]>
git.ipfire.org Git - people/pmueller/ipfire-2.x.git/log
Michael Tremer [Tue, 2 Aug 2016 11:18:45 +0000 (12:18 +0100)]
Update translation
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 2 Aug 2016 11:18:29 +0000 (12:18 +0100)]
Merge remote-tracking branch 'stevee/guardian-2.0' into next
Matthias Fischer [Sun, 31 Jul 2016 17:43:26 +0000 (19:43 +0200)]
htop: Update to 2.0.2
For details, see:
http://hisham.hm/htop/index.php?page=downloads
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Stefan Schantl [Sat, 30 Jul 2016 09:31:08 +0000 (11:31 +0200)]
guardian: Update to the tagged release version.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Arne Fitzenreiter [Fri, 29 Jul 2016 16:58:56 +0000 (18:58 +0200)]
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Fri, 29 Jul 2016 16:57:49 +0000 (18:57 +0200)]
core104: ship screen
old binary is linked against libshadow.0*
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Stefan Schantl [Fri, 29 Jul 2016 13:40:30 +0000 (15:40 +0200)]
Core 104: Add for guardian changed files to core update.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Fri, 29 Jul 2016 11:29:13 +0000 (13:29 +0200)]
initscripts: Drop guardian related code from snort initscript.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Fri, 29 Jul 2016 11:25:28 +0000 (13:25 +0200)]
ids.cgi: Drop guardian related code.
Guardian competely will be managed by it's own CGI.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Fri, 29 Jul 2016 11:21:08 +0000 (13:21 +0200)]
guardian-legacy: Drop old guardian related files.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Fri, 29 Jul 2016 11:16:11 +0000 (13:16 +0200)]
guardian.cgi: Fix path to snort alert file.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Matthias Fischer [Tue, 19 Jul 2016 18:17:11 +0000 (20:17 +0200)]
log.dat: Added entry for 'guardian'
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Mon, 4 Jul 2016 09:49:39 +0000 (11:49 +0200)]
guardian: Update to 2.0.
Update guardian to the re-written version.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 13 Jul 2016 07:37:30 +0000 (09:37 +0200)]
guardian.cgi: Prevent from using "syslog" and "debug".
When using syslog as log facility and debug as log mode,
syslog does not log anything.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sat, 2 Jul 2016 08:21:52 +0000 (10:21 +0200)]
guardian.cgi: Also generate ignore file when building the configuration.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 29 Jun 2016 07:39:39 +0000 (09:39 +0200)]
Language file update.
Add guardian related strings to the german language file.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Thu, 18 Feb 2016 17:17:24 +0000 (18:17 +0100)]
perl-Net-IP: New package
The perl-Net-IP module provides various methods for validating
and calculating IP-addresses (both IP protocols supported) and
is a runtime dependency of guardian 2.0.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Tue, 7 Oct 2014 17:24:11 +0000 (19:24 +0200)]
perl-common-sense: New package.
This is a runtime dependency for perl-inotify2.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Tue, 7 Oct 2014 17:25:11 +0000 (19:25 +0200)]
perl-inotify2: New package.
This module contains inotify bindings for perl, used by the extendend guardian.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Mon, 27 Jun 2016 10:54:44 +0000 (12:54 +0200)]
Language file update.
Add new guardian related strings.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Mon, 27 Jun 2016 10:52:39 +0000 (12:52 +0200)]
guardian.cgi: Show/Hide options using Java Script.
The options for configuring the log file location and
snort alert priority level now dynamically will be
displayed or hidden if the desired options or feature
is not used.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Thu, 23 Jun 2016 13:54:19 +0000 (15:54 +0200)]
guardian.cgi: Add support for selecting the used firewall action.
This will allow to choose between DROP and REJECT if guardian blocks an
attackers address.
Fixes #10xxx.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Tue, 21 Jun 2016 08:05:01 +0000 (10:05 +0200)]
guardian.cgi: Use new feature of ignore file inclusion.
Add support and usage of the recently introduced feature of
including other files in the ignore file to add
the red related IP-addresses to the ignore list on IPFire
systems.
Also use reload-ignore-list feature instead of reloading the
whole configuration on ignore list modifications.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Fri, 29 Apr 2016 09:54:53 +0000 (11:54 +0200)]
guardian.cgi: Create config and ignore file if they does not exist.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Fri, 29 Apr 2016 09:06:40 +0000 (11:06 +0200)]
guardian.cgi: Prevent from blocking the used DNS servers.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Fri, 29 Apr 2016 09:06:06 +0000 (11:06 +0200)]
guardian.cgi: Use private subfunction for gateway and DNS server detection.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Fri, 29 Apr 2016 08:55:32 +0000 (10:55 +0200)]
guardian.cgi: Add function to generate the guardian.ignore file.
