Development September 2021

development@lists.ipfire.org

9 participants
91 discussions

[PATCH] libgcrypt: Update to version 1.9.4
by Adolf Belka 06 Sep '21

06 Sep '21

- Update from 1.9.3 to 1.9.4 - Update rootfile - Changelog Release 1.9.4. 2021-08-22 Jussi Kivilinna <jussi.kivilinna(a)iki.fi> mpi/longlong.h: fix missing macro parameter parentheses. * mpi/longlong.h [__alpha] (umul_ppmm): Add parentheses around used parameters. [__i370__] (sdiv_qrnnd): Ditto. [__mips__] (umul_ppmm): Ditto. [__vax__] (sdiv_qrnnd): Ditto. tests/t-mpi-point: add NIST curve multiplication test vectors. * tests/t-mpi-point.c (mpi_base10_scan, check_ec_mul): New. (main): Call 'check_ec_mul'. 2021-08-22 Werner Koch <wk(a)gnupg.org> ecc: Fix bug in gcry_pk_get_param for Curve25519. * cipher/ecc-curves.c (_gcry_ecc_get_param_sexp): Simplify. * cipher/pubkey.c (map_algo): Also map EDDSA to ECC. * tests/curves.c (check_get_params): Add simple param lookup tests by for all curves. 2021-08-22 Johannes Schindelin via Gcrypt-devel <gcrypt-devel(a)gnupg.org> build: Fix broken mlock detection. * acinclude.m4 [GNUPG_CHECK_MLOCK]: Use size_t for the ptr test. 2021-08-22 Werner Koch <wk(a)gnupg.org> cipher: Extend convenience OID mapping table for AES. * cipher/rijndael.c: Add OIDs for GCM and CCM. Minor tweak to gcry_free. * src/global.c (_gcry_free): Avoid setting errno again if it did not change. 2021-08-22 NIIBE Yutaka <gniibe(a)fsij.org> random: Silence a warning for building rndjent by Clang. * random/jitterentropy-base.c: Conditionalize by __OPTIMIZE__. 2021-08-22 Tianjia Zhang <tianjia.zhang(a)linux.alibaba.com> cipher: Fix memory leaks for EdDSA. * cipher/ecc-eddsa.c (_gcry_ecc_eddsa_genkey): Initialize point Q when used. 2021-08-22 NIIBE Yutaka <gniibe(a)fsij.org> ecc: Check the input length for the point. * cipher/ecc-misc.c (_gcry_ecc_mont_decodepoint): Check the length of valid point representation. 2021-08-22 Jussi Kivilinna <jussi.kivilinna(a)iki.fi> hwf-x86: fix use of wrong operand type. * src/hwf-x86.c (get_cpuid): Use xchg for swapping %ebx back and forth between operand register. 2021-05-27 NIIBE Yutaka <gniibe(a)fsij.org> build: _DARWIN_C_SOURCE should be 1. * configure.ac (*-apple-darwin*): Set _DARWIN_C_SOURCE 1. 2021-05-26 NIIBE Yutaka <gniibe(a)fsij.org> cipher: Fix ElGamal encryption for other implementations. * cipher/elgamal.c (gen_k): Remove support of smaller K. (do_encrypt): Never use smaller K. (sign): Folllow the change of gen_k. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/libgcrypt | 2 +- lfs/libgcrypt | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/common/libgcrypt b/config/rootfiles/common/libgcrypt index 5f792a323..8ca5cb325 100644 --- a/config/rootfiles/common/libgcrypt +++ b/config/rootfiles/common/libgcrypt @@ -6,7 +6,7 @@ #usr/lib/libgcrypt.la #usr/lib/libgcrypt.so usr/lib/libgcrypt.so.20 -usr/lib/libgcrypt.so.20.3.3 +usr/lib/libgcrypt.so.20.3.4 #usr/lib/pkgconfig/libgcrypt.pc #usr/share/aclocal/libgcrypt.m4 #usr/share/info/gcrypt.info diff --git a/lfs/libgcrypt b/lfs/libgcrypt index 5f4a9454a..23a9f1f24 100644 --- a/lfs/libgcrypt +++ b/lfs/libgcrypt @@ -24,7 +24,7 @@ include Config -VER = 1.9.3 +VER = 1.9.4 THISAPP = libgcrypt-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 3fcb490b9b7347344708eeb7b4a95464 +$(DL_FILE)_MD5 = edc7becfe09c75d8f95ff7623e40c52e install : $(TARGET) -- 2.33.0

2 1

[PATCH] xfsprogs: Update to version 5.13.0
by Adolf Belka 06 Sep '21

06 Sep '21

- Update from 5.12.0 to 5.13.0 - Update of rootfile not required - Changelog xfsprogs-5.13.0 (20 Aug 2021) - No further changes xfsprogs-5.13.0-rc1 (02 Aug 2021) - mkfs: validate rtextsz hint when rtinherit is set (Darrick J. Wong) - xfs_repair: invalidate dirhash when junking dirent (Darrick J. Wong) - xfs_repair: validate inherited rtextsz hint alignmt (Darrick J. Wong) - xfs_quota: allow truncate of grp & prj quota files (Darrick J. Wong) - xfs_io: allow callers to dump fs stats individually (Darrick J. Wong) - xfs_io: don't count fsmaps before querying fsmaps (Darrick J. Wong) - xfs_io: print header once when dumping fsmap in csv (Darrick J. Wong) - xfs_io: clean up the funshare command a bit (Darrick J. Wong) - xfs_io: fix broken funshare_cmd usage (Darrick J. Wong) xfsprogs-5.13.0-rc0 (01 Jul 2021) - libxfs changes merged from kernel 5.13 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/xfsprogs | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/xfsprogs b/lfs/xfsprogs index 90a43d34d..ae583f64b 100644 --- a/lfs/xfsprogs +++ b/lfs/xfsprogs @@ -24,7 +24,7 @@ include Config -VER = 5.12.0 +VER = 5.13.0 THISAPP = xfsprogs-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -45,7 +45,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = b401d76ccd66e4fdf3d123193e5e1b91 +$(DL_FILE)_MD5 = 86777a5762f2e524bb9acfdead5a9045 install : $(TARGET) -- 2.33.0

