Commit Graph

22379 Commits

Author SHA1 Message Date
Peter Müller
581e1c7a67 kmod: Update to 32
Changelog according to the tarball's NEWS file:

- Improvements

        - Use any hash algo known by kernel/openssl instead of keep needing
          to update the mapping

        - Teach kmod to load modprobe.d/depmod.d configuration from ${prefix}/lib
          and allow it to be overriden during build with --with-distconfdir=DIR

        - Make kernel modules directory configurable. This allows distro to
          make kmod use only files from /usr regardless of having a compat
          symlink in place.

        - Install kmod.pc containing the features selected at build time.

        - Install all tools and symlinks by default. Previously kmod relied on
          distro packaging to set up the symlinks in place like modprobe,
          depmod, lsmod, etc. Now those symlinks are created by kmod itself
          and they are always placed in $bindir.

- Bug Fixes

        - Fix warnings due to -Walloc-size

- Others

        - Drop python bindings. Those were not update in ages and not compatible
          with latest python releases.

        - Cleanup test infra, dropping what was not used anymore

        - Drop experimental tools `kmod insert` / `kmod remove`. Building those
          was protected by a configure option never set by distros. They also
          didn't gain enough traction to replace the older interfaces via
          modprobe/insmod/rmmod.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 17:23:41 +00:00
Arne Fitzenreiter
7152f170a2 core186: ship strongswan
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 17:23:41 +00:00
Peter Müller
692589d73a strongSwan: Update to 5.9.14
Please see https://github.com/strongswan/strongswan/releases/tag/5.9.14
for the changelog of this version.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 17:23:41 +00:00
Peter Müller
6bd19004ee Lynis: Update to 3.1.1
Please see https://cisofy.com/changelog/lynis/#311 for the changelogs
since version 3.0.9.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 17:23:41 +00:00
Peter Müller
f51e75beb6 Tor: Update to 0.4.8.11
Full changelog according to https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.11/ChangeLog:

Changes in version 0.4.8.11 - 2024-04-10
  This is a minor release mostly to upgrade the fallbackdir list. Worth noting
  also that directory authority running this version will now automatically
  reject relays running the end of life 0.4.7.x version.

  o Minor feature (authority):
    - Reject 0.4.7.x series at the authority level. Closes ticket 40896.

  o Minor feature (dirauth, tor26):
    - New IP address and keys.

  o Minor feature (directory authority):
    - Allow BandwidthFiles "node_id" KeyValue without the dollar sign at
      the start of the hexdigit, in order to easier database queries
      combining Tor documents in which the relays fingerprint does not
      include it. Fixes bug 40891; bugfix on 0.4.7 (all supported
      versions of Tor).

  o Minor features (fallbackdir):
    - Regenerate fallback directories generated on April 10, 2024.

  o Minor features (geoip data):
    - Update the geoip files to match the IPFire Location Database, as
      retrieved on 2024/04/10.

  o Minor bugfixes (directory authorities):
    - Add a warning when publishing a vote or signatures to another
      directory authority fails. Fixes bug 40910; bugfix
      on 0.2.0.3-alpha.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 17:23:41 +00:00
Arne Fitzenreiter
3705171543 core186: ship squid
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 17:23:40 +00:00
Matthias Fischer
62f1e54adc squid: Update to 6.9
For details see:
https://github.com/squid-cache/squid/commits/v6

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 17:23:40 +00:00
Michael Tremer
98b755225e general-function.pl: Add a function to easily set defaults
This function can be used to set values in a hash if they have not been
set, yet.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:44:29 +02:00
Michael Tremer
3cd821c122 web: Refactor graphs
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:43:33 +02:00
Michael Tremer
2dd6bc7225 web: Introduce sections
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:43:07 +02:00
Michael Tremer
fbfde0088c vulnerabilities.cgi: Use CSS to colour the table
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:42:48 +02:00
Michael Tremer
a9279a413f vulnerabilities.cgi: Remove manual alternation of colours
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:41:45 +02:00
Michael Tremer
f5bddd4fe7 header.pl: Simplify boxes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:41:33 +02:00
Michael Tremer
d716ad52a7 header.pl: Remove unused openpagewithoutmenu function
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:41:16 +02:00
Michael Tremer
72e6d61719 CSS: Automatically stripe all tables
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:38:33 +02:00
Michael Tremer
66db90757a Remove RECONNECTION=dialondemand
We don't support this at all and so we don't need to check any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:35:47 +02:00
Michael Tremer
cc5613b3b5 network-functions.pl: Read PPP settings globally
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:35:36 +02:00
Michael Tremer
789251ae65 web: Read ethernet settings file only once in headers
The web UI is rather slow and one of the reasons for that is that we are
reading the same files over and over again...

