Development May 2022

development@lists.ipfire.org

11 participants
84 discussions

[PATCH] clamav: Update to 0.105.0
by Matthias Fischer 16 May '22

16 May '22

For details see: https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- config/rootfiles/packages/clamav | 4 ++++ lfs/clamav | 6 +++--- 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/packages/clamav b/config/rootfiles/packages/clamav index 5240b71c6..ca3124bb2 100644 --- a/config/rootfiles/packages/clamav +++ b/config/rootfiles/packages/clamav @@ -54,6 +54,8 @@ usr/sbin/clamd #usr/share/doc/ClamAV/html/ayu-highlight.css #usr/share/doc/ClamAV/html/book.js #usr/share/doc/ClamAV/html/clipboard.min.js +#usr/share/doc/ClamAV/html/community_resources +#usr/share/doc/ClamAV/html/community_resources/CommunityResources.html #usr/share/doc/ClamAV/html/css #usr/share/doc/ClamAV/html/css/chrome.css #usr/share/doc/ClamAV/html/css/general.css @@ -69,6 +71,7 @@ usr/sbin/clamd #usr/share/doc/ClamAV/html/faq/faq-misc.html #usr/share/doc/ClamAV/html/faq/faq-ml.html #usr/share/doc/ClamAV/html/faq/faq-pua.html +#usr/share/doc/ClamAV/html/faq/faq-rust.html #usr/share/doc/ClamAV/html/faq/faq-safebrowsing.html #usr/share/doc/ClamAV/html/faq/faq-scan-alerts.html #usr/share/doc/ClamAV/html/faq/faq-troubleshoot.html @@ -147,6 +150,7 @@ usr/sbin/clamd #usr/share/doc/ClamAV/html/manual/Signatures/HashSignatures.html #usr/share/doc/ClamAV/html/manual/Signatures/LogicalSignatures.html #usr/share/doc/ClamAV/html/manual/Signatures/PhishSigs.html +#usr/share/doc/ClamAV/html/manual/Signatures/SignatureNames.html #usr/share/doc/ClamAV/html/manual/Signatures/YaraRules.html #usr/share/doc/ClamAV/html/manual/Usage #usr/share/doc/ClamAV/html/manual/Usage.html diff --git a/lfs/clamav b/lfs/clamav index 2f6139e7b..1a4913089 100644 --- a/lfs/clamav +++ b/lfs/clamav @@ -26,7 +26,7 @@ include Config SUMMARY = Antivirus Toolkit -VER = 0.104.2 +VER = 0.105.0 THISAPP = clamav-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = clamav -PAK_VER = 59 +PAK_VER = 60 DEPS = @@ -50,7 +50,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 7d7eb9d22ca519f7ad0c171b6cab4b59cb52787a897ab31b9567166be2223f9ea89e79f42f1e4e0caf32fcb4b008f5ce755fa136566f85fe1de7808b436f80fa +$(DL_FILE)_BLAKE2 = 2c3055c3c5de115e01b6c0decee21c061c0583171c1794a38ecd86f354765879a6a2b7f2653c67fc19273dfc0caa9da8a2bbe339854e4c0d237baf3f3c650813 install : $(TARGET) -- 2.25.1

1 0

[PATCH] Core 168: Remove pakfire metadata for krb5 and libtiff.
by Stefan Schantl 15 May '22

