Re: Pull request - various updates

[Michael Tremer <michael.tremer@ipfire.org>]

[-- Attachment #1: Type: text/plain, Size: 3838 bytes --]

Hey Matthias,

thanks for sending in all those patches. I appreciate it very much.
There are many things in it that needed to be updated.

I just talked to Arne about the release planning with 2.17. We are going
to merge the "seventeen" branch with the master branch very soon so that
we can get that completely stable and ready for release. There are some
things about the ARM support to do and of course lots of testing.

After the merge I will merge your changes (and lots of other things on
my list) to the next tree which will eventually become Core Update 87.
That will hopefully be round about next week.

I wrote some comments below about some concerns I have. Please check.
The rest without a comment looks very good.

On Sat, 2014-11-15 at 23:42 +0100, Matthias Fischer wrote:
> Hi all,
> 
> I prepared updates for several IPFire-components and would like to send 
> a pull request hereby - please be patient, its my first one...:
> 
> htop - Update to 1.0.3:
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=ba85a1beb487854a14cbb288b436d6a88265a126
> 
> wget - Update to 1.16:
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=9d1da799fa7f2b07c742f1bcb7a7970c70050b25
> 
> wget - deleted obsolete patch file:
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=1f8ea39aca5468191ebb05ad23576f2d1bf43f1c
> 
> libpcap - Update to 1.6.2, added '--enable-bluetooth=no' (bluetooth 
> disabled to avoid otherwise needed patch for use with 'bluez-5.21'):
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=b1ad1b744f845e8d574af8bcd03f4590f6bd9ccc

I think that there should be some changes in the rootfile here. The
version number has changed quite a lot and usually the soname of the
library is changed as well.

> smartmontools - Update to 6.3:
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=6deed5addbf2ecc899fc4420469372fc98194aee
> 
> squid - update to 3.4.9:
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=bc3dd1e975d420cc54d2d2dce831d13e2a9ccad3
> 
> zlib - Update to 1.2.8:
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=6c96e0499b95151afe0f72f628a3c9b2bfbec25c
> 
> tcpdump - Update to 4.6.2:
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=0c1b7071ec5fc4ada96998dce0b1141a39b874be
> 
> pcre - Update to 8.3.6:
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=14c33f6393464991e38a6428a1361f1c9360a066

The latest version of pcre comes with a JIT compiler for regular
expressions. The implementation of that requires that memory is writable
and executable at the same time which is not allowed by grsecurity.

We had to disable this on IPFire 3 and I think this should be the same
case in IPFire 2 as it comes with grsecurity, too.

See here:
http://git.ipfire.org/?p=ipfire-3.x.git;a=commitdiff;h=5b7ea0e1636306d0bc6b5d77a621ed3d61f6c8d5


> Midnight Commander - Update to 4.8.13:
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=dc1d8fe731abec4a99be141e08054cc6647de745
> 
> snort - Update to 2.9.7.0:
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=4d88659446676f9034b04828062cd8303cb2a4b3
> 
> snort - Update urls for rules download (2.9.7.0), fixed url for 
> registration in 'ids.cgi':
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=8d29504c4dff83e31beb0791d5a9654499ae5ac8
> 
> daq - Update to 2.0.4:
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=4db4bc1b1b57dd1f28b6d37d20fe851cbcdfbeb0
> 
> 
> 
> I tested all these updates in productive mode. For me, they seem to run 
> fine - if there are problems, please let me know!
> 
> Regards
> Matthias

Best,
-Michael

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 819 bytes --]