webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-27 11:13:24 +02:00
Code Issues Packages Projects Releases Wiki Activity
9,855 Commits 2 Branches 1 Tag
8a148bbc5a9de80edb36fad91cd3f0e6ca3155a1
Commit Graph

9855 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Tremer
037cf8d20d core97: Ship updated openssh 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-01-17 18:51:47 +00:00
Matthias Fischer
43e5fe9ded openssh: Update to 7.1p2 
Fixes CVE-2016-0777

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-01-17 18:49:38 +00:00
Michael Tremer
64285d23eb Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2016-01-17 18:49:03 +00:00
Arne Fitzenreiter
9b4f0e6397 toolchain: bump version number 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-01-15 07:20:34 +01:00
Arne Fitzenreiter
3da3ac9856 gcc: remove gdb python files also in root build. 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-01-14 16:08:24 +01:00
Arne Fitzenreiter
8f2ac12a87 toolchain: move *.py remove to correct pass. 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-01-14 03:55:54 +01:00
Arne Fitzenreiter
6e96dd142a toolchain: enable bootstrap and remove *.py files from lib. 
only with bootstrap the gcc pass2 build works on arm.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-01-13 19:04:56 +01:00
Arne Fitzenreiter
905d1afd4e kernel: disable RANDSTRUCT 
RANDSRUCT is incompatible with ccache build.

fixes #10905
fixes #11012

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-01-13 07:24:34 +01:00
Michael Tremer
cfdeb28050 core97: Ship updated ntp 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-01-10 21:20:49 +00:00
Matthias Fischer
db017b4b6e ntp 4.2.8p5: removed obsolete patch file 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-01-10 21:18:22 +00:00
Matthias Fischer
c1de76704a ntp: Update to 4.2.8p5 
"...addresses 1 medium-severity security issue, 14 bugfixes,
and contains other improvements over 4.2.8p4."

For a complete list, see:
http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-01-10 21:18:20 +00:00
Michael Tremer
b75b6382ab grub: Disable hardening for grub-script-check 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-01-10 19:35:42 +00:00
Michael Tremer
1d9be34e2a ccache: Include hash of compiler specs in hashing 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-01-09 19:48:48 +00:00
Michael Eitelwein
43638be58b No code changes, fixed formatting by replacing spaces with tabs 2016-01-09 20:09:58 +01:00
Michael Tremer
cec5c724f5 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2016-01-09 14:56:33 +00:00
Michael Tremer
16260e2c69 timectrl: Stop ntp daemon when disabled 
Fixes #11000

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-01-07 23:47:39 +00:00
Michael Eitelwein
1b5b6c91da Fixed detection of firewall chain when bridge is used for ipv6 
Signed-off-by: Michael Eitelwein <michael@eitelwein.net>
 2016-01-07 19:40:24 +01:00
Michael Eitelwein
a249e865bd Firewall chain was not extracted correctly when ipv6 uses bridge 
Signed-off-by: Michael Eitelwein <michael@eitelwein.net>
 2016-01-07 19:26:46 +01:00
Arne Fitzenreiter
764a3f1ff2 toolchain: fix full toolchain crossbuild 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-01-07 17:41:43 +01:00
Arne Fitzenreiter
2eb67894ef binutils: update to 2.24 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-01-07 17:41:16 +01:00
Michael Eitelwein
f97c6774ef Fix regex to extract firewall chain for ipv6 in showrequestfrom*.dat 
If bridged ipv6 is used, $iface is taken from PHYSIN
In the log line the order of fields is "... IN=XY OUT=XY PHYSIN=XY ..."

Signed-off-by: Michael Eitelwein <michael@eitelwein.net>
 2016-01-07 15:24:13 +01:00
Michael Eitelwein
9877d28d9e Enable correct display of ipv6 entries in Firewall log pages of web UI. 
3 main changes:
 - Fill $iface and $out from PHYSIN and PHYSOUT when looking at bridged packets, othwerwise fill from IN and OUT
 - Recognize ipv4 and ipv6 address style for $srcaddr and $dstaddr
 - Match color coding of tables to pie charts (see seperate patch sent earlier)

I am using the bridged ipv6 setup as proposed in the wiki. I do not think this breaks anything when not using ipv6. So it would be nice to include this even if ipv6 is not officially supported yet. It is quite useful when using the ipv6 setup.

Signed-off-by: Michael Eitelwein <michael@eitelwein.net>
---
 2016-01-07 14:00:01 +01:00
Daniel Weismüller
820a4ab564 owncloud: updated to version 7.0.11 
Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-01-06 15:09:16 +00:00
Michael Tremer
f81e27e1c8 dnsdist: Don't build on ARM 
There seem to be some serious C++ issues in this so that
it won't build on ARM.

