webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-05-08 22:16:09 +02:00
Code Issues Packages Projects Releases Wiki Activity
10,887 Commits 2 Branches 1 Tag
7f35774808eaf4cc18530d726532c88d91e4e9ae
Commit Graph

4265 Commits

Author SHA1 Message Date
Jonatan Schlag
2b6cce9b48 New package python3 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-01-25 13:45:42 +00:00
Matthias Fischer
1b0d73ffdb zlib: Update to 1.2.11 
Based on:
http://git.ipfire.org/?p=people/mlorenz/ipfire-2.x.git;a=commit;h=b693162e9fdc7c4cae2f148e8c7832c689ac6fd2
http://git.ipfire.org/?p=people/mlorenz/ipfire-2.x.git;a=commit;h=43a3b9986b7710eb685f00d6099965ebb220c012

Sadly, I couldn't avoid this configure-error while building 'clamav':

...
checking for zlib installation... using /usr
configure: error: The installed zlib version may contain a security bug.
Please upgrade to 1.2.2 or later: http://www.zlib.net.
You can omit this check with --disable-zlib-vcheck but DO NOT REPORT any stability issues then!
...

'clamav' seems to check 'zlib.h' for an appropriate zlib version ('clamav'-configure,
line 18679ff) greater v1.2.1 (line 18719ff), but I didn't find a solution for 1.2.11.

Therefore, '--disable-zlib-vcheck' was added to 'clamav'-configure options.
Any hints are welcome.

Testing zlib 1.2.11 with clamav 0.96.2 didn't find any seen problems so far.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-01-24 14:29:28 +00:00
Michael Tremer
d7e4445e8d core109: Ship updated perl GeoIP module 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-01-16 16:56:55 +00:00
Matthias Fischer
d38c8a6794 GeoIP: Update to 1.25 / changed database path 
Database path changed to '/usr/share/GeoIP'

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-01-16 16:54:59 +00:00
Michael Tremer
5056b4f104 Drop mldonkey files 
The packages has been dropped years ago. However, some
files remained in the source tree.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-01-16 16:53:35 +00:00
Michael Tremer
3bbe85a500 core109: Ship bind security update 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-01-16 16:50:42 +00:00
Michael Tremer
ed91d763e6 core109: Ship recently updated perl files 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-01-11 17:21:46 +00:00
Arne Fitzenreiter
00d2007b04 strongswan: fix rootfile (padlock) 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-01-09 18:09:43 +01:00
Jonatan Schlag
d2d13b36f4 Libvirt: Rootfile fixes 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-01-04 14:37:02 +00:00
Michael Tremer
9a657e9b3b core109: Ship updated backupiso script 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-01-04 11:22:02 +00:00
Jonatan Schlag
9a015b5bd5 Update libvirt to 2.5 
For Changelog see:
https://libvirt.org/news-2016.html

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-01-02 14:43:23 +00:00
Jonatan Schlag
a29910adf8 Update qemu to 2.8 
For Changelog see:

http://wiki.qemu.org/ChangeLog/2.8
http://wiki.qemu.org/ChangeLog/2.7

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-01-02 14:43:21 +00:00
Jonatan Schlag
18b6da69b6 core109: Ship network bridge changes 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-12-29 20:34:23 +00:00
Jonatan Schlag
3fbf7bed79 network: Rename MACVTAP script 
This script is creating common bridges now, too and therefore
needs a more generic name.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-12-29 20:34:22 +00:00
Michael Tremer
8fa523e028 libpng: Update to version 1.2.57 
These all fix a potential "NULL dereference" bug that has existed in libpng
since version 0.71 of June 26, 1995.  To be vulnerable, an application
has to load a text chunk into the png structure, then delete all text, then
add another text chunk to the same png structure, which seems to be
an unlikely sequence, but it has happened.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-12-29 16:04:29 +00:00
Arne Fitzenreiter
7ba5691854 start core109 updater 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-12-22 20:39:38 +01:00
Michael Tremer
751b481608 core108: Ship updated syslogdctrl 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-12-19 16:30:17 +00:00
Matthias Fischer
ef2bb43402 unbound: Update to 1.6.0 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>

For details, see:
http://www.unbound.net/download.html
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-12-16 10:29:18 +00:00
Michael Tremer
6426c4066f core108: Ship updated squid 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-12-06 14:20:16 +00:00
Michael Tremer
67214dc2eb core108: Ship updated NTP 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-12-06 14:17:05 +00:00
Michael Tremer
2aa15dee66 unbound: Fix DNS forwarder test 
The previous version aborted when the validation test
suceeded, but this is not always sufficient in case a
provider filters any DNSKEY, DS or RRSIG records.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-12-01 17:13:07 +00:00
Michael Tremer
adb11e90df Always enable asynchronous logging 
This patch always enables asynchronous logging which slows
down the system a lot on slow storage and some virtual environments.

