* [PATCH] dhcpcd: Update to version 10.0.1
2023-05-19 11:47 [PATCH] curl: Update to version 8.1.0 Adolf Belka
@ 2023-05-19 11:47 ` Adolf Belka
2023-06-02 9:01 ` Michael Tremer
2023-05-19 11:47 ` [PATCH] ethtool: Update to version 6.3 Adolf Belka
` (4 subsequent siblings)
5 siblings, 1 reply; 11+ messages in thread
From: Adolf Belka @ 2023-05-19 11:47 UTC (permalink / raw)
To: development
[-- Attachment #1: Type: text/plain, Size: 3249 bytes --]
- Update from version 9.4.1 to 10.0.1
- Update of rootfile not required
- Tested on vm testbed and confirmed that dhcpcd worked as expected. Connection on red
successfully made.
- Changelog is no longer provided. For details of changes you have to look at the commits
log - https://github.com/NetworkConfiguration/dhcpcd/commits
Tested-by: Adolf Belka <adolf.belka(a)ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
lfs/dhcpcd | 11 ++++++-----
...0.1-Allow-free-selection-of-MTU-by-the-user.patch} | 0
2 files changed, 6 insertions(+), 5 deletions(-)
rename src/patches/{dhcpcd-9.4.0-Allow-free-selection-of-MTU-by-the-user.patch => dhcpcd-10.0.1-Allow-free-selection-of-MTU-by-the-user.patch} (100%)
diff --git a/lfs/dhcpcd b/lfs/dhcpcd
index 2373198da..ae1b75053 100644
--- a/lfs/dhcpcd
+++ b/lfs/dhcpcd
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2021 IPFire Team <info(a)ipfire.org> #
+# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 9.4.1
+VER = 10.0.1
THISAPP = dhcpcd-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 847c7451918ac89fe384e180ec52ee4624c0f2dc73354ecb4c63b02d8d9cf0a6d164b33e5d083a05d4868079dcf6208a820b4263c80337a12be40a27517ecf87
+$(DL_FILE)_BLAKE2 = f1e93285d040b98bede86bb2e87e372afc0d1d124e7a6580c23d8d228a34ee17001fc3c2d9091b16fb082fe2f2ad7ba50c0dd7b0db2b2237ab1cff9ca152100a
install : $(TARGET)
@@ -70,13 +70,14 @@ $(subst %,%_BLAKE2,$(objects)) :
$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
@$(PREBUILD)
@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
- cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/dhcpcd-9.4.0-Allow-free-selection-of-MTU-by-the-user.patch
+ cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/dhcpcd-10.0.1-Allow-free-selection-of-MTU-by-the-user.patch
cd $(DIR_APP) && ./configure \
--prefix="" \
--sysconfdir=/var/ipfire/dhcpc \
--dbdir=/var/ipfire/dhcpc \
--libexecdir=/var/ipfire/dhcpc \
- --mandir=/usr/share/man
+ --mandir=/usr/share/man \
+ --disable-privsep
cd $(DIR_APP) && make $(MAKETUNING)
cd $(DIR_APP) && make install
diff --git a/src/patches/dhcpcd-9.4.0-Allow-free-selection-of-MTU-by-the-user.patch b/src/patches/dhcpcd-10.0.1-Allow-free-selection-of-MTU-by-the-user.patch
similarity index 100%
rename from src/patches/dhcpcd-9.4.0-Allow-free-selection-of-MTU-by-the-user.patch
rename to src/patches/dhcpcd-10.0.1-Allow-free-selection-of-MTU-by-the-user.patch
--
2.40.1
^ permalink raw reply [flat|nested] 11+ messages in thread* Re: [PATCH] dhcpcd: Update to version 10.0.1
2023-05-19 11:47 ` [PATCH] dhcpcd: Update to version 10.0.1 Adolf Belka
@ 2023-06-02 9:01 ` Michael Tremer
2023-06-02 10:33 ` Adolf Belka
0 siblings, 1 reply; 11+ messages in thread
From: Michael Tremer @ 2023-06-02 9:01 UTC (permalink / raw)
To: development
[-- Attachment #1: Type: text/plain, Size: 3508 bytes --]
Hello Adolf,
Why do we need to disable the privilege separation feature here?
-Michael
> On 19 May 2023, at 12:47, Adolf Belka <adolf.belka(a)ipfire.org> wrote:
>
> - Update from version 9.4.1 to 10.0.1
> - Update of rootfile not required
> - Tested on vm testbed and confirmed that dhcpcd worked as expected. Connection on red
> successfully made.
