webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-13 20:42:58 +02:00
Code Issues Packages Projects Releases Wiki Activity
10,642 Commits 2 Branches 1 Tag
91c35e4838b4e059c67240bb54cd32eefd105da3
Commit Graph

4656 Commits

Author SHA1 Message Date
Matthias Fischer
91c35e4838 bind: Update to 9.11.0-P5 
For details see:
https://ftp.isc.org/isc/bind9/9.11.0-P5/RELEASE-NOTES-bind-9.11.0-P5.html

"BIND 9.11.0-P5 addresses the security issues described in CVE-2017-3136,
CVE-2017-3137, and CVE-2017-3138, and updates the built-in trusted keys for the root zone.

Security Fixes

rndc "" could trigger an assertion failure in named. This flaw is disclosed in
(CVE-2017-3138). [RT #44924]

Some chaining (i.e., type CNAME or DNAME) responses to upstream queries could
trigger assertion failures. This flaw is disclosed in CVE-2017-3137. [RT #44734]

dns64 with break-dnssec yes; can result in an assertion failure. This flaw is
disclosed in CVE-2017-3136. [RT #44653]

If a server is configured with a response policy zone (RPZ) that rewrites an
answer with local data, and is also configured for DNS64 address mapping, a NULL
pointer can be read triggering a server crash. This flaw is disclosed in CVE-2017-3135.
[RT #44434]

A coding error in the nxdomain-redirect feature could lead to an assertion failure if
the redirection namespace was served from a local authoritative data source such as a
local zone or a DLZ instead of via recursive lookup. This flaw is disclosed in
CVE-2016-9778. [RT #43837]

named could mishandle authority sections with missing RRSIGs, triggering an assertion
failure. This flaw is disclosed in CVE-2016-9444. [RT #43632]

named mishandled some responses where covering RRSIG records were returned without the
requested data, resulting in an assertion failure. This flaw is disclosed in
CVE-2016-9147. [RT #43548]

named incorrectly tried to cache TKEY records which could trigger an assertion failure
when there was a class mismatch. This flaw is disclosed in CVE-2016-9131. [RT #43522]

It was possible to trigger assertions when processing responses containing answers of
type DNAME. This flaw is disclosed in CVE-2016-8864. [RT #43465]

Bug Fixes

A synthesized CNAME record appearing in a response before the associated DNAME could be
cached, when it should not have been. This was a regression introduced while addressing
CVE-2016-8864. [RT #44318]

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-16 17:23:57 +01:00
Matthias Fischer
4d8d78169f cups-filters: Fix for lfs-file (dropped avahi package) 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-13 12:00:37 +01:00
Michael Tremer
076ad71576 avahi: Drop package 
The daemon locks up when starting up in avahi_log_info() and
probably the other logging functions, too.

Since avahi is not really used a lot in the distribution,
has been in testing for four years and has virtually no users
I am going to drop it instead of wasting time on fixing this.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-12 17:49:45 +01:00
Michael Tremer
f0c71e72b0 ltrace: New package 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-11 14:23:54 +01:00
Michael Tremer
015640d671 elfutils: New package 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-11 14:23:54 +01:00
Michael Tremer
778979f630 dbus: Update to 1.11.12 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-11 14:23:54 +01:00
Michael Tremer
e4d7dc1ea4 dhcp: Fix extracting bundled BIND package 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-06 12:52:10 +01:00
Marcel Lorenz
4a3940a15f gcc: update to 4.9.4 
This is only a bugfix release
https://gcc.gnu.org/gcc-4.9/changes.html

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-06 10:18:41 +01:00
Marcel Lorenz
a8c2aae946 mpfr: update to 3.1.5 
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-06 10:16:37 +01:00
Marcel Lorenz
fcab4e5f18 gmp: update to 6.1.2 
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-06 10:15:29 +01:00
Marcel Lorenz
a309f3b5c3 pcre: update to 8.40 
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-06 10:14:13 +01:00
Marcel Lorenz
85ca3a529b rrdtool: update to 1.6.0 
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-06 10:13:29 +01:00
Marcel Lorenz
e9dae64ea1 pkg-config: update to 0.29.1 
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-06 10:12:13 +01:00
Marcel Lorenz
f4574da97a nmap: update to 7.40 
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-06 10:11:23 +01:00
Marcel Lorenz
f155baa6f0 m4: update to 1.4.18 
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-06 10:10:25 +01:00
Marcel Lorenz
e0e3f3a3e7 acpid: update to 2.0.28 
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-06 10:06:46 +01:00
Marcel Lorenz
6c96150b45 unzip: update to 60 
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-06 10:06:08 +01:00
Marcel Lorenz
3b7a290523 gzip: update to 1.8 
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-06 10:02:18 +01:00
Marcel Lorenz
361cc1bd0c file: update to 5.30 
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-06 09:57:50 +01:00
Daniel Weismüller
2dbfc4020d netsnmpd: added lmsensors and some other mibs 
Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-05 12:23:32 +01:00
Michael Tremer
1ef80c4352 strongswan: Update to version 5.5.2 
Introduces support for Curve25519 for IKE as defined by RFC8031.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-05 12:08:39 +01:00
Matthias Fischer
3fa1cb5f35 logwatch: Update to 7.4.3 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-05 10:08:24 +01:00
Arne Fitzenreiter
09f518fbb1 mpd: mpd needs opus libs 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-04-04 19:14:31 +02:00
Matthias Fischer
bffe0abd59 squid: Update to 3.5.25 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-03 20:28:12 +01:00
Matthias Fischer
24a80f0c22 squid 3.5.24: latest patches (14149-14153) 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-03 11:11:20 +01:00
Matthias Fischer
a5c0ef3679 squid 3.5.24: latest patches (14144-14148) 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-03 11:11:13 +01:00
Matthias Fischer
39e7154976 squid 3.5.24: latest patch (14143) 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-03 11:11:12 +01:00
Matthias Fischer
776363274f ntp: Update to 4.2.8p10 
"It addresses 6 medum- and 5 low-severity security issues, 4 informational security topics,
15 bugfixes, and contains other improvements over 4.2.8p9."