15 May '22

Both packages have become part of the core system, so these files are not longer needed. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- config/rootfiles/core/168/update.sh | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/config/rootfiles/core/168/update.sh b/config/rootfiles/core/168/update.sh index e11e08b7f..283cb1098 100644 --- a/config/rootfiles/core/168/update.sh +++ b/config/rootfiles/core/168/update.sh @@ -133,6 +133,22 @@ if grep -q "ENABLED=on" /var/ipfire/vpn/settings; then /etc/init.d/ipsec start fi +# krb5 is now part of the core system, remove Pakfire metadata for it +if [ -e "/opt/pakfire/db/installed/meta-krb5" ] && [ -e "/opt/pakfire/db/meta/meta-krb5" ]; then + rm -vf \ + /opt/pakfire/db/installed/meta-krb5 \ + /opt/pakfire/db/meta/meta-krb5 \ + /opt/pakfire/db/rootfiles/krb5 +fi + +# libtiff is now part of the core system, remove Pakfire metadata for it +if [ -e "/opt/pakfire/db/installed/meta-libtiff" ] && [ -e "/opt/pakfire/db/meta/meta-libtiff" ]; then + rm -vf \ + /opt/pakfire/db/installed/meta-libtiff \ + /opt/pakfire/db/meta/meta-libtiff \ + /opt/pakfire/db/rootfiles/libtiff +fi + # This update needs a reboot... touch /var/run/need_reboot -- 2.30.2

1 0

[PATCH] poppler: Fix rootfile.
by Stefan Schantl 14 May '22

14 May '22

libpoppler.so.120.0.0 contains all the functions and symbols which are required by the tools linked against it. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- config/rootfiles/common/poppler | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/rootfiles/common/poppler b/config/rootfiles/common/poppler index 0ea058043..5c6f48e00 100644 --- a/config/rootfiles/common/poppler +++ b/config/rootfiles/common/poppler @@ -174,7 +174,7 @@ usr/lib/libpoppler-glib.so.8 usr/lib/libpoppler-glib.so.8.23.0 #usr/lib/libpoppler.so usr/lib/libpoppler.so.120 -#usr/lib/libpoppler.so.120.0.0 +usr/lib/libpoppler.so.120.0.0 #usr/lib/pkgconfig/poppler-cpp.pc #usr/lib/pkgconfig/poppler-glib.pc #usr/lib/pkgconfig/poppler.pc -- 2.30.2

2 2

[PATCH] pango: Fix rootfile.
by Stefan Schantl 14 May '22

14 May '22

The main libraries libpangocairo and libpangosoft2 accidently have been marked to be not shipped or part of the system. They are required by collecty and various other libraries or binaries. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- config/rootfiles/common/pango | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/config/rootfiles/common/pango b/config/rootfiles/common/pango index fe3164613..1ca33d42b 100644 --- a/config/rootfiles/common/pango +++ b/config/rootfiles/common/pango @@ -44,10 +44,10 @@ usr/lib/libpango-1.0.so.0 usr/lib/libpango-1.0.so.0.5000.6 #usr/lib/libpangocairo-1.0.so usr/lib/libpangocairo-1.0.so.0 -#usr/lib/libpangocairo-1.0.so.0.5000.6 +usr/lib/libpangocairo-1.0.so.0.5000.6 #usr/lib/libpangoft2-1.0.so usr/lib/libpangoft2-1.0.so.0 -#usr/lib/libpangoft2-1.0.so.0.5000.6 +usr/lib/libpangoft2-1.0.so.0.5000.6 #usr/lib/pkgconfig/pango.pc #usr/lib/pkgconfig/pangocairo.pc #usr/lib/pkgconfig/pangofc.pc -- 2.30.2

