Martin Petráček authored 7 years ago and Michal Hrusecky committed 7 years ago

iptables table mangle POSTROUTING/PREROUTING is not triggered for
traffic incoming to/outgoing from localhost, so CONNMARK was not set

this fix moves setting CONNMARK to filter:suricata table

Jan Pavlinec authored 7 years ago and Michal Hrusecky committed 7 years ago

CVE-2017-17434 - check for fnamecmp filenames in the daemon_filter_list data structure
and sanitize_paths protection mechanism to pathnames

This reverts commit bf348eb9.

New package for netmetr Python wrapper.
The rmbt client failed to start when encryption was disabled. The
reason was passing empty string as a program argument inthe wrapper.
The problem was fixed by modifying subprocess call.

New modules (filesystems, turris_version) and changes in updater and lshw modules

This reverts commit 354d9c8e.

This requires fix that is part of updater's new ordering algorithm and
wasn't released to public. So we just have to deal with some users
having problems with mitmproxy being explicitly requested.