2 1

[PATCH] Postfix: update to 3.6.2
by Peter Müller 04 Sep '21

04 Sep '21

Please refer to http://www.postfix.org/announcements/postfix-3.6.2.html for this version's release announcement. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/postfix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/postfix b/lfs/postfix index 3735f7e69..f6892c1c1 100644 --- a/lfs/postfix +++ b/lfs/postfix @@ -24,7 +24,7 @@ include Config -VER = 3.6.1 +VER = 3.6.2 THISAPP = postfix-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = postfix -PAK_VER = 31 +PAK_VER = 32 DEPS = @@ -66,7 +66,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 85d1c2b06a469ba6cc61946c7042e40e +$(DL_FILE)_MD5 = 4718b498fa4285cf275f506c169f4746 install : $(TARGET) -- 2.26.2

1 0

[PATCH] Tor: update to 0.4.6.7
by Peter Müller 04 Sep '21

04 Sep '21

Full changelog as per https://gitweb.torproject.org/tor.git/plain/ChangeLog?h=tor-0.4.6.7: Changes in version 0.4.6.7 - 2021-08-16 This version fixes several bugs from earlier versions of Tor, including one that could lead to a denial-of-service attack. Everyone running an earlier version, whether as a client, a relay, or an onion service, should upgrade to Tor 0.3.5.16, 0.4.5.10, or 0.4.6.7. o Major bugfixes (cryptography, security): - Resolve an assertion failure caused by a behavior mismatch between our batch-signature verification code and our single-signature verification code. This assertion failure could be triggered remotely, leading to a denial of service attack. We fix this issue by disabling batch verification. Fixes bug 40078; bugfix on 0.2.6.1-alpha. This issue is also tracked as TROVE-2021-007 and CVE-2021-38385. Found by Henry de Valence. o Minor feature (fallbackdir): - Regenerate fallback directories list. Close ticket 40447. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2021/08/12. o Minor bugfix (crypto): - Disable the unused batch verification feature of ed25519-donna. Fixes bug 40078; bugfix on 0.2.6.1-alpha. Found by Henry de Valence. o Minor bugfixes (onion service): - Send back the extended SOCKS error 0xF6 (Onion Service Invalid Address) for a v2 onion address. Fixes bug 40421; bugfix on 0.4.6.2-alpha. o Minor bugfixes (relay): - Reduce the compression level for data streaming from HIGH to LOW in order to reduce CPU load on the directory relays. Fixes bug 40301; bugfix on 0.3.5.1-alpha. o Minor bugfixes (timekeeping): - Calculate the time of day correctly on systems where the time_t type includes leap seconds. (This is not the case on most operating systems, but on those where it occurs, our tor_timegm function did not correctly invert the system's gmtime function, which could result in assertion failures when calculating voting schedules.) Fixes bug 40383; bugfix on 0.2.0.3-alpha. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/tor | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/tor b/lfs/tor index 97f2cf04e..56280b936 100644 --- a/lfs/tor +++ b/lfs/tor @@ -24,7 +24,7 @@ include Config -VER = 0.4.6.5 +VER = 0.4.6.7 THISAPP = tor-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tor -PAK_VER = 62 +PAK_VER = 63 DEPS = libseccomp @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 5a678a32c5a8b4bf97c9cb541df22b71 +$(DL_FILE)_MD5 = ff80309cfaa0719b197fdaf83f9d5443 install : $(TARGET) -- 2.26.2

1 0

clamav 0.104.0 doesn't build with 'llvm 12.0.1'
by Matthias Fischer 04 Sep '21

04 Sep '21

Hi, it seems as I thought, 'clamav 12.0.1' won't build with 'llvm 12.0.1'. During building with "-D BYTECODE_RUNTIME="llvm" \", I get: ... CMake Error at cmake/FindLLVM.cmake:186 (if): if given arguments: "12.0.1" "VERSION_LESS" Unknown arguments specified Call Stack (most recent call first): CMakeLists.txt:466 (find_package) -- Configuring incomplete, errors occurred! See also "/usr/src/clamav-0.104.0/build/CMakeFiles/CMakeOutput.log". See also "/usr/src/clamav-0.104.0/build/CMakeFiles/CMakeError.log". make: *** [clamav:89: /usr/src/log/clamav-0.104.0] Error 1 ... With option "-D BYTECODE_RUNTIME="none" \" its building again. Opinions? Best, Matthias

1 0

[PATCH 1/3] IPsec: Fix extra whitespace in exported certificates
by Michael Tremer 03 Sep '21

