webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-15 13:32:59 +02:00
Code Issues Packages Projects Releases Wiki Activity
9,415 Commits 2 Branches 1 Tag
883c5453d9aaeb3da2fbe879bc024c161d00ba21
Commit Graph

1568 Commits

Author SHA1 Message Date
Michael Tremer
883c5453d9 network-functions: Add check_subnet() 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-25 21:55:40 +01:00
Michael Tremer
7577ec1eb1 core94: Ship changes from dma branch 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-25 14:02:49 +01:00
Michael Tremer
a6b15086d9 ddns: Remove forced update 
DDNS will automatically take care of the updates by tracking
them in a database and re-execute the update after 30 days.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-22 01:40:26 +01:00
Michael Tremer
191976efbd pcre: Fix more buffer overflows 
This reverts commit cec620efdf.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-21 21:29:46 +01:00
Michael Tremer
ea0033d962 SSH: Replace old RSA keys with a new set 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-20 23:26:49 +01:00
Michael Tremer
04da8aa70a Do not create any DSA keys any more 
DSA is considered weak cryptography

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-20 23:22:08 +01:00
Michael Tremer
cec620efdf Revert "pcre: Fix more buffer overflows" 
This reverts commit b62425e3e3.
 2015-08-19 20:30:50 +01:00
Michael Tremer
a0c40b8242 core94: Ship rrdtool 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-17 23:37:53 +01:00
Michael Tremer
b62425e3e3 pcre: Fix more buffer overflows 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-17 23:36:36 +01:00
Michael Tremer
4b332b6dc9 core94: Ship dnsmasq 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-17 20:54:19 +01:00
Michael Tremer
9eb008dc92 glibc: Import security fixes from upstream 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-17 20:49:34 +01:00
Michael Tremer
fb71017b7b core94: Ship coreutils, file and hdparm 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-17 20:37:59 +01:00
Alexander Marx
31847530ef chkconfig: New package 
Only alternatives and update-alternatives is needed

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-13 17:59:19 +01:00
Arne Fitzenreiter
d2fc4cdb21 move core93 files to oldcore... 2015-08-13 15:17:24 +02:00
Arne Fitzenreiter
75ec398fe9 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2015-08-13 15:13:22 +02:00
Arne Fitzenreiter
ee732b26aa core93: add libevent2 to updater. 2015-08-13 14:43:33 +02:00
Michael Tremer
45b6ea63af openssh: Update to 7.0p1 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-12 14:01:55 +01:00
Michael Tremer
7383bf2b1b Start Core Update 94 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-12 13:59:00 +01:00
Arne Fitzenreiter
a8379a53d4 core93: prevent erase content of grub.conf if grub-mkconfig run into in error. 2015-08-11 15:31:26 +02:00
Arne Fitzenreiter
3ae89dd63c core93: add nettle to update. 2015-08-10 22:43:30 +02:00
Arne Fitzenreiter
3ba1f74eb3 core93: stop/start dnsmasq at update. 2015-08-10 20:09:15 +02:00
Arne Fitzenreiter
9b1643fc3f core93: remove libevent2 addon informations, is now in core. 2015-08-10 10:29:07 +02:00
Arne Fitzenreiter
f098b3e1be core93: add pakfire changes to update. 2015-08-10 10:16:07 +02:00
Michael Tremer
3dc6dceddd core93: Add updated squid 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-07 20:42:41 +01:00
Michael Tremer
3ab34d23f6 core93: Add updated daq 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-02 21:34:31 +01:00
Michael Tremer
81469c10d0 core93: Add libpcap update 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-01 20:46:55 +01:00
Michael Tremer
9e462c5971 backup: Add /etc/ipsec.user-post.conf 
This file can be manually edited by the user and should be included
in the backup.

Reported-by: Lars Schuhmacher <larsen007@web.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-01 20:40:55 +01:00
Michael Tremer
d08045eaa6 dnsmasq: Update to 2.75 
Rather severe regression in handling DNSSEC with CNAMEs.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-01 20:23:34 +01:00
Michael Tremer
a862fbc0ce core93: Add bind update 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-01 20:10:34 +01:00
Michael Tremer
6b6b876b8d core93: Add changed web UI files 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-07-29 16:31:16 +01:00
Michael Tremer
a722eae9dd ddns: Update to version 008 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-07-16 12:02:08 +02:00
Michael Tremer
5929298ea1 pcre: Fix CVE-2015-5073 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-07-14 17:14:13 +02:00
Michael Tremer
28aeeb5735 Move Core Update 92 to archive 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-07-14 16:58:47 +02:00
Michael Tremer
5b64ed2e36 Start Core Update 93 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-07-14 16:58:13 +02:00
Arne Fitzenreiter
f0aa99fb7b ca-certificates: New package 
This package adds a trusted lists of CAs.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-07-10 15:14:15 +02:00
Arne Fitzenreiter
f7c98d3df1 core92: stop/start squid at update. 2015-07-09 15:20:35 +02:00
Arne Fitzenreiter
12553c69cf openssl: security update to 1.0.2d 
cve 2015-1792
 2015-07-09 15:15:05 +02:00
Arne Fitzenreiter
87cd02c3d7 core92: update grub.cfg to show core92. 2015-07-09 15:03:37 +02:00
Michael Tremer
d6c40f585d squid: Apply fix for Squid Advisory SQUID-2015:2 
Squid configured with cache_peer and operating on explicit proxy
traffic does not correctly handle CONNECT method peer responses.

The bug is important because it allows remote clients to bypass
security in an explicit gateway proxy.

However, the bug is exploitable only if you have configured
cache_peer to receive CONNECT requests.

  http://www.squid-cache.org/Advisories/SQUID-2015_2.txt

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-07-09 13:10:38 +02:00
Michael Tremer
df0bd0e304 coreutils: Remove dead symlink /bin/[ 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-07-02 21:38:20 +02:00
Michael Tremer
a6c59f7b68 core92: Ship updated curl 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-27 13:03:42 +02:00
Michael Tremer
47437b0c07 core92: Ship python 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-23 23:11:36 +02:00
Michael Tremer
e53a08983c core92: Ship libnetfilter_cttimeout 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-23 23:11:16 +02:00
Michael Tremer
60e957d055 core92: Ship iptables again 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-23 23:10:08 +02:00
Michael Tremer
39a92aabc2 conntrack-tools: Update to 1.4.2 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-23 14:45:06 +02:00
Michael Tremer
fec7a5b72f libnetfilter_cthelper: New package 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-23 14:01:44 +02:00
Michael Tremer
d2f2ca6560 libnetfilter_queue: Update to version 1.0.2 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-23 13:52:08 +02:00
Michael Tremer
b572265663 libnetfilter_conntrack: Update to version 1.0.4 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-23 13:46:46 +02:00
Michael Tremer
4ebb37c8ad libnfnetlink: Update to 1.0.1 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-23 13:37:57 +02:00
Michael Tremer
8801fc5f95 core92: The Python update belongs into Core Update 92 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-18 21:17:14 +02:00