From mboxrd@z Thu Jan 1 00:00:00 1970 From: Arne Fitzenreiter To: ipfire-scm@lists.ipfire.org Subject: [git.ipfire.org] IPFire 2.x development tree branch, core144, created. 7ae36c0fd9764d25b512f51edbf1c4f090ae6b04 Date: Thu, 23 Apr 2020 18:10:21 +0000 Message-ID: <497QML0wfzz2y1Y@people01.haj.ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============5299895903525837980==" List-Id: --===============5299895903525837980== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, core144 has been created at 7ae36c0fd9764d25b512f51edbf1c4f090ae6b04 (commit) - Log ----------------------------------------------------------------- commit 7ae36c0fd9764d25b512f51edbf1c4f090ae6b04 Author: Arne Fitzenreiter Date: Thu Apr 23 19:57:01 2020 +0200 core144: add calamaris =20 Signed-off-by: Arne Fitzenreiter commit bc18b7aabb1fc050cba2238aaef0b7ea78da6752 Merge: 1bba20a98 651fa25f8 Author: Arne Fitzenreiter Date: Wed Apr 22 10:17:05 2020 +0000 Merge remote-tracking branch 'origin/master' into next commit 1bba20a985ec2dc29322e7f2cc0d820ae9a25758 Author: Arne Fitzenreiter Date: Wed Apr 22 02:41:49 2020 +0200 bind: update rootfile commit 715b841e5b8e53774968a5f844359e1281b725fc Author: Arne Fitzenreiter Date: Tue Apr 21 19:16:53 2020 +0000 core144: restart squid =20 Signed-off-by: Arne Fitzenreiter commit c24bb323e129e047fae0de03383d5e7aeed1825d Author: Arne Fitzenreiter Date: Tue Apr 21 19:14:58 2020 +0000 core144: add bind =20 Signed-off-by: Arne Fitzenreiter commit 1494b402548fb461fe8306d6114fe31eeeecd98c Author: Matthias Fischer Date: Tue Apr 21 21:02:38 2020 +0200 bind: Update to 9.11.18 =20 For details see: https://downloads.isc.org/isc/bind9/9.11.18/RELEASE-NOTES-bind-9.11.18.ht= ml =20 "Security Fixes =20 DNS rebinding protection was ineffective when BIND 9 is configured as a f= orwarding DNS server. Found and responsibly reported by Tobias Klein. [GL #1574] =20 Known Issues =20 We have received reports that in some circumstances, receipt of an IXFR c= an cause the processing of queries to slow significantly. Some of these were relat= ed to RPZ processing, which has been fixed in this release (see below). Others appe= ar to occur where there are NSEC3-related changes (such as an operator changing the N= SEC3 salt used in the hash calculation). These are being investigated. [GL #1685]" =20 Signed-off-by: Matthias Fischer Signed-off-by: Arne Fitzenreiter commit 2d52362dcb8e8b1284180667e23474a320d2ff8a Author: Arne Fitzenreiter Date: Tue Apr 21 19:13:33 2020 +0000 core144: add squid =20 Signed-off-by: Arne Fitzenreiter commit 1e3ae30e1de234175f5ccaa4ecc04e0892d04e84 Author: Matthias Fischer Date: Tue Apr 21 20:55:51 2020 +0200 squid: Update to 4.11 =20 For details see: http://www.squid-cache.org/Versions/v4/changesets/ =20 Signed-off-by: Matthias Fischer Signed-off-by: Arne Fitzenreiter commit b481754aa38d34e33cb81d8fd4c9dff4ad34c7e0 Author: Matthias Fischer Date: Tue Apr 21 20:49:58 2020 +0200 dhcpcd: Update to 9.0.2 =20 For details see: https://roy.marples.name/archives/dhcpcd-discuss/0002941.html =20 "* Control sockets are not opened in test mode * privsep: no longer aborts if protocol not available * inet6: Don't regen temporary addresses without a state * inet6: Reduce RA log spam * dhcp6: Don't log when things consitently fail * inet6: Add temporary directive to slaac option [1] * Ensure current interface flags persist when setting a flag * DHCP