Commit Graph

12778 Commits

Author SHA1 Message Date
Matthias Fischer
d50a78220d Bug 12008 - Typo in 'proxy.cgi' leads to wrong path for 'basic_ldap_auth'
Hi,

This should fix https://bugzilla.ipfire.org/show_bug.cgi?id=12008

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-02 14:13:17 +00:00
Michael Tremer
3d01a8f1a6 core129: Ship updated ipset
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-02 14:12:18 +00:00
Erik Kapfer
46a073f1b5 ipset: Update to version 7.1
Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-02 14:11:19 +00:00
Michael Tremer
7c57cbe24b core129: Ship updated tar
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-02 14:11:02 +00:00
Matthias Fischer
6ca3265c41 tar: Update to 1.32
For details see:
http://git.savannah.gnu.org/cgit/tar.git/log/

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-02 14:10:39 +00:00
Michael Tremer
15c71234ca core129: Ship updated bind
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-02 14:10:21 +00:00
Matthias Fischer
ae45fb5193 bind: Update to 9.11.6
For details see:
http://ftp.isc.org/isc/bind9/9.11.6/RELEASE-NOTES-bind-9.11.6.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-02 14:10:03 +00:00
Michael Tremer
ae4ca7ef13 core129: Ship updated squid
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-02 14:09:00 +00:00
Matthias Fischer
aa88b2ef59 squid: Update to 4.6
For details see:
http://www.squid-cache.org/Versions/v4/changesets/

The 'configure'-option "--disable-ipv6" was removed, it is no longer necessary.

See:
https://lists.ipfire.org/pipermail/development/2016-April/002046.html

"The --disable-ipv6 build option is now deprecated.
...
Squid-3.5.7 and later will perform IPv6 availability tests on startup in
all builds.

- Where IPv6 is unavailable Squid will continue exactly as it would
have had the build option not been used.

These Squid can have the build option removed now."

The warning message concerning a "BCP 177 violation" while
starting 'squid' can be ignored.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-02 14:07:38 +00:00
Michael Tremer
e1982c695c spectre-meltdown-checker: New package
This makes it easy to install the script and check the vulnerability status
of a system IPFire is running on.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-02 13:24:44 +00:00
Michael Tremer
771c9b78ee binutils: Ship strings & readelf
This is needed by the spectre meltdown checker script

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-02 13:01:42 +00:00
Michael Tremer
d6af912c83 Update German translation
Mainly adds translation for new IPsec features

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-02 12:01:06 +00:00
Stéphane Pautrel
fb47c465e8 Update of French translation
- Several syntax / vocabulary improvements
- A 2 text missing in the French version
- Improvement of text offering a donation for the users

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-03-02 11:48:05 +00:00
Michael Tremer
ebda3cb93b Update openssl rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-27 03:52:26 +00:00
Michael Tremer
f907865389 core129: Ship updated OpenSSL
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-26 17:25:11 +00:00
Michael Tremer
7c85ff1362 openssl: Update to 1.1.1b
This is a bug fix only release

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-26 17:24:08 +00:00
Michael Tremer
2f7e8b59a6 core129: Ship updated credits.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-25 02:31:23 +00:00
Michael Tremer
f6a1d9e929 Update list of contributors
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-25 02:30:56 +00:00
Michael Tremer
97499aa8a3 core129: Ship updated OpenVPN
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-25 02:29:29 +00:00
Erik Kapfer
ab83c4876a OpenVPN: Update to version 2.4.7
Changelog can be found in here https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24 .

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-25 02:24:28 +00:00
Peter Müller
82b405615f update Tor to 0.3.5.8
See https://blog.torproject.org/new-releases-tor-0402-alpha-0358-03411-and-03312
for release notes.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-25 01:03:01 +00:00
Peter Müller
0675a66d83 update metrics links in Tor WebUI
https://atlas.torproject.org/ is deprecated in favour of
https://metrics.torproject.org/ by now.