03 Sep '21

Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- html/cgi-bin/vpnmain.cgi | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/html/cgi-bin/vpnmain.cgi b/html/cgi-bin/vpnmain.cgi index d54b56577..980601ba0 100644 --- a/html/cgi-bin/vpnmain.cgi +++ b/html/cgi-bin/vpnmain.cgi @@ -849,7 +849,7 @@ END print "Content-Disposition: attachment; filename=cacert.pem\r\n\r\n"; my @cert = &General::system_output("/usr/bin/openssl", "x509", "-in", "${General::swroot}/ca/cacert.pem"); - print "@cert"; + print join("", @cert); exit(0); } ### @@ -861,7 +861,7 @@ END print "Content-Disposition: attachment; filename=hostcert.pem\r\n\r\n"; my @cert = &General::system_output("/usr/bin/openssl", "x509", "-in", "${General::swroot}/certs/hostcert.pem"); - print "@cert"; + print join("", @cert); exit(0); } ### -- 2.20.1

2 5

[PATCH v2 1/3] pango: Update to version 1.49.0
by Adolf Belka 02 Sep '21

02 Sep '21

- v2 version adds $(MAKETUNING) variable to ninja build - Update from 1.30.1 (2012) to 1.49.0 (2021) - Update of rootfile - Pango modules, engines, and config have been removed (#733882) in version 1.37.0 in 2014. - pango now has dependencies of harfbuzz and fribidi so patches for these two are included in the following two patches for this series. - Changelog is too large to show here but the details can be found in the NEWS file in the source tarball. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/pango | 111 ++++------------------------------ lfs/pango | 10 +-- make.sh | 2 + 3 files changed, 18 insertions(+), 105 deletions(-) diff --git a/config/rootfiles/common/pango b/config/rootfiles/common/pango index 286aa35e0..8f420c60c 100644 --- a/config/rootfiles/common/pango +++ b/config/rootfiles/common/pango @@ -1,14 +1,15 @@ -etc/pango -etc/pango/pango.modules -usr/bin/pango-querymodules +usr/bin/pango-list +usr/bin/pango-segmentation usr/bin/pango-view #usr/include/pango-1.0 #usr/include/pango-1.0/pango #usr/include/pango-1.0/pango/pango-attributes.h #usr/include/pango-1.0/pango/pango-bidi-type.h #usr/include/pango-1.0/pango/pango-break.h +#usr/include/pango-1.0/pango/pango-color.h #usr/include/pango-1.0/pango/pango-context.h #usr/include/pango-1.0/pango/pango-coverage.h +#usr/include/pango-1.0/pango/pango-direction.h #usr/include/pango-1.0/pango/pango-engine.h #usr/include/pango-1.0/pango/pango-enum-types.h #usr/include/pango-1.0/pango/pango-features.h @@ -21,6 +22,7 @@ usr/bin/pango-view #usr/include/pango-1.0/pango/pango-item.h #usr/include/pango-1.0/pango/pango-language.h #usr/include/pango-1.0/pango/pango-layout.h +#usr/include/pango-1.0/pango/pango-markup.h #usr/include/pango-1.0/pango/pango-matrix.h #usr/include/pango-1.0/pango/pango-modules.h #usr/include/pango-1.0/pango/pango-ot.h @@ -29,115 +31,24 @@ usr/bin/pango-view #usr/include/pango-1.0/pango/pango-tabs.h #usr/include/pango-1.0/pango/pango-types.h #usr/include/pango-1.0/pango/pango-utils.h +#usr/include/pango-1.0/pango/pango-version-macros.h #usr/include/pango-1.0/pango/pango.h #usr/include/pango-1.0/pango/pangocairo.h #usr/include/pango-1.0/pango/pangofc-decoder.h #usr/include/pango-1.0/pango/pangofc-font.h #usr/include/pango-1.0/pango/pangofc-fontmap.h #usr/include/pango-1.0/pango/pangoft2.h -#usr/lib/libpango-1.0.la #usr/lib/libpango-1.0.so usr/lib/libpango-1.0.so.0 -usr/lib/libpango-1.0.so.0.3000.1 -#usr/lib/libpangocairo-1.0.la +usr/lib/libpango-1.0.so.0.4900.0 #usr/lib/libpangocairo-1.0.so usr/lib/libpangocairo-1.0.so.0 -usr/lib/libpangocairo-1.0.so.0.3000.1 -#usr/lib/libpangoft2-1.0.la +usr/lib/libpangocairo-1.0.so.0.4900.0 #usr/lib/libpangoft2-1.0.so usr/lib/libpangoft2-1.0.so.0 -usr/lib/libpangoft2-1.0.so.0.3000.1 -usr/lib/pango -usr/lib/pango/1.6.0 -usr/lib/pango/1.6.0/modules -#usr/lib/pango/1.6.0/modules/pango-arabic-fc.la -usr/lib/pango/1.6.0/modules/pango-arabic-fc.so -#usr/lib/pango/1.6.0/modules/pango-arabic-lang.la -usr/lib/pango/1.6.0/modules/pango-arabic-lang.so -#usr/lib/pango/1.6.0/modules/pango-basic-fc.la -usr/lib/pango/1.6.0/modules/pango-basic-fc.so -#usr/lib/pango/1.6.0/modules/pango-hangul-fc.la -usr/lib/pango/1.6.0/modules/pango-hangul-fc.so -#usr/lib/pango/1.6.0/modules/pango-hebrew-fc.la -usr/lib/pango/1.6.0/modules/pango-hebrew-fc.so -#usr/lib/pango/1.6.0/modules/pango-indic-fc.la -usr/lib/pango/1.6.0/modules/pango-indic-fc.so -#usr/lib/pango/1.6.0/modules/pango-indic-lang.la -usr/lib/pango/1.6.0/modules/pango-indic-lang.so -#usr/lib/pango/1.6.0/modules/pango-khmer-fc.la -usr/lib/pango/1.6.0/modules/pango-khmer-fc.so -#usr/lib/pango/1.6.0/modules/pango-syriac-fc.la -usr/lib/pango/1.6.0/modules/pango-syriac-fc.so -#usr/lib/pango/1.6.0/modules/pango-thai-fc.la -usr/lib/pango/1.6.0/modules/pango-thai-fc.so -#usr/lib/pango/1.6.0/modules/pango-tibetan-fc.la -usr/lib/pango/1.6.0/modules/pango-tibetan-fc.so +usr/lib/libpangoft2-1.0.so.0.4900.0 #usr/lib/pkgconfig/pango.pc #usr/lib/pkgconfig/pangocairo.pc +#usr/lib/pkgconfig/pangofc.pc #usr/lib/pkgconfig/pangoft2.pc -#usr/share/gtk-doc/html/pango -#usr/share/gtk-doc/html/pango/PangoEngineLang.html -#usr/share/gtk-doc/html/pango/PangoEngineShape.html -#usr/share/gtk-doc/html/pango/PangoFcDecoder.html -#usr/share/gtk-doc/html/pango/PangoFcFont.html -#usr/share/gtk-doc/html/pango/PangoFcFontMap.html -#usr/share/gtk-doc/html/pango/PangoMarkupFormat.html -#usr/share/gtk-doc/html/pango/annotation-glossary.html -#usr/share/gtk-doc/html/pango/api-index-1-10.html -#usr/share/gtk-doc/html/pango/api-index-1-12.html -#usr/share/gtk-doc/html/pango/api-index-1-14.html -#usr/share/gtk-doc/html/pango/api-index-1-16.html -#usr/share/gtk-doc/html/pango/api-index-1-18.html -#usr/share/gtk-doc/html/pango/api-index-1-2.html -#usr/share/gtk-doc/html/pango/api-index-1-20.html -#usr/share/gtk-doc/html/pango/api-index-1-22.html -#usr/share/gtk-doc/html/pango/api-index-1-24.html -#usr/share/gtk-doc/html/pango/api-index-1-26.html -#usr/share/gtk-doc/html/pango/api-index-1-28.html -#usr/share/gtk-doc/html/pango/api-index-1-30.html -#usr/share/gtk-doc/html/pango/api-index-1-4.html -#usr/share/gtk-doc/html/pango/api-index-1-6.html -#usr/share/gtk-doc/html/pango/api-index-1-8.html -#usr/share/gtk-doc/html/pango/api-index-deprecated.html -#usr/share/gtk-doc/html/pango/api-index-full.html -#usr/share/gtk-doc/html/pango/home.png -#usr/share/gtk-doc/html/pango/index.html -#usr/share/gtk-doc/html/pango/index.sgml -#usr/share/gtk-doc/html/pango/layout.gif -#usr/share/gtk-doc/html/pango/left.png -#usr/share/gtk-doc/html/pango/lowlevel.html -#usr/share/gtk-doc/html/pango/pango-ATSUI-Fonts.html -#usr/share/gtk-doc/html/pango/pango-Bidirectional-Text.html -#usr/share/gtk-doc/html/pango/pango-Cairo-Rendering.html -#usr/share/gtk-doc/html/pango/pango-CoreText-Fonts.html -#usr/share/gtk-doc/html/pango/pango-Coverage-Maps.html -#usr/share/gtk-doc/html/pango/pango-Engines.html -#usr/share/gtk-doc/html/pango/pango-Fonts.html -#usr/share/gtk-doc/html/pango/pango-FreeType-Fonts-and-Rendering.html -#usr/share/gtk-doc/html/pango/pango-Glyph-Storage.html -#usr/share/gtk-doc/html/pango/pango-Layout-Objects.html -#usr/share/gtk-doc/html/pango/pango-Miscellaneous-Utilities.html -#usr/share/gtk-doc/html/pango/pango-Modules.html -#usr/share/gtk-doc/html/pango/pango-OpenType-Font-Handling.html -#usr/share/gtk-doc/html/pango/pango-Scripts-and-Languages.html -#usr/share/gtk-doc/html/pango/pango-Tab-Stops.html -#usr/share/gtk-doc/html/pango/pango-Text-Attributes.html -#usr/share/gtk-doc/html/pango/pango-Text-Processing.html -#usr/share/gtk-doc/html/pango/pango-Version-Checking.html -#usr/share/gtk-doc/html/pango/pango-Vertical-Text.html -#usr/share/gtk-doc/html/pango/pango-Win32-Fonts-and-Rendering.html -#usr/share/gtk-doc/html/pango/pango-X-Fonts-and-Rendering.html -#usr/share/gtk-doc/html/pango/pango-Xft-Fonts-and-Rendering.html -#usr/share/gtk-doc/html/pango/pango-hierarchy.html -#usr/share/gtk-doc/html/pango/pango-pango-renderer.html -#usr/share/gtk-doc/html/pango/pango-querymodules.html -#usr/share/gtk-doc/html/pango/pango.devhelp2 -#usr/share/gtk-doc/html/pango/pango.html -#usr/share/gtk-doc/html/pango/rendering.html -#usr/share/gtk-doc/html/pango/right.png -#usr/share/gtk-doc/html/pango/rotated-text.png -#usr/share/gtk-doc/html/pango/style.css -#usr/share/gtk-doc/html/pango/tools.html -#usr/share/gtk-doc/html/pango/up.png -#usr/share/man/man1/pango-querymodules.1 -#usr/share/man/man1/pango-view.1 +#usr/lib/pkgconfig/pangoot.pc diff --git a/lfs/pango b/lfs/pango index cd6287e67..bc17d289b 100644 --- a/lfs/pango +++ b/lfs/pango @@ -24,7 +24,7 @@ include Config -VER = 1.30.1 +VER = 1.49.0 THISAPP = pango-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = ec3c1f236ee9bd4a982a5f46fcaff7b9 +$(DL_FILE)_MD5 = 307181e0868a1f3903f8d9e4107f73c2 install : $(TARGET) @@ -71,8 +71,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) $(UPDATE_AUTOMAKE) - cd $(DIR_APP) && ./configure --prefix=/usr --sysconfdir=/etc - cd $(DIR_APP) && make $(MAKETUNING) - cd $(DIR_APP) && make install + cd $(DIR_APP) && meson --prefix=/usr --sysconfdir=/etc builddir/ + cd $(DIR_APP) && ninja -C builddir/ $(MAKETUNING) + cd $(DIR_APP) && ninja -C builddir/ install @rm -rf $(DIR_APP) @$(POSTBUILD) diff --git a/make.sh b/make.sh index 0baf2050d..dedabcb11 100755 --- a/make.sh +++ b/make.sh @@ -1347,6 +1347,8 @@ buildipfire() { lfsmake2 freefont lfsmake2 pixman lfsmake2 cairo + lfsmake2 harfbuzz + lfsmake2 fribidi lfsmake2 pango lfsmake2 rrdtool lfsmake2 setup -- 2.33.0

