Show patches with: Submitter = Peter Müller       |   697 patches
« 1 2 3 4 … 6 7 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
Core Update 168: Hard-code kernel version to 5.15.35 Core Update 168: Hard-code kernel version to 5.15.35 - - - --- 2022-05-12 Peter Müller Rejected
Do not permit world-readability of /etc/sudoers.d/ Do not permit world-readability of /etc/sudoers.d/ - 1 - --- 2022-04-30 Peter Müller Accepted
sysctl: Use strict Reverse Path Filtering sysctl: Use strict Reverse Path Filtering - 1 - --- 2022-04-30 Peter Müller Accepted
Tor: Update to 0.4.7.7 Tor: Update to 0.4.7.7 - 1 - --- 2022-04-29 Peter Müller Accepted
linux-firmware: Update to 20220411 linux-firmware: Update to 20220411 - - - --- 2022-04-23 Peter Müller Accepted
mcelog: Update to 181 mcelog: Update to 181 - - - --- 2022-04-23 Peter Müller Accepted
libseccomp: Update to 2.5.4 libseccomp: Update to 2.5.4 - - - --- 2022-04-23 Peter Müller Dropped
Postfix: Update to 3.7.1 Postfix: Update to 3.7.1 - - - --- 2022-04-23 Peter Müller Accepted
lynis: Update to 3.0.7 lynis: Update to 3.0.7 - 1 - --- 2022-04-18 Peter Müller Accepted
[3/3] SSH: do not send spoofable TCP keep alive messages [1/3] OpenSSH: Update to 9.0p1 - - - --- 2022-04-18 Peter Müller Accepted
[2/3] SSH: Add sntrup761x25519-sha512@openssh.com key exchange to configurations [1/3] OpenSSH: Update to 9.0p1 - - - --- 2022-04-18 Peter Müller Accepted
[1/3] OpenSSH: Update to 9.0p1 [1/3] OpenSSH: Update to 9.0p1 - - - --- 2022-04-18 Peter Müller Accepted
efibootmgr: Update to 17 efibootmgr: Update to 17 - 1 - --- 2022-04-18 Peter Müller Accepted
firewall/sysctl: Make Reverse Path Forwarding mode configurable firewall/sysctl: Make Reverse Path Forwarding mode configurable - - - --- 2022-04-18 Peter Müller Superseded
Core Update 167: Replace /etc/mtab by symlink to /proc/self/mounts Core Update 167: Replace /etc/mtab by symlink to /proc/self/mounts - - - --- 2022-04-11 Peter Müller Accepted
[3/3] backupiso: Change checksum algorithm to BLAKE2 [1/3] downloadsource.sh: Change checksum algorithm to BLAKE2 - - - --- 2022-04-08 Peter Müller Accepted
[2/3] installer: Update translation message [1/3] downloadsource.sh: Change checksum algorithm to BLAKE2 - - - --- 2022-04-08 Peter Müller Accepted
[1/3] downloadsource.sh: Change checksum algorithm to BLAKE2 [1/3] downloadsource.sh: Change checksum algorithm to BLAKE2 - - - --- 2022-04-08 Peter Müller Accepted
nginx: Update to 1.20.2 nginx: Update to 1.20.2 - - - --- 2022-04-05 Peter Müller Accepted
haproxy: Update to 2.4.15 haproxy: Update to 2.4.15 - 1 - --- 2022-04-04 Peter Müller Accepted
smartmontools: Update to 7.3 smartmontools: Update to 7.3 - 1 - --- 2022-04-04 Peter Müller Accepted
update ca-certificates CA bundle update ca-certificates CA bundle - - - --- 2022-04-02 Peter Müller Accepted
kernel: Update to 5.15.32 kernel: Update to 5.15.32 - - - --- 2022-04-02 Peter Müller Accepted
Drop rfkill Drop rfkill - - - --- 2022-03-31 Peter Müller Accepted
Tor: Pick up upstream patch for fixing sandbox with glibc >= 2.34 Tor: Pick up upstream patch for fixing sandbox with glibc >= 2.34 - - - --- 2022-03-31 Peter Müller Accepted
zlib: Update to 1.2.12 zlib: Update to 1.2.12 - - - --- 2022-03-31 Peter Müller Accepted
backup: Include proxy.pac backup: Include proxy.pac - - - --- 2022-03-24 Peter Müller Accepted
