This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, core100 has been created at 33513817fa4eac7007fc4e39c348d7fffdfac20a (commit) - Log ----------------------------------------------------------------- commit 33513817fa4eac7007fc4e39c348d7fffdfac20a Author: Arne Fitzenreiter Date: Sun Mar 20 09:36:33 2016 +0100 set version to IPFire 2.19 core100 Signed-off-by: Arne Fitzenreiter commit dd676ffb49f9b5b6c9fe4178f86cd048fb789593 Author: Arne Fitzenreiter Date: Sat Mar 19 21:56:30 2016 +0100 core100: add changes to updater Signed-off-by: Arne Fitzenreiter commit d731b1f9914738ba8c76f7724b7915c941d3e336 Author: Arne Fitzenreiter Date: Sat Mar 19 12:54:12 2016 +0100 mt7601u-firmware: added Signed-off-by: Arne Fitzenreiter commit ee1148d12a32988f3ae8c75f7c4a4b31883dc674 Author: Arne Fitzenreiter Date: Sat Mar 19 12:46:38 2016 +0100 ath10k-firmware: added Signed-off-by: Arne Fitzenreiter commit 96e31c9817f1ee3bec3fe33ecae7a84ff7e4ffff Author: Arne Fitzenreiter Date: Fri Mar 18 19:26:39 2016 +0100 ntp: wait for connection if dhcpcd is running Signed-off-by: Arne Fitzenreiter commit 8a148bbc5a9de80edb36fad91cd3f0e6ca3155a1 Author: Arne Fitzenreiter Date: Thu Mar 17 23:04:54 2016 +0100 Config: update sourcecode upload url Signed-off-by: Arne Fitzenreiter commit 01ddfa0d6f1483071fd87e9f6c77085b174a1b14 Author: Arne Fitzenreiter Date: Thu Mar 17 23:00:46 2016 +0100 kernel: update to 3.14.65 Signed-off-by: Arne Fitzenreiter commit 224401de72e7e08403cd07774d4f311d2e86c3a7 Author: Arne Fitzenreiter Date: Wed Mar 16 23:05:06 2016 +0100 linux-pae: add root (hd0) to grub.conf for virt install. jiffybox will not load the kernel without this entry. not tested on citrix yet. commit 8649a31ed040795b09228c8f3fa181d001614541 Author: Arne Fitzenreiter Date: Wed Mar 16 22:58:21 2016 +0100 u-boot: fix fat16 reader commit f08c14477ed0f875a86d01c1d11bc234766953aa Author: Arne Fitzenreiter Date: Mon Mar 14 18:34:45 2016 +0100 core100: touch arm kernel and initrd before unpack. this is a workaround for a uboot bug that not find all files. commit 6fa34327dd38412820e9654df69d48995b02906a Author: Arne Fitzenreiter Date: Mon Mar 14 18:04:38 2016 +0100 kernel: enable NFS_DEBUG fixes #11053 commit 1775dbd2c6dc36e26712bbffa593e12af475c6a2 Author: Arne Fitzenreiter Date: Thu Mar 10 22:29:02 2016 +0100 kernel: update to 3.14.64 Signed-off-by: Arne Fitzenreiter commit 46ce813e330925e0ab5969cf3e34c9e49fb9df88 Author: Michael Tremer Date: Thu Mar 10 19:22:04 2016 +0000 setup: Fix segmentation fault with more than four NICs found Signed-off-by: Michael Tremer commit 9ef4bbf7032d6727a6debc10702e9beacd0b097d Merge: cb679b1 8c1cf3b Author: Michael Tremer Date: Tue Mar 8 22:45:04 2016 +0000 Merge branch 'bird' into next commit 8c1cf3b1f929ecd085827469ccb02ab9459de711 Author: Michael Tremer Date: Tue Mar 8 22:44:01 2016 +0000 bird: New package Signed-off-by: Michael Tremer commit cb679b1eb965e0df188b50ab0337cf1687ed70cb Author: Arne Fitzenreiter Date: Tue Mar 8 21:32:29 2016 +0100 core100: add missing openssl rootfile to updater Signed-off-by: Arne Fitzenreiter commit 03022f412ef2d4cfd0bad133988f2cc3312728d1 Author: Arne Fitzenreiter Date: Tue Mar 8 20:29:59 2016 +0100 core100: ship openssl (build with new gcc) Signed-off-by: Arne Fitzenreiter commit 593e2eeb0320285c309686668b73744973d0a944 Author: Arne Fitzenreiter Date: Tue Mar 8 20:28:12 2016 +0100 core100: ship glibc (build with new gcc) Signed-off-by: Arne Fitzenreiter commit 88cc99094805eb3133cac3eec0005844f5904721 Author: Arne Fitzenreiter Date: Tue Mar 8 20:01:49 2016 +0100 core100: add kernel to updater Signed-off-by: Arne Fitzenreiter commit f83c50537bcb4b74bebcff83f86f69b60def544f Author: Arne Fitzenreiter Date: Tue Mar 8 19:31:49 2016 +0100 core100: add function to set last correct installed core on update. Signed-off-by: Arne Fitzenreiter commit 822b4313d1029bcfa19ec6cc2f36da128001ab24 Author: Arne Fitzenreiter Date: Sat Mar 5 17:09:32 2016 +0100 kernel: update to 3.14.63 Signed-off-by: Arne Fitzenreiter commit 4f472f86f854a5460c4fa8eb63fd1a4393d6099d Author: Arne Fitzenreiter Date: Sat Mar 5 17:07:23 2016 +0100 flash-images: copy kernel and initrd first there is a u-boot bug that not find all files if the directory entries was splittet to more sectors so copy the important files first. Signed-off-by: Arne Fitzenreiter commit 4a6cfe51a16575c7100862e2cc6f959bc48c6628 Merge: 64835e0 75ad2e4 