1 2

[PATCH v2 1/2] spice: Update version to 0.15.0
by Adolf Belka 02 Sep '21

02 Sep '21

- v2 version of series to add $(MAKETUNING) variable to ninja in spice-protocol - Update from 0.14.0 to 0.15.0 - Update rootfile - Version 0.15.0 of spice requires version 0.14.3 or higher of spice-protocol - Changelog Major Changes in 0.15: This is the first release in the new 0.15.x stable series. This release should be ready for production use. * Minor updates to CI * Some compatibility with OpenSSL * Change the behavior of handle_dev_start ignoring multiple start requests * Ignore multiple calls to handle_dev_stop * Pick up newer spice-common to fix a buffer overflow issue Major Changes in 0.14.91: **IMPORTANT** 0.14.91 is the first release candidate for the stable 0.15.x series. While some bugs might still be present, it should be reasonably stable. If you are looking for stability for daily use, please keep using the latest 0.14.x release. * Support UNIX abstract sockets * Fix some potential thread race condition in RedClient * Many cleanups in the code * Improve migration test script * Update in protocol documentation * Improve Meson build * Removed CELT support * Update CI * Removed QXLWorker definition, it was deprecated 6 years ago * Fix some compatibility with MacOS * Fix some compatibility with Windows * Move the project to C++ * Some fixes for SASL dealing with WebDAV * Fix minor Coverity reports * Add Doxygen support, manually built with "make doxy" * Support more mouse buttons (up to 16 buttons) * CVE-2020-14355 multiple buffer overflow vulnerabilities in QUIC decoding code Major Changes in 0.14.3: Main changes are WebSocket and support for Windows. * Add support for WebSocket, this will allow to use spice-html5 without proxy * Support Windows, now Qemu Windows can be build enabling Spice * Fix some alignment problem * Converted some documentation to Asciidoc format to make easier to update, updated some * Minor compatibility fix for PPC64EL and ARMHF * Minor fixes for big endian machines like MIPS * Avoid some crashes with some buggy guest drivers, simply ignore the invalid request * Fix for old OpenSSL versions * Minor fix for Windows clients and brushes, fixed an issue with Photoshop under Windows 7 * Add ability to query video-codecs * Small use-after-free fix * Fix for debugging recording/replaying using QUIC images * Fix a regression where spice reported no monitors to the client * Fix DoS in spicevmc if WebDAV used * Updated and improved test migration script * Some minor fixes to smartcard support * Avoid possible disconnection using proxies using a in-flow keepalive mechanism Major Changes in 0.14.2: Main changes are support for Meson build and graphic device info messages allowing to better support multi-monitor configurations. * CVE-2019-3813: fix off-by-one error in group/slot boundary check * support H265 in stream-channel * add support for building with meson/ninja * minor tests fixes improving CI * set char device state for smartcard, allowing Qemu optimization * improve red-parse-qxl.c interface making it more consistent * add some instrumentation for streaming device * QXL interface: add a function to identify monitors in the guest (spice_qxl_set_device_info) * add support for GraphicsDeviceInfo messages * video-stream: prevent crash on stream reattach * make channel client callbacks virtual functions * bumped minimum required glib version to 2.38 * attempt to have a reliable led state for keyboard modifiers Major Changes in 0.14.1: The main change in this release is the addition of a new protocol extension in order to support streaming the remote display as a video stream rather than going through the QXL protocol. Together with spice-streaming-agent, and/or with more work on the qemu/spice-server side, this should allow streaming of 3D accelerated VMs in the future. At this point, this part of spice-server is still a work in progress (multi-monitor support and various features are missing). * add new org.spice-space.stream.0 channel used for passing an encoded video stream from the guest to the client * add support for TCP_CORK to reduce the amount of packets that we send * fix CVE-2018-10873 * fix cursor related migration crash * fix regression causing sound recording to be muted after client disconnection/reconnection (introduced in 0.13.90) * fix regression in corner cases where images could be sent uncompressed when they used to be compressed with QUIC * disable TLS 1.0 support * CELT 0.5.1 support is now disabled by default. If celt051-devel is installed at build-time, --enable-celt051/--disable-celt051 must be explicitly specified * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or newer is now required * bumped minimum required glib version to 2.32 * endianness fixes * (small) leak fixes * usual round of code cleanups * not directly related to this release, but the upstream git repository is now hosted on gitlab.freedesktop.org Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/packages/spice | 3 +-- lfs/spice | 6 +++--- 2 files changed, 4 insertions(+), 5 deletions(-) diff --git a/config/rootfiles/packages/spice b/config/rootfiles/packages/spice index 9ee1f9179..b56a90329 100644 --- a/config/rootfiles/packages/spice +++ b/config/rootfiles/packages/spice @@ -2,7 +2,6 @@ #usr/include/spice-server/spice-audio.h #usr/include/spice-server/spice-char.h #usr/include/spice-server/spice-core.h -#usr/include/spice-server/spice-experimental.h #usr/include/spice-server/spice-input.h #usr/include/spice-server/spice-migration.h #usr/include/spice-server/spice-qxl.h @@ -13,5 +12,5 @@ #usr/lib/libspice-server.la #usr/lib/libspice-server.so usr/lib/libspice-server.so.1 -usr/lib/libspice-server.so.1.12.4 +usr/lib/libspice-server.so.1.14.1 #usr/lib/pkgconfig/spice-server.pc diff --git a/lfs/spice b/lfs/spice index d1f56e708..72b132ebd 100644 --- a/lfs/spice +++ b/lfs/spice @@ -24,7 +24,7 @@ include Config -VER = 0.14.0 +VER = 0.15.0 THISAPP = spice-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = spice -PAK_VER = 5 +PAK_VER = 6 DEPS = opus @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 6622aa7dfb5cd026a4d0d7e659216d26 +$(DL_FILE)_MD5 = 840c5284ebc78c15fc7c3a146931bc01 install : $(TARGET) -- 2.33.0

