From mboxrd@z Thu Jan 1 00:00:00 1970 From: git@ipfire.org To: ipfire-scm@lists.ipfire.org Subject: [git.ipfire.org] IPFire 2.x development tree branch, core100, created. 33513817fa4eac7007fc4e39c348d7fffdfac20a Date: Sun, 20 Mar 2016 13:08:37 +0000 Message-ID: <20160320130837.8519F1081BA6@git01.ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============4847059289683678475==" List-Id: --===============4847059289683678475== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, core100 has been created at 33513817fa4eac7007fc4e39c348d7fffdfac20a (commit) - Log ----------------------------------------------------------------- commit 33513817fa4eac7007fc4e39c348d7fffdfac20a Author: Arne Fitzenreiter Date: Sun Mar 20 09:36:33 2016 +0100 set version to IPFire 2.19 core100 =20 Signed-off-by: Arne Fitzenreiter commit dd676ffb49f9b5b6c9fe4178f86cd048fb789593 Author: Arne Fitzenreiter Date: Sat Mar 19 21:56:30 2016 +0100 core100: add changes to updater =20 Signed-off-by: Arne Fitzenreiter commit d731b1f9914738ba8c76f7724b7915c941d3e336 Author: Arne Fitzenreiter Date: Sat Mar 19 12:54:12 2016 +0100 mt7601u-firmware: added =20 Signed-off-by: Arne Fitzenreiter commit ee1148d12a32988f3ae8c75f7c4a4b31883dc674 Author: Arne Fitzenreiter Date: Sat Mar 19 12:46:38 2016 +0100 ath10k-firmware: added =20 Signed-off-by: Arne Fitzenreiter commit 96e31c9817f1ee3bec3fe33ecae7a84ff7e4ffff Author: Arne Fitzenreiter Date: Fri Mar 18 19:26:39 2016 +0100 ntp: wait for connection if dhcpcd is running =20 Signed-off-by: Arne Fitzenreiter commit 8a148bbc5a9de80edb36fad91cd3f0e6ca3155a1 Author: Arne Fitzenreiter Date: Thu Mar 17 23:04:54 2016 +0100 Config: update sourcecode upload url =20 Signed-off-by: Arne Fitzenreiter commit 01ddfa0d6f1483071fd87e9f6c77085b174a1b14 Author: Arne Fitzenreiter Date: Thu Mar 17 23:00:46 2016 +0100 kernel: update to 3.14.65 =20 Signed-off-by: Arne Fitzenreiter commit 224401de72e7e08403cd07774d4f311d2e86c3a7 Author: Arne Fitzenreiter Date: Wed Mar 16 23:05:06 2016 +0100 linux-pae: add root (hd0) to grub.conf for virt install. =20 jiffybox will not load the kernel without this entry. not tested on citrix yet. commit 8649a31ed040795b09228c8f3fa181d001614541 Author: Arne Fitzenreiter Date: Wed Mar 16 22:58:21 2016 +0100 u-boot: fix fat16 reader commit f08c14477ed0f875a86d01c1d11bc234766953aa Author: Arne Fitzenreiter Date: Mon Mar 14 18:34:45 2016 +0100 core100: touch arm kernel and initrd before unpack. =20 this is a workaround for a uboot bug that not find all files. commit 6fa34327dd38412820e9654df69d48995b02906a Author: Arne Fitzenreiter Date: Mon Mar 14 18:04:38 2016 +0100 kernel: enable NFS_DEBUG =20 fixes #11053 commit 1775dbd2c6dc36e26712bbffa593e12af475c6a2 Author: Arne Fitzenreiter Date: Thu Mar 10 22:29:02 2016 +0100 kernel: update to 3.14.64 =20 Signed-off-by: Arne Fitzenreiter commit 46ce813e330925e0ab5969cf3e34c9e49fb9df88 Author: Michael Tremer Date: Thu Mar 10 19:22:04 2016 +0000 setup: Fix segmentation fault with more than four NICs found =20 Signed-off-by: Michael Tremer commit 9ef4bbf7032d6727a6debc10702e9beacd0b097d Merge: cb679b1 8c1cf3b Author: Michael Tremer Date: Tue Mar 8 22:45:04 2016 +0000 Merge branch 'bird' into next commit 8c1cf3b1f929ecd085827469ccb02ab9459de711 Author: Michael Tremer Date: Tue Mar 8 22:44:01 2016 +0000 bird: New package =20 Signed-off-by: Michael Tremer commit cb679b1eb965e0df188b50ab0337cf1687ed70cb Author: Arne Fitzenreiter Date: Tue Mar 8 21:32:29 2016 +0100 core100: add missing openssl rootfile to updater =20 Signed-off-by: Arne Fitzenreiter commit 03022f412ef2d4cfd0bad133988f2cc3312728d1 Author: Arne Fitzenreiter Date: Tue Mar 8 20:29:59 2016 +0100 core100: ship openssl (build with new gcc) =20 Signed-off-by: Arne Fitzenreiter commit 593e2eeb0320285c309686668b73744973d0a944 Author: Arne Fitzenreiter Date: Tue Mar 8 20:28:12 2016 +0100 core100: ship glibc (build with new gcc) =20 Signed-off-by: Arne Fitzenreiter commit 88cc99094805eb3133cac3eec0005844f5904721 Author: Arne Fitzenreiter Date: Tue Mar 8 20:01:49 2016 +0100 core100: add kernel to updater =20 Signed-off-by: Arne Fitzenreiter commit f83c50537bcb4b74bebcff83f86f69b60def544f Author: Arne Fitzenreiter Date: Tue Mar 8 19:31:49 2016 +0100 core100: add function to set last correct installed core on update. =20 Signed-off-by: Arne Fitzenreiter commit 822b4313d1029bcfa19ec6cc2f36da128001ab24 Author: Arne Fitzenreiter Date: Sat Mar 5 17:09:32 2016 +0100 kernel: update to 3.14.63 =20 Signed-off-by: Arne Fitzenreiter commit 4f472f86f854a5460c4fa8eb63fd1a4393d6099d Author: Arne Fitzenreiter Date: Sat Mar 5 17:07:23 2016 +0100 flash-images: copy kernel and initrd first =20 there is a u-boot bug that not find all files if the directory entries was splittet to more sectors so copy the important files first. =20 Signed-off-by: Arne Fitzenreiter commit 4a6cfe51a16575c7100862e2cc6f959bc48c6628 Merge: 64835e0 75ad2e4 Author: Arne Fitzenreiter Date: Fri Mar 4 07:09:02 2016 +0100 Merge remote-tracking branch 'origin/master' into next =20 Signed-off-by: Arne Fitzenreiter commit 64835e022c52d24432d201bd4d57f1aa962c1f90 Author: Michael Tremer Date: Sun Feb 28 12:27:06 2016 -0800 udev: Fix calling VLAN script =20 The VLAN hotplugging script was called with a wrong parameter that should just be used to rename devices. Hence the script was not correctly executed and did not create the virtual devices. =20 Fixes: #11009 =20 Signed-off-by: Michael Tremer commit a6cd8b9b5d903da27fef106329c892e372753e5f Author: Matthias Fischer Date: Sat Feb 27 16:29:45 2016 +0100 dnsmasq: 2.76test10 with latest patch (005) and some fixes =20 1. Added patch 005 because of the discussion on the dnsmasq-list: "I've noticed that replies which get their TTL from the dhcp-ttl option always get the TTL specified in dhcp-ttl. I'd prefer something like max(0, min(, - )). Otherwise, dns might hand out a high TTL for a dhcp-lease which expires one second later. ... Seems a sensible addition. =20 Cheers, =20 Simon." =20 2. Fixed several line numbers and patch lines in 'dnsmasq-Add-support-to-read-ISC-DHCP-lease-file.patch'. On the last build I got some "Hunk failed" messages. Patches are now applied exactly at the given lines. =20 3. Nevertheless, I still get some warnings: ... dnsmasq.c: In function 'main': dnsmasq.c:55:7: warning: unused variable 'did_bind' [-Wunused-variable] int did_bind =3D 0; ^ dnsmasq.c:54:9: warning: unused variable 'bound_device' [-Wunused-variabl= e] char *bound_device =3D NULL; ^ ... isc.c: In function 'dhcp_lease_new': isc.c:40:3: warning: ignoring return value of 'asprintf', declared with a= ttribute warn_unused_result [-Wunused-result] asprintf(&lease->fqdn, "%s.%s", hostname, daemon->domain_suffix); ^ =20 Asking about these warnings in the dnsmasq-list showed no reaction - no o= ne answered. =20 Best, Matthias =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 3b9815eb87e83a1b24e85ce0eab14a962b62ccd0 Author: Matthias Fischer Date: Fri Feb 26 18:29:28 2016 +0100 dnsmasq: 2.76test10 with latest patches (001-004) =20 This is 'dnsmasq 2.76test10', based on current 'next', containing latest = patches. =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 43747fae333273890aadb66b72d911efaa4c2086 Author: Arne Fitzenreiter Date: Fri Feb 26 13:43:33 2016 +0100 kernel: update to 3.14.62 =20 Signed-off-by: Arne Fitzenreiter commit 5f39eb211974f1fa21c1f769f62b779f85ffbdf4 Author: Arne Fitzenreiter Date: Fri Feb 26 07:27:09 2016 +0100 rename core99 to core100 for inserting another OpenSSL Security update =20 Signed-off-by: Arne Fitzenreiter commit 77c48fbe35e59957036b9533db0ec5b88a7a1e3d Author: Michael Tremer Date: Wed Feb 24 22:13:36 2016 -0800 core99: Ship updated xz =20 Signed-off-by: Michael Tremer commit f443b4cba7fbd22723e1716355ee921e289907ab Author: Marcel Lorenz Date: Tue Feb 23 08:49:27 2016 +0100 bison: update to 3.0.4 =20 Update bison to the last version from Linux from Scratch. =20 Signed-off-by: Marcel Lorenz Signed-off-by: Michael Tremer commit 962fade2d4714d4c8d5e26b841e4a87c96f92845 Author: Marcel Lorenz Date: Tue Feb 23 09:37:28 2016 +0100 xz: update to 5.2.2 =20 Update xz to last version from Linux from Scratch. =20 Signed-off-by: Marcel Lorenz Signed-off-by: Michael Tremer commit 28ef7a6a9e782410811e7733f27ec85b4ba0fe19 Author: Marcel Lorenz Date: Tue Feb 23 08:46:23 2016 +0100 m4: update to 1.4.17 =20 Update m4 to last version from Linux from Scratch. =20 Signed-off-by: Marcel Lorenz Signed-off-by: Michael Tremer commit 86b759785b24acd678450f639424b81798e329ab Author: Michael Tremer Date: Tue Feb 23 09:44:40 2016 -0800 make.sh: Update source upload URL =20 There is no longer a SSH service on source.ipfire.org. =20 The usual login on git.ipfire.org should be used instead. =20 Signed-off-by: Michael Tremer commit efd02229ae5402bad762a20c9ce75607267e3309 Author: Arne Fitzenreiter Date: Wed Feb 24 16:01:33 2016 +0100 flash-images: change root uuid replacer sed =20 i cannot really test this on my systems. =20 Signed-off-by: Arne Fitzenreiter commit 920f1950959bb1500847eb3e3eaebbe88ce08163 Author: Arne Fitzenreiter Date: Tue Feb 23 20:08:25 2016 +0100 flash-image: set RAMDISK_MODE=3D2 =20 Signed-off-by: Arne Fitzenreiter commit c83d16146342d2a0d6ad8c101c82de71ab40d9e3 Author: Arne Fitzenreiter Date: Tue Feb 23 20:01:30 2016 +0100 init-functions: enable autoramdisk with 400MB =20 The 512MB raspberry pi reserve some memory for buffers and gpu so there are a bit less than 490 MB free. =20 Signed-off-by: Arne Fitzenreiter commit 38956241bb0644480887aeb9a399e3d9ba2fc3f4 Author: Arne Fitzenreiter Date: Tue Feb 23 19:49:49 2016 +0100 flash-image: fix root uuid on some build machines. =20 Signed-off-by: Arne Fitzenreiter commit ee552b7e1a8238b620b557f16baf2131cbafc104 Author: Arne Fitzenreiter Date: Fri Feb 19 07:18:29 2016 +0100 kernel: update to 3.14.61 =20 Signed-off-by: Arne Fitzenreiter commit 802b916d10aa314ae878ec633e7c3bbd2adaba7e Merge: 879458d 1ffbca6 Author: Arne Fitzenreiter Date: Wed Feb 17 19:45:08 2016 +0100 Merge remote-tracking branch 'origin/master' into next =20 Signed-off-by: Arne Fitzenreiter =20 Conflicts: make.sh commit 879458d41f95578cd35e0f8e9f9e5078aa8dccbb Author: Arne Fitzenreiter Date: Wed Feb 17 10:10:19 2016 +0100 rename core98 to 99 for glibc security update =20 Signed-off-by: Arne Fitzenreiter commit fd3b90c8751df6db7a99bcf3181cef608bb72417 Author: Matthias Fischer Date: Sat Feb 13 08:29:39 2016 +0100 squid 3.4.14: Bugfix for #4431 (C code is not compiled with CFLAGS) =20 For details see: http://bugs.squid-cache.org/show_bug.cgi?id=3D4431 =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit e039df8613b4f51b58ca249998ef66fc7bb76758 Author: Arne Fitzenreiter Date: Wed Feb 10 08:36:17 2016 +0100 backports: remove all old media modules. =20 more modules are renamed or merged into other modules. =20 Signed-off-by: Arne Fitzenreiter commit a760a5cfa96c9f383bf3244e07a34d13f97cbc63 Author: Arne Fitzenreiter Date: Mon Feb 8 13:53:13 2016 +0100 dracut: remove marvell sdio modules from initrd. =20 this allows to switch to uap module on dreamplug. =20 Signed-off-by: Arne Fitzenreiter commit 7b757df70fb4caa70eb0f3a0e0cd1af7c9adaea1 Author: Michael Tremer Date: Mon Feb 8 01:52:18 2016 +0000 core98: Ship changed /etc/ppp/ip-up =20 Signed-off-by: Michael Tremer commit c1bf984e05ff9c523121d459cd58154d3d37a34a Author: Matthias Fischer Date: Sun Feb 7 13:45:32 2016 +0100 New IP-address of 'ping.ipfire.org' =20 Telekom gateways (e.g.) don't answer 'pings', therefor '/etc/ppp/ip-up' uses 'ping.ipfire.org' for the 'gateway Graph' in 'Status / Network (othe= r'. After moving the infrastructure, several IP addresses were changed. '178.63.73.246' doesn't work anymore for 'ping.ipfire.org', its now '81.3= .27.38'. =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 8260fb7e0eac021a9be1c120d39ecb8e4a76c2a2 Author: Michael Tremer Date: Mon Feb 8 01:40:35 2016 +0000 core98: Ship recently updated grep and sed =20 Signed-off-by: Michael Tremer commit c9ed30440afb129925fd05692a1c403db3831a43 Author: Matthias Fischer Date: Sun Jan 31 14:49:17 2016 +0100 grep: Update to 2.22 =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 9dc6723a0a677ad84f8bc40679d963bcf8704f71 Author: Matthias Fischer Date: Sun Jan 31 14:44:05 2016 +0100 sed: Update to 4.2.2 =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 067db4d53abbaeaaaaf46515ee834c78f1bf235b Merge: 645378f d651e48 Author: Michael Tremer Date: Mon Feb 8 01:33:15 2016 +0000 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next commit d651e48f708182ade9669a5119cc63300b70d2d3 Author: Arne Fitzenreiter Date: Sun Feb 7 09:38:20 2016 +0100 kernel: disable grsecurity KSTACKOVERFLOW. =20 this is the reason for crashes usb lan dongles and media devices. =20 Signed-off-by: Arne Fitzenreiter commit 645378fbb9f8540ace66bd3a9be70583b6e15a6f Author: Michael Tremer Date: Fri Feb 5 10:24:03 2016 +0000 firewall: Fix MAC filter =20 Packets destined for the firewall coming in from the blue device where accepted too early to be processed by the firewall input chain rules. =20 Signed-off-by: Michael Tremer commit ff43197b01d45dd6119fb15586c2ce29bd4f8cb3 Merge: 0aa7160 552fb4b Author: Michael Tremer Date: Thu Feb 4 14:35:55 2016 +0000 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next commit 0aa71600efb5dcff104135ed4bf621a23ee19ced Author: Michael Tremer Date: Thu Feb 4 14:31:53 2016 +0000 wirelessctrl: Remove some unused code =20 Signed-off-by: Michael Tremer commit 552fb4b8b5aa738959848dafc20d41e6fdbdbe4e Author: Arne Fitzenreiter Date: Mon Feb 1 07:28:03 2016 +0100 dhcpcd: rework mtu handling on buggy nic's =20 some nic's loose the carrier after setting new mtu. =20 