]>
git.ipfire.org Git - ipfire-2.x.git/log
Michael Tremer [Thu, 28 Jan 2016 13:24:07 +0000 (14:24 +0100)]
Captive Portal: add c-wrapper captivectrl
This wrapper reads the captive settings and clients and sets the
firewall access rules. It is called every time the config changed or
everytime that a client changes. Also this wrapper is later called once
hourly to flush the chains and rebuild rules for actual clients.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Michael Tremer [Mon, 4 Sep 2017 12:09:43 +0000 (13:09 +0100)]
core114: Update apache configuration of all add-ons that have one
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 4 Sep 2017 11:58:17 +0000 (12:58 +0100)]
core114: Ship updated apache2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 4 Sep 2017 11:56:42 +0000 (12:56 +0100)]
apache2: Download source from IPFire servers
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Wolfgang Apolinarski [Wed, 23 Aug 2017 19:25:25 +0000 (21:25 +0200)]
Update to apache 2.4.27
- Updated to apache 2.4
- Updated the htpasswd generation to use the more secure bcrypt algorithm
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Wolfgang Apolinarski [Wed, 23 Aug 2017 19:24:47 +0000 (21:24 +0200)]
apr and aprutil: Added as requirement for apache 2.4
- APR 1.6.2 is a requirement for building apache httpd 2.4
- APR-Util 1.6.0 is a requirement for building apache httpd 2.4
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Sun, 3 Sep 2017 14:14:53 +0000 (16:14 +0200)]
fix WebUI system information leak
Disable unauthenticated access to cgi-bin/credits.cgi. The page
leaks the currently installed version of IPFire and the hardware
architecture.
Both information might make a successful attack much easier.
This issue can be reproduced by accessing https://[IPFire-IP]:444/cgi-bin/credits.cgi
and accepting a SSL certificate warning (if any).
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Sun, 3 Sep 2017 14:22:32 +0000 (16:22 +0200)]
update german translations
- Unify translations of various terms.
- Unify translations of week days.
- Correct some typos and grammar errors.
- Modify some phrases which were not fully translated.
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Wed, 30 Aug 2017 17:03:25 +0000 (19:03 +0200)]
strongswan: rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 30 Aug 2017 17:02:08 +0000 (19:02 +0200)]
core114: add unbound initskript to updater.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 30 Aug 2017 08:35:32 +0000 (10:35 +0200)]
unbound: flush negative and bogus at update forwarders
this resolves problems that negative answers from
a forwarder was still used after setting new servers.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 30 Aug 2017 08:32:44 +0000 (10:32 +0200)]
unbound: run time fix also after update forwarder
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Wed, 23 Aug 2017 19:03:21 +0000 (20:03 +0100)]
strongswan: Update to 5.6.0
Fixes CVE-2017-11185:
Fixed a DoS vulnerability in the gmp plugin that was caused by insufficient input validation
when verifying RSA signatures, which requires decryption with the operation m^e mod n,
where m is the signature, and e and n are the exponent and modulus of the public key.
The value m is an integer between 0 and n-1, however, the gmp plugin did not verify this.
So if m equals n the calculation results in 0, in which case mpz_export() returns NULL.
This result wasn't handled properly causing a null-pointer dereference.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 23 Aug 2017 10:33:41 +0000 (11:33 +0100)]
core114: Ship updated squid
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Mon, 21 Aug 2017 16:54:25 +0000 (18:54 +0200)]
squid: Update to 3.5.27
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 23 Aug 2017 10:31:56 +0000 (11:31 +0100)]
core114: Ship updated gnutls
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Wed, 23 Aug 2017 01:54:03 +0000 (03:54 +0200)]
gnutls: Update to 3.5.15
For details see:
https://lists.gnupg.org/pipermail/gnutls-devel/2017-August/008483.html
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 23 Aug 2017 10:29:55 +0000 (11:29 +0100)]
core114: Ship updated unbound
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Tue, 22 Aug 2017 19:06:19 +0000 (21:06 +0200)]
unbound: Update to 1.6.5
Changelog:
"21 Aug 2017: Wouter
- Fix install of trust anchor when two anchors are present, makes both
valid. Checks hash of DS but not signature of new key. This fixes installs between
sep11 and oct11 2017."
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 21 Aug 2017 11:21:45 +0000 (12:21 +0100)]
core114: Ship updated hdparm
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 21 Aug 2017 11:21:14 +0000 (12:21 +0100)]
Start Core Update 114
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sat, 19 Aug 2017 10:59:59 +0000 (12:59 +0200)]
hdparm: Update to 9.52
Changes from 9.50 to 9.52:
- add support for Jmicron USB-SATA bridges, courtesy Jan Friesse <jfriesse@gmail.com>.
