Difference between revisions of "Bering-uClibc 6.1.x - Changelog"

Latest revision as of 18:05, 11 March 2019

Changes between 6.1.8 and 6.1.8-rc1

(released 11 Mar 2019)

shorewall[6]-lite

fix packaging shorewall[6]-lite

fixes https://sourceforge.net/p/leaf/tickets/101/

Changes between 6.1.8-rc1 and 6.1.7

(released 16 Feb 2019)

kernel

updated to upstream version 4.9.158

accel-ppp

updatde to 1.11.2-latest

bird

updated to 1.6.5

Changes between 6.1.7 and 6.1.7-rc1

(released 28 Jan 2019)

kernel

updated to upstream version 4.9.153

initrd

support sha512sum for upgrades

Changes between 6.1.7-rc1 and 6.1.6

(released 2 Jan 2019)

kernel

updated to upstream version 4.9.148

libnetfilter_queue

updated to upstream version 1.0.3

libpng

updated to upstream version 1.6.36

lighttpd

updated to upstream version 1.4.52

nano

updated to upstream version 3.2

nettle

updated to upstream version 3.4.1

openssl

updated to upstream version 1.0.2q

pmacctd

updated to upstream version 1.7.2

usbmodeswitch

updated to upstream version 2.5.2

usbmodeswitchdata

updated to upstream version 20170806

wget

updated to upstream version 1.20.1

Changes between 6.1.6 and 6.1.6-rc1

(released 29 Nov 2018)

kernel

updated to upstream version 4.9.137

general

don't start procps twice during boot

bind

updated to upstream version 9.11.5

dhcpd

fix build with newer bind versions

dnsmasq

updated to upstream version 2.80

webconf

improve backup

Changes between 6.1.6-rc1 and 6.1.5

(released 4 Nov 2018)

kernel

updated to upstream version 4.9.135

initrd

handle time conflicts with signed packages in systems without a battery backed clock

inhibit apkg -u mode in upgrade silent mode

inhibit multiple instances of upgrade

bind

updated to upstream version 9.11.4-P2

bird

add hotfix for mtu from bird maillist

clamav

updated to upstream version 0.100.2

curl

updated to upstream version 7.62.0

iptables

updated ipt-ratelimit to upstream version 0.3

lighttpd

updated to upstream version 1.4.51

nano

updated to upstream version 3.1

ntp

updated to upstream version 4.2.8p12

squid

updated to upstream version 3.5.28

fix squid start and add squidclient to package

tinc

updated to upstream version 1.0.35

tinyproxy

updated to upstream version 1.8.4

webconf

attempt to integrate upgrade utility into webconf

wireguard

updated to version 20181007

Changes between 6.1.5 and 6.1.5-rc1

(released 24 Sept 2018)

kernel

updated to upstream version 4.9.128

initrd/upgrade

fix missing to fetch modules.sqfs

curl

updated to upstream version 7.61.1

libidn

updated to upstream version 1.35

Changes between 6.1.5-rc1 and 6.1.4

(released 9 Sept 2018)

general

initrd: major code cleanup, minor speedup and reworked to load packages with apkg. Set DEBUG and VERBOSE from the kernel command line in syslinux.cfg, alleviating debugging without needing to change initrd's source code and repackage initrd. Add gnupg to initrd.lrp and change apkg and upgrade to support signed packages in the future. Package libz libraries in initrd.

kernel

updated to upstream version 4.9.125

bind

updated to upstream version 9.11.4-P1

expat

updated to upstream version 2.2.6

gnupg

updated to upstream version 1.4.23

lighttpd

updated to upstream version 1.4.50

ntp

Included /var/lib/ntp/ntp.drift in ntpd.local

openssl

updated to upstream version 1.0.2p

pciutils

updated to upstream version 3.6.2

ser2net

updated to upstream version 3.5

shorewall[6]

updated to upstream version 5.2.0.5

New Package

wireguard: an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography

Removed Package

libz: now packaged in initrd.lrp

Changes between 6.1.4 and 6.1.4-rc1

(released 27 July 2018)

kernel

updated to upstream version 4.9.114

initrd

fix saving /root (/root/.ssh etc.)

