Commit Graph

15851 Commits

Author SHA1 Message Date
Michael Tremer
a69c7a2ab8 flex: Update automake scripts
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-06 11:14:49 +00:00
Michael Tremer
1ebdfb0e4e Config: Enable UPDATE_AUTOMAKE for riscv64
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-06 11:14:49 +00:00
Michael Tremer
161eb15dfb make.sh: Add support for building on riscv64
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-06 11:14:49 +00:00
Leo-Andres Hofmann
5867e4a511 Rename update accelerator passive mode
Fixes #12577

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-04 10:49:57 +00:00
Peter Müller
591d4789b1 Tor: update to 0.4.5.6
Please refer to
https://gitweb.torproject.org/tor.git/plain/ChangeLog?h=tor-0.4.5.6 for
the full changelog of this release.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-04 10:49:53 +00:00
Michael Tremer
ee7f87807b python3: I didn't realise that i586 had a separate rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-04 10:49:18 +00:00
Michael Tremer
fe51ad2a58 bind: Enable parallel build
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-03 16:51:52 +00:00
Michael Tremer
33d2cb29bf core155: Ship dhcp
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-03 16:50:15 +00:00
Matthias Fischer
3633d59636 dhcp: Update to 4.4.2
For details see:
https://downloads.isc.org/isc/dhcp/4.4.2/dhcp-4.4.2-RELNOTES

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-03 16:49:10 +00:00
Michael Tremer
c18cf8e209 core155: Ship wget
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-03 16:49:00 +00:00
Matthias Fischer
dff84c4fa3 wget: Update to 1.21.1
Sorry, no changelog found, only:
https://fossies.org/linux/wget/ChangeLog

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-03 16:48:45 +00:00
Matthias Fischer
02f31c4091 mc: Update to 4.8.26
For details see:
http://midnight-commander.org/wiki/NEWS-4.8.26

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-03 16:48:30 +00:00
Michael Tremer
e2cc8e4e9b python3: Update to 3.8.7
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-03 16:45:57 +00:00
Michael Tremer
4c0e047bb5 core155: Ship libffi and all dependencies
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-03 13:40:33 +00:00
Michael Tremer
870c02a5e8 libffi: Update to 3.3
This contains a version bump which requires us to ship Python 2 and
Python 3 again.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-03 13:32:28 +00:00
Matthias Fischer
a9285618b9 suricata: Update to 5.0.6
For details see:
https://forum.suricata.io/t/suricata-6-0-2-and-5-0-6-released/1170

and

https://redmine.openinfosecfoundation.org/versions/164

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-03 13:27:03 +00:00
Michael Tremer
88cd5e5d0b core155: Ship libhtp
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-03 13:25:02 +00:00
Matthias Fischer
106a5206ec libhtp: Update to 0.5.37
For details see:
https://github.com/OISF/libhtp/releases

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-03 13:24:38 +00:00
Michael Tremer
ffafaa71a6 firewall: Remove ALGs from UI
This change drops the UIs that could enable ALGs for various protocols.

Those have been all forcibly disabled because "NAT Slipstream".

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-02 18:45:13 +00:00
Michael Tremer
4eaa5b9176 core155: Disable all connection tracking helpers
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-02 18:35:13 +00:00
Michael Tremer
69b3d63b82 e2fsprogs: Disable libraries provided by util-linux
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-02 17:40:34 +00:00
Michael Tremer
74d3d9cbe3 firewall: Disable all connection tracking helpers by default
This will mitigate exploiting networks secured by IPFire using NAT
Slipstreaming:

https://lists.ipfire.org/pipermail/development/2021-February/009303.html

Suggested-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-02 10:04:46 +00:00
Michael Tremer
b6deb78d91 suricata: Ship after updating rust compiler
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-01 21:32:08 +00:00
Michael Tremer
f8798c09e9 core155_ Ship boost again
This is necessary because boost has been removed by filesystem-cleanup.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-27 15:31:07 +00:00
Michael Tremer
3358a84fd5 filesystem-cleanup: Ignore boost
This package does not behave according to standard distribution rules
and our script deletes all libraries

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-27 15:27:42 +00:00
Michael Tremer
e1f33fdcec rust: Update rootfiles for aarch64 and armv5tel
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-25 17:56:11 +00:00
Michael Tremer
d7005ce842 rust: Remove LLVM tools
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-25 13:55:16 +00:00
Matthias Fischer
a471762fb0 rust: Update to 1.50
For details see:
https://github.com/rust-lang/rust/blob/master/RELEASES.md

Unfortunately I can only build with 32bit and 64bit, this is why I
couldn't upload the rootfiles for 'aarch64' and 'armv5tel'.