Author: Arne Fitzenreiter Date: Fri Mar 4 07:09:02 2016 +0100 Merge remote-tracking branch 'origin/master' into next Signed-off-by: Arne Fitzenreiter commit 64835e022c52d24432d201bd4d57f1aa962c1f90 Author: Michael Tremer Date: Sun Feb 28 12:27:06 2016 -0800 udev: Fix calling VLAN script The VLAN hotplugging script was called with a wrong parameter that should just be used to rename devices. Hence the script was not correctly executed and did not create the virtual devices. Fixes: #11009 Signed-off-by: Michael Tremer commit a6cd8b9b5d903da27fef106329c892e372753e5f Author: Matthias Fischer Date: Sat Feb 27 16:29:45 2016 +0100 dnsmasq: 2.76test10 with latest patch (005) and some fixes 1. Added patch 005 because of the discussion on the dnsmasq-list: "I've noticed that replies which get their TTL from the dhcp-ttl option always get the TTL specified in dhcp-ttl. I'd prefer something like max(0, min(, - )). Otherwise, dns might hand out a high TTL for a dhcp-lease which expires one second later. ... Seems a sensible addition. Cheers, Simon." 2. Fixed several line numbers and patch lines in 'dnsmasq-Add-support-to-read-ISC-DHCP-lease-file.patch'. On the last build I got some "Hunk failed" messages. Patches are now applied exactly at the given lines. 3. Nevertheless, I still get some warnings: ... dnsmasq.c: In function 'main': dnsmasq.c:55:7: warning: unused variable 'did_bind' [-Wunused-variable] int did_bind = 0; ^ dnsmasq.c:54:9: warning: unused variable 'bound_device' [-Wunused-variable] char *bound_device = NULL; ^ ... isc.c: In function 'dhcp_lease_new': isc.c:40:3: warning: ignoring return value of 'asprintf', declared with attribute warn_unused_result [-Wunused-result] asprintf(&lease->fqdn, "%s.%s", hostname, daemon->domain_suffix); ^ Asking about these warnings in the dnsmasq-list showed no reaction - no one answered. Best, Matthias Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 3b9815eb87e83a1b24e85ce0eab14a962b62ccd0 Author: Matthias Fischer Date: Fri Feb 26 18:29:28 2016 +0100 dnsmasq: 2.76test10 with latest patches (001-004) This is 'dnsmasq 2.76test10', based on current 'next', containing latest patches. Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 43747fae333273890aadb66b72d911efaa4c2086 Author: Arne Fitzenreiter Date: Fri Feb 26 13:43:33 2016 +0100 kernel: update to 3.14.62 Signed-off-by: Arne Fitzenreiter commit 5f39eb211974f1fa21c1f769f62b779f85ffbdf4 Author: Arne Fitzenreiter Date: Fri Feb 26 07:27:09 2016 +0100 rename core99 to core100 for inserting another OpenSSL Security update Signed-off-by: Arne Fitzenreiter commit 77c48fbe35e59957036b9533db0ec5b88a7a1e3d Author: Michael Tremer Date: Wed Feb 24 22:13:36 2016 -0800 core99: Ship updated xz Signed-off-by: Michael Tremer commit f443b4cba7fbd22723e1716355ee921e289907ab Author: Marcel Lorenz Date: Tue Feb 23 08:49:27 2016 +0100 bison: update to 3.0.4 Update bison to the last version from Linux from Scratch. Signed-off-by: Marcel Lorenz Signed-off-by: Michael Tremer commit 962fade2d4714d4c8d5e26b841e4a87c96f92845 Author: Marcel Lorenz Date: Tue Feb 23 09:37:28 2016 +0100 xz: update to 5.2.2 Update xz to last version from Linux from Scratch. Signed-off-by: Marcel Lorenz Signed-off-by: Michael Tremer commit 28ef7a6a9e782410811e7733f27ec85b4ba0fe19 Author: Marcel Lorenz Date: Tue Feb 23 08:46:23 2016 +0100 m4: update to 1.4.17 Update m4 to last version from Linux from Scratch. Signed-off-by: Marcel Lorenz Signed-off-by: Michael Tremer commit 86b759785b24acd678450f639424b81798e329ab Author: Michael Tremer Date: Tue Feb 23 09:44:40 2016 -0800 make.sh: Update source upload URL There is no longer a SSH service on source.ipfire.org. The usual login on git.ipfire.org should be used instead. Signed-off-by: Michael Tremer commit efd02229ae5402bad762a20c9ce75607267e3309 Author: Arne Fitzenreiter Date: Wed Feb 24 16:01:33 2016 +0100 flash-images: change root uuid replacer sed i cannot really test this on my systems. Signed-off-by: Arne Fitzenreiter commit 920f1950959bb1500847eb3e3eaebbe88ce08163 Author: Arne Fitzenreiter Date: Tue Feb 23 20:08:25 2016 +0100 flash-image: set RAMDISK_MODE=2 Signed-off-by: Arne Fitzenreiter commit c83d16146342d2a0d6ad8c101c82de71ab40d9e3 Author: Arne Fitzenreiter Date: Tue Feb 23 20:01:30 2016 +0100 init-functions: enable autoramdisk with 400MB The 512MB raspberry pi reserve some memory for buffers and gpu so