Development April 2021

development@lists.ipfire.org

15 participants
161 discussions

Re: IPFire 2.25 - Core Update 156 available for testing
by Adolf Belka 21 Apr '21

21 Apr '21

Hi All, I have tested Core Update 156 in my vm testbed. When I selected Core Update 156 to upgrade, it carried out the upgrade but then when returning to the pakfire WUI page it came up with the following error message:- Forbidden You don't have permission to access this resource. Here is the output from the httpd/error_log [Mon Apr 19 18:40:40.188611 2021] [core:error] [pid 2565:tid 130746513614400] (13)Permission denied: [client 192.168.200.10:37244] AH00035: access to /cgi-bin/speed.cgi denied (filesystem path '/srv/web') because search permissions are missing on a component of the path, referer: https://ipfire.domain:444/ [Mon Apr 19 18:40:56.536729 2021] [core:error] [pid 2565:tid 130746505221696] (13)Permission denied: [client 192.168.200.10:37244] AH00035: access to /cgi-bin/speed.cgi denied (filesystem path '/srv/web') because search permissions are missing on a component of the path, referer: https://ipfire.domain:444/ [Mon Apr 19 18:40:56.539067 2021] [core:error] [pid 2565:tid 130746480043584] (13)Permission denied: [client 192.168.200.10:37248] AH00035: access to /cgi-bin/pakfire.cgi denied (filesystem path '/srv/web') because search permissions are missing on a component of the path Refreshing IPFire in the browser came back to the home page and Core Update 156 had been installed. I did a fresh vm clone twice more and each time the same thing happened. After reboot I checked through the WUI pages. The Live Graphs worked well. All WUI pages I accessed all worked as I would expect them too. No problems found anywhere at this point in time. Should I raise a bugzilla entry for the install problem I found? Regards, Adolf. On 19/04/2021 11:50, IPFire Project wrote: > IPFire Logo > > there is a new post from Michael Tremer on the IPFire Blog: > > *IPFire 2.25 - Core Update 156 available for testing* > > Another update is available for testing: IPFire 2.25 - Core Update 156. As usual for this time of the year, it is a spring clear release that updates lots of software and brings a new exciting feature: Live Graphs. > > Click Here To Read More <https://blog.ipfire.org/post/ipfire-2-25-core-update-156-available-for-test…> > > The IPFire Project > Don't like these emails? Unsubscribe <https://people.ipfire.org/unsubscribe>. >

3 4

Problems with hyperscan when building binutils
by Adolf Belka 20 Apr '21

20 Apr '21

Hi All, I was building an update of binutils. That built successfully but then hyperscan had a lot of failures. I am not able to understand what the problem is from the error messages. Could this be related to my update of binutils? If yes then what do I need to change? If no then what is causing the problem? I did a git pull origin next before I did my build of binutils. Error log attached. Regards, Adolf.