Tested here with 'suricata 5.0.5' - running without seen problems.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-24 17:27:36 +00:00
Michael Tremer
cade19b196 fireperf: Update to version 0.2.0
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-23 15:11:57 +00:00
Michael Tremer
08ab1b41dd Run "./make.sh lang"
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-22 19:01:07 +00:00
Michael Tremer
11ddd84da8 core155: Ship zoneconf
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-22 19:00:45 +00:00
Leo-Andres Hofmann
01139abbe1 zoneconf.cgi: Add default value for STP and require input
Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-22 18:59:12 +00:00
Leo-Andres Hofmann
5262805261 zoneconf.cgi: Import network-functions.pl
Remove custom functions and use network-functions.pl instead to detect
the available zones correctly. This also removes the requirement that
a device must be assigned for a zone to become visible/configurable.

Fixes: #12568

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-22 18:58:15 +00:00
Leo-Andres Hofmann
b4434345dc zoneconf.cgi: Add Javascript for new GUI elements
Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-22 18:58:13 +00:00
Leo-Andres Hofmann
8de94a23e0 zoneconf.cgi: Add STP options to GUI
Changes & new features:
- Add CSS for STP options, add texts to language files
- Read STP settings from ethernet configuration and display inputs
- Validate and save STP settings

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-22 18:58:12 +00:00
Leo-Andres Hofmann
5e6eba884b zoneconf.cgi: Modify CSS to allow additional rows
Simplify borders, load more colors from header and add dividers

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-22 18:58:10 +00:00
Leo-Andres Hofmann
63a1c81a63 zoneconf.cgi: Change NIC display order, improve code
Refactor duplicate perl code and add comments

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-22 18:58:08 +00:00
Michael Tremer
0b287952a6 haproxy: Use new PCRE2 library
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-22 13:58:28 +00:00
Michael Tremer
72c8478ee5 lang: Actually check Polish translation
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-22 13:41:31 +00:00
Roberto Peña
2f44c09d80 Add Spanish translations for Captive Portal
- Ran ./make lang before adding translations and git status was clear
- Ran ./make lang after adding translations and git status included also
    doc/language_issues.pl although I did not change anything for Polish
    and it was clear before making any changes

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-22 11:30:15 +00:00
Matthias Fischer
70b43b54c9 libxcrypt 4.4.17: Fix for rootfile
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-22 11:28:11 +00:00
Michael Tremer
e7c7ccfa37 core155: Ship tar
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-22 11:27:40 +00:00
Matthias Fischer
86c8299cd4 tar: Update to 1.34
For details see:
https://lists.gnu.org/archive/html/info-gnu/2021-02/msg00006.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-22 11:27:22 +00:00
Michael Tremer
79eec2773e core155: Ship libgcrypt
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-22 11:26:50 +00:00
Matthias Fischer
e9b3b1489c libgcrypt: Update to 1.9.2
For details see:
https://lists.gnupg.org/pipermail/gnupg-announce/2021q1/000457.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-22 11:26:29 +00:00
Michael Tremer
7bd51283c8 core155: Ship nettle
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-22 11:26:19 +00:00
Matthias Fischer
dd42ea2c5e nettle: Update to 3.7.1
For details see:

Annonce for 3.7.1:
http://lists.lysator.liu.se/pipermail/nettle-bugs/2021/009434.html

Announce for 3.6:
http://lists.lysator.liu.se/pipermail/nettle-bugs/2020/008967.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-22 11:25:50 +00:00
Stephan Feddersen
730e96c98b WIO - Patch PPPOE show right Icon
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-19 19:34:32 +00:00
Matthias Fischer
c33d30d8f9 krb5: Update to 1.19.1
For details see:
https://web.mit.edu/kerberos/krb5-1.19/README-1.19.1.txt

"This is a bug fix release.

* Fix a linking issue with Samba.

* Better support multiple pkinit_identities values by checking whether
  certificates can be loaded for each value.

krb5-1.19.1 changes by ticket ID
--------------------------------

8984    Load certs when checking pkinit_identities values
8985    Restore krb5_set_default_tgs_ktypes()
8987    Synchronize command-line option documentation"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-19 19:32:52 +00:00
Michael Tremer
4a22b1f4f5 core155: Ship bind
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-19 19:32:43 +00:00