- New --security-prompt-for-password flag for use with the various --security- actions.
- Makefile tweak from Mike Frysinger.
- fix spelling/typos in man page and "removable", courtesy of Alex Mestiashvili.
- fix spelling/typos in --sanitize-crypto-scramble, courtesy of Tom Yan.
- fix NULL password handling in --security-unlock, courtesy of Tom Yan.
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Thu, 17 Aug 2017 22:28:47 +0000 (00:28 +0200)]
close core113
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 17 Aug 2017 13:00:38 +0000 (15:00 +0200)]
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Thu, 17 Aug 2017 12:25:42 +0000 (14:25 +0200)]
unbound: update dns hints and keys
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Thu, 17 Aug 2017 12:14:53 +0000 (13:14 +0100)]
core113: Ship openvpn which has been missing in core112 updater
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Thu, 17 Aug 2017 08:18:44 +0000 (10:18 +0200)]
rootfile updates: nano, misc-progs
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 16 Aug 2017 18:12:45 +0000 (20:12 +0200)]
core113: add strongswan-padlock to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Wed, 16 Aug 2017 12:47:33 +0000 (13:47 +0100)]
make.sh: Actually build iftop
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 16 Aug 2017 10:32:43 +0000 (11:32 +0100)]
core113: Ship packages that have not been shipped with 112
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 15 Aug 2017 19:23:17 +0000 (20:23 +0100)]
libgcrypt: Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Tue, 15 Aug 2017 18:20:16 +0000 (20:20 +0200)]
unbound/ntp: move not working DNS fallback from ntp to unbound initskript
the ntp initskript will only run at first connection try. If this fails
and the connection can established later DNS will not work if the clock
is too far away.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Tue, 15 Aug 2017 18:08:22 +0000 (20:08 +0200)]
serial-console: remove baudrate from inittab
new versions of agetty missinterpretes the baudrate and set it as TERM
without the parameter agetty use the previous rate that was set by the
kernel via console=XXX,Baudrate parameter.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Stephan Feddersen [Tue, 15 Aug 2017 13:17:35 +0000 (15:17 +0200)]
WIO: wio.cgi edit how to get the ips for the networks
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 15 Aug 2017 11:02:12 +0000 (12:02 +0100)]
logrotate: Fix source tarball checksum
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 15 Aug 2017 10:58:38 +0000 (11:58 +0100)]
core113: Add latest packages
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Erik Kapfer [Thu, 10 Aug 2017 13:03:31 +0000 (15:03 +0200)]
iftop: This is an Update release to ver. 1.0pre4
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Mon, 14 Aug 2017 16:30:34 +0000 (18:30 +0200)]
logrotate: Update to 3.12.3
For details see:
https://github.com/logrotate/logrotate/releases
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Mon, 14 Aug 2017 16:27:29 +0000 (18:27 +0200)]
nano: Update to 2.8.6
For details see:
https://www.nano-editor.org/news.php
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Mon, 14 Aug 2017 16:22:57 +0000 (18:22 +0200)]
pcre: Update to 8.41
For details see:
http://www.pcre.org/original/changelog.txt
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Mon, 14 Aug 2017 16:17:20 +0000 (18:17 +0200)]
bind: Update to 9.11.2
For details see:
https://ftp.isc.org/isc/bind9/9.11.2/RELEASE-NOTES-bind-9.11.2.html
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Mon, 14 Aug 2017 16:06:52 +0000 (18:06 +0200)]
gnutls: Update to 3.5.14
For details see:
https://lists.gnupg.org/pipermail/gnutls-devel/2017-May/008427.html
https://lists.gnupg.org/pipermail/gnutls-devel/2017-June/008446.html
https://lists.gnupg.org/pipermail/gnutls-devel/2017-July/008469.html
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sun, 13 Aug 2017 14:03:34 +0000 (16:03 +0200)]
libgcrypt: Update to 1.8.0
Changes (see: https://gnupg.org/download/release_notes.html):
"gpg: Sending very large keys to the keyservers works again.
gpg: Validity strings in key listings are now again translatable.
gpg: Emit FAILURE status lines to help GPGME.
gpg: Does not anymore link to Libksba to reduce dependencies.
gpgsm: Export of secret keys via Assuan is now possible.
agent: Raise the maximum passphrase length from 100 to 255 bytes.
agent: Fix regression using EdDSA keys with ssh.