via BPF is now aligned correctly * CMSG buffers are now aligned correctly * hostnames are no longer clobbered when being forced and a RA is recieve= d" =20 Signed-off-by: Matthias Fischer Signed-off-by: Arne Fitzenreiter commit 2399b70dc2d0d8939a0bc9937e84a319da2447c5 Author: Arne Fitzenreiter Date: Tue Apr 21 16:51:53 2020 +0200 openssl: update rootfile =20 Signed-off-by: Arne Fitzenreiter commit a95c8b978137d435d4b734b03371c7fc7f2930b1 Author: Arne Fitzenreiter Date: Tue Apr 21 13:52:01 2020 +0000 core144: ship /etc/os-release =20 Signed-off-by: Arne Fitzenreiter commit 83cee5f02ead8d296bc874651f6f36a07e581df7 Author: Arne Fitzenreiter Date: Tue Apr 21 13:50:43 2020 +0000 core144: add openssl =20 Signed-off-by: Arne Fitzenreiter commit 9ec0fca91d237fffe686b2a23fa5cd1dac731fd3 Author: Arne Fitzenreiter Date: Tue Apr 21 15:43:38 2020 +0200 openssl: update to 1.1.1g =20 CVE-2020-1967 (OpenSSL advisory) [High severity] 21 April 2020: Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. https://www.openssl.org/news/secadv/20200421.txt =20 Signed-off-by: Arne Fitzenreiter commit 88ba9a24801338f5421cace9ae99db31be1f0889 Author: Arne Fitzenreiter Date: Mon Apr 20 15:41:09 2020 +0000 core144: remove gcc go binary and libs =20 Signed-off-by: Arne Fitzenreiter commit a9fd8519c2452cc77dc00513aaddf54b47eaee33 Author: Michael Tremer Date: Tue Apr 14 15:01:00 2020 +0000 toolchain: Do not attempt to strip anything in /dev, /proc, /sys and /tmp =20 Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit 20253656fc6555aa215ffdd798cd2d07e5d0254c Author: Michael Tremer Date: Thu Apr 9 20:45:16 2020 +0000 Add /etc/os-release =20 This file is being read by some packages to find out on what distribution they are running on. =20 This file needs to be included in every Core Update. =20 Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit 6b751211205f5b441101742674decad94e96132a Author: Michael Tremer Date: Thu Apr 16 19:27:14 2020 +0000 gcc: Drop Go on i586 =20 Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit 6d5e9f40f88d0104ede1417a00e8308fd8399116 Author: Michael Tremer Date: Thu Apr 16 19:27:13 2020 +0000 gcc: Drop Go on armv5tel =20 Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit c22cee9288bc61c609ce1557fd59eec46a946189 Author: Michael Tremer Date: Thu Apr 16 19:27:12 2020 +0000 gcc: Drop Go on aarch64 =20 Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit 0c4cd7f3935fe9dfbd8a4ef90ce0b97f54ad3864 Author: Michael Tremer Date: Thu Apr 16 19:27:11 2020 +0000 amazon-ssm-agent: Bump version to ship package built with golang =20 gccgo compiles this, but unfortunately the binaries malfunction sometimes. golang generates a bug-free binary. =20 https://github.com/aws/amazon-ssm-agent/issues/271 =20 Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit 8bded835a27af820100048f6078c2cb6b37d4ad4 Author: Michael Tremer Date: Thu Apr 16 19:27:10 2020 +0000 amazon-ssm-agent: Remove temporary shared files =20 Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit 3a56d70ce79021cafa09ff5c6b00f26cc0299e9b Author: Michael Tremer Date: Thu Apr 16 19:27:09 2020 +0000 strip: Do not try to strip Go binaries =20 There is loads of stuff for PowerPC and other architectures in the directory which we cannot strip. Therefore we ignore the whole directory. =20 Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit d2315d00c20c089a242758955c53a00f5166d7ae Author: Michael Tremer Date: Thu Apr 16 19:27:08 2020 +0000 Package the official Go compiler =20 Since Go has a horrible build system which requires a Go compiler to build the Go compiler and takes a very long time to compile, we are following Rust and are using the "official" pre-compiled release tarball. =20 We no longer ship the Go runtime, which mitigates the risk of shipping any malware. =20 Because we currently only have one package using this and which is only being compiled for x86_64, we are only making Go available on this architecture. =20 Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit eed179acdccd59e8e31a11ba588d3c54da07b09a Author: Michael Tremer Date: Thu Apr 16 19:27:07 2020 +0000 gcc: Drop support for Go =20 Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit b4863d7d141dd056a421e99a4f78060eba9d1038 Author: Michael Tremer Date: Thu Apr 16 19:27:06 2020 +0000 Config: Set some Go environment variables =20 Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit 7f4780ba71247b5e2fe423ef7d836efa861ebd16 Author: Arne Fitzenreiter Date: Mon Apr 20 15:22:57 2020 +0000 core144: add apache =20 Signed-off-by: Arne Fitzenreiter commit fb241a29c5d7e48a09d3e3d3995b9cc6cfc57c5c Author: Matthias Fischer Date: Sun Apr 12 14:29:19 2020 +0200 apache: Update to 2.4.43 =20 For details see: http://mirror.dkd.de/apache//httpd/CHANGES_2.4.43 =20 Signed-off-by: Matthias Fischer Reviewed-by: Michael Tremer Signed-off-by: Arne Fitzenreiter commit 34b7b986169eebce28c48cf4efc77200303c83b3 Author: Arne Fitzenreiter Date: Sun Apr 19 17:37:28 2020 +0000 core144: add dhcpcd initskript and user =20 this commit also re/create the user after backup restore. =20 Signed-off-by: Arne Fitzenreiter commit 533c4312fad295d520f8ccef40e3e1b9f2b1b7f6 Author: Arne Fitzenreiter Date: Sun Apr 19 19:18:04 2020 +0200 dhcpcd: create dhcpcd user and chroot folder =20 dhcpcd 9.x adds privelege seperation by creating a chroot and running parts of the client not as root. =20 Signed-off-by: Arne Fitzenreiter commit 18136c5ce9f32b6186df48bc2c2a7fade6792615 Author: Arne Fitzenreiter Date: Sun Apr 19 15:24:02 2020 +0200 dhcpcd: new pid path for dhcpcd 9.x =20 dhcpcd 9.x move the path of the pids to an own folder. =20 Signed-off-by: Arne Fitzenreiter commit 03e4f8d60e5671bdc1ec90a829b1f389bcd0b8aa Author: Matthias Fischer Date: Wed Apr 15 18:19:03 2020 +0200 dhcpcd: Update to 9.0.1 =20 For details see: https://roy.marples.name/archives/dhcpcd-discuss/0002921.html =20 Signed-off-by: Matthias Fischer Signed-off-by: Arne Fitzenreiter commit 296675c9ee3b984b5bfb5bdff032cdd2375639a3 Merge: b3e2c3ce2 f5dba19ed Author: Arne Fitzenreiter Date: Sun Apr 12 08:25:40 2020 +0200 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next commit f5dba19edfdbc8f925b7fced7782d7bc3c58d998 Author: Arne Fitzenreiter Date: Sun Apr 12 08:18:51 2020 +0200 core144: add dhcpcd =20 Signed-off-by: Arne Fitzenreiter commit b3e2c3ce269a0492e8e55208dc05dbf82977bfd4 Author: Arne Fitzenreiter Date: Sun Apr 12 08:16:28 2020 +0200 dhcpcd: update to 9.00 =20 Signed-off-by: Arne Fitzenreiter commit 89445161b066671398185384cc2a80843cc9dc04 Author: Arne Fitzenreiter Date: Sun Apr 12 08:14:26 2020 +0200 core144: start update =20 Signed-off-by: Arne Fitzenreiter ----------------------------------------------------------------------- hooks/post-receive -- IPFire 2.x development tree --===============5299895903525837980==--