1 1

[PATCH] ffmpeg: Update deps to use sdl2 in place of sdl
by Adolf Belka 01 Sep '21

01 Sep '21

- This patch needs to go together with the patch updating sdl to sdl2 https://patchwork.ipfire.org/project/ipfire/patch/20210824212848.1311257-1-… - Update deps line in lfs to use sdl2 in place of sdl - Update rootfile Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/packages/ffmpeg | 5 +++++ lfs/ffmpeg | 4 ++-- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/config/rootfiles/packages/ffmpeg b/config/rootfiles/packages/ffmpeg index b388d18f1..65dd0d360 100644 --- a/config/rootfiles/packages/ffmpeg +++ b/config/rootfiles/packages/ffmpeg @@ -1,4 +1,5 @@ usr/bin/ffmpeg +usr/bin/ffplay usr/bin/ffprobe #usr/include/libavcodec #usr/include/libavcodec/ac3_parser.h @@ -188,6 +189,8 @@ usr/lib/libswscale.so.5.9.100 #usr/share/doc/ffmpeg/ffmpeg-scaler.html #usr/share/doc/ffmpeg/ffmpeg-utils.html #usr/share/doc/ffmpeg/ffmpeg.html +#usr/share/doc/ffmpeg/ffplay-all.html +#usr/share/doc/ffmpeg/ffplay.html #usr/share/doc/ffmpeg/ffprobe-all.html #usr/share/doc/ffmpeg/ffprobe.html #usr/share/doc/ffmpeg/general.html @@ -246,6 +249,8 @@ usr/lib/libswscale.so.5.9.100 #usr/share/man/man1/ffmpeg-scaler.1 #usr/share/man/man1/ffmpeg-utils.1 #usr/share/man/man1/ffmpeg.1 +#usr/share/man/man1/ffplay-all.1 +#usr/share/man/man1/ffplay.1 #usr/share/man/man1/ffprobe-all.1 #usr/share/man/man1/ffprobe.1 #usr/share/man/man3/libavcodec.3 diff --git a/lfs/ffmpeg b/lfs/ffmpeg index 1efa14a36..21c21cc88 100644 --- a/lfs/ffmpeg +++ b/lfs/ffmpeg @@ -32,9 +32,9 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = ffmpeg -PAK_VER = 12 +PAK_VER = 13 -DEPS = sdl lame libvorbis xvid +DEPS = sdl2 lame libvorbis xvid ifeq "$(BUILD_ARCH)" "armv6l" LDFLAGS += -latomic -- 2.33.0

