Nagy Károly Gábriel
26d9249133
libgcrypt: Updated (1.6.2 -> 1.6.3)
10 years ago
Nagy Károly Gábriel
4bf18ff982
firehol: Updated (2.0.0 -> 2.0.3)
10 years ago
Nagy Karoly Gabriel
06b33406dc
firehol: Added firehol 2.0.0 - An iptables stateful packet filtering firewall
10 years ago
Nagy Karoly Gabriel
3e7815fcdd
libgcrypt: Updated (1.5.3 -> 1.6.2)
10 years ago
Nagy Karoly Gabriel
ca18802181
libgpg-error: Updated (1.12 -> 1.17) also updated pkgconfig.patch
10 years ago
Nagy Karoly Gabriel
ed72a660d6
vserver: Updated (2.3.6.13 -> 2.3.7.3)
10 years ago
Nagy Karoly Gabriel
879991d3c5
openssl: Updated (1.0.1j -> 1.0.1k) SECURITY! See note.
...
This update solves eight security issues namingly:
1. DTLS segmentation fault in dtls1_get_record (CVE-2014-3571)
2. DTLS memory leak in dtls1_buffer_record (CVE-2015-0206)
3. no-ssl3 configuration sets method to NULL (CVE-2014-3569)
4. ECDHE silently downgrades to ECDH [Client] (CVE-2014-3572)
5. RSA silently downgrades to EXPORT_RSA [Client] (CVE-2015-0204)
6. DH client certificates accepted without verification [Server] (CVE-2015-0205)
7. Certificate fingerprints can be modified (CVE-2014-8275)
8. Bignum squaring may produce incorrect results (CVE-2014-3570)
URL for this Security Advisory:
https://www.openssl.org/news/secadv_20150108.txt
10 years ago
Nagy Karoly Gabriel
58a90ab362
gnutls: Updated (3.2.12.1 -> 3.2.20) SECURITY! (CVE-2014-8564)
10 years ago
Nagy Karoly Gabriel
ec8aa8cb36
dropbear: Updated (2014.65 -> 2014.66)
10 years ago
Nagy Karoly Gabriel
a4c83c11e6
openssl: Updated (1.0.1i -> 1.0.1j) SECURITY! (CVE-2014-3513)
...
also (CVE-2014-3567) and (CVE-2014-3568) and other
non security bugfixes.
10 years ago
Nagy Karoly Gabriel
90a54a2acd
openssh: Updated (6.6p1 -> 6.7p1) See note!
...
NOTE:
This update mitigates the following security issue:
http://seclists.org/fulldisclosure/2014/Oct/35
also it contains updates that make it potentially
incompatible with previous versions, namingly:
Potentially-incompatible changes
* sshd(8): The default set of ciphers and MACs has been altered to
remove unsafe algorithms. In particular, CBC ciphers and arcfour*
are disabled by default.
The full set of algorithms remains available if configured
explicitly via the Ciphers and MACs sshd_config options.
* sshd(8): Support for tcpwrappers/libwrap has been removed.
* OpenSSH 6.5 and 6.6 have a bug that causes ~0.2% of connections
using the curve25519-sha256@libssh.org KEX exchange method to fail
when connecting with something that implements the specification
correctly. OpenSSH 6.7 disables this KEX method when speaking to
one of the affected versions.
10 years ago
Nagy Karoly Gabriel
725bc61f78
vserver: removed typo hotfix patch.
...
The patch is not obsolete as the typo that it fixes is still there
but the whole code gets disabled if CONFIG_USER_NS is set to n which
is a requirement for the vserver patch.
10 years ago
Nagy Karoly Gabriel
f5ca8678ec
vserver: added a typo hotfix and forcefuly disabled CONFIG_USER_NS.
10 years ago
Nagy Karoly Gabriel
25e8cea005
dropbear: Updated (2014.64 -> 2014.65)
...
Also remade the scp install Makefile patch.
10 years ago
Nagy Karoly Gabriel
87dc3e9e01
dropbear: Updated (2014.63 -> 2014.64)
10 years ago
Nagy Karoly Gabriel
9579f320eb
arptables: Updated (0.0.3-4 -> 0.0.4)
10 years ago
Nagy Karoly Gabriel
de2a77dede
vserver: Updated (2.3.6.8 -> 2.3.6.13)
10 years ago
Alejandro Mery
dcda944461
cyrus-sasl2: Updated (2.1.22 -> 2.1.25)
10 years ago
Alejandro Mery
1ba83af33b
heimdal: don't download tag archives
10 years ago
Alejandro Mery
e005071123
openssl: Updated (1.0.1h -> 1.0.1i) [SECURITY]
...
