* [git.ipfire.org] IPFire 2.x development tree branch, core100, created. 33513817fa4eac7007fc4e39c348d7fffdfac20a
@ 2016-03-20 13:08 git
0 siblings, 0 replies; only message in thread
From: git @ 2016-03-20 13:08 UTC (permalink / raw)
To: ipfire-scm
[-- Attachment #1: Type: text/plain, Size: 48491 bytes --]
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".
The branch, core100 has been created
at 33513817fa4eac7007fc4e39c348d7fffdfac20a (commit)
- Log -----------------------------------------------------------------
commit 33513817fa4eac7007fc4e39c348d7fffdfac20a
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Sun Mar 20 09:36:33 2016 +0100
set version to IPFire 2.19 core100
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit dd676ffb49f9b5b6c9fe4178f86cd048fb789593
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Sat Mar 19 21:56:30 2016 +0100
core100: add changes to updater
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit d731b1f9914738ba8c76f7724b7915c941d3e336
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Sat Mar 19 12:54:12 2016 +0100
mt7601u-firmware: added
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit ee1148d12a32988f3ae8c75f7c4a4b31883dc674
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Sat Mar 19 12:46:38 2016 +0100
ath10k-firmware: added
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 96e31c9817f1ee3bec3fe33ecae7a84ff7e4ffff
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Fri Mar 18 19:26:39 2016 +0100
ntp: wait for connection if dhcpcd is running
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 8a148bbc5a9de80edb36fad91cd3f0e6ca3155a1
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Thu Mar 17 23:04:54 2016 +0100
Config: update sourcecode upload url
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 01ddfa0d6f1483071fd87e9f6c77085b174a1b14
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Thu Mar 17 23:00:46 2016 +0100
kernel: update to 3.14.65
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 224401de72e7e08403cd07774d4f311d2e86c3a7
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Wed Mar 16 23:05:06 2016 +0100
linux-pae: add root (hd0) to grub.conf for virt install.
jiffybox will not load the kernel without this entry.
not tested on citrix yet.
commit 8649a31ed040795b09228c8f3fa181d001614541
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Wed Mar 16 22:58:21 2016 +0100
u-boot: fix fat16 reader
commit f08c14477ed0f875a86d01c1d11bc234766953aa
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Mon Mar 14 18:34:45 2016 +0100
core100: touch arm kernel and initrd before unpack.
this is a workaround for a uboot bug that not find all
files.
commit 6fa34327dd38412820e9654df69d48995b02906a
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Mon Mar 14 18:04:38 2016 +0100
kernel: enable NFS_DEBUG
fixes #11053
commit 1775dbd2c6dc36e26712bbffa593e12af475c6a2
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Thu Mar 10 22:29:02 2016 +0100
kernel: update to 3.14.64
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 46ce813e330925e0ab5969cf3e34c9e49fb9df88
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Thu Mar 10 19:22:04 2016 +0000
setup: Fix segmentation fault with more than four NICs found
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 9ef4bbf7032d6727a6debc10702e9beacd0b097d
Merge: cb679b1 8c1cf3b
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Tue Mar 8 22:45:04 2016 +0000
Merge branch 'bird' into next
commit 8c1cf3b1f929ecd085827469ccb02ab9459de711
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Tue Mar 8 22:44:01 2016 +0000
bird: New package
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit cb679b1eb965e0df188b50ab0337cf1687ed70cb
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Tue Mar 8 21:32:29 2016 +0100
core100: add missing openssl rootfile to updater
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 03022f412ef2d4cfd0bad133988f2cc3312728d1
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Tue Mar 8 20:29:59 2016 +0100
core100: ship openssl (build with new gcc)
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 593e2eeb0320285c309686668b73744973d0a944
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Tue Mar 8 20:28:12 2016 +0100
core100: ship glibc (build with new gcc)
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 88cc99094805eb3133cac3eec0005844f5904721
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Tue Mar 8 20:01:49 2016 +0100
core100: add kernel to updater
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit f83c50537bcb4b74bebcff83f86f69b60def544f
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Tue Mar 8 19:31:49 2016 +0100
core100: add function to set last correct installed core on update.
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 822b4313d1029bcfa19ec6cc2f36da128001ab24
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Sat Mar 5 17:09:32 2016 +0100
kernel: update to 3.14.63
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 4f472f86f854a5460c4fa8eb63fd1a4393d6099d
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Sat Mar 5 17:07:23 2016 +0100
flash-images: copy kernel and initrd first
there is a u-boot bug that not find all files if the directory entries
was splittet to more sectors so copy the important files first.
