Difference between revisions of "Bering-uClibc 6.1.x - Changelog"

From bering-uClibc
Jump to: navigation, search
(Changes between 6.1.5-rc1 and 6.1.4)
(Changes between 6.1.8 and 6.1.8-rc1)
 
(66 intermediate revisions by the same user not shown)
Line 7: Line 7:
 
|}
 
|}
 
----
 
----
 +
==Changes between 6.1.8 and 6.1.8-rc1==
 +
(released 11 Mar 2019)
 +
 +
;shorewall[6]-lite: fix packaging shorewall[6]-lite
 +
:fixes https://sourceforge.net/p/leaf/tickets/101/
 +
 +
==Changes between 6.1.8-rc1 and 6.1.7==
 +
(released 16 Feb 2019)
 +
 +
;kernel: updated to upstream version 4.9.158
 +
;accel-ppp: updatde to 1.11.2-latest
 +
;bird: updated to 1.6.5
 +
 +
==Changes between 6.1.7 and 6.1.7-rc1==
 +
(released 28 Jan 2019)
 +
 +
;kernel: updated to upstream version 4.9.153
 +
;initrd: support sha512sum for upgrades
 +
 +
==Changes between 6.1.7-rc1 and 6.1.6==
 +
(released 2 Jan 2019)
 +
 +
;kernel: updated to upstream version 4.9.148
 +
;libnetfilter_queue: updated to upstream version 1.0.3
 +
;libpng: updated to upstream version 1.6.36
 +
;lighttpd: updated to upstream version 1.4.52
 +
;nano: updated to upstream version 3.2
 +
;nettle: updated to upstream version 3.4.1
 +
;openssl: updated to upstream version 1.0.2q
 +
;pmacctd: updated to upstream version 1.7.2
 +
;usbmodeswitch: updated to upstream version 2.5.2
 +
;usbmodeswitchdata: updated to upstream version 20170806
 +
;wget: updated to upstream version 1.20.1
 +
 +
==Changes between 6.1.6 and 6.1.6-rc1==
 +
(released 29 Nov 2018)
 +
 +
;kernel: updated to upstream version 4.9.137
 +
;general: don't start procps twice during boot
 +
;bind: updated to upstream version 9.11.5
 +
;dhcpd: fix build with newer bind versions
 +
;dnsmasq: updated to upstream version 2.80
 +
;webconf: improve backup
 +
 +
==Changes between 6.1.6-rc1 and 6.1.5==
 +
(released 4 Nov 2018)
 +
 +
;kernel: updated to upstream version 4.9.135
 +
;initrd: handle time conflicts with signed packages in systems without a battery backed clock
 +
:inhibit apkg -u mode in upgrade silent mode
 +
:inhibit multiple instances of upgrade
 +
;bind: updated to upstream version 9.11.4-P2
 +
;bird: add hotfix for mtu from bird maillist
 +
;clamav: updated to upstream version 0.100.2
 +
;curl: updated to upstream version 7.62.0
 +
;iptables: updated ipt-ratelimit to upstream version 0.3
 +
;lighttpd: updated to upstream version 1.4.51
 +
;nano: updated to upstream version 3.1
 +
;ntp: updated to upstream version 4.2.8p12
 +
;squid: updated to upstream version 3.5.28
 +
:fix squid start and add squidclient to package
 +
;tinc: updated to upstream version  1.0.35
 +
;tinyproxy: updated to upstream version 1.8.4
 +
;webconf: attempt to integrate upgrade utility into webconf
 +
;wireguard: updated to version 20181007
 +
 +
==Changes between 6.1.5 and 6.1.5-rc1==
 +
(released 24 Sept 2018)
 +
 +
;kernel: updated to upstream version 4.9.128
 +
;initrd/upgrade: fix missing to fetch modules.sqfs
 +
;curl: updated to upstream version 7.61.1
 +
;libidn: updated to upstream version 1.35
 +
 
==Changes between 6.1.5-rc1 and 6.1.4==
 
==Changes between 6.1.5-rc1 and 6.1.4==
(unreleased)
+
(released 9 Sept 2018)
  
 +
;general:
 +
:initrd: major code cleanup, minor speedup and reworked to load packages with apkg. Set DEBUG and VERBOSE from the kernel command line in syslinux.cfg, alleviating debugging without needing to change initrd's source code and repackage initrd. Add gnupg to initrd.lrp and change apkg and upgrade to support signed packages in the future. Package libz libraries in initrd.
 
