Development May 2022

development@lists.ipfire.org

11 participants
84 discussions

[PATCH] sqlite: Update to version 3380500
by Adolf Belka 30 May '22

30 May '22

- Update from version 3380300 to 3380500 - Update of rootfile not required - Changelog Version 3.38.5 The 3.38.4 patch release included a minor change to the CLI source code that did not work. The release manager only ran a subset of the normal release tests, and hence did not catch the problem. As a result, the CLI will segfault when using columnar output modes in version 3.38.4. This blunder did not affect the core SQLite library. It only affected the CLI. Take-away lesson: Always run all of your tests prior to a release - even a trival patch release. Always. The 3.38.5 patch release fixes the 3.38.4 blunder. Version 3.38.4 Another user-discovered problem in the new Bloom filter optimization is fixed in this patch release. Without the fix, it is possible for a multi-way join that uses a Bloom filters for two or more tables in the join to enter an infinite loop if the key constraint on one of those tables contains a NULL value. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/sqlite | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/sqlite b/lfs/sqlite index 076943280..4f6d5ad06 100644 --- a/lfs/sqlite +++ b/lfs/sqlite @@ -24,7 +24,7 @@ include Config -VER = 3380300 +VER = 3380500 THISAPP = sqlite-autoconf-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 35271246a27597ce88b4eaa1ff483b42421371737b5fe357eb6d2ad1d9c543b2d60341f7ee63f7dc95e374f61c539a607472b53881027c843b0da07704dd200f +$(DL_FILE)_BLAKE2 = 546db2fddfc065ddb5d0f232456a79d6a582cd98acfe7c1c8e0f53311906f70d47d89dfabfdb52c9c261202931b97d84b5fd238f70e6539522e56a57c03036b3 install : $(TARGET) -- 2.36.0