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 4a6cfe51a16575c7100862e2cc6f959bc48c6628
Merge: 64835e0 75ad2e4
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Fri Mar 4 07:09:02 2016 +0100
Merge remote-tracking branch 'origin/master' into next
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 64835e022c52d24432d201bd4d57f1aa962c1f90
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Sun Feb 28 12:27:06 2016 -0800
udev: Fix calling VLAN script
The VLAN hotplugging script was called with a wrong parameter that
should just be used to rename devices. Hence the script was not
correctly executed and did not create the virtual devices.
Fixes: #11009
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit a6cd8b9b5d903da27fef106329c892e372753e5f
Author: Matthias Fischer <matthias.fischer(a)ipfire.org>
Date: Sat Feb 27 16:29:45 2016 +0100
dnsmasq: 2.76test10 with latest patch (005) and some fixes
1. Added patch 005 because of the discussion on the dnsmasq-list:
"I've noticed that replies which get their TTL from the dhcp-ttl
option always get the TTL specified in dhcp-ttl. I'd prefer
something like max(0, min(<dhcp-ttl>, <lease-expire-time> -
<now>)). Otherwise, dns might hand out a high TTL for a dhcp-lease
which expires one second later.
...
Seems a sensible addition.
Cheers,
Simon."
2. Fixed several line numbers and patch lines in
'dnsmasq-Add-support-to-read-ISC-DHCP-lease-file.patch'. On the last build
I got some "Hunk failed" messages. Patches are now applied exactly at the
given lines.
3. Nevertheless, I still get some warnings:
...
dnsmasq.c: In function 'main':
dnsmasq.c:55:7: warning: unused variable 'did_bind' [-Wunused-variable]
int did_bind = 0;
^
dnsmasq.c:54:9: warning: unused variable 'bound_device' [-Wunused-variable]
char *bound_device = NULL;
^
...
isc.c: In function 'dhcp_lease_new':
isc.c:40:3: warning: ignoring return value of 'asprintf', declared with attribute warn_unused_result [-Wunused-result]
asprintf(&lease->fqdn, "%s.%s", hostname, daemon->domain_suffix);
^
Asking about these warnings in the dnsmasq-list showed no reaction - no one answered.
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 3b9815eb87e83a1b24e85ce0eab14a962b62ccd0
Author: Matthias Fischer <matthias.fischer(a)ipfire.org>
Date: Fri Feb 26 18:29:28 2016 +0100
dnsmasq: 2.76test10 with latest patches (001-004)
This is 'dnsmasq 2.76test10', based on current 'next', containing latest patches.
Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 43747fae333273890aadb66b72d911efaa4c2086
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Fri Feb 26 13:43:33 2016 +0100
kernel: update to 3.14.62
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 5f39eb211974f1fa21c1f769f62b779f85ffbdf4
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Fri Feb 26 07:27:09 2016 +0100
rename core99 to core100 for inserting another OpenSSL Security update
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 77c48fbe35e59957036b9533db0ec5b88a7a1e3d
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Wed Feb 24 22:13:36 2016 -0800
core99: Ship updated xz
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit f443b4cba7fbd22723e1716355ee921e289907ab
Author: Marcel Lorenz <lorenz.marcel(a)web.de>
Date: Tue Feb 23 08:49:27 2016 +0100
bison: update to 3.0.4
Update bison to the last version from Linux from Scratch.
Signed-off-by: Marcel Lorenz <marcel.lorenz(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 962fade2d4714d4c8d5e26b841e4a87c96f92845
Author: Marcel Lorenz <lorenz.marcel(a)web.de>
Date: Tue Feb 23 09:37:28 2016 +0100
xz: update to 5.2.2
Update xz to last version from Linux from Scratch.
Signed-off-by: Marcel Lorenz <marcel.lorenz(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 28ef7a6a9e782410811e7733f27ec85b4ba0fe19
Author: Marcel Lorenz <lorenz.marcel(a)web.de>
Date: Tue Feb 23 08:46:23 2016 +0100
m4: update to 1.4.17
Update m4 to last version from Linux from Scratch.
Signed-off-by: Marcel Lorenz <marcel.lorenz(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 86b759785b24acd678450f639424b81798e329ab
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Tue Feb 23 09:44:40 2016 -0800
make.sh: Update source upload URL
There is no longer a SSH service on source.ipfire.org.
The usual login on git.ipfire.org should be used instead.
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit efd02229ae5402bad762a20c9ce75607267e3309
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Wed Feb 24 16:01:33 2016 +0100
flash-images: change root uuid replacer sed
i cannot really test this on my systems.
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 920f1950959bb1500847eb3e3eaebbe88ce08163
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Tue Feb 23 20:08:25 2016 +0100
flash-image: set RAMDISK_MODE=2
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit c83d16146342d2a0d6ad8c101c82de71ab40d9e3
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Tue Feb 23 20:01:30 2016 +0100
init-functions: enable autoramdisk with 400MB
The 512MB raspberry pi reserve some memory for buffers and gpu
so there are a bit less than 490 MB free.