;kernel: updated to upstream version 4.9.125
 
;kernel: updated to upstream version 4.9.125
 
;bind: updated to upstream version 9.11.4-P1
 
;bind: updated to upstream version 9.11.4-P1
;expat: updated to upstream version 2.2.6  
+
;expat: updated to upstream version 2.2.6
 +
;gnupg: updated to upstream version 1.4.23
 +
;lighttpd: updated to upstream version 1.4.50
 
;ntp: Included /var/lib/ntp/ntp.drift in ntpd.local
 
;ntp: Included /var/lib/ntp/ntp.drift in ntpd.local
 
;openssl: updated to upstream version 1.0.2p
 
;openssl: updated to upstream version 1.0.2p
Line 18: Line 96:
 
;ser2net: updated to upstream version 3.5
 
;ser2net: updated to upstream version 3.5
 
;shorewall[6]: updated to upstream version 5.2.0.5
 
;shorewall[6]: updated to upstream version 5.2.0.5
 +
;New Package:
 +
:wireguard: an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography
 +
;Removed Package:
 +
:libz: now packaged in initrd.lrp
  
 
==Changes between 6.1.4 and 6.1.4-rc1==
 
==Changes between 6.1.4 and 6.1.4-rc1==
Line 23: Line 105:
  
 
;kernel: updated to upstream version 4.9.114
 
;kernel: updated to upstream version 4.9.114
;initrd: fix saving /root /root/.ssh etc.
+
;initrd: fix saving /root (/root/.ssh etc.)
 
;clamav: updated to upstream version 0.100.1
 
;clamav: updated to upstream version 0.100.1
 
;conntrack-tools: updated to upstream version 1.4.5
 
;conntrack-tools: updated to upstream version 1.4.5

Latest revision as of 18:05, 11 March 2019

Changelog
Bering-uClibc 6.x - Overview

Changes between 6.1.8 and 6.1.8-rc1

(released 11 Mar 2019)

shorewall[6]-lite
fix packaging shorewall[6]-lite
fixes https://sourceforge.net/p/leaf/tickets/101/

Changes between 6.1.8-rc1 and 6.1.7

(released 16 Feb 2019)

kernel
updated to upstream version 4.9.158
accel-ppp
updatde to 1.11.2-latest
bird
updated to 1.6.5

Changes between 6.1.7 and 6.1.7-rc1

(released 28 Jan 2019)

kernel
updated to upstream version 4.9.153
initrd
support sha512sum for upgrades

Changes between 6.1.7-rc1 and 6.1.6

(released 2 Jan 2019)

kernel
updated to upstream version 4.9.148
libnetfilter_queue
updated to upstream version 1.0.3
libpng
updated to upstream version 1.6.36
lighttpd
updated to upstream version 1.4.52
nano
updated to upstream version 3.2
nettle
updated to upstream version 3.4.1
openssl
updated to upstream version 1.0.2q
pmacctd
updated to upstream version 1.7.2
usbmodeswitch
updated to upstream version 2.5.2
usbmodeswitchdata
updated to upstream version 20170806
wget
updated to upstream version 1.20.1

Changes between 6.1.6 and 6.1.6-rc1

(released 29 Nov 2018)

kernel
updated to upstream version 4.9.137
general
don't start procps twice during boot
bind
updated to upstream version 9.11.5
dhcpd
fix build with newer bind versions
dnsmasq
updated to upstream version 2.80
webconf
improve backup

Changes between 6.1.6-rc1 and 6.1.5

(released 4 Nov 2018)

kernel
updated to upstream version 4.9.135
initrd
handle time conflicts with signed packages in systems without a battery backed clock
inhibit apkg -u mode in upgrade silent mode
inhibit multiple instances of upgrade
bind
updated to upstream version 9.11.4-P2
bird
add hotfix for mtu from bird maillist
clamav
updated to upstream version 0.100.2
curl
updated to upstream version 7.62.0
iptables
updated ipt-ratelimit to upstream version 0.3
lighttpd
updated to upstream version 1.4.51
nano
updated to upstream version 3.1
ntp
updated to upstream version 4.2.8p12
squid
updated to upstream version 3.5.28
fix squid start and add squidclient to package
tinc
updated to upstream version 1.0.35
tinyproxy
updated to upstream version 1.8.4
webconf
attempt to integrate upgrade utility into webconf
wireguard
updated to version 20181007