zlib: Pick up upstream patch for memory corruption fix zlib: Pick up upstream patch for memory corruption fix - 1 - --- 2022-03-24 Peter Müller Accepted
module-init-tools: Delete orphaned LFS file module-init-tools: Delete orphaned LFS file - - - --- 2022-03-23 Peter Müller Accepted
firewall: Fix placement of HOSTILE chains firewall: Fix placement of HOSTILE chains - 1 - --- 2022-03-23 Peter Müller Accepted
Switch checksums from MD5 to BLAKE2 Switch checksums from MD5 to BLAKE2 1 - - --- 2022-03-23 Peter Müller Accepted
Nmap: Update to 7.92 Nmap: Update to 7.92 - 1 - --- 2022-03-21 Peter Müller Accepted
Core Update 166: Introduce new 2022 Pakfire key Core Update 166: Introduce new 2022 Pakfire key - - - --- 2022-03-21 Peter Müller Accepted
strongSwan: Update to 5.9.5 strongSwan: Update to 5.9.5 - 1 - --- 2022-03-21 Peter Müller Accepted
Core Update 166: Perform spring clean of orphaned files Core Update 166: Perform spring clean of orphaned files - - - --- 2022-03-21 Peter Müller Accepted
Core Update 166: Drop orphaned convert-ovpn script Core Update 166: Drop orphaned convert-ovpn script - - - --- 2022-03-21 Peter Müller Accepted
Core Update 166: Drop old 2007 Pakfire key, and remove it from existing installations Core Update 166: Drop old 2007 Pakfire key, and remove it from existing installations 1 - - --- 2022-03-21 Peter Müller Accepted
psmisc: Update to 23.4 psmisc: Update to 23.4 - - - --- 2022-03-20 Peter Müller Accepted
connections.cgi: Update links to SANS ISC connections.cgi: Update links to SANS ISC - - - --- 2022-03-20 Peter Müller Accepted
libseccomp: Bump package version libseccomp: Bump package version - - - --- 2022-03-20 Peter Müller Accepted
Core Update 165: Restart Squid during the update Core Update 165: Restart Squid during the update - - - --- 2022-03-20 Peter Müller Rejected
[11/11] Kernel: Update rootfile for x86_64 Kernel: Improve hardening - - - --- 2022-03-19 Peter Müller Dropped
[10/11] Kernel: Disable function and stack tracers Kernel: Improve hardening - - - --- 2022-03-19 Peter Müller Rejected
[09/11] Kernel: Enable SVA support for both Intel and AMD CPUs Kernel: Improve hardening 1 - - --- 2022-03-19 Peter Müller Accepted
[08/11] Kernel: Do not automatically load TTY line disciplines, only if necessary Kernel: Improve hardening - - - --- 2022-03-19 Peter Müller Accepted
[07/11] Kernel: Trigger BUG if data corruption is detected Kernel: Improve hardening - - - --- 2022-03-19 Peter Müller Rejected
[06/11] Kernel: Enable LSM support and set security level to "integrity" Kernel: Improve hardening - 1 - --- 2022-03-19 Peter Müller Accepted
[05/11] Kernel: Gate SETID transitions to limit CAP_SET(G|U)ID capabilities Kernel: Improve hardening - - - --- 2022-03-19 Peter Müller Rejected
[04/11] Kernel: Enable undefined behaviour sanity checker Kernel: Improve hardening - - - --- 2022-03-19 Peter Müller Rejected
[03/11] Kernel: Pin loading kernel files to one filesystem Kernel: Improve hardening - - - --- 2022-03-19 Peter Müller Rejected
[02/11] Kernel: Disable support for tracing block I/O actions Kernel: Improve hardening - 1 - --- 2022-03-19 Peter Müller Accepted
[01/11] Kernel: Set CONFIG_ARCH_MMAP_RND_BITS to 32 bits Kernel: Improve hardening - 1 - --- 2022-03-19 Peter Müller Accepted
Drop orphaned ovpn-ccd-convert script Drop orphaned ovpn-ccd-convert script - 1 - --- 2022-03-19 Peter Müller Accepted
