From mboxrd@z Thu Jan 1 00:00:00 1970 From: Arne Fitzenreiter To: ipfire-scm@lists.ipfire.org Subject: [git.ipfire.org] IPFire 2.x development tree branch, core133, created. f081e454a6a0074a7ded39bbe0eb5eadd8e3ecf3 Date: Wed, 12 Jun 2019 18:59:31 +0100 Message-ID: <20190612175932.32F3784FDBF@people01.i.ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============2953538158539885222==" List-Id: --===============2953538158539885222== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, core133 has been created at f081e454a6a0074a7ded39bbe0eb5eadd8e3ecf3 (commit) - Log ----------------------------------------------------------------- commit f081e454a6a0074a7ded39bbe0eb5eadd8e3ecf3 Author: Arne Fitzenreiter Date: Wed Jun 12 19:57:21 2019 +0200 finish core133 =20 Signed-off-by: Arne Fitzenreiter commit fa7de475fe745004b207eea07ba178b61197fe5e Author: Peter M=C3=BCller Date: Mon Jun 10 19:02:00 2019 +0000 Tor: fix permissions after updating, too =20 Fixes #12088 =20 Signed-off-by: Peter M=C3=BCller Reported-by: Erik Kapfer Signed-off-by: Michael Tremer commit 5d65813aa31685e8e70b0a2e796c9abbeae60f55 Author: Michael Tremer Date: Tue Jun 11 07:00:38 2019 +0100 core133: Ship updated wpa_supplicant =20 Signed-off-by: Michael Tremer commit 33fb0c91ec1f2dfc8d09550b18312cf87fd69228 Author: Matthias Fischer Date: Tue Jun 11 15:32:15 2019 +0200 wpa_supplicant: Update to 2.8 =20 For details see: https://w1.fi/cgit/hostap/plain/wpa_supplicant/ChangeLog =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 894eaf5184dda4f851b01d2ed6806d0b0609b321 Author: Michael Tremer Date: Tue Jun 11 17:07:23 2019 +0000 smt: Only disable SMT when the kernel thinks it is vulnerable =20 On virtual machines, it does not make sense to disable SMT for the virtual cores. This has to be done by the hypervisor. =20 Signed-off-by: Michael Tremer commit 8e101c0bdaea04dc759773342d719b8daeb95f67 Author: Peter M=C3=BCller Date: Mon Jun 10 18:22:00 2019 +0000 ship language files in Core Update 133 =20 These were missing in Core Update 132, and some strings (especially on the "CPU vulnerabilities" page) missed translations. =20 Signed-off-by: Peter M=C3=BCller Signed-off-by: Michael Tremer commit 35f12f29983b0baa0df6736b10f02b6e78c85030 Author: Michael Tremer Date: Mon Jun 10 09:58:15 2019 +0100 Rootfile update =20 Signed-off-by: Michael Tremer commit 33afb0681feb8ef719c9b53cda05fa8698d1ba07 Author: Stefan Schantl Date: Sun Jun 9 17:55:34 2019 +0200 convert-ids-modifysids-file: Fix check if the ids is running. =20 Signed-off-by: Stefan Schantl Signed-off-by: Michael Tremer commit 3f7cec61c9d00aab268bdf02456667db86604329 Author: Matthias Fischer Date: Sun Jun 9 12:10:07 2019 +0200 hostapd: Update to 2.8 =20 For details see: https://w1.fi/cgit/hostap/plain/hostapd/ChangeLog =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 28093c8376fb8bd13ce44585fcbed49610093158 Author: Michael Tremer Date: Sat Jun 8 11:34:37 2019 +0100 Rootfile update =20 Signed-off-by: Michael Tremer commit 09b99106962149873a7071931afff75d84fb1ef9 Author: Michael Tremer Date: Fri Jun 7 11:14:11 2019 +0100 Rootfile update =20 Signed-off-by: Michael Tremer commit c0fc25861ff4ce8acb610e43c191d1d509ae78f8 Author: Michael Tremer Date: Fri Jun 7 11:13:01 2019 +0100 core133: Ship updated knot package =20 Signed-off-by: Michael Tremer commit d52b5a4c2274cbc99a1e332cb058f8542a941120 Author: Matthias Fischer Date: Thu Jun 6 20:30:56 2019 +0200 knot: Update to 2.8.2 =20 For details see: https://www.knot-dns.cz/2019-06-05-version-282.html =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 