2 3

[PATCH] dhcp: Update to 4.4.2
by Adolf Belka 20 Apr '21

20 Apr '21

- Update from 4.4.1 to 4.4.2 - Changelog While release 4.4.2 is primarily a maintenance release that addresses a number of defects, it does introduce a few new features: - Keama - Keama is a migration utility that assists in converting ISC DHCP server configuration files to Kea configuration files. It is found in the keama subdirectory and includes a README.md file with instructions on how to build it as well as a manpage on its usage. - Two new server parameters related to ping checking were added: 1. ping-cltt-secs which allows the user to specify the number of seconds that must elapse since CLTT before a ping check is conducted. 2. ping-timeout-ms which allows the user to specify the amount of time the server waits for a ping-check response in milliseconds rather than in seconds. Dynamic DNS Improvements: - We added three new server configuration parameters which influence DDNS conflict resolution: 1. ddns-dual-stack-mixed-mode - alters DNS conflict resolution behavior to mitigate issues with non-compliant clients in dual stack environments. 2. ddns-guard-id-must-match - relaxes the DHCID RR client id matching requirement of DNS conflict resolution. 3. ddns-other-guard-is-dynamic - alters dual-stack-mixed-mode behavior to allow unguarded DNS entries to be overwritten in certain cases - The server now honors update-static-leases parameter for static DHCPv6 hosts. dhclient Improvements: - We've added three command line parameters to dhclient: 1. --prefix-len-hint - directs dhclient to use the given length as the prefix length hint when requesting prefixes 2. --decline-wait-time - instructs the client to wait the given number of seconds after declining an IPv4 address before issuing a discover 3. --address-prefix-len - specifies the prefix length passed by dhclient into the client script (via the environment variable ip6_prefixlen) with each IPv6 address. We added this parameter because we have changed the default value from 64 to 128 in order to be compliant with RFC3315bis draft (-09, page 64) and RFC5942, Section 4, point 1. **WARNING**: The new default value of 128 may not be backwardly compatible with your environment. If you are operating without a router, such as between VMs on a host, you may find they cannot see each other with prefix length of 128. In such cases, you'll need to either provide routing or use the command line parameter to set the value to 64. Alternatively you may change the default at compile time by setting DHCLIENT_DEFAULT_PREFIX_LEN in includes/site.h. - dhclient will now generate a DHCPv6 DECLINE message when the client script indicates a DAD failure Dynamic shared library support: Configure script, configure.ac+lt, which supports libtool is now provided with the source tar ball. This script can be used to configure ISC DHCP to build with libtool and thus use dynamic shared libraries. Other Highlights: - The server now supports dhcp-cache-threshold for DHCPv6 operations - The server now supports DHPv6 address allocation based on EUI-64 DUIDs - Experimental support for alternate relay port in the both the server and relay for IPv4, IPv6 and 4o6 (see: draft-ietf-dhc-relay-port-10.txt) Changes since 4.4.2b1 (Bug Fixes) - Added a clarification on DHCPINFORMs and server authority to dhcpd.conf.5 [Gitlab #37] - Only emit lease scrubbing log messages when DEBUG_FAILOVER_MESSAGES is defined. [Gitlab #72] - Added the interface name to socket initialization failure log messages. Prior to this the log messages stated only the error reason without stating the target interface. [Gitlab #75] - Corrected buffer pointer logic in dhcrelay functions that manipulate agent relay options. Thanks to Thomas Imbert of MSRC Vulnerabilities & Mitigations for reporting the issue. [#71] - Corrected unresolved symbol errors building relay_unittests when configured to build using libtool. [#80] Changes since 4.4.1 (New Features) - A new configuration parameter, ping-cltt-secs (v4 operation only), has been added to allow the user to specify the number of seconds that must elapse since CLTT before a ping check is conducted. Prior to this, the value was hard coded at 60 seconds. Please see the server man pages for a more detailed discussion. [ISC-Bugs #36283] - A new configuration parameter, ping-timeout-ms (v4 operation only), has been added that allows the user to specify the amount of time the server waits for a ping-check response in milliseconds rather than in seconds (via ping-timeout). When greater than zero, the value of ping-timeout-ms will override the value of ping-timeout. Thanks to Jay Doran from Bluecat Networks for suggesting this feature. [Gitlab #10] - An experimental tool called, Keama (KEA Migration Assistant), which helps translate ISC DHCP configurations to Kea configurations, is now included in the distribution. [Gitlab #34] Changes since 4.4.1 (Bug Fixes) - Corrected a misuse of the BIND9 DDNS API which caused DDNS updates to be carried out over TCP rather than UDP. The coding error was exposed by migration to BIND9 9.11. Thanks to Jinmei Tatuya at Infoblox for reporting the issue. [ISC-Bugs #47757] - Bind9 now defaults to requiring python to build. The Makefile for building Bind9 when bundled with ISC DHCP was modified to turn off this dependency. [Gitlab #3] - Corrected a dual-stack mixed-mode issue that occurs when both ddns-guard-id-must-match and ddns-other-guard-is-dynamic are enabled and that caused the server to incorrectly interpret the presence of a guard record belonging to another client as a case of no guard record at all. Thanks to Fernando Soto from BlueCat Networks for reporting this issue. [Gitlab #1] - Corrected a compilation issue that occurred when building without DNS update ability (e.g. by undefining NSUPDATE). [Gitlab #16] - Corrected an issue that was causing the server, when running in DHPCv4 mode, to segfault when class lease limits are reached. Thanks to Peter Nagy at Porion-Digital for reporting the matter and submitting a patch. [Gitlab #13] - Made minor changes to eliminate warnings when compiled with GCC 9. Thanks to Brett Neumeier for bringing the matter to our attention. [Gitlab #15] - Fixed potential memory leaks in parser error message generation spotted by Coverity, CIDs: 1448191, 1448193, 1448194, 1448195 [Gitlab #30] - Updated URL of IEEE oui.txt in contrib/dhcp-lease-list.pl. Thanks to Tommy Smith for contributing the patch. [Gitlab #26] - Fixed define flags when using SO_BINDTODEVICE. Thanks to Joe LeVeque for reporting the issue. [GitLab #19] - Applied a patch from OpenBSD to always set the scope id of outbound DHPCv6 packets. Note this change only applies when compiling under OpenBSD. Thanks to Brad Smith at OpenBSD from bringing it to our attention. [Gitlab #33] - Modified dhclient to not discard config file leases that are duplicates of server-provided leases and to retain such leases after they have been used as the fallback active lease and DHCP service has been restored. This allows them to be used more than once during the lifetime of a dhclient instance. This applies to DHCPv4 operation only. [Gitlab #9] - Corrected a number of reference counter and zero-length buffer leaks. Thanks to Christopher Ertl of MSRC Vulnerabilities & Mitigations for pointing them out. [Gitlab #57] - Closed a small window of time between the installation of graceful shutdown signal handlers and application context startup, during which the receipt of shutdown signal would cause a REQUIRE() assertion to occur. Note this issue is only visible when compiling with ENABLE_GENTLE_SHUTDOWN defined. [Gitlab #53] - Corrected a buffer overflow that can occur when retrieving zone names that are more than 255 characters in length. [Gitlab #20] - The "d" domain name option format was incorrectly handled as text instead of RFC 1035 wire format. Thanks to Jay Doran at BlueCat Networks for reporting this issue. [Gitlab #2] - Improved the error message issued when a host declaration has both a uid and a dhcp-client-identifier. Server configuration parsing will now fail if a host declaration specifies more than one uid. [Gitlab #7] - Updated developer's documentation on building and running unit tests. Removed support for --with-atf=bind as BIND9 no longer bundles in ATF source. [Gitlab #35] - Fixed a syntax error in ldap.c which cropped up under Ubuntu 18.04.1/gcc 7.4.0. Thanks to Charles Hedrick for pointing it out. [Gitlab #51] - Added clarification to dhcp-options.5 section on ip-address values describing the first-use DNS resolution of options with hostnames as values (e.g. next-server). [Gitlab #28] - The option format for the server option omapi-key was changed to a format type 'k' (key name); while server options ldap-port and ldap-init-retry were changed to 'L' (unsigned 32-bit integer). These three options were inadvertantly broken when the 'd' format content was changed to comply with RFC 1035 wire format (see Gitlab #2). [Gitlab #68] Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/dhcp | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/dhcp b/lfs/dhcp index 5cf7e3545..d60e04727 100644 --- a/lfs/dhcp +++ b/lfs/dhcp @@ -24,7 +24,7 @@ include Config -VER = 4.4.1 +VER = 4.4.2 THISAPP = dhcp-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -42,7 +42,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 18c7f4dcbb0a63df25098216d47b1ede +$(DL_FILE)_MD5 = 2afdaf8498dc1edaf3012efdd589b3e1 install : $(TARGET) -- 2.31.1

