webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-09 18:45:54 +02:00
Code Issues Packages Projects Releases Wiki Activity
15,848 Commits 2 Branches 1 Tag
5867e4a511b85303039a69512ce95ccf8cb209bd
Commit Graph

15848 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Leo-Andres Hofmann
5867e4a511 Rename update accelerator passive mode 
Fixes #12577

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-03-04 10:49:57 +00:00
Peter Müller
591d4789b1 Tor: update to 0.4.5.6 
Please refer to
https://gitweb.torproject.org/tor.git/plain/ChangeLog?h=tor-0.4.5.6 for
the full changelog of this release.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-03-04 10:49:53 +00:00
Michael Tremer
ee7f87807b python3: I didn't realise that i586 had a separate rootfile 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-03-04 10:49:18 +00:00
Michael Tremer
fe51ad2a58 bind: Enable parallel build 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-03-03 16:51:52 +00:00
Michael Tremer
33d2cb29bf core155: Ship dhcp 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-03-03 16:50:15 +00:00
Matthias Fischer
3633d59636 dhcp: Update to 4.4.2 
For details see:
https://downloads.isc.org/isc/dhcp/4.4.2/dhcp-4.4.2-RELNOTES

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-03-03 16:49:10 +00:00
Michael Tremer
c18cf8e209 core155: Ship wget 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-03-03 16:49:00 +00:00
Matthias Fischer
dff84c4fa3 wget: Update to 1.21.1 
Sorry, no changelog found, only:
https://fossies.org/linux/wget/ChangeLog

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-03-03 16:48:45 +00:00
Matthias Fischer
02f31c4091 mc: Update to 4.8.26 
For details see:
http://midnight-commander.org/wiki/NEWS-4.8.26

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-03-03 16:48:30 +00:00
Michael Tremer
e2cc8e4e9b python3: Update to 3.8.7 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-03-03 16:45:57 +00:00
Michael Tremer
4c0e047bb5 core155: Ship libffi and all dependencies 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-03-03 13:40:33 +00:00
Michael Tremer
870c02a5e8 libffi: Update to 3.3 
This contains a version bump which requires us to ship Python 2 and
Python 3 again.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-03-03 13:32:28 +00:00
Matthias Fischer
a9285618b9 suricata: Update to 5.0.6 
For details see:
https://forum.suricata.io/t/suricata-6-0-2-and-5-0-6-released/1170

and

https://redmine.openinfosecfoundation.org/versions/164

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-03-03 13:27:03 +00:00
Michael Tremer
88cd5e5d0b core155: Ship libhtp 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-03-03 13:25:02 +00:00
Matthias Fischer
106a5206ec libhtp: Update to 0.5.37 
For details see:
https://github.com/OISF/libhtp/releases

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-03-03 13:24:38 +00:00
Michael Tremer
ffafaa71a6 firewall: Remove ALGs from UI 
This change drops the UIs that could enable ALGs for various protocols.

Those have been all forcibly disabled because "NAT Slipstream".

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-03-02 18:45:13 +00:00
Michael Tremer
4eaa5b9176 core155: Disable all connection tracking helpers 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-03-02 18:35:13 +00:00
Michael Tremer
69b3d63b82 e2fsprogs: Disable libraries provided by util-linux 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-03-02 17:40:34 +00:00
Michael Tremer
74d3d9cbe3 firewall: Disable all connection tracking helpers by default 
This will mitigate exploiting networks secured by IPFire using NAT
Slipstreaming:

https://lists.ipfire.org/pipermail/development/2021-February/009303.html

Suggested-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-03-02 10:04:46 +00:00
Michael Tremer
b6deb78d91 suricata: Ship after updating rust compiler 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-03-01 21:32:08 +00:00
Michael Tremer
f8798c09e9 core155_ Ship boost again 
This is necessary because boost has been removed by filesystem-cleanup.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-27 15:31:07 +00:00
Michael Tremer
3358a84fd5 filesystem-cleanup: Ignore boost 
This package does not behave according to standard distribution rules
and our script deletes all libraries

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-27 15:27:42 +00:00
Michael Tremer
e1f33fdcec rust: Update rootfiles for aarch64 and armv5tel 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-25 17:56:11 +00:00
Michael Tremer
d7005ce842 rust: Remove LLVM tools 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-25 13:55:16 +00:00
Matthias Fischer
a471762fb0 rust: Update to 1.50 
For details see:
https://github.com/rust-lang/rust/blob/master/RELEASES.md

Unfortunately I can only build with 32bit and 64bit, this is why I
couldn't upload the rootfiles for 'aarch64' and 'armv5tel'.

Tested here with 'suricata 5.0.5' - running without seen problems.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-24 17:27:36 +00:00
Michael Tremer
cade19b196 fireperf: Update to version 0.2.0 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-23 15:11:57 +00:00
Michael Tremer
08ab1b41dd Run "./make.sh lang" 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-22 19:01:07 +00:00
Michael Tremer
11ddd84da8 core155: Ship zoneconf 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-22 19:00:45 +00:00
Leo-Andres Hofmann
01139abbe1 zoneconf.cgi: Add default value for STP and require input 
Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-22 18:59:12 +00:00
Leo-Andres Hofmann
5262805261 zoneconf.cgi: Import network-functions.pl 
Remove custom functions and use network-functions.pl instead to detect
the available zones correctly. This also removes the requirement that
a device must be assigned for a zone to become visible/configurable.