2 1

[PATCH] gdb: Update to version 12.1
by Adolf Belka 30 May '22

30 May '22

- Update from version 11.2 to 12.1 - Update of rootfile - Changelog GDB 12.1 Released! This version of GDB includes the following changes and enhancements: New support for the following native configuration: GNU/Linux/OpenRISC or1k*-*-linux* New support for the following targets: GNU/Linux/LoongArch loongarch*-*-linux* New GDBserver support on the following configuration: GNU/Linux/OpenRISC or1k*-*-linux* Support for the following target has been removed: S+core score-*-* Multithreaded symbol loading is now enabled by default Deprecation Notices: GDB 12 is the last release of GDB that will support building against Python 2 DBX mode is deprecated, and will be removed in GDB 13 GDB/MI changes: The '-add-inferior' with no option flags now inherits the connection of the current inferior, this restores the behaviour of GDB as it was prior to GDB 10. The '-add-inferior' command now accepts a '--no-connection' option, which causes the new inferior to start without a connection. Python API enhancements: It is now possible to add GDB/MI commands implemented in Python New function gdb.Architecture.integer_type() New gdb.events.gdb_exiting event New 'gdb.events.connection_removed' event registry New gdb.TargetConnection object New gdb.Inferior.connection property New read-only attribute gdb.InferiorThread.details New gdb.RemoteTargetConnection.send_packet method New read-only attributes gdb.Type.is_scalar and gdb.Type.is_signed The gdb.Value.format_string method now takes a 'styling' argument Various new function in the "gdb" module Miscellaneous: The FreeBSD native target now supports async mode Improved C++ template support Support for disabling source highlighting through GNU of the Pygments library instead. The "print" command has been changed so as to print floating-point values with a base-modifying formats such as "/x" to display the underlying bytes of the value in the desired base. The "clone-inferior" command now ensures that the TTY, CMD and ARGS settings are copied from the original inferior to the new one. All modifications to the environment variables done using the 'set environment' or 'unset environment' commands are also copied to the new inferior. Various new commands have been introduced GDB 11.2 Released! This is a minor corrective release over GDB 11.1, fixing the following issues: PR sim/28302 (gdb fails to build with glibc 2.34) PR build/28318 (std::thread support configure check does not use CXX_DIALECT) PR gdb/28405 (arm-none-eabi: internal-error: ptid_t remote_target::select_thread_for_ambiguous_stop_reply(const target_waitstatus*): Assertion `first_resumed_thread != nullptr' failed) PR tui/28483 ([gdb/tui] breakpoint creation not displayed) PR build/28555 (uclibc compile failure since commit 4655f8509fd44e6efabefa373650d9982ff37fd6) PR rust/28637 (Rust characters will be encoded using DW_ATE_UTF) PR gdb/28758 (GDB 11 doesn't work correctly on binaries with a SHT_RELR (.relr.dyn) section) PR gdb/28785 (Support SHT_RELR (.relr.dyn) section) Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/gdb | 5 ++--- lfs/gdb | 4 ++-- 2 files changed, 4 insertions(+), 5 deletions(-) diff --git a/config/rootfiles/common/gdb b/config/rootfiles/common/gdb index 4c91357ec..e1f87549e 100644 --- a/config/rootfiles/common/gdb +++ b/config/rootfiles/common/gdb @@ -4,9 +4,6 @@ #usr/bin/gdbserver #usr/include/gdb #usr/include/gdb/jit-reader.h -#usr/include/sim -#usr/include/sim/callback.h -#usr/include/sim/sim.h #usr/lib/libinproctrace.so #usr/share/gdb #usr/share/gdb/python @@ -34,6 +31,7 @@ #usr/share/gdb/python/gdb/printer/bound_registers.py #usr/share/gdb/python/gdb/printing.py #usr/share/gdb/python/gdb/prompt.py +#usr/share/gdb/python/gdb/styling.py #usr/share/gdb/python/gdb/types.py #usr/share/gdb/python/gdb/unwinder.py #usr/share/gdb/python/gdb/xmethod.py @@ -58,6 +56,7 @@ #usr/share/gdb/system-gdbinit/elinos.py #usr/share/gdb/system-gdbinit/wrs-linux.py #usr/share/info/annotate.info +#usr/share/info/ctf-spec.info #usr/share/info/gdb.info #usr/share/info/gdb.info-1 #usr/share/info/gdb.info-2 diff --git a/lfs/gdb b/lfs/gdb index e8d4f90e3..f36e52c8c 100644 --- a/lfs/gdb +++ b/lfs/gdb @@ -24,7 +24,7 @@ include Config -VER = 11.2 +VER = 12.1 THISAPP = gdb-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 66ce7e12c99c33c8b4e6ababa673204aab525e72c90ba54cc34a5fd69948a09dc2a9ef2050764b2464544231b1d1a6431279c2877388551ca6fbf384a3f9b464 +$(DL_FILE)_BLAKE2 = 7f6f853d1640908cf2c79932cdc1ba02549a07721c005d9c7ce2946a715761719cc164a4e68235a18664ec8a029afe3a2a0cfb57e1635f280076d6bed91317fd install : $(TARGET) -- 2.36.1