For a complete list, see:
http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-03-28 17:20:31 +01:00
Matthias Fischer
21094f574e mpd 0.20.6: fixes for lfs-file 
Package refused to build without initscript.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-03-28 17:19:57 +01:00
Matthias Fischer
baa8a93fd1 motion: Update to 4.0.1 
'ffmpeg' seems to need this update.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-03-28 17:19:23 +01:00
Marcel Lorenz
e0174da88b mpd: update to 0.20.6 
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-03-25 11:09:50 +01:00
Marcel Lorenz
8714488c73 ffmpeg and ffmpeg-libs: update to 3.2.4 
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-03-22 17:02:46 +00:00
Michael Tremer
d38ed86f8b strongswan: Disable IPv6 by default 
IPFire 2 does not have IPv6 connectivity with exception of a
few systems for testing where IPsec connections become a little
bit unstable when trying to connect over IPv6.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-03-15 12:56:05 +00:00
Marcel Lorenz
373c0c7bed apcupsd: update to 3.14.14 
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-03-12 16:05:33 +00:00
Jonatan Schlag
3baa3661a1 xinetd: fix the call of INSTALL_INITSCRIPT 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-03-10 16:13:48 +00:00
Matthias Fischer
a3fd3c237d Midnight Commander: Update to 4.8.19 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-03-09 11:11:33 +00:00
Michael Tremer
acf0e4d2da Merge branch 'initscripts-cleanup' of git://git.ipfire.org/people/jschlag/ipfire-2.x into next 2017-03-09 11:04:52 +00:00
Jonatan Schlag
713151aaa8 Strongswan: Remove unnecessary commands concern initscripts 
It is not necessary to copy the init scripts and remove the symlinks for
runnlevel interaction.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
 2017-03-06 17:25:10 +01:00
Matthias Fischer
f07f9c8ed3 nettle: Update to 3.3 
Added '--disable-documentation' because we don't need this.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-03-05 18:13:54 +00:00
Matthias Fischer
198b6f65d4 conntrack-tools: Update to 1.4.4 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-03-05 11:49:11 +00:00
Jonatan Schlag
edda4a223b cyrus-sasl: move initscript to src/initscripts/packages and use new macro 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
 2017-03-03 16:45:44 +01:00
Jonatan Schlag
bd2a7a8fd3 miniupnpd: move initscript to src/initscripts/packages and use new macro 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
 2017-03-03 16:37:41 +01:00
Jonatan Schlag
9016d19e0e minidlna: move initscript to src/initscripts/packages and use new macro 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
 2017-03-03 16:36:36 +01:00
Jonatan Schlag
7e8a2556e5 miau: move initscript to src/initscripts/packages and use new macro 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
 2017-03-03 16:35:36 +01:00
Jonatan Schlag
a5754e5da1 cyrus-imapd: move initscript to src/initscripts/packages and use new macro 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
 2017-03-03 16:34:09 +01:00
Jonatan Schlag
586761dd73 monit: move initscript to src/initscripts/packages and use new macro 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
 2017-03-03 16:32:53 +01:00
Jonatan Schlag
de63e05b49 mediatomb: move initscript to src/initscripts/packages and use new macro 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
 2017-03-03 16:31:51 +01:00
Jonatan Schlag
dd1884ddb3 imspector: move initscript to src/initscripts/packages and use new macro 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
 2017-03-03 15:35:54 +01:00
Jonatan Schlag
da5c2f9630 gnump3d: move initscript to src/initscripts/packages and use new macro 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
 2017-03-03 15:18:42 +01:00
Jonatan Schlag
4fa43dd100 vsftpd: move initscript to src/initscripts/packages and use new macro 
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
 2017-03-03 15:15:47 +01:00