there are a bit less than 490 MB free. Signed-off-by: Arne Fitzenreiter commit 38956241bb0644480887aeb9a399e3d9ba2fc3f4 Author: Arne Fitzenreiter Date: Tue Feb 23 19:49:49 2016 +0100 flash-image: fix root uuid on some build machines. Signed-off-by: Arne Fitzenreiter commit ee552b7e1a8238b620b557f16baf2131cbafc104 Author: Arne Fitzenreiter Date: Fri Feb 19 07:18:29 2016 +0100 kernel: update to 3.14.61 Signed-off-by: Arne Fitzenreiter commit 802b916d10aa314ae878ec633e7c3bbd2adaba7e Merge: 879458d 1ffbca6 Author: Arne Fitzenreiter Date: Wed Feb 17 19:45:08 2016 +0100 Merge remote-tracking branch 'origin/master' into next Signed-off-by: Arne Fitzenreiter Conflicts: make.sh commit 879458d41f95578cd35e0f8e9f9e5078aa8dccbb Author: Arne Fitzenreiter Date: Wed Feb 17 10:10:19 2016 +0100 rename core98 to 99 for glibc security update Signed-off-by: Arne Fitzenreiter commit fd3b90c8751df6db7a99bcf3181cef608bb72417 Author: Matthias Fischer Date: Sat Feb 13 08:29:39 2016 +0100 squid 3.4.14: Bugfix for #4431 (C code is not compiled with CFLAGS) For details see: http://bugs.squid-cache.org/show_bug.cgi?id=4431 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit e039df8613b4f51b58ca249998ef66fc7bb76758 Author: Arne Fitzenreiter Date: Wed Feb 10 08:36:17 2016 +0100 backports: remove all old media modules. more modules are renamed or merged into other modules. Signed-off-by: Arne Fitzenreiter commit a760a5cfa96c9f383bf3244e07a34d13f97cbc63 Author: Arne Fitzenreiter Date: Mon Feb 8 13:53:13 2016 +0100 dracut: remove marvell sdio modules from initrd. this allows to switch to uap module on dreamplug. Signed-off-by: Arne Fitzenreiter commit 7b757df70fb4caa70eb0f3a0e0cd1af7c9adaea1 Author: Michael Tremer Date: Mon Feb 8 01:52:18 2016 +0000 core98: Ship changed /etc/ppp/ip-up Signed-off-by: Michael Tremer commit c1bf984e05ff9c523121d459cd58154d3d37a34a Author: Matthias Fischer Date: Sun Feb 7 13:45:32 2016 +0100 New IP-address of 'ping.ipfire.org' Telekom gateways (e.g.) don't answer 'pings', therefor '/etc/ppp/ip-up' uses 'ping.ipfire.org' for the 'gateway Graph' in 'Status / Network (other'. After moving the infrastructure, several IP addresses were changed. '178.63.73.246' doesn't work anymore for 'ping.ipfire.org', its now '81.3.27.38'. Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 8260fb7e0eac021a9be1c120d39ecb8e4a76c2a2 Author: Michael Tremer Date: Mon Feb 8 01:40:35 2016 +0000 core98: Ship recently updated grep and sed Signed-off-by: Michael Tremer commit c9ed30440afb129925fd05692a1c403db3831a43 Author: Matthias Fischer Date: Sun Jan 31 14:49:17 2016 +0100 grep: Update to 2.22 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 9dc6723a0a677ad84f8bc40679d963bcf8704f71 Author: Matthias Fischer Date: Sun Jan 31 14:44:05 2016 +0100 sed: Update to 4.2.2 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 067db4d53abbaeaaaaf46515ee834c78f1bf235b Merge: 645378f d651e48 Author: Michael Tremer Date: Mon Feb 8 01:33:15 2016 +0000 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next commit d651e48f708182ade9669a5119cc63300b70d2d3 Author: Arne Fitzenreiter Date: Sun Feb 7 09:38:20 2016 +0100 kernel: disable grsecurity KSTACKOVERFLOW. this is the reason for crashes usb lan dongles and media devices. Signed-off-by: Arne Fitzenreiter commit 645378fbb9f8540ace66bd3a9be70583b6e15a6f Author: Michael Tremer Date: Fri Feb 5 10:24:03 2016 +0000 firewall: Fix MAC filter Packets destined for the firewall coming in from the blue device where accepted too early to be processed by the firewall input chain rules. Signed-off-by: Michael Tremer commit ff43197b01d45dd6119fb15586c2ce29bd4f8cb3 Merge: 0aa7160 552fb4b Author: Michael Tremer Date: Thu Feb 4 14:35:55 2016 +0000 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next commit 0aa71600efb5dcff104135ed4bf621a23ee19ced Author: Michael Tremer Date: Thu Feb 4 14:31:53 2016 +0000 wirelessctrl: Remove some unused code Signed-off-by: Michael Tremer commit 552fb4b8b5aa738959848dafc20d41e6fdbdbe4e Author: Arne Fitzenreiter Date: Mon Feb 1 07:28:03 2016 +0100 dhcpcd: rework mtu handling on buggy nic's some nic's loose the carrier after setting new mtu. Signed-off-by: Arne Fitzenreiter commit a06723b1f4e87ee5b31dbc59e7b21a9e57750989 Author: Michael Tremer Date: Sat Jan 30 16:37:21 2016 +0000 core98: Ship updated tzdata Signed-off-by: Michael Tremer commit f83b3c65a34b5e66255c77140724db684e3e460b