This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree".

The branch, core152 has been created at 1e2c442c9e2d11590af214bdddde5cf0506e0a52 (commit)

- Log ----------------------------------------------------------------- commit 1e2c442c9e2d11590af214bdddde5cf0506e0a52 Author: Michael Tremer michael.tremer@ipfire.org Date: Mon Nov 9 18:43:15 2020 +0000

samba: Add support for custom configuration changes

Signed-off-by: Michael Tremer michael.tremer@ipfire.org

commit 0e42d81285766431f20bd92218d9c427162c96dc Author: Matthias Fischer matthias.fischer@ipfire.org Date: Fri Nov 6 09:30:03 2020 +0100

core152: Ship header.pl

Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org

commit 632075bf579d1d706ade996b786f1061244dd6a9 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Oct 30 07:35:23 2020 +0100

samba: update to 4.13.1

This is a security release in order to address CVE-2020-14318 (Missing handle permissions check in SMB1/2/3 ChangeNotify), CVE-2020-14323 (Unprivileged user can crash winbind) and CVE-2020-14383 (An authenticated user can crash the DCE/RPC DNS with easily crafted records).

Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org

commit 2d43d770d26bff3cde665bfbb1f7ebbaf2acabfb Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Oct 29 13:48:58 2020 +0000

core152: Ship language files

Signed-off-by: Michael Tremer michael.tremer@ipfire.org

commit 0b9c2434f0becb75029fa8bc665678b11ce7bea1 Author: Michael Tremer michael.tremer@ipfire.org Date: Tue Oct 27 13:32:19 2020 +0000

core152: Ship updated SSH initscript

Signed-off-by: Michael Tremer michael.tremer@ipfire.org

commit acc8336f945b66d66fc15417905ce6bf2707876f Author: Michael Tremer michael.tremer@ipfire.org Date: Tue Oct 27 14:20:56 2020 +0100

OpenSSH: Fix initscript to actually kill the daemon

The SSH daemon was not terminated properly because killproc tried to terminate all processes with that name. That caused that the master daemon respawned some processed which were therefore not killed because killproc determined a list of PIDs only once before starting sending signals.

This patch only kills the master process which is being determined by using sshd's pid file.

That results in all established connections not being interrupted any more.

Furthermore, the loadproc function checks if any processes with the given name are already running which could be true if there are any connections still open. That check is being disabled with the -f switch and sshd will always be launched.

"/etc/init.d/sshd stop" might now print FAIL if only the master process, but no connection processes were terminated.

Signed-off-by: Michael Tremer michael.tremer@ipfire.org

commit 201ad7ff80eb8870aab2b903be6eb7aea2adf563 Merge: f29f16973 74fd04c33 Author: Michael Tremer michael.tremer@ipfire.org Date: Tue Oct 27 11:46:16 2020 +0000

Merge remote-tracking branch 'origin/next'

commit f29f169735ff3b431c6dc7cb50b36d0fe644163b Author: Michael Tremer michael.tremer@ipfire.org Date: Wed Oct 7 08:04:38 2020 +0000

avahi: Disable custom stack protector configuration

We already pass -fstack-protector-strong, which might be overridden by -fstack-protector-all. We also know that SSP works in our version of libc and do not need to link against libssp.

Signed-off-by: Michael Tremer michael.tremer@ipfire.org

-----------------------------------------------------------------------

hooks/post-receive -- IPFire 2.x development tree