This function is responsible for collecting all required data,
like the green, blue, orange (if the interfaces are available),
red, gateway and used DNS server IP-addresses.
It will add als these addresses and the configured and enabled
user-defined ignored addresses/networks to the ignore file of
guardian to prevent from blocking any of them.
Note:
The IPFire and RED inteface related addresses also will be added
to the ignore file, even if there is no user-defined entry in the
list.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Fri, 29 Apr 2016 07:09:25 +0000 (09:09 +0200)]
guardian.cgi: Use ignored config file.
The CGI now uses an own ignored configuration file for
storing host addresses and/or subnets which should be
ignored by guardian.
This allows to add remarks for them and to enable or disable
each entry individally at any time.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Thu, 25 Feb 2016 10:22:19 +0000 (11:22 +0100)]
guardian.cgi: Use "getipstat" binary.
Rework the GetBlockedHosts() to use the "getipstat" binary
instead of the not longer available "guardianctrl" binary.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 24 Feb 2016 11:41:12 +0000 (12:41 +0100)]
guardian.cgi: Send commands through socket connection.
The guardianctrl binary does not longer exists, use
the Guardian::Socket module to send various commands
by using the provided socket client.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 24 Feb 2016 11:12:11 +0000 (12:12 +0100)]
guardian.cgi: Adjust code for generating the config file.
The config file format and values have been changed, so the
code to do the generation has to be adjusted.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 24 Feb 2016 08:27:10 +0000 (09:27 +0100)]
guardian.cgi: Drop option for configure the path to the snort alertfile.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 24 Feb 2016 08:19:39 +0000 (09:19 +0100)]
guardian.cgi: Rename hash keys for enabled modules.
Rename the hash key names of enabled parser modules,
(services which should be monitored by guardian) to
keep the same name sheme than in the guardian config
file.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 24 Feb 2016 07:59:42 +0000 (08:59 +0100)]
guardian.cgi: Adjust CGI to use Locale::Codes::Country.
The module has been renamed some time ago.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sat, 28 Feb 2015 11:33:12 +0000 (12:33 +0100)]
guardian.cgi: Disable debugging.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Matthias Fischer [Sat, 28 Feb 2015 10:57:33 +0000 (11:57 +0100)]
guardian.cgi: Suppress warnings for ${Header::colourgreen} variable.
Reference #10748.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Matthias Fischer [Sat, 28 Feb 2015 10:54:58 +0000 (11:54 +0100)]
guardian.cgi: Fix unititalized value "GUARDIAN_ENABLE_OWNCLOUD".
When the owncloud addon is not installed, this value was not
initialized correctly.
Reference #10748.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Matthias Fischer [Sat, 28 Feb 2015 10:52:33 +0000 (11:52 +0100)]
guardian.cgi: Use variable $pid instead of array element.
This will prevent from a lot of perl suggestions in the
apache error log.
Reference #10748.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sat, 24 Jan 2015 17:41:37 +0000 (18:41 +0100)]
guardian.cgi: Fix path to meta-owncloud.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sat, 17 Jan 2015 09:15:12 +0000 (10:15 +0100)]
guardian.cgi: Add configure options for owncloud.
The related options only will be displayed when the owncloud addon
has been installed.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sat, 1 Nov 2014 12:42:53 +0000 (13:42 +0100)]
guardian.cgi: Allways read-in settings.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Tue, 28 Oct 2014 20:53:27 +0000 (21:53 +0100)]
guardian.cgi: Some more input validation.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Mon, 27 Oct 2014 20:12:03 +0000 (21:12 +0100)]
guardian.cgi: Correct indentation when writing out the config file.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Mon, 27 Oct 2014 20:06:58 +0000 (21:06 +0100)]
guardian.cgi: Add dropdown for PriorityLevel selection.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Mon, 27 Oct 2014 19:16:42 +0000 (20:16 +0100)]
guardian.cgi: Fix and improve input validation.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Tue, 21 Oct 2014 19:55:07 +0000 (21:55 +0200)]
guardian.cgi: Reload guardian if config or the ignorelist changes.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sun, 19 Oct 2014 17:58:45 +0000 (19:58 +0200)]
guardian.cgi: Add option to configure the BlockCount.
Some small code fixes.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sun, 19 Oct 2014 14:46:38 +0000 (16:46 +0200)]
guardian.cgi: Accidently hardcoded some descriptions.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sun, 19 Oct 2014 14:43:32 +0000 (16:43 +0200)]
guardian.cgi: Add dropdown to select the used loglevel.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sun, 19 Oct 2014 12:01:48 +0000 (14:01 +0200)]
guardian.cgi: Remove code for options which have been dropped from guardian.
Guardian does not longer require the information for the red interface from
the configfile.
