webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-13 04:22:58 +02:00
Code Issues Packages Projects Releases Wiki Activity
9,366 Commits 2 Branches 1 Tag
e01ff6d89b464d8bae069cb54beaccb55c992ca2
Commit Graph

2643 Commits

Author SHA1 Message Date
Michael Tremer
d08045eaa6 dnsmasq: Update to 2.75 
Rather severe regression in handling DNSSEC with CNAMEs.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-01 20:23:34 +01:00
Larsen
60f8111d53 squid-accounting: Fix typos in src/squid-accounting/acct.en.pl 
Fix typos in src/squid-accounting/acct.en.pl

Signed-off-by: Lars Schuhmacher <larsen007@web.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-07-29 16:20:37 +01:00
Michael Tremer
a722eae9dd ddns: Update to version 008 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-07-16 12:02:08 +02:00
Michael Tremer
b720e70288 cups: Update to 1.7.5 and fix for CVE-2015-1158 and CVE-2015-1159 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-07-14 17:15:00 +02:00
Michael Tremer
5929298ea1 pcre: Fix CVE-2015-5073 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-07-14 17:14:13 +02:00
Arne Fitzenreiter
c9ab30c5d3 kernel: fix trim dataloss on some solid state discs 
disable trim on SuperSSpeed S238
update queued trim blacklist from kernel 4.2rc1
(add Samsung SSD 8xx and some Crucial and Micron SSD)
 2015-07-13 22:00:57 +02:00
Michael Tremer
031becc0e2 pakfire: Resolve dependencies for upgraded packages 
When updating more than one package, only new dependencies
for the first one are resolved. The rest was ignored.

This patch fixes that.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-07-09 21:01:10 +02:00
Michael Tremer
5555c4b887 pakfire: Fix installing dependencies when updating packages 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-07-09 20:53:33 +02:00
Michael Tremer
8c8383e55e Remove dnsmasq patches 
These are not applied any more because dnsmasq was updated
to the latest release version.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-07-09 13:10:46 +02:00
Michael Tremer
d6c40f585d squid: Apply fix for Squid Advisory SQUID-2015:2 
Squid configured with cache_peer and operating on explicit proxy
traffic does not correctly handle CONNECT method peer responses.

The bug is important because it allows remote clients to bypass
security in an explicit gateway proxy.

However, the bug is exploitable only if you have configured
cache_peer to receive CONNECT requests.

  http://www.squid-cache.org/Advisories/SQUID-2015_2.txt

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-07-09 13:10:38 +02:00
Arne Fitzenreiter
c50d4f54b6 kernel: fix missing rootdev on xen installation. 2015-07-09 13:10:23 +02:00
Michael Tremer
15d5073d5b Merge branch 'next' 2015-07-07 10:42:56 +02:00
Michael Tremer
3a9a74d839 python: Cleanup patches 
I accidentially added a wrong patch and left in a reference
to a removed one.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-18 21:22:51 +02:00
Michael Tremer
67bc7ab222 python: Build libffi before python and link against it 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-18 21:04:19 +02:00
Michael Tremer
1ae0db1a74 Python: Update to 2.7.9 
This reverts commit 3d9b9dd30e.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-18 21:04:18 +02:00
Michael Tremer
dff6612b02 Merge remote-tracking branch 'mfischer/dnsmasq' into next 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Conflicts:
	lfs/dnsmasq
 2015-06-18 13:12:33 +02:00
Michael Tremer
697b4f04bf dnsmasq: Import patches from upstream 
These fix minor bugs and contain smaller improvements.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-18 12:38:38 +02:00
Matthias Fischer
348334b6eb Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into dnsmasq 2015-06-16 21:40:16 +02:00
Michael Tremer
c3e1954331 strongswan: Update to 5.3.2 
This release fixes a security issue filed under CVE-2015-4171.

https://www.strongswan.org/blog/2015/06/08/strongswan-vulnerability-(cve-2015-4171).html

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-12 17:15:51 +02:00
Michael Tremer
e36af11945 paks: Remove unintentional tab 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-10 21:12:04 +02:00
Arne Fitzenreiter
b65251c87d postfix: add backup/restore at package update. 2015-06-10 18:45:29 +02:00
Arne Fitzenreiter
8bd45f85ef cyrus-imapd: fix typo at backup include extraction. 2015-06-10 18:38:41 +02:00
Arne Fitzenreiter
3d9b9dd30e Revert "Python: Update to 2.7.9" 
This reverts commit 765423cebe.