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:35:24 +02:00
Michael Tremer
07257e1f83 general-functions.pl: Don't use line buffering
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:35:08 +02:00
Michael Tremer
0e750575a9 web-user-interface: Move theme functions back into header.pl
Since we no longer support other themes, the web UI should load quicker
if not importing too many other files.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:34:59 +02:00
Michael Tremer
9b044bc8eb header.pl: Remove unused function "is_modem"
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:34:36 +02:00
Michael Tremer
0e93c1eaf3 header.pl: Fix whitespace errors
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:34:27 +02:00
Michael Tremer
62a84fdb4a general-functions.pl: Remove unused NextIP* functions
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:34:14 +02:00
Michael Tremer
9c9f637e16 general-functions.pl: Remove unused srtarray function
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:34:04 +02:00
Michael Tremer
11e75894ce general-functions.pl: Remove getlastip/getnextip
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:33:55 +02:00
Michael Tremer
498feaa550 general-functions.pl: Drop unused getccdbc function
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:33:40 +02:00
Michael Tremer
b8d1ae216f general-functions.pl: Drop unused "writehashpart" function
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:33:31 +02:00
Michael Tremer
d110e751f3 general-functions.pl: Fix various whitespace issues
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:33:21 +02:00
Michael Tremer
db09ea9e5c initscripts: Don't overwrite the PID file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:32:54 +02:00
Michael Tremer
3f863ee70d initscripts: Add some basic functions for IP address maths
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:32:40 +02:00
Michael Tremer
5900a95059 initscripts: Fix reading PIDs
An incorrect variable has been used.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:31:36 +02:00
Michael Tremer
6e47a143c9 initscripts: Handle command arguments as array
For some reason, the function is refusing to launch a command that has
extra arguments.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:31:24 +02:00
Michael Tremer
e340d393d3 network: Don't include initscript headers twice
Everywhere we import the functions, we have already imported the
standard includes.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:31:08 +02:00
Michael Tremer
737e9e1037 network-functions.pl: Add function to get netmask in dotted format
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:30:44 +02:00
Michael Tremer
85e004c2da network-functions.pl: Fix return code check
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:30:32 +02:00
Michael Tremer
65fff7fc34 network-functions.pl: Fix whitespace issues
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:30:21 +02:00
Michael Tremer
0e55d27737 network-functions.pl: Add function to extract prefix
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:30:09 +02:00
Michael Tremer
8eb016da79 CSS: Make text/number inputs 100% wide, too
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:29:48 +02:00
Michael Tremer
17c29ce7fe CSS: Make all <select> and <textarea> use all available space
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:29:40 +02:00
Michael Tremer
d9de11aff8 CSS: Don't make headings so skinny
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:28:50 +02:00
Michael Tremer
82fec28abe header.pl: Allow passing more HTTP headers to showhttpheaders()
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:28:25 +02:00
Peter Müller
28e8d436fc Remove orphaned Apache patch
See: https://lists.ipfire.org/hyperkitty/list/development@lists.ipfire.org/message/BENPLQ43YKYOWIKIEXHDVEQWNE3SBKEH/

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2024-04-21 21:10:52 +00:00
Peter Müller
e212c7293d Core Update 186: Ship and restart Apache
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2024-04-21 21:10:29 +00:00
Matthias Fischer
9fbb9c39fb apache: Update to 2.4.59
For details see:
https://dlcdn.apache.org/httpd/CHANGES_2.4.59

Fixes CVE-2024-27316 / CVE-2024-24795 / CVE-2023-38709

Previously applied patch (apache-2.4.58_mod_xml2enc_remove_dependency_on_xmlstring_header.patch)
has been removed - is now included.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2024-04-21 21:09:05 +00:00
Peter Müller
9ce9514bad libloc: Adjust changed URL format
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2024-04-21 20:09:40 +00:00
Peter Müller
658e1675f7 langs: Update Spamhaus DROP URL
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2024-04-21 20:06:52 +00:00
Peter Müller
3cc7b53a87 libloc: Update location database shipped with new installations
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2024-04-21 20:04:51 +00:00
Arne Fitzenreiter
ba5da82e9b core186: ship ipblocklist sources
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 19:55:13 +00:00
Adolf Belka
4fdaa9577b backup.pl: removes any references to ALIENVAULT & SPAMHAUSEDROP from restores
- This patch ensures that if a restore is carried out from an earlier version that includes
   ALIENVAULT and/or SPAMHAUS_EDROP that the references will be removed.
- This is the same code as was put into the update.sh file with the previous patch of this
   set.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 19:51:24 +00:00
Adolf Belka
6408ff8d6a update.sh: Remove existing entries for ALIENVAULT & SPAMHAUS_EDROP
- This removes any time entries in the modified file for either ALIENVAULT or
   SPAMHAUS_EDROP.
- This also removes any blocklists for either of these sources from the /var/lib/ipblocklist
   directory.
- This patch will ensure that any reference to either of these sources is removed from the
   ipblocklist files.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 19:51:13 +00:00