Commit Graph

11 Commits

Author SHA1 Message Date
Peter Müller
9a7e4d8506 Switch checksums from MD5 to BLAKE2
Historically, the MD5 checksums in our LFS files serve as a protection
against broken downloads, or accidentally corrupted source files.

While the sources are nowadays downloaded via HTTPS, it make sense to
beef up integrity protection for them, since transparently intercepting
TLS is believed to be feasible for more powerful actors, and the state
of the public PKI ecosystem is clearly not helping.

Therefore, this patch switches from MD5 to BLAKE2, updating all LFS
files as well as make.sh to deal with this checksum algorithm. BLAKE2 is
notably faster (and more secure) than SHA2, so the performance penalty
introduced by this patch is negligible, if noticeable at all.

In preparation of this patch, the toolchain files currently used have
been supplied with BLAKE2 checksums as well on
https://source.ipfire.org/.

Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremeripfire.org>
2022-04-02 14:19:25 +00:00
Michael Tremer
e35e1ca14b cpio: Package won't build with GCC 10 without -fcommon
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-08-16 10:29:42 +00:00
Matthias Fischer
01493f7a44 cpio: Update to 2.13
For details see:
https://www.gnu.org/software/cpio/

Fix CVE-2015-1197
Fix CVE-2016-2037
Fix CVE-2019-14866

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-12-02 17:10:15 +00:00
Peter Müller
eee037b890 update disclaimer in LFS files
Most of these files still used old dates and/or domain names for contact
mail addresses. This is now replaced by an up-to-date copyright line.

Just some housekeeping... :-)

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-09-10 19:20:36 +01:00
Michael Tremer
42661bf875 cpio: Update to 2.12
FTBFS on aarch64

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-05-18 11:54:08 +01:00
Michael Tremer
f4cb450fcf cpio: Update to 2.11. 2010-07-22 11:52:52 +02:00
ms
f81407fddb A big collection of build errors...
git-svn-id: http://svn.ipfire.org/svn/ipfire/trunk@1035 ea5c0bd1-69bd-2848-81d8-4f18e57aeed8
2007-10-30 19:18:49 +00:00
maniacikarus
34273fd05a Forgot to change the md5
update l7protocols


git-svn-id: http://svn.ipfire.org/svn/ipfire/trunk@1031 ea5c0bd1-69bd-2848-81d8-4f18e57aeed8
2007-10-29 20:20:29 +00:00
maniacikarus
c268e9f208 Updated e2fsprogs postfix dhcpd dhcp fetchmail httpd cpio lame
git-svn-id: http://svn.ipfire.org/svn/ipfire/trunk@1029 ea5c0bd1-69bd-2848-81d8-4f18e57aeed8
2007-10-29 19:57:41 +00:00
ms
70df830214 Ein Paar Dateien fuer die GPLv3 angepasst.
git-svn-id: http://svn.ipfire.org/svn/ipfire/trunk@853 ea5c0bd1-69bd-2848-81d8-4f18e57aeed8
2007-08-29 13:25:32 +00:00
ms
ad9d4caf99 Ramdisk-Arbeit nahezu beendet.
git-svn-id: http://svn.ipfire.org/svn/ipfire/trunk@451 ea5c0bd1-69bd-2848-81d8-4f18e57aeed8
2007-03-19 20:25:01 +00:00