Difference between revisions of "Bering-uClibc 6.0.x - Changelog"

From bering-uClibc
Jump to: navigation, search
m (→‎Changes between 6.0.1 and 6.0.1-rc1)
(→‎Changes between 6.0.7 and 6.0.7-rc1)
 
(145 intermediate revisions by the same user not shown)
Line 7: Line 7:
 
|}
 
|}
 
----
 
----
 +
==Changes between 6.0.7 and 6.0.7-rc1==
 +
(released 18 Nov 2017)
 +
 +
;kernel: updated to upstream version 4.4.97
 +
;curl: updated to upstream version 7.56.1
 +
;nano: add libz(.lrp) as requirement for nano, so it will be automatically loaded with nano. This solves failing to load nano for Raspberry Pi1.
 +
;nsd: updated to upstream version 4.1.17
 +
;openssh: add key generation for ed25519 key in makekey
 +
;openssl: updated to upstream version 1.0.2m
 +
;wget: updated to upstream version 1.19.2
 +
 +
==Changes between 6.0.7-rc1 and 6.0.6==
 +
(released 20 Oct 2017)
 +
 +
;kernel: updated to upstream version 4.4.93
 +
;dbus: updated to upstream version 1.10.24
 +
;hostapd: add security fixes:
 +
:Avoid key reinstallation in FT handshake
 +
:Fix PTK rekeying to generate a new ANonce
 +
;upgrade: Made upgrade react gracefully if shorewall is not used.
 +
: Made ARCH check against sha1sum.list instead of linux to speed check up
 +
: Removed some check_remote calls as wget fetches files with -q flag.
 +
: This should speed up upgrade as we don't need to download twice.
 +
: Changes suggested by John Sager, thanks.
 +
;wpa_supplicant: add security fixes:
 +
:Prevent-reinstallation-of-an-already-in-use-group-ke
 +
:Extend-protection-of-GTK-IGTK-reinstallation-of-WNM
 +
:Prevent-installation-of-an-all-zero-TK
 +
:TDLS-Reject-TPK-TK-reconfiguration
 +
:WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r
 +
:FT-Do-not-allow-multiple-Reassociation-Response-frame
 +
 +
==Changes between 6.0.6 and 6.0.6-rc1==
 +
(released 7 Oct 2017)
 +
 +
;kernel: updated to upstream version 4.4.89
 +
;curl: updated to upstream version 7.56.0
 +
;dnsmasq: updated to upstream version 2.78
 +
;libidn: updated to upstream version 1.33
 +
 +
==Changes between 6.0.6-rc1 and 6.0.5==
 +
(released 18 Sept 2017)
 +
 +
;kernel: updated to upstream version 4.4.88
 +
;general: disable busybox patch and add patch.lrp to default leaf.cfg
 +
;bash: add security fixes 047 and 048
 +
;config: look for the kernel in the right directory now
 +
:do not abort in case of a missing package
 +
:added -ubB as diff parameters in upgrade
 +
:added generation of configdb to upgrade in case of success
 +
:modified error/warning message in upgrade
 +
;curl: updated to upstream version 7.55.1
 +
;ipset: updated to upstream version 6.33
 +
;libgcrypt: updated to upstream version 1.8.1
 +
;openldap: updated to upstream version 2.4.45
 +
;tcpdump:updated to upstream version 4.9.2
 +
 +
==Changes between 6.0.5 and 6.0.5-rc1==
 +
(released 11 Aug 2017)
 +
 +
;kernel: updated to upstream version 4.4.80
 +
;bind: updated to upstream version 9.11.1-P3
 +
;dbus: updated to upstream version 1.10.22
 +
;radius: updated to upstream version 2.2.10
 +
;tcpdump: updated to upstream version 4.9.1
 +
 +
==Changes between 6.0.5-rc1 and 6.0.4==
 +
(released 16 July 2017)
 +
 +
;kernel: updated to upstream version 4.4.77
 +
;bind: updated to upstream version 9.11.1-P2
 +
;curl: updated to upstream version 7.54.1
 +
;dbus: updated to upstream verson 1.10.20
 +
;dnsmasq: updated to upstream version 2.77
 +
;libgcrypt: updated to upstream version 1.7.8
 +
;libgpg-error: updated to upstream version 1.27
 +
;openvpn: updated to upstream version 2.3.17
 +
;pciutils: updated to upstream version 3.5.5
 +
 +
==Changes between 6.0.4 and 6.0.4-rc1==
 +
(released 10 June 2017)
 +
 +
;kernel: updated to upstream version 4.4.71
 +
;squid: updated to upstream version 3.5.26
 +
;usb-modeswitch-data: updated to upstream version 20170205
 +
;wireless-regdb: updated to 2017.03.07
 +
;aiccu: REMOVE package
 +
:While it ran flawlessly for more than ten years, sixxs.net will be closed on 2017-06-06 and there is no need to provide this package any longer.
 +