2 3

[PATCH] openssh: Update to 8.6p1
by Adolf Belka 20 Apr '21

20 Apr '21

- Update from 8.5p1 to 8.6p1 - Update of rootfile not needed - Changelog Future deprecation notice It is now possible[1] to perform chosen-prefix attacks against the SHA-1 algorithm for less than USD$50K. In the SSH protocol, the "ssh-rsa" signature scheme uses the SHA-1 hash algorithm in conjunction with the RSA public key algorithm. OpenSSH will disable this signature scheme by default in the near future. Note that the deactivation of "ssh-rsa" signatures does not necessarily require cessation of use for RSA keys. In the SSH protocol, keys may be capable of signing using multiple algorithms. In particular, "ssh-rsa" keys are capable of signing using "rsa-sha2-256" (RSA/SHA256), "rsa-sha2-512" (RSA/SHA512) and "ssh-rsa" (RSA/SHA1). Only the last of these is being turned off by default. This algorithm is unfortunately still used widely despite the existence of better alternatives, being the only remaining public key signature algorithm specified by the original SSH RFCs that is still enabled by default. The better alternatives include: * The RFC8332 RSA SHA-2 signature algorithms rsa-sha2-256/512. These algorithms have the advantage of using the same key type as "ssh-rsa" but use the safe SHA-2 hash algorithms. These have been supported since OpenSSH 7.2 and are already used by default if the client and server support them. * The RFC8709 ssh-ed25519 signature algorithm. It has been supported in OpenSSH since release 6.5. * The RFC5656 ECDSA algorithms: ecdsa-sha2-nistp256/384/521. These have been supported by OpenSSH since release 5.7. To check whether a server is using the weak ssh-rsa public key algorithm, for host authentication, try to connect to it after removing the ssh-rsa algorithm from ssh(1)'s allowed list: ssh -oHostKeyAlgorithms=-ssh-rsa user@host If the host key verification fails and no other supported host key types are available, the server software on that host should be upgraded. OpenSSH recently enabled the UpdateHostKeys option by default to assist the client by automatically migrating to better algorithms. [1] "SHA-1 is a Shambles: First Chosen-Prefix Collision on SHA-1 and Application to the PGP Web of Trust" Leurent, G and Peyrin, T (2020) https://eprint.iacr.org/2020/014.pdf Security * sshd(8): OpenSSH 8.5 introduced the LogVerbose keyword. When this option was enabled with a set of patterns that activated logging in code that runs in the low-privilege sandboxed sshd process, the log messages were constructed in such a way that printf(3) format strings could effectively be specified the low-privilege code. An attacker who had sucessfully exploited the low-privilege process could use this to escape OpenSSH's sandboxing and attack the high-privilege process. Exploitation of this weakness is highly unlikely in practice as the LogVerbose option is not enabled by default and is typically only used for debugging. No vulnerabilities in the low-privilege process are currently known to exist. Thanks to Ilja Van Sprundel for reporting this bug. Changes since OpenSSH 8.5 This release contains mostly bug fixes. New features * sftp-server(8): add a new limits(a)openssh.com protocol extension that allows a client to discover various server limits, including maximum packet size and maximum read/write length. * sftp(1): use the new limits(a)openssh.com extension (when available) to select better transfer lengths in the client. * sshd(8): Add ModuliFile keyword to sshd_config to specify the location of the "moduli" file containing the groups for DH-GEX. * unit tests: Add a TEST_SSH_ELAPSED_TIMES environment variable to enable printing of the elapsed time in seconds of each test. Bugfixes * ssh_config(5), sshd_config(5): sync CASignatureAlgorithms lists in manual pages with the current default. GHPR174 * ssh(1): ensure that pkcs11_del_provider() is called before exit. GHPR234 * ssh(1), sshd(8): fix problems in string->argv conversion. Multiple backslashes were not being dequoted correctly and quoted space in the middle of a string was being incorrectly split. GHPR223 * ssh(1): return non-zero exit status when killed by signal; bz#3281 * sftp-server(8): increase maximum SSH2_FXP_READ to match the maximum packet size. Also handle zero-length reads that are not explicitly banned by the spec. Portability * sshd(8): don't mistakenly exit on transient read errors on the network socket (e.g. EINTR, EAGAIN); bz3297 * Create a dedicated contrib/gnome-ssk-askpass3.c source instead of building it from the same file as used for GNOME2. Use the GNOME3 gdk_seat_grab() to manage keyboard/mouse/server grabs for better compatibility with Wayland. * Fix portability build errors bz3293 bz3292 bz3291 bz3278 * sshd(8): soft-disallow the fstatat64 syscall in the Linux seccomp-bpf sandbox. bz3276 * unit tests: enable autoopt and misc unit tests that were previously skipped Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/openssh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/openssh b/lfs/openssh index 2a07d9e65..3117e996c 100644 --- a/lfs/openssh +++ b/lfs/openssh @@ -24,7 +24,7 @@ include Config -VER = 8.5p1 +VER = 8.6p1 THISAPP = openssh-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 9eb9420cf587edc26f8998ab679ad390 +$(DL_FILE)_MD5 = 805f7048aec6dd752584e570383a6f00 install : $(TARGET) -- 2.31.1