> - Changelog is no longer provided. For details of changes you have to look at the commits
> log - https://github.com/NetworkConfiguration/dhcpcd/commits
>
> Tested-by: Adolf Belka <adolf.belka(a)ipfire.org>
> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
> ---
> lfs/dhcpcd | 11 ++++++-----
> ...0.1-Allow-free-selection-of-MTU-by-the-user.patch} | 0
> 2 files changed, 6 insertions(+), 5 deletions(-)
> rename src/patches/{dhcpcd-9.4.0-Allow-free-selection-of-MTU-by-the-user.patch => dhcpcd-10.0.1-Allow-free-selection-of-MTU-by-the-user.patch} (100%)
>
> diff --git a/lfs/dhcpcd b/lfs/dhcpcd
> index 2373198da..ae1b75053 100644
> --- a/lfs/dhcpcd
> +++ b/lfs/dhcpcd
> @@ -1,7 +1,7 @@
> ###############################################################################
> # #
> # IPFire.org - A linux based firewall #
> -# Copyright (C) 2007-2021 IPFire Team <info(a)ipfire.org> #
> +# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> #
> # #
> # This program is free software: you can redistribute it and/or modify #
> # it under the terms of the GNU General Public License as published by #
> @@ -24,7 +24,7 @@
>
> include Config
>
> -VER = 9.4.1
> +VER = 10.0.1
>
> THISAPP = dhcpcd-$(VER)
> DL_FILE = $(THISAPP).tar.xz
> @@ -40,7 +40,7 @@ objects = $(DL_FILE)
>
> $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
>
> -$(DL_FILE)_BLAKE2 = 847c7451918ac89fe384e180ec52ee4624c0f2dc73354ecb4c63b02d8d9cf0a6d164b33e5d083a05d4868079dcf6208a820b4263c80337a12be40a27517ecf87
> +$(DL_FILE)_BLAKE2 = f1e93285d040b98bede86bb2e87e372afc0d1d124e7a6580c23d8d228a34ee17001fc3c2d9091b16fb082fe2f2ad7ba50c0dd7b0db2b2237ab1cff9ca152100a
>
> install : $(TARGET)
>
> @@ -70,13 +70,14 @@ $(subst %,%_BLAKE2,$(objects)) :
> $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
> @$(PREBUILD)
> @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
> - cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/dhcpcd-9.4.0-Allow-free-selection-of-MTU-by-the-user.patch
> + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/dhcpcd-10.0.1-Allow-free-selection-of-MTU-by-the-user.patch
> cd $(DIR_APP) && ./configure \
> --prefix="" \
> --sysconfdir=/var/ipfire/dhcpc \
> --dbdir=/var/ipfire/dhcpc \
> --libexecdir=/var/ipfire/dhcpc \
> - --mandir=/usr/share/man
> + --mandir=/usr/share/man \
> + --disable-privsep
> cd $(DIR_APP) && make $(MAKETUNING)
> cd $(DIR_APP) && make install
>
> diff --git a/src/patches/dhcpcd-9.4.0-Allow-free-selection-of-MTU-by-the-user.patch b/src/patches/dhcpcd-10.0.1-Allow-free-selection-of-MTU-by-the-user.patch
> similarity index 100%
> rename from src/patches/dhcpcd-9.4.0-Allow-free-selection-of-MTU-by-the-user.patch
> rename to src/patches/dhcpcd-10.0.1-Allow-free-selection-of-MTU-by-the-user.patch
> --
> 2.40.1
>
^ permalink raw reply [flat|nested] 11+ messages in thread* Re: [PATCH] dhcpcd: Update to version 10.0.1
2023-06-02 9:01 ` Michael Tremer
@ 2023-06-02 10:33 ` Adolf Belka
2023-06-02 10:40 ` Michael Tremer
0 siblings, 1 reply; 11+ messages in thread
From: Adolf Belka @ 2023-06-02 10:33 UTC (permalink / raw)
To: development
[-- Attachment #1: Type: text/plain, Size: 4154 bytes --]
Hi Michael,
On 02/06/2023 11:01, Michael Tremer wrote:
> Hello Adolf,
>
> Why do we need to disable the privilege separation feature here?
It doesn't but I suspected that some changes would be needed to the
config file to actually use it and as I don't know what would need to be
changed if I built it with privilege separation then it might not work
anymore.
If it is relatively easy to set privilege separation up and someone can
tell me what changes I need to make in the config file and/or elsewhere
then I can do a v2 version of the patch, also testing it out to confirm
it works.
Regards,
Adolf.
>
> -Michael
>
>> On 19 May 2023, at 12:47, Adolf Belka <adolf.belka(a)ipfire.org> wrote:
>>
>> - Update from version 9.4.1 to 10.0.1
>> - Update of rootfile not required
>> - Tested on vm testbed and confirmed that dhcpcd worked as expected. Connection on red
>> successfully made.
>> - Changelog is no longer provided. For details of changes you have to look at the commits
>> log - https://github.com/NetworkConfiguration/dhcpcd/commits
>>
>> Tested-by: Adolf Belka <adolf.belka(a)ipfire.org>
>> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
>> ---
>> lfs/dhcpcd | 11 ++++++-----
>> ...0.1-Allow-free-selection-of-MTU-by-the-user.patch} | 0
>> 2 files changed, 6 insertions(+), 5 deletions(-)
>> rename src/patches/{dhcpcd-9.4.0-Allow-free-selection-of-MTU-by-the-user.patch => dhcpcd-10.0.1-Allow-free-selection-of-MTU-by-the-user.patch} (100%)
>>
>> diff --git a/lfs/dhcpcd b/lfs/dhcpcd
>> index 2373198da..ae1b75053 100644
>> --- a/lfs/dhcpcd
>> +++ b/lfs/dhcpcd
>> @@ -1,7 +1,7 @@
>> ###############################################################################
>> # #
>> # IPFire.org - A linux based firewall #
>> -# Copyright (C) 2007-2021 IPFire Team <info(a)ipfire.org> #
>> +# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> #
>> # #
>> # This program is free software: you can redistribute it and/or modify #
>> # it under the terms of the GNU General Public License as published by #
>> @@ -24,7 +24,7 @@
>>
>> include Config
>>
>> -VER = 9.4.1
>> +VER = 10.0.1
>>
>> THISAPP = dhcpcd-$(VER)
>> DL_FILE = $(THISAPP).tar.xz
>> @@ -40,7 +40,7 @@ objects = $(DL_FILE)
>>
>> $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
>>
>> -$(DL_FILE)_BLAKE2 = 847c7451918ac89fe384e180ec52ee4624c0f2dc73354ecb4c63b02d8d9cf0a6d164b33e5d083a05d4868079dcf6208a820b4263c80337a12be40a27517ecf87
>> +$(DL_FILE)_BLAKE2 = f1e93285d040b98bede86bb2e87e372afc0d1d124e7a6580c23d8d228a34ee17001fc3c2d9091b16fb082fe2f2ad7ba50c0dd7b0db2b2237ab1cff9ca152100a
>>
>> install : $(TARGET)
>>
>> @@ -70,13 +70,14 @@ $(subst %,%_BLAKE2,$(objects)) :
>> $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
>> @$(PREBUILD)
>> @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
>> - cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/dhcpcd-9.4.0-Allow-free-selection-of-MTU-by-the-user.patch
>> + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/dhcpcd-10.0.1-Allow-free-selection-of-MTU-by-the-user.patch
>> cd $(DIR_APP) && ./configure \
>> --prefix="" \
>> --sysconfdir=/var/ipfire/dhcpc \
>> --dbdir=/var/ipfire/dhcpc \
>> --libexecdir=/var/ipfire/dhcpc \
>> - --mandir=/usr/share/man
>> + --mandir=/usr/share/man \
>> + --disable-privsep
>> cd $(DIR_APP) && make $(MAKETUNING)
>> cd $(DIR_APP) && make install
>>
>> diff --git a/src/patches/dhcpcd-9.4.0-Allow-free-selection-of-MTU-by-the-user.patch b/src/patches/dhcpcd-10.0.1-Allow-free-selection-of-MTU-by-the-user.patch
>> similarity index 100%
>> rename from src/patches/dhcpcd-9.4.0-Allow-free-selection-of-MTU-by-the-user.patch
>> rename to src/patches/dhcpcd-10.0.1-Allow-free-selection-of-MTU-by-the-user.patch
>> --
>> 2.40.1
>>
>
--
Sent from my laptop
^ permalink raw reply [flat|nested] 11+ messages in thread* Re: [PATCH] dhcpcd: Update to version 10.0.1
2023-06-02 10:33 ` Adolf Belka
@ 2023-06-02 10:40 ` Michael Tremer
2023-06-02 11:37 ` Adolf Belka
0 siblings, 1 reply; 11+ messages in thread
From: Michael Tremer @ 2023-06-02 10:40 UTC (permalink / raw)
To: development
[-- Attachment #1: Type: text/plain, Size: 4863 bytes --]
I thought we were already using it, as dhcpcd runs like this on my system:
2353 ? S 0:10 dhcpcd: red0 [ip4]
2354 ? S 0:00 \_ dhcpcd: [privileged proxy] red0 [ip4]
2392 ? S 0:00 | \_ dhcpcd: [BPF ARP] red0 100.64.27.48
3276 ? S 0:00 | \_ dhcpcd: [network proxy] 100.64.27.48
2355 ? S 0:00 \_ dhcpcd: [control proxy] red0 [ip4]
I thought this is because it has forked different processes with different privileges that cannot be exploited as easily.
