[git.ipfire.org] IPFire 2.x development tree branch, core144, created. 7ae36c0fd9764d25b512f51edbf1c4f090ae6b04
This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree".
The branch, core144 has been created at 7ae36c0fd9764d25b512f51edbf1c4f090ae6b04 (commit)
- Log ----------------------------------------------------------------- commit 7ae36c0fd9764d25b512f51edbf1c4f090ae6b04 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Thu Apr 23 19:57:01 2020 +0200
core144: add calamaris
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit bc18b7aabb1fc050cba2238aaef0b7ea78da6752 Merge: 1bba20a98 651fa25f8 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Wed Apr 22 10:17:05 2020 +0000
Merge remote-tracking branch 'origin/master' into next
commit 1bba20a985ec2dc29322e7f2cc0d820ae9a25758 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Wed Apr 22 02:41:49 2020 +0200
bind: update rootfile
commit 715b841e5b8e53774968a5f844359e1281b725fc Author: Arne Fitzenreiter arne_f@ipfire.org Date: Tue Apr 21 19:16:53 2020 +0000
core144: restart squid
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit c24bb323e129e047fae0de03383d5e7aeed1825d Author: Arne Fitzenreiter arne_f@ipfire.org Date: Tue Apr 21 19:14:58 2020 +0000
core144: add bind
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 1494b402548fb461fe8306d6114fe31eeeecd98c Author: Matthias Fischer matthias.fischer@ipfire.org Date: Tue Apr 21 21:02:38 2020 +0200
bind: Update to 9.11.18
For details see: https://downloads.isc.org/isc/bind9/9.11.18/RELEASE-NOTES-bind-9.11.18.html
"Security Fixes
DNS rebinding protection was ineffective when BIND 9 is configured as a forwarding DNS server. Found and responsibly reported by Tobias Klein. [GL #1574]
Known Issues
We have received reports that in some circumstances, receipt of an IXFR can cause the processing of queries to slow significantly. Some of these were related to RPZ processing, which has been fixed in this release (see below). Others appear to occur where there are NSEC3-related changes (such as an operator changing the NSEC3 salt used in the hash calculation). These are being investigated. [GL #1685]"
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 2d52362dcb8e8b1284180667e23474a320d2ff8a Author: Arne Fitzenreiter arne_f@ipfire.org Date: Tue Apr 21 19:13:33 2020 +0000
core144: add squid
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 1e3ae30e1de234175f5ccaa4ecc04e0892d04e84 Author: Matthias Fischer matthias.fischer@ipfire.org Date: Tue Apr 21 20:55:51 2020 +0200
squid: Update to 4.11
For details see: http://www.squid-cache.org/Versions/v4/changesets/
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit b481754aa38d34e33cb81d8fd4c9dff4ad34c7e0 Author: Matthias Fischer matthias.fischer@ipfire.org Date: Tue Apr 21 20:49:58 2020 +0200
dhcpcd: Update to 9.0.2
For details see: https://roy.marples.name/archives/dhcpcd-discuss/0002941.html
"* Control sockets are not opened in test mode * privsep: no longer aborts if protocol not available * inet6: Don't regen temporary addresses without a state * inet6: Reduce RA log spam * dhcp6: Don't log when things consitently fail * inet6: Add temporary directive to slaac option [1] * Ensure current interface flags persist when setting a flag * DHCP via BPF is now aligned correctly * CMSG buffers are now aligned correctly * hostnames are no longer clobbered when being forced and a RA is recieved"
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 2399b70dc2d0d8939a0bc9937e84a319da2447c5 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Tue Apr 21 16:51:53 2020 +0200
openssl: update rootfile
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit a95c8b978137d435d4b734b03371c7fc7f2930b1 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Tue Apr 21 13:52:01 2020 +0000
core144: ship /etc/os-release
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 83cee5f02ead8d296bc874651f6f36a07e581df7 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Tue Apr 21 13:50:43 2020 +0000
core144: add openssl
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 9ec0fca91d237fffe686b2a23fa5cd1dac731fd3 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Tue Apr 21 15:43:38 2020 +0200
openssl: update to 1.1.1g
CVE-2020-1967 (OpenSSL advisory) [High severity] 21 April 2020: Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. https://www.openssl.org/news/secadv/20200421.txt
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 88ba9a24801338f5421cace9ae99db31be1f0889 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Mon Apr 20 15:41:09 2020 +0000
core144: remove gcc go binary and libs
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit a9fd8519c2452cc77dc00513aaddf54b47eaee33 Author: Michael Tremer michael.tremer@ipfire.org Date: Tue Apr 14 15:01:00 2020 +0000
toolchain: Do not attempt to strip anything in /dev, /proc, /sys and /tmp
Signed-off-by: Michael Tremer michael.tremer@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 20253656fc6555aa215ffdd798cd2d07e5d0254c Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Apr 9 20:45:16 2020 +0000
Add /etc/os-release
This file is being read by some packages to find out on what distribution they are running on.