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 38956241bb0644480887aeb9a399e3d9ba2fc3f4
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Tue Feb 23 19:49:49 2016 +0100
flash-image: fix root uuid on some build machines.
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit ee552b7e1a8238b620b557f16baf2131cbafc104
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Fri Feb 19 07:18:29 2016 +0100
kernel: update to 3.14.61
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 802b916d10aa314ae878ec633e7c3bbd2adaba7e
Merge: 879458d 1ffbca6
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Wed Feb 17 19:45:08 2016 +0100
Merge remote-tracking branch 'origin/master' into next
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
Conflicts:
make.sh
commit 879458d41f95578cd35e0f8e9f9e5078aa8dccbb
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Wed Feb 17 10:10:19 2016 +0100
rename core98 to 99 for glibc security update
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit fd3b90c8751df6db7a99bcf3181cef608bb72417
Author: Matthias Fischer <matthias.fischer(a)ipfire.org>
Date: Sat Feb 13 08:29:39 2016 +0100
squid 3.4.14: Bugfix for #4431 (C code is not compiled with CFLAGS)
For details see: http://bugs.squid-cache.org/show_bug.cgi?id=4431
Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit e039df8613b4f51b58ca249998ef66fc7bb76758
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Wed Feb 10 08:36:17 2016 +0100
backports: remove all old media modules.
more modules are renamed or merged into other modules.
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit a760a5cfa96c9f383bf3244e07a34d13f97cbc63
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Mon Feb 8 13:53:13 2016 +0100
dracut: remove marvell sdio modules from initrd.
this allows to switch to uap module on dreamplug.
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 7b757df70fb4caa70eb0f3a0e0cd1af7c9adaea1
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Mon Feb 8 01:52:18 2016 +0000
core98: Ship changed /etc/ppp/ip-up
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit c1bf984e05ff9c523121d459cd58154d3d37a34a
Author: Matthias Fischer <matthias.fischer(a)ipfire.org>
Date: Sun Feb 7 13:45:32 2016 +0100
New IP-address of 'ping.ipfire.org'
Telekom gateways (e.g.) don't answer 'pings', therefor '/etc/ppp/ip-up'
uses 'ping.ipfire.org' for the 'gateway Graph' in 'Status / Network (other'.
After moving the infrastructure, several IP addresses were changed.
'178.63.73.246' doesn't work anymore for 'ping.ipfire.org', its now '81.3.27.38'.
Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 8260fb7e0eac021a9be1c120d39ecb8e4a76c2a2
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Mon Feb 8 01:40:35 2016 +0000
core98: Ship recently updated grep and sed
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit c9ed30440afb129925fd05692a1c403db3831a43
Author: Matthias Fischer <matthias.fischer(a)ipfire.org>
Date: Sun Jan 31 14:49:17 2016 +0100
grep: Update to 2.22
Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 9dc6723a0a677ad84f8bc40679d963bcf8704f71
Author: Matthias Fischer <matthias.fischer(a)ipfire.org>
Date: Sun Jan 31 14:44:05 2016 +0100
sed: Update to 4.2.2
Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 067db4d53abbaeaaaaf46515ee834c78f1bf235b
Merge: 645378f d651e48
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Mon Feb 8 01:33:15 2016 +0000
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
commit d651e48f708182ade9669a5119cc63300b70d2d3
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Sun Feb 7 09:38:20 2016 +0100
kernel: disable grsecurity KSTACKOVERFLOW.
this is the reason for crashes usb lan dongles and media devices.
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 645378fbb9f8540ace66bd3a9be70583b6e15a6f
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Fri Feb 5 10:24:03 2016 +0000
firewall: Fix MAC filter
Packets destined for the firewall coming in from the blue
device where accepted too early to be processed by the
firewall input chain rules.
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit ff43197b01d45dd6119fb15586c2ce29bd4f8cb3
Merge: 0aa7160 552fb4b
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Thu Feb 4 14:35:55 2016 +0000
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
commit 0aa71600efb5dcff104135ed4bf621a23ee19ced
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Thu Feb 4 14:31:53 2016 +0000
wirelessctrl: Remove some unused code
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 552fb4b8b5aa738959848dafc20d41e6fdbdbe4e
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Mon Feb 1 07:28:03 2016 +0100
dhcpcd: rework mtu handling on buggy nic's
some nic's loose the carrier after setting new mtu.