:See: https://www.sixxs.net/sunset/
 +
:We respect this decision and we owe them a lot for the outstanding work and help to move towards ipv6 networking!
 +
 +
==Changes between 6.0.4-rc1 and 6.0.3==
 +
(released 20 May 2017)
 +
 +
;toolchain/uClibc-ng: add patch to avoid ntp segfaulting with multicore kernel and i686 image (reported and tested by Robert K Coffman)
 +
;kernel: updated to version 4.4.68
 +
;config/upgrade: changed size parameter in the tmp size warning of upgrade to reflect size in MB instead of bytes to correspond to the warning message
 +
:previous version of upgrade was badly broken with the introduction of the check_wget_dependencies function.
 +
:use google.com as https test target
 +
:do not abort patch_package if a file could not be found for patching
 +
:copy module.sqfs in any case
 +
:removed obsolete compact_modules function and more cleanup
 +
;curl: updated to upstream version 7.54.0
 +
;dropbear: updated to upstream version 2017.75
 +
;openvpn: updated to upstream version 2.3.16
 +
;pmacctd: updated to upstream version 1.6.2
 +
 +
==Changes between 6.0.3 and 6.0.3-rc1==
 +
(released 17 Apr 2017)
 +
 +
;kernel: updated to version 4.4.61
 +
:add patch to fix crash in TCPMSS module
 +
;bmon: fix buildtool.mk to link with $(BT_STAGING_DIR) instead of i486 staging dir
 +
;upgrade: fixed file selection code in patch_package
 +
:Added check for either openssl or wget ssl
 +
:Enabled post-upgrade
 +
;libpng: updated to upstream version 1.6.29
 +
;ntp: updated to upstream version 4.2.8p10
 +
;ppp-shaper: increase policier burst size
 +
 +
==Changes between 6.0.3-rc1 and 6.0.2==
 +
(released 19 Mar 2017)
 +
 +
;kernel: updated to version 4.4.54
 +
;bind: updated to upstream version 9.11.0-P3
 +
;curl: updated to upstream version 7.53.1
 +
:use /etc/ssl/certs as default ca-path
 +
;dbus: updated to upstream version 1.10.16
 +
;ixgbe: Add base driver for 10 Gigabit Intel® Network Connections
 +
;libgcrypt: updated to upstream version 1.7.6
 +
;libssh2: updated to upstream version 1.8.0
 +
;nano: updated to upstream version 2.7.5
 +
;nsd: updated to upstream version 4.1.15
 +
;pciutils: updated to upstream version 3.5.4
 +
:updated pci.ids and replaced gz tarball with slightly smaller bz2 tarball
 +
;pmacctd: updated to upstream version 1.6.1
 +
:Note: I haven't included additional available plugins until requested and someones willing to test and document.
 +
;strace: updated to upstream version 4.16
 +
;tcpdump: updated to upstream version 4.9.0
 +
;vnstat: updated to upstream version 1.17
 +
 +
==Changes between 6.0.2 and 6.0.2-rc1==
 +
(released 30 Jan 2017)
 +
 +
;kernel: updated to upstream version 4.4.45
 +
;bind: updated to upstream version 9.11.0-P2
 +
;ip[6]tables: fix loading modules from modules.sqfs for ip[6]tables-restore; patch provided by John Sager
 +
;iperf3: updated to upstream version 3.1.5
 +
;lighttpd: updated to upstream version 1.4.45
 +
;openssl: updated to upstream version 1.0.2k
 +
;squid: updated to upstream version 3.5.24
 +
;vnstat: updated to upstream version 1.16
 +
 +
==Changes between 6.0.2-rc1 and 6.0.1==
 +
(released 11 Jan 2017)
 +
 +
;kernel: updated to upstream version 4.4.41
 +
;dropbear: fix options.h
 +
:resolves error "Couldn't agree a key exchange algorithm"
 +
;etc: add /usr/sbin and /sbin to /etc/profile path declaration
 +
;iperf3: updated to upstream version 3.1.4
 +
;libcurl: updated to upstream version 7.52.1
 +
;libdnet: fix packaging
 +
;libmnl: fix packaging
 +
;libpng: updated to upstream version 1.6.28
 +
;libusb: updated to upstream version 1.0.21
 +
;lighttpd: updated to upstream version 1.4.44
 +
;nano: updated to upstream version 2.7.4
 +
;nsd: updated to upstream version 4.1.14
 +
;ntp: updated to upstream version 4.2.8p9
 +
;oprofile: fix packaging
 +
;shorewall: add fix for init to load modules also when calling "restart"
 +
;squid: updated to upstream version 3.5.23
 +
;strace: updated to upstream version 4.15
 +
;strongswan: fix packaging; libhydra has been removed in upstream, so do not try to package it
 +
 