Changes between 6.1.5 and 6.1.5-rc1

(released 24 Sept 2018)

kernel
updated to upstream version 4.9.128
initrd/upgrade
fix missing to fetch modules.sqfs
curl
updated to upstream version 7.61.1
libidn
updated to upstream version 1.35

Changes between 6.1.5-rc1 and 6.1.4

(released 9 Sept 2018)

general
initrd: major code cleanup, minor speedup and reworked to load packages with apkg. Set DEBUG and VERBOSE from the kernel command line in syslinux.cfg, alleviating debugging without needing to change initrd's source code and repackage initrd. Add gnupg to initrd.lrp and change apkg and upgrade to support signed packages in the future. Package libz libraries in initrd.
kernel
updated to upstream version 4.9.125
bind
updated to upstream version 9.11.4-P1
expat
updated to upstream version 2.2.6
gnupg
updated to upstream version 1.4.23
lighttpd
updated to upstream version 1.4.50
ntp
Included /var/lib/ntp/ntp.drift in ntpd.local
openssl
updated to upstream version 1.0.2p
pciutils
updated to upstream version 3.6.2
ser2net
updated to upstream version 3.5
shorewall[6]
updated to upstream version 5.2.0.5
New Package
wireguard: an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography
Removed Package
libz: now packaged in initrd.lrp

Changes between 6.1.4 and 6.1.4-rc1

(released 27 July 2018)

kernel
updated to upstream version 4.9.114
initrd
fix saving /root (/root/.ssh etc.)
clamav
updated to upstream version 0.100.1
conntrack-tools
updated to upstream version 1.4.5
curl
updated to upstream version 7.61.0
e2fsprogs
updated to upstream version 1.44.3
iperf
updated to upstream version 2.0.12
libnetfilter_conntrack
updated to upstream version 1.0.7
libpam
updated to upstream version 1.3.1
rng-tools
updated to upstream version 6.3.1
tor
updated to upstream version 0.3.3.9

Changes between 6.1.4-rc1 and 6.1.3

(released 2 July 2018)

general/buildimage
move kernel from syslinux/isolinux directory to /(root), simplifies upgrade and running syslinux from a seperate partition
kernel
updated to upstream version 4.9.110
fix i386 kernels failing to mount ext4 formatted partitions
curl
updated to upstream version 7.60.0
dbus
updated to upstream version 1.10.26
e2fsprogs
updated to upstream version 1.44.2
etc
change printk defaults in sysctl.conf to remove some noise when booting and esp. mount modules from ext4
mark /lib/firmware as local (to store in configdb)
initrd
mark crontabs dir as local
irqbalance
updated to version 1.1.0
gnupg
updated to upstream version 1.4.22
keepalived
updated to upstream version 1.4.4
krb5
updated to upstream version 1.16.1
libgd
updated to upstream version 2.2.5
libgpgerror
updated to upstream version 1.31
libtirpc
updated to upstream version 1.0.3
libmxl2
updated to upstream version 2.9.8
libxslt
updated to upstream version 1.1.32
monit
updated to upstream version 5.25.2
nano
updated to upstream version 2.9.8
pcre
updated to upstream version 8.42
perf
build a separate package based on kernel version 4.9.89 (which cross-compiles without errors)
rngtools
updated to upstream version 6.2
strace
updated to upstream version 4.23
strongswan
updated to upstream version 5.6.3
tinc
updated to upstream version 1.0.34
tor
updated to upstream version 0.3.3.7
wireless-regdb
updated to upstream version 2018.05.31
New Package
watchdog: full-featured system health checker and software/hardware watchdog handler

Changes between 6.1.3 and 6.1.3-rc1

(released 22 May 2018)

kernel
updated to upstream version 4.9.101
pmacctd
updated to upstream version 1.7.1
shorewall[6]
updated to upstream version 5.2.0.4
wget
updated to upstream version 1.19.5

