Commit Graph

2261 Commits

Author SHA1 Message Date
Michael Tremer
474daba689 bash: Update to version 4.3.30
Fixes #10633.
2014-10-06 12:23:35 +02:00
Michael Tremer
efa808ba11 readline: Re-add accidentially deleted patches of -compat package 2014-09-29 22:43:04 +02:00
Michael Tremer
801dcd70b0 bash: Import patch for version 4.3.27
See #10633
2014-09-29 21:29:57 +02:00
Michael Tremer
c02899be04 readline: Update to 6.3. 2014-09-29 13:51:26 +02:00
Michael Tremer
3347f993b6 bash: Import upstream fixes 2014-09-29 13:50:03 +02:00
Michael Tremer
56a435a001 bash: Import fix for CVE-2014-7169
http://www.openwall.com/lists/oss-security/2014/09/25/10

Conflicts:
	lfs/bash
2014-09-29 13:49:56 +02:00
Michael Tremer
77b3d64a16 bash: Fix for CVE-2014-6271
A flaw was found in the way Bash evaluated certain specially crafted
environment variables. An attacker could use this flaw to override
or bypass environment restrictions to execute shell commands.
Certain services and applications allow remote unauthenticated
attackers to provide environment variables, allowing them to exploit
this issue.
2014-09-29 13:49:51 +02:00
Michael Tremer
ce84ace5bf bash: Update to 4.3.
Conflicts:
	lfs/bash
2014-09-29 13:49:39 +02:00
Michael Tremer
09e0890109 Merge remote-tracking branch 'teissler/bug_10454' into next 2014-09-28 13:31:53 +02:00
Timo Eissler
1d4897f308 network: move start of static-routes
Fixes #10454

