Development January 2021

development@lists.ipfire.org

18 participants
78 discussions

[PATCH] libgcrypt: Update to 1.9.1
by Matthias Fischer 30 Jan '21

30 Jan '21

For details - especially for this version - see: https://lists.gnupg.org/pipermail/gnupg-announce/2021q1/000456.html Overview: https://dev.gnupg.org/source/libgcrypt/browse/master/NEWS Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- config/rootfiles/common/libgcrypt | 2 +- lfs/libgcrypt | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/common/libgcrypt b/config/rootfiles/common/libgcrypt index b22708afa..63af7e6b1 100644 --- a/config/rootfiles/common/libgcrypt +++ b/config/rootfiles/common/libgcrypt @@ -6,7 +6,7 @@ #usr/lib/libgcrypt.la #usr/lib/libgcrypt.so usr/lib/libgcrypt.so.20 -usr/lib/libgcrypt.so.20.2.6 +usr/lib/libgcrypt.so.20.3.1 #usr/lib/pkgconfig/libgcrypt.pc #usr/share/aclocal/libgcrypt.m4 #usr/share/info/gcrypt.info diff --git a/lfs/libgcrypt b/lfs/libgcrypt index a89cc9156..a901c558f 100644 --- a/lfs/libgcrypt +++ b/lfs/libgcrypt @@ -24,7 +24,7 @@ include Config -VER = 1.8.6 +VER = 1.9.1 THISAPP = libgcrypt-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = e9dfc1e789a2a42f36917c543fcd7862 +$(DL_FILE)_MD5 = 8805f3e466af315222b6e1864f52b79a install : $(TARGET) -- 2.18.0

2 1

[PATCH] Postfix: update to 3.5.9
by Peter Müller 30 Jan '21

30 Jan '21

This release adds runtime detection of DNSSEC support; please refer to http://www.postfix.org/announcements/postfix-3.5.9.html for its full announcement. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/postfix | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/lfs/postfix b/lfs/postfix index 7160a0192..628704152 100644 --- a/lfs/postfix +++ b/lfs/postfix @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2020 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2021 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 3.5.8 +VER = 3.5.9 THISAPP = postfix-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = postfix -PAK_VER = 28 +PAK_VER = 29 DEPS = @@ -66,7 +66,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = c7c55ccc1db2a30d35c3867c21fe7109 +$(DL_FILE)_MD5 = a4d1b2df03a500cf8f9759d5fca1c1f6 install : $(TARGET) -- 2.26.2

1 0

[PATCH] dma: Update to 0.13
by Adolf Belka 30 Jan '21

30 Jan '21

- Update dma from 0.12 to 0.13 - No changelog information available - No change to the rootfile Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/dma | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/dma b/lfs/dma index aceb2704e..78bb6465f 100644 --- a/lfs/dma +++ b/lfs/dma @@ -24,7 +24,7 @@ include Config -VER = 0.12 +VER = 0.13 THISAPP = dma-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 58cb2a286995381c92dc557e639622d6 +$(DL_FILE)_MD5 = 8bf824b065295a594f399c8b96663673 install : $(TARGET) -- 2.30.0