2 1

[PATCH] liburcu: Fix rootfile.
by Stefan Schantl 14 May '22

14 May '22

At least the xfsprogs is linked agains the urcu libraries and therefore requires them to run and deal with xfs filesystems. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- config/rootfiles/common/liburcu | 32 ++++++++++++++++---------------- 1 file changed, 16 insertions(+), 16 deletions(-) diff --git a/config/rootfiles/common/liburcu b/config/rootfiles/common/liburcu index f1de29d87..ab8cb0649 100644 --- a/config/rootfiles/common/liburcu +++ b/config/rootfiles/common/liburcu @@ -101,36 +101,36 @@ #usr/include/urcu/wfstack.h #usr/lib/liburcu-bp.la #usr/lib/liburcu-bp.so -#usr/lib/liburcu-bp.so.8 -#usr/lib/liburcu-bp.so.8.0.0 +usr/lib/liburcu-bp.so.8 +usr/lib/liburcu-bp.so.8.0.0 #usr/lib/liburcu-cds.la #usr/lib/liburcu-cds.so -#usr/lib/liburcu-cds.so.8 -#usr/lib/liburcu-cds.so.8.0.0 +usr/lib/liburcu-cds.so.8 +usr/lib/liburcu-cds.so.8.0.0 #usr/lib/liburcu-common.la #usr/lib/liburcu-common.so -#usr/lib/liburcu-common.so.8 -#usr/lib/liburcu-common.so.8.0.0 +usr/lib/liburcu-common.so.8 +usr/lib/liburcu-common.so.8.0.0 #usr/lib/liburcu-mb.la #usr/lib/liburcu-mb.so -#usr/lib/liburcu-mb.so.8 -#usr/lib/liburcu-mb.so.8.0.0 +usr/lib/liburcu-mb.so.8 +usr/lib/liburcu-mb.so.8.0.0 #usr/lib/liburcu-memb.la #usr/lib/liburcu-memb.so -#usr/lib/liburcu-memb.so.8 -#usr/lib/liburcu-memb.so.8.0.0 +usr/lib/liburcu-memb.so.8 +usr/lib/liburcu-memb.so.8.0.0 #usr/lib/liburcu-qsbr.la #usr/lib/liburcu-qsbr.so -#usr/lib/liburcu-qsbr.so.8 -#usr/lib/liburcu-qsbr.so.8.0.0 +usr/lib/liburcu-qsbr.so.8 +usr/lib/liburcu-qsbr.so.8.0.0 #usr/lib/liburcu-signal.la #usr/lib/liburcu-signal.so -#usr/lib/liburcu-signal.so.8 -#usr/lib/liburcu-signal.so.8.0.0 +usr/lib/liburcu-signal.so.8 +usr/lib/liburcu-signal.so.8.0.0 #usr/lib/liburcu.la #usr/lib/liburcu.so -#usr/lib/liburcu.so.8 -#usr/lib/liburcu.so.8.0.0 +usr/lib/liburcu.so.8 +usr/lib/liburcu.so.8.0.0 #usr/lib/pkgconfig/liburcu-bp.pc #usr/lib/pkgconfig/liburcu-cds.pc #usr/lib/pkgconfig/liburcu-mb.pc -- 2.30.2

2 1

[PATCH] libinih: Fix rootfile.
by Stefan Schantl 14 May '22

14 May '22

Some tools of the xfsprogs are linked against libinih and therefore we need to ship those libs. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- config/rootfiles/common/libinih | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/config/rootfiles/common/libinih b/config/rootfiles/common/libinih index c8a467edc..af22932dc 100644 --- a/config/rootfiles/common/libinih +++ b/config/rootfiles/common/libinih @@ -1,8 +1,8 @@ #usr/include/INIReader.h #usr/include/ini.h #usr/lib/libINIReader.so -#usr/lib/libINIReader.so.0 +usr/lib/libINIReader.so.0 #usr/lib/libinih.so -#usr/lib/libinih.so.0 +usr/lib/libinih.so.0 #usr/lib/pkgconfig/INIReader.pc #usr/lib/pkgconfig/inih.pc -- 2.30.2

2 1

[PATCH] update-ids-ruleset: Silent script if no providers settings file exists.
by Stefan Schantl 13 May '22

13 May '22

Only try to read-in the providers settings file, in case it exists. Otherwise the script produces an error message, about the missing file, each time it gets executed. Because of the fcron job this would be twice a day in most cases. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- src/scripts/update-ids-ruleset | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/scripts/update-ids-ruleset b/src/scripts/update-ids-ruleset index e9a082e62..553c1a1e1 100644 --- a/src/scripts/update-ids-ruleset +++ b/src/scripts/update-ids-ruleset @@ -95,8 +95,8 @@ if ($return) { # The script has requested a lock, so set locket to "1". $locked = "1"; -# Grab the configured providers. -&General::readhasharray("$IDS::providers_settings_file", \%providers); +# Grab the configured providers, if the providers settings file exists. +&General::readhasharray("$IDS::providers_settings_file", \%providers) if (-f "$IDS::providers_settings_file"); # Loop through the array of available providers. foreach my $id (keys %providers) { -- 2.30.2

