Commit Graph

5508 Commits

Author SHA1 Message Date
Michael Tremer
de5862aaab core114: Ship extrahd.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-02 19:28:59 +01:00
Matthias Fischer
d5f061e9e7 Apache 2.4.27 breaks ExtraHD-GUI
Opening 'extrahd.cgi' led to:
"Response header name 'scanhd idescanhd partitionsCache-control' contains
invalid characters, aborting request".

https://forum.ipfire.org/viewtopic.php?f=27&t=19550#p111030
https://forum.ipfire.org/viewtopic.php?f=50&t=19563&sid=575337ac1caf1df492fced01ca6243de#p111048
https://forum.ipfire.org/viewtopic.php?f=22&t=19563#p111052

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-02 19:27:52 +01:00
Arne Fitzenreiter
2083519a64 core114: add php to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-09-24 13:35:01 +02:00
Arne Fitzenreiter
595c6470dd core114: force update addons after core update
apache needs new vhost configs so all addons must updated to work with new
apache.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-09-23 10:34:54 +02:00
Matthias Fischer
fdff464161 unbound: Update to 1.6.6
For details see:
http://www.unbound.net/download.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-09-20 22:00:59 +01:00
Wolfgang Apolinarski
ab2eb13784 Fixup for apache and aprutil, do not include whole directory
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-09-07 12:21:50 +01:00
Michael Tremer
a041054941 core114: Update apache configuration of all add-ons that have one
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-09-04 13:09:43 +01:00
Michael Tremer
5f7487f676 core114: Ship updated apache2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-09-04 13:02:43 +01:00
Wolfgang Apolinarski
d41fe99f74 Update to apache 2.4.27
- Updated to apache 2.4
- Updated the htpasswd generation to use the more secure bcrypt algorithm

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-09-04 12:40:20 +01:00
Wolfgang Apolinarski
c8e9a7a85e apr and aprutil: Added as requirement for apache 2.4
- APR 1.6.2 is a requirement for building apache httpd 2.4
- APR-Util 1.6.0 is a requirement for building apache httpd 2.4

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-09-04 12:37:56 +01:00
Peter Müller
0effbb3569 fix WebUI system information leak
Disable unauthenticated access to cgi-bin/credits.cgi. The page
leaks the currently installed version of IPFire and the hardware
architecture.

Both information might make a successful attack much easier.

This issue can be reproduced by accessing https://[IPFire-IP]:444/cgi-bin/credits.cgi
and accepting a SSL certificate warning (if any).

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-09-04 12:25:23 +01:00
Arne Fitzenreiter
d57f8d886f strongswan: rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-08-30 19:03:25 +02:00
Arne Fitzenreiter
a51ce2defa core114: add unbound initskript to updater.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-08-30 19:03:15 +02:00
Michael Tremer
0c55ec5a49 strongswan: Update to 5.6.0
Fixes CVE-2017-11185:

Fixed a DoS vulnerability in the gmp plugin that was caused by insufficient input validation
when verifying RSA signatures, which requires decryption with the operation m^e mod n,
where m is the signature, and e and n are the exponent and modulus of the public key.
The value m is an integer between 0 and n-1, however, the gmp plugin did not verify this.
So if m equals n the calculation results in 0, in which case mpz_export() returns NULL.
This result wasn't handled properly causing a null-pointer dereference.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-23 20:03:21 +01:00
Michael Tremer
455f261b15 core114: Ship updated squid
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-23 11:33:41 +01:00
Michael Tremer
fa9c7bd047 core114: Ship updated gnutls
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-23 11:31:56 +01:00
Matthias Fischer
3fdddd37ab gnutls: Update to 3.5.15
For details see:
https://lists.gnupg.org/pipermail/gnutls-devel/2017-August/008483.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-23 11:31:39 +01:00
Michael Tremer
38b95ad5d9 core114: Ship updated unbound
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-23 11:29:55 +01:00
Matthias Fischer
7fe22fdc0c unbound: Update to 1.6.5
Changelog:

"21 Aug 2017: Wouter
	- Fix install of trust anchor when two anchors are present, makes both
	  valid.  Checks hash of DS but not signature of new key.  This fixes installs between
	  sep11 and oct11 2017."