Does not anymore use a build timestamp by default.
The fallback encoding for broken locale settings changed from Latin-1 to UTF-8.
Many code cleanups and improved internal documentation.
Various minor bug fixes."
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sun, 13 Aug 2017 13:56:28 +0000 (15:56 +0200)]
hostapd: Update to 2.6
For details see:
https://w1.fi/cgit/hostap/plain/hostapd/ChangeLog
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sun, 13 Aug 2017 13:30:01 +0000 (15:30 +0200)]
unbound: Update to 1.6.4
Hi, ("...back in town...") ;-)
For details see:
http://www.unbound.net/download.html
I had to remove the patch file: it wouldn't apply.
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sun, 13 Aug 2017 13:37:29 +0000 (15:37 +0200)]
tor: Update to 0.3.0.10
Fixes CVE-2017-0377 and others.
For details see:
https://gitweb.torproject.org/tor.git/plain/ReleaseNotes?id=tor-0.3.0.10
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sun, 13 Aug 2017 13:41:07 +0000 (15:41 +0200)]
squid 3.5.26: latest patches (14169-14182)
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Stephan Feddersen [Tue, 18 Jul 2017 19:26:34 +0000 (21:26 +0200)]
WIO: minor changes
correct typo in wio.en.pl language file
add button in wio.cgi to change to systems logs (section wio)
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Stephan Feddersen [Tue, 18 Jul 2017 18:26:17 +0000 (20:26 +0200)]
WIO: patch log.dat to show wio logs
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Stephan Feddersen [Fri, 14 Jul 2017 10:26:55 +0000 (12:26 +0200)]
WIO: first addon release v1.3.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 15 Aug 2017 10:44:50 +0000 (11:44 +0100)]
Start Core Update 113
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Tue, 11 Jul 2017 03:59:18 +0000 (05:59 +0200)]
util-linux: update rootfile (armv5tel)
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sat, 8 Jul 2017 15:23:00 +0000 (17:23 +0200)]
ncftp: drop addon package
it is outdated and will not build with new gcc/glibc
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sat, 8 Jul 2017 13:31:15 +0000 (15:31 +0200)]
make-functions: move MAKETUNING before make
this is needed to edit MAKTUNING in the lfs file
which is used by boost and cmake to build on
machines with less than 4GB Memory.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Fri, 7 Jul 2017 09:57:41 +0000 (11:57 +0200)]
close core112
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Fri, 7 Jul 2017 08:14:37 +0000 (10:14 +0200)]
core112: reload init to allow correct unmount at reboot
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Fri, 7 Jul 2017 08:12:28 +0000 (10:12 +0200)]
toolchain: filter -mfpu from CFLAGS for first pass
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 6 Jul 2017 16:37:44 +0000 (18:37 +0200)]
flash-images: remove wrong 2nd partition
the new sfdisk seems not able to skip a partition anymore.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 6 Jul 2017 06:34:50 +0000 (08:34 +0200)]
bump TOOLCHAIN version
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 6 Jul 2017 06:32:13 +0000 (08:32 +0200)]
flash-images: remove unsupported sfdisk switches
New util-linux sfdisk does not have -D and -H / -S
switches.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Wed, 5 Jul 2017 16:23:19 +0000 (17:23 +0100)]
core112: Ship updated util-linux
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Tue, 6 Jun 2017 08:38:21 +0000 (10:38 +0200)]
util-linux: update to 2.28.2
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Reviewed-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Wed, 5 Jul 2017 15:42:21 +0000 (17:42 +0200)]
grub: ignore missing .symtab in modules
old binutis add an empty .symtab section at stripping
and grub check that this exists also on modules that export
no symbols.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 5 Jul 2017 06:05:13 +0000 (08:05 +0200)]
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Wed, 5 Jul 2017 06:03:46 +0000 (08:03 +0200)]
checknewlog: skip cmake because log contain space in filenames
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Tue, 4 Jul 2017 10:44:42 +0000 (12:44 +0200)]
this grep fails on debian and the output is useless II
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Mon, 3 Jul 2017 18:10:39 +0000 (19:10 +0100)]
Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 3 Jul 2017 18:08:40 +0000 (19:08 +0100)]
Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 1 Jul 2017 11:45:16 +0000 (12:45 +0100)]
Archive Core Updates 110 + 111
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 1 Jul 2017 11:44:48 +0000 (12:44 +0100)]
Package Core Update 112