Guardian does not longer support a targetfile.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sun, 19 Oct 2014 11:57:30 +0000 (13:57 +0200)]
guardian.cgi: Add options to enable/disable some built-in functions from guardian.
This commit allows to enable or disable the monitoring of the snort alertfile
and to switch off the blocking of SSH and HTTPD Brute-force attempts.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sat, 9 Aug 2014 08:35:32 +0000 (10:35 +0200)]
guardian.cgi: Remove code for Blockinterfaces.
We don't need this code anymore because we dropped interface support
from guardian.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sat, 5 Jul 2014 13:09:50 +0000 (15:09 +0200)]
guardian.cgi: Connect subboxes with input elements to the main boxes.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Mon, 30 Jun 2014 15:59:28 +0000 (17:59 +0200)]
guardian.cgi: Sort blocked IP addresses.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sun, 8 Jun 2014 10:47:58 +0000 (12:47 +0200)]
guardian.cgi: Add hyperlink to ipinfo page for blocked hosts.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Tue, 3 Jun 2014 20:36:32 +0000 (22:36 +0200)]
guardian.cgi: Autodetect the used interface for red.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sun, 1 Jun 2014 15:24:23 +0000 (17:24 +0200)]
guardian.cgi: New page to configure and interact with guardian.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Thu, 28 Jul 2016 09:46:21 +0000 (10:46 +0100)]
nginx: Update to 1.8.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Fri, 29 Jul 2016 05:18:37 +0000 (07:18 +0200)]
kernel: update arm buildfix patch
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 28 Jul 2016 16:12:13 +0000 (18:12 +0200)]
core104: add kernel to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 28 Jul 2016 16:01:32 +0000 (18:01 +0200)]
kernel: update to 3.14.74
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Thu, 28 Jul 2016 16:00:50 +0000 (18:00 +0200)]
backports: add upstream driver fixes.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Alexander Marx [Tue, 26 Jul 2016 12:40:45 +0000 (14:40 +0200)]
Firewall: Add Services SSMTP and submission
Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Fri, 22 Jul 2016 20:23:24 +0000 (22:23 +0200)]
nano 2.6.1: fix in rootfile
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 20 Jul 2016 15:49:11 +0000 (16:49 +0100)]
core104: Include recent changes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Alf Høgemark [Thu, 14 Jul 2016 11:14:55 +0000 (13:14 +0200)]
Change case of the unit "bit" from "Bit" to "bit" in web UI
The correct case for "kilobit" is "kilobit", not "kiloBit".
And the same applies for Mbit, Gbit etc.
Reference is https://en.wikipedia.org/wiki/Kilobit
This commit changes the texts used in the web UI, so
that it correctly displays as "bit", "kbit", "Mbit" etc.
This fixes bugzilla item 10918.
Signed-off-by: Alf Høgemark <alf@i100.no>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Mon, 18 Jul 2016 09:50:45 +0000 (11:50 +0200)]
nano: Update to 2.6.1
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 19 Jul 2016 14:01:05 +0000 (15:01 +0100)]
Fix potential HTTPoxy vulnerability
https://httpoxy.org/
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Tue, 12 Jul 2016 13:51:18 +0000 (14:51 +0100)]
freeradius: New package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Jonatan Schlag [Tue, 5 Jul 2016 09:56:52 +0000 (11:56 +0200)]
Update qemu to version 2.6
This patch update qemu to version 2.6
For changelogs see:
http://wiki.qemu.org/ChangeLog/2.5
http://wiki.qemu.org/ChangeLog/2.6
Qemu try to built with bluez, but before version 2.6 bluez was not used
by qemu on IPFire, so I think it is better to disable bluez because
nobody needs it before version 2.6 and our bluez is not the latest
version so I think this will cause more problems than benefits.
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Jonatan Schlag [Sat, 16 Jul 2016 10:18:52 +0000 (12:18 +0200)]
Update spice to version 0.12.8
This is an security update.
Recent were 2 serious security vulnerabilities published.
This patch update spice to a version which is not vulnerable.
Changelog:
Changes in 0.12.8:
==================
* Fixes for CVE-2016-0749 and CVE-2016-2150
Changes in 0.12.7:
==================
* spice-server will now send TCP keepalive probes on the TCP connections
it
uses. This can prevent unwanted idle disconnections if proxies are
used
between the client and the host.
* Fix important memory usage when the webdav channel is used
* Do not disconnect when the client requests an unsupported compression
type
* Fix a few race conditions
* Fix display glitch when using XSpice
* Improve help string for 'replay -s'
* Fix crashes in corner cases (buggy spice-html5 + win10, vnc + SPICE
port
configured, USB webcam redirection over a slow link)
* Fix various compilation warning when building on 32 bit machines
* Some fixes for big-endian machines, more work is likely to be needed
* Do not build static libraries by default, this can be reenabled with
--enable-static
* Fix small leak in MJPEG code
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 16 Jul 2016 10:24:41 +0000 (11:24 +0100)]
libtiff: Bump release
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Fri, 15 Jul 2016 17:13:07 +0000 (19:13 +0200)]
libtiff: update to 4.0.6
The pak version from spandsp sane and foomatic are increased by one
to ship packages build against new libtiff.