build fails.
 2015-06-10 14:49:40 +02:00
Michael Tremer
41ed4795fe strongswan: Update to 5.3.1 
Fixed a denial-of-service and potential remote code execution vulnerability
triggered by IKEv1/IKEv2 messages that contain payloads for the respective
other IKE version. Such payload are treated specially since 5.2.2 but because
they were still identified by their original payload type they were used as
such in some places causing invalid function pointer dereferences.
The vulnerability has been registered as CVE-2015-3991.

https://www.strongswan.org/blog/2015/06/01/strongswan-vulnerability-%28cve-2015-3991%29.html

The increased buffer size has been fixed in bug #943 upstream
  https://wiki.strongswan.org/issues/943
 2015-06-04 19:26:44 +02:00
Michael Tremer
e528fb2c73 rebuildhosts: Don't break when RED not online 
The hosts file was not regenerated when RED was not connected
which should not be happening.

This patch checks if the file exists. If not, the gateway
line will not be written to /etc/hosts.
 2015-06-03 18:00:13 +02:00
Michael Tremer
bd33c33227 rebuildhosts: Fix SEGV when not online 
Fixes #10867
 2015-06-03 17:55:55 +02:00
Lars Schuhmacher
b29a624081 pakfire: Add information about probable causes when pakfire cannot connect 
Add information about probable causes when pakfire cannot connect. This
includes port 11371 TCP and incorrect date/time settings.

Signed-off-by: Lars Schuhmacher <larsen007@web.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-02 23:47:46 +02:00
Arne Fitzenreiter
e97d4c9896 Merge branch 'master' into next 
Conflicts:
	lfs/netsnmpd
 2015-05-31 20:08:58 +02:00
Arne Fitzenreiter
cb3c00e01e cyrus-imapd: add backupinclude. 2015-05-31 16:02:39 +02:00
Arne Fitzenreiter
79fac0111b remove unused net-snmp pakfiles. 2015-05-31 11:37:10 +02:00
Arne Fitzenreiter
648f200187 netsnmpd: extract backup include at update. 2015-05-31 11:35:34 +02:00
Michael Tremer
1292598207 Merge remote-tracking branch 'mfischer/python' into next 2015-05-26 14:30:27 +02:00
Arne Fitzenreiter
d6a15c76a7 Merge remote-tracking branch 'origin/core90' 2015-05-21 11:16:35 +02:00
Michael Tremer
888c41dea8 dnsmasq: Import patches from upstream 2015-05-20 23:39:28 +02:00
Michael Tremer
efbd3a9abc dnsmasq: Import patches from upstream 2015-05-20 23:35:38 +02:00
Arne Fitzenreiter
888726854f linux-pae: fix grub entry for xen hvm machines. 2015-05-20 11:00:12 +02:00
Matthias Fischer
bbe4537de3 dnsmasq: again - latest upstream patches 2015-05-17 00:39:39 +02:00
Arne Fitzenreiter
1af34aa810 pakfire: skip corrupt "meta-" file. 
This was created by a bug in dep resolve at upgrade.
 2015-05-16 13:00:12 +02:00
Michael Tremer
9f1f68f17a pakfire: fix dep resolve at upgrade. 2015-05-16 12:57:28 +02:00
Arne Fitzenreiter
7b9233935e core90: fix missing filename in metafile. 2015-05-13 19:44:15 +02:00
Matthias Fischer
7cbd533265 dnsmasq: import latest upstream patches 2015-05-09 21:21:34 +02:00
Michael Tremer
d81456730c strongswan: Use --wait option for iptables commands 2015-05-07 22:40:08 +02:00
Michael Tremer
a9600358d8 ipsecctrl: Use --wait switch for all iptables commands 2015-05-07 21:06:44 +02:00
Michael Tremer
d9e80e0b09 ipsecctrl: Remove unused code block 2015-05-07 21:05:50 +02:00
Arne Fitzenreiter
ad39b30985 qemu: update to 2.3.0 2015-05-06 19:12:06 +02:00
Michael Tremer
9acda8fa69 Merge remote-tracking branch 'amarx/BUG10834' into next 2015-05-06 16:57:55 +02:00
Alexander Marx
1d47c971e6 BUG10834: fixes ovpn-ccd-convert 
When restoring an old backup, all OpenVPN RW's get the dynamic network.
 2015-05-06 16:18:00 +02:00
Arne Fitzenreiter
5ea73f5660 dracut: add sdhci-pci module to initrd. 
fixes #10792
 2015-05-05 22:34:30 +02:00
Michael Tremer
afa91a4df5 fireinfo: Fix SEGV on QEMU without KVM 2015-05-04 16:02:39 +02:00
Alexander Marx
a8e3b15d77 squid-accounting: fix monthly dbmove funktion to put values in history table 2015-05-03 12:54:05 +02:00