2 1

[PATCH] xfsprogs: Update to version 5.16.0
by Adolf Belka 30 May '22

30 May '22

- Update from 5.14.2 to 5.16.0 - Update of rootfile - Changelog 5.16.0 This release is almost 100% a libxfs sync. I'm trying to catch up, and the next release will be 5.18.0-rc0, with both 5.17 and 5.18 libxfs changes synced. (there are very few). At that point I'll finally start pulling in more functional changes. xfsprogs-5.16.0 (04 May 2022) - libxfs: remove kernel stubs from xfs_shared.h (Eric Sandeen) - debian: Generate .gitcensus instead of .census (Bastian Germann)) xfsprogs-5.16.0-rc0 (28 Apr 2022) - libxfs changes merged from kernel 5.16 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/xfsprogs | 7 +++++++ lfs/xfsprogs | 4 ++-- 2 files changed, 9 insertions(+), 2 deletions(-) diff --git a/config/rootfiles/common/xfsprogs b/config/rootfiles/common/xfsprogs index de76ca0db..fab8b67cb 100644 --- a/config/rootfiles/common/xfsprogs +++ b/config/rootfiles/common/xfsprogs @@ -103,3 +103,10 @@ usr/sbin/xfs_spaceman #usr/share/man/man8/xfs_scrub.8 #usr/share/man/man8/xfs_scrub_all.8 #usr/share/man/man8/xfs_spaceman.8 +#usr/share/xfsprogs +#usr/share/xfsprogs/mkfs +#usr/share/xfsprogs/mkfs/dax_xxxMACHINExxx.conf +#usr/share/xfsprogs/mkfs/lts_4.19.conf +#usr/share/xfsprogs/mkfs/lts_5.10.conf +#usr/share/xfsprogs/mkfs/lts_5.15.conf +#usr/share/xfsprogs/mkfs/lts_5.4.conf diff --git a/lfs/xfsprogs b/lfs/xfsprogs index bbff6d701..fb2047800 100644 --- a/lfs/xfsprogs +++ b/lfs/xfsprogs @@ -24,7 +24,7 @@ include Config -VER = 5.14.2 +VER = 5.16.0 THISAPP = xfsprogs-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 04083bf7952015d64f16e1aec0fa74be1957543e2264914f69defe45a3dc9f2524d941abc064a25a2fd760ebd6dcdcdc2404fd305e08fff7f6be6c5fc11d4d2f +$(DL_FILE)_BLAKE2 = da328fe0c146a7b8ba866c5872f26ce95010939e05da51c73ed6374f00474605a81f4a822d65b60a132a4de47fff286e9f5f1ac809c1aa29420633f573b61aef install : $(TARGET) -- 2.36.0

2 1

[PATCH] lzip: Update to version 1.23
by Adolf Belka 30 May '22

30 May '22

- Update from 1.22 to 1.23 - Update of rootfile not required - Changelog Version 1.23 released. * Decompression time has been reduced by 5-12% depending on the file. * main.cc (getnum): Show option name and valid range if error. * Improve several descriptions in manual, '--help', and man page. * lzip.texi: Change GNU Texinfo category to 'Compression'. (Reported by Alfred M. Szmidt). Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/lzip | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/lzip b/lfs/lzip index 93b566b31..f539494d3 100644 --- a/lfs/lzip +++ b/lfs/lzip @@ -24,7 +24,7 @@ include Config -VER = 1.22 +VER = 1.23 THISAPP = lzip-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -45,7 +45,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = d6d4faaff981d64219e27364c7072f9e1309507220e80d4195d866c3429db537a9fa9b7a4ac67ef5c267cad0f6e43ce997a98f1e47a88b228bd1aa437c991140 +$(DL_FILE)_BLAKE2 = 934a35e31b0db76c4dcbe2fe903f04b60471485118aa5d4001599a3c23a7db74f05f703cf430bb299795be7025f71efb225afddff85c8245e962bdadcf82aef7 install : $(TARGET) -- 2.36.0

2 1

[PATCH] libnetfilter_cttimeout: Update to version 1.0.1
by Adolf Belka 30 May '22

30 May '22

- Update from 1.0.0 to 1.0.1 - Update of rootfile not required - Changelog 1.0.1 * Warnings with automake-1.12 * Allow building on uclinux * Fix building with clang Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/libnetfilter_cttimeout | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/libnetfilter_cttimeout b/lfs/libnetfilter_cttimeout index c6a8cc28c..f25367c14 100644 --- a/lfs/libnetfilter_cttimeout +++ b/lfs/libnetfilter_cttimeout @@ -24,7 +24,7 @@ include Config -VER = 1.0.0 +VER = 1.0.1 THISAPP = libnetfilter_cttimeout-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 8b0f952bcd4184141a434abe25f807ad07bb74713a3506d335c5368ddce2809596c77e5e534337d897fb6268afa137f6d98cfd314b0b33b4996e4a0df4d8eba6 +$(DL_FILE)_BLAKE2 = b51d631ee6b4c3bb34cf1394e2a3216a6ac4d89773bafecd058b31bdf78bf5eb255d3cb2539ca591f64c95cdf7f0db720a5b78e90009e0c7c208219ed454686f install : $(TARGET) -- 2.36.0