At the moment I do not have any resources to look further
into this, so I just disable building this package for
all ARM architectures.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-01-06 15:05:37 +00:00
Michael Tremer
b0a014b7f8 QoS: Improve saving enabled/disable state 
It was reported that the QoS did not stop when
the user clicked the "stop" button. This patch
fixes that.

Fixes #10664

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Acked-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
 2016-01-05 21:04:05 +00:00
Michael Tremer
9a09d94ee3 qosctrl: Cleanup code by replacing hardcoded paths 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-01-05 20:44:26 +00:00
Michael Tremer
84032d0845 core97: Ship updated openvpn package 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-01-04 22:46:13 +00:00
Erik Kapfer
964700d414 openvpn: Update to version 2.3.7, added --verify-x509-name directive. 
The tls-remote directive is deprecated and will be removed with
OpenVPN version 2.4 . Added instead --verify-x509-name HOST name
into ovpnmain.cgi.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-01-04 22:41:46 +00:00
Matthias Fischer
9977da131b bind: Update to 9.10.3-P2 
Changelog:

[security]
Update allowed OpenSSL versions as named is potentially
vulnerable to CVE-2015-3193.

[maint]
H.ROOT-SERVERS.NET is 198.97.190.53 and 2001:500:1::53. [RT #40556]

[security]
Insufficient testing when parsing a message allowed
records with an incorrect class to be be accepted,
triggering a REQUIRE failure when those records
were subsequently cached. (CVE-2015-8000) [RT #40987]

[security]
Address fetch context reference count handling error
on socket error. (CVE-2015-8461) [RT#40945]

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-12-28 15:37:41 +01:00
Michael Tremer
21ac63688a core97: Ship dnsmasq 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-12-28 15:37:02 +01:00
Matthias Fischer
c3b4c861f5 dnsmasq 2.75: latest patches from upstream 
Same procedure as... :-)

Best to all for xmas and 2016!

Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-12-28 15:35:34 +01:00
Michael Tremer
2135528774 core97: Ship pgrep with the updater 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-12-28 15:30:13 +01:00
Arne Fitzenreiter
4df3276bb4 ncurses: rootfile update. 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-12-26 17:37:53 +01:00
Arne Fitzenreiter
b94e0ffc68 dnsdist: rootfile update. 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-12-26 17:34:13 +01:00
Arne Fitzenreiter
b37e91c3b5 diffutils: rootfile update. 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-12-26 17:33:30 +01:00
Arne Fitzenreiter
eddda7f9bd gcc: include libstdc++ to rootfile 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-12-26 13:16:59 +01:00
Arne Fitzenreiter
f25314afd7 vdr_eepg: fix source download. 
the external server has changed the compression so the md5 has changed.
Always use the IPFire server as primary download source.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-12-25 12:45:05 +01:00
Arne Fitzenreiter
c26171b4b4 core96: remove rrd ramdisk entry from fstab 2015-12-23 11:32:53 +01:00
Arne Fitzenreiter
aa66842358 kernel: apply arm-multi grsecurity fixes only at arm-multi build 2015-12-23 10:14:26 +01:00
Michael Tremer
98b8cabf4d dnsdist: New package 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-12-22 22:27:58 +00:00
Michael Tremer
6138d53bdd lua: New package 
Simple scripting language. Supposed to be fast. Needed for dnsdist.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-12-22 22:27:39 +00:00
Michael Tremer
3b7808295e Disable packaging mediatomb 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-12-22 22:27:10 +00:00
Michael Tremer
ffea9709f8 linux: Fix build of kernel and headers package 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-12-22 22:25:18 +00:00
Michael Tremer
32dd84e817 core96: Regenerate language cache 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-12-22 15:10:31 +00:00
Michael Tremer
a7b0967db4 linux: Backport Hyper-V network driver 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-12-22 14:47:43 +00:00
Michael Tremer
f295ca0cf7 kernel: Add grsecurity compile fix 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-12-22 13:58:46 +00:00
Michael Tremer
21819b545a mediatomb: Disable build because it FTBFS 
The upstream project seems to be dead

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-12-22 12:44:30 +00:00
Michael Tremer
9f0f7c50cd gcc: Update armv5tel rootfile 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-12-22 12:44:27 +00:00
Michael Tremer
a9fd979619 gcc: Update x86_64 rootfile 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-12-22 12:44:21 +00:00
Michael Tremer
8675b78af9 gcc: Update to version 4.9.3 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-12-22 12:43:51 +00:00