Signed-off-by: Arne Fitzenreiter commit a06723b1f4e87ee5b31dbc59e7b21a9e57750989 Author: Michael Tremer Date: Sat Jan 30 16:37:21 2016 +0000 core98: Ship updated tzdata =20 Signed-off-by: Michael Tremer commit f83b3c65a34b5e66255c77140724db684e3e460b Author: Matthias Fischer Date: Sat Jan 30 11:07:46 2016 +0100 tzdata: Update to 2016a =20 Fixes https://bugzilla.ipfire.org/show_bug.cgi?id=3D11034 =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 57d98918a1a11077d8d3e3caeaca9d85e4200ea5 Author: Arne Fitzenreiter Date: Fri Jan 29 14:25:25 2016 +0100 kernel: update to 3.14.60 =20 Signed-off-by: Arne Fitzenreiter commit 35b24ff8a933e2ab8614c4f9b7c27c25c6f95473 Author: Arne Fitzenreiter Date: Thu Jan 28 22:08:08 2016 +0100 set core to 98 and move 97 to oldcore =20 Signed-off-by: Arne Fitzenreiter commit 78574c184666087272235ceeafceaf585cff96ba Author: Arne Fitzenreiter Date: Thu Jan 28 16:20:16 2016 +0100 finish core97 =20 Signed-off-by: Arne Fitzenreiter commit a6c71642778020a832bb5da67db8ebd004d85bad Author: Arne Fitzenreiter Date: Thu Jan 28 15:58:46 2016 +0100 openssl: security update to 1.0.2f =20 changes: * DH small subgroups - CVE-2016-0701 * SSLv2 doesn't block disabled ciphers - CVE-2015-3197 * Reject DH handshakes with parameters shorter than 1024 bits =20 Signed-off-by: Arne Fitzenreiter commit eb2f4a4d2623d8e3646156126884dd78b8357dc7 Author: Arne Fitzenreiter Date: Thu Jan 28 13:24:50 2016 +0100 hwdate: update databases =20 pci.ids: 2016.01.28 usb.ids: 2015.12.17 =20 Signed-off-by: Arne Fitzenreiter commit ecd50190976df0b55c912ee4b2eb004652cd3b4d Author: Arne Fitzenreiter Date: Thu Jan 28 13:08:59 2016 +0100 core97: prepare new core97 with openssl and openssh update. =20 the update itself has to be done... =20 Signed-off-by: Arne Fitzenreiter commit 6fa8a1a9cc50d2df78650f1fc0f8f6f3b9111398 Author: Arne Fitzenreiter Date: Thu Jan 28 13:03:39 2016 +0100 rename core97 to 98 because we have to insert OpenSSL security update =20 Signed-off-by: Arne Fitzenreiter commit 235888599a4afa54d54421328733bf003c45711a Author: Arne Fitzenreiter Date: Thu Jan 28 13:02:09 2016 +0100 backports: update to 4.2.6 =20 Signed-off-by: Arne Fitzenreiter commit 8998dde892d3e515747ee9a2e6e3fdf04ae607b9 Author: Arne Fitzenreiter Date: Tue Jan 26 18:02:00 2016 +0100 rsync: update to 3.1.2 =20 Signed-off-by: Arne Fitzenreiter commit 00ee4eb13ce2f3cdd7deee08b6487145b46b28bb Author: Arne Fitzenreiter Date: Mon Jan 25 20:15:06 2016 +0100 kernel: update to 3.14.59 =20 Signed-off-by: Arne Fitzenreiter commit 02a60a9b9e99f1a8aa20b1deefa2b622ba99a5c6 Author: Michael Tremer Date: Sat Jan 23 01:46:42 2016 +0000 squid: Actually make --with-filedescriptors work =20 Signed-off-by: Michael Tremer commit cf82da6b376e4c7456a0690968ad2e879029a70c Author: Michael Tremer Date: Sat Jan 23 00:41:02 2016 +0000 core97: Ship updated CGI files =20 Signed-off-by: Michael Tremer commit c97698a8f4b2520e198521c3d67a25efc3ad3776 Merge: 665f799 43638be Author: Michael Tremer Date: Sat Jan 23 00:39:24 2016 +0000 Merge remote-tracking branch 'meitelwein/web-gui-ipv6' into next commit 665f79926d025fec413531c397ccd6998583237e Merge: 92e4521 c26171b Author: Michael Tremer Date: Sat Jan 23 00:39:19 2016 +0000 Merge remote-tracking branch 'origin/master' into next commit 92e4521572f0a5a6411ce74a7a70b9b65dcebb26 Author: Daniel Weism=C3=BCller Date: Fri Jan 22 12:10:19 2016 +0100 cmake: Disable parallelism =20 Building cmake uses a high amount of memory (>2G) and fails to build on my system. Using less processes reduces memory usage and lets the build succeed. =20 Signed-off-by: Daniel Weism=C3=BCller Signed-off-by: Michael Tremer commit 20b27af8634b88fa400b1779415fc92888fbb1d8 Author: Michael Tremer Date: Fri Jan 22 00:55:46 2016 +0000 Update translations =20 Signed-off-by: Michael Tremer commit 2775ab9cc63708ea0370d5220d5ee13a4f94142b Author: Michael Tremer Date: Fri Jan 22 00:55:25 2016 +0000 core97: Ship iptables conntrack changes =20 Signed-off-by: Michael Tremer commit 8a1a3bf3934c8a92c605135ee13db466ea3dcbf4 Merge: 41410d1 6b86307 Author: Michael Tremer Date: Fri Jan 22 00:54:14 2016 +0000 Merge remote-tracking branch 'ms/iptables-conntrack' into next commit 41410d197b3dbf75dfd05376ed623857adac8977 Merge: 22a504c a7b0967 Author: Michael Tremer Date: Fri Jan 22 00:49:15 2016 +0000 Merge branch 'hyper-v-fixes' into next commit 22a504c69cb578f6e34928f3d862beac635e5224 Author: Arne Fitzenreiter Date: Wed Jan 20 19:28:56 2016 +0100 toolchain: fix build on hosts that not support strong stackprotect =20 Signed-off-by: Arne Fitzenreiter