171512b7a76f61669b61d234965570e40f585fee Author: Michael Tremer Date: Wed Jun 5 12:46:37 2019 +0100 Update contributors =20 Signed-off-by: Michael Tremer commit 21a838238378b531551f42e2c582f0c5f82ca26f Author: Erik Kapfer Date: Tue Jun 4 15:00:24 2019 +0200 suricata: Enable EVE logging =20 The EVE output facility outputs alerts, metadata, file info and protocol = specific records through JSON. for further informations please see --> https://suricata.readthedocs.io/e= n/suricata-4.1.2/output/eve/index.html . =20 Signed-off-by: Erik Kapfer Acked-by: Stefan Schantl Signed-off-by: Michael Tremer commit 3c91ee80925f175cd5c599a2d46b78f31d726a35 Author: Stefan Schantl Date: Wed Jun 5 20:56:35 2019 +0200 convert-ids-modifysids-file: Adjust code to use changed write_modify_sids= _file function =20 Signed-off-by: Stefan Schantl Signed-off-by: Michael Tremer commit e1f8f870ea975c6c47afe8fd907ffb75980fe7db Author: Michael Tremer Date: Wed Jun 5 12:42:53 2019 +0100 core133: Ship snort configuration converter =20 Signed-off-by: Michael Tremer commit f1add9a8dd5271af669ee0831f30b207b33d158d Author: Stefan Schantl Date: Wed Jun 5 20:56:34 2019 +0200 convert-snort: Adjust code to use changed modify_sids_file function. =20 Signed-off-by: Stefan Schantl Signed-off-by: Michael Tremer commit 81bae51f6102a555ba50a5d42ed433288ddcfe54 Author: Stefan Schantl Date: Wed Jun 5 20:56:33 2019 +0200 ids-functions.pl: Rework function write_modify_sids_file(). =20 Directly implement the logic to determine the used ruleset and if IDS or IPS mode should be used into the function instead of pass those details as arguments. =20 This helps to prevent from doing this stuff at several places again and a= gain. =20 Signed-off-by: Stefan Schantl Signed-off-by: Michael Tremer commit a40bcbb02cf1012405c4a0507d4b54d4d8a45064 Author: Michael Tremer Date: Wed Jun 5 12:41:37 2019 +0100 core133: Ship IPS changes =20 Signed-off-by: Michael Tremer commit a5ba473c15c73a2e88d3333c73c1f13a332010b6 Author: Tim FitzGeorge Date: Wed Jun 5 20:56:32 2019 +0200 suricata: correct rule actions in IPS mode =20 In IPS mode rule actions need to be have the action 'drop' for the protection to work, however this is not appropriate for all rules. Modify the generator for oinkmaster-modify-sids.conf to leave rules with the action 'alert' here this is appropriate. Also add a script to be run on update to correct existing downloaded rules. =20 Fixes #12086 =20 Signed-off-by: Tim FitzGeorge Tested-by: Peter M=C3=BCller Signed-off-by: Stefan Schantl Signed-off-by: Michael Tremer commit 9734a58faf9832a708057e44092b96976401a8eb Author: Michael Tremer Date: Wed Jun 5 12:34:44 2019 +0100 core133: Ship IDS ruleset updater =20 Signed-off-by: Michael Tremer commit 72ab71969fd88fc1bf78ddd77f066f86b15731c7 Author: Stefan Schantl Date: Wed Jun 5 18:27:10 2019 +0200 update-ids-ruleset: Run as unprivileged user. =20 Check if the script has been launched as privileged user (root) and drop = all permissions by switching to the "nobody" user and group. =20 Signed-off-by: Stefan Schantl Signed-off-by: Michael Tremer commit dc9ac30c8dfb157c8ac7af5849d166f42462b08d Author: Michael Tremer Date: Wed Jun 5 05:08:31 2019 +0100 core133: Ship updated vpnmain.cgi file and regenerate configuration =20 Signed-off-by: Michael Tremer commit 745915d82c3b2ca68275241425cf12f703b18f48 Author: Michael Tremer Date: Wed Jun 5 10:22:53 2019 +0100 vpnmain.cgi: Fix wrong cipher suite generation when PFS is disabled =20 Fixes: #12091 Signed-off-by: Michael Tremer commit 01320a141d68776abbbbe4e22d0f0c5532997371 Author: Matthias Fischer Date: Wed Jun 5 11:54:29 2019 +0200 monit: Some fixes for 'monitrc' =20 Just cosmetics: Removed all trailing spaces - there were a few... =20 Activated 'monit' start delay: I activated this option to avoid running into a race condition while star= ted through '/etc/init.d/monit start'. =20 As mentioned in 'monit' manual: "...if a service is slow to start, Monit can assume that the service is n= ot running and possibly try to start it [again] and raise an alert, while, in fact t= he service is already about to start or already in its startup sequence." =20 This happened here during testing with (e.g.) Clamav. =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit c899be2fd02e24f86f801191652d6083eb5524b9 Author: Michael Tremer Date: Wed Jun 5 00:33:36 2019 +0100 core133: Ship updated dhcp.cgi =20 Signed-off-by: Michael Tremer commit e4f9ea3c1650d369f8a764605203778bfea0d390 Author: Bernhard Bitsch Date: Tue Jun 4 12:24:00 2019 +0200 dhcp.cgi: Save fixed leases immediately after addition of a new lease =20 This changes the behaviour of the script to immediately save the added lease to file but still remain in edit mode to make changes. =20 If the user does not make any changes, the lease is immediately saved and there is no second click required to write it to file. =20 This a more natural flow that is expected by almost all users of this feature. =20 Fixes: #12050 Signed-off-by: Bernhard Bitsch Signed-off-by: Michael Tremer commit 0bb25a4f61e494a8118bfb764625cd98fe209438 Author: Michael Tremer Date: Tue Jun 4 23:55:17 2019 +0100 SMT: Disable when system is vulnerable to L1TF (Foreshadow) =20 Signed-off-by: Michael Tremer commit cfbb61a74d4729acbbc21df6488023e3e07a1408 Author: Michael Tremer Date: Tue Jun 4 23:44:49 2019 +0100 Rootfile update for ARM kernels =20 Signed-off-by: Michael Tremer commit 236831c0f97884d50a15fd5c18d92d63c2590cf0 Author: Michael Tremer Date: Tue Jun 4 23:41:59 2019 +0100 Rootfile update for gcc on i586 =20 Signed-off-by: Michael Tremer commit d62925de4fa78976779da79c27d0c82ac1692f28 Author: Michael Tremer Date: Tue Jun 4 23:32:35 2019 +0100 core133: Ship updated PAM =20 Signed-off-by: Michael Tremer commit 0105cedb0d5b2c6a9b4b69c8c60f8df539ca01d5 Author: Matthias Fischer Date: Wed Jun 5 09:16:58 2019 +0200 linux-pam: Update to 1.3.1 =20 For details see: https://github.com/linux-pam/linux-pam/releases =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit ba329dce8f3eeeef9ac2953632bd75fb6bb71698 Author: Michael Tremer Date: Tue Jun 4 23:31:51 2019 +0100 core133: Ship updated rrdtool =20 Signed-off-by: Michael Tremer commit 83d4264ebaabfcb58d501e51748b13ef2e1242d8 Author: Matthias Fischer Date: Wed Jun 5 09:13:11 2019 +0200 rrdtool: Update to 1.7.2 =20 For details see: https://oss.oetiker.ch/rrdtool/pub/CHANGES =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 2a1c1735893f2c6546413be820bd4ec32150c14e Author: sfeddersen Date: Tue Jun 4 21:49:22 2019 +0200 BUG 11487:solve problem with unexspected shutdown =20 Solve problem with unexspected shutdown problem when checking a single cl= ient. =20 Signed-off-by: Michael Tremer commit c7def606493b4765265c44730b5d57da901e49ef Author: Michael Tremer Date: Mon Jun 3 09:20:05 2019 +0100 Rootfile update =20 Signed-off-by: Michael Tremer commit 99597de716394f665fa745d4ef3784c5b495d02e Author: Michael Tremer Date: Sun Jun 2 22:52:57 2019 +0100 make.sh: Set default ccache size to 4G =20 Since we have now one cache for each architecture, we do not need to make it too large. =20 The largest build (i586 because of the two kernels) uses