Author: Matthias Fischer Date: Sat Jan 30 11:07:46 2016 +0100 tzdata: Update to 2016a Fixes https://bugzilla.ipfire.org/show_bug.cgi?id=11034 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 57d98918a1a11077d8d3e3caeaca9d85e4200ea5 Author: Arne Fitzenreiter Date: Fri Jan 29 14:25:25 2016 +0100 kernel: update to 3.14.60 Signed-off-by: Arne Fitzenreiter commit 35b24ff8a933e2ab8614c4f9b7c27c25c6f95473 Author: Arne Fitzenreiter Date: Thu Jan 28 22:08:08 2016 +0100 set core to 98 and move 97 to oldcore Signed-off-by: Arne Fitzenreiter commit 78574c184666087272235ceeafceaf585cff96ba Author: Arne Fitzenreiter Date: Thu Jan 28 16:20:16 2016 +0100 finish core97 Signed-off-by: Arne Fitzenreiter commit a6c71642778020a832bb5da67db8ebd004d85bad Author: Arne Fitzenreiter Date: Thu Jan 28 15:58:46 2016 +0100 openssl: security update to 1.0.2f changes: * DH small subgroups - CVE-2016-0701 * SSLv2 doesn't block disabled ciphers - CVE-2015-3197 * Reject DH handshakes with parameters shorter than 1024 bits Signed-off-by: Arne Fitzenreiter commit eb2f4a4d2623d8e3646156126884dd78b8357dc7 Author: Arne Fitzenreiter Date: Thu Jan 28 13:24:50 2016 +0100 hwdate: update databases pci.ids: 2016.01.28 usb.ids: 2015.12.17 Signed-off-by: Arne Fitzenreiter commit ecd50190976df0b55c912ee4b2eb004652cd3b4d Author: Arne Fitzenreiter Date: Thu Jan 28 13:08:59 2016 +0100 core97: prepare new core97 with openssl and openssh update. the update itself has to be done... Signed-off-by: Arne Fitzenreiter commit 6fa8a1a9cc50d2df78650f1fc0f8f6f3b9111398 Author: Arne Fitzenreiter Date: Thu Jan 28 13:03:39 2016 +0100 rename core97 to 98 because we have to insert OpenSSL security update Signed-off-by: Arne Fitzenreiter commit 235888599a4afa54d54421328733bf003c45711a Author: Arne Fitzenreiter Date: Thu Jan 28 13:02:09 2016 +0100 backports: update to 4.2.6 Signed-off-by: Arne Fitzenreiter commit 8998dde892d3e515747ee9a2e6e3fdf04ae607b9 Author: Arne Fitzenreiter Date: Tue Jan 26 18:02:00 2016 +0100 rsync: update to 3.1.2 Signed-off-by: Arne Fitzenreiter commit 00ee4eb13ce2f3cdd7deee08b6487145b46b28bb Author: Arne Fitzenreiter Date: Mon Jan 25 20:15:06 2016 +0100 kernel: update to 3.14.59 Signed-off-by: Arne Fitzenreiter commit 02a60a9b9e99f1a8aa20b1deefa2b622ba99a5c6 Author: Michael Tremer Date: Sat Jan 23 01:46:42 2016 +0000 squid: Actually make --with-filedescriptors work Signed-off-by: Michael Tremer commit cf82da6b376e4c7456a0690968ad2e879029a70c Author: Michael Tremer Date: Sat Jan 23 00:41:02 2016 +0000 core97: Ship updated CGI files Signed-off-by: Michael Tremer commit c97698a8f4b2520e198521c3d67a25efc3ad3776 Merge: 665f799 43638be Author: Michael Tremer Date: Sat Jan 23 00:39:24 2016 +0000 Merge remote-tracking branch 'meitelwein/web-gui-ipv6' into next commit 665f79926d025fec413531c397ccd6998583237e Merge: 92e4521 c26171b Author: Michael Tremer Date: Sat Jan 23 00:39:19 2016 +0000 Merge remote-tracking branch 'origin/master' into next commit 92e4521572f0a5a6411ce74a7a70b9b65dcebb26 Author: Daniel Weismüller Date: Fri Jan 22 12:10:19 2016 +0100 cmake: Disable parallelism Building cmake uses a high amount of memory (>2G) and fails to build on my system. Using less processes reduces memory usage and lets the build succeed. Signed-off-by: Daniel Weismüller Signed-off-by: Michael Tremer commit 20b27af8634b88fa400b1779415fc92888fbb1d8 Author: Michael Tremer Date: Fri Jan 22 00:55:46 2016 +0000 Update translations Signed-off-by: Michael Tremer commit 2775ab9cc63708ea0370d5220d5ee13a4f94142b Author: Michael Tremer Date: Fri Jan 22 00:55:25 2016 +0000 core97: Ship iptables conntrack changes Signed-off-by: Michael Tremer commit 8a1a3bf3934c8a92c605135ee13db466ea3dcbf4 Merge: 41410d1 6b86307 Author: Michael Tremer Date: Fri Jan 22 00:54:14 2016 +0000 Merge remote-tracking branch 'ms/iptables-conntrack' into next commit 41410d197b3dbf75dfd05376ed623857adac8977 Merge: 22a504c a7b0967 Author: Michael Tremer Date: Fri Jan 22 00:49:15 2016 +0000 Merge branch 'hyper-v-fixes' into next commit 22a504c69cb578f6e34928f3d862beac635e5224 Author: Arne Fitzenreiter Date: Wed Jan 20 19:28:56 2016 +0100 toolchain: fix build on hosts that not support strong stackprotect Signed-off-by: Arne Fitzenreiter commit 928eba27a5e15074d8e5b7d8b9f6892d122bf40f Author: Michael Tremer Date: Tue Jan 19 00:07:07 2016 +0000 core97: Ship updated webaccess.cgi Signed-off-by: Michael