1 1

[PATCH 1/3] pango: Update to version 1.49.0
by Adolf Belka 01 Sep '21

01 Sep '21

- Update from 1.30.1 (2012) to 1.49.0 (2021) - Update of rootfile - Pango modules, engines, and config have been removed (#733882) in version 1.37.0 in 2014. - pango now has dependencies of harfbuzz and fribidi so patches for these two are included in the following two patches for this series. - Changelog is too large to show here but the details can be found in the NEWS file in the source tarball. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/pango | 111 ++++------------------------------ lfs/pango | 10 +-- make.sh | 2 + 3 files changed, 18 insertions(+), 105 deletions(-) diff --git a/config/rootfiles/common/pango b/config/rootfiles/common/pango index 286aa35e0..8f420c60c 100644 --- a/config/rootfiles/common/pango +++ b/config/rootfiles/common/pango @@ -1,14 +1,15 @@ -etc/pango -etc/pango/pango.modules -usr/bin/pango-querymodules +usr/bin/pango-list +usr/bin/pango-segmentation usr/bin/pango-view #usr/include/pango-1.0 #usr/include/pango-1.0/pango #usr/include/pango-1.0/pango/pango-attributes.h #usr/include/pango-1.0/pango/pango-bidi-type.h #usr/include/pango-1.0/pango/pango-break.h +#usr/include/pango-1.0/pango/pango-color.h #usr/include/pango-1.0/pango/pango-context.h #usr/include/pango-1.0/pango/pango-coverage.h +#usr/include/pango-1.0/pango/pango-direction.h #usr/include/pango-1.0/pango/pango-engine.h #usr/include/pango-1.0/pango/pango-enum-types.h #usr/include/pango-1.0/pango/pango-features.h @@ -21,6 +22,7 @@ usr/bin/pango-view #usr/include/pango-1.0/pango/pango-item.h #usr/include/pango-1.0/pango/pango-language.h #usr/include/pango-1.0/pango/pango-layout.h +#usr/include/pango-1.0/pango/pango-markup.h #usr/include/pango-1.0/pango/pango-matrix.h #usr/include/pango-1.0/pango/pango-modules.h #usr/include/pango-1.0/pango/pango-ot.h @@ -29,115 +31,24 @@ usr/bin/pango-view #usr/include/pango-1.0/pango/pango-tabs.h #usr/include/pango-1.0/pango/pango-types.h #usr/include/pango-1.0/pango/pango-utils.h +#usr/include/pango-1.0/pango/pango-version-macros.h #usr/include/pango-1.0/pango/pango.h #usr/include/pango-1.0/pango/pangocairo.h #usr/include/pango-1.0/pango/pangofc-decoder.h #usr/include/pango-1.0/pango/pangofc-font.h #usr/include/pango-1.0/pango/pangofc-fontmap.h #usr/include/pango-1.0/pango/pangoft2.h -#usr/lib/libpango-1.0.la #usr/lib/libpango-1.0.so usr/lib/libpango-1.0.so.0 -usr/lib/libpango-1.0.so.0.3000.1 -#usr/lib/libpangocairo-1.0.la +usr/lib/libpango-1.0.so.0.4900.0 #usr/lib/libpangocairo-1.0.so usr/lib/libpangocairo-1.0.so.0 -usr/lib/libpangocairo-1.0.so.0.3000.1 -#usr/lib/libpangoft2-1.0.la +usr/lib/libpangocairo-1.0.so.0.4900.0 #usr/lib/libpangoft2-1.0.so usr/lib/libpangoft2-1.0.so.0 -usr/lib/libpangoft2-1.0.so.0.3000.1 -usr/lib/pango -usr/lib/pango/1.6.0 -usr/lib/pango/1.6.0/modules -#usr/lib/pango/1.6.0/modules/pango-arabic-fc.la -usr/lib/pango/1.6.0/modules/pango-arabic-fc.so -#usr/lib/pango/1.6.0/modules/pango-arabic-lang.la -usr/lib/pango/1.6.0/modules/pango-arabic-lang.so -#usr/lib/pango/1.6.0/modules/pango-basic-fc.la -usr/lib/pango/1.6.0/modules/pango-basic-fc.so -#usr/lib/pango/1.6.0/modules/pango-hangul-fc.la -usr/lib/pango/1.6.0/modules/pango-hangul-fc.so -#usr/lib/pango/1.6.0/modules/pango-hebrew-fc.la -usr/lib/pango/1.6.0/modules/pango-hebrew-fc.so -#usr/lib/pango/1.6.0/modules/pango-indic-fc.la -usr/lib/pango/1.6.0/modules/pango-indic-fc.so -#usr/lib/pango/1.6.0/modules/pango-indic-lang.la -usr/lib/pango/1.6.0/modules/pango-indic-lang.so -#usr/lib/pango/1.6.0/modules/pango-khmer-fc.la -usr/lib/pango/1.6.0/modules/pango-khmer-fc.so -#usr/lib/pango/1.6.0/modules/pango-syriac-fc.la -usr/lib/pango/1.6.0/modules/pango-syriac-fc.so -#usr/lib/pango/1.6.0/modules/pango-thai-fc.la -usr/lib/pango/1.6.0/modules/pango-thai-fc.so -#usr/lib/pango/1.6.0/modules/pango-tibetan-fc.la -usr/lib/pango/1.6.0/modules/pango-tibetan-fc.so +usr/lib/libpangoft2-1.0.so.0.4900.0 #usr/lib/pkgconfig/pango.pc #usr/lib/pkgconfig/pangocairo.pc +#usr/lib/pkgconfig/pangofc.pc #usr/lib/pkgconfig/pangoft2.pc -#usr/share/gtk-doc/html/pango -#usr/share/gtk-doc/html/pango/PangoEngineLang.html -#usr/share/gtk-doc/html/pango/PangoEngineShape.html -#usr/share/gtk-doc/html/pango/PangoFcDecoder.html -#usr/share/gtk-doc/html/pango/PangoFcFont.html -#usr/share/gtk-doc/html/pango/PangoFcFontMap.html -#usr/share/gtk-doc/html/pango/PangoMarkupFormat.html -#usr/share/gtk-doc/html/pango/annotation-glossary.html -#usr/share/gtk-doc/html/pango/api-index-1-10.html -#usr/share/gtk-doc/html/pango/api-index-1-12.html -#usr/share/gtk-doc/html/pango/api-index-1-14.html -#usr/share/gtk-doc/html/pango/api-index-1-16.html -#usr/share/gtk-doc/html/pango/api-index-1-18.html -#usr/share/gtk-doc/html/pango/api-index-1-2.html -#usr/share/gtk-doc/html/pango/api-index-1-20.html -#usr/share/gtk-doc/html/pango/api-index-1-22.html -#usr/share/gtk-doc/html/pango/api-index-1-24.html -#usr/share/gtk-doc/html/pango/api-index-1-26.html -#usr/share/gtk-doc/html/pango/api-index-1-28.html -#usr/share/gtk-doc/html/pango/api-index-1-30.html -#usr/share/gtk-doc/html/pango/api-index-1-4.html -#usr/share/gtk-doc/html/pango/api-index-1-6.html -#usr/share/gtk-doc/html/pango/api-index-1-8.html -#usr/share/gtk-doc/html/pango/api-index-deprecated.html -#usr/share/gtk-doc/html/pango/api-index-full.html -#usr/share/gtk-doc/html/pango/home.png -#usr/share/gtk-doc/html/pango/index.html -#usr/share/gtk-doc/html/pango/index.sgml -#usr/share/gtk-doc/html/pango/layout.gif -#usr/share/gtk-doc/html/pango/left.png -#usr/share/gtk-doc/html/pango/lowlevel.html -#usr/share/gtk-doc/html/pango/pango-ATSUI-Fonts.html -#usr/share/gtk-doc/html/pango/pango-Bidirectional-Text.html -#usr/share/gtk-doc/html/pango/pango-Cairo-Rendering.html -#usr/share/gtk-doc/html/pango/pango-CoreText-Fonts.html -#usr/share/gtk-doc/html/pango/pango-Coverage-Maps.html -#usr/share/gtk-doc/html/pango/pango-Engines.html -#usr/share/gtk-doc/html/pango/pango-Fonts.html -#usr/share/gtk-doc/html/pango/pango-FreeType-Fonts-and-Rendering.html -#usr/share/gtk-doc/html/pango/pango-Glyph-Storage.html -#usr/share/gtk-doc/html/pango/pango-Layout-Objects.html -#usr/share/gtk-doc/html/pango/pango-Miscellaneous-Utilities.html -#usr/share/gtk-doc/html/pango/pango-Modules.html -#usr/share/gtk-doc/html/pango/pango-OpenType-Font-Handling.html -#usr/share/gtk-doc/html/pango/pango-Scripts-and-Languages.html -#usr/share/gtk-doc/html/pango/pango-Tab-Stops.html -#usr/share/gtk-doc/html/pango/pango-Text-Attributes.html -#usr/share/gtk-doc/html/pango/pango-Text-Processing.html -#usr/share/gtk-doc/html/pango/pango-Version-Checking.html -#usr/share/gtk-doc/html/pango/pango-Vertical-Text.html -#usr/share/gtk-doc/html/pango/pango-Win32-Fonts-and-Rendering.html -#usr/share/gtk-doc/html/pango/pango-X-Fonts-and-Rendering.html -#usr/share/gtk-doc/html/pango/pango-Xft-Fonts-and-Rendering.html -#usr/share/gtk-doc/html/pango/pango-hierarchy.html -#usr/share/gtk-doc/html/pango/pango-pango-renderer.html -#usr/share/gtk-doc/html/pango/pango-querymodules.html -#usr/share/gtk-doc/html/pango/pango.devhelp2 -#usr/share/gtk-doc/html/pango/pango.html -#usr/share/gtk-doc/html/pango/rendering.html -#usr/share/gtk-doc/html/pango/right.png -#usr/share/gtk-doc/html/pango/rotated-text.png -#usr/share/gtk-doc/html/pango/style.css -#usr/share/gtk-doc/html/pango/tools.html -#usr/share/gtk-doc/html/pango/up.png -#usr/share/man/man1/pango-querymodules.1 -#usr/share/man/man1/pango-view.1 +#usr/lib/pkgconfig/pangoot.pc diff --git a/lfs/pango b/lfs/pango index cd6287e67..314e05e39 100644 --- a/lfs/pango +++ b/lfs/pango @@ -24,7 +24,7 @@ include Config -VER = 1.30.1 +VER = 1.49.0 THISAPP = pango-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = ec3c1f236ee9bd4a982a5f46fcaff7b9 +$(DL_FILE)_MD5 = 307181e0868a1f3903f8d9e4107f73c2 install : $(TARGET) @@ -71,8 +71,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) $(UPDATE_AUTOMAKE) - cd $(DIR_APP) && ./configure --prefix=/usr --sysconfdir=/etc - cd $(DIR_APP) && make $(MAKETUNING) - cd $(DIR_APP) && make install + cd $(DIR_APP) && meson --prefix=/usr --sysconfdir=/etc builddir/ + cd $(DIR_APP) && ninja -C builddir/ + cd $(DIR_APP) && ninja -C builddir/ install @rm -rf $(DIR_APP) @$(POSTBUILD) diff --git a/make.sh b/make.sh index 0baf2050d..dedabcb11 100755 --- a/make.sh +++ b/make.sh @@ -1347,6 +1347,8 @@ buildipfire() { lfsmake2 freefont lfsmake2 pixman lfsmake2 cairo + lfsmake2 harfbuzz + lfsmake2 fribidi lfsmake2 pango lfsmake2 rrdtool lfsmake2 setup -- 2.33.0

2 11

← Newer
1
2
3
4
5
6
7
8
9
10
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development September 2021