4 6

[PATCH] logwatch: Update to 7.5.5
by Matthias Fischer 30 Jan '21

30 Jan '21

For details see: https://build.opensuse.org/package/view_file/server:monitoring/logwatch/Cha… Plus: deleted no longer need dhcpd-patch. Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/logwatch | 5 ++--- ...logwatch-7.5.4-dhcpd_reuse_lease_entries.patch | 15 --------------- 2 files changed, 2 insertions(+), 18 deletions(-) delete mode 100644 src/patches/logwatch/logwatch-7.5.4-dhcpd_reuse_lease_entries.patch diff --git a/lfs/logwatch b/lfs/logwatch index 0ad9a83f5..501903eda 100644 --- a/lfs/logwatch +++ b/lfs/logwatch @@ -24,7 +24,7 @@ include Config -VER = 7.5.4 +VER = 7.5.5 THISAPP = logwatch-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 47b35a8e5efc415b4a775415255b8d1f +$(DL_FILE)_MD5 = b658e4db27d905151396ecadcbcb24b1 install : $(TARGET) @@ -73,7 +73,6 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) cd $(DIR_APP) && sed -e "s/^TEMPDIR=.*/TEMPDIR=\"\/tmp\"/g" -i install_logwatch.sh cd $(DIR_APP)/lib && patch < $(DIR_SRC)/src/patches/logwatch/logwatch-7.3.6-date_manip6.patch - cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/logwatch/logwatch-7.5.4-dhcpd_reuse_lease_entries.patch cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/logwatch/logwatch-7.5.4-disable_iptables.patch cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/logwatch/logwatch-7.5.4-clamav_fix_unmatch_entries.patch diff --git a/src/patches/logwatch/logwatch-7.5.4-dhcpd_reuse_lease_entries.patch b/src/patches/logwatch/logwatch-7.5.4-dhcpd_reuse_lease_entries.patch deleted file mode 100644 index a66170ae5..000000000 --- a/src/patches/logwatch/logwatch-7.5.4-dhcpd_reuse_lease_entries.patch +++ /dev/null @@ -1,15 +0,0 @@ -diff --git a/scripts/services/dhcpd b/scripts/services/dhcpd -index 87312f7..bb5cd4c 100644 ---- a/scripts/services/dhcpd -+++ b/scripts/services/dhcpd -@@ -79,7 +79,9 @@ while (my $line = <STDIN>) { - ($line =~ /^Solicit message from/) or - ($line =~ /^Sending Advertise to/) or - ($line =~ /^pool [0-9a-f]+ /) or -- ($line =~ /^[^ ]* file: /) -+ ($line =~ /^[^ ]* file: /) or -+ ($line =~ /^reuse_lease: lease age \d+ $secs$ under \d+\% threshold, reply with unaltered, existing lease for/) or -+ 0 # noop, but makes diffs easier when appending ignore statements - ) { - # Ignore these lines - } elsif ($line =~ s/Listening on\s+//) { -- 2.18.0

1 0

[PATCH] knot: Update to 3.0.4
by Matthias Fischer 30 Jan '21

30 Jan '21

Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/knot | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/knot b/lfs/knot index d4b47ab25..39940a358 100644 --- a/lfs/knot +++ b/lfs/knot @@ -24,7 +24,7 @@ include Config -VER = 3.0.3 +VER = 3.0.4 THISAPP = knot-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 96db8b271ab8c54dd8d4f69a480a71c5 +$(DL_FILE)_MD5 = c0a546927ff50db153893de43758cb37 install : $(TARGET) -- 2.18.0

1 0

[PATCH] knot: Cosmetic changes in lfs
by Matthias Fischer 30 Jan '21

30 Jan '21

Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/knot | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/lfs/knot b/lfs/knot index 8a3288cdf..d4b47ab25 100644 --- a/lfs/knot +++ b/lfs/knot @@ -73,13 +73,13 @@ $(subst %,%_MD5,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar Jxf $(DIR_DL)/$(DL_FILE) - cd $(DIR_APP) && ./configure \ - --prefix=/usr \ - --enable-static=no \ - --disable-fastparser \ - --disable-daemon \ - --disable-modules \ - --enable-maxminddb=no \ + cd $(DIR_APP) && ./configure \ + --prefix=/usr \ + --enable-static=no \ + --disable-fastparser \ + --disable-daemon \ + --disable-modules \ + --enable-maxminddb=no \ --disable-documentation cd $(DIR_APP)/src && make $(MAKETUNING) kdig -- 2.18.0

1 0

[PATCH] dbus: Update to 1.12.20
by Adolf Belka 29 Jan '21

29 Jan '21

- Update dbus from 1.11.12 to 1.12.20 (latest in release line 1.13.x is also available but this is the development line and not recommended for production use - Changelog between these two versions is very long (750 lines long) and can be found in the NEWS file in the source tarball. - rootfile updated Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/packages/dbus | 2 +- lfs/dbus | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/config/rootfiles/packages/dbus b/config/rootfiles/packages/dbus index 219676841..abcb6c695 100644 --- a/config/rootfiles/packages/dbus +++ b/config/rootfiles/packages/dbus @@ -41,7 +41,7 @@ usr/bin/dbus-uuidgen #usr/lib/libdbus-1.la usr/lib/libdbus-1.so usr/lib/libdbus-1.so.3 -usr/lib/libdbus-1.so.3.16.4 +usr/lib/libdbus-1.so.3.19.13 #usr/lib/pkgconfig/dbus-1.pc usr/libexec/dbus-daemon-launch-helper #usr/share/dbus-1 diff --git a/lfs/dbus b/lfs/dbus index f1fbdade4..06431b4b5 100644 --- a/lfs/dbus +++ b/lfs/dbus @@ -24,7 +24,7 @@ include Config -VER = 1.11.12 +VER = 1.12.20 THISAPP = dbus-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = dbus -PAK_VER = 2 +PAK_VER = 3 DEPS = @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 76cdf92ca208652ee487b1e9dfda1093 +$(DL_FILE)_MD5 = dfe8a71f412e0b53be26ed4fbfdc91c4 install : $(TARGET) -- 2.30.0