Changes between 6.1.3-rc1 and 6.1.2

(released 9 May 2018)

toolchain
add gcc patch to mitigate Spectre_v2 as gcc 7.3 does for x86_64
uclibc-ng: add support for context functions
syslinux
updated to upstream version 6.03
kernel
updated to upstream version 4.9.98
accel-ppp
updated to trunk
bird
updated to upstream version 1.6.4
busybox
updated to upstream version 1.28.3
also removed workarounds for busybox 1.28.0 from root.linuxrc, apkg and upgrade
clamav
updated to upstream version 0.100.0
e2fsprogs
updated to upstream version 1.44.1
iptables
updated config files descriptions
libusb
updated to upstream version 1.0.22
lighttpd
updated to upstream version 1.4.49
nano
updated to upstream version 2.9.6
openldap
updated to upstream version 2.4.46
openssl
updated to upstream version 1.0.2.o
openvpn
udated to upstream version 2.4.6
pcre
updated to upstream version 8.41
perl
updated to upstream version 5.26.2
perl-cross updated to 1.1.9
shorewall[6]
updated to upstream version 5.2.0.2
tinc
fix stopping the tinc daemon (thx to leaf at pademelon.net for testing and help to get it fixed)
unbound
updated to upstrem version 1.7.1
New package
axel: new package HTTP/FTP accelerator

Changes between 6.1.2 and 6.1.2-rc2

(released 25 Mar 2018)

kernel
updated to upstream version 4.9.89
add hardware watchdog as module to armv8 toolchain
etc
add option to watchdog init to set the heartbeat and changed default to 14s (required by Raspberry Pi)
iw
updated to upstream version 4.14
libgpg-error
updated to upstream version 1.28
shorewall[6]
updated to upstream version 5.1.12.3
raspberry pi
add option to config.txt to disable harwdare watchdog in case of constant reboots

Changes between 6.1.2-rc2 and 6.1.2-rc1

(released 8 Mar 2018)

kernel
updated to upstream version 4.9.86
root
readd package with config file(s) only to make shure we are able to upgrade /root/.profile
change root/.profile to generate a .htpasswd for admin if webconf is installed and .htpasswd does not exist.
ca-certificates
updated to 20170717
clamav
updated to upstream version 0.99.4
curl
updated to upstream version 7.58.0
dropbear
updated to upstream version 2018.76
e2fsprogs
updated to upstream version 1.43.9
igmpproxy
updated to upstream version 0.2.1
keepalived
updated to upstream version 1.4.2
libnl3
updated to upstream version 3.4.0
libxml2
updated to upstream version 2.9.7
lighttpd
add an example configuration to access webconf with ssl encrypted https protocol
monit
updated to upstream version 5.25.1
nano
updated to upstream version 2.9.3
nsd
updated to upstream version 4.1.20
ntp
updated to upstream version 4.2.8p11
nut
updated to upstream version 2.7.4
shorewall[6]
updated to upstream version 5.1.12.1
sqlite
updated to upstream version 3.22.0
squid
updated to upstream version 3.5.27
strongswan
updated to upstream version 5.6.2
tor
updated to upstream version 0.3.2.10
vnstat
updated to upstream version 1.18
webconf
make shure we save the kernel in syslinux/linux when backing up software image (save.func)
remove default .htpasswd with empty password to improve security.
wget
updated to upstream version 1.19.4

Changes between 6.1.2-rc1 and 6.1.1

(released 24 Jan 2018)

kernel
updated to upstream version 4.9.77
bind
updated to upstream version 9.11.2-P1
busybox
updated to upstream version 1.28.0
clamav
fix build failure when system has pcre2
e2fsprogs
updated to upstream version 1.43.8
expat
updated to upstream version 2.2.5
igmpproxy
updated to upstream version 0.2 (incl. experimental support for igmpv3 clients)
ipset
updated to upstream version 6.35
keepalived
updated to upstream version 1.4.0
krb5
updated to upstream version 1.15.2
libconfuse
updated to upstream version 3.2.1
libgcrypt
updated to upstream version 1.8.2
(lib)readline
updated to upstream version 7.0
lighttpd
updated to upstream version 1.4.48
netatalk
updated to upstream version 3.1.11
nfs-utils
fix building against libtirpc
nsd
updated to upstream version 4.1.19
privoxy
updated to upstream version 3.0.26
shorewall[6]
updated to upstream version 5.1.11.1
sysstat
updated to upstream version 11.6.1
tinc
updated to upstream version 1.0.33
tor
updated to upstream version 0.3.2.9
ulogd
disable sqlite plugin
unbound
updated to upstream version 1.6.8
webconf
improved formatting of ssid in wpa.cgi info string
fixed bug in wpa.func which suppressed multiple space in ssid
wireless-regdb
updated to version 2017.12.23

New Package:

afpfs
AFPFS is a client implementation of the Apple Filing Protocol which can be used to access AFP shares exposed by multiple devices, notably Mac OS X computers, linux devices exporting shares with netatalk, Apple Airport and Time Capsule products as well as other NAS devices from various vendors.