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit a06723b1f4e87ee5b31dbc59e7b21a9e57750989
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Sat Jan 30 16:37:21 2016 +0000
core98: Ship updated tzdata
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit f83b3c65a34b5e66255c77140724db684e3e460b
Author: Matthias Fischer <matthias.fischer(a)ipfire.org>
Date: Sat Jan 30 11:07:46 2016 +0100
tzdata: Update to 2016a
Fixes https://bugzilla.ipfire.org/show_bug.cgi?id=11034
Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 57d98918a1a11077d8d3e3caeaca9d85e4200ea5
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Fri Jan 29 14:25:25 2016 +0100
kernel: update to 3.14.60
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 35b24ff8a933e2ab8614c4f9b7c27c25c6f95473
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Thu Jan 28 22:08:08 2016 +0100
set core to 98 and move 97 to oldcore
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 78574c184666087272235ceeafceaf585cff96ba
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Thu Jan 28 16:20:16 2016 +0100
finish core97
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit a6c71642778020a832bb5da67db8ebd004d85bad
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Thu Jan 28 15:58:46 2016 +0100
openssl: security update to 1.0.2f
changes:
* DH small subgroups - CVE-2016-0701
* SSLv2 doesn't block disabled ciphers - CVE-2015-3197
* Reject DH handshakes with parameters shorter than 1024 bits
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit eb2f4a4d2623d8e3646156126884dd78b8357dc7
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Thu Jan 28 13:24:50 2016 +0100
hwdate: update databases
pci.ids: 2016.01.28
usb.ids: 2015.12.17
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit ecd50190976df0b55c912ee4b2eb004652cd3b4d
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Thu Jan 28 13:08:59 2016 +0100
core97: prepare new core97 with openssl and openssh update.
the update itself has to be done...
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 6fa8a1a9cc50d2df78650f1fc0f8f6f3b9111398
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Thu Jan 28 13:03:39 2016 +0100
rename core97 to 98 because we have to insert OpenSSL security update
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 235888599a4afa54d54421328733bf003c45711a
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Thu Jan 28 13:02:09 2016 +0100
backports: update to 4.2.6
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 8998dde892d3e515747ee9a2e6e3fdf04ae607b9
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Tue Jan 26 18:02:00 2016 +0100
rsync: update to 3.1.2
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 00ee4eb13ce2f3cdd7deee08b6487145b46b28bb
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Mon Jan 25 20:15:06 2016 +0100
kernel: update to 3.14.59
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 02a60a9b9e99f1a8aa20b1deefa2b622ba99a5c6
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Sat Jan 23 01:46:42 2016 +0000
squid: Actually make --with-filedescriptors work
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit cf82da6b376e4c7456a0690968ad2e879029a70c
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Sat Jan 23 00:41:02 2016 +0000
core97: Ship updated CGI files
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit c97698a8f4b2520e198521c3d67a25efc3ad3776
Merge: 665f799 43638be
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Sat Jan 23 00:39:24 2016 +0000
Merge remote-tracking branch 'meitelwein/web-gui-ipv6' into next
commit 665f79926d025fec413531c397ccd6998583237e
Merge: 92e4521 c26171b
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Sat Jan 23 00:39:19 2016 +0000
Merge remote-tracking branch 'origin/master' into next
commit 92e4521572f0a5a6411ce74a7a70b9b65dcebb26
Author: Daniel Weismüller <daniel.weismueller(a)ipfire.org>
Date: Fri Jan 22 12:10:19 2016 +0100
cmake: Disable parallelism
Building cmake uses a high amount of memory (>2G) and
fails to build on my system. Using less processes reduces
memory usage and lets the build succeed.
Signed-off-by: Daniel Weismüller <daniel.weismueller(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 20b27af8634b88fa400b1779415fc92888fbb1d8
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Fri Jan 22 00:55:46 2016 +0000
Update translations
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 2775ab9cc63708ea0370d5220d5ee13a4f94142b
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Fri Jan 22 00:55:25 2016 +0000
core97: Ship iptables conntrack changes
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 8a1a3bf3934c8a92c605135ee13db466ea3dcbf4
Merge: 41410d1 6b86307
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Fri Jan 22 00:54:14 2016 +0000
Merge remote-tracking branch 'ms/iptables-conntrack' into next
commit 41410d197b3dbf75dfd05376ed623857adac8977
Merge: 22a504c a7b0967
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Fri Jan 22 00:49:15 2016 +0000
Merge branch 'hyper-v-fixes' into next
commit 22a504c69cb578f6e34928f3d862beac635e5224
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Wed Jan 20 19:28:56 2016 +0100
toolchain: fix build on hosts that not support strong stackprotect
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 928eba27a5e15074d8e5b7d8b9f6892d122bf40f
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Tue Jan 19 00:07:07 2016 +0000
core97: Ship updated webaccess.cgi
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit bcb30674e2f7f3fe4989bffe5fbc43d44be86633
Author: Erik Kapfer <erik.kapfer(a)ipfire.org>
Date: Mon Jan 18 10:14:10 2016 +0100
webaccess.cgi: Fixed language settings.