[2/2] iptables: Do not ship libxt_ddcp.so [1/2] iproute2: Do not ship /sbin/tipc - 1 - --- 2022-03-19 Peter Müller Dropped
[1/2] iproute2: Do not ship /sbin/tipc [1/2] iproute2: Do not ship /sbin/tipc - 1 - --- 2022-03-19 Peter Müller Dropped
[v2] Core Update 165: Rename squid-accounting add-on to proxy-accounting [v2] Core Update 165: Rename squid-accounting add-on to proxy-accounting - - - --- 2022-03-05 Peter Müller Accepted
dracut: Update to 056 dracut: Update to 056 - - - --- 2022-03-03 Peter Müller Superseded
Postfix: Update to 3.7.0 Postfix: Update to 3.7.0 - - - --- 2022-03-02 Peter Müller Accepted
Tor: Update to 0.4.6.10 Tor: Update to 0.4.6.10 - - - --- 2022-03-02 Peter Müller Accepted
update ca-certificates CA bundle update ca-certificates CA bundle - - - --- 2022-03-02 Peter Müller Accepted
Core Update 165: Rename squid-accounting add-on to proxy-accounting Core Update 165: Rename squid-accounting add-on to proxy-accounting - - - --- 2022-02-28 Peter Müller Superseded
cleanfs: Clear /var/tmp on boot as well cleanfs: Clear /var/tmp on boot as well - - - --- 2022-02-27 Peter Müller Rejected
firewall: Add proper logging prefix for conntrack INVALID hits firewall: Add proper logging prefix for conntrack INVALID hits - - - --- 2022-02-17 Peter Müller Accepted
libloc: Update to 0.9.10 libloc: Update to 0.9.10 - - - --- 2022-02-16 Peter Müller Accepted
make.sh: SIGKILL and SIGSTOP cannot be trapped make.sh: SIGKILL and SIGSTOP cannot be trapped - 1 - --- 2022-02-16 Peter Müller Accepted
[v2] Kernel: Block non-UID-0 profiling completely [v2] Kernel: Block non-UID-0 profiling completely - - 1 --- 2022-02-11 Peter Müller Accepted
firewall: Ensure the xt_geoip module is always loaded firewall: Ensure the xt_geoip module is always loaded - - - --- 2022-01-30 Peter Müller Rejected
OpenSSL: Update to 1.1.1m OpenSSL: Update to 1.1.1m - 1 - --- 2022-01-30 Peter Müller Accepted
Kernel: Block non-UID-0 profiling completely Kernel: Block non-UID-0 profiling completely - - 1 --- 2022-01-30 Peter Müller Rejected
sysctl.conf: Enable Loose Reverse Path Filter according to RFC 3704 sysctl.conf: Enable Loose Reverse Path Filter according to RFC 3704 - - - --- 2022-01-16 Peter Müller Accepted
index.cgi: Display a warning if the last Core Update was installed more than 90 days ago index.cgi: Display a warning if the last Core Update was installed more than 90 days ago 1 1 - --- 2022-01-15 Peter Müller Dropped
pciutils: Update to 3.7.0 pciutils: Update to 3.7.0 - - - --- 2022-01-14 Peter Müller Accepted
libusb: Update to 1.0.24 libusb: Update to 1.0.24 - - - --- 2022-01-14 Peter Müller Accepted
make.sh: Clarify options need to come before the actual command make.sh: Clarify options need to come before the actual command - 1 - --- 2022-01-09 Peter Müller Accepted
Collectd: Stop tracking rtorrent, asterisk, java, and spamd processes Collectd: Stop tracking rtorrent, asterisk, java, and spamd processes - 1 - --- 2022-01-08 Peter Müller Accepted
[2/2] Core Update 163: Ship relevant changes of linux-firmware [1/2] linux-firmware: Update to 20211216 - - - --- 2022-01-04 Peter Müller Accepted
[1/2] linux-firmware: Update to 20211216 [1/2] linux-firmware: Update to 20211216 - - - --- 2022-01-04 Peter Müller Accepted
kmod: Update to 29 kmod: Update to 29 - 1 - --- 2022-01-04 Peter Müller Accepted
