webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-15 05:22:59 +02:00
Code Issues Packages Projects Releases Wiki Activity
11,501 Commits 2 Branches 1 Tag
854b9b994cd5944eb99be008f5b8dbfed9e57a97
Commit Graph

3145 Commits

Author SHA1 Message Date
Arne Fitzenreiter
be13dd4818 Merge remote-tracking branch 'origin/master' into kernel-4.14 2018-02-10 09:54:55 +01:00
Michael Tremer
3925a0db6c syslogdctrl: Fix sed syntax issues 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-01-30 20:54:46 +00:00
Arne Fitzenreiter
97e4adb8fd Merge remote-tracking branch 'origin/next' into kernel-4.14 2018-01-28 11:24:12 +01:00
Matthias Fischer
9a57c6cdd3 clamav: Update to 0.99.3 
Excerpt from 'README':

"ClamAV 0.99.3 is a hotfix release to patch a set of vulnerabilities.

- fixes for the following CVE's: CVE-2017-6418, CVE-2017-6420,
  CVE-2017-12374, CVE-2017-12375, CVE-2017-12376, CVE-2017-12377,
  CVE-2017-12378, CVE-2017-12379, CVE-2017-12380.
- also included are 2 minor fixes to properly detect openssl install
  locations on FreeBSD 11, and prevent false warnings about zlib 1.2.1#
  version numbers."

For details see:
http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-01-27 16:26:45 +00:00
Arne Fitzenreiter
09cdb999da Merge remote-tracking branch 'arne_f/gcc-7-retpol' into kernel-4.14 2018-01-27 10:26:11 +01:00
Arne Fitzenreiter
7520b95a8b toolchain: update to gcc-7.3.0 and enable retpolines on x86_64 and i586 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-01-26 20:48:08 +01:00
Arne Fitzenreiter
33e3a1bd84 mdadm: fix build with gcc-7 2018-01-26 12:23:00 +01:00
Arne Fitzenreiter
38391953e0 sarg: update to 2.3.11 (needed for gcc-7) 2018-01-26 12:20:57 +01:00
Michael Tremer
3ed1c621cf Revert "Add Intel microcode updates from Jan 2018" 
This reverts commit d404b1dba2.

Intel has pulled these microcode updates because of
random system reboots and systems becoming unstable.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-01-24 16:08:22 +00:00
Erik Kapfer
adf3f4f4fe LZ4: New compression library. 
New lossless data compression algorithm.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-01-23 13:20:58 +00:00
Matthias Fischer
eb03c511fd squid 3.5.27: Patch for SA 2018:2 
As announced, here is the second patch for 'squid 3.5.27'.

For details about this and the previous patch (2018_1) regarding "ESI Response
processing" and "HTTP message processing", see:

http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-announce-ADVISORY-SQUID-2018-1-Denial-of-Service-issue-in-ESI-Response-processing-tp4684618.html

http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-announce-ADVISORY-SQUID-2018-2-Denial-of-Service-issue-in-HTTP-Message-processing-td4684617.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-01-23 13:08:19 +00:00
Matthias Fischer
101765c0fd squid 3.5.27: Patch for SA 2018:1 
http://www.squid-cache.org/Versions/v3/3.5/changesets/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-01-23 13:07:43 +00:00
Michael Tremer
1e7b718cd4 syslogdctrl: Fix compiler error and SEGV 
Fixes #11574

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-01-20 14:51:40 +00:00
Michael Tremer
07e63f6d2a Revert "misc-progs: syslogdctrl: Fix data type of protocol variable" 
This reverts commit b269686f88.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-01-20 14:45:10 +00:00
Jonatan Schlag
2da45fe0e1 dmidecode: update to version 3.1 
The removed patches are included in this version so there is no need
that we apply them.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-01-20 14:33:52 +00:00
Arne Fitzenreiter
2c21c4e522 Merge remote-tracking branch 'origin/next' into kernel-4.14 2018-01-15 19:08:23 +01:00
Jonatan Schlag
d404b1dba2 Add Intel microcode updates from Jan 2018 
Add intel microcode to the distribution and configure dracut in a way
that the microcode is loaded early in the boot process.

