webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-25 10:22:59 +02:00
Code Issues Packages Projects Releases Wiki Activity
11,335 Commits 2 Branches 1 Tag
75e7ca9fdbd276f848cf044d12dd57f9f5a38025
Commit Graph

4987 Commits

Author SHA1 Message Date
Arne Fitzenreiter
75e7ca9fdb Merge remote-tracking branch 'origin/next' into kernel-4.14 2017-12-01 17:51:46 +01:00
Michael Tremer
7b93b62bc8 strip: Explicitely call right binaries 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-12-01 16:31:25 +00:00
Michael Tremer
63bc6600f8 ffmpeg: Update to 3.4 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-12-01 15:42:47 +00:00
Michael Tremer
7dede5abef nasm: Update to 2.13.02 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-12-01 15:42:30 +00:00
Arne Fitzenreiter
0129f6dcd4 kernel: update to 4.14.3 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-30 22:00:11 +01:00
Arne Fitzenreiter
5b117ef49a Merge remote-tracking branch 'origin/next' into kernel-4.14 2017-11-29 17:37:51 +01:00
Michael Tremer
87ad0c591b strongswan: Update to 5.6.1 
Drop support for Padlock which is not in wide usage
any more and creates some rootfile trouble every time.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-29 12:39:04 +00:00
Michael Tremer
f19f5e2366 ssl: Drop package which isn't maintained any more 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 17:30:56 +00:00
Michael Tremer
56720befc7 Drop vsftpd which isn't actively maintained any more 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 17:30:08 +00:00
Michael Tremer
d38edcf8b4 pound: Drop package which isn't very actively maintained any more 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 17:29:55 +00:00
Arne Fitzenreiter
b5aca95b94 boost: disable parallel build 
this need more than 1GB ram on arm

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-28 07:01:33 +01:00
Arne Fitzenreiter
0476a6570d samba: import security updates from redhead 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-27 18:20:59 +01:00
Arne Fitzenreiter
23b57c7022 kernel: update to 4.14.2 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-25 23:05:00 +01:00
Michael Tremer
6c4cc7ea1b Move toolchain from /tools to /tools_${arch} 
This will allow us to run multiple builds on the same
system at the same time (or at least have them on disk).

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-23 15:57:28 +00:00
Michael Tremer
f1effdf758 make.sh: Drop option to generate a source ISO 
This is a very weird way to distribute sources in 2017.
Let's save the environment and stop using CDs.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-23 15:55:05 +00:00
Arne Fitzenreiter
2e1fe3c816 kernel: update to 4.14.1 
only x86_config has updated yet and grsecurity is removed.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-22 12:29:36 +01:00
Arne Fitzenreiter
7a192dedb9 xtables-addons: update to 2.13 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-22 11:23:47 +01:00
Peter Müller
2d735404b6 update ca-certificate CA bundle 
Update the CA certificate list to what Mozilla NSS ships currently.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-13 23:14:59 +00:00
Arne Fitzenreiter
bdfbc09f98 kernel: update to 4.9.61 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-09 16:01:03 +01:00
Peter Müller
eea4969dff Tor: Use relay mode as default setting 
Set the default operating mode to "relay" in the Tor WebUI
configuration page.

Running a Tor exit relay may cause legal trouble in some
countries and should not be the default setting to prevent
users from accidentally running an exit router.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-07 16:14:36 +00:00
Arne Fitzenreiter
2c6e0e8eb3 Merge remote-tracking branch 'origin/master' into kernel-4.9 2017-11-02 23:40:49 +01:00
Arne Fitzenreiter
ada37d8472 kernel: update to 4.9.60 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-02 22:26:44 +01:00
Arne Fitzenreiter
d23a284f02 Revert "kernel: revert an upstream patch that break 8TB Blockdevices on 32bit" 
This reverts commit c64e080f3a.
 2017-11-02 19:20:41 +01:00
Michael Tremer
770c2c5222 wget: Update file extension 
Upstream does not distribute XZ compressed tarballs any more

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-02 15:38:11 +00:00
Michael Tremer
4a510319ca openssl: Update to 1.0.2m 
* bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
* Malformed X.509 IPAddressFamily could cause OOB read (CVE-2017-3735)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-02 15:31:04 +00:00
Arne Fitzenreiter
c64e080f3a kernel: revert an upstream patch that break 8TB Blockdevices on 32bit 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-01 13:38:18 +01:00
Arne Fitzenreiter
35f59319d8 kernel: update to 4.9.59 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-10-30 18:02:38 +01:00
Michael Tremer
a016c0ce6a wget: Update to 1.19.2 
Fixes CVE-2017-13089