-Michael
> On 2 Jun 2023, at 11:33, Adolf Belka <adolf.belka(a)ipfire.org> wrote:
>
> Hi Michael,
>
> On 02/06/2023 11:01, Michael Tremer wrote:
>> Hello Adolf,
>> Why do we need to disable the privilege separation feature here?
> It doesn't but I suspected that some changes would be needed to the config file to actually use it and as I don't know what would need to be changed if I built it with privilege separation then it might not work anymore.
>
> If it is relatively easy to set privilege separation up and someone can tell me what changes I need to make in the config file and/or elsewhere then I can do a v2 version of the patch, also testing it out to confirm it works.
>
> Regards,
> Adolf.
>> -Michael
>>> On 19 May 2023, at 12:47, Adolf Belka <adolf.belka(a)ipfire.org> wrote:
>>>
>>> - Update from version 9.4.1 to 10.0.1
>>> - Update of rootfile not required
>>> - Tested on vm testbed and confirmed that dhcpcd worked as expected. Connection on red
>>> successfully made.
>>> - Changelog is no longer provided. For details of changes you have to look at the commits
>>> log - https://github.com/NetworkConfiguration/dhcpcd/commits
>>>
>>> Tested-by: Adolf Belka <adolf.belka(a)ipfire.org>
>>> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
>>> ---
>>> lfs/dhcpcd | 11 ++++++-----
>>> ...0.1-Allow-free-selection-of-MTU-by-the-user.patch} | 0
>>> 2 files changed, 6 insertions(+), 5 deletions(-)
>>> rename src/patches/{dhcpcd-9.4.0-Allow-free-selection-of-MTU-by-the-user.patch => dhcpcd-10.0.1-Allow-free-selection-of-MTU-by-the-user.patch} (100%)
>>>
>>> diff --git a/lfs/dhcpcd b/lfs/dhcpcd
>>> index 2373198da..ae1b75053 100644
>>> --- a/lfs/dhcpcd
>>> +++ b/lfs/dhcpcd
>>> @@ -1,7 +1,7 @@
>>> ###############################################################################
>>> # #
>>> # IPFire.org - A linux based firewall #
>>> -# Copyright (C) 2007-2021 IPFire Team <info(a)ipfire.org> #
>>> +# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> #
>>> # #
>>> # This program is free software: you can redistribute it and/or modify #
>>> # it under the terms of the GNU General Public License as published by #
>>> @@ -24,7 +24,7 @@
>>>
>>> include Config
>>>
>>> -VER = 9.4.1
>>> +VER = 10.0.1
>>>
>>> THISAPP = dhcpcd-$(VER)
>>> DL_FILE = $(THISAPP).tar.xz
>>> @@ -40,7 +40,7 @@ objects = $(DL_FILE)
>>>
>>> $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
>>>
>>> -$(DL_FILE)_BLAKE2 = 847c7451918ac89fe384e180ec52ee4624c0f2dc73354ecb4c63b02d8d9cf0a6d164b33e5d083a05d4868079dcf6208a820b4263c80337a12be40a27517ecf87
>>> +$(DL_FILE)_BLAKE2 = f1e93285d040b98bede86bb2e87e372afc0d1d124e7a6580c23d8d228a34ee17001fc3c2d9091b16fb082fe2f2ad7ba50c0dd7b0db2b2237ab1cff9ca152100a
>>>
>>> install : $(TARGET)
>>>
>>> @@ -70,13 +70,14 @@ $(subst %,%_BLAKE2,$(objects)) :
>>> $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
>>> @$(PREBUILD)
>>> @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
>>> - cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/dhcpcd-9.4.0-Allow-free-selection-of-MTU-by-the-user.patch
>>> + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/dhcpcd-10.0.1-Allow-free-selection-of-MTU-by-the-user.patch
>>> cd $(DIR_APP) && ./configure \
>>> --prefix="" \
>>> --sysconfdir=/var/ipfire/dhcpc \
>>> --dbdir=/var/ipfire/dhcpc \
>>> --libexecdir=/var/ipfire/dhcpc \
>>> - --mandir=/usr/share/man
>>> + --mandir=/usr/share/man \
>>> + --disable-privsep
>>> cd $(DIR_APP) && make $(MAKETUNING)
>>> cd $(DIR_APP) && make install
>>>
>>> diff --git a/src/patches/dhcpcd-9.4.0-Allow-free-selection-of-MTU-by-the-user.patch b/src/patches/dhcpcd-10.0.1-Allow-free-selection-of-MTU-by-the-user.patch
>>> similarity index 100%
>>> rename from src/patches/dhcpcd-9.4.0-Allow-free-selection-of-MTU-by-the-user.patch
>>> rename to src/patches/dhcpcd-10.0.1-Allow-free-selection-of-MTU-by-the-user.patch
>>> --
>>> 2.40.1
>>>
>
> --
> Sent from my laptop
^ permalink raw reply [flat|nested] 11+ messages in thread* Re: [PATCH] dhcpcd: Update to version 10.0.1
2023-06-02 10:40 ` Michael Tremer
@ 2023-06-02 11:37 ` Adolf Belka
0 siblings, 0 replies; 11+ messages in thread
From: Adolf Belka @ 2023-06-02 11:37 UTC (permalink / raw)
To: development
[-- Attachment #1: Type: text/plain, Size: 5395 bytes --]
Hi Michael,
On 02/06/2023 12:40, Michael Tremer wrote:
> I thought we were already using it, as dhcpcd runs like this on my system:
>
> 2353 ? S 0:10 dhcpcd: red0 [ip4]
> 2354 ? S 0:00 \_ dhcpcd: [privileged proxy] red0 [ip4]
> 2392 ? S 0:00 | \_ dhcpcd: [BPF ARP] red0 100.64.27.48
> 3276 ? S 0:00 | \_ dhcpcd: [network proxy] 100.64.27.48
> 2355 ? S 0:00 \_ dhcpcd: [control proxy] red0 [ip4]
>
> I thought this is because it has forked different processes with different privileges that cannot be exploited as easily.