2 1

[PATCH] expat: Fix rootfile.
by Stefan Schantl 13 May '22

13 May '22

The libexpat.so.1 file is just a symlink to libexpat.so.1.8.8 which contains all the functions and symbols required by the binaries, linked against it. Therefore this file needs to be present on the systems. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- config/rootfiles/common/expat | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/rootfiles/common/expat b/config/rootfiles/common/expat index 3911aa90b..69b3fbfe6 100644 --- a/config/rootfiles/common/expat +++ b/config/rootfiles/common/expat @@ -10,7 +10,7 @@ #usr/lib/libexpat.la #usr/lib/libexpat.so usr/lib/libexpat.so.1 -#usr/lib/libexpat.so.1.8.8 +usr/lib/libexpat.so.1.8.8 #usr/lib/pkgconfig/expat.pc #usr/share/doc/expat #usr/share/doc/expat-2.4.8 -- 2.30.2

3 2

Add "reinstall core update" button to Pakfire?
by Leo Hofmann 13 May '22

13 May '22

Hi all, I saw this comment in the Pakfire functions library: https://git.ipfire.org/?p=ipfire-2.x.git;a=blob;f=src/pakfire/lib/functions… And I remembered that sometimes people ask how to reinstall an update. For example because they have changed from the "testing" tree back to "stable" and want to get the final release version of the update. Would it be worthwhile to add a "reinstall core update" button to the web interface? Or would that lead to people breaking stuff? Is decrementing '/opt/pakfire/db/core/mine' still the recommended way to do that? https://wiki.ipfire.org/configuration/ipfire/pakfire/testing Best regards Leo

3 3

[PATCH] Core Update 168: Hard-code kernel version to 5.15.35
by Peter Müller 13 May '22

13 May '22

On systems that have previously running on testing, kernel 5.15.32 might still be installed. dracut being called with ${KVER} will then build an inital ramdisk for the wrong kernel, as 5.15.32 might still be running, albeit 5.15.35 has been installed due to the Pakfire procedure when upgrading on testing. Due to lack of hardware, this patch is untested on ARM. https://lists.ipfire.org/pipermail/development/2022-May/013433.html Reported-by: Stefan Schantl <stefan.schantl(a)ipfire.org> Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- config/rootfiles/core/168/update.sh | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/config/rootfiles/core/168/update.sh b/config/rootfiles/core/168/update.sh index d21f648dd..7cc8800b2 100644 --- a/config/rootfiles/core/168/update.sh +++ b/config/rootfiles/core/168/update.sh @@ -107,14 +107,14 @@ chmod -v 750 /etc/sudoers.d chmod -v 640 /etc/sudoers.d/* # Rebuild initial ramdisk to apply microcode updates -dracut --regenerate-all --force +dracut --kver="5.15.35-ipfire" --regenerate-all --force case "$(uname -m)" in armv*) - mkimage -A arm -T ramdisk -C lzma -d /boot/initramfs-${KVER}-ipfire.img /boot/uInit-${KVER}-ipfire - rm /boot/initramfs-${KVER}-ipfire.img + mkimage -A arm -T ramdisk -C lzma -d /boot/initramfs-5.15.35-ipfire.img /boot/uInit-5.15.35-ipfire + rm /boot/initramfs-5.15.35-ipfire.img ;; aarch64) - mkimage -A arm64 -T ramdisk -C lzma -d /boot/initramfs-${KVER}-ipfire.img /boot/uInit-${KVER}-ipfire + mkimage -A arm64 -T ramdisk -C lzma -d /boot/initramfs-5.15.35-ipfire.img /boot/uInit-5.15.35-ipfire # dont remove initramfs because grub need this to boot. ;; esac -- 2.35.3

4 6

← Newer
1
2
3
4
5
6
7
8
9
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development May 2022