2 1

[PATCH] libnetfilter_cthelper: Update to version 1.0.1
by Adolf Belka 30 May '22

30 May '22

- Update from version 1.0.0 to 1.0.1 - Update of rootfile not required - Changelog 1.0.1 * Allow build on uclinux * Use after free in nfct_helper_free() * Double free in nfct-helper-add example * Invalid argument error in nftc-helper-add * Incorrect netlink message building with multiple nfct helper policies Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/libnetfilter_cthelper | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/libnetfilter_cthelper b/lfs/libnetfilter_cthelper index 784f471e3..418a8913c 100644 --- a/lfs/libnetfilter_cthelper +++ b/lfs/libnetfilter_cthelper @@ -24,7 +24,7 @@ include Config -VER = 1.0.0 +VER = 1.0.1 THISAPP = libnetfilter_cthelper-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 622a4e27629d97a0ab2b5032e972914f2ab8764ab60ab7090b173ceabfe9648e09452e931dacb822090c5f816b553b8e73b8f8a4ee431db9f6dd092d9d4283ee +$(DL_FILE)_BLAKE2 = cc5ae85dca896c0b8b1b704e0c5cc201677f48c2765520dc992a1b218d1334e04c592ba48cf06efe32a5089c7ad70fa44cbb2b40f2e8400d7ef9d2976a6425ee install : $(TARGET) -- 2.36.0

2 1

[PATCH] git: Update to version 2.36.1
by Adolf Belka 30 May '22

30 May '22

- Update from version 2.36.0 to 2.36.1 - Update of rootfile not required - Changelog Git v2.36.1 Release Notes Fixes since v2.36 * "git submodule update" without pathspec should silently skip an uninitialized submodule, but it started to become noisy by mistake. * "diff-tree --stdin" has been broken for about a year, but 2.36 release broke it even worse by breaking running the command with <pathspec>, which in turn broke "gitk" and got noticed. This has been corrected by aligning its behaviour to that of "log". * Regression fix for 2.36 where "git name-rev" started to sometimes reference strings after they are freed. * "git show <commit1> <commit2>... -- <pathspec>" lost the pathspec when showing the second and subsequent commits, which has been corrected. * "git fast-export -- <pathspec>" lost the pathspec when showing the second and subsequent commits, which has been corrected. * "git format-patch <args> -- <pathspec>" lost the pathspec when showing the second and subsequent commits, which has been corrected. * Get rid of a bogus and over-eager coccinelle rule. * Correct choices of C compilers used in various CI jobs. Also contains minor documentation updates and code clean-ups. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/git | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/git b/lfs/git index d61e429f6..a4cd9911a 100644 --- a/lfs/git +++ b/lfs/git @@ -24,7 +24,7 @@ include Config -VER = 2.36.0 +VER = 2.36.1 SUMMARY = Fast, scalable, distributed revision control system THISAPP = git-$(VER) @@ -33,7 +33,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = git -PAK_VER = 23 +PAK_VER = 24 DEPS = perl-Authen-SASL perl-MIME-Base64 perl-Net-SMTP-SSL @@ -47,7 +47,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 72bb148fc5fded2976554788eaf599d20fe9f200ac1dd1ddd4ed89f7f5c8d6c1025907080620bab477b4efadf41d883e890dff73c80d0ff5f0becd83f13ebd88 +$(DL_FILE)_BLAKE2 = 99f54efb4ea1d8db0e3afd3dc9780cb37fc853e4757f4b37d68a6badd90eeed3e2943c97393eaed6adf61c82b97b5d01ca8d015784f5425072b1db14d39144ce install : $(TARGET) -- 2.36.1