Tor: update to 0.4.6.9 Tor: update to 0.4.6.9 - 1 - --- 2021-12-18 Peter Müller Accepted
[11/11] configroot: Drop traffic from and to hostile networks by default firewall: Introduce DROP_HOSTILE and improve spoofing logging/protection - - - --- 2021-12-18 Peter Müller Accepted
[10/11] configroot: Enable logging of spoofed packets/martians by default firewall: Introduce DROP_HOSTILE and improve spoofing logging/protection - - - --- 2021-12-18 Peter Müller Accepted
[09/11] graphs.pl: Display spoofed and hostile traffic in firewall hits diagram as well firewall: Introduce DROP_HOSTILE and improve spoofing logging/protection - - - --- 2021-12-18 Peter Müller Accepted
[08/11] collectd.conf: Keep track of DROP_{HOSTILE,SPOOFED_MARTIAN} firewall: Introduce DROP_HOSTILE and improve spoofing logging/protection - - - --- 2021-12-18 Peter Müller Accepted
[07/11] Update German and English translation files firewall: Introduce DROP_HOSTILE and improve spoofing logging/protection - - - --- 2021-12-18 Peter Müller Accepted
[06/11] optionsfw.cgi: Make logging of spoofed/martians packets and the DROP_HOSTILE filter configu… firewall: Introduce DROP_HOSTILE and improve spoofing logging/protection - - - --- 2021-12-18 Peter Müller Accepted
[05/11] firewall: Introduce DROP_HOSTILE firewall: Introduce DROP_HOSTILE and improve spoofing logging/protection - - - --- 2021-12-18 Peter Müller Accepted
[04/11] firewall: Prevent spoofing our own RED IP address firewall: Introduce DROP_HOSTILE and improve spoofing logging/protection - - - --- 2021-12-18 Peter Müller Accepted
[03/11] firewall: Log and drop spoofed loopback packets firewall: Introduce DROP_HOSTILE and improve spoofing logging/protection - - - --- 2021-12-18 Peter Müller Accepted
[02/11] firewall: Accept inbound Tor traffic before applying the location filter firewall: Introduce DROP_HOSTILE and improve spoofing logging/protection - - - --- 2021-12-18 Peter Müller Accepted
[01/11] firewall: Log packets dropped due to conntrack INVALID state firewall: Introduce DROP_HOSTILE and improve spoofing logging/protection - - - --- 2021-12-18 Peter Müller Accepted
update ca-certificates CA bundle update ca-certificates CA bundle - 1 - --- 2021-12-18 Peter Müller Accepted
libloc: Update to 0.9.9 libloc: Update to 0.9.9 - 1 - --- 2021-12-13 Peter Müller Accepted
[RFC] Core Update 163: Abort update.sh in case an uninitialised variable is found [RFC] Core Update 163: Abort update.sh in case an uninitialised variable is found - - - --- 2021-12-03 Peter Müller Rejected
Core Update 161: fix typo (stronswan != strongswan) Core Update 161: fix typo (stronswan != strongswan) - - - --- 2021-10-26 Peter Müller Accepted
strongSwan: update to 5.9.4 strongSwan: update to 5.9.4 - - - --- 2021-10-23 Peter Müller Accepted
Remove orphaned ddns patches Remove orphaned ddns patches - - - --- 2021-10-23 Peter Müller Accepted
Coreutils: update to 9.0 Coreutils: update to 9.0 - - - --- 2021-10-23 Peter Müller Accepted
Core Update 161: Delete shared object files leftover from pppd 2.4.8 Core Update 161: Delete shared object files leftover from pppd 2.4.8 - - - --- 2021-10-23 Peter Müller Accepted
squid-asnbl: update to 0.2.3 squid-asnbl: update to 0.2.3 - - - --- 2021-10-18 Peter Müller Accepted
proxy.cgi: Fix translation string mix-up proxy.cgi: Fix translation string mix-up - - - --- 2021-10-10 Peter Müller Accepted
« 1 2 3 4 … 6 7 »