Tremer commit bcb30674e2f7f3fe4989bffe5fbc43d44be86633 Author: Erik Kapfer Date: Mon Jan 18 10:14:10 2016 +0100 webaccess.cgi: Fixed language settings. Fix for #10879. Added also use strict. Signed-off-by: Erik Kapfer Signed-off-by: Michael Tremer commit 857b2c795e2c982cb5967725ba01a1e3c29d43f5 Author: Michael Tremer Date: Mon Jan 18 22:26:23 2016 +0000 Improve hardening by using -fstack-protector-strong This functionality is now available for us since we updated to GCC 4.9 and just improves the stack smashing protector in GCC. Signed-off-by: Michael Tremer commit cc9f461f74525fa3f7300a86676634780c884a21 Author: Matthias Fischer Date: Tue Jan 12 18:46:52 2016 +0100 nano: Update to 2.5.1 Excerpt form 'NEWS': "It includes fixes for a syntax-highlighting bug and a positionlog bug, it disables a time-eating multiline regex in the C syntax, and it adds an escape hatch to the WriteOut menu when --tempfile is used: the discardbuffer command, ^Q. It also has translation updates for fifteen languages, and a small fix in the softwrap code." Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 037cf8d20dd5d754c89c8d267d9fd6384061d170 Author: Michael Tremer Date: Sun Jan 17 18:51:47 2016 +0000 core97: Ship updated openssh Signed-off-by: Michael Tremer commit 43e5fe9ded9899276a338476ba8a2974055ca222 Author: Matthias Fischer Date: Fri Jan 15 17:43:50 2016 +0100 openssh: Update to 7.1p2 Fixes CVE-2016-0777 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 64285d23eb9003efd7a2273d61814d4cd144431d Merge: cfdeb28 9b4f0e6 Author: Michael Tremer Date: Sun Jan 17 18:49:03 2016 +0000 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next commit 9b4f0e639705d87708b67038e11fc4f10cbe81e5 Author: Arne Fitzenreiter Date: Fri Jan 15 07:20:34 2016 +0100 toolchain: bump version number Signed-off-by: Arne Fitzenreiter commit 3da3ac98564bc97ba96bc2e10d5d6acb746a33de Author: Arne Fitzenreiter Date: Thu Jan 14 16:08:24 2016 +0100 gcc: remove gdb python files also in root build. Signed-off-by: Arne Fitzenreiter commit 8f2ac12a87a1308c5e9adc7e7adb7150d5a1b364 Author: Arne Fitzenreiter Date: Thu Jan 14 03:55:54 2016 +0100 toolchain: move *.py remove to correct pass. Signed-off-by: Arne Fitzenreiter commit 6e96dd142aa6a54f970968c8a1bb2087aa8c6147 Author: Arne Fitzenreiter Date: Wed Jan 13 19:04:56 2016 +0100 toolchain: enable bootstrap and remove *.py files from lib. only with bootstrap the gcc pass2 build works on arm. Signed-off-by: Arne Fitzenreiter commit 905d1afd4e7d30b9088e8c214248a76f5ff4ae72 Author: Arne Fitzenreiter Date: Wed Jan 13 07:24:34 2016 +0100 kernel: disable RANDSTRUCT RANDSRUCT is incompatible with ccache build. fixes #10905 fixes #11012 Signed-off-by: Arne Fitzenreiter commit cfdeb28050cac9c87d7be896378f2f53d722ff7d Author: Michael Tremer Date: Sun Jan 10 21:20:49 2016 +0000 core97: Ship updated ntp Signed-off-by: Michael Tremer commit db017b4b6ef9ccf32f7e9a2c22f58c3f339e98ad Author: Matthias Fischer Date: Sat Jan 9 20:39:45 2016 +0100 ntp 4.2.8p5: removed obsolete patch file Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit c1de76704acbb06bffbb4e6b15f66892db93c525 Author: Matthias Fischer Date: Sat Jan 9 20:29:41 2016 +0100 ntp: Update to 4.2.8p5 "...addresses 1 medium-severity security issue, 14 bugfixes, and contains other improvements over 4.2.8p4." For a complete list, see: http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit b75b6382ab1a3a71bb434932623a396b106d6925 Author: Michael Tremer Date: Sun Jan 10 19:35:42 2016 +0000 grub: Disable hardening for grub-script-check Signed-off-by: Michael Tremer commit 1d9be34e2a617efa19135b646914fb1ef507a8b9 Author: Michael Tremer Date: Sat Jan 9 19:48:21 2016 +0000 ccache: Include hash of compiler specs in hashing Signed-off-by: Michael Tremer commit 43638be58b2ae99bd07a420c5f340222e2744feb Author: Michael Eitelwein Date: Sat Jan 9 20:09:58 2016 +0100 No code changes, fixed formatting by replacing spaces with tabs commit cec5c724f5b1cb4c989c0832cc63c733d7c2b107 Merge: 820a4ab 16260e2 Author: Michael Tremer Date: Sat Jan 9 14:56:33 2016 +0000 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next commit 16260e2c695021795a06941781f9ef86af6305ec Author: Michael Tremer Date: Thu Jan 7 23:47:39 2016 +0000 timectrl: Stop ntp daemon when disabled Fixes #11000 Signed-off-by: Michael Tremer commit 1b5b6c91dae0316c9453fe7560c1d39fc453ebcb Author: Michael Eitelwein Date: Thu Jan 7 19:40:24 2016 +0100 Fixed detection of firewall chain when bridge is used for ipv6 Signed-off-by: Michael Eitelwein commit a249e865bd15f8f9041db8e3894cdae4dc4b25ca Author: Michael Eitelwein Date: Thu Jan 7 16:55:11 2016 +0100 Firewall chain was not extracted correctly when ipv6 uses bridge Signed-off-by: Michael Eitelwein commit 764a3f1ff2384f34c592c311f5435a24eb6a53c8 Author: Arne Fitzenreiter Date: Thu Jan 7 17:41:43 2016 +0100 toolchain: fix full toolchain crossbuild Signed-off-by: Arne Fitzenreiter commit 2eb67894efaf650494cc5dafb73ca7ce144fe088 Author: Arne Fitzenreiter Date: Thu Jan 7 17:41:16 2016 +0100 binutils: update to 2.24 Signed-off-by: Arne Fitzenreiter commit f97c6774ef3e4bd4cf77b5e6ff1870bc0f7e271b Author: Michael Eitelwein Date: Thu Jan 7 15:24:13 2016 +0100 Fix regex to extract firewall chain for ipv6 in showrequestfrom*.dat If bridged ipv6 is used, $iface is taken from PHYSIN In the log line the order of fields is "... IN=XY OUT=XY PHYSIN=XY ..." Signed-off-by: Michael Eitelwein commit 9877d28d9e2daf49324cbf2120d00ab7169da0d3 Author: Michael Eitelwein Date: Thu Jan 7 14:00:01 2016 +0100 Enable correct display of ipv6 entries in Firewall log pages of web UI. 3 main changes: - Fill $iface and $out from PHYSIN and PHYSOUT when looking at bridged packets, othwerwise fill from IN and OUT - Recognize ipv4 and ipv6 address style for $srcaddr and $dstaddr - Match color coding of tables to pie charts (see seperate patch sent earlier) I am using the bridged ipv6 setup as proposed in the wiki. I do not think this breaks anything when not using ipv6. So it would be nice to include this even if ipv6 is not officially supported yet. It is quite useful when using the ipv6 setup. Signed-off-by: Michael Eitelwein --- commit 820a4ab564b1bd437d27becede5defb000c06c50 Author: Daniel Weismüller Date: Wed Jan 6 14:56:18 2016 +0100 owncloud: updated to version 7.0.11 Signed-off-by: Daniel Weismüller Signed-off-by: Michael Tremer commit f81e27e1c8c47fefdc78b22ecb0bb5122ea0b304 Author: Michael Tremer Date: Wed Jan 6 15:05:37 2016 +0000 dnsdist: Don't build on ARM There seem to be some serious C++ issues in this so that it won't build on ARM. At the moment I do not have any resources to look further into this, so I just disable building this package for all ARM architectures. Signed-off-by: Michael Tremer commit b0a014b7f83f160c036d8910e90d1262321e2d12 Author: Michael Tremer Date: Tue Jan 5 21:00:19 2016 +0000 QoS: Improve saving enabled/disable state It was reported that the QoS did not stop when the user clicked the "stop" button. This patch fixes that. Fixes #10664 Signed-off-by: Michael Tremer Acked-by: Arne Fitzenreiter commit 9a09d94ee3eb6097897f31dc236dc0c2aaea677b Author: Michael Tremer Date: Tue Jan 5 20:44:26 2016 +0000 qosctrl: Cleanup code by replacing hardcoded paths Signed-off-by: Michael Tremer commit 84032d0845148505c230db0f391e524146835a9c Author: Michael Tremer Date: Mon Jan 4 22:46:13 2016 +0000 core97: Ship updated openvpn package Signed-off-by: Michael Tremer commit 964700d414ca841ca0d3e98329c179b4cb62e36e Author: Erik Kapfer Date: Tue Jul 7 13:13:35 2015 +0200 openvpn: Update to version 2.3.7, added --verify-x509-name directive. The tls-remote directive is deprecated and will be removed with OpenVPN version 2.4 . Added instead --verify-x509-name HOST name into ovpnmain.cgi. Signed-off-by: Michael Tremer commit 9977da131b2d2e560057b79db714a987977026b4 Author: Matthias Fischer Date: Sun Dec 27 00:20:13 2015 +0100 bind: Update to 9.10.3-P2 Changelog: [security] Update allowed OpenSSL versions as named is potentially vulnerable to CVE-2015-3193. [maint] H.ROOT-SERVERS.NET is 198.97.190.53 and 2001:500:1::53. [RT #40556] [security] Insufficient testing when parsing a message allowed records with an incorrect class to be be accepted, triggering a REQUIRE failure when those records were subsequently cached. (CVE-2015-8000) [RT #40987] [security] Address fetch context reference count handling error on socket error. (CVE-2015-8461) [RT#40945] Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 21ac63688a76cefccf4796fe608fae436c38d5c8 Author: Michael Tremer Date: Mon Dec 28 15:37:02 2015 +0100 core97: Ship dnsmasq Signed-off-by: Michael Tremer commit c3b4c861f5531712b6579cae839ea621f5336950 Author: Matthias Fischer Date: Thu Dec 24 10:17:16 2015 +0100 dnsmasq 2.75: latest patches from upstream