==Changes between 6.0.1 and 6.0.1-rc1==
 
==Changes between 6.0.1 and 6.0.1-rc1==
−
(unreleased)
+
(released 18 Dec 2016)
  
 +
;kernel: updated to upstream version 4.4.39
 +
;config: added post_upgrade functions to upgrade script
 
;dbus: updated to upstream version 1.10.14
 
;dbus: updated to upstream version 1.10.14
 
;libpng: updated to upstream version 1.6.26
 
;libpng: updated to upstream version 1.6.26
 +
;modules: add ipv6 loaded as default
 +
;nano: updated to upstream version 2.7.2
  
 
==Changes between 6.0.1-rc1 and 6.0.0==
 
==Changes between 6.0.1-rc1 and 6.0.0==

Latest revision as of 01:39, 18 November 2017

Changelog
Bering-uClibc 6.x - Overview

Changes between 6.0.7 and 6.0.7-rc1

(released 18 Nov 2017)

kernel
updated to upstream version 4.4.97
curl
updated to upstream version 7.56.1
nano
add libz(.lrp) as requirement for nano, so it will be automatically loaded with nano. This solves failing to load nano for Raspberry Pi1.
nsd
updated to upstream version 4.1.17
openssh
add key generation for ed25519 key in makekey
openssl
updated to upstream version 1.0.2m
wget
updated to upstream version 1.19.2

Changes between 6.0.7-rc1 and 6.0.6

(released 20 Oct 2017)

kernel
updated to upstream version 4.4.93
dbus
updated to upstream version 1.10.24
hostapd
add security fixes:
Avoid key reinstallation in FT handshake
Fix PTK rekeying to generate a new ANonce
upgrade
Made upgrade react gracefully if shorewall is not used.
Made ARCH check against sha1sum.list instead of linux to speed check up
Removed some check_remote calls as wget fetches files with -q flag.
This should speed up upgrade as we don't need to download twice.
Changes suggested by John Sager, thanks.
wpa_supplicant
add security fixes:
Prevent-reinstallation-of-an-already-in-use-group-ke
Extend-protection-of-GTK-IGTK-reinstallation-of-WNM
Prevent-installation-of-an-all-zero-TK
TDLS-Reject-TPK-TK-reconfiguration
WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r
FT-Do-not-allow-multiple-Reassociation-Response-frame

Changes between 6.0.6 and 6.0.6-rc1

(released 7 Oct 2017)

kernel
updated to upstream version 4.4.89
curl
updated to upstream version 7.56.0
dnsmasq
updated to upstream version 2.78
libidn
updated to upstream version 1.33