A compat is not needed
http://www.remotesensing.org/libtiff/v4.0.6.html
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Reviewed-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 16 Jul 2016 09:57:04 +0000 (10:57 +0100)]
core104: Ship recently updated which
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Fri, 15 Jul 2016 16:42:46 +0000 (18:42 +0200)]
which: update to 2.21
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Jonatan Schlag [Fri, 15 Jul 2016 15:27:15 +0000 (17:27 +0200)]
Update spice-protocol to 0.12.11
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Fri, 15 Jul 2016 10:08:56 +0000 (11:08 +0100)]
kernel: Fix broken syntax in configuration file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Fri, 15 Jul 2016 08:55:49 +0000 (09:55 +0100)]
Build bzip2 before pcre
pcre is now depending on bzip2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Jonatan Schlag [Fri, 15 Jul 2016 08:28:17 +0000 (10:28 +0200)]
Fix in libvirt install.sh/uninstall.sh
The libvirt daemon was not started after installation because the
initscritp is named 'libvirtd' not like the package 'libvirt'.
The same problem appear in the uninstall.sh. The service was not
stopped.
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 14 Jul 2016 22:36:49 +0000 (23:36 +0100)]
core104: Ship recently updated packages
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Sun, 26 Jun 2016 07:58:14 +0000 (09:58 +0200)]
acpid: update to 2.0.26
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Sun, 26 Jun 2016 07:42:04 +0000 (09:42 +0200)]
pcre: update to 8.39
http://www.pcre.org/original/changelog.txt
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Sun, 26 Jun 2016 08:02:54 +0000 (10:02 +0200)]
popt: update to 1.16
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Sun, 26 Jun 2016 08:07:44 +0000 (10:07 +0200)]
curl: update to 7.49.1
https://curl.haxx.se/changes.html#7_49_1
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Sun, 26 Jun 2016 08:08:58 +0000 (10:08 +0200)]
iputils: update to s20160308
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Sun, 26 Jun 2016 08:38:18 +0000 (10:38 +0200)]
acl: update to 2.2.52
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Sun, 26 Jun 2016 08:33:03 +0000 (10:33 +0200)]
libcap: update to 2.25
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Wed, 13 Jul 2016 15:55:29 +0000 (16:55 +0100)]
collectd: Ignore *phys, macvtap* and vnet* interfaces
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Tue, 12 Jul 2016 10:37:19 +0000 (12:37 +0200)]
dnsmasq 2.76: latest patches from upstream (004-009)
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sat, 9 Jul 2016 10:27:37 +0000 (12:27 +0200)]
dnsmasq 2.76: latest patches from upstream (001-003)
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Mon, 11 Jul 2016 14:27:58 +0000 (16:27 +0200)]
p7zip: add CVE-2016-2334 and CVE-2016-2335 patches
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Mon, 11 Jul 2016 13:39:53 +0000 (15:39 +0200)]
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Mon, 11 Jul 2016 08:42:51 +0000 (10:42 +0200)]
kernel: disable amd ccp support
ccp based trng of the apu2 produce none random data.
Aes accleration is also not used because IPFire prefere
AES-NI if this is supported.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Sat, 2 Jul 2016 10:18:38 +0000 (12:18 +0200)]
Fix compound nouns for mail service feature
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Arne Fitzenreiter [Thu, 30 Jun 2016 18:29:40 +0000 (20:29 +0200)]
kernel: arm7-multi: enable ohci_hcd
needed for usb1.1 support on BananaPi
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 29 Jun 2016 15:04:28 +0000 (17:04 +0200)]
kernel: update to 3.14.74
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Wed, 29 Jun 2016 15:00:29 +0000 (17:00 +0200)]
backports: r8152 add lenovo and nvidia usb id
this id's are blacklisted in new cdc_ether module
because the r8152 module should used but the
3.14 module not know this id's.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Mon, 27 Jun 2016 22:18:39 +0000 (23:18 +0100)]
core104: Ship updated libarchive
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Marcel Lorenz [Sun, 26 Jun 2016 07:27:58 +0000 (09:27 +0200)]
libarchive: update to 3.2.1
Fixes CVE-2016-4301
Libarchive mtree parse_device Code Execution Vulnerability
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Stefan Schantl [Wed, 22 Jun 2016 12:19:24 +0000 (14:19 +0200)]
core 104: Add updated snort.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>