Commit Graph

567 Commits

Author SHA1 Message Date
Michael Tremer
6cda6f906e bash: Fix for CVE-2014-6271
A flaw was found in the way Bash evaluated certain specially crafted
environment variables. An attacker could use this flaw to override
or bypass environment restrictions to execute shell commands.
Certain services and applications allow remote unauthenticated
attackers to provide environment variables, allowing them to exploit
this issue.
2014-09-24 18:48:35 +02:00
Michael Tremer
bd76bcb8b4 glibc: Import several fixes from RHEL.
Fixes #10611, CVE-2014-5119 among other bug fixes.
2014-09-03 21:49:01 +02:00
Michael Tremer
935c2f233b Merge remote-tracking branch 'ms/ddns.cgi-fixes' into next
Conflicts:
	html/cgi-bin/ddns.cgi
2014-08-07 21:06:13 +02:00
Arne Fitzenreiter
a0a3d81c12 Merge branch 'master' of git.ipfire.org:/pub/git/ipfire-2.x 2014-08-06 09:36:31 +02:00
Arne Fitzenreiter
b283b2cf8f lzo: Downgrade to 2.0.6 (CVE-2014-4607 patched).
openvpn fails at lzo_init with lzo-2.07 and 2.08 on armv5tel.
2014-08-06 09:35:46 +02:00
Michael Tremer
5354d0f5c9 ddns: Update to 004. 2014-08-05 19:49:28 +02:00
Arne Fitzenreiter
f0728c790f Merge remote-tracking branch 'origin/master' into next
Conflicts:
	config/cfgroot/general-functions.pl
2014-07-29 22:01:19 +02:00
Michael Tremer
2deb75c0f3 Merge remote-tracking branch 'ms/squid-ad' into next 2014-07-27 12:01:50 +02:00
Michael Tremer
fffc646e74 logs: Add dynamic DNS logging section. 2014-07-24 13:35:22 +02:00
Michael Tremer
b66edc18d7 Update nettle to version 3.0.
Requires some fixes in dnsmasq which can be dropped
with the next release.
2014-07-05 13:43:25 +02:00
Michael Tremer
3da4cc02e3 dnsmasq: Update ISC dhcpd reader patch. 2014-07-05 13:43:25 +02:00
Michael Tremer
45e65f1dd9 dnsmasq: Update to 2.70.
Adds support for DNSSEC validation, increases the cache size
and adds a patch to read ISC dhcpd lease file (for IPv4).
2014-07-05 13:42:41 +02:00
Michael Tremer
f2a7c1f578 pppd: pppd 2.4.6 has changed behaviour and waited for hours. 2014-06-23 22:50:01 +02:00
Arne Fitzenreiter
da6424d983 kernel: add mcs7830 link detection patch.
fixes #10551
2014-06-13 21:02:45 +02:00
Michael Tremer
cfba7c56db krb5: New package. 2014-06-10 20:13:23 +02:00
Michael Tremer
e3b3099787 net-tools: Commit missing patch file. 2014-06-05 00:50:08 +02:00
Michael Tremer
f4e9a25116 hostname: New package. 2014-06-03 20:57:30 +02:00
Arne Fitzenreiter
a545f88e40 squidclamav: fix warning page delivery.
The page reside on the ipfire not on the clients so only rewrite-url can used.
2014-06-03 13:20:04 +02:00
Michael Tremer
ccf1cb25b9 squidclamav: add helper patch. 2014-06-02 20:28:45 +02:00
Michael Tremer
7cc060415e squidGuard: Update for new squid helper protocol. 2014-06-02 00:54:19 +02:00
Michael Tremer
bfb8d9b7f9 Drop icecc package. 2014-05-31 12:31:13 +02:00
Michael Tremer
5b6fc2a45d Drop inetutils package.
This package just provides a very very outdated version
of ping which does not support many features as required
by cacti.