My bad. For some reason, and I can't figure out why now, I came to the conclusion that privilege separation had come in new with the 10.0.0 series
Searching now I can see it has been there for some time, certainly already there with 9.4.1
Apologies for the confusion.
I will submit a v2 version removing the disable-privsep option.
Regards,
Adolf.
>
> -Michael
>
>> On 2 Jun 2023, at 11:33, Adolf Belka <adolf.belka(a)ipfire.org> wrote:
>>
>> Hi Michael,
>>
>> On 02/06/2023 11:01, Michael Tremer wrote:
>>> Hello Adolf,
>>> Why do we need to disable the privilege separation feature here?
>> It doesn't but I suspected that some changes would be needed to the config file to actually use it and as I don't know what would need to be changed if I built it with privilege separation then it might not work anymore.
>>
>> If it is relatively easy to set privilege separation up and someone can tell me what changes I need to make in the config file and/or elsewhere then I can do a v2 version of the patch, also testing it out to confirm it works.
>>
>> Regards,
>> Adolf.
>>> -Michael
>>>> On 19 May 2023, at 12:47, Adolf Belka <adolf.belka(a)ipfire.org> wrote:
>>>>
>>>> - Update from version 9.4.1 to 10.0.1
>>>> - Update of rootfile not required
>>>> - Tested on vm testbed and confirmed that dhcpcd worked as expected. Connection on red
>>>> successfully made.
>>>> - Changelog is no longer provided. For details of changes you have to look at the commits
>>>> log - https://github.com/NetworkConfiguration/dhcpcd/commits
>>>>
>>>> Tested-by: Adolf Belka <adolf.belka(a)ipfire.org>
>>>> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
>>>> ---
>>>> lfs/dhcpcd | 11 ++++++-----
>>>> ...0.1-Allow-free-selection-of-MTU-by-the-user.patch} | 0
>>>> 2 files changed, 6 insertions(+), 5 deletions(-)
>>>> rename src/patches/{dhcpcd-9.4.0-Allow-free-selection-of-MTU-by-the-user.patch => dhcpcd-10.0.1-Allow-free-selection-of-MTU-by-the-user.patch} (100%)
>>>>
>>>> diff --git a/lfs/dhcpcd b/lfs/dhcpcd
>>>> index 2373198da..ae1b75053 100644
>>>> --- a/lfs/dhcpcd
>>>> +++ b/lfs/dhcpcd
>>>> @@ -1,7 +1,7 @@
>>>> ###############################################################################
>>>> # #
>>>> # IPFire.org - A linux based firewall #
>>>> -# Copyright (C) 2007-2021 IPFire Team <info(a)ipfire.org> #
>>>> +# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> #
>>>> # #
>>>> # This program is free software: you can redistribute it and/or modify #
>>>> # it under the terms of the GNU General Public License as published by #
>>>> @@ -24,7 +24,7 @@
>>>>
>>>> include Config
>>>>
>>>> -VER = 9.4.1
>>>> +VER = 10.0.1
>>>>
>>>> THISAPP = dhcpcd-$(VER)
>>>> DL_FILE = $(THISAPP).tar.xz
>>>> @@ -40,7 +40,7 @@ objects = $(DL_FILE)
>>>>
>>>> $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
>>>>
>>>> -$(DL_FILE)_BLAKE2 = 847c7451918ac89fe384e180ec52ee4624c0f2dc73354ecb4c63b02d8d9cf0a6d164b33e5d083a05d4868079dcf6208a820b4263c80337a12be40a27517ecf87
>>>> +$(DL_FILE)_BLAKE2 = f1e93285d040b98bede86bb2e87e372afc0d1d124e7a6580c23d8d228a34ee17001fc3c2d9091b16fb082fe2f2ad7ba50c0dd7b0db2b2237ab1cff9ca152100a
>>>>
>>>> install : $(TARGET)
>>>>
>>>> @@ -70,13 +70,14 @@ $(subst %,%_BLAKE2,$(objects)) :
>>>> $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
>>>> @$(PREBUILD)
>>>> @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
>>>> - cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/dhcpcd-9.4.0-Allow-free-selection-of-MTU-by-the-user.patch
>>>> + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/dhcpcd-10.0.1-Allow-free-selection-of-MTU-by-the-user.patch
>>>> cd $(DIR_APP) && ./configure \
>>>> --prefix="" \
>>>> --sysconfdir=/var/ipfire/dhcpc \
>>>> --dbdir=/var/ipfire/dhcpc \
>>>> --libexecdir=/var/ipfire/dhcpc \
>>>> - --mandir=/usr/share/man
>>>> + --mandir=/usr/share/man \
>>>> + --disable-privsep
>>>> cd $(DIR_APP) && make $(MAKETUNING)
>>>> cd $(DIR_APP) && make install
>>>>
>>>> diff --git a/src/patches/dhcpcd-9.4.0-Allow-free-selection-of-MTU-by-the-user.patch b/src/patches/dhcpcd-10.0.1-Allow-free-selection-of-MTU-by-the-user.patch
>>>> similarity index 100%
>>>> rename from src/patches/dhcpcd-9.4.0-Allow-free-selection-of-MTU-by-the-user.patch
>>>> rename to src/patches/dhcpcd-10.0.1-Allow-free-selection-of-MTU-by-the-user.patch
>>>> --
>>>> 2.40.1
>>>>
>>
>> --
>> Sent from my laptop
>
>
^ permalink raw reply [flat|nested] 11+ messages in thread
* [PATCH] ethtool: Update to version 6.3
2023-05-19 11:47 [PATCH] curl: Update to version 8.1.0 Adolf Belka
2023-05-19 11:47 ` [PATCH] dhcpcd: Update to version 10.0.1 Adolf Belka
@ 2023-05-19 11:47 ` Adolf Belka
2023-05-19 11:47 ` [PATCH] harfbuzz: Update to version 7.3.0 Adolf Belka
` (3 subsequent siblings)
5 siblings, 0 replies; 11+ messages in thread
From: Adolf Belka @ 2023-05-19 11:47 UTC (permalink / raw)
To: development
[-- Attachment #1: Type: text/plain, Size: 1591 bytes --]
- Update from version 6.2 to 6.3
- Update of rootfile not required
- Changelog
