~vcs-imports/ipfire/ipfire-2.x

From Revision 12679 to 12660

expand all

collapse all

Rev		Summary	Authors	Date	Diff	Files
12679		make.sh: Run "make.sh lang" make.sh: Run "make.sh lang" Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>	Michael Tremer	2 months ago
12678		samba: Fix rootfiles samba: Fix rootfiles The CGI script, the misc-progs helper and the menu entry were removed. Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>	Michael Tremer	2 months ago
12677		squid: Comment out access.log in rootfile squid: Comment out access.log in rootfile - Everytime an update has been done on squid the access.log file has been replaced with an    empty file, losing whatever messages have been in the log. - This has been the case since squid was implemented in IPFire. - Update of rootfile to comment out var/log/squid/access.log Signed-off-by: Adolf Belka <adolf.belka@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>	Adolf Belka	2 months ago
12676		apache: Update to 2.4.61 apache: Update to 2.4.61 For details see: https://dlcdn.apache.org/httpd/CHANGES_2.4.61 "Changes with Apache 2.4.61   *) SECURITY: CVE-2024-39884: Apache HTTP Server: source code      disclosure with handlers configured via AddType (cve.mitre.org)      A regression in the core of Apache HTTP Server 2.4.60 ignores      some use of the legacy content-type based configuration of      handlers.   "AddType" and similar configuration, under some      circumstances where files are requested indirectly, result in      source code disclosure of local content. For example, PHP      scripts may be served instead of interpreted.      Users are recommended to upgrade to version 2.4.61, which fixes      this issue." Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>	Matthias Fischer	2 months ago
12675		samba: Update to version 4.20.2 samba: Update to version 4.20.2 - Update from version 4.20.1 to 4.20.2 - Update of rootfile for both x86_64 and aarch64 - After doing a grep into the config directories I realised that the xxxMACHINExxx phrase    is only added into rootfiles in the main common or package directories and not in the    x86_64 and aarch64 - In the past I have submitted the samba rootfile with x86_64 replaced by xxxMACHINExxx.    It seems to have worked, so the replacement probably occurs even in the architecture    specific directories but it doesn't need to be used there as the directory is clearly    only for that one architecture. - Changelog     4.20.2            * BUG 15662: vfs_widelinks with DFS shares breaks case insensitivity.            * BUG 13213: Samba build is not reproducible.            * BUG 15569: ldb qsort might r/w out of bounds with an intransitive compare              function.            * BUG 15625: Many qsort() comparison functions are non-transitive, which can              lead to out-of-bounds access in some circumstances.            * BUG 15638: Need to change gitlab-ci.yml tags in all branches to avoid CI              bill.            * BUG 15654: We have added new options --vendor-name and --vendor-patch-              revision arguments to ./configure to allow distributions and packagers to              put their name in the Samba version string so that when debugging Samba the              source of the binary is obvious.            * BUG 15665: CTDB RADOS mutex helper misses namespace support.            * BUG 13019: Dynamic DNS updates with the internal DNS are not working.            * BUG 14981: netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with              SysvolReady=0.            * BUG 15412: Anonymous smb3 signing/encryption should be allowed (similar to              Windows Server 2022).            * BUG 15573: Panic in dreplsrv_op_pull_source_apply_changes_trigger.            * BUG 15620: s4:nbt_server: does not provide unexpected handling, so winbindd              can't use nmb requests instead cldap.            * BUG 15642: winbindd, net ads join and other things don't work on an ipv6              only host.            * BUG 15659: Segmentation fault when deleting files in vfs_recycle.            * BUG 15664: Panic in vfs_offload_token_db_fetch_fsp().            * BUG 15666: "client use kerberos" and --use-kerberos is ignored for the              machine account.            * BUG 15435: Regression DFS not working with widelinks = true.            * BUG 15633: samba-gpupdate - Invalid NtVer in netlogon_samlogon_response.            * BUG 15653: idmap_ad creates an incorrect local krb5.conf in case of trusted              domain lookups.            * BUG 15660: The images don't build after the git security release and CentOS              8 Stream is EOL. Signed-off-by: Adolf Belka <adolf.belka@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>	Adolf Belka	2 months ago
12674		ruby: Add rootfile for all architectures ruby: Add rootfile for all architectures Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>	Michael Tremer	2 months ago
12673		riscv64: Update util-linux rootfile riscv64: Update util-linux rootfile Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>	Michael Tremer	2 months ago
12672		vectorscan: Build as a fat library vectorscan: Build as a fat library The build system defaults to building the library for the host system and therefore uses instructions that might not be available on the target system. This patch changes that we will build the library so that it will choose the most optimised functions at runtime. Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>	Michael Tremer	2 months ago
12671		core187: Ship the OpenVPN CRL updater core187: Ship the OpenVPN CRL updater Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>	Michael Tremer	2 months ago
12670		Core Update 187: Rewrite the SSH configuration on update Core Update 187: Rewrite the SSH configuration on update Signed-off-by: Peter Müller <peter.mueller@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>	Peter Müller	2 months ago
12669		core187: Ship and restart the firewall core187: Ship and restart the firewall Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>	Michael Tremer	2 months ago
12668		sysctl: Conntrack: Disable picking up loose TCP connections sysctl: Conntrack: Disable picking up loose TCP connections Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>	Michael Tremer	2 months ago
12667		firewall: Implement generating SYNPROXY rules firewall: Implement generating SYNPROXY rules Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>	Michael Tremer	2 months ago
12666		firewall.cgi: Add a checkbox to enable SYN flood protection firewall.cgi: Add a checkbox to enable SYN flood protection Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>	Michael Tremer	2 months ago
12665		firewall: Enable SYNPROXY for untracked packets firewall: Enable SYNPROXY for untracked packets This enables some DoS protection using SYNPROXY which will complete a SYN handshake with the client before the connection is being forwarded. Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>	Michael Tremer	2 months ago
12664		firewall: Don't filter output INVALID packets firewall: Don't filter output INVALID packets This should never cause any problems, but will cause that certain more complicated featured like SYNPROXY won't work. Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>	Michael Tremer	2 months ago
12663		firewall: Split CONNTRACK chain firewall: Split CONNTRACK chain This is preparation to handle incoming/outgoing packets differently. Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>	Michael Tremer	2 months ago
12662		core187: Ship and restart Apache core187: Ship and restart Apache Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>	Michael Tremer	2 months ago
12661		apache: Update to 2.4.60 apache: Update to 2.4.60 Fixed: CVE-2024-39573, CVE-2024-38477, CVE-2024-38476, CVE-2024-38475, CVE-2024-38474, CVE-2024-38473, CVE-2024-38472, CVE-2024-36387. For details see: https://dlcdn.apache.org/httpd/CHANGES_2.4.60 Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org> Reviewed-by: Adolf Belka <adolf.belka@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>	Matthias Fischer	2 months ago
12660		OpenSSH: Ship the entire suite of helper programs OpenSSH: Ship the entire suite of helper programs The SSH daemon has been split into a listener and session daemon to have a smaller attack vector since the listener does not need to implement the SSH protocol. In order to keep SSH working, we need to ship the session daemon, too. Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>	Michael Tremer	2 months ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1