This file needs to be included in every Core Update.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 6b751211205f5b441101742674decad94e96132a Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Apr 16 19:27:14 2020 +0000
gcc: Drop Go on i586
Signed-off-by: Michael Tremer michael.tremer@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 6d5e9f40f88d0104ede1417a00e8308fd8399116 Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Apr 16 19:27:13 2020 +0000
gcc: Drop Go on armv5tel
Signed-off-by: Michael Tremer michael.tremer@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit c22cee9288bc61c609ce1557fd59eec46a946189 Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Apr 16 19:27:12 2020 +0000
gcc: Drop Go on aarch64
Signed-off-by: Michael Tremer michael.tremer@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 0c4cd7f3935fe9dfbd8a4ef90ce0b97f54ad3864 Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Apr 16 19:27:11 2020 +0000
amazon-ssm-agent: Bump version to ship package built with golang
gccgo compiles this, but unfortunately the binaries malfunction sometimes. golang generates a bug-free binary.
https://github.com/aws/amazon-ssm-agent/issues/271
Signed-off-by: Michael Tremer michael.tremer@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 8bded835a27af820100048f6078c2cb6b37d4ad4 Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Apr 16 19:27:10 2020 +0000
amazon-ssm-agent: Remove temporary shared files
Signed-off-by: Michael Tremer michael.tremer@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 3a56d70ce79021cafa09ff5c6b00f26cc0299e9b Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Apr 16 19:27:09 2020 +0000
strip: Do not try to strip Go binaries
There is loads of stuff for PowerPC and other architectures in the directory which we cannot strip. Therefore we ignore the whole directory.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit d2315d00c20c089a242758955c53a00f5166d7ae Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Apr 16 19:27:08 2020 +0000
Package the official Go compiler
Since Go has a horrible build system which requires a Go compiler to build the Go compiler and takes a very long time to compile, we are following Rust and are using the "official" pre-compiled release tarball.
We no longer ship the Go runtime, which mitigates the risk of shipping any malware.
Because we currently only have one package using this and which is only being compiled for x86_64, we are only making Go available on this architecture.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit eed179acdccd59e8e31a11ba588d3c54da07b09a Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Apr 16 19:27:07 2020 +0000
gcc: Drop support for Go
Signed-off-by: Michael Tremer michael.tremer@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit b4863d7d141dd056a421e99a4f78060eba9d1038 Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Apr 16 19:27:06 2020 +0000
Config: Set some Go environment variables
Signed-off-by: Michael Tremer michael.tremer@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 7f4780ba71247b5e2fe423ef7d836efa861ebd16 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Mon Apr 20 15:22:57 2020 +0000
core144: add apache
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit fb241a29c5d7e48a09d3e3d3995b9cc6cfc57c5c Author: Matthias Fischer matthias.fischer@ipfire.org Date: Sun Apr 12 14:29:19 2020 +0200
apache: Update to 2.4.43
For details see: http://mirror.dkd.de/apache//httpd/CHANGES_2.4.43
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org Reviewed-by: Michael Tremer michael.tremer@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 34b7b986169eebce28c48cf4efc77200303c83b3 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Sun Apr 19 17:37:28 2020 +0000
core144: add dhcpcd initskript and user
this commit also re/create the user after backup restore.
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 533c4312fad295d520f8ccef40e3e1b9f2b1b7f6 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Sun Apr 19 19:18:04 2020 +0200
dhcpcd: create dhcpcd user and chroot folder
dhcpcd 9.x adds privelege seperation by creating a chroot and running parts of the client not as root.
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 18136c5ce9f32b6186df48bc2c2a7fade6792615 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Sun Apr 19 15:24:02 2020 +0200
dhcpcd: new pid path for dhcpcd 9.x
dhcpcd 9.x move the path of the pids to an own folder.
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 03e4f8d60e5671bdc1ec90a829b1f389bcd0b8aa Author: Matthias Fischer matthias.fischer@ipfire.org Date: Wed Apr 15 18:19:03 2020 +0200
dhcpcd: Update to 9.0.1
For details see: https://roy.marples.name/archives/dhcpcd-discuss/0002921.html
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 296675c9ee3b984b5bfb5bdff032cdd2375639a3 Merge: b3e2c3ce2 f5dba19ed Author: Arne Fitzenreiter arne_f@ipfire.org Date: Sun Apr 12 08:25:40 2020 +0200
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
commit f5dba19edfdbc8f925b7fced7782d7bc3c58d998 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Sun Apr 12 08:18:51 2020 +0200
core144: add dhcpcd
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit b3e2c3ce269a0492e8e55208dc05dbf82977bfd4 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Sun Apr 12 08:16:28 2020 +0200
dhcpcd: update to 9.00
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 89445161b066671398185384cc2a80843cc9dc04 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Sun Apr 12 08:14:26 2020 +0200
core144: start update
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
-----------------------------------------------------------------------
hooks/post-receive -- IPFire 2.x development tree
-
Arne Fitzenreiter