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 1 Jul 2017 11:34:00 +0000 (12:34 +0100)]
Rootfile update for armv5tel toolchain
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 26 Jun 2017 09:17:56 +0000 (10:17 +0100)]
Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Fri, 16 Oct 2015 21:53:31 +0000 (23:53 +0200)]
ipfire-netboot: Update to version v1.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sun, 25 Jun 2017 14:44:33 +0000 (15:44 +0100)]
unbound: Fix crash of daemon at startup
getentropy() cannot be used on our platform.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 22 Jun 2017 17:29:59 +0000 (18:29 +0100)]
Drop architecture-dependent and unused package fwhits
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 22 Jun 2017 15:00:48 +0000 (16:00 +0100)]
directfb: Fix compilation on ARM
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 22 Jun 2017 09:43:49 +0000 (10:43 +0100)]
openvpn: Update to 2.3.17
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Wolfgang Apolinarski [Sun, 18 Jun 2017 15:06:01 +0000 (17:06 +0200)]
Unbound - rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Thu, 15 Jun 2017 05:57:20 +0000 (07:57 +0200)]
make.sh remove double build pcre
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 15 Jun 2017 10:16:58 +0000 (11:16 +0100)]
boost: Disable all libraries that don't build on armv7hl
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 8 Jun 2017 14:43:01 +0000 (15:43 +0100)]
boost: Properly use CFLAGS & CXXFLAGS
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Tue, 20 Jun 2017 04:12:45 +0000 (06:12 +0200)]
kernel: fix amba modules build with gcc6
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sun, 18 Jun 2017 08:28:20 +0000 (10:28 +0200)]
kernel: rpi build fix
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 15 Jun 2017 16:40:32 +0000 (18:40 +0200)]
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Michael Tremer [Thu, 15 Jun 2017 10:45:19 +0000 (11:45 +0100)]
glibc: Don't use locale-archive
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 15 Jun 2017 10:17:35 +0000 (11:17 +0100)]
unbound: Update to 1.6.3
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Thu, 8 Jun 2017 20:19:16 +0000 (22:19 +0200)]
cmake: update to 3.8.1
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Fri, 9 Jun 2017 08:31:04 +0000 (10:31 +0200)]
tor: Update to 3.0.8
For details see:
https://gitweb.torproject.org/tor.git/plain/ReleaseNotes?id=tor-0.3.0.8
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sat, 10 Jun 2017 09:50:45 +0000 (11:50 +0200)]
netcat 0.7.1: Update for rootfile
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sat, 10 Jun 2017 09:47:21 +0000 (11:47 +0200)]
monit: Update to 5.23.0
For details see:
https://mmonit.com/monit/changes/
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Fri, 9 Jun 2017 17:13:48 +0000 (19:13 +0200)]
libxml2: update to 2.9.4
http://xmlsoft.org/news.html
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Fri, 9 Jun 2017 17:10:03 +0000 (19:10 +0200)]
gnutls: update to 3.5.11
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Fri, 9 Jun 2017 16:39:03 +0000 (18:39 +0200)]
bird: update to 1.6.3
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 8 Jun 2017 14:23:20 +0000 (15:23 +0100)]
Revert "Drop paxctl"
This reverts commit
ae666b0c234f9204b864292e044a0c8d182e58d2 .
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Fri, 2 Jun 2017 21:41:15 +0000 (23:41 +0200)]
squid: Update to 3.5.26
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Thu, 1 Jun 2017 16:32:02 +0000 (18:32 +0200)]
squid 3.5.25: latest patches (14155-14167)
For details see:
http://www.squid-cache.org/Versions/v3/3.5/changesets/
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Thu, 8 Jun 2017 08:26:56 +0000 (10:26 +0200)]
Dropped 'dnsmasq' from System log
I think we don't need this anymore...
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Thu, 8 Jun 2017 07:34:11 +0000 (09:34 +0200)]
tmux: Update to 2.5
For details see:
https://raw.githubusercontent.com/tmux/tmux/2.5/CHANGES
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Alexander Marx [Thu, 8 Jun 2017 06:23:52 +0000 (08:23 +0200)]
Delete unused function from fwhosts.cgi
This function is not used by any other script.
Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 14 Jun 2017 11:58:12 +0000 (12:58 +0100)]
ids.cgi: Fix remote command execution vulnerability
The OINKCODE variable was only validated for proper input
when the Save button was clicked.
Did the user demand to download new rules instead, the
content of that variable was not being validated (again)
and was passed to wget on the shell.
This was done with privileges of the "nobody" user.
Fixes #11401
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>