Michael Tremer
474daba689
bash: Update to version 4.3.30
...
Fixes #10633 .
2014-10-06 12:23:35 +02:00
Michael Tremer
efa808ba11
readline: Re-add accidentially deleted patches of -compat package
2014-09-29 22:43:04 +02:00
Michael Tremer
801dcd70b0
bash: Import patch for version 4.3.27
...
See #10633
2014-09-29 21:29:57 +02:00
Michael Tremer
c02899be04
readline: Update to 6.3.
2014-09-29 13:51:26 +02:00
Michael Tremer
3347f993b6
bash: Import upstream fixes
2014-09-29 13:50:03 +02:00
Michael Tremer
56a435a001
bash: Import fix for CVE-2014-7169
...
http://www.openwall.com/lists/oss-security/2014/09/25/10
Conflicts:
lfs/bash
2014-09-29 13:49:56 +02:00
Michael Tremer
77b3d64a16
bash: Fix for CVE-2014-6271
...
A flaw was found in the way Bash evaluated certain specially crafted
environment variables. An attacker could use this flaw to override
or bypass environment restrictions to execute shell commands.
Certain services and applications allow remote unauthenticated
attackers to provide environment variables, allowing them to exploit
this issue.
2014-09-29 13:49:51 +02:00
Michael Tremer
ce84ace5bf
bash: Update to 4.3.
...
Conflicts:
lfs/bash
2014-09-29 13:49:39 +02:00
Michael Tremer
09e0890109
Merge remote-tracking branch 'teissler/bug_10454' into next
2014-09-28 13:31:53 +02:00
Timo Eissler
1d4897f308
network: move start of static-routes
...
Fixes #10454
Create static routes after network interfaces are initialised.
2014-09-27 23:28:04 +02:00
Timo Eissler
d51e490664
network: fix coding style
2014-09-27 23:16:57 +02:00
Alexander Marx
d71bcfce59
squid-accounting: set right permissions of html directory for graphs and logo
2014-09-26 13:05:22 +02:00
Michael Tremer
7e09a94a81
Merge remote-tracking branch 'amarx/BUG10620' into next
2014-09-26 13:03:22 +02:00
Michael Tremer
b30890aa06
bash: Import upstream patches for CVE-2014-6271 and CVE-2014-7169
2014-09-26 12:42:27 +02:00
Michael Tremer
7a35d102cb
dnsmasq: Update to 2.72
2014-09-25 21:16:01 +02:00
Michael Tremer
e86c70a99f
bash: Import fix for CVE-2014-7169
...
http://www.openwall.com/lists/oss-security/2014/09/25/10
2014-09-25 19:38:23 +02:00
Michael Tremer
a4c895e569
Merge branch 'master' into next
2014-09-24 20:39:43 +02:00
Michael Tremer
6cda6f906e
bash: Fix for CVE-2014-6271
...
A flaw was found in the way Bash evaluated certain specially crafted
environment variables. An attacker could use this flaw to override
or bypass environment restrictions to execute shell commands.
Certain services and applications allow remote unauthenticated
attackers to provide environment variables, allowing them to exploit
this issue.
2014-09-24 18:48:35 +02:00
Alexander Marx
ca4259a758
BUG10620: reload firewall.local in rules.pl, no longer in initscript
2014-09-11 17:13:07 +02:00
Michael Tremer
bd76bcb8b4
glibc: Import several fixes from RHEL.
...
Fixes #10611 , CVE-2014-5119 among other bug fixes.
2014-09-03 21:49:01 +02:00
Alexander Marx
67bda607ca
Squid-accounting: revert setlocale because thevalues are not correctly with this setting
2014-09-01 19:39:35 +02:00
Michael Tremer
ff6d34ab8b
minidlna: Update to 1.1.3
...
Fixes #10573
2014-08-24 15:14:25 +02:00
Michael Tremer
e7204c2d95
firewall: Fix initialization when RED has not been brought up yet
2014-08-21 16:12:43 +02:00
Timo Eissler
4b12aa414c
firewall: fix faulty masquerading packets
2014-08-08 09:53:56 +02:00
Michael Tremer
935c2f233b
Merge remote-tracking branch 'ms/ddns.cgi-fixes' into next
...