Version 6.3 - May 8, 2023
* Feature: PLCA support (--[gs]et-plca-cfg, --get-plca-status)
* Feature: MAC Merge layer support (--show-mm, --set-mm)
* Feature: pass source of statistics for port stats
* Feature: get/set rx push in ringparams (-g and -G)
* Feature: coalesce tx aggregation parameters (-c and -C)
* Feature: PSE and PD devices (--show-pse, --set-pse)
* Fix: minor fixes of help text (--help)
* Fix: fix build on systems with older system headers
* Fix: fix netlink support when PLCA is not present (no option)
* Fix: fixes for issues found with gcc13 -fanalyzer
* Fix: fix return code in rxclass_rule_ins (-N)
* Fix: more robust argc/argv handling
Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
lfs/ethtool | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/lfs/ethtool b/lfs/ethtool
index f2b996fa9..e6d65ea12 100644
--- a/lfs/ethtool
+++ b/lfs/ethtool
@@ -24,7 +24,7 @@
include Config
-VER = 6.2
+VER = 6.3
THISAPP = ethtool-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = b3fa2571b1efef3b686eb4f20b33e6cc32bdb8cff5f2e642454ca3d41c427b1953df7b07e5ac8ef149f8b4be614210e05e593233655e5fe317c48630b20b68e8
+$(DL_FILE)_BLAKE2 = c06509525db47f8ee7c220d0b880fe80323a4a00036e9698432b1b9c85ad75045e98b23498f6283497728cafd187ca173b15f3ad60f8e6f8b4d0c5688d84a1f9
install : $(TARGET)
--
2.40.1
^ permalink raw reply [flat|nested] 11+ messages in thread* [PATCH] harfbuzz: Update to version 7.3.0
2023-05-19 11:47 [PATCH] curl: Update to version 8.1.0 Adolf Belka
2023-05-19 11:47 ` [PATCH] dhcpcd: Update to version 10.0.1 Adolf Belka
2023-05-19 11:47 ` [PATCH] ethtool: Update to version 6.3 Adolf Belka
@ 2023-05-19 11:47 ` Adolf Belka
2023-05-19 11:47 ` [PATCH] libcap: Update to version 2.69 Adolf Belka
` (2 subsequent siblings)
5 siblings, 0 replies; 11+ messages in thread
From: Adolf Belka @ 2023-05-19 11:47 UTC (permalink / raw)
To: development
[-- Attachment #1: Type: text/plain, Size: 3129 bytes --]
- Update from 7.2.0 to 7.3.0
- Update of rootfile
- Changelog
Overview of changes leading to 7.3.0
Tuesday, May 9, 2023
- Speedup applying glyph variation in VarComposites fonts (over 40% speedup).
(Behdad Esfahbod)
- Speedup instancing some fonts (over 20% speedup in instancing RobotoFlex).
(Behdad Esfahbod)
- Speedup shaping some fonts (over 30% speedup in shaping Roboto).
(Behdad Esfahbod)
- Support subsetting VarComposites and beyond-64k fonts. (Behdad Esfahbod)
- New configuration macro HB_MINIMIZE_MEMORY_USAGE to favor optimizing memory
usage over speed. (Behdad Esfahbod)
- Supporting setting the mapping between old and new glyph indices during
subsetting. (Garret Rieger)
- Various fixes and improvements.
(Behdad Esfahbod, Denis Rochette, Garret Rieger, Han Seung Min, Qunxin Liu)
- New API:
+hb_subset_input_old_to_new_glyph_mapping()
Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
config/rootfiles/common/harfbuzz | 7 ++++---
lfs/harfbuzz | 4 ++--
2 files changed, 6 insertions(+), 5 deletions(-)
diff --git a/config/rootfiles/common/harfbuzz b/config/rootfiles/common/harfbuzz
index 4798653a2..a03367254 100644
--- a/config/rootfiles/common/harfbuzz
+++ b/config/rootfiles/common/harfbuzz
@@ -44,15 +44,15 @@
#usr/lib/libharfbuzz-cairo.la
#usr/lib/libharfbuzz-cairo.so
usr/lib/libharfbuzz-cairo.so.0
-usr/lib/libharfbuzz-cairo.so.0.60720.0
+usr/lib/libharfbuzz-cairo.so.0.60730.0
#usr/lib/libharfbuzz-subset.la
#usr/lib/libharfbuzz-subset.so
usr/lib/libharfbuzz-subset.so.0
-usr/lib/libharfbuzz-subset.so.0.60720.0
+usr/lib/libharfbuzz-subset.so.0.60730.0
#usr/lib/libharfbuzz.la
#usr/lib/libharfbuzz.so
usr/lib/libharfbuzz.so.0
-usr/lib/libharfbuzz.so.0.60720.0
+usr/lib/libharfbuzz.so.0.60730.0
#usr/lib/pkgconfig/harfbuzz-cairo.pc
#usr/lib/pkgconfig/harfbuzz-subset.pc
#usr/lib/pkgconfig/harfbuzz.pc
@@ -128,6 +128,7 @@ usr/lib/libharfbuzz.so.0.60720.0
#usr/share/gtk-doc/html/harfbuzz/api-index-6-0-0.html
#usr/share/gtk-doc/html/harfbuzz/api-index-7-0-0.html
#usr/share/gtk-doc/html/harfbuzz/api-index-7-1-0.html
+#usr/share/gtk-doc/html/harfbuzz/api-index-7-3-0.html
#usr/share/gtk-doc/html/harfbuzz/api-index-full.html
#usr/share/gtk-doc/html/harfbuzz/apple-advanced-typography-api.html
#usr/share/gtk-doc/html/harfbuzz/buffers-language-script-and-direction.html
diff --git a/lfs/harfbuzz b/lfs/harfbuzz
index 15cc9ff13..bfc40dba3 100644
--- a/lfs/harfbuzz
+++ b/lfs/harfbuzz
@@ -24,7 +24,7 @@
include Config
-VER = 7.2.0
+VER = 7.3.0
THISAPP = harfbuzz-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 247746d6a0f132a0d6b0c461d9e96a4fe76bc08bca4d05b28a034de60afee8e049d798fdf3962b892b33424245d8f00a63d6068b034e80ad9d7733180e8533c1
+$(DL_FILE)_BLAKE2 = 7b1f6fb0c4c7483ff7a7c27f613b8579af30a304432e1a4e157aec4344449aed93e68443df1f2bc741be6780a6b2214d54804e2df9a20d83c8256b5f98c7fcda
install : $(TARGET)
--
2.40.1
^ permalink raw reply [flat|nested] 11+ messages in thread* [PATCH] libcap: Update to version 2.69
2023-05-19 11:47 [PATCH] curl: Update to version 8.1.0 Adolf Belka
` (2 preceding siblings ...)
