Martin Petráček authored 7 years ago and Michal Hrusecky committed 7 years ago

iptables table mangle POSTROUTING/PREROUTING is not triggered for
traffic incoming to/outgoing from localhost, so CONNMARK was not set

this fix moves setting CONNMARK to filter:suricata table

Jan Pavlinec authored 7 years ago and Michal Hrusecky committed 7 years ago

CVE-2017-17434 - check for fnamecmp filenames in the daemon_filter_list data structure
and sanitize_paths protection mechanism to pathnames

This reverts commit bf348eb9.

New package for netmetr Python wrapper.
The rmbt client failed to start when encryption was disabled. The
reason was passing empty string as a program argument inthe wrapper.
The problem was fixed by modifying subprocess call.

New modules (filesystems, turris_version) and changes in updater and lshw modules