Commit Graph

13726 Commits

Author SHA1 Message Date
Matthias Fischer
a4bb11243f dhcpcd: Update to 8.0.6
For details see:
https://roy.marples.name/blog/dhcpcd-8-0-6-released

"inet6: Fix default route not being installed
DHCP: If root fs is network mounted, enable last lease extend
man: Fix lint errors.
BSD: avoid RTF_WASCLONED routes
DHCP: Give a better message when packet validation fails
DHCP: Ensure we have enough data to checksum IP and UDP

The last change fixes a potential DoS attack introduced in dhcpcd-8.0.3
when the checksuming code was changed to accomodate variable length
IP headers. The commit says since 7.2.0, but I've now decided that's not
the case."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-10-08 17:58:35 +00:00
Arne Fitzenreiter
6c84c53803 core137: add iproute2
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-10-08 17:57:32 +00:00
Matthias Fischer
5551237b1a iproute2: Update to 5.2.0
For details see:
https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/log/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-10-08 17:56:02 +00:00
Arne Fitzenreiter
6bc008fc8f core137: add iptables and collectd
collectd is linked to libip4tc so we need to ship this also

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-10-08 17:53:36 +00:00
Matthias Fischer
7a03d4b08a iptables: Update to 1.8.3
For details see:
https://www.netfilter.org/projects/iptables/files/changes-iptables-1.8.3.txt

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-10-08 17:51:19 +00:00
Arne Fitzenreiter
4e6c66b525 core137: add libnetfilter_queue
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-10-08 17:49:09 +00:00
Stefan Schantl
deb594c1b6 libnetfilter_queue: Update to 1.0.4
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-10-08 17:47:26 +00:00
Arne Fitzenreiter
968af91f62 core137: add libhtp
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-10-08 17:46:29 +00:00
Stefan Schantl
db946ccc1c libhtp: Update to 0.5.30
Fixes #12170

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-10-08 17:44:45 +00:00
Arne Fitzenreiter
73659e8cf9 kernel: update to 4.14.148
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-10-07 23:37:56 +02:00
Arne Fitzenreiter
a75eebc86a kernel: update to 4.14.147
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-10-05 14:42:09 +02:00
Arne Fitzenreiter
69cf4f3065 kernel: update to 4.14.146
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-21 20:44:52 +02:00
Stefan Schantl
415969cc1b kernel: Backport patch to fix a netfilter contrack related issue.
This fixes the packet drop issue when using suricata on IPFire.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-21 09:53:56 +00:00
Arne Fitzenreiter
593a9326d8 start core137 and add kernel and IO-Socket-SSL to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-21 09:52:02 +00:00
Arne Fitzenreiter
92fbca3417 make.sh: fix tmpfs build on 32bit machines
the inode count of tmpfs defaults on availbable low memory page count
which is too low on 32bit machines

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-18 16:31:26 +00:00
Arne Fitzenreiter
6ef219bbe0 glibc: enbable parallel build for locales
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-18 16:30:49 +00:00
Erik Kapfer
639ce4545d IO-Socket-SSL: Update to version 2.066
Fix for "Undefined subroutine &IO::Socket::SSL::set_client_defaults called at /usr/libexec/git-core/git-send-email" problem.

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-18 16:24:22 +00:00
Arne Fitzenreiter
d952d6d735 core136: apply local sshd config and restart sshd at update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-14 18:13:21 +00:00
Arne Fitzenreiter
4f84bf4074 core136: fix typo at GeoIP update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-14 16:20:27 +00:00
Arne Fitzenreiter
9ab4e56aa9 core136: ship perl-CGI and perl-Switch
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-14 15:21:41 +00:00
Arne Fitzenreiter
f7eb5925d2 core136: ship updated perl scripts
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-14 15:18:29 +00:00
Arne Fitzenreiter
2f42237487 Merge branch 'next' 2019-09-12 12:57:09 +02:00
Arne Fitzenreiter
f91f0b7758 finish core136
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-12 12:54:35 +02:00
Arne Fitzenreiter
c3f996979f update contributor list
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-12 12:53:28 +02:00
Arne Fitzenreiter
43be529d2d core136: ship updated zoneconf.cgi
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-12 10:20:45 +00:00
Alex Koch
7f44ec0478 zoneconf: reduce the width of inputs for vlanid
The inputs for the vlanids are overlapping the borders of their cells (using a recent Firefox on Linux Mint, Android or Windows 7). This patch fixes this by limiting the width to a fixed value.