clamav

updated to upstream version 0.100.1

conntrack-tools

updated to upstream version 1.4.5

curl

updated to upstream version 7.61.0

e2fsprogs

updated to upstream version 1.44.3

iperf

updated to upstream version 2.0.12

libnetfilter_conntrack

updated to upstream version 1.0.7

libpam

updated to upstream version 1.3.1

rng-tools

updated to upstream version 6.3.1

tor

updated to upstream version 0.3.3.9

Changes between 6.1.4-rc1 and 6.1.3

(released 2 July 2018)

general/buildimage

move kernel from syslinux/isolinux directory to /(root), simplifies upgrade and running syslinux from a seperate partition

kernel

updated to upstream version 4.9.110

fix i386 kernels failing to mount ext4 formatted partitions

curl

updated to upstream version 7.60.0

dbus

updated to upstream version 1.10.26

e2fsprogs

updated to upstream version 1.44.2

etc

change printk defaults in sysctl.conf to remove some noise when booting and esp. mount modules from ext4

mark /lib/firmware as local (to store in configdb)

initrd

mark crontabs dir as local

irqbalance

updated to version 1.1.0

gnupg

updated to upstream version 1.4.22

keepalived

updated to upstream version 1.4.4

krb5

updated to upstream version 1.16.1

libgd

updated to upstream version 2.2.5

libgpgerror

updated to upstream version 1.31

libtirpc

updated to upstream version 1.0.3

libmxl2

updated to upstream version 2.9.8

libxslt

updated to upstream version 1.1.32

monit

updated to upstream version 5.25.2

nano

updated to upstream version 2.9.8

pcre

updated to upstream version 8.42

perf

build a separate package based on kernel version 4.9.89 (which cross-compiles without errors)

rngtools

updated to upstream version 6.2

strace

updated to upstream version 4.23

strongswan

updated to upstream version 5.6.3

tinc

updated to upstream version 1.0.34

tor

updated to upstream version 0.3.3.7

wireless-regdb

updated to upstream version 2018.05.31

New Package

watchdog: full-featured system health checker and software/hardware watchdog handler

Changes between 6.1.3 and 6.1.3-rc1

(released 22 May 2018)

kernel

updated to upstream version 4.9.101

pmacctd

updated to upstream version 1.7.1

shorewall[6]

updated to upstream version 5.2.0.4

wget

updated to upstream version 1.19.5

Changes between 6.1.3-rc1 and 6.1.2

(released 9 May 2018)

toolchain

add gcc patch to mitigate Spectre_v2 as gcc 7.3 does for x86_64

uclibc-ng: add support for context functions

syslinux

updated to upstream version 6.03

kernel

updated to upstream version 4.9.98

accel-ppp

updated to trunk

bird

updated to upstream version 1.6.4

busybox

updated to upstream version 1.28.3

also removed workarounds for busybox 1.28.0 from root.linuxrc, apkg and upgrade

clamav

updated to upstream version 0.100.0

e2fsprogs

updated to upstream version 1.44.1

iptables

updated config files descriptions

libusb

updated to upstream version 1.0.22

lighttpd

updated to upstream version 1.4.49

nano

updated to upstream version 2.9.6

openldap

updated to upstream version 2.4.46

openssl

updated to upstream version 1.0.2.o

openvpn

udated to upstream version 2.4.6

pcre

updated to upstream version 8.41

perl

updated to upstream version 5.26.2

perl-cross updated to 1.1.9

shorewall[6]

updated to upstream version 5.2.0.2

tinc

fix stopping the tinc daemon (thx to leaf at pademelon.net for testing and help to get it fixed)

unbound

updated to upstrem version 1.7.1

New package

axel: new package HTTP/FTP accelerator

Changes between 6.1.2 and 6.1.2-rc2

(released 25 Mar 2018)

kernel

updated to upstream version 4.9.89

add hardware watchdog as module to armv8 toolchain

etc

add option to watchdog init to set the heartbeat and changed default to 14s (required by Raspberry Pi)

iw

updated to upstream version 4.14

libgpg-error

updated to upstream version 1.28

shorewall[6]

updated to upstream version 5.1.12.3

raspberry pi

add option to config.txt to disable harwdare watchdog in case of constant reboots

