39:28 +02:00
Michael Tremer
efbd3a9abc dnsmasq: Import patches from upstream 2015-05-20 23:35:38 +02:00