Same procedure as... :-) Best to all for xmas and 2016! Matthias Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 2135528774a66fa30143c024993054aed0f60c5a Author: Michael Tremer Date: Mon Dec 28 15:30:13 2015 +0100 core97: Ship pgrep with the updater Signed-off-by: Michael Tremer commit 4df3276bb43bfb77e570b8c329da3885f644dabb Author: Arne Fitzenreiter Date: Sat Dec 26 17:37:53 2015 +0100 ncurses: rootfile update. Signed-off-by: Arne Fitzenreiter commit b94e0ffc689e6a659809fb874b6c18053faf1f48 Author: Arne Fitzenreiter Date: Sat Dec 26 17:34:13 2015 +0100 dnsdist: rootfile update. Signed-off-by: Arne Fitzenreiter commit b37e91c3b5527527ae354e66d91f6912e6e534de Author: Arne Fitzenreiter Date: Sat Dec 26 17:33:30 2015 +0100 diffutils: rootfile update. Signed-off-by: Arne Fitzenreiter commit eddda7f9bd4489e6c5e37bf88eac83196210616b Author: Arne Fitzenreiter Date: Sat Dec 26 13:16:59 2015 +0100 gcc: include libstdc++ to rootfile Signed-off-by: Arne Fitzenreiter commit f25314afd71657a51e1dc02759edaf99c22bb270 Author: Arne Fitzenreiter Date: Fri Dec 25 12:45:05 2015 +0100 vdr_eepg: fix source download. the external server has changed the compression so the md5 has changed. Always use the IPFire server as primary download source. Signed-off-by: Arne Fitzenreiter commit aa6684235847375033842ab4ed99e22bcd9a13c2 Author: Arne Fitzenreiter Date: Wed Dec 23 10:14:26 2015 +0100 kernel: apply arm-multi grsecurity fixes only at arm-multi build commit 98b8cabf4d80909b636e56a59091665798043f61 Author: Michael Tremer Date: Thu Dec 10 21:25:27 2015 +0000 dnsdist: New package Signed-off-by: Michael Tremer commit 6138d53bdd9df4a007361c3e63ab602e2c2de443 Author: Michael Tremer Date: Thu Dec 10 21:10:06 2015 +0000 lua: New package Simple scripting language. Supposed to be fast. Needed for dnsdist. Signed-off-by: Michael Tremer commit 3b7808295e2627ac9a0c8a79a793262ac6cd545a Author: Michael Tremer Date: Tue Dec 22 22:27:10 2015 +0000 Disable packaging mediatomb Signed-off-by: Michael Tremer commit ffea9709f83fae4f9b7e249d7f5cdc2501259607 Author: Michael Tremer Date: Tue Dec 22 22:25:18 2015 +0000 linux: Fix build of kernel and headers package Signed-off-by: Michael Tremer commit a7b0967db425d27b349d436bf83e4a18143f6fe3 Author: Michael Tremer Date: Tue Dec 15 18:30:56 2015 +0000 linux: Backport Hyper-V network driver Signed-off-by: Michael Tremer commit f295ca0cf75d0b475303a9db905e3ab082290997 Author: Michael Tremer Date: Sat Dec 12 15:31:33 2015 +0000 kernel: Add grsecurity compile fix Signed-off-by: Michael Tremer commit 21819b545a1451f557ea924b0dcdb5ab24b59a86 Author: Michael Tremer Date: Fri Dec 4 22:11:49 2015 +0000 mediatomb: Disable build because it FTBFS The upstream project seems to be dead Signed-off-by: Michael Tremer commit 9f0f7c50cd2a4040a7ba26358e5d956e2168d0a8 Author: Michael Tremer Date: Thu Dec 10 17:47:33 2015 +0000 gcc: Update armv5tel rootfile Signed-off-by: Michael Tremer commit a9fd97961920a89c87217f89c14fa2d4234a393d Author: Michael Tremer Date: Thu Dec 10 14:40:36 2015 +0000 gcc: Update x86_64 rootfile Signed-off-by: Michael Tremer commit 8675b78af98432f327adcb7d35c614cb2ce7dfb6 Author: Michael Tremer Date: Fri Dec 4 21:24:14 2015 +0000 gcc: Update to version 4.9.3 Signed-off-by: Michael Tremer commit 9098b1e1c0f170b51620b8bc63118b89a038dfc6 Author: Michael Tremer Date: Fri Dec 4 21:22:30 2015 +0000 glibc: Fix headers to build with new GCC Signed-off-by: Michael Tremer commit bdfd41c4f18fa85b9cc392354c0e1d73b7735651 Author: Michael Tremer Date: Fri Dec 4 21:21:32 2015 +0000 libmpc: New package A dependency for GCC Signed-off-by: Michael Tremer commit 9753936f4cfcde7ff310bb9d9f31c6c3d5caff79 Author: Michael Tremer Date: Tue Dec 22 12:34:59 2015 +0000 core97: Ship updated bind package Signed-off-by: Michael Tremer commit d31345a50bed70c4d2197e1294f5490be839dff2 Author: Michael Tremer Date: Tue Dec 22 12:34:18 2015 +0000 Create Core Update 97 Signed-off-by: Michael Tremer commit ea155e2d2b337366b04979b375251fdac724fcc6 Author: Michael Tremer Date: Tue Dec 22 11:11:24 2015 +0000 Move Core Update 96 to oldcore Signed-off-by: Michael Tremer commit c15da8c3b5f94d3ced94166eefb9392b86dc9d80 Author: Matthias Fischer Date: Sat Nov 7 07:33:57 2015 +0100 bind: Update to 9.10.3 bind: Update to 9.10.3 Security fixes: An incorrect boundary check in the OPENPGPKEY rdatatype could trigger an assertion failure. This flaw