Changes between 6.1.2-rc2 and 6.1.2-rc1

(released 8 Mar 2018)

kernel

updated to upstream version 4.9.86

root

readd package with config file(s) only to make shure we are able to upgrade /root/.profile

change root/.profile to generate a .htpasswd for admin if webconf is installed and .htpasswd does not exist.

ca-certificates

updated to 20170717

clamav

updated to upstream version 0.99.4

curl

updated to upstream version 7.58.0

dropbear

updated to upstream version 2018.76

e2fsprogs

updated to upstream version 1.43.9

igmpproxy

updated to upstream version 0.2.1

keepalived

updated to upstream version 1.4.2

libnl3

updated to upstream version 3.4.0

libxml2

updated to upstream version 2.9.7

lighttpd

add an example configuration to access webconf with ssl encrypted https protocol

monit

updated to upstream version 5.25.1

nano

updated to upstream version 2.9.3

nsd

updated to upstream version 4.1.20

ntp

updated to upstream version 4.2.8p11

nut

updated to upstream version 2.7.4

shorewall[6]

updated to upstream version 5.1.12.1

sqlite

updated to upstream version 3.22.0

squid

updated to upstream version 3.5.27

strongswan

updated to upstream version 5.6.2

tor

updated to upstream version 0.3.2.10

vnstat

updated to upstream version 1.18

webconf

make shure we save the kernel in syslinux/linux when backing up software image (save.func)

remove default .htpasswd with empty password to improve security.

wget

updated to upstream version 1.19.4

Changes between 6.1.2-rc1 and 6.1.1

(released 24 Jan 2018)

kernel

updated to upstream version 4.9.77

bind

updated to upstream version 9.11.2-P1

busybox

updated to upstream version 1.28.0

clamav

fix build failure when system has pcre2

e2fsprogs

updated to upstream version 1.43.8

expat

updated to upstream version 2.2.5

igmpproxy

updated to upstream version 0.2 (incl. experimental support for igmpv3 clients)

ipset

updated to upstream version 6.35

keepalived

updated to upstream version 1.4.0

krb5

updated to upstream version 1.15.2

libconfuse

updated to upstream version 3.2.1

libgcrypt

updated to upstream version 1.8.2

(lib)readline

updated to upstream version 7.0

lighttpd

updated to upstream version 1.4.48

netatalk

updated to upstream version 3.1.11

nfs-utils

fix building against libtirpc

nsd

updated to upstream version 4.1.19

privoxy

updated to upstream version 3.0.26

shorewall[6]

updated to upstream version 5.1.11.1

sysstat

updated to upstream version 11.6.1

tinc

updated to upstream version 1.0.33

tor

updated to upstream version 0.3.2.9

ulogd

disable sqlite plugin

unbound

updated to upstream version 1.6.8

webconf

improved formatting of ssid in wpa.cgi info string

fixed bug in wpa.func which suppressed multiple space in ssid

wireless-regdb

updated to version 2017.12.23

New Package:

afpfs

AFPFS is a client implementation of the Apple Filing Protocol which can be used to access AFP shares exposed by multiple devices, notably Mac OS X computers, linux devices exporting shares with netatalk, Apple Airport and Time Capsule products as well as other NAS devices from various vendors.

Changes between 6.1.1 and 6.1.1-rc1

(released 11 Dec 2017)

kernel

updated to upstream version 4.9.68

curl

updated to upstream version 7.57.0

nettle

updated to upstream version 3.4

nano

updated to upstream version 2.9.1

openssl

updated to upstream version 1.0.2n

tor

updated to upstream version 0.3.1.9

webconf

fixed invalid shell comments in wpa.func

zlib

updated to upstream version 1.2.11

Changes between 6.1.1-rc1 and 6.1.0

(released 27 Nov 2017)

general

remove root.lrp from leaf.cfg and replace mhttpd with lighttpd

add patch to solve WEXITSTATUS 127 when running dhcpcd hooks (and probably other hidden issues).