Fixes #11781.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-25 01:02:59 +00:00
Michael Tremer
cc0104dce3 core129: Ship updated libgcrypt
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-25 00:58:04 +00:00
Peter Müller
b66c2faac2 libgcrypt: update to 1.8.4
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-25 00:57:18 +00:00
Michael Tremer
07b73b195c core129: Ship updated unbound
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-25 00:56:49 +00:00
Matthias Fischer
97a238f4bf unbound: Update to 1.9.0
For details see:
https://nlnetlabs.nl/svn/unbound/tags/release-1.9.0/doc/Changelog

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-25 00:56:05 +00:00
Michael Tremer
59db01c753 core129: Ship changes from ipsec branch
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-25 00:55:31 +00:00
Michael Tremer
50d1bbf0f5 Merge branch 'ipsec' into next 2019-02-25 00:48:08 +00:00
Michael Tremer
b5ef99df2c Start Core Update 129
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-25 00:47:28 +00:00
Michael Tremer
21eead8d17 Add script to search for missing libraries
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-24 11:45:55 +00:00
Michael Tremer
232c42e14d core128: Drop old openssl engines
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-24 04:06:52 +00:00
Michael Tremer
001481edf3 cups: Depends on bluetooth library
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-24 04:04:51 +00:00
Arne Fitzenreiter
1e1273df1d core128: add openldap to update
openldap was linked against old openssl lib

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-24 20:50:16 +01:00
Arne Fitzenreiter
ed971af3a4 core128: add sse2 openssl libs
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-24 17:04:44 +01:00
Arne Fitzenreiter
42e48984ad core128: apply local sshd config
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-24 10:55:49 +01:00
Arne Fitzenreiter
c09758302b kernel: update to 4.14.103
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-23 15:56:21 +01:00
Arne Fitzenreiter
8818db9a1c core128: finish core128
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-22 21:33:45 +01:00
Arne Fitzenreiter
173844d352 kernel: import cve-2019-8912 patch
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-22 21:20:57 +01:00
Arne Fitzenreiter
186402fbe8 core128: stop apache before replacing files
apache will not restart without stopped before
the files was replaced.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-22 19:26:08 +01:00
Arne Fitzenreiter
6957b699b3 kernel: apu leds: add more id's
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-22 18:02:45 +01:00
Arne Fitzenreiter
710153a89c partresize: add "apu1" for apus with new bios. 2019-02-22 18:01:18 +01:00
Arne Fitzenreiter
4a25ada199 core128: add kernel to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-21 19:23:05 +01:00
Arne Fitzenreiter
a2d49659f3 kernel: cleanup unused rpi patch
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-21 19:13:27 +01:00
Arne Fitzenreiter
8c8b4b2154 kernel: update to 4.14.102
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-21 10:52:38 +01:00
Arne Fitzenreiter
8f49959d70 partresize: enable serial console on PC Engines APU
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-19 15:26:41 +01:00
Arne Fitzenreiter
17872019ba kernel: update apu led patch for apu3 and 4
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-19 01:04:19 +01:00
Michael Tremer
9bc1760052 unbound: Drop certificates for local control connection
These are a cause of worry because they are sometimes generated with
an invalid timestamp and therefore render unbound being unusable.

There is no strong reason to use self-signed certificates for extra
security here.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-17 13:46:51 +00:00
Matthias Fischer
256070e92f Added 'CONFIG_X86_MSR=y for 'powertop' to i586 and x86_64 builds for fixing #11997
Triggered by:
https://forum.ipfire.org/viewtopic.php?f=69&t=22274

This - probably - fixes Bug #11997.

Needs testing on 64bit installations!

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-17 13:03:56 +00:00
Rob Brewer
34f4af78a8 Fix ownership of sendEmail script
The script used to be owned by a non-privileged user and it should
just be owned by root.root like any other binary.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-02-17 13:03:30 +00:00
Arne Fitzenreiter
56ec56a819 borgbackup: fix build on armv5tel
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-16 22:49:47 +01:00