2023-05-19 11:47 ` [PATCH] harfbuzz: Update to version 7.3.0 Adolf Belka
@ 2023-05-19 11:47 ` Adolf Belka
2023-05-19 11:47 ` [PATCH] nettle: Update to version 3.9 Adolf Belka
2023-05-19 11:47 ` [PATCH] pam: Update to version 1.5.3 Adolf Belka
5 siblings, 0 replies; 11+ messages in thread
From: Adolf Belka @ 2023-05-19 11:47 UTC (permalink / raw)
To: development
[-- Attachment #1: Type: text/plain, Size: 5017 bytes --]
- Update from version 2.67 to 2.69
- Update of rootfile
- Changelog
Release notes for 2.69
2023-05-14 19:10:04 -0700
An audit was performed on libcap and friends by https://x41-dsec.de/
https://x41-dsec.de/news/2023/05/15/libcap-source-code-audit/
The audit (final report, 2023-05-10)
https://drive.google.com/file/d/1lsuC_tQbQ5pCE2Sy_skw0a7hTzQyQh2C/view?usp=sharing
was sponsored by the the Open Source Technology Improvement Fund,
https://ostif.org/ (blog). Five issues were found. Four of them are
addressed in this release. Each issue was labeled in the audit results as
follows:
LCAP-CR-23-01 (SEVERITY) LOW (CVE-2023-2602) - found by David Gstir
LCAP-CR-23-02 (SEVERITY) MEDIUM (CVE-2023-2603) - found by Richard Weinberger
LCAP-CR-23-100 (SEVERITY) NONE
LCAP-CR-23-101 (SEVERITY) NONE
Man page style improvement from Emanuele Torre
Partially revive the ability to build the binaries fully statically.
This was needed to make bleeding edge kernel debugging/testing via
qemu+busybox work again. Addressing an issue I realized only when I
tried to answer this stackexchange question.
https://unix.stackexchange.com/questions/741532/launch-process-with-limited-capabilities-on-minimal-busybox-based-system
Release notes for 2.68
2023-03-25 17:03:17 -0700
Force libcap internal functions to be hidden outside the library (Bug 217014)
Expanded the list of man page (links) to all of the supported API functions.
fixed some formatting issues with the libpsx(3) manpage.
Add support for a markdown preamble and postscript when generating .md
versions of the man pages (Bug 217007)
psx package clean up
fix some copy-paste errors with TestShared()
added a more complete psx testing into this test as well
cap package clean up
drop an unnecessary use of ", _" in the sources
cleaned up cap.NamedCount documentation
Converted goapps/web/README to .md format and fixed the instructions to
indicate go mod tidy is needed.
cap_compare test binary now cleans up after itself (Bug 217018)
Figured out how to cross compile Go programs for arm (i.e. RPi) that use C
code, don't use cgo but do use the psx package (all part of investigating
bug 216610).
Eliminate use of vendor directory
Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
config/rootfiles/common/libcap | 8 ++++++--
lfs/libcap | 4 ++--
2 files changed, 8 insertions(+), 4 deletions(-)
diff --git a/config/rootfiles/common/libcap b/config/rootfiles/common/libcap
index af1c22e83..f331e2a43 100644
--- a/config/rootfiles/common/libcap
+++ b/config/rootfiles/common/libcap
@@ -6,20 +6,22 @@ sbin/setcap
#usr/include/sys/psx_syscall.h
usr/lib/libcap.so
usr/lib/libcap.so.2
-usr/lib/libcap.so.2.67
+usr/lib/libcap.so.2.69
#usr/lib/libpsx.so
#usr/lib/libpsx.so.2
-usr/lib/libpsx.so.2.67
+usr/lib/libpsx.so.2.69
#usr/lib/pkgconfig/libcap.pc
#usr/lib/pkgconfig/libpsx.pc
#usr/lib/security
usr/lib/security/pam_cap.so
#usr/share/man/man1/capsh.1
+#usr/share/man/man3/__psx_syscall.3
#usr/share/man/man3/cap_clear.3
#usr/share/man/man3/cap_clear_flag.3
#usr/share/man/man3/cap_compare.3
#usr/share/man/man3/cap_copy_ext.3
#usr/share/man/man3/cap_copy_int.3
+#usr/share/man/man3/cap_copy_int_check.3
#usr/share/man/man3/cap_drop_bound.3
#usr/share/man/man3/cap_dup.3
#usr/share/man/man3/cap_fill.3
@@ -71,6 +73,7 @@ usr/lib/security/pam_cap.so
#usr/share/man/man3/cap_set_nsowner.3
#usr/share/man/man3/cap_set_proc.3
#usr/share/man/man3/cap_set_secbits.3
+#usr/share/man/man3/cap_set_syscall.3
#usr/share/man/man3/cap_setgroups.3
#usr/share/man/man3/cap_setuid.3
#usr/share/man/man3/cap_size.3
@@ -80,6 +83,7 @@ usr/lib/security/pam_cap.so
#usr/share/man/man3/capsetp.3
#usr/share/man/man3/libcap.3
#usr/share/man/man3/libpsx.3
+#usr/share/man/man3/psx_load_syscalls.3
#usr/share/man/man3/psx_set_sensitivity.3
#usr/share/man/man3/psx_syscall.3
#usr/share/man/man3/psx_syscall3.3
diff --git a/lfs/libcap b/lfs/libcap
index 63f4ef8b0..951ed80dc 100644
--- a/lfs/libcap
+++ b/lfs/libcap
@@ -24,7 +24,7 @@
include Config
-VER = 2.67
+VER = 2.69
THISAPP = libcap-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = bd9be22e439397a3c1726093cfee2410df93773b3139d50a1cdc10daecb666ddb9b64daded6e0ec9f2fd6defd16ea156dbd66bd55360ea266131f31ea0f0e989
+$(DL_FILE)_BLAKE2 = 94d1fef7666a1c383a8b96f1f6092bd242164631532868b628d2f5de71b42a371d041a978ef7fbadfee3eeb433165444995d1078cd790275bc0433a7875a697e
install : $(TARGET)
--
2.40.1
^ permalink raw reply [flat|nested] 11+ messages in thread* [PATCH] nettle: Update to version 3.9
2023-05-19 11:47 [PATCH] curl: Update to version 8.1.0 Adolf Belka
` (3 preceding siblings ...)
