]>
git.ipfire.org Git - ipfire-2.x.git/log
Michael Tremer [Fri, 8 Mar 2019 10:04:28 +0000 (10:04 +0000)]
zabbix_agent: Create /var/run/zabbix in initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Fri, 8 Mar 2019 09:58:56 +0000 (09:58 +0000)]
zabbix_agent: Ensure that the user exists on all systems
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Alexander Koch [Wed, 13 Feb 2019 23:06:19 +0000 (00:06 +0100)]
zabbix_agentd: New addon
New addon for monitoring IPFire by Zabbix Monitoring (https://www.zabbix.com/features).
See https://forum.ipfire.org/viewtopic.php?f=52&t=22039 and https://lists.ipfire.org/pipermail/development/2019-February/005324.html for further details.
Best regards,
Alex
Signed-off-by: Alexander Koch <ipfire@starkstromkonsument.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Erik Kapfer [Fri, 8 Mar 2019 04:51:55 +0000 (05:51 +0100)]
iptables: Commented legacy ip(6)tables entries from ROOTFILE
Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 7 Mar 2019 11:27:19 +0000 (11:27 +0000)]
installer: Download ISO via HTTPS
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 7 Mar 2019 10:29:31 +0000 (10:29 +0000)]
Revert "boost: Build with -O2 only"
This reverts commit
9ff5b381eb8a4e129978c34f969e312c302ea7b1 .
Boost wants to build with -O3 no matter what
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 5 Mar 2019 16:58:29 +0000 (16:58 +0000)]
unbound: Mark domains as insecure from DNS forwarding
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 5 Mar 2019 16:10:17 +0000 (16:10 +0000)]
DNS Forwarding: Add UI to Allow to disable DNSSEC for a zone
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 5 Mar 2019 15:25:36 +0000 (15:25 +0000)]
Merge branch 'ipsec-on-demand' into next
Michael Tremer [Tue, 5 Mar 2019 15:24:19 +0000 (15:24 +0000)]
vpnmain.cgi: Make on-demand mode default for IPsec VPNs
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 5 Mar 2019 15:23:33 +0000 (15:23 +0000)]
vpnmain.cgi: Carry over START_ACTION attribute correctly
This setting was not carried correctly and therefore the default was ignored.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 4 Mar 2019 17:21:15 +0000 (17:21 +0000)]
make.sh: Fit more processes into memory
Because we have a good way to limit processes now, we should
increase the default size a little bit
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 4 Mar 2019 17:20:52 +0000 (17:20 +0000)]
boost: Build with -O2 only
This should increase build speed
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 4 Mar 2019 11:57:22 +0000 (11:57 +0000)]
Config: Builds don't seem to like the space
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 4 Mar 2019 11:52:34 +0000 (11:52 +0000)]
perl: Limit build to 23 parallel processes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 4 Mar 2019 11:51:08 +0000 (11:51 +0000)]
make.sh: Introduce MAX_PARALLELISM
This will now adjust MAKETUNING to not launch more processes
than MAX_PARALLELISM. Handy to limit builds that use a lot of memory.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 4 Mar 2019 11:45:30 +0000 (11:45 +0000)]
make.sh: Drop MAKETUNING
This is now set in lfs/Config
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 4 Mar 2019 11:43:47 +0000 (11:43 +0000)]
make.sh: Introduce DEFAULT_PARALLELISM
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 4 Mar 2019 11:38:38 +0000 (11:38 +0000)]
make.sh: Use variable instead of calling system_processors function again
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 4 Mar 2019 11:35:15 +0000 (11:35 +0000)]
make.sh: Rename HOST_MEM to SYSTEM_MEMORY
We had two variables holding the same data
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 4 Mar 2019 11:33:50 +0000 (11:33 +0000)]
make.sh: Pass number of processors and total memory so that we can adjust MAKETUNING
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Wolfgang Apolinarski [Wed, 20 Feb 2019 19:18:06 +0000 (20:18 +0100)]
Parallelized build for several packages
Added $(MAKETUNING) to several packages.
Marked packages that do not support parallel build.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 4 Mar 2019 09:25:13 +0000 (09:25 +0000)]
core129: Ship wpa_supplicant
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Tue, 5 Mar 2019 18:12:52 +0000 (19:12 +0100)]
wpa_supplicant: Update to 2.7
For details see:
https://w1.fi/cgit/hostap/plain/wpa_supplicant/ChangeLog
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Tue, 5 Mar 2019 18:12:51 +0000 (19:12 +0100)]
hostapd: Update to 2.7
For details see:
https://w1.fi/cgit/hostap/plain/hostapd/ChangeLog
This patch sticks to 'wpa_supplicant: Update to 2.7'.