2 1

[PATCH] pixman: Update to 0.40.0
by Adolf Belka 19 Apr '21

19 Apr '21

- Update from 0.34.0 to 0.40.0 - Update of rootfile - Changelog The ChangeLog and NEWS files in the source tarball are empty The only info on the changes is the git repository. https://cgit.freedesktop.org/pixman/log/ Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/pixman | 2 +- lfs/pixman | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/common/pixman b/config/rootfiles/common/pixman index 34b2a3fb6..28e7c692a 100644 --- a/config/rootfiles/common/pixman +++ b/config/rootfiles/common/pixman @@ -5,5 +5,5 @@ #usr/lib/libpixman-1.la usr/lib/libpixman-1.so usr/lib/libpixman-1.so.0 -usr/lib/libpixman-1.so.0.34.0 +usr/lib/libpixman-1.so.0.40.0 #usr/lib/pkgconfig/pixman-1.pc diff --git a/lfs/pixman b/lfs/pixman index 77a3781ea..644fd7139 100644 --- a/lfs/pixman +++ b/lfs/pixman @@ -24,7 +24,7 @@ include Config -VER = 0.34.0 +VER = 0.40.0 THISAPP = pixman-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = e80ebae4da01e77f68744319f01d52a3 +$(DL_FILE)_MD5 = 73858c0862dd9896fb5f62ae267084a4 install : $(TARGET) -- 2.31.1

1 0

[PATCH] ncat: Update to 7.91
by Adolf Belka 19 Apr '21

19 Apr '21

- Update from 7.80 to 7.91 - Update of rootfile - Changelog is too long to include here Full details can be found in the CHANGELOG file in the source tarball Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/ncat | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/ncat b/lfs/ncat index ab954e732..9480cd95a 100644 --- a/lfs/ncat +++ b/lfs/ncat @@ -24,7 +24,7 @@ include Config -VER = 7.80 +VER = 7.91 THISAPP = ncat-$(VER) DL_FILE = nmap-$(VER).tar.bz2 @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/nmap-$(VER) TARGET = $(DIR_INFO)/$(THISAPP) PROG = ncat -PAK_VER = 4 +PAK_VER = 5 DEPS = @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = d37b75b06d1d40f27b76d60db420a1f5 +$(DL_FILE)_MD5 = 239cef725863ab454590a1bb8793b72b install : $(TARGET) -- 2.31.1