Changes between 6.0.6-rc1 and 6.0.5

(released 18 Sept 2017)

kernel
updated to upstream version 4.4.88
general
disable busybox patch and add patch.lrp to default leaf.cfg
bash
add security fixes 047 and 048
config
look for the kernel in the right directory now
do not abort in case of a missing package
added -ubB as diff parameters in upgrade
added generation of configdb to upgrade in case of success
modified error/warning message in upgrade
curl
updated to upstream version 7.55.1
ipset
updated to upstream version 6.33
libgcrypt
updated to upstream version 1.8.1
openldap
updated to upstream version 2.4.45
tcpdump
updated to upstream version 4.9.2

Changes between 6.0.5 and 6.0.5-rc1

(released 11 Aug 2017)

kernel
updated to upstream version 4.4.80
bind
updated to upstream version 9.11.1-P3
dbus
updated to upstream version 1.10.22
radius
updated to upstream version 2.2.10
tcpdump
updated to upstream version 4.9.1

Changes between 6.0.5-rc1 and 6.0.4

(released 16 July 2017)

kernel
updated to upstream version 4.4.77
bind
updated to upstream version 9.11.1-P2
curl
updated to upstream version 7.54.1
dbus
updated to upstream verson 1.10.20
dnsmasq
updated to upstream version 2.77
libgcrypt
updated to upstream version 1.7.8
libgpg-error
updated to upstream version 1.27
openvpn
updated to upstream version 2.3.17
pciutils
updated to upstream version 3.5.5

Changes between 6.0.4 and 6.0.4-rc1

(released 10 June 2017)

kernel
updated to upstream version 4.4.71
squid
updated to upstream version 3.5.26
usb-modeswitch-data
updated to upstream version 20170205
wireless-regdb
updated to 2017.03.07
aiccu
REMOVE package
While it ran flawlessly for more than ten years, sixxs.net will be closed on 2017-06-06 and there is no need to provide this package any longer.
See: https://www.sixxs.net/sunset/
We respect this decision and we owe them a lot for the outstanding work and help to move towards ipv6 networking!

Changes between 6.0.4-rc1 and 6.0.3

(released 20 May 2017)

toolchain/uClibc-ng
add patch to avoid ntp segfaulting with multicore kernel and i686 image (reported and tested by Robert K Coffman)
kernel
updated to version 4.4.68
config/upgrade
changed size parameter in the tmp size warning of upgrade to reflect size in MB instead of bytes to correspond to the warning message
previous version of upgrade was badly broken with the introduction of the check_wget_dependencies function.
use google.com as https test target
do not abort patch_package if a file could not be found for patching
copy module.sqfs in any case
removed obsolete compact_modules function and more cleanup
curl
updated to upstream version 7.54.0
dropbear
updated to upstream version 2017.75
openvpn
updated to upstream version 2.3.16
pmacctd
updated to upstream version 1.6.2

Changes between 6.0.3 and 6.0.3-rc1

(released 17 Apr 2017)

kernel
updated to version 4.4.61
add patch to fix crash in TCPMSS module
bmon
fix buildtool.mk to link with $(BT_STAGING_DIR) instead of i486 staging dir
upgrade
fixed file selection code in patch_package
Added check for either openssl or wget ssl
Enabled post-upgrade
libpng
updated to upstream version 1.6.29
ntp
updated to upstream version 4.2.8p10
ppp-shaper
increase policier burst size

Changes between 6.0.3-rc1 and 6.0.2

(released 19 Mar 2017)

kernel
updated to version 4.4.54
bind
updated to upstream version 9.11.0-P3
curl
updated to upstream version 7.53.1
use /etc/ssl/certs as default ca-path
dbus
updated to upstream version 1.10.16
ixgbe
Add base driver for 10 Gigabit Intel® Network Connections
libgcrypt
updated to upstream version 1.7.6
libssh2
updated to upstream version 1.8.0
nano
updated to upstream version 2.7.5
nsd
updated to upstream version 4.1.15
pciutils
updated to upstream version 3.5.4
updated pci.ids and replaced gz tarball with slightly smaller bz2 tarball
pmacctd
updated to upstream version 1.6.1
Note: I haven't included additional available plugins until requested and someones willing to test and document.
strace
updated to upstream version 4.16
tcpdump
updated to upstream version 4.9.0
vnstat
updated to upstream version 1.17