2 1

[PATCH] logrotate: Update to 3.20.1
by Matthias Fischer 30 May '22

30 May '22

For details since v3.18.0 see: https://github.com/logrotate/logrotate/releases/tag/3.20.1 https://github.com/logrotate/logrotate/releases/tag/3.20.0 https://github.com/logrotate/logrotate/releases/tag/3.19.0 logrotate-3.20.1 drop world-readable permission on state file even when ACLs are enabled (#446) logrotate-3.20.0 fix potential DoS from unprivileged users via the state file (CVE-2022-1348) fix a misleading debug message with copytruncate and rotate 0 (#443) add support for unsigned time_t (#438) do not lock state file /dev/null (#433) logrotate-3.19.0 continue on EINTR in compressLogFile() (#430) enforce stricter parsing of configuration files (#427, #431) avoid confusing error message in debug mode (#426) fix full_write() on incomplete write (#415) do not use alloca() any more (#412) do not rotate hard links unless allowhardlink is used (#407) change directory after dropping privileges (#397) add defence in depth when dropping privileges (#400) remove invalid configuration on error (#408) do not open symbolic link log files by accident (#399) do not write state if state file is /dev/null (#395) Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/logrotate | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/logrotate b/lfs/logrotate index 90fdd1cfa..0e66a68e9 100644 --- a/lfs/logrotate +++ b/lfs/logrotate @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2020 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 3.18.0 +VER = 3.20.1 THISAPP = logrotate-$(VER) DL_FILE = logrotate-$(VER).tar.gz @@ -42,7 +42,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 4e78e980f2cc8e4b208c5d64df7ba173b59dbb1913a37f28e867dae71e56d50567c8614c7b9cfc04f6dee7888518b50d302f4935a248428c567d7e42a8dcbaf9 +$(DL_FILE)_BLAKE2 = 52f1b1991f6e17d04dee3b795bd6621be707b9386cb966f1434b00f4e6d9e8242c17a88642f98db720f8eeda6c1e38d25f050eb9e9be48a8323f84c9e408cf71 install : $(TARGET) -- 2.25.1

2 1

Changes in Intel-Linux-Processor-Microcode-Data-Files-microcode-20220510 check rootfile!
by Jon Murphy 30 May '22

30 May '22

Peter, Last night I cloned `ipfire-2.x.git` via this command: git clone git://git.ipfire.org/ipfire-2.x.git When I ran make build I got this error: libshout (2.4.3) [ 0 ][ DONE ] htop (3.1.2) [ 0 ][ DONE ] mpc (0.34) [ DONE ] Checking Logfiles for new Files Changes in Intel-Linux-Processor-Microcode-Data-Files-microcode-20220510 check rootfile! *** Build finished in 1:56:21 [ DONE ] jon@deb11vm:~/myProject5/ipfire-2.x$ https://git.ipfire.org/?p=ipfire-2.x.git;a=commitdiff;h=1ad192722a9ecd0b0f0… <https://git.ipfire.org/?p=ipfire-2.x.git;a=commitdiff;h=1ad192722a9ecd0b0f0…> I looked at the log file for the Intel microcode change. Should I fix? Or do I leave this to you to fix? Jon