https://www.openssl.org/news/secadv_20140806.txt
* CVE-2014-3505
* CVE-2014-3506
* CVE-2014-3507
* CVE-2014-3508
* CVE-2014-3509
* CVE-2014-3510
* CVE-2014-3511
* CVE-2014-3512
* CVE-2014-5139
Signed-off-by: Alejandro Mery <amery@geeks.cl>
10 years ago
Nagy Karoly Gabriel
53e58da362
util-vserver: Updated (0.30.216-pre3038 -> 0.30.216-pre3062)
11 years ago
Nagy Karoly Gabriel
c8732ec59f
vserver: Updated kernel patch (3.10.37-vs2.3.6.8 -> 3.10.43-vs2.3.6.8)
11 years ago
Nagy Karoly Gabriel
b890d78497
openssl: Updated (1.0.1g -> 1.0.1h) multiple security issues.
...
http://www.openssl.org/news/secadv_20140605.txt
11 years ago
Christian Wiese
f0c41d39f5
util-vserver: fixed shell scripts to not used getopt --long but -l
11 years ago
Christian Wiese
16cab7c752
ebtables: changed to use system kernel headers instead of the included ones
11 years ago
Christian Wiese
8c59745a02
ebtables: fixed installation when cross-compiling when DESTDIR is effective
11 years ago
Christian Wiese
59b04f6301
libprelude: fixed to build against gnutls 3.2.x
11 years ago
Christian Wiese
71525de3c5
vserver: Updated kernel patch (3.10.33-vs2.3.6.8 -> 3.10.37-vs2.3.6.8)
11 years ago
Nagy Karoly Gabriel
1d92510f5d
fail2ban: Updated (0.8.12 -> 0.9.0)
11 years ago
Nagy Karoly Gabriel
d0c22accac
openssh: Updated (6.2p2 -> 6.6p1)
11 years ago
Christian Wiese
24599ca39a
cryptsetup: Updated (1.6.3 -> 1.6.4)
...
Because Google doesn't provide any download capabilities for projects hosted
on google code, the downloads are provided on kernel.org servers now.
11 years ago
Christian Wiese
2e20b57df3
openssl: Updated (1.0.1f -> 1.0.1g) SECURITY! CVE-2014-0160
...
This fixes the TLS heartbeat read overrun (CVE-2014-0160) vulnerability
References:
[1] https://www.openssl.org/news/secadv_20140407.txt
[2] http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-0160
11 years ago
Christian Wiese
f3719e7d11
gnupg: Updated (1.4.14 -> 1.4.16)
11 years ago
Christian Wiese
9efb6aadb6
gnutls: Updated (2.12.23 -> 3.2.12.1)
11 years ago
Christian Wiese
617fd93779
nettle: Updated (2.4 -> 2.7)
11 years ago
Christian Wiese
856e6349fa
vserver: updated kernel patch (3.10.27-vs2.3.6.8 -> patch-3.10.33-vs2.3.6.8)
11 years ago
Christian Wiese
39c85e3fbb
beecrypt: fixed to build and install python modules when cross-compiling
11 years ago
Christian Wiese
1c48bb6846
heimdal: add patch to use an available libcom_err provided by the system when cross-compiling
11 years ago
Christian Wiese
e2dfa6122a
heimdal: add patch to use an pre-installed slc from the build host toolchain when cross-compiling
11 years ago
Christian Wiese
f5316ff364
heimdal: fixed to only install krb5.conf when not at toolchain stage and to properly use $root
11 years ago
Christian Wiese
7d11f056b5
heimdal: changed to use custmain for toolchain build and also build slc
11 years ago
Christian Wiese
4dc34e6ff3
heimdal: added bugfix patch for the roken-h-process.pl script
11 years ago
Christian Wiese
227243a52e
heimdal: added toolchain patch so the tools get installed into bindir
11 years ago
Christian Wiese
07b56c5e10
heimdal: changed to build minimal tools like asn1_compile at toolchain stage
...
asn1_compile is needed at stage 1 when cross-compiling.
11 years ago
Christian Wiese
66aeac3e09
heimdal: Updated (1.5.2 -> 1.5.3)
11 years ago
Christian Wiese
eb9b27cb1c
heimdal: Updated (1.3.3 -> 1.5.2)
11 years ago
Christian Wiese
8b255bb1f1
krb5: improved to cross-compile if requested by the target
11 years ago
Christian Wiese
8b6107c665
krb5: Updated (1.10.7 -> 1.12.1)
11 years ago
Christian Wiese
0fe430aa6d
krb5: Updated (1.10.2 -> 1.10.7)
11 years ago
Nagy Karoly Gabriel
ec96cb697e
dropbear: Updated (2013.62 -> 2014.63)
11 years ago