commit 928eba27a5e15074d8e5b7d8b9f6892d122bf40f Author: Michael Tremer Date: Tue Jan 19 00:07:07 2016 +0000 core97: Ship updated webaccess.cgi =20 Signed-off-by: Michael Tremer commit bcb30674e2f7f3fe4989bffe5fbc43d44be86633 Author: Erik Kapfer Date: Mon Jan 18 10:14:10 2016 +0100 webaccess.cgi: Fixed language settings. =20 Fix for #10879. Added also use strict. =20 Signed-off-by: Erik Kapfer Signed-off-by: Michael Tremer commit 857b2c795e2c982cb5967725ba01a1e3c29d43f5 Author: Michael Tremer Date: Mon Jan 18 22:26:23 2016 +0000 Improve hardening by using -fstack-protector-strong =20 This functionality is now available for us since we updated to GCC 4.9 and just improves the stack smashing protector in GCC. =20 Signed-off-by: Michael Tremer commit cc9f461f74525fa3f7300a86676634780c884a21 Author: Matthias Fischer Date: Tue Jan 12 18:46:52 2016 +0100 nano: Update to 2.5.1 =20 Excerpt form 'NEWS': "It includes fixes for a syntax-highlighting bug and a positionlog bug, it disables a time-eating multiline regex in the C syntax, and it adds an escape hatch to the WriteOut menu when --tempfile is used: the discardbuffer command, ^Q. It also has translation updates for fifteen languages, and a small fix in the softwrap code." =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 037cf8d20dd5d754c89c8d267d9fd6384061d170 Author: Michael Tremer Date: Sun Jan 17 18:51:47 2016 +0000 core97: Ship updated openssh =20 Signed-off-by: Michael Tremer commit 43e5fe9ded9899276a338476ba8a2974055ca222 Author: Matthias Fischer Date: Fri Jan 15 17:43:50 2016 +0100 openssh: Update to 7.1p2 =20 Fixes CVE-2016-0777 =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 64285d23eb9003efd7a2273d61814d4cd144431d Merge: cfdeb28 9b4f0e6 Author: Michael Tremer Date: Sun Jan 17 18:49:03 2016 +0000 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next commit 9b4f0e639705d87708b67038e11fc4f10cbe81e5 Author: Arne Fitzenreiter Date: Fri Jan 15 07:20:34 2016 +0100 toolchain: bump version number =20 Signed-off-by: Arne Fitzenreiter commit 3da3ac98564bc97ba96bc2e10d5d6acb746a33de Author: Arne Fitzenreiter Date: Thu Jan 14 16:08:24 2016 +0100 gcc: remove gdb python files also in root build. =20 Signed-off-by: Arne Fitzenreiter commit 8f2ac12a87a1308c5e9adc7e7adb7150d5a1b364 Author: Arne Fitzenreiter Date: Thu Jan 14 03:55:54 2016 +0100 toolchain: move *.py remove to correct pass. =20 Signed-off-by: Arne Fitzenreiter commit 6e96dd142aa6a54f970968c8a1bb2087aa8c6147 Author: Arne Fitzenreiter Date: Wed Jan 13 19:04:56 2016 +0100 toolchain: enable bootstrap and remove *.py files from lib. =20 only with bootstrap the gcc pass2 build works on arm. =20 Signed-off-by: Arne Fitzenreiter commit 905d1afd4e7d30b9088e8c214248a76f5ff4ae72 Author: Arne Fitzenreiter Date: Wed Jan 13 07:24:34 2016 +0100 kernel: disable RANDSTRUCT =20 RANDSRUCT is incompatible with ccache build. =20 fixes #10905 fixes #11012 =20 Signed-off-by: Arne Fitzenreiter commit cfdeb28050cac9c87d7be896378f2f53d722ff7d Author: Michael Tremer Date: Sun Jan 10 21:20:49 2016 +0000 core97: Ship updated ntp =20 Signed-off-by: Michael Tremer commit db017b4b6ef9ccf32f7e9a2c22f58c3f339e98ad Author: Matthias Fischer Date: Sat Jan 9 20:39:45 2016 +0100 ntp 4.2.8p5: removed obsolete patch file =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit c1de76704acbb06bffbb4e6b15f66892db93c525 Author: Matthias Fischer Date: Sat Jan 9 20:29:41 2016 +0100 ntp: Update to 4.2.8p5 =20 "...addresses 1 medium-severity security issue, 14 bugfixes, and contains other improvements over 4.2.8p4." =20 For a complete list, see: http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit b75b6382ab1a3a71bb434932623a396b106d6925 Author: Michael Tremer Date: Sun Jan 10 19:35:42 2016 +0000 grub: Disable hardening for grub-script-check =20 Signed-off-by: Michael Tremer commit 1d9be34e2a617efa19135b646914fb1ef507a8b9 Author: Michael Tremer Date: Sat Jan 9 19:48:21 2016 +0000 ccache: Include hash of compiler specs in hashing =20 Signed-off-by: Michael Tremer commit 43638be58b2ae99bd07a420c5f340222e2744feb Author: Michael Eitelwein Date: Sat Jan 9 20:09:58 2016 +0100 No code changes, fixed formatting by replacing spaces with tabs commit cec5c724f5b1cb4c989c0832cc63c733d7c2b107 Merge: 820a4ab 16260e2 Author: Michael Tremer Date: Sat Jan 9 14:56:33 2016 +0000 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next commit 16260e2c695021795a06941781f9ef86af6305ec Author: Michael Tremer Date: Thu Jan 7 23:47:39 2016 +0000 timectrl: Stop ntp daemon when disabled =20 Fixes #11000 =20 Signed-off-by: Michael Tremer commit 1b5b6c91dae0316c9453fe7560c1d39fc453ebcb Author: Michael Eitelwein Date: Thu Jan 7 19:40:24 2016 +0100 Fixed detection of firewall chain when bridge is used for ipv6 =20 Signed-off-by: Michael Eitelwein commit a249e865bd15f8f9041db8e3894cdae4dc4b25ca Author: Michael Eitelwein Date: Thu Jan 7 16:55:11 2016 +0100 Firewall chain was not extracted correctly when ipv6 uses bridge =20 Signed-off-by: Michael Eitelwein commit 764a3f1ff2384f34c592c311f5435a24eb6a53c8 Author: Arne Fitzenreiter Date: Thu Jan 7 17:41:43 2016 +0100 toolchain: fix full toolchain crossbuild =20 Signed-off-by: Arne Fitzenreiter commit 2eb67894efaf650494cc5dafb73ca7ce144fe088 Author: Arne Fitzenreiter Date: Thu Jan 7 17:41:16 2016 +0100 binutils: update to 2.24 =20 Signed-off-by: Arne Fitzenreiter commit f97c6774ef3e4bd4cf77b5e6ff1870bc0f7e271b Author: Michael Eitelwein Date: Thu Jan 7 15:24:13 2016 +0100 Fix regex to extract firewall chain for ipv6 in showrequestfrom*.dat =20 If bridged ipv6 is used, $iface is taken from PHYSIN In the log line the order of fields is "... IN=3DXY OUT=3DXY PHYSIN=3DXY = ..." =20 Signed-off-by: Michael Eitelwein commit 9877d28d9e2daf49324cbf2120d00ab7169da0d3 Author: Michael Eitelwein Date: Thu Jan 7 14:00:01 2016 +0100 Enable correct display of ipv6 entries in Firewall log pages of web UI. =20 3 main changes: - Fill $iface and $out from PHYSIN and PHYSOUT when looking at bridged p= ackets, othwerwise fill from IN and OUT - Recognize ipv4 and ipv6 address style for $srcaddr and $dstaddr - Match color coding of tables to pie charts (see seperate patch sent ea= rlier) =20 I am using the bridged ipv6 setup as proposed in the wiki. I do not think= this breaks anything when not using ipv6. So it would be nice to include thi= s even if ipv6 is not officially supported yet. It is quite useful when using= the ipv6 setup. =20 Signed-off-by: Michael Eitelwein --- commit 820a4ab564b1bd437d27becede5defb000c06c50 Author: Daniel Weism=C3=BCller Date: Wed Jan 6 14:56:18 2016 +0100 owncloud: updated to version 7.0.11 =20 Signed-off-by: Daniel Weism=C3=BCller Signed-off-by: Michael Tremer commit f81e27e1c8c47fefdc78b22ecb0bb5122ea0b304 Author: Michael Tremer Date: Wed Jan 6 15:05:37 2016 +0000 dnsdist: Don't build on ARM =20 There seem to be some serious C++ issues in this so that it won't build on ARM. =20 At the moment I do not have any resources to look further into this, so I just disable building this package for all ARM architectures. =20 Signed-off-by: Michael Tremer commit b0a014b7f83f160c036d8910e90d1262321e2d12 Author: Michael Tremer Date: Tue Jan 5 21:00:19 2016 +0000 QoS: Improve saving enabled/disable state =20 It was reported that the QoS did not stop when the user clicked the "stop" button. This patch fixes that. =20 Fixes #10664 =20 Signed-off-by: Michael Tremer Acked-by: Arne Fitzenreiter commit 9a09d94ee3eb6097897f31dc236dc0c2aaea677b Author: Michael Tremer Date: Tue Jan 5 20:44:26 2016 +0000 qosctrl: Cleanup code by replacing hardcoded paths =20 Signed-off-by: Michael Tremer commit 84032d0845148505c230db0f391e524146835a9c Author: Michael Tremer Date: Mon Jan 4 22:46:13 2016 +0000 core97: Ship updated openvpn package =20 Signed-off-by: Michael Tremer commit 964700d414ca841ca0d3e98329c179b4cb62e36e Author: Erik Kapfer Date: Tue Jul 7 13:13:35 2015 +0200 openvpn: Update to version 2.3.7, added --verify-x509-name directive. =20 The tls-remote directive is deprecated and will be removed with OpenVPN version 2.4 . Added instead --verify-x509-name HOST name into ovpnmain.cgi. =20 Signed-off-by: Michael Tremer commit 9977da131b2d2e560057b79db714a987977026b4 Author: Matthias Fischer Date: Sun Dec 27 00:20:13 2015 +0100 bind: Update to 9.10.3-P2 =20 Changelog: =20 [security] Update allowed OpenSSL versions as named is potentially vulnerable to CVE-2015-3193. =20 [maint] H.ROOT-SERVERS.NET is 198.97.190.53 and 2001:500:1::53. [RT #40556] =20 [security] Insufficient testing when parsing a message allowed records with an incorrect class to be be accepted, triggering a REQUIRE failure when those records were subsequently cached. (CVE-2015-8000) [RT #40987] =20 [security] Address fetch context reference count handling error on socket error. (CVE-2015-8461) [RT#40945] =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 21ac63688a76cefccf4796fe608fae436c38d5c8 Author: Michael Tremer Date: Mon Dec 28 15:37:02 2015 +0100 core97: Ship dnsmasq =20 Signed-off-by: Michael Tremer commit c3b4c861f5531712b6579cae839ea621f5336950 Author: Matthias Fischer Date: Thu Dec 24 