2023-05-19 11:47 ` [PATCH] libcap: Update to version 2.69 Adolf Belka
@ 2023-05-19 11:47 ` Adolf Belka
2023-05-19 11:47 ` [PATCH] pam: Update to version 1.5.3 Adolf Belka
5 siblings, 0 replies; 11+ messages in thread
From: Adolf Belka @ 2023-05-19 11:47 UTC (permalink / raw)
To: development
[-- Attachment #1: Type: text/plain, Size: 5818 bytes --]
- Update from version 3.8.1 to 3.9
- Update of rootfile
- Changelog
NEWS for the Nettle 3.9 release
This release includes bug fixes, several new features, a few
performance improvements, and one performance regression
affecting GCM on certain platforms.
The new version is intended to be fully source and binary
compatible with Nettle-3.6. The shared library names are
libnettle.so.8.7 and libhogweed.so.6.7, with sonames
libnettle.so.8 and libhogweed.so.6.
This release includes a rewrite of the C implementation of
GHASH (dating from 2011), as well as the plain x86_64 assembly
version, to use precomputed tables in a different way, with
tables always accessed in the same sequential manner.
This should make Nettle's GHASH implementation side-channel
silent on all platforms, but considerably slower on platforms
without carry-less mul instructions. E.g., benchmarks of the C
implementation on x86_64 showed a slowdown of 3 times.
Bug fixes:
* Fix bug in ecdsa and gostdsa signature verify operation, for
the unlikely corner case that point addition really is point
duplication.
* Fix for chacha on Power7, nettle's assembly used an
instruction only available on later processors. Fixed by
Mamone Tarsha.
* GHASH implementation should now be side-channel silent on
all architectures.
* A few portability fixes for *BSD.
New features:
* Support for the SM4 block cipher, contributed by Tianjia
Zhang.
* Support for the Balloon password hash, contributed by Zoltan
Fridrich.
* Support for SIV-GCM authenticated encryption mode,
contributed by Daiki Ueno.
* Support for OCB authenticated encryption mode.
* New exported functions md5_compress, sha1_compress,
sha256_compress, sha512_compress, based on patches from
Corentin Labbe.
Optimizations:
* Improved sha256 performance, in particular for x86_64 and
s390x.
* Use GMP's mpn_sec_tabselect, which is implemented in
assembly on many platforms, and delete the similar nettle
function. Gives a modest speedup to all ecc operations.
* Faster poly1305 for x86_64 and ppc64. New ppc code
contributed by Mamone Tarsha.
Miscellaneous:
* New ASM_FLAGS variable recognized by configure.
* Delete all arcfour assembly code. Affects 32-bit x86, 32-bit
and 64-bit sparc.
Known issues:
* Version 6.2.1 of GNU GMP (the most recent GMP release as of
this writing) has a known issue for MacOS on 64-bit ARM: GMP
assembly files use the reserved x18 register. On this
platform it is recommended to use a GMP snapshot where this
bug is fixed, and upgrade to a later GMP release when one
becomes available.
* Also on MacOS, Nettle's testsuite may still break due to
DYLD_LIBRARY_PATH being discarded under some circumstances.
