Skip to content
Snippets Groups Projects
  1. Feb 20, 2018
  2. Feb 19, 2018
  3. Feb 18, 2018
    • Kevin Darbyshire-Bryant's avatar
      dnsmasq: bump to 2.79rc1 · 16245a5d
      Kevin Darbyshire-Bryant authored
      
      1721453 Remove special handling of A-for-A queries.
      499d8dd Fix boundary for test introduced in 3e3f1029c9ec6c63e430ff51063a6301d4b2262
      6f1cbfd Fix debian/readme typo.
      55ecde7 Inotify: Ignore backup files created by editors
      6b54d69 Make failure to chown() pidfile a warning.
      246a31c Change ownership of pid file, to keep systemd happy.
      83e4b73 Remove confusion between --user and --script-user.
      6340ca7 Tweak heuristic for initial DNSSEC memory allocation.
      baf553d Default min-port to 1024 to avoid reserved ports.
      486bcd5 Simplify and correct bindtodevice().
      be9a74d Close Debian bug for CVE-2017-15107.
      ffcbc0f Example config typo fixes.
      a969ba6 Special case NSEC processing for root DS record, to avoid spurious BOGUS.
      f178172 Add homepage to Debian control file.
      cd7df61 Fix DNSSEC validation errors introduced in 4fe6744a220eddd3f1749b40cac3dfc510787de6
      c1a4e25 Try to be a little more clever at falling back to smaller DNS packet sizes.
      4fe6744 DNSSEC fix for wildcard NSEC records. CVE-2017-15107 applies.
      3bd4c47 Remove limit on length of command-line options.
      98196c4 Typo fix.
      22cd860  Allow more than one --bridge-interface option to refer to an interface.
      3c973ad Use SIGINT (instead of overloading SIGHUP) to turn on DNSSEC time validation.
      faaf306 Spelling fixes.
      c7e6aea Change references to gPXE to iPXE. Development of EtherBoot gPXE was always development of iPXE core developer Michael Brown.
      e541245 Handle duplicate RRs in DNSSEC validation.
      84a01be Bump year in Debian copyright notice.
      d1ced3a Update copyrights to 2018.
      a6cee69 Fix exit code from dhcp_release6.
      0039920 Severely fix code formating of contrib/lease-tools/dhcp_release6.c
      39d8550 Run Debian startup regex in "C" locale.
      ef3d137 Fix infinite retries in strict-order mode.
      8c707e1 Make 373e91738929a3d416e6292e65824184ba8428a6 compile without DNSSEC.
      373e917 Fix a6004d7f17687ac2455f724d0b57098c413f128d to cope with >256 RRs in answer section.
      74f0f9a Commment language tweaks.
      ed6bdb0 Man page typos.
      c88af04 Modify doc.html to mention git-over-http is now available.
      ae0187d Fix trust-anchor regexp in Debian init script.
      0c50e3d Bump version in Debian package.
      075366a Open inotify socket only when used.
      8e8b2d6 Release notes update.
      087eb76 Always return a SERVFAIL response to DNS queries with RD=0.
      ebedcba Typo in printf format string added in 22dee512f3738f87539a79aeb52b9e670b3bd104
      0954a97 Remove RSA/MD5 DNSSEC algorithm.
      b77efc1 Tidy DNSSEC algorithm table use.
      3b0cb34 Fix manpage which said ZSK but meant KSK.
      aa6f832 Add a few DNS RRs to the table.
      ad9c6f0 Add support for Ed25519 DNSSEC signature algorithm.
      a6004d7 Fix caching logic for validated answers.
      c366717 Tidy up add_resource_record() buffer size checks.
      22dee51 Log DNS server max packet size reduction.
      6fd5d79 Fix logic on EDNS0 headers.
      9d6918d Use IP[V6]_UNICAST_IF socket option instead of SO_BINDTODEVICE for DNS.
      a49c5c2 Fix search_servers() segfault with DNSSEC.
      30858e3 Spaces in CNAME options break parsing.
      
      Refresh patches.
      Remove upstreamed patches:
      	250-Fix-infinite-retries-in-strict-order-mode.patch
      	260-dnssec-SIGINT.patch
      	270-dnssec-wildcards.patch
      
      Signed-off-by: default avatarKevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
      16245a5d
    • Hauke Mehrtens's avatar
      brcm2708: Fix compile after adding kernel 4.9.82 · 47c54150
      Hauke Mehrtens authored
      
      Fixes: f621b539 ("kernel: bump 4.9 to 4.9.82")
      Signed-off-by: default avatarHauke Mehrtens <hauke@hauke-m.de>
      47c54150
    • Hauke Mehrtens's avatar
      x86: Use kernel 4.14 by default · b377a908
      Hauke Mehrtens authored
      
      Support for kernel 4.14 was added 2 months ago, make it now the default
      kernel to use for the x86 target.
      
      Signed-off-by: default avatarHauke Mehrtens <hauke@hauke-m.de>
      Tested-by: default avatarStijn Segers <francesco.borromini@inventati.org>
      b377a908
    • Stijn Tintel's avatar
      kernel: add missing config symbols · ae42e7c0
      Stijn Tintel authored
      
      They were introduced for arm64 in 4.14.20.
      
      Fixes: 88ba4145 ("kernel: bump 4.14 to 4.14.20")
      
      Signed-off-by: default avatarStijn Tintel <stijn@linux-ipv6.be>
      ae42e7c0
    • John Crispin's avatar
      kernel: add missing symbol · 761d45eb
      John Crispin authored
      
      this caused v4.14.20 based builds so fail on aarch64
      
      Signed-off-by: default avatarJohn Crispin <john@phrozen.org>
      761d45eb
    • Stijn Tintel's avatar
      kernel: bump 4.9 to 4.9.82 · f621b539
      Stijn Tintel authored
      
      Refresh patches.
      Remove upstreamed patches:
      - ar7/002-MIPS-AR7-ensure-the-port-type-s-FCR-value-is-used.patch
      - backport/040-crypto-fix-typo-in-KPP-dependency-of-CRYPTO_ECDH.patch
      Remove layerscape/819-Revert-dmaengine-dmatest-move-callback-wait-queue-to.patch,
      it is superseded by upstream commit 297c7cc4b5651b174a62925b6c961085f04979fd.
      Remove pending/650-pppoe_header_pad.patch, it is superseded by
      upstream commit 1bd21b158e07e0b8c5a2ce832305a0ebfe42c480.
      Update patches that no longer apply:
      - ar71xx/004-register_gpio_driver_earlier.patch
      - hack/204-module_strip.patch
      - pending/493-ubi-set-ROOT_DEV-to-ubiblock-rootfs-if-unset.patch
      
      Fixes CVE-2017-8824.
      
      Compile-tested: ar71xx.
      Runtime-tested: ar71xx.
      
      Signed-off-by: default avatarStijn Tintel <stijn@linux-ipv6.be>
      f621b539
Loading