Create static routes after network interfaces are initialised.
2014-09-27 23:28:04 +02:00
Timo Eissler
d51e490664 network: fix coding style 2014-09-27 23:16:57 +02:00
Alexander Marx
d71bcfce59 squid-accounting: set right permissions of html directory for graphs and logo 2014-09-26 13:05:22 +02:00
Michael Tremer
7e09a94a81 Merge remote-tracking branch 'amarx/BUG10620' into next 2014-09-26 13:03:22 +02:00
Michael Tremer
b30890aa06 bash: Import upstream patches for CVE-2014-6271 and CVE-2014-7169 2014-09-26 12:42:27 +02:00
Michael Tremer
7a35d102cb dnsmasq: Update to 2.72 2014-09-25 21:16:01 +02:00
Michael Tremer
e86c70a99f bash: Import fix for CVE-2014-7169
http://www.openwall.com/lists/oss-security/2014/09/25/10
2014-09-25 19:38:23 +02:00
Michael Tremer
a4c895e569 Merge branch 'master' into next 2014-09-24 20:39:43 +02:00
Michael Tremer
6cda6f906e bash: Fix for CVE-2014-6271
A flaw was found in the way Bash evaluated certain specially crafted
environment variables. An attacker could use this flaw to override
or bypass environment restrictions to execute shell commands.
Certain services and applications allow remote unauthenticated
attackers to provide environment variables, allowing them to exploit
this issue.
2014-09-24 18:48:35 +02:00
Alexander Marx
ca4259a758 BUG10620: reload firewall.local in rules.pl, no longer in initscript 2014-09-11 17:13:07 +02:00
Michael Tremer
bd76bcb8b4 glibc: Import several fixes from RHEL.
Fixes #10611, CVE-2014-5119 among other bug fixes.
2014-09-03 21:49:01 +02:00
Alexander Marx
67bda607ca Squid-accounting: revert setlocale because thevalues are not correctly with this setting 2014-09-01 19:39:35 +02:00
Michael Tremer
ff6d34ab8b minidlna: Update to 1.1.3
Fixes #10573
2014-08-24 15:14:25 +02:00
Michael Tremer
e7204c2d95 firewall: Fix initialization when RED has not been brought up yet 2014-08-21 16:12:43 +02:00
Timo Eissler
4b12aa414c firewall: fix faulty masquerading packets 2014-08-08 09:53:56 +02:00
Michael Tremer
935c2f233b Merge remote-tracking branch 'ms/ddns.cgi-fixes' into next
Conflicts:
	html/cgi-bin/ddns.cgi
2014-08-07 21:06:13 +02:00
Michael Tremer
80a5cc5609 Merge remote-tracking branch 'amarx/ACCOUNTING' into next 2014-08-07 15:11:47 +02:00
Alexander Marx
d6413caa72 squid-accounting: get trafficdata from LAST month, when month has changed 2014-08-07 15:10:11 +02:00
Michael Tremer
89e9f46e5b Merge remote-tracking branch 'amarx/ACCOUNTING' into next
Conflicts:
	make.sh
2014-08-07 14:59:17 +02:00
Michael Tremer
908555842c Merge remote-tracking branch 'ms/firewall-no-nat' into next
Conflicts:
	doc/language_issues.nl
	doc/language_issues.tr
2014-08-07 14:50:42 +02:00
Arne Fitzenreiter
4c658a270e check_mk_agent: extract backup include before uninstall. 2014-08-06 18:05:14 +02:00
Alexander Marx
a5f5ccfc4f squid-accounting: create billpreview file as temporary file 2014-08-06 15:10:41 +02:00
Michael Tremer
983d471f93 firewall-no-nat: Use network masks to identify the subnets.
In the POSTROUTING chains of the NAT table, there is
no more information about on which interface the packet
has arrived (green0, etc.).
2014-08-06 14:37:21 +02:00
Alexander Marx
1cdea84a90 squid-accounting: changed permissions on acct-lib.pl 2014-08-06 13:50:42 +02:00
Alexander Marx
18a66b95df squid-accounting: change permissions and reread languagefiles on uninstall 2014-08-06 13:41:54 +02:00
Arne Fitzenreiter
a0a3d81c12 Merge branch 'master' of git.ipfire.org:/pub/git/ipfire-2.x 2014-08-06 09:36:31 +02:00
Arne Fitzenreiter
b283b2cf8f lzo: Downgrade to 2.0.6 (CVE-2014-4607 patched).
openvpn fails at lzo_init with lzo-2.07 and 2.08 on armv5tel.
2014-08-06 09:35:46 +02:00
Alexander Marx
db8a01e027 Squid-accounting: new addon for measuring proxy traffic per user/ip 2014-08-06 08:58:43 +02:00
Michael Tremer
5354d0f5c9 ddns: Update to 004. 2014-08-05 19:49:28 +02:00
Arne Fitzenreiter
93899a216f firewall: add more pscan matches and filter INVALID conntrack packages. 2014-08-04 21:19:28 +02:00
Arne Fitzenreiter
f0728c790f Merge remote-tracking branch 'origin/master' into next
Conflicts:
	config/cfgroot/general-functions.pl
2014-07-29 22:01:19 +02:00
Arne Fitzenreiter
dccbf1bf4e firewall: add more pscan matches and filter INVALID conntrack packages. 2014-07-29 21:57:07 +02:00
Michael Tremer
bc70c82737 rngd: Silence initscript when rngd is already started.
When a hardware random number generator is found by udev
it will start rngd automatically which is what we also do
by default in the initialisation sequence of the system
(e.g. for RDRAND).
The user will then see an error message that rngd has
already been started which was confusing.
2014-07-29 12:07:02 +02:00
Michael Tremer
2deb75c0f3 Merge remote-tracking branch 'ms/squid-ad' into next 2014-07-27 12:01:50 +02:00
Michael Tremer
5b861b0545 Revert "firewall: Filter logging of broadcasts from the internal networks."
This reverts commit 63f2fb7fda.
2014-07-26 21:23:55 +02:00
Michael Tremer
fffc646e74 logs: Add dynamic DNS logging section. 2014-07-24 13:35:22 +02:00
Michael Tremer
83ef9c40ef firewall: Allow to disable masquerading. 2014-07-18 17:15:29 +02:00
Arne Fitzenreiter
5b71042c54 cleanfs: repair /var/run symlink to /run if it not exist. 2014-07-17 16:03:08 +02:00
Arne Fitzenreiter
e351c1e090 ddns: don't use forced update. 2014-07-13 13:07:00 +02:00
Daniel Weismüller
893450d382 owncloud: with non-existent certificates they were not copied. corrected install.sh to the effect 2014-07-10 19:24:50 +02:00
Daniel Weismüller
21987073ff owncloud: modified install.sh and uninstall.sh
added backup functionality
2014-07-10 19:24:50 +02:00