1 0

[PATCH] freetype: update to 2.10.4
by Peter Müller 29 Jan '21

29 Jan '21

This fixes a heap buffer overflow in the handling of embedded PNG bitmaps (CVE-2020-15999). Further information is available at https://sourceforge.net/projects/freetype/files/freetype2/2.10.4/ . Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- config/rootfiles/common/freetype | 10 ++++------ lfs/freetype | 6 +++--- 2 files changed, 7 insertions(+), 9 deletions(-) diff --git a/config/rootfiles/common/freetype b/config/rootfiles/common/freetype index 4d72ec357..194253601 100644 --- a/config/rootfiles/common/freetype +++ b/config/rootfiles/common/freetype @@ -7,15 +7,16 @@ #usr/include/freetype2/freetype/config/ftmodule.h #usr/include/freetype2/freetype/config/ftoption.h #usr/include/freetype2/freetype/config/ftstdlib.h +#usr/include/freetype2/freetype/config/integer-types.h +#usr/include/freetype2/freetype/config/mac-support.h +#usr/include/freetype2/freetype/config/public-macros.h #usr/include/freetype2/freetype/freetype.h #usr/include/freetype2/freetype/ftadvanc.h -#usr/include/freetype2/freetype/ftautoh.h #usr/include/freetype2/freetype/ftbbox.h #usr/include/freetype2/freetype/ftbdf.h #usr/include/freetype2/freetype/ftbitmap.h #usr/include/freetype2/freetype/ftbzip2.h #usr/include/freetype2/freetype/ftcache.h -#usr/include/freetype2/freetype/ftcffdrv.h #usr/include/freetype2/freetype/ftchapters.h #usr/include/freetype2/freetype/ftcid.h #usr/include/freetype2/freetype/ftcolor.h @@ -47,20 +48,17 @@ #usr/include/freetype2/freetype/ftsynth.h #usr/include/freetype2/freetype/ftsystem.h #usr/include/freetype2/freetype/fttrigon.h -#usr/include/freetype2/freetype/ftttdrv.h #usr/include/freetype2/freetype/fttypes.h #usr/include/freetype2/freetype/ftwinfnt.h #usr/include/freetype2/freetype/t1tables.h #usr/include/freetype2/freetype/ttnameid.h #usr/include/freetype2/freetype/tttables.h #usr/include/freetype2/freetype/tttags.h -#usr/include/freetype2/freetype/ttunpat.h #usr/include/freetype2/ft2build.h -#usr/lib/libfreetype.a #usr/lib/libfreetype.la #usr/lib/libfreetype.so usr/lib/libfreetype.so.6 -usr/lib/libfreetype.so.6.17.2 +usr/lib/libfreetype.so.6.17.4 #usr/lib/pkgconfig/freetype2.pc #usr/share/aclocal/freetype2.m4 #usr/share/man/man1/freetype-config.1 diff --git a/lfs/freetype b/lfs/freetype index 4106d22ee..b9a385d88 100644 --- a/lfs/freetype +++ b/lfs/freetype @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2021 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 2.10.2 +VER = 2.10.4 THISAPP = freetype-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 7c0d5a39f232d7eb9f9d7da76bf08074 +$(DL_FILE)_MD5 = 0e6c0e9b218be3ba3e26e1d23b1c80dd install : $(TARGET) -- 2.26.2

2 1

[PATCH] libloc: ship a more recent database by default
by Peter Müller 29 Jan '21