ping is now solely built in the iputils package and
a symlink for compatibility is created.
2014-05-29 19:42:50 +02:00
Michael Tremer
59dbe8d424 cacti: Update to 0.8.8b. 2014-05-29 19:35:38 +02:00
Arne Fitzenreiter
d2dcd8b2e2 Merge remote-tracking branch 'origin/master' into next 2014-05-21 22:47:13 +02:00
Arne Fitzenreiter
e898660a30 kernel: add pie packet sheduler. 2014-05-19 10:04:06 +02:00
Michael Tremer
172c1f72c4 ppp: Import some more patches from Fedora. 2014-05-14 20:20:36 +02:00
Michael Tremer
0a511b7693 ppp: Try longer to connect via PPPoE (60 seconds). 2014-05-14 20:02:55 +02:00
Arne Fitzenreiter
74fd06be0e kernel: add Marvel uAP module (dreamplug). 2014-05-08 16:13:25 +02:00
Michael Tremer
2cdb0759e7 fireinfo: Update to 2.1.10.
Excludes some more invalid strings.
2014-05-01 20:40:02 +02:00
Arne Fitzenreiter
89f0807ff9 kernel: rt2800usb: add dlink dwa-137 usbid. 2014-04-25 10:34:07 +02:00
Michael Tremer
c3a86f4d20 Update layer7 patch.
This should fix some issues with concurrent access to skbuf.
2014-04-18 23:11:39 +02:00
Michael Tremer
af8c09ff38 kernel: Update layer7 patch.
Brings back the /proc interface and is supposed to
fix a memory leak.
2014-03-30 23:26:29 +02:00
Arne Fitzenreiter
5c8167f576 iwlwifi: use noibss flags only on radar detection channels. 2014-03-25 12:59:37 +01:00
Arne Fitzenreiter
607c9d3ae0 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2014-03-18 00:22:24 +01:00
Arne Fitzenreiter
e583643a25 kernel: add pcengines apu led support. 2014-03-18 00:21:38 +01:00
Michael Tremer
09d7ae9471 linux: Remove disabling of loading the pcspkr module. 2014-03-11 21:47:16 +01:00
Michael Tremer
d7050fc04a ipsec: Allow to create firewall rules for IPsec input as well. 2014-03-08 20:55:32 +01:00
Michael Tremer
f2b22ab7b5 glibc: Backport hotfixes from RHEL6. 2014-02-15 19:40:08 +01:00
Michael Tremer
e39096cf66 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2014-02-15 18:42:37 +01:00
Michael Tremer
7e8b0ca029 fireinfo: Exclude some more patterns. 2014-02-15 18:40:55 +01:00
Arne Fitzenreiter
841193ead5 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2014-02-15 17:48:35 +01:00
Arne Fitzenreiter
1e67b3c3bb kernel: cs5535audio spam the syslog with access errors.
On geos boards the cs5535 is present but the ac97 is not there.
2014-02-15 16:29:31 +01:00
Arne Fitzenreiter
3bf58b324c Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2014-02-14 23:41:45 +01:00
Arne Fitzenreiter
d006af40db kernel: add some omap/pandaboard patches. 2014-02-14 23:41:13 +01:00
Arne Fitzenreiter
2fff11756f kernel: fix imq patch for 3.10.30.
kernel: fix imq patch for 3.10.30 and remove old patches.
2014-02-14 22:24:05 +01:00
Michael Tremer
7c475cd6e1 fireinfo: Remove old patch. 2014-02-14 17:38:16 +01:00
Michael Tremer
62667a709f linux: Fix grsecurity-related crash on Intel Haswell CPUs. 2014-02-11 16:54:48 +01:00
Michael Tremer
8ec868ab22 linux: Fix IMQ crash.
Fixes #10474.
2014-02-10 23:00:19 +01:00
Michael Tremer
f17f51e873 fireinfo: Fix finding the root device. 2014-02-07 14:59:50 +01:00
Michael Tremer
e360e50ac4 strongswan: Update to 5.1.2dr3. 2014-02-07 14:49:03 +01:00