apkg.merge: try to save file permission during merge

rpi

remove device_tree line from config.txt

kernel

updated to upstream version 4.9.65

add iwlmvm modules for i486/i686

bind

updated to upstream version 9.11.2

busybox

add stat applet

gcc

updated to upstream version 5.5.0

libxml2

updated to upstream version 2.9.6

libxslt

updated to upstream version 1.1.31

monit

updated to upstream version 5.25.0

nano

upated to upstream version 2.9.0

openssh

updated to upstream version 7.6p1

pciutils

updated to upstream version 3.5.6

refresh pci.ids.bz2 with latest

perl

package DIGEST::SHA

shorewall[6]

updated to upstream version 5.1.9

fix wrong order of source and destination in snat patch

fix shorewall.conf to set IP_FORWARDING=On

smartmon

updated smartmontools to upstream version 6.6

strongswan

updated to upstream version 5.6.1

New Packages:

liblogging

Liblogging offers an enhanced replacement for the syslog() call, but retains its ease of use. In a nutshell, it permits sytem administrators to direct application log output to different destinations without requiring the app developer to do any work for this.

libestr

Library for some string essentials.

Changes between 6.1.0 and 6.1.0-rc1

(released 29 Oct 2017)

kernel

updated to upstream version 4.9.59

iperf

updated to upstream version 2.0.10

libdigest-sha1-perl

fix cross-compiling perl module

Fixes failing to running shorewall on i486 and arm versions with error "SHA1.c: loadable library and perl binaries are mismatched..."

ndppd

updated to upstream version 0.2.5

oprofile

updated to upstream version 1.2.0

pmacctd

updated to upstream version 1.7.0

package additional daemons (nfacctd, sfacctd, pmtelemetryd, pmbmpd, pmbgpd)

tor

updated to upstream version 0.3.1.8

valgrind

updated to upstream version 3.13.0

Changes between 6.1.0-rc1 and 6.1.0-beta1

(released 15 Oct 2017)

kernel

updated to upstream version 4.9.54

busybox

updated to upstream version 1.27.2

e2fsprogs

updated to upstream version 1.43.6

keepalived

updated to upstream version 1.3.7

libpng

updated to upstream version 1.6.34

libxml2

updated to upstream version 2.9.5

nano

updated to upstream version 2.8.7

monit

updated to upstream version 5.24.0

openvpn

updated to upstream version 2.4.4

perl

updated to upstream version 5.26.1

perl-cross updated to 1.1.7

added File::Glob required by shorewall[6] 5.1.7

pptp

updated to upstream version 1.9.0

shorewall[6]

updated to upstream version 5.1.7.2

strongswan

updated to upstream version 5.6.0

tinc

updated to upstream version 1.0.32

tor

updated to upstream version 0.3.1.7

unbound

updated to upstream version 1.6.6

webconf

fixed missing blank space display in get_bridge_members in /var/webconf/lib/networking.func

Changes between 6.1.0-beta1 and 6.1.0-alpha2

(released 31 July 2017)

kernel

updated to upstream version 4.9.39

keep armv* versions (aka raspberry pi support) at 4.9.34

busybox

updated to upstream version 1.27.0

igmpproxy

improve init (use start-stop-daemon, create pidfile and add restart option)

keepalived

updated to upstream version 1.3.5

libtirpc

updated to upstream version 1.0.2

lighttpd

change config to use lighttpd as replacement for mini_httpd[s]

openvpn

updated to upstream version 2.4.3

perl

updated to upstream version 5.26.0

radius

updated to upstream version 2.2.10

screen

updated to upstream version 4.6.1

shorewall[6]

updated to upstream version 5.1.5

sqlite

updated to upstream version 3.19.03

strace

updated to upstream version 4.18

tor

updated to upstream version 0.3.0.9

vnstat[i]

adjust settings to work with lighttpd replacing mini_httpd[s]

webconf

various small fixes and improvements

New Package:

libndp

It contains a library which provides a wrapper for IPv6 Neighbor Discovery Protocol and a tool named ndptool for sending and receiving NDP messages.