2 1

[PATCH] iptables: Update to version 1.8.8
by Adolf Belka 26 May '22

26 May '22

- Update from version 1.8.7 to 1.8.8 - Update of rootfile - Changelog Version 1.8.8 extensions: libxt_conntrack: use bitops for state negation extensions: libxt_conntrack: use bitops for status negation xtables: Call init_extensions6() for static builds xtables: Call init_extensions{,a,b}() for static builds iptables-nft: fix -Z option libxtables: exit if called by setuid executeable iptables-nft: allow removal of empty builtin chains extensions: tcpmss: add iptables-translate support nft-shared: set correct register value nft-shared: support native tcp port delinearize nft-shared: support native tcp port range delinearize nft-shared: support native udp port delinearize nft: prefer native expressions instead of udp match nft: prefer native expressions instead of tcp match nft-shared: add tcp flag dissection nft: add support for native tcp flag matching tests: shell: fix bashism nft: fix indentation error. tests: iptables-test: correct misspelt variable extensions: libxt_NFLOG: fix `--nflog-prefix` Python test-cases extensions: libxt_NFLOG: remove extra space when saving targets with prefixes build: replace `AM_PROG_LIBTOOL` and `AC_DISABLE_STATIC` with `LT_INIT` extensions: libxt_NFLOG: fix typo tests: iptables-test: rename variable tests: add `NOMATCH` test result tests: support explicit variant test result tests: NFLOG: enable `--nflog-range` tests xshared: Implement xtables lock timeout using signals extensions: libxt_NFLOG: use nft built-in logging instead of xt_NFLOG extensions: libxt_NFLOG: don't truncate log prefix on print/save extensions: libxt_NFLOG: disable `--nflog-range` Python test-cases fix build for missing ETH_ALEN definition libxtables: extend xlate infrastructure tests: xlate-test: support multiline expectation extensions: libxt_connlimit: add translation extensions: libxt_tcp: rework translation to use flags match representation extensions: libxt_conntrack: simplify translation using negation extensions: libxt_multiport: add translation for -m multiport --ports nft-shared: update context register for bitwise expression nft: pass struct nft_xt_ctx to parse_meta() nft: native mark matching support nft: pass handle to helper functions to build netlink payload nft: prepare for dynamic register allocation nft: split gen_payload() to allocate register and initialize expression configure: bump version for 1.8.8 release ip6tables: masquerade: use fully-random so that nft can understand the rule ebtables: Exit gracefully on invalid table names include: Drop libipulog.h nft: Fix bitwise expression avoidance detection xtables-translate: Fix translation of odd netmasks libxtables: Simplify xtables_ipmask_to_cidr() a bit nft: cache: Sort chains on demand only nft: Increase BATCH_PAGE_SIZE to support huge rulesets extensions: sctp: Explain match types in man page Eliminate inet_aton() and inet_ntoa() nft-arp: Make use of ipv4_addr_to_string() extensions: SECMARK: Implement revision 1 xtables: Make invflags 16bit wide xshared: Eliminate iptables_command_state->invert xshared: Merge invflags handling code ebtables-translate: Use shared ebt_get_current_chain() function Use proto_to_name() from xshared in more places extensions: sctp: Fix nftables translation extensions: sctp: Translate --chunk-types option libxtables: Drop leftover variable in xtables_numeric_to_ip6addr() extensions: libebt_ip6: Drop unused variables libxtables: Fix memleak in xtopt_parse_hostmask() nft: Avoid memleak in error path of nft_cmd_new() nft: Avoid buffer size warnings copying iface names iptables-apply: Drop unused variable extensions: libebt_ip6: Use xtables_ip6parse_any() libxtables: Introduce xtables_strdup() and use it everywhere extensions: libxt_string: Avoid buffer size warning for strncpy() doc: ebtables-nft.8: Adjust for missing atomic-options ebtables: Dump atomic waste nft: Fix