29 Jan '21

The database we ship by default is meanwhile four weeks old, and since the merge window for Core Update 154 is still open, there is no need to ship data being more outdated than they have to be. :-) Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/libloc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/libloc b/lfs/libloc index 279840535..170261e42 100644 --- a/lfs/libloc +++ b/lfs/libloc @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2020 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2021 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -25,7 +25,7 @@ include Config VER = 0.9.5 -DB_DATE = 2020-12-23 +DB_DATE = 2021-01-27 THISAPP = libloc-$(VER) DL_FILE = $(THISAPP).tar.gz -- 2.26.2

2 3

[PATCH] ipset: Update to 7.10
by Adolf Belka 28 Jan '21

28 Jan '21

- Update ipset from 7.6 to 7.10 - Changelog 7.10 Kernel part changes Fix patch "Handle false warning from -Wstringop-overflow" Backward compatibility: handle renaming nla_strlcpy to nla_strscpy treewide: rename nla_strlcpy to nla_strscpy. (Francis Laniel) netfilter: ipset: fix shift-out-of-bounds in htable_bits() (Vasily Averin) netfilter: ipset: fixes possible oops in mtype_resize (Vasily Averin) Handle false warning from -Wstringop-overflow Backward compatibility: handle missing strscpy with a wrapper of strlcpy. Move compiler specific compatibility support to separated file (broken compatibility support reported by Ed W) 7.9 Userspace changes Fix library versioning (Jan Engelhardt) 7.8 Kernel part changes Complete backward compatibility fix for package copy of <linux/jhash.h> Compatibility: check for kvzalloc() and GFP_KERNEL_ACCOUNT netfilter: ipset: enable memory accounting for ipset allocations (Vasily Averin) netfilter: ipset: prevent uninit-value in hash_ip6_add (Eric Dumazet) Compatibility: use skb_policy() from if_vlan.h if available Compatibility: Check for the fourth arg of list_for_each_entry_rcu() Backward compatibility fix for the package copy of <linux/jhash.h> 7.7 Userspace changes Expose the initval hash parameter to userspace Handle all variable header parts in helper scripts instead ot test tasks Add bucketsize parameter to all hash types Support the -exist flag with the destroy command Kernel part changes Expose the initval hash parameter to userspace Add bucketsize parameter to all hash types Use fallthrough pseudo-keyword in the package copy of too Support the -exist flag with the destroy command netfilter: Use fallthrough pseudo-keyword (Gustavo A. R. Silva) netfilter: Replace zero-length array with flexible-array member (Gustavo A. R. Silva) netfilter: ipset: call ip_set_free() instead of kfree() (Eric Dumazet) netfiler: ipset: fix unaligned atomic access (Russell King) netfilter: ipset: Fix subcounter update skip (Phil Sutter) ipset: Update byte and packet counters regardless of whether they match (Stefano Brivio) netfilter: ipset: Pass lockdep expression to RCU lists (Amol Grover) ip_set: Fix compatibility with kernels between v3.3 and v4.5 (Serhey Popovych) ip_set: Fix build on kernels without INIT_DEFERRABLE_WORK (Serhey Popovych) ipset: Support kernels with at least system_wq support ip_set: Fix build on kernels without system_power_efficient_wq (Serhey Popovych) - Rootfiles updated Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/ipset | 2 +- lfs/ipset | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/common/ipset b/config/rootfiles/common/ipset index b3fcb640b..84703391f 100644 --- a/config/rootfiles/common/ipset +++ b/config/rootfiles/common/ipset @@ -21,7 +21,7 @@ etc/ipset #usr/lib/libipset.la #usr/lib/libipset.so usr/lib/libipset.so.13 -usr/lib/libipset.so.13.1.0 +usr/lib/libipset.so.13.2.0 #usr/lib/pkgconfig/libipset.pc usr/sbin/ipset #usr/share/man/man3/libipset.3 diff --git a/lfs/ipset b/lfs/ipset index 1f6f47d2a..65d5cdc59 100644 --- a/lfs/ipset +++ b/lfs/ipset @@ -24,7 +24,7 @@ include Config -VER = 7.6 +VER = 7.10 THISAPP = ipset-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = e107b679c3256af795261cece864d6d9 +$(DL_FILE)_MD5 = 1f500b5300184964cbacc3cbca6e5bb1 install : $(TARGET) -- 2.30.0

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development January 2021