Fix for #10879. Added also use strict.
Signed-off-by: Erik Kapfer <erik.kapfer(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 857b2c795e2c982cb5967725ba01a1e3c29d43f5
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Mon Jan 18 22:26:23 2016 +0000
Improve hardening by using -fstack-protector-strong
This functionality is now available for us since we updated
to GCC 4.9 and just improves the stack smashing protector
in GCC.
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit cc9f461f74525fa3f7300a86676634780c884a21
Author: Matthias Fischer <matthias.fischer(a)ipfire.org>
Date: Tue Jan 12 18:46:52 2016 +0100
nano: Update to 2.5.1
Excerpt form 'NEWS':
"It includes fixes for a syntax-highlighting bug and a positionlog bug,
it disables a time-eating multiline regex in the C syntax,
and it adds an escape hatch to the WriteOut menu when
--tempfile is used: the discardbuffer command, ^Q. It
also has translation updates for fifteen languages, and
a small fix in the softwrap code."
Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 037cf8d20dd5d754c89c8d267d9fd6384061d170
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Sun Jan 17 18:51:47 2016 +0000
core97: Ship updated openssh
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 43e5fe9ded9899276a338476ba8a2974055ca222
Author: Matthias Fischer <matthias.fischer(a)ipfire.org>
Date: Fri Jan 15 17:43:50 2016 +0100
openssh: Update to 7.1p2
Fixes CVE-2016-0777
Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 64285d23eb9003efd7a2273d61814d4cd144431d
Merge: cfdeb28 9b4f0e6
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Sun Jan 17 18:49:03 2016 +0000
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
commit 9b4f0e639705d87708b67038e11fc4f10cbe81e5
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Fri Jan 15 07:20:34 2016 +0100
toolchain: bump version number
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 3da3ac98564bc97ba96bc2e10d5d6acb746a33de
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Thu Jan 14 16:08:24 2016 +0100
gcc: remove gdb python files also in root build.
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 8f2ac12a87a1308c5e9adc7e7adb7150d5a1b364
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Thu Jan 14 03:55:54 2016 +0100
toolchain: move *.py remove to correct pass.
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 6e96dd142aa6a54f970968c8a1bb2087aa8c6147
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Wed Jan 13 19:04:56 2016 +0100
toolchain: enable bootstrap and remove *.py files from lib.
only with bootstrap the gcc pass2 build works on arm.
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 905d1afd4e7d30b9088e8c214248a76f5ff4ae72
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Wed Jan 13 07:24:34 2016 +0100
kernel: disable RANDSTRUCT
RANDSRUCT is incompatible with ccache build.
fixes #10905
fixes #11012
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit cfdeb28050cac9c87d7be896378f2f53d722ff7d
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Sun Jan 10 21:20:49 2016 +0000
core97: Ship updated ntp
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit db017b4b6ef9ccf32f7e9a2c22f58c3f339e98ad
Author: Matthias Fischer <matthias.fischer(a)ipfire.org>
Date: Sat Jan 9 20:39:45 2016 +0100
ntp 4.2.8p5: removed obsolete patch file
Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit c1de76704acbb06bffbb4e6b15f66892db93c525
Author: Matthias Fischer <matthias.fischer(a)ipfire.org>
Date: Sat Jan 9 20:29:41 2016 +0100
ntp: Update to 4.2.8p5
"...addresses 1 medium-severity security issue, 14 bugfixes,
and contains other improvements over 4.2.8p4."