around 2.5GB after one build. So 4G will give us some space. =20 Signed-off-by: Michael Tremer commit f748c79450589fc9046c3be832df1f91b2ac1d27 Author: Michael Tremer Date: Sun Jun 2 22:49:42 2019 +0100 core133: Ship updated ovpnmain.cgi =20 Signed-off-by: Michael Tremer commit d2de0a00cefb9f4f84b7ad047fd2e3032b2954fb Author: Erik Kapfer Date: Sat Jun 1 08:46:14 2019 +0200 ovpnmain.cgi: Fixed line break for LZO option =20 It is better readable if everything is in one line. =20 Signed-off-by: Erik Kapfer Signed-off-by: Michael Tremer commit 7c1bbc9339e33d8b6c1fa7f5a53fd9bfe6c9045a Author: Matthias Fischer Date: Fri May 31 21:54:45 2019 +0200 monit: Update to 5.25.3 =20 For details see: https://mmonit.com/monit/changes/ =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 3608d485567284b52c17754c7f8809ee793db7cc Author: Michael Tremer Date: Wed May 29 15:28:45 2019 +0100 make.sh: Have a ccache for each architecture =20 It does not make much sense to mix architectures into a single ccache: =20 * There is never going to be a match * The cache gets bigger and therefore slower * If both architectures are being compiled one after the other and the cache hits its maximum size, cached but still needed content will be dropped * Only both can be deleted together =20 This small change splits this into multiple caches. One per architecture. Therefore we should be more efficient on builders that build for multiple architectures. =20 Signed-off-by: Michael Tremer commit b0ec4158f374ccc2fe7e73caf40ce26f1db45025 Author: Michael Tremer Date: Wed May 29 15:24:29 2019 +0100 miau: Drop package =20 This is not maintained since 2010 =20 Signed-off-by: Michael Tremer commit f62f432a27a0e7d25fb4b9700b5ff35acef84f20 Author: Michael Tremer Date: Wed May 29 11:22:22 2019 +0100 openssl: Update to 1.1.1c =20 Fixes CVE-2019-1543 =20 Signed-off-by: Michael Tremer commit 7b6d2972e358f7042abd3b282a2226670549119d Author: Michael Tremer Date: Tue May 28 13:05:50 2019 +0100 strongswan: Update to 5.8.0 =20 Signed-off-by: Michael Tremer commit 3c8aa8d75bc63c5958c758756546f9413be47676 Author: Erik Kapfer Date: Tue May 28 11:38:59 2019 +0200 tshark: Update to 3.0.2 =20 Incl. one vulnerability and several bug fixes. For full overview --> http= s://www.wireshark.org/docs/relnotes/wireshark-3.0.2.html . =20 - Disabled geoip support since libmaxminddb is not presant. - Added dictionary in ROOTFILE to prevent "radius: Could not open file: '= /usr/share/wireshark/radius/dictionary' " . - Added CMAKE build type - Removed profile examples and htmls completly from ROOTFILE. =20 Signed-off-by: Erik Kapfer Signed-off-by: Michael Tremer commit 4e54a8e2d6d4286f85a38a492d34452092404b24 Author: Michael Tremer Date: Tue May 28 12:01:30 2019 +0100 ccache: Automatically set size to 8GB =20 Signed-off-by: Michael Tremer commit 992fdd3d075b995e704b55b8bc66f44c5ad6aecf Author: Michael Tremer Date: Tue May 28 11:44:32 2019 +0100 core133: Ship toolchain changes =20 Signed-off-by: Michael Tremer commit 71ff23c765c76cfac8a8b5e93be5e05e2570a960 Author: Michael Tremer Date: Tue May 28 11:41:46 2019 +0100 Rootfile update =20 Signed-off-by: Michael Tremer commit c9b7fc40c0084b5c09398eed133430de18492e5e Author: Michael Tremer Date: Tue May 28 11:36:06 2019 +0100 hyperscan: Limit amount of memory being used during build =20 Signed-off-by: Michael Tremer commit 29fc1c8c3a23834425ac646dca26c350ebb2c52c Author: Michael Tremer Date: Mon May 27 16:25:01 2019 +0100 ddns: Update to 011 =20 Add support for two new providers and has some general bug fixes included. =20 Signed-off-by: Michael Tremer commit fe9dbfa1245e90edfd3389c2c532bda49fe22d0c Author: Michael Tremer Date: Mon May 27 15:48:44 2019 +0100 core133: Ship updated IPS ruleset sources =20 Signed-off-by: Michael Tremer commit 79af9f69386f3ded294a802a74cc2cd9b82fcdc4 Author: Stefan Schantl Date: Sun May 26 20:11:55 2019 +0200 ruleset-sources: Update snort dl urls. =20 Signed-off-by: Stefan Schantl Signed-off-by: Michael Tremer commit 21f21076978aea64770e18b1dac631f5f8625dad Author: Michael Tremer Date: Mon May 27 15:47:02 2019 +0100 tor: Ship updated CGI =20 Signed-off-by: Michael Tremer commit ac2fdbb15efa305b4a7f462ea37abc1448f6d069 Author: Erik Kapfer Date: Sun May 26 17:02:56 2019 +0200 tor.cgi: Disable debugging output =20 Signed-off-by: Erik Kapfer Signed-off-by: Michael Tremer commit f6104aa1e016320eca91e1cf4280d612a44066de Author: Michael Tremer Date: Mon May 27 15:42:50 2019 +0100 core133: Drop metadata for jansson package =20 Signed-off-by: Michael Tremer commit 86efc510f9c41486952b872819179da5837d0cf9 Author: Michael Tremer Date: Mon May 27 15:40:31 2019 +0100 core133: Ship hyperscan =20 Signed-off-by: Michael Tremer commit 81544f88841f205cb5f8c7c8f9d99c14b159752c Author: Michael Tremer Date: Mon May 27 15:38:42 2019 +0100 hyperscan: Move rootfiles to arch directories =20 This package is only compiled on x86_64 and i586 and cannot be packaged in any of the other architectures. =20 Signed-off-by: Michael Tremer commit 52ebc66bba0e44f9d70ebc29c16e877a9e23acfe Author: Stefan Schantl Date: Sun May 26 19:56:47 2019 +0200 hyperscan: New package =20 This package adds hyperscan support to suricata =20 Fixes #12053. =20 Signed-off-by: Stefan Schantl Signed-off-by: Michael Tremer commit 2348cfffcf9e9508d77bf42fbb59567a63d75b7f Author: Stefan Schantl Date: Sun May 26 19:56:46 2019 +0200 ragel: New package =20 This is a build dependency of hyperscan =20 Signed-off-by: Stefan Schantl Signed-off-by: Michael Tremer commit 1a5f06491683f4092bdb1e077be207b1e9463410 Author: Stefan Schantl Date: Sun May 26 19:56:45 2019 +0200 colm: New package =20 This is a build dependency of ragel, which is a build dependency of hyperscan. =20 Signed-off-by: Stefan Schantl Signed-off-by: Michael Tremer commit 0f75603f23bbf4f00bf87fd74c2fc35a7c9c9edd Author: Stefan Schantl Date: Sun May 26 19:51:40 2019 +0200 asterisk: Remove dependency to jansson. =20 The package has become part of the main system. =20 Signed-off-by: Stefan Schantl Signed-off-by: Michael Tremer commit 616395f37c6d096607283cc17e5554cc03e9bcc6 Author: Stefan Schantl Date: Sun May 26 19:51:39 2019 +0200 jansson: Move to core system and update to 2.12 =20 Signed-off-by: Stefan Schantl Signed-off-by: Michael Tremer commit f6e18df542383698cd3d14ca98debb1b0d456bb6 Author: Michael Tremer Date: Mon May 27 14:37:23 2019 +0100 Rootfile update =20 Signed-off-by: Michael Tremer commit 8a104d7f02bfb8f2766c3be75219f7f8a7b644ca Author: Arne Fitzenreiter Date: Sun May 26 17:27:16 2019 +0200 core133: readd late core132 changes to core133 =20 Signed-off-by: Arne Fitzenreiter commit 83809af1fb7bb648851547b7589171d326766eaa Merge: 333125abf 637885839 Author: Arne Fitzenreiter Date: Sun May 26 17:23:54 2019 +0200 Merge branch 'master' into next commit 333125abf850085611922634e31b714a35b31383 Merge: 9f0295a51 508535615 Author: Michael Tremer Date: Fri May 24 06:55:03 2019 +0100 Merge branch 'toolchain' into next commit 9f0295a5129bed325ba37aaa1e39303fef0a6c9f Merge: 8feb0db43 54fc710b9 Author: Michael Tremer Date: Fri May 24 06:54:16 2019 +0100 Merge remote-tracking branch 'ms/faster-build' into next commit 