Changes between 6.1.1 and 6.1.1-rc1

(released 11 Dec 2017)

kernel
updated to upstream version 4.9.68
curl
updated to upstream version 7.57.0
nettle
updated to upstream version 3.4
nano
updated to upstream version 2.9.1
openssl
updated to upstream version 1.0.2n
tor
updated to upstream version 0.3.1.9
webconf
fixed invalid shell comments in wpa.func
zlib
updated to upstream version 1.2.11

Changes between 6.1.1-rc1 and 6.1.0

(released 27 Nov 2017)

general
remove root.lrp from leaf.cfg and replace mhttpd with lighttpd
add patch to solve WEXITSTATUS 127 when running dhcpcd hooks (and probably other hidden issues).
apkg.merge: try to save file permission during merge
rpi
remove device_tree line from config.txt
kernel
updated to upstream version 4.9.65
add iwlmvm modules for i486/i686
bind
updated to upstream version 9.11.2
busybox
add stat applet
gcc
updated to upstream version 5.5.0
libxml2
updated to upstream version 2.9.6
libxslt
updated to upstream version 1.1.31
monit
updated to upstream version 5.25.0
nano
upated to upstream version 2.9.0
openssh
updated to upstream version 7.6p1
pciutils
updated to upstream version 3.5.6
refresh pci.ids.bz2 with latest
perl
package DIGEST::SHA
shorewall[6]
updated to upstream version 5.1.9
fix wrong order of source and destination in snat patch
fix shorewall.conf to set IP_FORWARDING=On
smartmon
updated smartmontools to upstream version 6.6
strongswan
updated to upstream version 5.6.1

New Packages:

liblogging
Liblogging offers an enhanced replacement for the syslog() call, but retains its ease of use. In a nutshell, it permits sytem administrators to direct application log output to different destinations without requiring the app developer to do any work for this.
libestr
Library for some string essentials.

Changes between 6.1.0 and 6.1.0-rc1

(released 29 Oct 2017)

kernel
updated to upstream version 4.9.59
iperf
updated to upstream version 2.0.10
libdigest-sha1-perl
fix cross-compiling perl module
Fixes failing to running shorewall on i486 and arm versions with error "SHA1.c: loadable library and perl binaries are mismatched..."
ndppd
updated to upstream version 0.2.5
oprofile
updated to upstream version 1.2.0
pmacctd
updated to upstream version 1.7.0
package additional daemons (nfacctd, sfacctd, pmtelemetryd, pmbmpd, pmbgpd)
tor
updated to upstream version 0.3.1.8
valgrind
updated to upstream version 3.13.0

Changes between 6.1.0-rc1 and 6.1.0-beta1

(released 15 Oct 2017)

kernel
updated to upstream version 4.9.54
busybox
updated to upstream version 1.27.2
e2fsprogs
updated to upstream version 1.43.6
keepalived
updated to upstream version 1.3.7
libpng
updated to upstream version 1.6.34
libxml2
updated to upstream version 2.9.5
nano
updated to upstream version 2.8.7
monit
updated to upstream version 5.24.0
openvpn
updated to upstream version 2.4.4
perl
updated to upstream version 5.26.1
perl-cross updated to 1.1.7
added File::Glob required by shorewall[6] 5.1.7
pptp
updated to upstream version 1.9.0
shorewall[6]
updated to upstream version 5.1.7.2
strongswan
updated to upstream version 5.6.0
tinc
updated to upstream version 1.0.32
tor
updated to upstream version 0.3.1.7
unbound
updated to upstream version 1.6.6
webconf
fixed missing blank space display in get_bridge_members in /var/webconf/lib/networking.func

Changes between 6.1.0-beta1 and 6.1.0-alpha2

(released 31 July 2017)

kernel
updated to upstream version 4.9.39
keep armv* versions (aka raspberry pi support) at 4.9.34
busybox
updated to upstream version 1.27.0
igmpproxy
improve init (use start-stop-daemon, create pidfile and add restart option)
keepalived
updated to upstream version 1.3.5
libtirpc
updated to upstream version 1.0.2
lighttpd
change config to use lighttpd as replacement for mini_httpd[s]
openvpn
updated to upstream version 2.4.3
perl
updated to upstream version 5.26.0
radius
updated to upstream version 2.2.10
screen
updated to upstream version 4.6.1
shorewall[6]
updated to upstream version 5.1.5
sqlite
updated to upstream version 3.19.03
strace
updated to upstream version 4.18
tor
updated to upstream version 0.3.0.9
vnstat[i]
adjust settings to work with lighttpd replacing mini_httpd[s]
webconf
various small fixes and improvements

New Package:

libndp
It contains a library which provides a wrapper for IPv6 Neighbor Discovery Protocol and a tool named ndptool for sending and receiving NDP messages.