For a complete list, see:
http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities
Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit b75b6382ab1a3a71bb434932623a396b106d6925
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Sun Jan 10 19:35:42 2016 +0000
grub: Disable hardening for grub-script-check
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 1d9be34e2a617efa19135b646914fb1ef507a8b9
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Sat Jan 9 19:48:21 2016 +0000
ccache: Include hash of compiler specs in hashing
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 43638be58b2ae99bd07a420c5f340222e2744feb
Author: Michael Eitelwein <michael(a)eitelwein.net>
Date: Sat Jan 9 20:09:58 2016 +0100
No code changes, fixed formatting by replacing spaces with tabs
commit cec5c724f5b1cb4c989c0832cc63c733d7c2b107
Merge: 820a4ab 16260e2
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Sat Jan 9 14:56:33 2016 +0000
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
commit 16260e2c695021795a06941781f9ef86af6305ec
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Thu Jan 7 23:47:39 2016 +0000
timectrl: Stop ntp daemon when disabled
Fixes #11000
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 1b5b6c91dae0316c9453fe7560c1d39fc453ebcb
Author: Michael Eitelwein <michael(a)eitelwein.net>
Date: Thu Jan 7 19:40:24 2016 +0100
Fixed detection of firewall chain when bridge is used for ipv6
Signed-off-by: Michael Eitelwein <michael(a)eitelwein.net>
commit a249e865bd15f8f9041db8e3894cdae4dc4b25ca
Author: Michael Eitelwein <michael(a)eitelwein.net>
Date: Thu Jan 7 16:55:11 2016 +0100
Firewall chain was not extracted correctly when ipv6 uses bridge
Signed-off-by: Michael Eitelwein <michael(a)eitelwein.net>
commit 764a3f1ff2384f34c592c311f5435a24eb6a53c8
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Thu Jan 7 17:41:43 2016 +0100
toolchain: fix full toolchain crossbuild
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 2eb67894efaf650494cc5dafb73ca7ce144fe088
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Thu Jan 7 17:41:16 2016 +0100
binutils: update to 2.24
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit f97c6774ef3e4bd4cf77b5e6ff1870bc0f7e271b
Author: Michael Eitelwein <michael(a)eitelwein.net>
Date: Thu Jan 7 15:24:13 2016 +0100
Fix regex to extract firewall chain for ipv6 in showrequestfrom*.dat
If bridged ipv6 is used, $iface is taken from PHYSIN
In the log line the order of fields is "... IN=XY OUT=XY PHYSIN=XY ..."
Signed-off-by: Michael Eitelwein <michael(a)eitelwein.net>
commit 9877d28d9e2daf49324cbf2120d00ab7169da0d3
Author: Michael Eitelwein <michael(a)eitelwein.net>
Date: Thu Jan 7 14:00:01 2016 +0100
Enable correct display of ipv6 entries in Firewall log pages of web UI.
3 main changes:
- Fill $iface and $out from PHYSIN and PHYSOUT when looking at bridged packets, othwerwise fill from IN and OUT
- Recognize ipv4 and ipv6 address style for $srcaddr and $dstaddr
- Match color coding of tables to pie charts (see seperate patch sent earlier)
I am using the bridged ipv6 setup as proposed in the wiki. I do not think this breaks anything when not using ipv6. So it would be nice to include this even if ipv6 is not officially supported yet. It is quite useful when using the ipv6 setup.
Signed-off-by: Michael Eitelwein <michael(a)eitelwein.net>
---
commit 820a4ab564b1bd437d27becede5defb000c06c50
Author: Daniel Weismüller <daniel.weismueller(a)ipfire.org>
Date: Wed Jan 6 14:56:18 2016 +0100
owncloud: updated to version 7.0.11
Signed-off-by: Daniel Weismüller <daniel.weismueller(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit f81e27e1c8c47fefdc78b22ecb0bb5122ea0b304
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Wed Jan 6 15:05:37 2016 +0000
dnsdist: Don't build on ARM
There seem to be some serious C++ issues in this so that
it won't build on ARM.
At the moment I do not have any resources to look further
into this, so I just disable building this package for
all ARM architectures.
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit b0a014b7f83f160c036d8910e90d1262321e2d12
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Tue Jan 5 21:00:19 2016 +0000
QoS: Improve saving enabled/disable state
It was reported that the QoS did not stop when
the user clicked the "stop" button. This patch
fixes that.
Fixes #10664
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
Acked-by: Arne Fitzenreiter <arne.fitzenreiter(a)ipfire.org>
commit 9a09d94ee3eb6097897f31dc236dc0c2aaea677b
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Tue Jan 5 20:44:26 2016 +0000
qosctrl: Cleanup code by replacing hardcoded paths
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 84032d0845148505c230db0f391e524146835a9c
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Mon Jan 4 22:46:13 2016 +0000
core97: Ship updated openvpn package
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 964700d414ca841ca0d3e98329c179b4cb62e36e
Author: Erik Kapfer <erik.kapfer(a)ipfire.org>
Date: Tue Jul 7 13:13:35 2015 +0200
openvpn: Update to version 2.3.7, added --verify-x509-name directive.
The tls-remote directive is deprecated and will be removed with
OpenVPN version 2.4 . Added instead --verify-x509-name HOST name
into ovpnmain.cgi.
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 9977da131b2d2e560057b79db714a987977026b4
Author: Matthias Fischer <matthias.fischer(a)ipfire.org>
Date: Sun Dec 27 00:20:13 2015 +0100
bind: Update to 9.10.3-P2
Changelog:
[security]
Update allowed OpenSSL versions as named is potentially
vulnerable to CVE-2015-3193.