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sun, 3 Mar 2019 13:33:52 +0000 (13:33 +0000)]
netsnmp: Fix rootfile to build on other architectures
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Erik Kapfer [Wed, 27 Feb 2019 05:03:48 +0000 (06:03 +0100)]
netsnmpd: OpenSSL patch is incl. in new version
Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Erik Kapfer [Wed, 27 Feb 2019 05:03:47 +0000 (06:03 +0100)]
netsnmpd: Update to version 5.8
Overview of the changes can be found in here https://sourceforge.net/p/net-snmp/mailman/message/
36386084 / .
Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Erik Kapfer [Sun, 3 Mar 2019 08:09:18 +0000 (09:09 +0100)]
iptables: Update to 1.8.2
netfilter-layer7 has also been updated to v2.23 .
Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Stefan Schantl [Sun, 3 Mar 2019 14:10:02 +0000 (15:10 +0100)]
libcap-ng: New package
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Sat, 2 Mar 2019 17:18:39 +0000 (17:18 +0000)]
suricata: Drop parsers I have never heard of
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Sat, 2 Mar 2019 17:18:38 +0000 (17:18 +0000)]
suricata: Configure HTTP decoder
This will now scan all request and response bodies where possible
and use up to 256MB of RAM
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Sat, 2 Mar 2019 17:18:37 +0000 (17:18 +0000)]
Revert "Suricata: detect DNS events on port 853, too"
This reverts commit
ad99f959e2b83dd9f1275c1d385140271c8926ae .
It does not make any sense to try to decode the TLS connection
with the DNS decoder.
Therefore should 853 (TCP only) be added to the TLS decoder.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Sat, 2 Mar 2019 14:55:04 +0000 (14:55 +0000)]
Unpack intel microcode before initramfs images are being built
Previously, the microcode updates were not packaged in the shipped
initramfs images which causes that Intel processors are still running
on outdated microcode.
This patch moves intel-microcode before we build the initramfs images.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 2 Mar 2019 14:14:14 +0000 (14:14 +0000)]
core129: Ship updated proxy.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sun, 3 Mar 2019 08:37:01 +0000 (09:37 +0100)]
Bug 12008 - Typo in 'proxy.cgi' leads to wrong path for 'basic_ldap_auth'
Hi,
This should fix https://bugzilla.ipfire.org/show_bug.cgi?id=12008
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 2 Mar 2019 14:12:18 +0000 (14:12 +0000)]
core129: Ship updated ipset
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Erik Kapfer [Sun, 3 Mar 2019 08:22:50 +0000 (09:22 +0100)]
ipset: Update to version 7.1
Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 2 Mar 2019 14:11:02 +0000 (14:11 +0000)]
core129: Ship updated tar
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sat, 2 Mar 2019 20:24:15 +0000 (21:24 +0100)]
tar: Update to 1.32
For details see:
http://git.savannah.gnu.org/cgit/tar.git/log/
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 2 Mar 2019 14:10:21 +0000 (14:10 +0000)]
core129: Ship updated bind
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sat, 2 Mar 2019 20:19:03 +0000 (21:19 +0100)]
bind: Update to 9.11.6
For details see:
http://ftp.isc.org/isc/bind9/9.11.6/RELEASE-NOTES-bind-9.11.6.html
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 2 Mar 2019 14:09:00 +0000 (14:09 +0000)]
core129: Ship updated squid
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sat, 2 Mar 2019 20:08:06 +0000 (21:08 +0100)]
squid: Update to 4.6
For details see:
http://www.squid-cache.org/Versions/v4/changesets/
The 'configure'-option "--disable-ipv6" was removed, it is no longer necessary.
See:
https://lists.ipfire.org/pipermail/development/2016-April/002046.html
"The --disable-ipv6 build option is now deprecated.
...
Squid-3.5.7 and later will perform IPv6 availability tests on startup in
all builds.
- Where IPv6 is unavailable Squid will continue exactly as it would
have had the build option not been used.
These Squid can have the build option removed now."
The warning message concerning a "BCP 177 violation" while
starting 'squid' can be ignored.
