 Security Fix
|
7d62e8319e
|
security: Fix HTTP to HTTPS for all package and repository downloads
CRITICAL FIXES (CWE-494, CWE-300):
- tools/pve/microcode.sh:79 (Intel microcode)
- tools/pve/pbs-microcode.sh:93 (Intel microcode)
CONTAINER-LEVEL FIXES:
- install/deconz-install.sh: libssl1.1 .deb + setup_deb822_repo URLs
- install/odoo-install.sh: lxml-clean .deb
- ct/odoo.sh: lxml-clean .deb (update_script)
HOST-LEVEL REPOSITORY FIXES:
- tools/pve/post-pve-install.sh: Debian + Proxmox PVE repos
- tools/pve/post-pbs-install.sh: Debian + Proxmox PBS repos
- tools/pve/pve8-upgrade.sh: Debian + Proxmox PVE + Ceph repos
- tools/pve/pbs3-upgrade.sh: Debian + Proxmox PBS repos
- tools/pve/hw-acceleration.sh: Debian non-free repos (deb + deb-src)
- install/proxmox-backup-server-install.sh: Proxmox PBS repo
- install/medusa-install.sh: Debian non-free repo
- install/globaleaks-install.sh: GlobaLeaks repository
CHANGES:
✅ All http:// → https:// for package downloads
✅ All http:// → https:// for repository configurations
✅ Added --proto '=https' to curl commands for protocol enforcement
✅ Improved quoting for file variables
IMPACT:
- Prevents MITM attacks on package installations
- Prevents MITM attacks on repository configuration
- Enforces TLS transport security across all downloads
- Brings consistency with security best practices
CVSS: 6.5 (Medium) - CWE-494, CWE-300, CWE-829
|
2026-06-08 21:26:18 +02:00 |
|
|
Tobias
|
c1fe8b91b4
|
chore: bump copyright to 2026 - happy new year (#10585)
* chore: bump copyright to 2026 - happy new year
* fix
* meilisearch fix source url
* livebook: fix space
* fix source cmd
* fix source cmd
|
2026-01-06 13:28:12 +01:00 |
|
|
CanbiZ
|
afe330173e
|
Refactor cleanup steps to use cleanup_lxc function (#9354)
|
2025-11-22 17:27:13 +01:00 |
|
|
akileos
|
0ab91cc4c1
|
Add wkhtmltopdf to Odoo installation dependencies (#9010)
Required for invoice/ticket generation
|
2025-11-09 18:32:33 +01:00 |
|
|
CanbiZ
|
6c8975e4aa
|
Bump O to P-Scripts to Debian 13 (Trixie) (#8367)
|
2025-10-15 22:39:16 +02:00 |
|
|
CanbiZ
|
341f87045c
|
Bump L to N-Scripts to Debian 13 (Trixie) (#8368)
* Bump L to N-Scripts to Debian 13 (Trixie)
* refactor
* Add apt clean command to cleanup process
* Add apt clean command to cleanup process
---------
Co-authored-by: Tobias <96661824+CrazyWolf13@users.noreply.github.com>
Co-authored-by: Slaviša Arežina <58952836+tremor021@users.noreply.github.com>
|
2025-10-15 22:29:48 +02:00 |
|
|
Slaviša Arežina
|
10cd6c3f0b
|
Odoo: Fix missing dependencies (#7931)
* Fix odoo
* Update
|
2025-09-26 22:59:21 +02:00 |
|
|
push-app-to-main[bot]
|
b4d98b1dd2
|
odoo (#4477)
* 'Add new script'
* Update ct/odoo.sh
Co-authored-by: Michel Roegl-Brunner <73236783+michelroegl-brunner@users.noreply.github.com>
* Update odoo.sh
---------
Co-authored-by: push-app-to-main[bot] <203845782+push-app-to-main[bot]@users.noreply.github.com>
Co-authored-by: CanbiZ <47820557+MickLesk@users.noreply.github.com>
Co-authored-by: Michel Roegl-Brunner <73236783+michelroegl-brunner@users.noreply.github.com>
|
2025-05-14 16:07:57 +02:00 |
|