It also removes the configuration options in the web
user interface, since this is not configurable any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-11-29 12:18:41 +00:00
Michael Tremer
b7f2fe819b core108: Ship updated ddns 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-11-28 21:51:13 +00:00
Michael Tremer
49750f72de Start Core Update 108 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-11-28 21:48:21 +00:00
Michael Tremer
e2b19d984c strongswan: Update to 5.5.1 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-11-28 21:38:29 +00:00
Arne Fitzenreiter
2d646e9838 ntp: init with hardcoded ip if dns not work 
DNSSec need the correct time to validate the zones so we need
a workaround to init the time without dns.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-11-04 19:31:07 +01:00
Michael Tremer
08fc1aa43b core107: Restart unbound to activate configuration changes 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-11-04 17:46:24 +00:00
Michael Tremer
3ddad158cd unbound: Allow recursion from everywhere 
Users use the IPFire DNS service from VPNs and other
routed networks.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-11-04 17:08:13 +00:00
Michael Tremer
a6dcc5bb77 unbound: Fix for DNS forwarding of .local zones 
These are traditionally used for Windows domains and should not
be used for that. However if they are used like this, DNSSEC
validation cannot be used.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-11-02 15:51:49 +00:00
Arne Fitzenreiter
38183e52dd start core107 updater 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-10-27 21:07:55 +02:00
Arne Fitzenreiter
5a2ebd32c0 Merge branch 'master' into next 2016-10-22 10:33:46 +02:00
Michael Tremer
96473f525d Revert "setup: Store passwords in SHA format" 
This reverts commit eef9b2529c.

It appears that htpasswd is not salting any passwords that are
stored with the SHA (-s) algorithm. MD5 passwords however are
salted.

That leads us to the conclusion that the "MD5 algorithm" in htpasswd
is more secure than the "SHA algorithm" although the hash function
itself should be stronger.

With a rainbow table, cracking "SHA" is easily done.

A rainbow table for "MD5" + salt would be way too large to be
efficiently stored.

Hence this commit is reverted to old behaviour to avoid the clear
failure of design in SHA.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
 2016-10-15 22:38:01 +01:00
Marcel Lorenz
894fea37d4 netpbm: update to 10.47.61 
To keep the files in the right place, the files are installed into the build directory
and only the files which are useful are copied to the usual places in /usr.

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Reviewed-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-10-14 00:05:55 +01:00
Marcel Lorenz
71a95ee330 libjpeg: update to 1.5.1 
The old libjpeg is renamed to libjpeg-compat
The compat makes the old libs maintainable

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Reviewed-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-10-14 00:05:55 +01:00
Marcel Lorenz
1cd30812d6 texinfo: update to 6.3 
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Reviewed-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-10-14 00:05:55 +01:00
Matthias Fischer
b06187f5b6 Midnight Commander: Update to 4.8.18 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-10-12 22:35:50 +01:00
Arne Fitzenreiter
693928d781 unbound: start prior network 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-10-12 23:01:51 +02:00
Arne Fitzenreiter
0fa8a4e98e Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2016-10-12 22:52:34 +02:00
Arne Fitzenreiter
11ecfb92a0 backup: add unbound config 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-10-12 22:51:35 +02:00
Daniel Weismüller
d653b433ec drop of the obsolete and deprecated vdr addon vdr_vnsiserver3 
Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-10-12 11:21:24 +01:00
Matthias Fischer
5eeea64237 guardian 2.0: fixes for rootfile 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-10-10 12:08:33 +01:00
Michael Tremer
3a52755b97 core106: Ship changed pakfire.cgi 
This was actually changed over a year ago, but was
never shipped in an update.

Commit 212fd689a3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-10-10 12:05:01 +01:00
Michael Tremer
b32a8aefa2 core106: Ship updated iptables.cgi file 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-10-10 12:04:24 +01:00
Arne Fitzenreiter
0807ce69ee setclock: prevent time bacjump by empty rtc batteries 
This is a work around to prevent not working dns
resolution if the time jumps before the DNSSec signing key.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-10-08 15:43:54 +02:00
Michael Tremer
71cf56fe53 core106: Restart DHCP server to import leases into DNS 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-10-06 10:41:54 +01:00
Michael Tremer
eef9b2529c setup: Store passwords in SHA format 
htpasswd doesn't protect passwords very well. MD5 was used
before and now any newly created passwords will use the
SHA format.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-10-04 22:41:48 +01:00
Arne Fitzenreiter
e3a90a5736 Revert "core106: Add DNS root key to exclude list" 
This reverts commit f58002a83f.
 2016-10-04 22:05:26 +02:00
Michael Tremer
52587edac4 core106: Ship updated libidn 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-10-03 11:45:36 +01:00
Matthias Fischer
64602fdf7d libidn: Update to 1.33 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-10-03 11:40:40 +01:00
Arne Fitzenreiter
642b831b72 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2016-10-02 16:36:57 +02:00