This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, core144 has been created at 7ae36c0fd9764d25b512f51edbf1c4f090ae6b04 (commit) - Log ----------------------------------------------------------------- commit 7ae36c0fd9764d25b512f51edbf1c4f090ae6b04 Author: Arne Fitzenreiter Date: Thu Apr 23 19:57:01 2020 +0200 core144: add calamaris Signed-off-by: Arne Fitzenreiter commit bc18b7aabb1fc050cba2238aaef0b7ea78da6752 Merge: 1bba20a98 651fa25f8 Author: Arne Fitzenreiter Date: Wed Apr 22 10:17:05 2020 +0000 Merge remote-tracking branch 'origin/master' into next commit 1bba20a985ec2dc29322e7f2cc0d820ae9a25758 Author: Arne Fitzenreiter Date: Wed Apr 22 02:41:49 2020 +0200 bind: update rootfile commit 715b841e5b8e53774968a5f844359e1281b725fc Author: Arne Fitzenreiter Date: Tue Apr 21 19:16:53 2020 +0000 core144: restart squid Signed-off-by: Arne Fitzenreiter commit c24bb323e129e047fae0de03383d5e7aeed1825d Author: Arne Fitzenreiter Date: Tue Apr 21 19:14:58 2020 +0000 core144: add bind Signed-off-by: Arne Fitzenreiter commit 1494b402548fb461fe8306d6114fe31eeeecd98c Author: Matthias Fischer Date: Tue Apr 21 21:02:38 2020 +0200 bind: Update to 9.11.18 For details see: https://downloads.isc.org/isc/bind9/9.11.18/RELEASE-NOTES-bind-9.11.18.html "Security Fixes DNS rebinding protection was ineffective when BIND 9 is configured as a forwarding DNS server. Found and responsibly reported by Tobias Klein. [GL #1574] Known Issues We have received reports that in some circumstances, receipt of an IXFR can cause the processing of queries to slow significantly. Some of these were related to RPZ processing, which has been fixed in this release (see below). Others appear to occur where there are NSEC3-related changes (such as an operator changing the NSEC3 salt used in the hash calculation). These are being investigated. [GL #1685]" Signed-off-by: Matthias Fischer Signed-off-by: Arne Fitzenreiter commit 2d52362dcb8e8b1284180667e23474a320d2ff8a Author: Arne Fitzenreiter Date: Tue Apr 21 19:13:33 2020 +0000 core144: add squid Signed-off-by: Arne Fitzenreiter commit 1e3ae30e1de234175f5ccaa4ecc04e0892d04e84 Author: Matthias Fischer Date: Tue Apr 21 20:55:51 2020 +0200 squid: Update to 4.11 For details see: http://www.squid-cache.org/Versions/v4/changesets/ Signed-off-by: Matthias Fischer Signed-off-by: Arne Fitzenreiter commit b481754aa38d34e33cb81d8fd4c9dff4ad34c7e0 Author: Matthias Fischer Date: Tue Apr 21 20:49:58 2020 +0200 dhcpcd: Update to 9.0.2 For details see: https://roy.marples.name/archives/dhcpcd-discuss/0002941.html "* Control sockets are not opened in test mode * privsep: no longer aborts if protocol not available * inet6: Don't regen temporary addresses without a state * inet6: Reduce RA log spam * dhcp6: Don't log when things consitently fail * inet6: Add temporary directive to slaac option [1] * Ensure current interface flags persist when setting a flag * DHCP via BPF is now aligned correctly * CMSG buffers are now aligned correctly * hostnames are no longer clobbered when being forced and a RA is recieved" Signed-off-by: Matthias Fischer Signed-off-by: Arne Fitzenreiter commit 2399b70dc2d0d8939a0bc9937e84a319da2447c5 Author: Arne Fitzenreiter Date: Tue Apr 21 16:51:53 2020 +0200 openssl: update rootfile Signed-off-by: Arne Fitzenreiter commit a95c8b978137d435d4b734b03371c7fc7f2930b1 Author: Arne Fitzenreiter Date: Tue Apr 21 13:52:01 2020 +0000 core144: ship /etc/os-release Signed-off-by: Arne Fitzenreiter commit 83cee5f02ead8d296bc874651f6f36a07e581df7 Author: Arne Fitzenreiter Date: Tue Apr 21 13:50:43 2020 +0000 core144: add openssl Signed-off-by: Arne Fitzenreiter commit 9ec0fca91d237fffe686b2a23fa5cd1dac731fd3 Author: Arne Fitzenreiter Date: Tue Apr 21 15:43:38 2020 +0200 openssl: update to 1.1.1g CVE-2020-1967 (OpenSSL advisory) [High severity] 21 April 2020: Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. https://www.openssl.org/news/secadv/20200421.txt Signed-off-by: Arne Fitzenreiter commit 88ba9a24801338f5421cace9ae99db31be1f0889 Author: Arne Fitzenreiter Date: Mon Apr 20 15:41:09 2020 +0000 core144: remove gcc go binary and libs Signed-off-by: Arne Fitzenreiter commit a9fd8519c2452cc77dc00513aaddf54b47eaee33 Author: Michael Tremer Date: Tue Apr 14 15:01:00 2020 +0000 toolchain: Do not attempt to strip anything in /dev, /proc, /sys and /tmp Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit 20253656fc6555aa215ffdd798cd2d07e5d0254c Author: Michael Tremer Date: Thu Apr 9 20:45:16 2020 +0000 Add /etc/os-release This file is being read by some packages to find out on what distribution they are running on. This file needs to be included in every Core Update. Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit 6b751211205f5b441101742674decad94e96132a Author: Michael Tremer Date: Thu Apr 16 19:27:14 2020 +0000 gcc: Drop Go on i586 Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit 6d5e9f40f88d0104ede1417a00e8308fd8399116 Author: Michael Tremer Date: Thu Apr 16 19:27:13 2020 +0000 gcc: Drop Go on armv5tel Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit c22cee9288bc61c609ce1557fd59eec46a946189 Author: Michael Tremer Date: Thu Apr 16 19:27:12 2020 +0000 gcc: Drop Go on aarch64 Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit 0c4cd7f3935fe9dfbd8a4ef90ce0b97f54ad3864 Author: Michael Tremer Date: Thu Apr 16 19:27:11 2020 +0000 amazon-ssm-agent: Bump version to ship package built with golang gccgo compiles this, but unfortunately the binaries malfunction sometimes. golang generates a bug-free binary. https://github.com/aws/amazon-ssm-agent/issues/271 Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit 8bded835a27af820100048f6078c2cb6b37d4ad4 Author: Michael Tremer Date: Thu Apr 16 19:27:10 2020 +0000 amazon-ssm-agent: Remove temporary shared files Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit 3a56d70ce79021cafa09ff5c6b00f26cc0299e9b Author: Michael Tremer Date: Thu Apr 16 19:27:09 2020 +0000 strip: Do not try to strip Go binaries There is loads of stuff for PowerPC and other architectures in the directory which we cannot strip. Therefore we ignore the whole directory. Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit d2315d00c20c089a242758955c53a00f5166d7ae Author: Michael Tremer Date: Thu Apr 16 19:27:08 2020 +0000 Package the official Go compiler Since Go has a horrible build system which requires a Go compiler to build the Go compiler and takes a very long time to compile, we are following Rust and are using the "official" pre-compiled release tarball. We no longer ship the Go runtime, which mitigates the risk of shipping any malware. Because we currently only have one package using this and which is only being compiled for x86_64, we are only making Go available on this architecture. Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit eed179acdccd59e8e31a11ba588d3c54da07b09a Author: Michael Tremer Date: Thu Apr 16 19:27:07 2020 +0000 gcc: Drop support for Go Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit b4863d7d141dd056a421e99a4f78060eba9d1038 Author: Michael Tremer Date: Thu Apr 16 19:27:06 2020 +0000 Config: Set some Go environment variables Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit 7f4780ba71247b5e2fe423ef7d836efa861ebd16 Author: Arne Fitzenreiter Date: Mon Apr 20 15:22:57 2020 +0000 core144: add apache Signed-off-by: Arne Fitzenreiter commit fb241a29c5d7e48a09d3e3d3995b9cc6cfc57c5c Author: Matthias Fischer Date: Sun Apr 12 14:29:19 2020 +0200 apache: Update to 2.4.43 For details see: http://mirror.dkd.de/apache//httpd/CHANGES_2.4.43 Signed-off-by: Matthias Fischer Reviewed-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit 34b7b986169eebce28c48cf4efc77200303c83b3 Author: Arne Fitzenreiter Date: Sun Apr 19 17:37:28 2020 +0000 core144: add dhcpcd initskript and user this commit also re/create the user after backup restore. Signed-off-by: Arne Fitzenreiter commit 533c4312fad295d520f8ccef40e3e1b9f2b1b7f6 Author: Arne Fitzenreiter Date: Sun Apr 19 19:18:04 2020 +0200 dhcpcd: create dhcpcd user and chroot folder dhcpcd 9.x adds privelege seperation by creating a chroot and running parts of the client not as root. Signed-off-by: Arne Fitzenreiter commit 18136c5ce9f32b6186df48bc2c2a7fade6792615 Author: Arne Fitzenreiter Date: Sun Apr 19 15:24:02 2020 +0200 dhcpcd: new pid path for dhcpcd 9.x dhcpcd 9.x move the path of the pids to an own folder. Signed-off-by: Arne Fitzenreiter commit 03e4f8d60e5671bdc1ec90a829b1f389bcd0b8aa Author: Matthias Fischer Date: Wed Apr 15 18:19:03 2020 +0200 dhcpcd: Update to 9.0.1 For details see: https://roy.marples.name/archives/dhcpcd-discuss/0002921.html Signed-off-by: Matthias Fischer Signed-off-by: Arne Fitzenreiter commit 296675c9ee3b984b5bfb5bdff032cdd2375639a3 Merge: b3e2c3ce2 f5dba19ed Author: Arne Fitzenreiter Date: Sun Apr 12 08:25:40 2020 +0200 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next commit f5dba19edfdbc8f925b7fced7782d7bc3c58d998 Author: Arne Fitzenreiter Date: Sun Apr 12 08:18:51 2020 +0200 core144: add dhcpcd Signed-off-by: Arne Fitzenreiter commit b3e2c3ce269a0492e8e55208dc05dbf82977bfd4 Author: Arne Fitzenreiter Date: Sun Apr 12 08:16:28 2020 +0200 dhcpcd: update to 9.00 Signed-off-by: Arne Fitzenreiter commit 89445161b066671398185384cc2a80843cc9dc04 Author: Arne Fitzenreiter Date: Sun Apr 12 08:14:26 2020 +0200 core144: start update Signed-off-by: Arne Fitzenreiter ----------------------------------------------------------------------- hooks/post-receive -- IPFire 2.x development tree