Commit Graph

5919 Commits

Author SHA1 Message Date
Michael Tremer
475ae4b3db firewall: Suppress more warnings when initialising without GREEN
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 11:49:57 +01:00
Michael Tremer
a1c5ceeb34 nsswitch.conf: Use nss-myhostname to resolve local hostname
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-30 19:56:56 +01:00
Michael Tremer
4e9000b4d8 nss-myhostname: New package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-30 19:51:38 +01:00
Michael Tremer
0009de91e8 Ship default settings for language, theme, etc. in all images
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-27 09:59:47 +01:00
Michael Tremer
bd3bcb45d6 AWS: Import aws setup script
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-25 10:55:39 +01:00
Michael Tremer
563c502163 dhcp: Ship dhclient
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-25 10:54:36 +01:00
Michael Tremer
3483602929 ssh: Update default configuration
This patch removes an old switch to enable SSH 1 and
makes port 22 the default port.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-25 10:53:53 +01:00
Michael Tremer
1c21ebf8d5 Add initscript that automatically configures IPFire on AWS EC2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-21 16:45:40 +01:00
Michael Tremer
bc91a66281 core123: Ship updated iana-etc
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-19 11:34:38 +01:00
Erik Kapfer
823c6d270a libstatgrab: Update tp 0.91
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-19 11:33:51 +01:00
Michael Tremer
1feef6be7c core123: Ship /var/ipfire/backup/exclude
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-19 11:31:01 +01:00
Erik Kapfer
291bfda71e backup: Exclude OpenVPNs ovpn.cnf from backup
This fixes also bug #11773

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-19 11:30:40 +01:00
Michael Tremer
b1f4acadde core123: Ship updated gnupg
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-19 11:30:26 +01:00
Michael Tremer
28aacf565b Start Core Update 123
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-18 16:43:04 +01:00
Erik Kapfer
7ea54fee01 ipset: Update to 6.38
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-18 15:06:22 +01:00
Erik Kapfer
e64526f952 mtr: Update to 0.92
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-18 14:12:43 +01:00
Peter Müller
dec940e157 tzdata: update to 2018e
Some lines in the rootfile were sort incorrectly, this has been fixed.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-17 18:20:08 +01:00
Peter Müller
c069312790 coreutils: update to 8.29
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-17 18:20:07 +01:00
Peter Müller
ba05c8af80 libgcrypt: update to 1.8.2
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-17 18:20:06 +01:00
Peter Müller
770b458766 attr: fix rootfile
There was a man page missing in the attr rootfile.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-17 18:20:03 +01:00
Peter Müller
7a3772381f unbound: update to 1.7.2
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-17 18:19:56 +01:00
Michael Tremer
05b2d72588 core121: Create updater
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-06 14:03:07 +01:00
Michael Tremer
3da7324a72 aarch64: Rootfile update for Python 3
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-04 20:32:59 +01:00
Matthias Fischer
5bb288a244 dhcp: Update to 4.4.1
For details see:
https://kb.isc.org/article/AA-01571/82/DHCP-4.4.1-Release-Notes.html

This should close https://bugzilla.ipfire.org/show_bug.cgi?id=11697 and
https://bugzilla.ipfire.org/show_bug.cgi?id=11293.

This update required some changes as described in:
https://bugzilla.ipfire.org/show_bug.cgi?id=11697#c6

Thanks to all testers! ;-)

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-04 13:52:43 +01:00
Michael Tremer
d7ce23e5de aarch64: Fix rootfile for Python
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-04 12:15:26 +01:00
Michael Tremer
e91d99c8eb Import rootfiles for aarch64
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-05-31 12:10:23 +01:00
Arne Fitzenreiter
d96d00e9e9 intel-microcode: use symlink for i586 rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-05-31 07:05:37 +02:00
Jonatan Schlag
87b5f3711b Add Intel microcode updates
Fixes: #11590
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-05-29 16:42:51 +01:00
Arne Fitzenreiter
5b4f22798c xz: fix rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-05-27 19:14:50 +02:00
Arne Fitzenreiter
386b0268c0 xz: update rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-05-27 19:02:47 +02:00
Arne Fitzenreiter
6c9651f620 kernel: update to 4.14.43
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-05-24 07:40:22 +02:00
Matthias Fischer
eb1ff23333 nmap: Update to 7.70
For details see:
https://nmap.org/changelog.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-05-21 20:59:06 +01:00
Arne Fitzenreiter
b7a4672497 kernel: update to 4.14.41
Signen-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-05-17 07:45:06 +02:00
Arne Fitzenreiter
4dd7df2f82 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2018-05-16 14:09:42 +02:00
Arne Fitzenreiter
959b404ee0 u-boot: add Raspberry Pi 3 Model B+
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-05-16 10:43:58 +02:00
Arne Fitzenreiter
83a618fdcc kernel: arm-multi: enable AXP20x power regulator
this is needed for bananapi usb support

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-05-13 08:12:13 +00:00
Matthias Fischer
732de65751 Add NRPE initscript to rootfile
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-05-12 21:04:42 +01:00
Peter Müller
d8ef6a9537 display country data for remote IPs on ovpnmain.cgi
This makes debugging easier, especially when it comes to
GeoIP related firewall rules and database related issues
such as #11482.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-05-09 14:51:20 +01:00
Peter Müller
ea566f8485 fix aesthetic issues in remote.cgi and ship them
Fix some minor cosmetic issues on remote.cgi as well as a typo in
the language files ("sesstions" -> "sessions"). The changes are
listed in "filelists" for Core Update 121.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-05-09 14:49:48 +01:00
Alexander Marx
8b20ca2de4 BUG11559: firewall-lib
When creating firewallrules or using firewall groups,
it should be possible to select a single IpSec subnet if there is more than one.

This patch has neccessary changes for the firewall-lib. While the network name of the IpSec changes
on save (subnet is added to name) we need to split the name or normalise the field before using it.
Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Tested-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-05-09 14:48:42 +01:00
Matthias Fischer
6f18c08a3d cmake: Update to 3.11.1
For details see:
https://cmake.org/cmake/help/v3.11/release/3.11.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-05-07 11:34:01 +01:00
Matthias Fischer
ba5dccd008 unbound: Update to 1.7.1
For details see:
http://www.unbound.net/download.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-05-07 11:33:53 +01:00
Matthias Fischer
7f9b851d36 nagios_nrpe: Update for rootfile
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-05-07 11:32:40 +01:00
Michael Tremer
339ee7e9f6 core121: Ship updated libidn
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-05-05 20:44:52 +01:00
Michael Tremer
27279edffc core121: Ship updated pcre
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-05-05 20:44:20 +01:00
Matthias Fischer
0f458e4df0 libidn: Update to 1.34
For details see:
https://lists.gnu.org/archive/html/info-gnu/2018-04/msg00001.html

"* Version 1.34 (2018-03-31)

** libidn: Fix integer overflow in combine_hangul()
   Found by fuzzing.
** libidn: Fix integer overflow in punycode decoder
   Found by fuzzing, fix for the fix reported by Christian Weisgerber
** libidn: Fix performance issue in idna_to_unicode_internal()
   Found by fuzzing.
** libidn: Fix performance issue in stringprep functions.
   Found by fuzzing.
** libidn: Fix NULL pointer dereference in g_utf8_normalize()
   Found by fuzzing.
** libidn: Fix NULL pointer dereference in stringprep_ucs4_nfkc_normalize()
   Found by fuzzing.
** libidn: Increase performance of stringprep functions
   Found by fuzzing.
** testing: Add OSS-fuzz integration and regression testing
** build: Update gnulib files
** build: Modernize GTK-Doc build
** build: Fix parallel builds
** build: Add configure flag --disable-doc
** build: Add configure flag --enable-ubsan (enable UB Sanitizer)
** build: Add configure flag --enable-asan (enable Address Sanitizer)
** build: Fix compiler warnings
** build: Fix build for gcc-7
** i18n: Added Swedish translation.
   Thanks to Josef Andersson.
** API and ABI is backwards compatible with the previous version."

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-05-05 20:40:47 +01:00
Matthias Fischer
792bed3716 pcre: Update to 8.42
For details see:
http://www.pcre.org/original/changelog.txt

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-05-05 20:40:33 +01:00
Peter Müller
3a0695be8f update nagios_nrpe to 3.2.1
Update NRPE to 3.2.1, which fixes various security vulnerabilities
and bugs (changelog is available at:
https://github.com/NagiosEnterprises/nrpe/blob/master/CHANGELOG.md).

Due to changes in ./configure, some options such as initsystem (sysV)
need to be specified now. Also, simple "make" does not exist anymore
and must be replaced by "make all".

Rootfile information is now included which was missing in the
first version of this patch.

This fixes #11700 and partly addresses #11551.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-05-05 20:39:50 +01:00
Michael Tremer
e35c70ac23 core121: Ship update list of trusted CAs
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-05-05 20:39:50 +01:00
Peter Müller
3e0bab5e02 update ca-certificates CA bundle
Update the CA certificates list to what Mozilla NSS ships currently
(some Turktrust root CAs have been dropped).

The original file can be retrieved from:
https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-05-05 20:39:50 +01:00