for non-verbose check command tests/shell: Assert non-verbose mode is silent extensions: hashlimit: Fix tests with HZ=100 iptables-test: Make netns spawning more robust extensions: libxt_mac: Fix for missing space in listing nft: Use xtables_malloc() in mnl_err_list_node_add() nft: Use xtables_{m,c}alloc() everywhere tests: iptables-test: Fix missing chain case tests: xlate-test: Don't skip any input after the first empty line tests: xlate-test: Print errors to stderr tests: iptables-test: Print errors to stderr tests: xlate-test: Exit non-zero on error tests: iptables-test: Exit non-zero on error tests: shell: Return non-zero on error ebtables: Avoid dropping policy when flushing tests: iptables-test: Fix conditional colors on stderr nft: cache: Avoid double free of unrecognized base-chains nft: Check base-chain compatibility when adding to cache nft-chain: Introduce base_slot field nft: Delete builtin chains compatibly nft: Introduce builtin_tables_lookup() xshared: Store optstring in xtables_globals nft-shared: Introduce init_cs family ops callback xtables: Simplify addr_mask freeing nft: Add family ops callbacks wrapping different nft_cmd_* functions xtables-standalone: Drop version number from init errors libxtables: Introduce xtables_globals print_help callback arptables: Use standard data structures when parsing nft-arp: Introduce post_parse callback nft-shared: Make nft_check_xt_legacy() family agnostic xtables: Derive xtables_globals from family xtables: arptables accepts empty interface names nft: Merge xtables-arp-standalone.c into xtables-standalone.c Unbreak xtables-translate xlate-test: Print full path if testing all files extensions: hashlimit: Fix tests with HZ=1000 xshared: Merge and share parse_chain() nft: Change whitespace printing in save_rule callback xshared: Share print_iface() function xshared: Share save_rule_details() with legacy xshared: Share save_ipv{4,6}_addr() with legacy xshared: Share print_rule_details() with legacy xshared: Share print_fragment() with legacy xshared: Share print_header() with legacy iptables nft-shared: Drop unused function print_proto() xshared: Make load_proto() static xshared: Share print_match_save() between legacy ip*tables xshared: Share a common printhelp function xshared: Share exit_tryhelp() xtables_globals: Embed variant name in .program_version libxtables: Extend basic_exit_err() iptables-*-restore: Drop pointless line reference xtables: Drop xtables' family on demand feature xtables: Pull table validity check out of do_parse() xtables: Move struct nft_xt_cmd_parse to xshared.h xtables: Pass xtables_args to check_empty_interface() xtables: Pass xtables_args to check_inverse() xtables: Do not pass nft_handle to do_parse() xshared: Move do_parse to shared space xshared: Store parsed wait and wait_interval in xtables_args nft: Move proto_parse and post_parse callbacks to xshared iptables: Use xtables' do_parse() function ip6tables: Use the shared do_parse, too extensions: *NAT: Kill multiple IPv4 range support xshared: Fix response to unprivileged users nft: Use verbose flag to toggle debug output iptables-restore: Support for extra debug output nft: Set NFTNL_CHAIN_FAMILY in new chains ebtables: Support verbose mode nft: Add debug output to table creation nft: cache: Dump rules if debugging tests: iptables-test: Support variant deviation iptables.8: Describe the effect of multiple -v flags libxtables: Register only the highest revision extension Improve error messages for unsupported extensions nft: Simplify immediate parsing nft: Speed up immediate parsing xshared: Prefer xtables_chain_protos lookup over getprotoent nft: Don't pass command state opaque to family ops callbacks libxtables: Fix for warning in xtables_ipmask_to_numeric Simplify static build extension loading nft: Review static extension loading tests: shell: Fix 0004-return-codes_0 for static builds nft: Reject standard targets