is disclosed in CVE-2015-5986. [RT #40286] A buffer accounting error could trigger an assertion failure when parsing certain malformed DNSSEC keys. This flaw was discovered by Hanno Böck of the Fuzzing Project, and is disclosed in CVE-2015-5722. [RT #40212] A specially crafted query could trigger an assertion failure in message.c. This flaw was discovered by Jonathan Foote, and is disclosed in CVE-2015-5477. [RT #40046] On servers configured to perform DNSSEC validation, an assertion failure could be triggered on answers from a specially configured server. This flaw was discovered by Breno Silveira Soares, and is disclosed in CVE-2015-4620. [RT #39795] Bug fixes: Asynchronous zone loads were not handled correctly when the zone load was already in progress; this could trigger a crash in zt.c. [RT #37573] A race during shutdown or reconfiguration could cause an assertion failure in mem.c. [RT #38979] Some answer formatting options didn't work correctly with dig +short. [RT #39291] Malformed records of some types, including NSAP and UNSPEC, could trigger assertion failures when loading text zone files. [RT #40274] [RT #40285] Fixed a possible crash in ratelimiter.c caused by NOTIFY messages being removed from the wrong rate limiter queue. [RT #40350] The default rrset-order of random was inconsistently applied. [RT #40456] BADVERS responses from broken authoritative name servers were not handled correctly. [RT #40427] Several bugs have been fixed in the RPZ implementation. For a complete list, see: https://kb.isc.org/article/AA-01306/0/BIND-9.10.3-Release-Notes.html Regards, Matthias Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 6b86307cac1ed49a3d88836fc5fa90eef98a33ca Author: Michael Tremer Date: Thu Aug 20 23:05:40 2015 +0100 firewall options: Fix translation and spelling of new ALG section Signed-off-by: Michael Tremer commit 63fd135400da8e15a1a0519f377c20bad67a6d0e Author: Alexander Marx Date: Thu Aug 20 10:56:54 2015 +0200 BUG10844 add new options to firewalloptions for conntrack simple changes, so far no languagefile changes because of simple protocol names. should be clear in all languages. Signed-off-by: Michael Tremer commit 53a6b00c4fc7e863b8a1b22cc01f90b016184363 Author: Michael Tremer Date: Wed Aug 12 12:46:07 2015 +0100 firewall: Disable the PPTP and AMANDA conntrack helpers by default These do not seem to work at the moment. Signed-off-by: Michael Tremer commit 2c4b9c5004f0db606612eba3965846d4a2623296 Author: Michael Tremer Date: Wed Aug 12 12:44:26 2015 +0100 firewall: Fix amanda helper This helper requires setting a layer 4 protocol. Signed-off-by: Michael Tremer commit e2c723627c587275e274948d026ac41a80a1705a Author: Michael Tremer Date: Wed Aug 12 12:18:18 2015 +0100 firewall: Fix H.323 helpers Signed-off-by: Michael Tremer commit c8f8bf328f4dd6567513f942c9c1db1dcf73ef93 Author: Michael Tremer Date: Tue May 12 13:33:08 2015 +0200 firewall: Add H.323 to the conntrack helpers commit 50354ffe3a946f314b5bf4f8648fa14d14c14667 Author: Michael Tremer Date: Tue May 12 13:27:24 2015 +0200 firewall: Add IRC to the conntrack helpers commit a93bf696170d32a45ccc76b29f68ca9b4df9ddb3 Author: Michael Tremer Date: Tue May 12 13:25:04 2015 +0200 firewall: Add amanda to the conntrack helpers commit d57c6162cb2d00fd4a4989fa3fe6924db528bce1 Author: Michael Tremer Date: Tue May 12 13:16:40 2015 +0200 firewall: Make conntrack helpers configurable commit 4071b2d61bdf3e284395d80a06189d5ae7752c5b Author: Michael Tremer Date: Mon May 11 13:04:14 2015 +0200 firewall: iptables will load the conntrack modules automatically commit 0f5350608ed5790101caf94c19bf08a0a0c2118f Author: Michael Tremer Date: Mon May 11 13:00:34 2015 +0200 firewall: Accept related ICMP packets again This rule is required to forward ICMP error messages for aborted TCP connections and the like. commit a235f229527896f76ffa9404f6b8fb75f19d522b Author: Michael Tremer Date: Wed Apr 22 18:13:56 2015 +0200 firewall: Remove option to disable the SIP ALG commit b1109b8af5f0a5e3ab7f0b68211d63ab0594c0ac Author: Michael Tremer Date: Wed Apr 22 18:10:59 2015 +0200 Enhance the security of the netfilter conntrack helpers This is suggested here https://home.regit.org/netfilter-en/secure-use-of-helpers/ and deprecated in the kernel (#10665). ----------------------------------------------------------------------- hooks/post-receive -- IPFire 2.x development tree