Hey Matthias,

thanks for sending in all those patches. I appreciate it very much. There are many things in it that needed to be updated.

I just talked to Arne about the release planning with 2.17. We are going to merge the "seventeen" branch with the master branch very soon so that we can get that completely stable and ready for release. There are some things about the ARM support to do and of course lots of testing.

After the merge I will merge your changes (and lots of other things on my list) to the next tree which will eventually become Core Update 87. That will hopefully be round about next week.

I wrote some comments below about some concerns I have. Please check. The rest without a comment looks very good.

On Sat, 2014-11-15 at 23:42 +0100, Matthias Fischer wrote:

Hi all,

I prepared updates for several IPFire-components and would like to send a pull request hereby - please be patient, its my first one...:

htop - Update to 1.0.3: http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=ba85a1beb...

wget - Update to 1.16: http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=9d1da799f...

wget - deleted obsolete patch file: http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=1f8ea39ac...

libpcap - Update to 1.6.2, added '--enable-bluetooth=no' (bluetooth disabled to avoid otherwise needed patch for use with 'bluez-5.21'): http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=b1ad1b744...

I think that there should be some changes in the rootfile here. The version number has changed quite a lot and usually the soname of the library is changed as well.

smartmontools - Update to 6.3: http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=6deed5add...

squid - update to 3.4.9: http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=bc3dd1e97...

zlib - Update to 1.2.8: http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=6c96e0499...

tcpdump - Update to 4.6.2: http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=0c1b7071e...

pcre - Update to 8.3.6: http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=14c33f639...

The latest version of pcre comes with a JIT compiler for regular expressions. The implementation of that requires that memory is writable and executable at the same time which is not allowed by grsecurity.

We had to disable this on IPFire 3 and I think this should be the same case in IPFire 2 as it comes with grsecurity, too.

See here: http://git.ipfire.org/?p=ipfire-3.x.git;a=commitdiff;h=5b7ea0e1636306d0bc6b5...

Midnight Commander - Update to 4.8.13: http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=dc1d8fe73...

snort - Update to 2.9.7.0: http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=4d8865944...

snort - Update urls for rules download (2.9.7.0), fixed url for registration in 'ids.cgi': http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=8d29504c4...

daq - Update to 2.0.4: http://git.ipfire.org/?p=people/mfischer/ipfire-2.x.git;a=commit;h=4db4bc1b1...

I tested all these updates in productive mode. For me, they seem to run fine - if there are problems, please let me know!

Regards Matthias

Best, -Michael