Fixes #11590

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Acknowledged-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-01-14 15:25:08 +00:00
Michael Tremer
ddcd60f7dc mdns-repeater: New package 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-01-09 14:14:37 +00:00
Michael Tremer
333915f5cf Drop owncloud 
We are going to remove PHP and owncloud requires it

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-01-05 13:28:59 +00:00
Michael Tremer
fbcb5b749a Drop mediatomb 
This didn't build and run in ages and has been removed from
the repositories quite a while ago.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-01-05 13:26:33 +00:00
Arne Fitzenreiter
d952f7557e Merge remote-tracking branch 'origin/next' into kernel-4.14 2017-12-18 18:22:06 +01:00
Michael Tremer
a412f472d9 Drop tunctl 
We don't use this at all

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-12-16 12:39:31 +00:00
Michael Tremer
d7dde64550 Drop phpSANE 
The upstream project is dead.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-12-16 12:38:01 +00:00
Michael Tremer
b2d4fa028f Drop cacti 
This package was discontinued upstream and seems to be
a bit more lively again. However, nobody of the team
wants to maintain cacti. Therefore this is being dropped
for now.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-12-16 12:35:12 +00:00
Michael Tremer
f3ddea42c6 Drop openmailadmin package 
This is EOL upstream for over ten years now and therefore
we cannot continue to support this either.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-12-16 12:33:05 +00:00
Michael Tremer
4d86ce7021 Drop nagios 
This is no longer maintained and icinga is available.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-12-16 12:31:47 +00:00
Arne Fitzenreiter
280a17c239 Merge remote-tracking branch 'origin/master' into kernel-4.14 2017-12-14 19:54:48 +01:00
Michael Tremer
f451d465fb Drop nagiosql 
This is no longer maintained any more and therefore being dropped

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-12-14 17:48:24 +00:00
Michael Tremer
ba03193ba7 fireinfo: Update to 2.1.12 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-12-14 17:44:20 +00:00
Michael Tremer
396ff12342 pakfire: Properly check if we have our key with our fingerprint 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-12-12 19:40:01 +00:00
Michael Tremer
73b2988ae4 pakfire: Drop importing CACert's PGP key 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-12-12 19:28:16 +00:00
Arne Fitzenreiter
2723ef8721 Merge remote-tracking branch 'origin/next' into kernel-4.14 2017-12-12 07:53:33 +01:00
Matthias Fischer
db9f57143f pakfire - 'functions.pl': fixed typo 
Just read this typo in a forum posting. Couldn't resist...

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-12-05 17:03:36 +00:00
Arne Fitzenreiter
796c5e73cb Merge remote-tracking branch 'origin/next' into kernel-4.14 2017-12-01 00:58:27 +01:00
Michael Tremer
b269686f88 misc-progs: syslogdctrl: Fix data type of protocol variable 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-30 14:36:28 +00:00
Arne Fitzenreiter
5b117ef49a Merge remote-tracking branch 'origin/next' into kernel-4.14 2017-11-29 17:37:51 +01:00
Peter Müller
cbd1f0e719 allow remote syslog via TCP in syslogdctrl.c 
Make syslogctrl.c use TCP as remote logging file if specified so.

Thanks to Michael for reviewing this.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 17:45:52 +00:00
Michael Tremer
56720befc7 Drop vsftpd which isn't actively maintained any more 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 17:30:08 +00:00
Michael Tremer
d38edcf8b4 pound: Drop package which isn't very actively maintained any more 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 17:29:55 +00:00
Michael Tremer
11e900e0b4 apache: Wait until apache has stopped when we want to stop it 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 14:14:16 +00:00
Michael Tremer
d409286074 apache: Ensure that not everyone can read the keys 
This would become a security risk if anyone gets
shell access as any user to copy out the HTTPS keys.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 14:11:49 +00:00
Arne Fitzenreiter
0476a6570d samba: import security updates from redhead 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-27 18:20:59 +01:00
Michael Tremer
6c4cc7ea1b Move toolchain from /tools to /tools_${arch} 
This will allow us to run multiple builds on the same
system at the same time (or at least have them on disk).

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-23 15:57:28 +00:00
Arne Fitzenreiter
2e1fe3c816 kernel: update to 4.14.1 
only x86_config has updated yet and grsecurity is removed.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-22 12:29:36 +01:00
Peter Müller
bb6481a820 validate GPG keys by fingerprint 
Validate GPG keys by fingerprint and not by 8-bit key-ID.

This makes exploiting bug #11539 harder, but not impossible
and does not affect existing installations.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-13 22:41:21 +00:00
Michael Tremer
9bb4055367 captive portal: Require authorization before redirecting to proxy 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-11 12:48:54 +00:00
Michael Tremer
682a6b2dc8 unbound: Silence error when upstream name servers cannot be read 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-07 16:02:28 +01:00
Arne Fitzenreiter
d23a284f02 Revert "kernel: revert an upstream patch that break 8TB Blockdevices on 32bit" 
This reverts commit c64e080f3a.
 2017-11-02 19:20:41 +01:00
Arne Fitzenreiter
c64e080f3a kernel: revert an upstream patch that break 8TB Blockdevices on 32bit 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-01 13:38:18 +01:00
Arne Fitzenreiter
d12ad00385 Merge remote-tracking branch 'origin/master' into kernel-4.9 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-10-22 21:57:30 +02:00