8feb0db4309e67f6732732735dba6a969d192791 Author: Michael Tremer Date: Fri May 24 06:39:37 2019 +0100 core133: Ship updated squid =20 Signed-off-by: Michael Tremer commit d2b5f0363118741a84a01826499a2d3eecf369e0 Author: Matthias Fischer Date: Fri May 24 20:46:59 2019 +0200 squid: Update to 4.7 =20 For details see: =20 http://www.squid-cache.org/Versions/v4/changesets/ =20 Fixes among other things the old 'filedescriptors' problem, so this patch= was deleted. =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 53ef2a0ffee8e8b605d137ddc3e1f80e99de951c Author: Michael Tremer Date: Fri May 24 06:37:21 2019 +0100 core133: Ship updated bind =20 Signed-off-by: Michael Tremer commit f225f3ee29685cb91fc01e8c700032791e431806 Author: Matthias Fischer Date: Fri May 24 20:53:15 2019 +0200 bind: Update to 9.11.7 =20 For details see: http://ftp.isc.org/isc/bind9/9.11.7/RELEASE-NOTES-bind-9.11.7.html =20 "Security Fixes =20 The TCP client quota set using the tcp-clients option could be exceeded= in some cases. This could lead to exhaustion of file descriptors. This flaw is disclosed in CVE-2018-5743. [GL #615]" =20 Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 79967ee9c4afb291d88f83d0a2c167d9e2f02f37 Author: Michael Tremer Date: Fri May 24 06:35:46 2019 +0100 Start Core Update 133 =20 Signed-off-by: Michael Tremer commit 90194d7f7b0b32f2733bb24b8a939f7e0112c37f Author: Michael Tremer Date: Fri May 24 06:30:46 2019 +0100 .gitignore: Ignore some backup files =20 Signed-off-by: Michael Tremer commit f8c23b43b78880522c3b161d6c83ce81417c5cf4 Author: Michael Tremer Date: Thu May 23 01:50:29 2019 +0100 tor: Depend on libseccomp =20 Suggested-by: Erik Kapfer Signed-off-by: Michael Tremer commit f617fd912ba2ae3b3c1aad74506977c43bd128df Author: Michael Tremer Date: Wed May 22 15:29:32 2019 +0100 unbound: Safe Search: Enable Restrict-Moderate for YouTube =20 Signed-off-by: Michael Tremer commit 6d653734fb8b044db24f2650c740820a6e0132a0 Author: Michael Tremer Date: Wed May 22 11:23:07 2019 +0100 Update German translations =20 Signed-off-by: Michael Tremer commit 61498b76b6f2b85b2a6674687c0edd19ed105be6 Author: Michael Tremer Date: Wed May 22 11:08:43 2019 +0100 vulnerabilities.cgi: Regard mitigations that only mitigate something stil= l as vulnerable =20 Signed-off-by: Michael Tremer commit 144ff7605d5340bad77bd032274d1423bb7084d7 Author: Michael Tremer Date: Wed May 22 11:05:20 2019 +0100 vulnerabilities.cgi: Simplify regexes =20 We can do the split in one. =20 Signed-off-by: Michael Tremer commit 54fc710b992f4cd4a0af51d92db47a124e08f3c5 Author: Michael Tremer Date: Tue May 14 10:02:03 2019 +0100 Update kernel rootfiles for armv5tel =20 Signed-off-by: Michael Tremer commit da636bd8b7793b459bb5ff5e6b72637a0bdc5d3c Author: Michael Tremer Date: Mon May 13 16:31:14 2019 +0100 Update kernel rootfiles for aarch64 =20 Signed-off-by: Michael Tremer commit ad794614cde0225b4af871fe5e05e8bb0073c0a7 Author: Michael Tremer Date: Sun May 12 10:21:32 2019 +0100 xtables-addons: Explicitely add path for alternative kernels =20 Signed-off-by: Michael Tremer commit 3f60a1e10efb2c169a0165a046fb26465e0b9f5e Author: Michael Tremer Date: Sun May 12 10:20:57 2019 +0100 linux: Fix touching incorrect version.h =20 This file has moved and the touch command created an empty version of the file which caused that builds depending on that did not complete. =20 Signed-off-by: Michael Tremer commit c1e8c954bd54c85c85cdfb115e3e72c4c7415bbd Author: Michael Tremer Date: Sun May 12 09:28:10 2019 +0100 linux: objtool does not exist on all platforms =20 Signed-off-by: Michael Tremer commit 0aa82849052c63a01d6b098d7ea968c7af708790 Author: Michael Tremer Date: Fri May 10 10:25:46 2019 +0100 xtables-addons: Automatically detect location of kernel source =20 Signed-off-by: Michael Tremer commit 0ad5f6a1fcc82cdfd936a4f2e01c1521df022c25 Author: Michael Tremer Date: Fri May 10 10:12:50 2019 +0100 linux: Install kernel build system to /lib/modules =20 This is necessary so that we can clean up /usr/src after each build and do not waste any space on the massive kernel source. =20 Signed-off-by: Michael Tremer commit 8634797e8a1ccc3b293adcec090c57832c4e9363 Author: Michael Tremer Date: Fri May 10 10:10:25 2019 +0100 make.sh: Append -ipfire to fake kernel string =20 Signed-off-by: Michael Tremer commit 15b005d8378df38938e11aebff0488095c771754 Author: Michael Tremer Date: Fri May 10 03:38:49 2019 +0100 make.sh: Automatically enable build ramdisk on systems with 4GB RAM or mo= re =20 Signed-off-by: Michael Tremer commit 3966b1e58fc31bcd1e1676145992286fc92d1b34 Author: Michael Tremer Date: Thu May 9 18:16:20 2019 +0100 iptables: Fix build without kernel source =20 The layer7 filter header files were not installed into /usr/include and therefore we needed to keep the whole kernel source tree. =20 This is just a waste of space and this patch fixes this. =20 Signed-off-by: Michael Tremer commit 7c984de699951ef610158fce0dd6371f22eccb93 Author: Michael Tremer Date: Wed May 8 19:16:26 2019 +0100 make.sh: Mount /usr/src in memory for faster build =20 This patch enables that /usr/src is a ramdisk which should give us fewer I/O operations when extracting tarballs or writing small intermediate files by the compiler. =20 In some virtualised environments this should bring a good performance boost. =20 There is no persistent data stored in this directory and some persistent directories are mounted over it. =20 Signed-off-by: Michael Tremer commit 5085356151105f4cdbcb24c21fc0b36ccf23f732 Author: Michael Tremer Date: Mon Apr 29 13:44:28 2019 +0100 glibc: Update rootfile for i586 =20 Signed-off-by: Michael Tremer commit 864a5befd91260597a8deba265d5de63ea34df48 Author: Michael Tremer Date: Sun Apr 28 09:38:45 2019 +0100 glibc: Update to 2.29 =20 Signed-off-by: Michael Tremer commit 46bbc13b91ff79598cd14d5dd1108e96c58687c7 Author: Michael Tremer Date: Sat Apr 27 17:43:41 2019 +0100 python3: Build package in toolchain =20 This will be required to build glibc 2.29 =20 Signed-off-by: Michael Tremer commit e81233173febfb6f81d409e7eee3e04a9603060c Author: Michael Tremer Date: Sat Apr 27 13:28:34 2019 +0100 gcc: Update rootfile for aarch64 =20 Signed-off-by: Michael Tremer commit ecc9e5efb4c8b4d885868c949826a261f15ca7ee Author: Michael Tremer Date: Sat Apr 27 13:28:24 2019 +0100 binutils: Update rootfile for aarch64 =20 Signed-off-by: Michael Tremer commit 968a17d64cb744355b0aa2a611647f5fe12b477d Author: Michael Tremer Date: Fri Apr 26 16:16:10 2019 +0100 make.sh: Bump toolchain version =20 Signed-off-by: Michael Tremer commit 525f5d29595ecc3e1b7d329afac2591e48eb05f2 Author: Michael Tremer Date: Fri Apr 26 16:15:46 2019 +0100 gcc: Update to 8.3.0 =20 This patch carries the rootfile for x86_64 only. =20 Signed-off-by: Michael Tremer commit 35969374408404ed096db0cdb72b289adb012529 Author: Michael Tremer Date: Fri Apr 26 16:15:12 2019 +0100 binutils: Update to 2.32 =20 This patch carries the rootfile for x86_64 only. =20 Signed-off-by: Michael Tremer ----------------------------------------------------------------------- hooks/post-receive -- IPFire 2.x development tree --===============2953538158539885222==--