Fixes: #12568

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-22 18:58:15 +00:00
Leo-Andres Hofmann
b4434345dc zoneconf.cgi: Add Javascript for new GUI elements 
Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-22 18:58:13 +00:00
Leo-Andres Hofmann
8de94a23e0 zoneconf.cgi: Add STP options to GUI 
Changes & new features:
- Add CSS for STP options, add texts to language files
- Read STP settings from ethernet configuration and display inputs
- Validate and save STP settings

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-22 18:58:12 +00:00
Leo-Andres Hofmann
5e6eba884b zoneconf.cgi: Modify CSS to allow additional rows 
Simplify borders, load more colors from header and add dividers

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-22 18:58:10 +00:00
Leo-Andres Hofmann
63a1c81a63 zoneconf.cgi: Change NIC display order, improve code 
Refactor duplicate perl code and add comments

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-22 18:58:08 +00:00
Michael Tremer
0b287952a6 haproxy: Use new PCRE2 library 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-22 13:58:28 +00:00
Michael Tremer
72c8478ee5 lang: Actually check Polish translation 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-22 13:41:31 +00:00
Roberto Peña
2f44c09d80 Add Spanish translations for Captive Portal 
- Ran ./make lang before adding translations and git status was clear
- Ran ./make lang after adding translations and git status included also
    doc/language_issues.pl although I did not change anything for Polish
    and it was clear before making any changes

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-22 11:30:15 +00:00
Matthias Fischer
70b43b54c9 libxcrypt 4.4.17: Fix for rootfile 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-22 11:28:11 +00:00
Michael Tremer
e7c7ccfa37 core155: Ship tar 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-22 11:27:40 +00:00
Matthias Fischer
86c8299cd4 tar: Update to 1.34 
For details see:
https://lists.gnu.org/archive/html/info-gnu/2021-02/msg00006.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-22 11:27:22 +00:00
Michael Tremer
79eec2773e core155: Ship libgcrypt 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-22 11:26:50 +00:00
Matthias Fischer
e9b3b1489c libgcrypt: Update to 1.9.2 
For details see:
https://lists.gnupg.org/pipermail/gnupg-announce/2021q1/000457.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-22 11:26:29 +00:00
Michael Tremer
7bd51283c8 core155: Ship nettle 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-22 11:26:19 +00:00
Matthias Fischer
dd42ea2c5e nettle: Update to 3.7.1 
For details see:

Annonce for 3.7.1:
http://lists.lysator.liu.se/pipermail/nettle-bugs/2021/009434.html

Announce for 3.6:
http://lists.lysator.liu.se/pipermail/nettle-bugs/2020/008967.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-22 11:25:50 +00:00
Stephan Feddersen
730e96c98b WIO - Patch PPPOE show right Icon 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-19 19:34:32 +00:00
Matthias Fischer
c33d30d8f9 krb5: Update to 1.19.1 
For details see:
https://web.mit.edu/kerberos/krb5-1.19/README-1.19.1.txt

"This is a bug fix release.

* Fix a linking issue with Samba.

* Better support multiple pkinit_identities values by checking whether
  certificates can be loaded for each value.

krb5-1.19.1 changes by ticket ID
--------------------------------

8984    Load certs when checking pkinit_identities values
8985    Restore krb5_set_default_tgs_ktypes()
8987    Synchronize command-line option documentation"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-19 19:32:52 +00:00
Michael Tremer
4a22b1f4f5 core155: Ship bind 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-19 19:32:43 +00:00
Matthias Fischer
482634a1d3 bind: Update to 9.11.28 
For details see:
https://downloads.isc.org/isc/bind9/9.11.28/RELEASE-NOTES-bind-9.11.28.html

"Notes for BIND 9.11.28
Security Fixes

When tkey-gssapi-keytab or tkey-gssapi-credential was configured,
a specially crafted GSS-TSIG query could cause a buffer overflow in the
ISC implementation of SPNEGO (a protocol enabling negotiation of the
security mechanism to use for GSSAPI authentication). This flaw could
be exploited to crash named. Theoretically, it also enabled remote code
execution, but achieving the latter is very difficult in real-world
conditions. (CVE-2020-8625)

This vulnerability was responsibly reported to us as ZDI-CAN-12302
by Trend Micro Zero Day Initiative. [GL #2354]"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-19 19:32:28 +00:00
Matthias Fischer
29e0faba1a monit: Update to 5.27.2 
For details see:
https://mmonit.com/monit/changes/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-17 16:29:29 +00:00
Michael Tremer
d338e55ce5 libjpeg-compat: Drop package 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2021-02-17 16:25:14 +00:00