Changes between 6.1.0-alpha2 and 6.1.0-alpha1

(released 18 June 2017)

general

uClibc-ng updated to upstream version 1.0.25

Add support for armv8a architecture aka Raspberry Pi 3 (and probably Raspberry Pi 2, though this hasn't been tested)

kernel

updated to version 4.9.33

disable built-in ixgbe

disable CONFIG_TRIM_UNUSED_KSYMS option (breaks 3rd-party modules)

re-add support for Raspberry Pi Model 1B

accel-ppp

update to 1.11.1, enable vlan_mon building

bird

update to 1.6.3

ca-certificates

move ca-certificates.crt from /etc/ssl/certs to /usr/share/ca-certicficates/mozilla

link /usr/share/ca-certicficates/mozilla/ca-certificates.crt to /etc/ssl/certs/ca-certificates.crt

Therefor ca-certificates.crt will not be saved in configdb.lrp (approx. 200kb) and will alleviate future updates of ca-certificates.

clamav

updated to upstream version 0.99.2

dhcpd

updated to upstream version 4.3.5 and added ldap support

iproute2

updated to upstream version 4.9.0

ixgbe

run depmod after module copying

kismet

updated to upstream version 2016-07-RC1

libnl3

updated to upstream version 3.3.0

minicom

updated to upstream version 2.7.1

monit

updated to upstream version 5.22.0

nfs-utils

updated to upstream version 1.3.4 (Note: Does currently fail on x86_64 images)

enabled nfsv4 support

disabled tcp-wrappers

openvpn

updated to upstream version 2.4.2

ser2net

updated to upstream version 3.4

shorewall[6]

updated to upstream version 5.1.4.1

strongswan

updated to upstream version 5.5.3

syslinux

replace mtools/syslinux with linux/syslinux, fixes codepage issues when installing syslinux

tinc

updated to upstream version 1.0.31

tor

updated to upstream version 0.3.0.8

New Packages:

libaio

Library for doing asynchronous I/O

libtirpc

The libtirpc package contains libraries that support programs that use the Remote Procedure Call (RPC) API.

rpcbind

The rpcbind program is a replacement for portmap. It is required for import or export of Network File System (NFS) shared directories.

sqlite

SQLite is a self-contained, high-reliability, embedded, full-featured, public-domain, SQL database engine; required for NFSv4 support.

Changes between 6.1.0-alpha1 and 6.0.0

(released 5 March 2017)

general

uClibc-ng updated to upstream version 1.0.22

replace full blown libiconv package (approx 650kb) with uClibc-ng 1.0.22 implementation of libiconv (adding a few kb to initrd).

initrd: merge root.lrp and config.lrp into initrd.lrp

update gcc to 5.4.0

update binutils to 2.27

kernel

updated to upstream version 4.9.13 (i486, i686 and x86_64 versions only)

improve building for architectures with device tree's

bmon

updated to upstream version 4.0

e2fsprogs

updated to upstream version 1.43.4

igb

updated to 5.3.5.4

krb5

updated to upstream version 1.15

libevent

updated to upstream version 2.1.8

lzo

updated to upstream version 2.10

monit

updated to upstream version 5.20.0

openvpn

updated to upstream version 2.4.0

ser2net

updated to upstream version 3.3

shorewall

updated to upstream version 5.1.1

NOTE: /etc/shorewall/masq has been replaced by /etc/shorewall/snat config file

Therefor you'll need to run "shorewall update" before reboot; have a look into the

eventual error messages and resolve issues, save the configuration before reboot.

After reboot remove /etc/shorewall/masq.bak and save the config again to get rid of that file.

sysstat

updated to upstream version 11.4.3

tor

updated to upstream version 0.2.9.10

unbound

updated to upstream version 1.6.0

usbmodeswitch

updated to upstream version 2.5.0

xtables-addons

updated to upstream version 2.12

New Packages:

ca-certificates

ca-certificates provides a list of Certification Authorities. It is based on the Debian package, which itself provides the ones from Mozilla (version 20161130)

dehydrated

ACME client implementation for Let's Encrypt (https://letsencrypt.org/)