10:17:16 2015 +0100 dnsmasq 2.75: latest patches from upstream =20 Same procedure as... :-) =20 Best to all for xmas and 2016! =20 Matthias =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 2135528774a66fa30143c024993054aed0f60c5a Author: Michael Tremer Date: Mon Dec 28 15:30:13 2015 +0100 core97: Ship pgrep with the updater =20 Signed-off-by: Michael Tremer commit 4df3276bb43bfb77e570b8c329da3885f644dabb Author: Arne Fitzenreiter Date: Sat Dec 26 17:37:53 2015 +0100 ncurses: rootfile update. =20 Signed-off-by: Arne Fitzenreiter commit b94e0ffc689e6a659809fb874b6c18053faf1f48 Author: Arne Fitzenreiter Date: Sat Dec 26 17:34:13 2015 +0100 dnsdist: rootfile update. =20 Signed-off-by: Arne Fitzenreiter commit b37e91c3b5527527ae354e66d91f6912e6e534de Author: Arne Fitzenreiter Date: Sat Dec 26 17:33:30 2015 +0100 diffutils: rootfile update. =20 Signed-off-by: Arne Fitzenreiter commit eddda7f9bd4489e6c5e37bf88eac83196210616b Author: Arne Fitzenreiter Date: Sat Dec 26 13:16:59 2015 +0100 gcc: include libstdc++ to rootfile =20 Signed-off-by: Arne Fitzenreiter commit f25314afd71657a51e1dc02759edaf99c22bb270 Author: Arne Fitzenreiter Date: Fri Dec 25 12:45:05 2015 +0100 vdr_eepg: fix source download. =20 the external server has changed the compression so the md5 has changed. Always use the IPFire server as primary download source. =20 Signed-off-by: Arne Fitzenreiter commit aa6684235847375033842ab4ed99e22bcd9a13c2 Author: Arne Fitzenreiter Date: Wed Dec 23 10:14:26 2015 +0100 kernel: apply arm-multi grsecurity fixes only at arm-multi build commit 98b8cabf4d80909b636e56a59091665798043f61 Author: Michael Tremer Date: Thu Dec 10 21:25:27 2015 +0000 dnsdist: New package =20 Signed-off-by: Michael Tremer commit 6138d53bdd9df4a007361c3e63ab602e2c2de443 Author: Michael Tremer Date: Thu Dec 10 21:10:06 2015 +0000 lua: New package =20 Simple scripting language. Supposed to be fast. Needed for dnsdist. =20 Signed-off-by: Michael Tremer commit 3b7808295e2627ac9a0c8a79a793262ac6cd545a Author: Michael Tremer Date: Tue Dec 22 22:27:10 2015 +0000 Disable packaging mediatomb =20 Signed-off-by: Michael Tremer commit ffea9709f83fae4f9b7e249d7f5cdc2501259607 Author: Michael Tremer Date: Tue Dec 22 22:25:18 2015 +0000 linux: Fix build of kernel and headers package =20 Signed-off-by: Michael Tremer commit a7b0967db425d27b349d436bf83e4a18143f6fe3 Author: Michael Tremer Date: Tue Dec 15 18:30:56 2015 +0000 linux: Backport Hyper-V network driver =20 Signed-off-by: Michael Tremer commit f295ca0cf75d0b475303a9db905e3ab082290997 Author: Michael Tremer Date: Sat Dec 12 15:31:33 2015 +0000 kernel: Add grsecurity compile fix =20 Signed-off-by: Michael Tremer commit 21819b545a1451f557ea924b0dcdb5ab24b59a86 Author: Michael Tremer Date: Fri Dec 4 22:11:49 2015 +0000 mediatomb: Disable build because it FTBFS =20 The upstream project seems to be dead =20 Signed-off-by: Michael Tremer commit 9f0f7c50cd2a4040a7ba26358e5d956e2168d0a8 Author: Michael Tremer Date: Thu Dec 10 17:47:33 2015 +0000 gcc: Update armv5tel rootfile =20 Signed-off-by: Michael Tremer commit a9fd97961920a89c87217f89c14fa2d4234a393d Author: Michael Tremer Date: Thu Dec 10 14:40:36 2015 +0000 gcc: Update x86_64 rootfile =20 Signed-off-by: Michael Tremer commit 8675b78af98432f327adcb7d35c614cb2ce7dfb6 Author: Michael Tremer Date: Fri Dec 4 21:24:14 2015 +0000 gcc: Update to version 4.9.3 =20 Signed-off-by: Michael Tremer commit 9098b1e1c0f170b51620b8bc63118b89a038dfc6 Author: Michael Tremer Date: Fri Dec 4 21:22:30 2015 +0000 glibc: Fix headers to build with new GCC =20 Signed-off-by: Michael Tremer commit bdfd41c4f18fa85b9cc392354c0e1d73b7735651 Author: Michael Tremer Date: Fri Dec 4 21:21:32 2015 +0000 libmpc: New package =20 A dependency for GCC =20 Signed-off-by: Michael Tremer commit 9753936f4cfcde7ff310bb9d9f31c6c3d5caff79 Author: Michael Tremer Date: Tue Dec 22 12:34:59 2015 +0000 core97: Ship updated bind package =20 Signed-off-by: Michael Tremer commit d31345a50bed70c4d2197e1294f5490be839dff2 Author: Michael Tremer Date: Tue Dec 22 12:34:18 2015 +0000 Create Core Update 97 =20 Signed-off-by: Michael Tremer commit ea155e2d2b337366b04979b375251fdac724fcc6 Author: Michael Tremer Date: Tue Dec 22 11:11:24 2015 +0000 Move Core Update 96 to oldcore =20 Signed-off-by: Michael Tremer commit c15da8c3b5f94d3ced94166eefb9392b86dc9d80 Author: Matthias Fischer Date: Sat Nov 7 07:33:57 2015 +0100 bind: Update to 9.10.3 =20 bind: Update to 9.10.3 =20 Security fixes: An incorrect boundary check in the OPENPGPKEY rdatatype could trigger an = assertion failure. This