Signed-off-by: Alex Koch <ipfire@starkstromkonsument.de>
Signed-off-by: Alex Koch <ipfire@starkstromkonsument.de>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-12 10:19:14 +00:00
Arne Fitzenreiter
ece63aa950 openssl: update to 1.1.1d
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-12 05:52:47 +00:00
Arne Fitzenreiter
d3d959851a core136: update logwatch crontab entry
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-11 17:38:32 +00:00
Matthias Fischer
7ca4deda49 BUG 12036: logwatch now starts at 00:05am to avoid conflicts with logrotate
Problem:
Every once in a while 'logwatch' creates an empty log file with 0 Bytes.

Probably 'logwatch' conflicts with the logrotate job which is
launched at the same time.

To avoid this in the future, the start of logwatch was postponed for
four minutes.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-11 16:59:27 +00:00
Arne Fitzenreiter
be8c539905 core136: ship logrotate
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-11 16:57:20 +00:00
Matthias Fischer
9f1c19a5db logrotate: Update to 3.5.1
For details see:
https://github.com/logrotate/logrotate/releases

"use correct create mode in examples/btmp (#257)"
=> https://github.com/logrotate/logrotate/pull/257

"fix several bugs found by fuzzing (#254)"
=> https://github.com/logrotate/logrotate/issues/254

"do not abort globbing on a broken symlink (#251)"
=> https://github.com/logrotate/logrotate/issues/251

"rearrange logrotate.8 man page to improve readability (#248)"
=> https://github.com/logrotate/logrotate/pull/248

"encourage admins to use the su directive in logrotate.8 man page (#236)"
=> https://github.com/logrotate/logrotate/pull/236

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-11 16:55:56 +00:00
peter.mueller@ipfire.org
9a0454cea2 Tor: fix permission of /var/ipfire/tor/settings
The settings file must be writeable for group "nobody" so
users can change their Tor settings via WebUI. Since other
files in /var/ipfire/tor/ does not need this workaround, only
the settings file permissions are changed.

Sorry for the late fix; this was reported by various people
in the forum, too (I was unaware of so many Tor users in our
community).

Fixes #12117

Reported-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-11 16:54:11 +00:00
Arne Fitzenreiter
a86febdc22 core136: ship changed log.dat
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-11 16:52:23 +00:00
Alex Koch
111216416f WUI log-section Mail: add support for postfix addon
Expand the regex for the section dmi ("Mail") for /var/log/mail to include the log contents of postfix, in case the addon is installed.

Signed-off-by: Alex Koch <ipfire@starkstromkonsument.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-11 16:50:57 +00:00
Alex Koch
2da785f90b WUI log-section Mail: bugfix for dma
The prefix for dmi in /var/log/mail seems to have changed from "dma[<PID>]: " to "dma: ". This results in a bug where no lines are being shown at all in the WUI.

Signed-off-by: Alex Koch <ipfire@starkstromkonsument.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-11 16:49:45 +00:00
Arne Fitzenreiter
81d5af569b core136: ship openssh
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-11 16:46:19 +00:00
Peter Müller
fc1b0311d6 openssh: update to 8.0p1
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-11 16:44:27 +00:00
sfeddersen
93eff0dcb8 BUG12156: fixed wrong permissions in install script
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-04 14:35:24 +00:00
sfeddersen
4f19781d71 BUG12156: GUI cosmetic to show woi logs cleaner
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-04 14:35:22 +00:00
sfeddersen
837158dd96 BUG12156: increased paket number
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-04 14:35:19 +00:00
sfeddersen
3cefb59f71 BUG12156: added wio rrd files to backup
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-04 14:35:09 +00:00
sfeddersen
f928cc5a34 BUG12156: changed wio.cgi to fix broken Web GUI
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-04 14:35:07 +00:00
Michael Tremer
b58281e056 haproxy: Update to 2.0.5
This release brings a couple of new features and this
patch enables using the PCRE Jit.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-04 14:34:47 +00:00
Arne Fitzenreiter
bd44f7b763 core136: ship usb_modswitch and data
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-04 14:17:19 +00:00
Arne Fitzenreiter
f3158de0b8 usb-modeswitch-data: fix rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-04 14:15:35 +00:00
Arne Fitzenreiter
8b200f9c7e Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2019-09-03 11:33:06 +00:00
Ramax Lo
46b457393d usb_modeswitch_data: update to 20170806
Signed-off-by: Ramax Lo <ramaxlo@gmail.com>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-02 20:42:50 +00:00
Ramax Lo
5d7f07e818 usb_modeswitch: update to 1.5.2
Signed-off-by: Ramax Lo <ramaxlo@gmail.com>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-02 20:40:48 +00:00
Arne Fitzenreiter
136ade454b core136: ship unbound
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-02 20:21:27 +00:00
Matthias Fischer
d0fc3b2008 unbound: Update to 1.9.3
For details see:
https://nlnetlabs.nl/pipermail/unbound-users/2019-August/011765.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-02 20:19:33 +00:00