Changes between 6.0.2 and 6.0.2-rc1

(released 30 Jan 2017)

kernel
updated to upstream version 4.4.45
bind
updated to upstream version 9.11.0-P2
ip[6]tables
fix loading modules from modules.sqfs for ip[6]tables-restore; patch provided by John Sager
iperf3
updated to upstream version 3.1.5
lighttpd
updated to upstream version 1.4.45
openssl
updated to upstream version 1.0.2k
squid
updated to upstream version 3.5.24
vnstat
updated to upstream version 1.16

Changes between 6.0.2-rc1 and 6.0.1

(released 11 Jan 2017)

kernel
updated to upstream version 4.4.41
dropbear
fix options.h
resolves error "Couldn't agree a key exchange algorithm"
etc
add /usr/sbin and /sbin to /etc/profile path declaration
iperf3
updated to upstream version 3.1.4
libcurl
updated to upstream version 7.52.1
libdnet
fix packaging
libmnl
fix packaging
libpng
updated to upstream version 1.6.28
libusb
updated to upstream version 1.0.21
lighttpd
updated to upstream version 1.4.44
nano
updated to upstream version 2.7.4
nsd
updated to upstream version 4.1.14
ntp
updated to upstream version 4.2.8p9
oprofile
fix packaging
shorewall
add fix for init to load modules also when calling "restart"
squid
updated to upstream version 3.5.23
strace
updated to upstream version 4.15
strongswan
fix packaging; libhydra has been removed in upstream, so do not try to package it

Changes between 6.0.1 and 6.0.1-rc1

(released 18 Dec 2016)

kernel
updated to upstream version 4.4.39
config
added post_upgrade functions to upgrade script
dbus
updated to upstream version 1.10.14
libpng
updated to upstream version 1.6.26
modules
add ipv6 loaded as default
nano
updated to upstream version 2.7.2

Changes between 6.0.1-rc1 and 6.0.0

(released 5 Dec 2016)

kernel
updated to upstream version 4.4.36
wireless-regdb updated to 2016.06.10
bind
updated to upstream version 9.11.0
hdparm
updated to upstream version 9.50
iw
updated to upstream version 4.9
libpam
updated to upstream version 1.30
libpcap
updated to upstream version 1.8.1
lighttpd
updated to upstream version 1.4.42, also added all modules and configuration files
openvpn
updated to upstream version 2.3.12
shorewall[6]
updated to upstream version 5.0.13.4
strongswan
updated to upstream version 5.5.1
tcpdump
updated to upstream version 4.8.1
unbound
updated to upstream version 1.5.10
wpasupplicant
updated to upstream version 2.6
xtables-addons
updated to upstream version 2.11

Changes between 6.0.0 and 6.0.0-rc1

(released 22 Oct 2016)

kernel
updated to upstream version 4.4.26
updated patches for Raspberry Pi kernel
busybox
updated to upstream version 1.25.1
dbus
updated to upstream version 1.10.12
dhcpcd
updated to upstream version 6.11.5
hostapd
updated to upstream version 2.6
shorewall[6]
updated to upstream version 5.0.12.1
squid
updated to upstream version 3.5.22

Changes between 6.0.0-rc1 and 6.0.0-beta1

(released 9 Oct 2016)

kernel
updated to upstream version 4.4.24
dbus
updated to upstream version 1.10.10
dhcpcd
updated to upstream version 6.11.3
e1000e
updated to 3.3.5
e2fsprogs
updated to upstream version 1.43.3
e3
updated to upstream version 2.81
fwlogwatch
updated to upstream version 1.5
igb
updated to 5.3.5.3
libcurl
updated to upstream version 7.50.3
libpng
updated to upstream version 1.6.25
nano
updated to upstream version 2.7.0
nettle
updated to upstream version 3.3
pciutils
updated to upstream version 3.5.2
squid
updated to upstream version 3.5.21
strace
updated to upstream version 4.14
tor
updated to upstrem version 0.2.8.8
usbmodeswitch
updated to upstream version 2.4.0
usbmodeswitchdata
updated to upstream version 20160803
util-linux
updated to upstream version 2.28.2
zabbix
updated to upstream version 2.4.8