As a workaround, use
* make check EMULATOR='env DYLD_LIBRARY_PATH=$(TEST_SHLIB_DIR)'
Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
config/rootfiles/common/nettle | 8 ++++++--
lfs/nettle | 6 +++---
2 files changed, 9 insertions(+), 5 deletions(-)
diff --git a/config/rootfiles/common/nettle b/config/rootfiles/common/nettle
index a9f8aca43..3c0331406 100644
--- a/config/rootfiles/common/nettle
+++ b/config/rootfiles/common/nettle
@@ -8,6 +8,7 @@
#usr/include/nettle/arcfour.h
#usr/include/nettle/arctwo.h
#usr/include/nettle/asn1.h
+#usr/include/nettle/balloon.h
#usr/include/nettle/base16.h
#usr/include/nettle/base64.h
#usr/include/nettle/bignum.h
@@ -48,6 +49,7 @@
#usr/include/nettle/nettle-meta.h
#usr/include/nettle/nettle-types.h
#usr/include/nettle/nist-keywrap.h
+#usr/include/nettle/ocb.h
#usr/include/nettle/pbkdf2.h
#usr/include/nettle/pgp.h
#usr/include/nettle/pkcs1.h
@@ -65,7 +67,9 @@
#usr/include/nettle/sha2.h
#usr/include/nettle/sha3.h
#usr/include/nettle/siv-cmac.h
+#usr/include/nettle/siv-gcm.h
#usr/include/nettle/sm3.h
+#usr/include/nettle/sm4.h
#usr/include/nettle/streebog.h
#usr/include/nettle/twofish.h
#usr/include/nettle/umac.h
@@ -74,9 +78,9 @@
#usr/include/nettle/yarrow.h
usr/lib/libhogweed.so
usr/lib/libhogweed.so.6
-usr/lib/libhogweed.so.6.6
+usr/lib/libhogweed.so.6.7
#usr/lib/libnettle.so
usr/lib/libnettle.so.8
-usr/lib/libnettle.so.8.6
+usr/lib/libnettle.so.8.7
#usr/lib/pkgconfig/hogweed.pc
#usr/lib/pkgconfig/nettle.pc
diff --git a/lfs/nettle b/lfs/nettle
index 779b87199..2d01f9557 100644
--- a/lfs/nettle
+++ b/lfs/nettle
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2021 IPFire Team <info(a)ipfire.org> #
+# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 3.8.1
+VER = 3.9
THISAPP = nettle-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 22b4ec81645b579504356597ba87b637e46285682020c90e03ecaea386ac9b48eaf91ee76ae3b86b6060be355de20c320ab3b74958074ad23fc08ad9ab6a4cbb
+$(DL_FILE)_BLAKE2 = 80885fa380de58765155a5d4b209e524f4bd0336156ba6f5189702007438998094df0e4e801370fd0a74251b8cf91f46638b0c0139388c2c2098b1207ed3415c
install : $(TARGET)
--
2.40.1
^ permalink raw reply [flat|nested] 11+ messages in thread* [PATCH] pam: Update to version 1.5.3
2023-05-19 11:47 [PATCH] curl: Update to version 8.1.0 Adolf Belka
` (4 preceding siblings ...)
2023-05-19 11:47 ` [PATCH] nettle: Update to version 3.9 Adolf Belka
@ 2023-05-19 11:47 ` Adolf Belka
5 siblings, 0 replies; 11+ messages in thread
From: Adolf Belka @ 2023-05-19 11:47 UTC (permalink / raw)
To: development
[-- Attachment #1: Type: text/plain, Size: 4422 bytes --]
- Update from version 1.5.2 to 1.5.3
- Update of rootfile
- Changelog
Release 1.5.3
* configure: added options to configure stylesheets.
* configure: added --enable-logind option to use logind instead of utmp
in pam_issue and pam_timestamp.
* pam_modutil_getlogin: changed to use getlogin() from libc instead of parsing
utmp.
* Added libeconf support to pam_env and pam_shells.
* Added vendor directory support to pam_access, pam_env, pam_group, pam_faillock,
pam_limits, pam_namespace, pam_pwhistory, pam_sepermit, pam_shells, and pam_time.
* pam_limits: changed to not fail on missing config files.
* pam_pwhistory: added conf= option to specify config file location.
* pam_pwhistory: added file= option to specify password history file location.
* pam_shells: added shells.d support when libeconf and vendordir are enabled.
* Deprecated pam_lastlog: this module is no longer built by default because
it uses utmp, wtmp, btmp and lastlog, but none of them are Y2038 safe,
even on 64bit architectures.
pam_lastlog will be removed in one of the next releases, consider using
pam_lastlog2 (from https://github.com/thkukuk/lastlog2) and/or
pam_wtmpdb (from https://github.com/thkukuk/wtmpdb) instead.
* Deprecated _pam_overwrite(), _pam_overwrite_n(), and _pam_drop_reply() macros
provided by _pam_macros.h; the memory override performed by these macros can
be optimized out by the compiler and therefore can no longer be relied upon.
* Multiple minor bug fixes, portability fixes, documentation improvements,
and translation updates.
Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
config/rootfiles/common/pam | 5 ++---
lfs/pam | 6 +++---
2 files changed, 5 insertions(+), 6 deletions(-)
diff --git a/config/rootfiles/common/pam b/config/rootfiles/common/pam
index 88e155f77..e25fc9c26 100644
--- a/config/rootfiles/common/pam
+++ b/config/rootfiles/common/pam
@@ -10,6 +10,7 @@ etc/security
#etc/security/namespace.d
#etc/security/namespace.init
#etc/security/pam_env.conf
+#etc/security/pwhistory.conf
#etc/security/time.conf
#lib/security
#lib/security/faillock
@@ -42,8 +43,6 @@ lib/security/pam_group.so
lib/security/pam_issue.so
#lib/security/pam_keyinit.la
lib/security/pam_keyinit.so
-#lib/security/pam_lastlog.la
-#lib/security/pam_lastlog.so
#lib/security/pam_limits.la
lib/security/pam_limits.so
#lib/security/pam_listfile.la
@@ -187,6 +186,7 @@ usr/lib/libpamc.so.0.82.1
#usr/share/man/man5/pam.conf.5
#usr/share/man/man5/pam.d.5
#usr/share/man/man5/pam_env.conf.5
+#usr/share/man/man5/pwhistory.conf.5
#usr/share/man/man5/time.conf.5
#usr/share/man/man8/PAM.8
#usr/share/man/man8/faillock.8
@@ -205,7 +205,6 @@ usr/lib/libpamc.so.0.82.1
#usr/share/man/man8/pam_group.8
#usr/share/man/man8/pam_issue.8
#usr/share/man/man8/pam_keyinit.8
-#usr/share/man/man8/pam_lastlog.8
#usr/share/man/man8/pam_limits.8
#usr/share/man/man8/pam_listfile.8
#usr/share/man/man8/pam_localuser.8
diff --git a/lfs/pam b/lfs/pam
index b810f787d..020de981c 100644
--- a/lfs/pam
+++ b/lfs/pam
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2020 IPFire Team <info(a)ipfire.org> #
+# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 1.5.2
+VER = 1.5.3
THISAPP = Linux-PAM-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = a835034cd239bc9377419c13dda45276e8e64a33fcf714a1957ff41112fbb6dce0be8e9773afc82458a04d54bf146a0c26117d7170521fecdc0c98184cef5f4f
+$(DL_FILE)_BLAKE2 = 362c939f3afc343e6f4e78e7f6ba6f7a9c6ee0a9948bb5a4fc34cecfd29e9fa974082534d4ceedd04d8d3e34c7b3ef43d2a07ba5f41d26da04ec8330fc3790fb
install : $(TARGET)
--
2.40.1
^ permalink raw reply [flat|nested] 11+ messages in thread