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 2 Mar 2019 13:24:44 +0000 (13:24 +0000)]
spectre-meltdown-checker: New package
This makes it easy to install the script and check the vulnerability status
of a system IPFire is running on.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 2 Mar 2019 13:01:42 +0000 (13:01 +0000)]
binutils: Ship strings & readelf
This is needed by the spectre meltdown checker script
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 2 Mar 2019 12:01:06 +0000 (12:01 +0000)]
Update German translation
Mainly adds translation for new IPsec features
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Stéphane Pautrel [Sat, 2 Mar 2019 11:48:05 +0000 (11:48 +0000)]
Update of French translation
- Several syntax / vocabulary improvements
- A 2 text missing in the French version
- Improvement of text offering a donation for the users
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 28 Feb 2019 19:37:38 +0000 (19:37 +0000)]
suricata: Use highest bit to mark packets
We are using the netfilter MARK in IPsec & QoS and this
is causing conflicts.
Therefore, we use the highest bit in the IPS chain now
and clear it afterwards because we do not really care about
this after the packets have been passed through suricata.
Then, no other application has to worry about suricata.
Fixes: #12010
Signed-off-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Thu, 28 Feb 2019 14:28:25 +0000 (14:28 +0000)]
suricata: Fix syntax error
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Thu, 28 Feb 2019 14:28:24 +0000 (14:28 +0000)]
suricata: Start capture first and then load rules
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Thu, 28 Feb 2019 14:28:23 +0000 (14:28 +0000)]
suricata: Disable decoding for Teredo
This decoder is not very accurate and Teredo has been
disabled in Windows by default. Nobody will use this.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Thu, 28 Feb 2019 14:28:22 +0000 (14:28 +0000)]
suricata: Increase memory size for the stream engine
This change also ensures that suricata has a decent number
of streams preallocated to be able to handle any bursts in traffic.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Thu, 28 Feb 2019 14:28:21 +0000 (14:28 +0000)]
suricata: Log to syslog like a normal process
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Thu, 28 Feb 2019 14:28:20 +0000 (14:28 +0000)]
suricata: Use up to 256MB of RAM for the flow cache
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Thu, 28 Feb 2019 14:28:19 +0000 (14:28 +0000)]
suricata: Use 64MB of RAM for defragmentation
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Thu, 28 Feb 2019 14:28:18 +0000 (14:28 +0000)]
suricata: Use the correct path for the magic database
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Thu, 28 Feb 2019 14:28:17 +0000 (14:28 +0000)]
suricata: Log to syslog
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Thu, 28 Feb 2019 14:28:16 +0000 (14:28 +0000)]
suricata: We do not use any IP reputation lists
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Thu, 28 Feb 2019 14:28:14 +0000 (14:28 +0000)]
suricata: Allow 32MB of RAM for DNS decoding
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Thu, 28 Feb 2019 14:28:12 +0000 (14:28 +0000)]
suricata: Drop sections that require Rust
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Thu, 28 Feb 2019 14:28:11 +0000 (14:28 +0000)]
suricata: Drop some commented stuff from configuration
The file is really large and we should not carry anything we will
never use.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Thu, 28 Feb 2019 14:28:10 +0000 (14:28 +0000)]
suricata: Drop profiling section from configuration
This is not compiled in as it slows down detection and is
only really useful for debugging
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Thu, 28 Feb 2019 14:28:09 +0000 (14:28 +0000)]
suricata: Set detection profile to high
This will merge rules more aggressively so that the engine
is only processing those that can actually match.
Memory is cheap. People with little memory should not run
suricata anyways.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Thu, 28 Feb 2019 14:28:08 +0000 (14:28 +0000)]
suricata: Set default packet size to 1514
We usually use a MTU of 1500 + Ethernet header
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Thu, 28 Feb 2019 14:28:07 +0000 (14:28 +0000)]
suricata: Set max-pending-packets to 1024
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Peter Müller [Fri, 22 Feb 2019 20:16:00 +0000 (20:16 +0000)]
Suricata: detect TLS traffic on port 444, too
This is the default port for IPFire's administrative web interface
and should be monitored by Suricata, too.
