Pull request - various updates

Pull request - various updates

[Matthias Fischer]

[-- Attachment #1: Type: text/plain, Size: 2365 bytes --]

Hi all,

I prepared updates for several IPFire-components and would like to send 
a pull request hereby - please be patient, its my first one...:

htop - Update to 1.0.3:
http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=ba85a1beb487854a14cbb288b436d6a88265a126

wget - Update to 1.16:
http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=9d1da799fa7f2b07c742f1bcb7a7970c70050b25

wget - deleted obsolete patch file:
http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=1f8ea39aca5468191ebb05ad23576f2d1bf43f1c

libpcap - Update to 1.6.2, added '--enable-bluetooth=no' (bluetooth 
disabled to avoid otherwise needed patch for use with 'bluez-5.21'):
http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=b1ad1b744f845e8d574af8bcd03f4590f6bd9ccc

smartmontools - Update to 6.3:
http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=6deed5addbf2ecc899fc4420469372fc98194aee

squid - update to 3.4.9:
http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=bc3dd1e975d420cc54d2d2dce831d13e2a9ccad3

zlib - Update to 1.2.8:
http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=6c96e0499b95151afe0f72f628a3c9b2bfbec25c

tcpdump - Update to 4.6.2:
http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=0c1b7071ec5fc4ada96998dce0b1141a39b874be

pcre - Update to 8.3.6:
http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=14c33f6393464991e38a6428a1361f1c9360a066

Midnight Commander - Update to 4.8.13:
http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=dc1d8fe731abec4a99be141e08054cc6647de745

snort - Update to 2.9.7.0:
http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=4d88659446676f9034b04828062cd8303cb2a4b3

snort - Update urls for rules download (2.9.7.0), fixed url for 
registration in 'ids.cgi':
http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=8d29504c4dff83e31beb0791d5a9654499ae5ac8

daq - Update to 2.0.4:
http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=4db4bc1b1b57dd1f28b6d37d20fe851cbcdfbeb0



I tested all these updates in productive mode. For me, they seem to run 
fine - if there are problems, please let me know!

Regards
Matthias
-- 
tails, linux, USB, CD, secure desktop, IRC, truecrypt, tor, onion

Re: Pull request - various updates

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 3838 bytes --]

Hey Matthias,

thanks for sending in all those patches. I appreciate it very much.
There are many things in it that needed to be updated.

I just talked to Arne about the release planning with 2.17. We are going
to merge the "seventeen" branch with the master branch very soon so that
we can get that completely stable and ready for release. There are some
things about the ARM support to do and of course lots of testing.

After the merge I will merge your changes (and lots of other things on
my list) to the next tree which will eventually become Core Update 87.
That will hopefully be round about next week.

I wrote some comments below about some concerns I have. Please check.
The rest without a comment looks very good.

On Sat, 2014-11-15 at 23:42 +0100, Matthias Fischer wrote:
> Hi all,
> 
> I prepared updates for several IPFire-components and would like to send 
> a pull request hereby - please be patient, its my first one...:
> 
> htop - Update to 1.0.3:
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=ba85a1beb487854a14cbb288b436d6a88265a126
> 
> wget - Update to 1.16:
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=9d1da799fa7f2b07c742f1bcb7a7970c70050b25
> 
> wget - deleted obsolete patch file:
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=1f8ea39aca5468191ebb05ad23576f2d1bf43f1c
> 
> libpcap - Update to 1.6.2, added '--enable-bluetooth=no' (bluetooth 
> disabled to avoid otherwise needed patch for use with 'bluez-5.21'):
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=b1ad1b744f845e8d574af8bcd03f4590f6bd9ccc

I think that there should be some changes in the rootfile here. The
version number has changed quite a lot and usually the soname of the
library is changed as well.

> smartmontools - Update to 6.3:
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=6deed5addbf2ecc899fc4420469372fc98194aee
> 
> squid - update to 3.4.9:
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=bc3dd1e975d420cc54d2d2dce831d13e2a9ccad3
> 
> zlib - Update to 1.2.8:
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=6c96e0499b95151afe0f72f628a3c9b2bfbec25c
> 
> tcpdump - Update to 4.6.2:
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=0c1b7071ec5fc4ada96998dce0b1141a39b874be
> 
> pcre - Update to 8.3.6:
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=14c33f6393464991e38a6428a1361f1c9360a066

The latest version of pcre comes with a JIT compiler for regular
expressions. The implementation of that requires that memory is writable
and executable at the same time which is not allowed by grsecurity.

We had to disable this on IPFire 3 and I think this should be the same
case in IPFire 2 as it comes with grsecurity, too.

See here:
http://git.ipfire.org/?p=ipfire-3.x.git;a=commitdiff;h=5b7ea0e1636306d0bc6b5d77a621ed3d61f6c8d5


> Midnight Commander - Update to 4.8.13:
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=dc1d8fe731abec4a99be141e08054cc6647de745
> 
> snort - Update to 2.9.7.0:
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=4d88659446676f9034b04828062cd8303cb2a4b3
> 
> snort - Update urls for rules download (2.9.7.0), fixed url for 
> registration in 'ids.cgi':
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=8d29504c4dff83e31beb0791d5a9654499ae5ac8
> 
> daq - Update to 2.0.4:
> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=4db4bc1b1b57dd1f28b6d37d20fe851cbcdfbeb0
> 
> 
> 
> I tested all these updates in productive mode. For me, they seem to run 
> fine - if there are problems, please let me know!
> 
> Regards
> Matthias

Best,
-Michael

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 819 bytes --]

Re: Pull request - various updates

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 1636 bytes --]

Merged as well.

You should really check your email settings so that all mails get to the
list and that the email address is right...

-Michael

On Wed, 2014-11-19 at 18:51 +0100, Matthias Fischer wrote:
> Hi Michael,
> 
> On 19.11.2014 00:20, Michael Tremer wrote:
> >...
> > thanks for sending in all those patches. I appreciate it very much.
> 
> No Problem - you're welcome...! ;-)
> 
> > ...
> > I wrote some comments below about some concerns I have. Please check.
> > The rest without a comment looks very good.
> 
> Checked. Hm...
> 
> >> ...
> >> libpcap - Update to 1.6.2, added '--enable-bluetooth=no' (bluetooth
> >> ...
> >
> > I think that there should be some changes in the rootfile here. ...
> 
> Checked - done. Sorry - missing rootfile added!
> 
> >> ...
> >> pcre - Update to 8.3.6:
> >> http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=14c33f6393464991e38a6428a1361f1c9360a066
> >
> > The latest version of pcre comes with a JIT compiler for regular
> > expressions. The implementation of that requires that memory is writable
> > and executable at the same time which is not allowed by grsecurity.
> >
> > We had to disable this on IPFire 3 and I think this should be the same
> > case in IPFire 2 as it comes with grsecurity, too.
> >
> > See here:
> > http://git.ipfire.org/?p=ipfire-3.x.git;a=commitdiff;h=5b7ea0e1636306d0bc6b5d77a621ed3d61f6c8d5
> 
> Checked. Done.
> 
> Added/changed '--enable-jit \' to '--disable-jit \' in 'lfs'-file.
> 
> Devel-PC is compiling.
> 
> I'll test 'pcre' again when its ready.
> 
> Regards
> Matthias
> 

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 819 bytes --]