Changes between 6.1.0-alpha2 and 6.1.0-alpha1

(released 18 June 2017)

general
uClibc-ng updated to upstream version 1.0.25
Add support for armv8a architecture aka Raspberry Pi 3 (and probably Raspberry Pi 2, though this hasn't been tested)
kernel
updated to version 4.9.33
disable built-in ixgbe
disable CONFIG_TRIM_UNUSED_KSYMS option (breaks 3rd-party modules)
re-add support for Raspberry Pi Model 1B
accel-ppp
update to 1.11.1, enable vlan_mon building
bird
update to 1.6.3
ca-certificates
move ca-certificates.crt from /etc/ssl/certs to /usr/share/ca-certicficates/mozilla
link /usr/share/ca-certicficates/mozilla/ca-certificates.crt to /etc/ssl/certs/ca-certificates.crt
Therefor ca-certificates.crt will not be saved in configdb.lrp (approx. 200kb) and will alleviate future updates of ca-certificates.
clamav
updated to upstream version 0.99.2
dhcpd
updated to upstream version 4.3.5 and added ldap support
iproute2
updated to upstream version 4.9.0
ixgbe
run depmod after module copying
kismet
updated to upstream version 2016-07-RC1
libnl3
updated to upstream version 3.3.0
minicom
updated to upstream version 2.7.1
monit
updated to upstream version 5.22.0
nfs-utils
updated to upstream version 1.3.4 (Note: Does currently fail on x86_64 images)
enabled nfsv4 support
disabled tcp-wrappers
openvpn
updated to upstream version 2.4.2
ser2net
updated to upstream version 3.4
shorewall[6]
updated to upstream version 5.1.4.1
strongswan
updated to upstream version 5.5.3
syslinux
replace mtools/syslinux with linux/syslinux, fixes codepage issues when installing syslinux
tinc
updated to upstream version 1.0.31
tor
updated to upstream version 0.3.0.8

New Packages:

libaio
Library for doing asynchronous I/O
libtirpc
The libtirpc package contains libraries that support programs that use the Remote Procedure Call (RPC) API.
rpcbind
The rpcbind program is a replacement for portmap. It is required for import or export of Network File System (NFS) shared directories.
sqlite
SQLite is a self-contained, high-reliability, embedded, full-featured, public-domain, SQL database engine; required for NFSv4 support.

Changes between 6.1.0-alpha1 and 6.0.0

(released 5 March 2017)

general
uClibc-ng updated to upstream version 1.0.22
replace full blown libiconv package (approx 650kb) with uClibc-ng 1.0.22 implementation of libiconv (adding a few kb to initrd).
initrd: merge root.lrp and config.lrp into initrd.lrp
update gcc to 5.4.0
update binutils to 2.27
kernel
updated to upstream version 4.9.13 (i486, i686 and x86_64 versions only)
improve building for architectures with device tree's
bmon
updated to upstream version 4.0
e2fsprogs
updated to upstream version 1.43.4
igb
updated to 5.3.5.4
krb5
updated to upstream version 1.15
libevent
updated to upstream version 2.1.8
lzo
updated to upstream version 2.10
monit
updated to upstream version 5.20.0
openvpn
updated to upstream version 2.4.0
ser2net
updated to upstream version 3.3
shorewall
updated to upstream version 5.1.1
NOTE: /etc/shorewall/masq has been replaced by /etc/shorewall/snat config file
Therefor you'll need to run "shorewall update" before reboot; have a look into the
eventual error messages and resolve issues, save the configuration before reboot.
After reboot remove /etc/shorewall/masq.bak and save the config again to get rid of that file.
sysstat
updated to upstream version 11.4.3
tor
updated to upstream version 0.2.9.10
unbound
updated to upstream version 1.6.0
usbmodeswitch
updated to upstream version 2.5.0
xtables-addons
updated to upstream version 2.12

New Packages:

ca-certificates
ca-certificates provides a list of Certification Authorities. It is based on the Debian package, which itself provides the ones from Mozilla (version 20161130)
dehydrated
ACME client implementation for Let's Encrypt (https://letsencrypt.org/)

Up