1 1

[PATCH] fuse: Update to 3.10.3
by Adolf Belka 19 Apr '21

19 Apr '21

- Update from 3.10.1 to 3.10.3 - Update of rootfile - Changelog libfuse 3.10.3 (2021-04-12) * Fix returning d_ino and d_type from readdir(3) in non-plus mode libfuse 3.10.2 (2021-02-05) * Allow "nonempty" as a mount option, for backwards compatibility with fusermount 2. The option has no effect since mounting over non-empty directories is allowed by default. * Fix returning inode numbers from readdir() in offset==0 mode. * FUSE filesystems can now be mounted underneath EXFAT mountpoints. * Various minor bugfixes. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/fuse | 24 ++---------------------- lfs/fuse | 8 +++++--- 2 files changed, 7 insertions(+), 25 deletions(-) diff --git a/config/rootfiles/common/fuse b/config/rootfiles/common/fuse index bae55b321..3a0a52378 100644 --- a/config/rootfiles/common/fuse +++ b/config/rootfiles/common/fuse @@ -1,27 +1,8 @@ +#etc/fuse.conf #etc/rc.d/init.d/fuse3 -#lib/udev/rules.d/99-fuse3.rules etc/udev/rules.d/99-fuse3.rules sbin/mount.fuse3 usr/bin/fusermount3 -#usr/local/bin/fusermount3 -#usr/local/etc -#usr/local/etc/fuse.conf -#usr/local/include/fuse3 -#usr/local/include/fuse3/cuse_lowlevel.h -#usr/local/include/fuse3/fuse.h -#usr/local/include/fuse3/fuse_common.h -#usr/local/include/fuse3/fuse_log.h -#usr/local/include/fuse3/fuse_lowlevel.h -#usr/local/include/fuse3/fuse_opt.h -#usr/local/lib/libfuse3.so -#usr/local/lib/libfuse3.so.3 -#usr/local/lib/libfuse3.so.3.10.1 -#usr/local/lib/pkgconfig -#usr/local/lib/pkgconfig/fuse3.pc -#usr/local/sbin/mount.fuse3 -#usr/local/share/man/man1/fusermount3.1 -#usr/local/share/man/man8/mount.fuse3.8 -#etc/fuse.conf #usr/include/fuse3 #usr/include/fuse3/cuse_lowlevel.h #usr/include/fuse3/fuse.h @@ -31,8 +12,7 @@ usr/bin/fusermount3 #usr/include/fuse3/fuse_opt.h #usr/lib/libfuse3.so usr/lib/libfuse3.so.3 -usr/lib/libfuse3.so.3.10.1 +usr/lib/libfuse3.so.3.10.3 #usr/lib/pkgconfig/fuse3.pc -#usr/sbin/mount.fuse3 #usr/share/man/man1/fusermount3.1 #usr/share/man/man8/mount.fuse3.8 diff --git a/lfs/fuse b/lfs/fuse index 167612f68..5235348a5 100644 --- a/lfs/fuse +++ b/lfs/fuse @@ -24,7 +24,7 @@ include Config -VER = 3.10.1 +VER = 3.10.3 THISAPP = fuse-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = e973012119e98b048307558271b5b296 +$(DL_FILE)_MD5 = 75546f9070323b8ce69c2ed8ffff20c4 install : $(TARGET) @@ -73,7 +73,9 @@ $(subst %,%_MD5,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) - cd $(DIR_APP) && meson --prefix=/usr builddir && cd builddir && ninja && ninja install + cd $(DIR_APP) && meson --prefix=/usr builddir/ + cd $(DIR_APP) && ninja -C builddir/ + cd $(DIR_APP) && ninja -C builddir/ install # Move mount.fuse3 to same location as mount.fuse was in previous version mv -v /usr/sbin/mount.fuse3 /sbin -- 2.31.1

1 0

[PATCH] Digest: Update to 1.19
by Adolf Belka 19 Apr '21

19 Apr '21

- Update from 1.08 to 1.19 - Update of rootfile - Changelog 1.19 Tue 2020-10-13 - Merge blead change: Remove . from @INC when loading optional modules. 1.18 Tue 2020-10-13 - Correct documentation for add_bits - Explain $args,... in constructor prototypes - Add base64_padded_digest method - Add support for the SHA3 digests - Update .gitignore and get make manifest working - Github CI - Move Digest to a more modern directory tree layout - Enable strict/warnings for code and tests - Drop use vars - Provide a consistent tidy to the code base - Get rid of the use of bareword file handles - Modernize the changelog - Use File::Temp for temporary test files 1.17 Sun 2011-10-02 - Less noisy 'git status' output - Gisle Aas - Merge pull request #1 from schwern/bug/require_eval - Gisle Aas - Don't clobber $@ in Digest->new [RT#50663] - Gisle Aas - More meta info added to Makefile.PL - Gisle Aas - Fix typo in RIPEMD160 [RT#50629] - Gisle Aas - Add schwern's test files - Gisle Aas - Turn on strict. - Michael G. Schwern - Convert tests to use Test::More - Michael G. Schwern - Untabify - Michael G. Schwern - Turn Digest::Dummy into a real file which exercises the Digest->new() require logic. - Michael G. Schwern - Close the eval "require $module" security hole in Digest->new($algorithm) - Michael G. Schwern 1.16 Tue 2009-06-09 - For SHA-1 try Digest::SHA before tryign Digest::SHA1 as suggested by Adam Trickett - Gisle Aas - Support Digest->new("RIPEMD-160") as suggested by Zefram - Gisle Aas - Use 3-arg open for fewer surprises - Gisle Aas - Sync up with EBCDIC changes from core perl - Jarkko Hietaniemi 1.15 Mon 2006-03-20 - Improved documentation. 1.14 Sat 2005-11-26 - Documentation tweaks. 1.13 Tue 2005-10-18 - Fixed documentation typo. 1.12 Thu 2005-09-29 - Fix documentation typo. Patch by <steve(a)fisharerojo.org>. 1.11 Sun 2005-09-11 - Make Digest->new("SHA-224") work. Patch by Mark Shelor <shelor(a)cpan.org>. 1.10 Mon 2004-11-08 - Added Digest::file module which provide convenience functions that calculate digests of files. 1.09 Fri 2004-11-05 - Fix trivial documentation typo. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/Digest | 7 ++++++- lfs/Digest | 4 ++-- 2 files changed, 8 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/common/Digest b/config/rootfiles/common/Digest index 5a883f604..d03e493a7 100644 --- a/config/rootfiles/common/Digest +++ b/config/rootfiles/common/Digest @@ -1 +1,6 @@ -#usr/lib/perl5/5.32.1/xxxMACHINExxx-linux-thread-multi/auto/Digest/.packlist +#usr/lib/perl5/site_perl/5.32.1/Digest +usr/lib/perl5/site_perl/5.32.1/Digest.pm +usr/lib/perl5/site_perl/5.32.1/Digest/base.pm +usr/lib/perl5/site_perl/5.32.1/Digest/file.pm +#usr/lib/perl5/site_perl/5.32.1/xxxMACHINExxx-linux-thread-multi/auto/Digest +#usr/lib/perl5/site_perl/5.32.1/xxxMACHINExxx-linux-thread-multi/auto/Digest/.packlist diff --git a/lfs/Digest b/lfs/Digest index 3c66fc1cf..e36ce4f50 100644 --- a/lfs/Digest +++ b/lfs/Digest @@ -24,7 +24,7 @@ include Config -VER = 1.08 +VER = 1.19 THISAPP = Digest-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = ff67433be423c036b71e60dfddb5cdd5 +$(DL_FILE)_MD5 = 477a3755e660df3d673e54472575c6af install : $(TARGET) -- 2.31.1