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-23 11:28:43 +01:00
Michael Tremer
1d7d4460d6 core114: Ship updated hdparm
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-21 12:21:45 +01:00
Michael Tremer
05e7808cd6 Start Core Update 114
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-21 12:21:14 +01:00
Arne Fitzenreiter
d1043adde9 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2017-08-17 15:00:38 +02:00
Arne Fitzenreiter
40c81f6929 unbound: update dns hints and keys
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-08-17 14:25:42 +02:00
Michael Tremer
3bee566f45 core113: Ship openvpn which has been missing in core112 updater
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-17 13:15:27 +01:00
Arne Fitzenreiter
16388774a4 rootfile updates: nano, misc-progs
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-08-17 10:18:44 +02:00
Arne Fitzenreiter
e4837ceffe core113: add strongswan-padlock to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-08-16 20:12:45 +02:00
Michael Tremer
0e7d340f2b core113: Ship packages that have not been shipped with 112
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-16 11:32:43 +01:00
Michael Tremer
4d417ab022 libgcrypt: Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 20:23:46 +01:00
Arne Fitzenreiter
05478072cd unbound/ntp: move not working DNS fallback from ntp to unbound initskript
the ntp initskript will only run at first connection try. If this fails
and the connection can established later DNS will not work if the clock
is too far away.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-08-15 20:20:16 +02:00
Arne Fitzenreiter
874eabd6f5 serial-console: remove baudrate from inittab
new versions of agetty missinterpretes the baudrate and set it as TERM
without the parameter agetty use the previous rate that was set by the
kernel via console=XXX,Baudrate parameter.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-08-15 20:08:22 +02:00
Michael Tremer
5564841b10 core113: Add latest packages
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 11:58:38 +01:00
Erik Kapfer
a3fe88a540 iftop: This is an Update release to ver. 1.0pre4
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 11:55:31 +01:00
Matthias Fischer
fe65a45955 pcre: Update to 8.41
For details see:
http://www.pcre.org/original/changelog.txt

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 11:50:14 +01:00
Matthias Fischer
d44debdcc5 gnutls: Update to 3.5.14
For details see:
https://lists.gnupg.org/pipermail/gnutls-devel/2017-May/008427.html
https://lists.gnupg.org/pipermail/gnutls-devel/2017-June/008446.html
https://lists.gnupg.org/pipermail/gnutls-devel/2017-July/008469.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 11:50:12 +01:00
Matthias Fischer
41d06f42b7 unbound: Update to 1.6.4
Hi, ("...back in town...") ;-)

For details see:
http://www.unbound.net/download.html

I had to remove the patch file: it wouldn't apply.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 11:50:03 +01:00
Stephan Feddersen
0d6cc79d98 WIO: first addon release v1.3.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 11:45:46 +01:00
Michael Tremer
12b0bd949a Start Core Update 113
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-15 11:44:50 +01:00
Arne Fitzenreiter
b587a27e6d util-linux: update rootfile (armv5tel)
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-07-11 05:59:18 +02:00
Arne Fitzenreiter
82308f5387 ncftp: drop addon package
it is outdated and will not build with new gcc/glibc

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-07-08 17:23:00 +02:00
Arne Fitzenreiter
71481bd8bb core112: reload init to allow correct unmount at reboot
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-07-07 10:14:37 +02:00
Michael Tremer
19404c954f core112: Ship updated util-linux
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-07-05 17:23:52 +01:00
Marcel Lorenz
6e1cf84266 util-linux: update to 2.28.2
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Reviewed-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-07-05 17:23:52 +01:00
Michael Tremer
84a203c8eb Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-07-03 19:10:39 +01:00
Michael Tremer
703820855e Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-07-03 19:08:40 +01:00
Michael Tremer
9b5302d2ce Archive Core Updates 110 + 111
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-07-01 12:45:16 +01:00
Michael Tremer
ea938f6289 Package Core Update 112
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-07-01 12:44:48 +01:00
Michael Tremer
d78aa64957 Rootfile update for armv5tel toolchain
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-07-01 12:34:00 +01:00
Michael Tremer
0fe80f03ba Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-26 10:17:56 +01:00
Michael Tremer
c631ded67b Drop architecture-dependent and unused package fwhits
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-22 18:29:59 +01:00
Michael Tremer
dff0a94825 directfb: Fix compilation on ARM
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-22 16:06:06 +01:00