[maint]
H.ROOT-SERVERS.NET is 198.97.190.53 and 2001:500:1::53. [RT #40556]
[security]
Insufficient testing when parsing a message allowed
records with an incorrect class to be be accepted,
triggering a REQUIRE failure when those records
were subsequently cached. (CVE-2015-8000) [RT #40987]
[security]
Address fetch context reference count handling error
on socket error. (CVE-2015-8461) [RT#40945]
Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 21ac63688a76cefccf4796fe608fae436c38d5c8
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Mon Dec 28 15:37:02 2015 +0100
core97: Ship dnsmasq
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit c3b4c861f5531712b6579cae839ea621f5336950
Author: Matthias Fischer <matthias.fischer(a)ipfire.org>
Date: Thu Dec 24 10:17:16 2015 +0100
dnsmasq 2.75: latest patches from upstream
Same procedure as... :-)
Best to all for xmas and 2016!
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 2135528774a66fa30143c024993054aed0f60c5a
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Mon Dec 28 15:30:13 2015 +0100
core97: Ship pgrep with the updater
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 4df3276bb43bfb77e570b8c329da3885f644dabb
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Sat Dec 26 17:37:53 2015 +0100
ncurses: rootfile update.
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit b94e0ffc689e6a659809fb874b6c18053faf1f48
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Sat Dec 26 17:34:13 2015 +0100
dnsdist: rootfile update.
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit b37e91c3b5527527ae354e66d91f6912e6e534de
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Sat Dec 26 17:33:30 2015 +0100
diffutils: rootfile update.
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit eddda7f9bd4489e6c5e37bf88eac83196210616b
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Sat Dec 26 13:16:59 2015 +0100
gcc: include libstdc++ to rootfile
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit f25314afd71657a51e1dc02759edaf99c22bb270
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Fri Dec 25 12:45:05 2015 +0100
vdr_eepg: fix source download.
the external server has changed the compression so the md5 has changed.
Always use the IPFire server as primary download source.
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit aa6684235847375033842ab4ed99e22bcd9a13c2
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Wed Dec 23 10:14:26 2015 +0100
kernel: apply arm-multi grsecurity fixes only at arm-multi build
commit 98b8cabf4d80909b636e56a59091665798043f61
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Thu Dec 10 21:25:27 2015 +0000
dnsdist: New package
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 6138d53bdd9df4a007361c3e63ab602e2c2de443
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Thu Dec 10 21:10:06 2015 +0000
lua: New package
Simple scripting language. Supposed to be fast. Needed for dnsdist.
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 3b7808295e2627ac9a0c8a79a793262ac6cd545a
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Tue Dec 22 22:27:10 2015 +0000
Disable packaging mediatomb
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit ffea9709f83fae4f9b7e249d7f5cdc2501259607
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Tue Dec 22 22:25:18 2015 +0000
linux: Fix build of kernel and headers package
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit a7b0967db425d27b349d436bf83e4a18143f6fe3
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Tue Dec 15 18:30:56 2015 +0000
linux: Backport Hyper-V network driver
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit f295ca0cf75d0b475303a9db905e3ab082290997
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Sat Dec 12 15:31:33 2015 +0000
kernel: Add grsecurity compile fix
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 21819b545a1451f557ea924b0dcdb5ab24b59a86
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Fri Dec 4 22:11:49 2015 +0000
mediatomb: Disable build because it FTBFS
The upstream project seems to be dead
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 9f0f7c50cd2a4040a7ba26358e5d956e2168d0a8
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Thu Dec 10 17:47:33 2015 +0000
gcc: Update armv5tel rootfile
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit a9fd97961920a89c87217f89c14fa2d4234a393d
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Thu Dec 10 14:40:36 2015 +0000
gcc: Update x86_64 rootfile
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 8675b78af98432f327adcb7d35c614cb2ce7dfb6
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Fri Dec 4 21:24:14 2015 +0000
gcc: Update to version 4.9.3
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 9098b1e1c0f170b51620b8bc63118b89a038dfc6
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Fri Dec 4 21:22:30 2015 +0000
glibc: Fix headers to build with new GCC
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit bdfd41c4f18fa85b9cc392354c0e1d73b7735651
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Fri Dec 4 21:21:32 2015 +0000
libmpc: New package
A dependency for GCC
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 9753936f4cfcde7ff310bb9d9f31c6c3d5caff79
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Tue Dec 22 12:34:59 2015 +0000
core97: Ship updated bind package
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit d31345a50bed70c4d2197e1294f5490be839dff2
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Tue Dec 22 12:34:18 2015 +0000
Create Core Update 97
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit ea155e2d2b337366b04979b375251fdac724fcc6
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Tue Dec 22 11:11:24 2015 +0000
Move Core Update 96 to oldcore
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit c15da8c3b5f94d3ced94166eefb9392b86dc9d80
Author: Matthias Fischer <matthias.fischer(a)ipfire.org>
Date: Sat Nov 7 07:33:57 2015 +0100
bind: Update to 9.10.3
bind: Update to 9.10.3
Security fixes:
An incorrect boundary check in the OPENPGPKEY rdatatype could trigger an assertion failure. This flaw is disclosed in CVE-2015-5986. [RT #40286]
A buffer accounting error could trigger an assertion failure when parsing certain malformed DNSSEC keys.