A stack-based buffer overflow when processing chunked, encoded HTTP
responses was found in wget. By tricking an unsuspecting user into
connecting to a malicious HTTP server, an attacker could exploit
this flaw to potentially execute arbitrary code.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-29 18:33:03 +00:00
Wolfgang Apolinarski
bf24eeec20 Update to Apache 2.4.29 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-28 13:35:43 +01:00
Matthias Fischer
49f7ee5d72 snort: Update to 2.9.11 
For details see:

Release notes:
https://snort.org/downloads/snort/release_notes_2.9.11.txt

Changelog:
https://snort.org/downloads/snort/changelog_2.9.11.txt

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-23 16:24:46 +01:00
Matthias Fischer
a809d7fa68 xz: Update to 5.2.3 
For details see:
https://git.tukaani.org/?p=xz.git;a=blob;f=NEWS;hb=HEAD

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-23 13:22:01 +01:00
Arne Fitzenreiter
d12ad00385 Merge remote-tracking branch 'origin/master' into kernel-4.9 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-10-22 21:57:30 +02:00
Arne Fitzenreiter
cb05d78cda kernel: update to 4.9.58 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-10-22 10:30:05 +02:00
Arne Fitzenreiter
4ad591338f kernel: update to 4.9.57 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-10-18 23:54:46 +02:00
Michael Tremer
348ba8e2c5 Revert "Use best XZ compression for smaller images and packages" 
This reverts commit 5fd54721c2.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-18 12:35:19 +01:00
Michael Tremer
9dcfcb0039 Revert "cdrom: Use -8 as compression parameter" 
This reverts commit 77ad762c43.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-18 12:35:04 +01:00
Michael Tremer
77ad762c43 cdrom: Use -8 as compression parameter 
This is a better compromise on memory usage and file size

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-17 21:16:41 +01:00
Michael Tremer
5fd54721c2 Use best XZ compression for smaller images and packages 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-17 15:23:26 +01:00
Michael Tremer
c061d66fca cdrom: Change format to XZ and compress in parallel 
This allows us to use all processor cores to compress
the image faster.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-17 14:58:52 +01:00
Michael Tremer
bc9544929c packages: Compress in parallel 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-17 14:58:28 +01:00
Matthias Fischer
5ed7bbd52f logrotate: Update to 3.13.0 
For details see:
https://github.com/logrotate/logrotate/releases

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-16 19:19:39 +01:00
Michael Tremer
b62c826fd8 PDF-API2: Add optional dependencies to read TrueType fonts 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-16 17:43:32 +01:00
Michael Tremer
e3c3625c34 Make perl-PDF-API2 part of the base system 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-16 17:31:51 +01:00
Michael Tremer
30b0e0ca1b PDF-API2: Update to 2.033 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-16 17:28:51 +01:00
Michael Tremer
d7d5774529 KRACK attack: Patch wpa_supplicant & hostapd 
A vulnerability was found in how a number of implementations can be
triggered to reconfigure WPA/WPA2/RSN keys (TK, GTK, or IGTK) by
replaying a specific frame that is used to manage the keys. Such
reinstallation of the encryption key can result in two different types
of vulnerabilities: disabling replay protection and significantly
reducing the security of encryption to the point of allowing frames to
be decrypted or some parts of the keys to be determined by an attacker
depending on which cipher is used.

This fixes: CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,
  CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086,
  CVE-2017-13087, CVE-2017-13088

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-16 15:49:35 +01:00
Arne Fitzenreiter
7cca0a3020 kernel: update to 4.9.56 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-10-14 07:19:13 +02:00
Michael Tremer
c484679bb3 Download sources via HTTPS 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-12 15:56:34 +01:00
Michael Tremer
fb76fc5144 installer: Fix detection if we have the correct ISO image mounted 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-12 15:50:31 +01:00
Arne Fitzenreiter
3515db6899 kernel: update to 4.9.55 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-10-12 13:45:31 +02:00
Michael Tremer
7ef43add02 ipfire-netboot: Update to v2.0 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-11 21:03:09 +01:00