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
c: Stefan Schantl <stefan.schantl@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Thu, 28 Feb 2019 18:53:22 +0000 (18:53 +0000)]
sysctl.conf: Revert enabling busy loop waiting on sockets
This causes the firmware in my ath10k module to crash.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 27 Feb 2019 03:52:26 +0000 (03:52 +0000)]
Update openssl rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 26 Feb 2019 17:25:11 +0000 (17:25 +0000)]
core129: Ship updated OpenSSL
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 26 Feb 2019 16:42:49 +0000 (16:42 +0000)]
openssl: Update to 1.1.1b
This is a bug fix only release
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 26 Feb 2019 11:02:56 +0000 (11:02 +0000)]
DHCP: Fix error when editing a newly added fixed lease
They key was remembered but then the array was sorted which resulted
the key showing a wrong line.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 26 Feb 2019 10:18:33 +0000 (10:18 +0000)]
DHCP: Restart server in background
This allows for the CGI to return quicker.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 26 Feb 2019 10:16:21 +0000 (10:16 +0000)]
DHCP: Escape slashes in filename
Fixes: #12006
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 25 Feb 2019 02:31:23 +0000 (02:31 +0000)]
core129: Ship updated credits.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 25 Feb 2019 02:30:56 +0000 (02:30 +0000)]
Update list of contributors
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 25 Feb 2019 02:29:29 +0000 (02:29 +0000)]
core129: Ship updated OpenVPN
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Erik Kapfer [Tue, 26 Feb 2019 10:56:47 +0000 (11:56 +0100)]
OpenVPN: Update to version 2.4.7
Changelog can be found in here https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24 .
Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Sat, 23 Feb 2019 16:54:00 +0000 (16:54 +0000)]
update Tor to 0.3.5.8
See https://blog.torproject.org/new-releases-tor-0402-alpha-0358-03411-and-03312
for release notes.
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Sat, 23 Feb 2019 16:54:00 +0000 (16:54 +0000)]
update metrics links in Tor WebUI
https://atlas.torproject.org/ is deprecated in favour of
https://metrics.torproject.org/ by now.
Fixes #11781.
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 25 Feb 2019 00:58:04 +0000 (00:58 +0000)]
core129: Ship updated libgcrypt
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Peter Müller [Sat, 23 Feb 2019 16:58:00 +0000 (16:58 +0000)]
libgcrypt: update to 1.8.4
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 25 Feb 2019 00:56:49 +0000 (00:56 +0000)]
core129: Ship updated unbound
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sat, 9 Feb 2019 09:40:36 +0000 (10:40 +0100)]
unbound: Update to 1.9.0
For details see:
https://nlnetlabs.nl/svn/unbound/tags/release-1.9.0/doc/Changelog
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 25 Feb 2019 00:55:31 +0000 (00:55 +0000)]
core129: Ship changes from ipsec branch
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Mon, 25 Feb 2019 00:48:08 +0000 (00:48 +0000)]
Merge branch 'ipsec' into next
Michael Tremer [Mon, 25 Feb 2019 00:47:28 +0000 (00:47 +0000)]
Start Core Update 129
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sun, 24 Feb 2019 11:45:55 +0000 (11:45 +0000)]
Add script to search for missing libraries
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sun, 24 Feb 2019 04:06:52 +0000 (04:06 +0000)]
core128: Drop old openssl engines
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sun, 24 Feb 2019 04:04:51 +0000 (04:04 +0000)]
cups: Depends on bluetooth library
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Sun, 24 Feb 2019 19:50:16 +0000 (20:50 +0100)]
core128: add openldap to update
openldap was linked against old openssl lib
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sun, 24 Feb 2019 16:04:44 +0000 (17:04 +0100)]
core128: add sse2 openssl libs
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sun, 24 Feb 2019 09:55:49 +0000 (10:55 +0100)]
core128: apply local sshd config
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sat, 23 Feb 2019 14:56:21 +0000 (15:56 +0100)]
kernel: update to 4.14.103
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Fri, 22 Feb 2019 20:33:45 +0000 (21:33 +0100)]
core128: finish core128
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Fri, 22 Feb 2019 20:20:57 +0000 (21:20 +0100)]
kernel: import cve-2019-8912 patch
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Fri, 22 Feb 2019 18:26:08 +0000 (19:26 +0100)]
core128: stop apache before replacing files
apache will not restart without stopped before
the files was replaced.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Fri, 22 Feb 2019 17:02:45 +0000 (18:02 +0100)]
kernel: apu leds: add more id's
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Fri, 22 Feb 2019 17:01:18 +0000 (18:01 +0100)]
partresize: add "apu1" for apus with new bios.
Stefan Schantl [Fri, 22 Feb 2019 09:04:27 +0000 (10:04 +0100)]
convert-snort: Try to download ruleset if none is present.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>