1 0

[PATCH] dejavu-fonts-ttf: Update to 2.37
by Adolf Belka 19 Apr '21

19 Apr '21

- Update from 2.33 to 2.37 - Update of rootfile - Changelog Changes from 2.35 to 2.36 * Fix issue with empty glyphs in condensed typefaces in the released source files. * Math: added DejaVu Math Tex Gyre by B. Jackowski, P. Strzelczyk and P. Pianowski (on behalf of TeX users groups) * Sans: removed dot of U+06BA in all forms * Sans: fixed position of three dots of U+06BD in init and medi forms (by Denis Jacquerye) * Sans: corrected direction of contours in U+05E7 (by Lior Halphon) * Sans: added U+1F643 (by Olleg Samoylov) * Serif: moved up U+0360-0361 (by Gee Fung Sit 薛至峰) * Serif: increased spacing of Roman numerals U+2161-2163, U+2165-2168, U+216A-216B (by Gee Fung Sit 薛至峰) * Serif: fixed anchor position of U+00E6 (by Gee Fung Sit 薛至峰) * Sans: fixed vertical position of U+20BA (by Gee Fung Sit 薛至峰) * Sans, Serif: fixed glyph height of Block Elements (by Gee Fung Sit 薛至峰) * Sans, Serif: added U+A698-A699 (by Gee Fung Sit 薛至峰) * Sans, Mono, Serif: added U+037F (by Gee Fung Sit 薛至峰) * Mono: added U+0376-0377, U+037B-037D (by Gee Fung Sit 薛至峰) * Serif: removed duplicate point from U+1D05 (by Gee Fung Sit 薛至峰) * Mono: added U+20BA, U+20BD (by Gee Fung Sit 薛至峰) * Sans: added moon symbols U+1F311-1F318 (by Ben Laenen) Changes from 2.34 to 2.35 * Sans, SansMono, Serif: added U+0E3F, U+A7F8-U+A7F9 (by Gee Fung Sit 薛至峰) * Sans, SansMono, Serif: moved inverted marks U+00A1, U+00BF, U+2E18 to x-height and added 'case' feature using original glyphs+hints (by Gee Fung Sit 薛至峰) * Sans, SansMono, Serif: fixed glyph heights in Box Drawing block (by Gee Fung Sit 薛至峰) * SansMono, Serif: adjusted U+016E to prevent cut-off (by Gee Fung Sit 薛至峰) * Sans: added U+269E-U+269F (by Lars Næsbye Christensen) * Sans: added U+06C7-U+06C8, U+06CB, U+06D0 and their presentation forms U+FBD7-U+FBD8, U+FBDB-U+FBDC, U+FBDE-U+FBDF, U+FBE4-U+FBE7 (by MihailJP) * Sans: added isolated, initial and stretched forms in the Arabic Mathematical Alphabetic Symbols block, U+1EE00 et seq. (by Gee Fung Sit 薛至峰) * Sans: restored GSUB tables for Hebrew (by Gee Fung Sit 薛至峰) * Sans: fixed U+1D301-U+1D303 (bug 73532) (by Gee Fung Sit 薛至峰) * Sans: fixed instructions for U+0394, U+039B in Bold (bug 16442) (by Gee Fung Sit 薛至峰) * Sans: minor improvements/fixes to U+07D4, U+203D, U+20A6, U+20BA, U+2E18, U+A782-U+A783 (by Gee Fung Sit 薛至峰) * Sans: moved U+2E1F to correct code point, was off by one (by Gee Fung Sit 薛至峰) * SansExtraLight: added U+0184-U+0185, U+019B, U+01B7-U+01B9, U+01EE-U+01EF, U+0292, U+0298, U+0E3F, U+04E0-U+04E1, U+0516-U+0519 (by Gee Fung Sit 薛至峰) * SansMono: added U+203F, U+2150-U+2151, U+2189, U+220E, U+2210, U+2223, U+228D-U+228E, U+2293-U+2294, U+22B2-U+22B5, U+22B8, U+22C2-U+22C3, U+22CE-U+22D1, U+27DC, U+27EA-U+27EB, U+27F5-U+27F7, U+2987-U+2988, U+2997-U+2998, U+2A00 (by Gee Fung Sit 薛至峰) * SansMono: minor improvements/fixes to U+018C and U+018D, U+026F-U+0270 (by Gee Fung Sit 薛至峰) * SansMono: fixed glyph heights in Block Elements block (bug 14316) (by Gee Fung Sit 薛至峰) * Serif: replaced inverted breve on U+0202, U+0206, U+020A, U+020E, U+0212, U+0216 with its case form to prevent cut-off (by Gee Fung Sit 薛至峰) * Serif: redesigned/redrawn U+01E5, U+025E, U+0262, U+0277-U+0278, U+029A-U+029B (by Gee Fung Sit 薛至峰) * Serif: minor improvements/fixes to U+00DF, U+017B, U+01E4, U+0265, U+026F-U+0270, U+0280-U+0281, U+0294-U+0297, U+029F, U+02A1-U+02A2, U+03FB, U+1D0C, U+20A6, U+20B8, U+A731 (by Gee Fung Sit 薛至峰) * Serif: added stylistic alternatives for U+0110-U+0111, U+01E4-U+01E5 (by Gee Fung Sit 薛至峰) * Serif: added or adjusted anchors for U+0294, U+0256, U+041D (by Denis Jacquerye) * Sans, Serif: added OpenType MATH table (by Frédéric Wang) * Sans, Serif: added displaystyle math operators (by Frédéric Wang) * Serif: added italic mathematical alphanumeric characterd (by Frédéric Wang) * Serif: added construction for stretchy radical symbol (by Frédéric Wang) * Serif: added stylistic ssty variants for prime symbols * Sans, Serif: fixed incorrect glyph for U+22C4 (by Gee Fung Sit 薛至峰) * SansMono: added U+22C4 (by Gee Fung Sit 薛至峰) * SansMono: added to U+2336, U+233F-U+2340, U+2345-U+2346, U+234A, U+234E-U+234F, U+2351, U+2355-U+2356, U+235D, U+2361-U+2362, U+2366-U+2367, U+236A, U+2371-U+2372 (by Sami Tarazi) * Serif: added U+20BA (by Gee Fung Sit 薛至峰) * Sans, Serif: added U+20BD (by Gee Fung Sit 薛至峰) Changes from 2.33 to 2.34 * Sans, SansMono, Serif: unlinked references of U+2596 for bug 50848 (by Denis Jacquerye) * Sans, SansMono, Serif: added U+A7AA (by Denis Jacquerye) * Sans, SansMono, Serif: added U+2A6A, U+2A6B, U+2E1F based on U+223B (by Denis Jacquerye) * Sans, Serif: removed superfluous ligature definitions for ffl und ffi (bug 55363) (by Gee Fung Sit 薛至峰) * Sans, Serif: swapped glyphs for U+25D2 and U+25D3 (bug 55197) (by Gee Fung Sit 薛至峰) * Sans, Serif: added U+A740, U+A741 (by Denis Jacquerye) * Sans: added U+20BA Turkish Lira sign (by Denis Jacquerye) * Sans: replaced Georgian Asomtavruli U+10A0-U+10C5 and Mkhedruli U+10D0-U+10FC with new version (by Besarion Gugushvili) * Sans: added Georgian Nuskhuri U+2D00-U+U+2D25 (by Besarion Gugushvili) * Sans: added Private Use Area glyphs for Georgian U+F400-U+F441 (by Besarion Gugushvili) * Sans: tweaked U+0250, U+0254 (by Denis Jacquerye) * Sans: adjusted hinting of U+032C-U+032D, avoiding problem on some platforms (by Denis Jacquerye) * Sans: added U+A7A0-U+A7A9, pre-1921 Latvian letters with oblique stroke (by Denis Jacquerye) * Sans: added anchors to U+2C6D (by Denis Jacquerye) * Sans: added cedilla anchor to some Latin characters (by Denis Jacquerye) * Sans: added ogonek anchor to A, E, O, U, Y (by Denis Jacquerye) * Sans: adjusted ogonek reference in U+0172, U+01EA, U+01EB (by Denis Jacquerye) * Sans: added anchors to U+0104, U+0105 (by Denis Jacquerye) * Sans: added U+1F600, U+1F611, U+1F615, U+1F617, U+1F619, U+1F61B, U+1F61F, U+1F626-U+1F627, U+1F62E-U+1F62F, U+1F634 (by Gee Fung Sit 薛至峰) * Sans: replaced U+27A1 with mirror image of U+2B05 for consistency (by Gee Fung Sit 薛至峰) * Sans: copied hints from U+14A3, U+14A7 to U+2142-U+2143 (by Gee Fung Sit 薛至峰) * Sans: added Lisu block (by Gee Fung Sit 薛至峰) * Sans: typographical improvements to U+0166-U+0167, U+02A6, U+02AA (by Gee Fung Sit 薛至峰) * Sans: slightly change hinting of "2" to fix bug 37395 (by Ben Laenen) * Sans: fixed U+1444 which had wrong top dot that shouldn't be there (by Denis Jacquerye) * Sans: added anchors for diacritics to U+01B7, U+01B8, U+01B9, U+0292 (by Denis Jacquerye) * Sans: added U+01B7, U+01B8 to context for case diacritics above * SansMono: fixed U+0574 (by Ruben Hakobian) * SansMono: added U+2016, U+27C2 (by Yoshiki Ohshima) * SansMono: added U+02CE, U+02CF (by Denis Jacquerye) * SansMono: added U+2148, U+27E6-U+27E7, U+2B05-U+2B0D, U+1D55A (by Gee Fung Sit 薛至峰) * Serif: added U+02BA, U+02C2-U+02C5, U+02CA-U+02CB, U+02D7, U+02F3, U+02F7, U+046C-U+046D, U+0476-U+0477, U+1D7C-U+1D7F, U+20B8, U+2132, U+214E, U+2C7B to Serif (by Gee Fung Sit 薛至峰) * Serif: typographic improvements to U+0194, U+01B1, U+0263, U+028A, U+02A6, U+02A8, U+02AA, U+02E0, U+03DC, U+1D3B, U+1D7B (by Gee Fung Sit 薛至峰) * Serif: added small cap versions of q, x (in italic styles), delta, theta, xi, sigma, phi, omega, not wired in yet (by Gee Fung Sit 薛至峰) * Serif: added anchors to U+0234-U+0236 (by Gee Fung Sit 薛至峰) * Serif: added U+02EC, U+02EF, U+02F0, U+0360 (by Denis Jacquerye) Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/dejavu-fonts-ttf | 1 + lfs/dejavu-fonts-ttf | 4 ++-- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/config/rootfiles/common/dejavu-fonts-ttf b/config/rootfiles/common/dejavu-fonts-ttf index 0dfb50374..d41943bd1 100644 --- a/config/rootfiles/common/dejavu-fonts-ttf +++ b/config/rootfiles/common/dejavu-fonts-ttf @@ -1,4 +1,5 @@ #usr/share/fonts +usr/share/fonts/DejaVuMathTeXGyre.ttf usr/share/fonts/DejaVuSans-Bold.ttf usr/share/fonts/DejaVuSans-BoldOblique.ttf usr/share/fonts/DejaVuSans-ExtraLight.ttf diff --git a/lfs/dejavu-fonts-ttf b/lfs/dejavu-fonts-ttf index e42a50217..b94910b5d 100644 --- a/lfs/dejavu-fonts-ttf +++ b/lfs/dejavu-fonts-ttf @@ -25,7 +25,7 @@ include Config -VER = 2.33 +VER = 2.37 THISAPP = dejavu-fonts-ttf-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -41,7 +41,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 8b601e91725b6d69141b0fcf527948c0 +$(DL_FILE)_MD5 = d0efec10b9f110a32e9b8f796e21782c install : $(TARGET) -- 2.31.1

1 0

[PATCH] curl: Update to 7.76.1
by Adolf Belka 19 Apr '21

19 Apr '21

- Update from 7.75.0 to 7.76.1 - Update of rootfile - Changelog is too large to include here. Full details can be found in the CHANGES file in the source tarball Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/curl | 4 ++++ lfs/curl | 4 ++-- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/config/rootfiles/common/curl b/config/rootfiles/common/curl index a542bd6c9..83a85d548 100644 --- a/config/rootfiles/common/curl +++ b/config/rootfiles/common/curl @@ -61,6 +61,7 @@ usr/lib/libcurl.so.4.7.0 #usr/share/man/man3/CURLINFO_REDIRECT_TIME.3 #usr/share/man/man3/CURLINFO_REDIRECT_TIME_T.3 #usr/share/man/man3/CURLINFO_REDIRECT_URL.3 +#usr/share/man/man3/CURLINFO_REFERER.3 #usr/share/man/man3/CURLINFO_REQUEST_SIZE.3 #usr/share/man/man3/CURLINFO_RESPONSE_CODE.3 #usr/share/man/man3/CURLINFO_RETRY_AFTER.3 @@ -148,6 +149,9 @@ usr/lib/libcurl.so.4.7.0 #usr/share/man/man3/CURLOPT_DNS_SERVERS.3 #usr/share/man/man3/CURLOPT_DNS_SHUFFLE_ADDRESSES.3 #usr/share/man/man3/CURLOPT_DNS_USE_GLOBAL_CACHE.3 +#usr/share/man/man3/CURLOPT_DOH_SSL_VERIFYHOST.3 +#usr/share/man/man3/CURLOPT_DOH_SSL_VERIFYPEER.3 +#usr/share/man/man3/CURLOPT_DOH_SSL_VERIFYSTATUS.3 #usr/share/man/man3/CURLOPT_DOH_URL.3 #usr/share/man/man3/CURLOPT_EGDSOCKET.3 #usr/share/man/man3/CURLOPT_ERRORBUFFER.3 diff --git a/lfs/curl b/lfs/curl index 0d8f6a6fd..cd4cc26d1 100644 --- a/lfs/curl +++ b/lfs/curl @@ -24,7 +24,7 @@ include Config -VER = 7.75.0 +VER = 7.76.1 THISAPP = curl-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 9730df8636d67b4e256ebc49daf27246 +$(DL_FILE)_MD5 = 5296108646ca7f318b468a7a9d4a0eb2 install : $(TARGET) -- 2.31.1

1 0

← Newer
1
2
3
4
5
6
7
8
9
...
17
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development April 2021