Changes between 6.0.0-beta1 and 6.0.0-alpha2

(released 4 Sept 2016)

general
add kernel 4.4.x support for Raspberry Pi Rev1 boards and booting via device tree (incl. overlays)
toolchain
uClibc-ng updated to upstream version 1.0.17
kernel
updated to upstream version 4.4.19
bird
updated to upstream version 1.6.0
config
removed redundant call to mount_storage
conntrack-tools
updated to upstream version 1.4.4
libgpg-error
updated to upstream version 1.24
libmnl
updated to upstream version 1.0.4
libnetfilter_conntrack
updated to upstream version 1.0.6
lighttpd
updated to upstream version 1.4.41
monit
upgraded to upstream version 5.18
nano
updated to upstream version 2.6.2
perf
compilation fix
perl
updated to upstream version 5.24.0
pmacctd
updated to upstream version 1.6.0
shorewall[6]
updated to upstream version 5.0.11
snort
updated to upstream version 2.9.8.3
syslog
remove /var/log/messages; contents are in other log files as well, so it just wastes RAM
tor
updated to upstream version 0.2.8.7

Changes between 6.0.0-alpha2 and 6.0.0-alpha1

(released 16 Jul 2016)

kernel
updated to upstream version 4.4.15
backport APU2 watchdog fix. (This enables hardware watchdog for PCEngines APU2 devices. Load in /etc/modules like "sp5100_tco timeout=60" to reboot after 60 sec if watchdog is doesn't work any longer.)
toolchain
uclibc-ng updated to upstream version 1.0.16
bash
updated to 4.3.30p46
busybox
updated to upstream version 1.25.0
add busybox-ntpd.patch to avoid busybox ntp to daemonize before dns resolution
devtools
strace updated to upstream version 4.12
dnsmasq
updated to upstream version 2.76
expat
updated to upstream version 2.2.0
dibbler-client
new package for dibbler client
gettext
updated to upstream version 0.19.8.1
iw
updated to upstream version 4.7
knockd
update to latest master (0.7.8)
libconfuse
updated to upstream version 3.0
libdnet
updated to upstream version 1.12
libgmp
updated to upstream version 6.1.1
nano
updated to upstream version 2.6.0
ser2net
updated to upstream version 2.10.1
replace the repositories ser2net config file with the one from the sources
shorewall[6]
updated to upstream version 5.0.9.2

Changes between 6.0.0-alpha1 and 5.2.x

(released 23 May 2016)

general
removed initmod.lrp and build all previously needed modules to boot into the kernel
load modules automatically from modules.sqfs with hwdetect, from /etc/modules or during start of an app from init (e.g. shorewall)
save firmware via local.lrp
toolchain
gcc updated to 5.3.0
uClibc updated to uClibc-ng 1.0.14
kernel
updated to version 4.4.11
add WRAP optimized kernel
bash
updated to 4.3.30p42
busybox
updated to upstream version 1.24.2
clamav
updated to upstream version 0.99.1
dhcpcd
updated to upstream version 6.10.1
libpam
new package Linux-PAM (Pluggable Authentication Modules for Linux), version 1.2.1
nano
updated to new upstream version 2.5.3
openvpn
support libpam authentication plugin; requires libpam
merge openvpn-lzo package with openvpn
perl
updated to new upstream version 5.22.1
rsync
updated to upstream version 3.1.2
shorewall[6]
updated to upstream version 5.0.7.2
usbmodeswitch
updated to upstream version 2.3.0
usbmodeswitchdata
updated to upstream version 20160112
util-linux
renamed from util-linux-ng and updated to new upstream version 2.28
Up
Retrieved from "http://bering-uclibc.zetam.org/index.php?title=Bering-uClibc_6.0.x_-_Changelog&oldid=3224"