This flaw was discovered by Hanno Böck of the Fuzzing Project, and is disclosed in CVE-2015-5722. [RT #40212]
A specially crafted query could trigger an assertion failure in message.c.
This flaw was discovered by Jonathan Foote, and is disclosed in CVE-2015-5477. [RT #40046]
On servers configured to perform DNSSEC validation, an assertion failure could be triggered on answers from a specially configured server.
This flaw was discovered by Breno Silveira Soares, and is disclosed in CVE-2015-4620. [RT #39795]
Bug fixes:
Asynchronous zone loads were not handled correctly when the zone load was already in progress; this could trigger a crash in zt.c. [RT #37573]
A race during shutdown or reconfiguration could cause an assertion failure in mem.c. [RT #38979]
Some answer formatting options didn't work correctly with dig +short. [RT #39291]
Malformed records of some types, including NSAP and UNSPEC, could trigger assertion failures when loading text zone files. [RT #40274] [RT #40285]
Fixed a possible crash in ratelimiter.c caused by NOTIFY messages being removed from the wrong rate limiter queue. [RT #40350]
The default rrset-order of random was inconsistently applied. [RT #40456]
BADVERS responses from broken authoritative name servers were not handled correctly. [RT #40427]
Several bugs have been fixed in the RPZ implementation.
For a complete list, see:
https://kb.isc.org/article/AA-01306/0/BIND-9.10.3-Release-Notes.html
Regards,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 6b86307cac1ed49a3d88836fc5fa90eef98a33ca
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Thu Aug 20 23:05:40 2015 +0100
firewall options: Fix translation and spelling of new ALG section
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 63fd135400da8e15a1a0519f377c20bad67a6d0e
Author: Alexander Marx <alexander.marx(a)ipfire.org>
Date: Thu Aug 20 10:56:54 2015 +0200
BUG10844 add new options to firewalloptions for conntrack
simple changes, so far no languagefile changes because of simple
protocol names. should be clear in all languages.
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 53a6b00c4fc7e863b8a1b22cc01f90b016184363
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Wed Aug 12 12:46:07 2015 +0100
firewall: Disable the PPTP and AMANDA conntrack helpers by default
These do not seem to work at the moment.
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 2c4b9c5004f0db606612eba3965846d4a2623296
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Wed Aug 12 12:44:26 2015 +0100
firewall: Fix amanda helper
This helper requires setting a layer 4 protocol.
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit e2c723627c587275e274948d026ac41a80a1705a
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Wed Aug 12 12:18:18 2015 +0100
firewall: Fix H.323 helpers
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit c8f8bf328f4dd6567513f942c9c1db1dcf73ef93
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Tue May 12 13:33:08 2015 +0200
firewall: Add H.323 to the conntrack helpers
commit 50354ffe3a946f314b5bf4f8648fa14d14c14667
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Tue May 12 13:27:24 2015 +0200
firewall: Add IRC to the conntrack helpers
commit a93bf696170d32a45ccc76b29f68ca9b4df9ddb3
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Tue May 12 13:25:04 2015 +0200
firewall: Add amanda to the conntrack helpers
commit d57c6162cb2d00fd4a4989fa3fe6924db528bce1
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Tue May 12 13:16:40 2015 +0200
firewall: Make conntrack helpers configurable
commit 4071b2d61bdf3e284395d80a06189d5ae7752c5b
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Mon May 11 13:04:14 2015 +0200
firewall: iptables will load the conntrack modules automatically
commit 0f5350608ed5790101caf94c19bf08a0a0c2118f
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Mon May 11 13:00:34 2015 +0200
firewall: Accept related ICMP packets again
This rule is required to forward ICMP error messages for
aborted TCP connections and the like.
commit a235f229527896f76ffa9404f6b8fb75f19d522b
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Wed Apr 22 18:13:56 2015 +0200
firewall: Remove option to disable the SIP ALG
commit b1109b8af5f0a5e3ab7f0b68211d63ab0594c0ac
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Wed Apr 22 18:10:59 2015 +0200
Enhance the security of the netfilter conntrack helpers
This is suggested here
https://home.regit.org/netfilter-en/secure-use-of-helpers/
and deprecated in the kernel (#10665).
-----------------------------------------------------------------------
hooks/post-receive
--
IPFire 2.x development tree
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2016-03-20 13:08 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2016-03-20 13:08 [git.ipfire.org] IPFire 2.x development tree branch, core100, created. 33513817fa4eac7007fc4e39c348d7fffdfac20a git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox