webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-13 04:22:58 +02:00
Code Issues Packages Projects Releases Wiki Activity
11,571 Commits 2 Branches 1 Tag
f5b2d0a14a5e109948bc0d024ffcba63cffcab48
Commit Graph

11571 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Tremer
f5b2d0a14a OpenVPN: Drop Path MTU discovery settings 
These have to be dropped since the entire system does not
support Path MTU discovery any more. This should not have
any disadvantage on any tunnels since PMTU didn't really
work in the first place.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-04-09 11:32:07 +01:00
Michael Tremer
d6d058a56b core120: Update pakfire keystore 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-04-03 17:34:24 +01:00
Michael Tremer
6ae5439e5c core120: Ship changed pakfire files 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-04-03 17:33:04 +01:00
Michael Tremer
9a507db2cb pakfire: Store key material in own directory 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-04-03 17:31:50 +01:00
Michael Tremer
4d888e6854 curl: Drop old compatibility symlink 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-04-02 15:50:09 +01:00
Michael Tremer
e7cda9ac7f curl: Rootfile update 
Main library was missing

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-04-02 15:48:50 +01:00
Michael Tremer
0471d32b85 core120: Import new pakfire keys 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-04-02 15:46:40 +01:00
Michael Tremer
74e715a5a2 pakfire: Import old key, too 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-04-02 15:46:40 +01:00
Michael Tremer
397d3a8e15 pakfire: Rename new key to pakfire-2018.key 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-04-02 15:46:40 +01:00
Michael Tremer
3e29608f82 pakfire: Validate signatures when multiple are available 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-04-02 15:45:48 +01:00
Arne Fitzenreiter
36600cef36 Merge branch 'core119' into next 2018-03-30 09:35:28 +02:00
Arne Fitzenreiter
6a8b2ef977 core120: set pafire version to 120 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-30 09:25:06 +02:00
Michael Tremer
f7e9c14842 Rootfile update 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-29 13:49:44 +01:00
Michael Tremer
4b072d640e pakfire: Use upstream proxy for HTTPS, too 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-28 16:55:18 +01:00
Peter Müller
66a0f3646a use protocol defined in server-list.db for mirror communication 
For each mirror server, a protocol can be specified in the
server-list.db database. However, it was not used for the
actual URL query to a mirror before.

This might be useful for deploy HTTPS pinning for Pakfire.
If a mirror is known to support HTTPS, all queries to it
will be made with this protocol.

This saves some overhead if HTTPS is enforced on a mirror
via 301 redirects. To enable this, the server-list.db
needs to be adjusted.

The second version of this patch only handles protocols
HTTP and HTTPS, since we do not expect anything else here
at the moment.

Partially fixes #11661.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-28 16:42:21 +01:00
Michael Tremer
9f0999325d unbound: Fix crash on startup 
Zone names should not be terminated with a dot.

Fixes: #11689

Reported-by: Pontus Larsson <pontuslarsson51@yahoo.se>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-28 16:39:35 +01:00
Michael Tremer
d97f43b309 Rootfile update for curl 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-28 11:22:06 +01:00
Michael Tremer
d9e656bb82 asterisk: Ship documentation 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-27 20:56:31 +01:00
Michael Tremer
d3cd99830a fetchmail: Permit building without SSLv3 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-27 20:53:31 +01:00
Michael Tremer
76f422025f openssl: Update to 1.0.2o 
CVE-2018-0739 (OpenSSL advisory) [Moderate severity] 27 March 2018:

Constructed ASN.1 types with a recursive definition (such as can be
found in PKCS7) could eventually exceed the stack given malicious
input with excessive recursion. This could result in a Denial Of
Service attack. There are no such structures used within SSL/TLS
that come from untrusted sources so this is considered safe.
Reported by OSS-fuzz.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-27 16:05:07 +01:00
Michael Tremer
166ceacd6b openssl: Update to 1.1.0h 
CVE-2018-0739 (OpenSSL advisory) [Moderate severity] 27 March 2018:

Constructed ASN.1 types with a recursive definition (such as can be
found in PKCS7) could eventually exceed the stack given malicious
input with excessive recursion. This could result in a Denial Of
Service attack. There are no such structures used within SSL/TLS
that come from untrusted sources so this is considered safe.
Reported by OSS-fuzz.

This patch also entirely removes support for SSLv3. The patch to
disable it didn't apply and since nobody has been using this before,
we will not compile it into OpenSSL any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-27 16:03:44 +01:00
Michael Tremer
c98304604b core120: Ship updated QoS script and gnupg 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-26 19:04:41 +01:00
Matthias Fischer
be7878d5c9 Fix typo in 'makeqosscripts.pl' 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-26 19:03:30 +01:00
Peter Müller
dd48a7aac8 curl: update to 7.59.0 
Update curl to 7.59.0 which fixes a number of bugs and
some minor security issues.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-26 19:03:29 +01:00
Peter Müller
689fed340a gnupg: update to 1.4.22 
Update GnuPG to 1.4.22, which fixes some security vulnerabilities,
such as the memory side channel attack CVE-2017-7526.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-26 19:03:24 +01:00
Michael Tremer
dfdfafc7af core120: Ship updated vnstat 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-20 20:36:15 +00:00
Matthias Fischer
a05af852c5 vnstat: Update to 1.18 
For details see: https://humdi.net/vnstat/CHANGES

Changed "SaveInterval 5" to "SaveInterval 1" in '/etc/vnstat.conf', triggered by
https://forum.ipfire.org/viewtopic.php?f=22&t=20448 to avoid data loss with 1Gbit
connections and high traffic.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-20 20:35:30 +00:00
Michael Tremer
e7ea357cec Forgot to "git add" the new pakfire init script 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-20 11:08:58 +00:00
Michael Tremer
42deeb3b45 Revert "installer: Import the Pakfire key at install time" 
This reverts commit 7d995c9f56.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-19 19:45:24 +00:00
Michael Tremer
eb68e27dd2 pakfire: Import key when system boots up 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-19 19:44:50 +00:00
Michael Tremer
5876642d17 ffmpeg: Ship libraries correctly 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-19 18:07:49 +00:00
Matthias Fischer
27ef66c26c hdparm: Update to 9.55 
Changelogs against 9.53:

"hdparm-9.55:
	- added #include <sys/sysmacros.h> for major()/minor() macros

hdparm-9.54:
	- Partial revert of Jmicron changes, from Jan Friesse."

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-19 11:56:35 +00:00
Matthias Fischer
71e5a29c81 dmidecode 3.1: Added patch (Fix firmware version of TPM device) 
For details see:
http://git.savannah.gnu.org/cgit/dmidecode.git/commit/?id=174387405e98cd94c627832ae23abcb9be7e5623

"Both the operator (detected by clang, reported by Xorg) and the mask
for the minor firmware version field of TPM devices were wrong."

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-19 11:56:19 +00:00
Michael Tremer
35cdaa194a Fix python-m2crypto rootfile 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-19 11:52:44 +00:00
Michael Tremer
b2318b5e35 core120: Ship updated logrotate and restart unbound 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-18 13:51:38 +00:00
Matthias Fischer
9e9fdb39e6 unbound: Update to 1.7.0 
For details see:
http://www.unbound.net/download.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-18 13:49:40 +00:00
Matthias Fischer
399c2f9ccc logrotate: Update to 3.14.0 
For details see:
https://github.com/logrotate/logrotate/releases

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-18 13:44:27 +00:00
Matthias Fischer
4e316ae0a0 htop: Update to 2.1.0 
For details see:
https://hisham.hm/htop/index.php?page=downloads

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-18 13:44:25 +00:00
Matthias Fischer
9051f3c9d7 bind: Update to 9.11.3 
For details see:
http://ftp.isc.org/isc/bind9/9.11.3/RELEASE-NOTES-bind-9.11.3.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-18 13:44:19 +00:00
Matthias Fischer
1c1c1ac238 nano: Update to 2.9.4 
For details see:
https://www.nano-editor.org/news.php

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-18 13:44:14 +00:00
Matthias Fischer
8aeec0ba89 rsync: Update to 3.1.3 
For details see:
https://download.samba.org/pub/rsync/src/rsync-3.1.3-NEWS

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-18 13:44:12 +00:00
Erik Kapfer
e779b6bc7a PAM: Delete old lib and symlinks 
Core 119 update delivers an updated PAM whereby the libdir has been changed from /lib to /usr/lib
but the old libraries and symlinks are still presant. Since the system searches /lib before
/usr/lib , the old libs and symlinks are used which ends up in an `LIBPAM_EXTENSION_1.1' not found.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-18 13:44:04 +00:00
Erik Kapfer
cdc1a0e901 OpenVPN: Update to version 2.4.5 
This is primarily a maintenance release, with further improved OpenSSL 1.1 integration, several minor bug fixes and other minor improvements.
Further information can be found in here https://github.com/OpenVPN/openvpn/blob/release/2.4/Changes.rst#version-245 and
here https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24 .

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-16 14:38:02 +00:00
Michael Tremer
35b892b0dd pakfire: Drop old key import mechanism 
This was error-prone and allowed to potentially inject another
key.

Fixes: #11539
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-16 14:37:21 +00:00
Michael Tremer
7d995c9f56 installer: Import the Pakfire key at install time 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-16 14:33:42 +00:00
Michael Tremer
ceed3534e1 core120: Import new pakfire PGP key 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-16 14:28:17 +00:00
Michael Tremer
5e5c2e5413 Import new Pakfire Signing Key 
We will swap the key that we use to sign Pakfire packages
since the current one is considered outdated cryptography.

Fixes: #11539

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-16 14:26:07 +00:00
Stephan Feddersen
f0e9ed78a2 WIO: increment PAK_VER 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-09 15:39:56 +00:00
Stephan Feddersen via Development
c1fc92a9b8 WIO: Fix a problem with the Network-Table-Button 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-09 15:39:52 +00:00
Stephan Feddersen via Development
cc222a8e62 WIO: Fix some typos 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-03-09 15:39:50 +00:00