webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-10 02:55:55 +02:00
Code Issues Packages Projects Releases Wiki Activity
11,257 Commits 2 Branches 1 Tag
ea4620fc4abefc4e8c06e2f0f01c10cc4e45e554
Commit Graph

5623 Commits

Author SHA1 Message Date
Michael Tremer
e5efd99893 core117: Ship updated sudo package 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-12-02 12:23:39 +00:00
Matthias Fischer
68a7683a35 mc: Update to 4.8.20 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-12-02 12:23:19 +00:00
Michael Tremer
421ba804aa Drop separate ffmpeg-libs package 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-12-02 12:22:00 +00:00
Michael Tremer
63bc6600f8 ffmpeg: Update to 3.4 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-12-01 15:42:47 +00:00
Michael Tremer
14d0e151b6 Update strongswan rootfile 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-30 16:09:48 +00:00
Michael Tremer
a679c56367 core117: Regenerate language cache 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-29 12:41:16 +00:00
Michael Tremer
3eaba41041 core117: Ship updated strongswan 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-29 12:40:53 +00:00
Michael Tremer
87ad0c591b strongswan: Update to 5.6.1 
Drop support for Padlock which is not in wide usage
any more and creates some rootfile trouble every time.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-29 12:39:04 +00:00
Michael Tremer
b0b6367633 core117: Ship updated netexternal.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-29 12:06:01 +00:00
Michael Tremer
2aec53386a core117: Ship updated ids.dat 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-29 12:04:05 +00:00
Michael Tremer
a7fd6293ef core117: Ship updated index.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-29 12:02:50 +00:00
Michael Tremer
877caaf5c6 core117: Ship updated netother.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-29 12:00:33 +00:00
Michael Tremer
545ddb9360 core117: Ship updated credits.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-29 11:59:08 +00:00
Michael Tremer
0545cba708 captive: Escape any special characters in title on PDF vouchers 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-29 11:57:55 +00:00
Michael Tremer
e5af95135b core117: Ship latest updates of syslogging 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 17:49:25 +00:00
Michael Tremer
f19f5e2366 ssl: Drop package which isn't maintained any more 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 17:30:56 +00:00
Michael Tremer
56720befc7 Drop vsftpd which isn't actively maintained any more 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 17:30:08 +00:00
Michael Tremer
d38edcf8b4 pound: Drop package which isn't very actively maintained any more 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 17:29:55 +00:00
Michael Tremer
aceb943b23 core117: Ship updated vpnmain.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 17:19:27 +00:00
Michael Tremer
d409286074 apache: Ensure that not everyone can read the keys 
This would become a security risk if anyone gets
shell access as any user to copy out the HTTPS keys.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-28 14:11:49 +00:00
Michael Tremer
beb256e0a0 core117: Reload apache for change of configuration 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-20 15:46:53 +00:00
Peter Müller
a57f4a9f5d disable SSL compression and session tickets in Apache 
Ensure that Apache never uses SSL compression, which is vulnerable,
and turn off session tickets since the might cause impact to PFS.

Based against next, supersedes first version.

Reported-by: Wolfgang Apolinarski <wolfgang.apolinarski@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-20 15:45:52 +00:00
Michael Tremer
f574f9ea02 Retire the IPFire CA 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-13 23:18:55 +00:00
Michael Tremer
82e295c23e core117: Ship updated CA bundle 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-13 23:18:00 +00:00
Peter Müller
2d735404b6 update ca-certificate CA bundle 
Update the CA certificate list to what Mozilla NSS ships currently.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-13 23:14:59 +00:00
Michael Tremer
0a38f7938a core117: Ship changes in pakfire 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-13 22:41:58 +00:00
Michael Tremer
b7a5076ca0 core117: Ship latest GeoIP changes 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-13 22:39:36 +00:00
Michael Tremer
00793c27c9 GeoIP: Add lookup function for convenience 
Instead of opening the database again for each lookup,
we will read it into memory on first use and every lookup
after that will be coming from cache.

Reviewed-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-13 22:37:19 +00:00
Michael Tremer
b1ad5b8b6c geoip-functions.pl: Fix typos and formatting 
Reviewed-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-13 22:37:03 +00:00
Michael Tremer
9bb4055367 captive portal: Require authorization before redirecting to proxy 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-11 12:48:54 +00:00
Michael Tremer
81f6550cfb core117: Ship updated routing.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-07 16:20:53 +00:00
Alexander Marx
3f3974b711 Network-functions: add check if variables are defined 
in function network_equal and network2bin a check for undefined variables were missing.
added them.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-07 16:19:23 +00:00
Michael Tremer
d6b92a118e core117: Ship updated network-functions.pl 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-07 16:16:50 +00:00
Alexander Marx
1047805dba BUG11466: Fix network_equal function 
The network_equal function only tested the subnet addresses of two given networks which lead to
errormessages saying "This is the green network"
The fix tests netwok and subnet IP's to fix this

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-07 16:16:18 +00:00
Michael Tremer
b3d2f86b87 core117: Ship changed files of the webUI 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-07 16:14:36 +00:00
Michael Tremer
bb3272dad3 Start Core Update 117 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-07 16:14:36 +00:00
Arne Fitzenreiter
5c8acc789b core116: stop apache before extracting updated files 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-03 16:40:23 +01:00
Arne Fitzenreiter
9843bb7b5a core116: replace apache restart by stop and start 
restart seems not work after replace apache...

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-03 14:28:22 +01:00
Arne Fitzenreiter
ae8e242bc1 core116: ship updated wget 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-03 14:22:19 +01:00
Arne Fitzenreiter
578171927d core116: set need_reboot flag 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-02 22:48:43 +01:00
Arne Fitzenreiter
ee328f16bf core116: ship openssh 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-02 22:46:47 +01:00
Arne Fitzenreiter
6744cd4d68 core116: fix openssl symlink 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-02 22:45:25 +01:00
Michael Tremer
4a510319ca openssl: Update to 1.0.2m 
* bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
* Malformed X.509 IPAddressFamily could cause OOB read (CVE-2017-3735)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-11-02 15:31:04 +00:00
Michael Tremer
7dadc13829 core116: Ship updated apache 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-28 13:36:27 +01:00
Wolfgang Apolinarski
bf24eeec20 Update to Apache 2.4.29 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-28 13:35:43 +01:00
Michael Tremer
63420a96b6 core116: Ship updated proxy.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-23 16:29:09 +01:00
Michael Tremer
b47d4bc1ea core116: Ship snort 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-23 16:26:39 +01:00
Matthias Fischer
49f7ee5d72 snort: Update to 2.9.11 
For details see:

Release notes:
https://snort.org/downloads/snort/release_notes_2.9.11.txt

Changelog:
https://snort.org/downloads/snort/changelog_2.9.11.txt

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-23 16:24:46 +01:00
Michael Tremer
cd8a7fc1eb Start Core Update 116 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-23 16:24:10 +01:00
Matthias Fischer
a809d7fa68 xz: Update to 5.2.3 
For details see:
https://git.tukaani.org/?p=xz.git;a=blob;f=NEWS;hb=HEAD

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-23 13:22:01 +01:00