flaw is disclosed in CVE-2015-5986. [RT #40286] =20 A buffer accounting error could trigger an assertion failure when parsing= certain malformed DNSSEC keys. This flaw was discovered by Hanno B=C3=B6ck of the Fuzzing Project, and i= s disclosed in CVE-2015-5722. [RT #40212] =20 A specially crafted query could trigger an assertion failure in message.c. This flaw was discovered by Jonathan Foote, and is disclosed in CVE-2015-= 5477. [RT #40046] =20 On servers configured to perform DNSSEC validation, an assertion failure = could be triggered on answers from a specially configured server. This flaw was discovered by Breno Silveira Soares, and is disclosed in CV= E-2015-4620. [RT #39795] =20 Bug fixes: Asynchronous zone loads were not handled correctly when the zone load was= already in progress; this could trigger a crash in zt.c. [RT #37573] =20 A race during shutdown or reconfiguration could cause an assertion failur= e in mem.c. [RT #38979] =20 Some answer formatting options didn't work correctly with dig +short. [RT= #39291] =20 Malformed records of some types, including NSAP and UNSPEC, could trigger= assertion failures when loading text zone files. [RT #40274] [RT #40285] =20 Fixed a possible crash in ratelimiter.c caused by NOTIFY messages being r= emoved from the wrong rate limiter queue. [RT #40350] =20 The default rrset-order of random was inconsistently applied. [RT #40456] =20 BADVERS responses from broken authoritative name servers were not handled= correctly. [RT #40427] =20 Several bugs have been fixed in the RPZ implementation. =20 For a complete list, see: https://kb.isc.org/article/AA-01306/0/BIND-9.10.3-Release-Notes.html =20 Regards, Matthias =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 6b86307cac1ed49a3d88836fc5fa90eef98a33ca Author: Michael Tremer Date: Thu Aug 20 23:05:40 2015 +0100 firewall options: Fix translation and spelling of new ALG section =20 Signed-off-by: Michael Tremer commit 63fd135400da8e15a1a0519f377c20bad67a6d0e Author: Alexander Marx Date: Thu Aug 20 10:56:54 2015 +0200 BUG10844 add new options to firewalloptions for conntrack =20 simple changes, so far no languagefile changes because of simple protocol names. should be clear in all languages. =20 Signed-off-by: Michael Tremer commit 53a6b00c4fc7e863b8a1b22cc01f90b016184363 Author: Michael Tremer Date: Wed Aug 12 12:46:07 2015 +0100 firewall: Disable the PPTP and AMANDA conntrack helpers by default =20 These do not seem to work at the moment. =20 Signed-off-by: Michael Tremer commit 2c4b9c5004f0db606612eba3965846d4a2623296 Author: Michael Tremer Date: Wed Aug 12 12:44:26 2015 +0100 firewall: Fix amanda helper =20 This helper requires setting a layer 4 protocol. =20 Signed-off-by: Michael Tremer commit e2c723627c587275e274948d026ac41a80a1705a Author: Michael Tremer Date: Wed Aug 12 12:18:18 2015 +0100 firewall: Fix H.323 helpers =20 Signed-off-by: Michael Tremer commit c8f8bf328f4dd6567513f942c9c1db1dcf73ef93 Author: Michael Tremer Date: Tue May 12 13:33:08 2015 +0200 firewall: Add H.323 to the conntrack helpers commit 50354ffe3a946f314b5bf4f8648fa14d14c14667 Author: Michael Tremer Date: Tue May 12 13:27:24 2015 +0200 firewall: Add IRC to the conntrack helpers commit a93bf696170d32a45ccc76b29f68ca9b4df9ddb3 Author: Michael Tremer Date: Tue May 12 13:25:04 2015 +0200 firewall: Add amanda to the conntrack helpers commit d57c6162cb2d00fd4a4989fa3fe6924db528bce1 Author: Michael Tremer Date: Tue May 12 13:16:40 2015 +0200 firewall: Make conntrack helpers configurable commit 4071b2d61bdf3e284395d80a06189d5ae7752c5b Author: Michael Tremer Date: Mon May 11 13:04:14 2015 +0200 firewall: iptables will load the conntrack modules automatically commit 0f5350608ed5790101caf94c19bf08a0a0c2118f Author: Michael Tremer Date: Mon May 11 13:00:34 2015 +0200 firewall: Accept related ICMP packets again =20 This rule is required to forward ICMP error messages for aborted TCP connections and the like. commit a235f229527896f76ffa9404f6b8fb75f19d522b Author: Michael Tremer Date: Wed Apr 22 18:13:56 2015 +0200 firewall: Remove option to disable the SIP ALG commit b1109b8af5f0a5e3ab7f0b68211d63ab0594c0ac Author: Michael Tremer Date: Wed Apr 22 18:10:59 2015 +0200 Enhance the security of the netfilter conntrack helpers =20 This is suggested here https://home.regit.org/netfilter-en/secure-use-of-helpers/ and deprecated in the kernel (#10665). ----------------------------------------------------------------------- hooks/post-receive -- IPFire 2.x development tree --===============4847059289683678475==--