as chain names when restoring libxtables: Implement notargets hash table libxtables: Boost rule target checks by announcing chain names xlate-test: Fix for empty source line on failure man: DNAT: Describe shifted port range feature Revert "libipt_[SD]NAT: avoid false error about multiple destinations specified" extensions: ipt_DNAT: Merge v1 and v2 parsers extensions: ipt_DNAT: Merge v1/v2 print/save code extensions: ipt_DNAT: Combine xlate functions also extensions: DNAT: Rename from libipt to libxt extensions: Merge IPv4 and IPv6 DNAT targets extensions: Merge REDIRECT into DNAT extensions: man: Document service name support in DNAT and REDIRECT extensions: MARK: Drop extra newline at end of help xshared: Move arp_opcodes into shared space xshared: Extend xtables_printhelp() for arptables libxtables: Drop xtables_globals 'optstring' field libxtables: Revert change to struct xtables_pprot extensions: DNAT: Merge core printing functions man: *NAT: Review --random* option descriptions extensions: LOG: Document --log-macdecode in man page nft: Fix EPERM handling for extensions without rev 0 xtables-translate: add missing argument and option to usage Fix a few doc typos iptables-test.py: print with color escapes only when stdout isatty Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/iptables | 8 +++----- lfs/iptables | 4 ++-- 2 files changed, 5 insertions(+), 7 deletions(-) diff --git a/config/rootfiles/common/iptables b/config/rootfiles/common/iptables index b8bf748a5..ba1621324 100644 --- a/config/rootfiles/common/iptables +++ b/config/rootfiles/common/iptables @@ -13,15 +13,13 @@ lib/libipq.so.0.0.0 #lib/libxtables.la lib/libxtables.so lib/libxtables.so.12 -lib/libxtables.so.12.4.0 +lib/libxtables.so.12.6.0 #lib/xtables -lib/xtables/libip6t_DNAT.so lib/xtables/libip6t_DNPT.so lib/xtables/libip6t_HL.so lib/xtables/libip6t_LOG.so lib/xtables/libip6t_MASQUERADE.so lib/xtables/libip6t_NETMAP.so -lib/xtables/libip6t_REDIRECT.so lib/xtables/libip6t_REJECT.so lib/xtables/libip6t_SNAT.so lib/xtables/libip6t_SNPT.so @@ -37,12 +35,10 @@ lib/xtables/libip6t_mh.so lib/xtables/libip6t_rt.so lib/xtables/libip6t_srh.so lib/xtables/libipt_CLUSTERIP.so -lib/xtables/libipt_DNAT.so lib/xtables/libipt_ECN.so lib/xtables/libipt_LOG.so lib/xtables/libipt_MASQUERADE.so lib/xtables/libipt_NETMAP.so -lib/xtables/libipt_REDIRECT.so lib/xtables/libipt_REJECT.so lib/xtables/libipt_SNAT.so lib/xtables/libipt_TTL.so @@ -57,6 +53,7 @@ lib/xtables/libxt_CLASSIFY.so lib/xtables/libxt_CONNMARK.so lib/xtables/libxt_CONNSECMARK.so lib/xtables/libxt_CT.so +lib/xtables/libxt_DNAT.so lib/xtables/libxt_DSCP.so lib/xtables/libxt_HMARK.so lib/xtables/libxt_IDLETIMER.so @@ -66,6 +63,7 @@ lib/xtables/libxt_NFLOG.so lib/xtables/libxt_NFQUEUE.so lib/xtables/libxt_NOTRACK.so lib/xtables/libxt_RATEEST.so +lib/xtables/libxt_REDIRECT.so lib/xtables/libxt_SECMARK.so lib/xtables/libxt_SET.so lib/xtables/libxt_SYNPROXY.so diff --git a/lfs/iptables b/lfs/iptables index c2f0d56c5..275559bfe 100644 --- a/lfs/iptables +++ b/lfs/iptables @@ -24,7 +24,7 @@ include Config -VER = 1.8.7 +VER = 1.8.8 THISAPP = iptables-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -41,7 +41,7 @@ objects = $(DL_FILE) \ $(DL_FILE) = $(DL_FROM)/$(DL_FILE) netfilter-layer7-v2.23.tar.gz = $(URL_IPFIRE)/netfilter-layer7-v2.23.tar.gz -$(DL_FILE)_BLAKE2 = fd4dcff142eaadde2a14ce3eb5e45d41c326752553b52900c77fd2e2a20c0685d0a04b95755995e914df47658834d52216d6465c2ae9cd6abc6eb122b95cc976 +$(DL_FILE)_BLAKE2 = 0da021cc7313b86af331768904956dab3eee3de245a7b03965129f3d7f13097fc03fbb1390167dcd971eff216eabad9e59b261a9c0f54bfc48a77453aa40d164 netfilter-layer7-v2.23.tar.gz_BLAKE2 = 5c8ab722f6fbc126f2f65ecf401de5fc40560c20e3be52f783db34410446185dcb6781b3148e4a174e8b2d2c290bec0342dea95e8cefc35c39345617fa7a8fdc install : $(TARGET) -- 2.36.1

2 1

← Newer
1
2
3
4
5
6
7
8
9
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development May 2022