Conflicts:
html/cgi-bin/ddns.cgi
2014-08-07 21:06:13 +02:00
Michael Tremer
80a5cc5609
Merge remote-tracking branch 'amarx/ACCOUNTING' into next
2014-08-07 15:11:47 +02:00
Alexander Marx
d6413caa72
squid-accounting: get trafficdata from LAST month, when month has changed
2014-08-07 15:10:11 +02:00
Michael Tremer
89e9f46e5b
Merge remote-tracking branch 'amarx/ACCOUNTING' into next
...
Conflicts:
make.sh
2014-08-07 14:59:17 +02:00
Michael Tremer
908555842c
Merge remote-tracking branch 'ms/firewall-no-nat' into next
...
Conflicts:
doc/language_issues.nl
doc/language_issues.tr
2014-08-07 14:50:42 +02:00
Arne Fitzenreiter
4c658a270e
check_mk_agent: extract backup include before uninstall.
2014-08-06 18:05:14 +02:00
Alexander Marx
a5f5ccfc4f
squid-accounting: create billpreview file as temporary file
2014-08-06 15:10:41 +02:00
Michael Tremer
983d471f93
firewall-no-nat: Use network masks to identify the subnets.
...
In the POSTROUTING chains of the NAT table, there is
no more information about on which interface the packet
has arrived (green0, etc.).
2014-08-06 14:37:21 +02:00
Alexander Marx
1cdea84a90
squid-accounting: changed permissions on acct-lib.pl
2014-08-06 13:50:42 +02:00
Alexander Marx
18a66b95df
squid-accounting: change permissions and reread languagefiles on uninstall
2014-08-06 13:41:54 +02:00
Arne Fitzenreiter
a0a3d81c12
Merge branch 'master' of git.ipfire.org:/pub/git/ipfire-2.x
2014-08-06 09:36:31 +02:00
Arne Fitzenreiter
b283b2cf8f
lzo: Downgrade to 2.0.6 (CVE-2014-4607 patched).
...
openvpn fails at lzo_init with lzo-2.07 and 2.08 on armv5tel.
2014-08-06 09:35:46 +02:00
Alexander Marx
db8a01e027
Squid-accounting: new addon for measuring proxy traffic per user/ip
2014-08-06 08:58:43 +02:00
Michael Tremer
5354d0f5c9
ddns: Update to 004.
2014-08-05 19:49:28 +02:00
Arne Fitzenreiter
93899a216f
firewall: add more pscan matches and filter INVALID conntrack packages.
2014-08-04 21:19:28 +02:00
Arne Fitzenreiter
f0728c790f
Merge remote-tracking branch 'origin/master' into next
...
Conflicts:
config/cfgroot/general-functions.pl
2014-07-29 22:01:19 +02:00
Arne Fitzenreiter
dccbf1bf4e
firewall: add more pscan matches and filter INVALID conntrack packages.
2014-07-29 21:57:07 +02:00
Michael Tremer
bc70c82737
rngd: Silence initscript when rngd is already started.
...
When a hardware random number generator is found by udev
it will start rngd automatically which is what we also do
by default in the initialisation sequence of the system
(e.g. for RDRAND).
The user will then see an error message that rngd has
already been started which was confusing.
2014-07-29 12:07:02 +02:00
Michael Tremer
2deb75c0f3
Merge remote-tracking branch 'ms/squid-ad' into next
2014-07-27 12:01:50 +02:00
Michael Tremer
5b861b0545
Revert "firewall: Filter logging of broadcasts from the internal networks."
...
This reverts commit 63f2fb7fda .
2014-07-26 21:23:55 +02:00
Michael Tremer
fffc646e74
logs: Add dynamic DNS logging section.
2014-07-24 13:35:22 +02:00
Michael Tremer
83ef9c40ef
firewall: Allow to disable masquerading.
2014-07-18 17:15:29 +02:00
Arne Fitzenreiter
5b71042c54
cleanfs: repair /var/run symlink to /run if it not exist.
2014-07-17 16:03:08 +02:00
Arne Fitzenreiter
e351c1e090
ddns: don't use forced update.
2014-07-13 13:07:00 +02:00
Daniel Weismüller
893450d382
owncloud: with non-existent certificates they were not copied. corrected install.sh to the effect
2014-07-10 19:24:50 +02:00
Daniel Weismüller
21987073ff
owncloud: modified install.sh and uninstall.sh
...
added backup functionality
2014-07-10 19:24:50 +02:00