Development December 2022

development@lists.ipfire.org

8 participants
52 discussions

services.cgi throws "XXXX is experimental"
by Matthias Fischer 16 Jan '23

16 Jan '23

Hi, updated to Core 172 - no problems, everything went fine. But... Each time I open 'servies.cgi', two lines are added to '/var/log/httpd/error_log': ***SNIP*** ... given is experimental at /srv/web/ipfire/cgi-bin/services.cgi line 145. when is experimental at /srv/web/ipfire/cgi-bin/services.cgi line 146. ... ***SNAP*** Besides this, the GUI looks good. Can anyone confirm? Best, Matthias

4 8

clamav 0.105.1-3 needs rust >1.61
by Matthias Fischer 15 Jan '23

15 Jan '23

Hi, ...I'd like to have a small problem... ;-) A few days ago, 'clamav 0.105.1' was updated, again: => https://blog.clamav.net/2022/11/second-clamav-100-release-candidate-and.html "...[it] was intended to also include bug fixes for the jpeg and tiff Rust-based libraries that are bundled with the source code tarball. Unfortunately, those fixes were not all release-ready in time for the 0.105.1-2 packages." So far, so [oh, forget it!]. Unfortunately, building the third version of 'clamav 0.105.1' with current 'next' failed: ***SNIP*** ... error: package `tiff v0.8.0` cannot be built because it requires rustc 1.61.0 or newer, while the currently active rustc version is 1.60.0-nightly. [193/379] Building C object libclamav/CMakeFiles/lzma_sdk.dir/7z/7zIn.c.o [194/379] Building C object libclamav/CMakeFiles/bytecode_runtime.dir/bytecode_nojit.c.o [195/379] Building C object libclamav/CMakeFiles/yara.dir/yara_grammar.c.o [196/379] Building C object libclamav/CMakeFiles/yara.dir/yara_lexer.c.o yara_lexer.c:2571:24: warning: 'yy_fatal_error' defined but not used [-Wunused-function] yara_lexer.c: In function 'yara_yylex': yara_lexer.l:263:16: warning: '%s' directive output may be truncated writing up to 1023 bytes into a region of size 999 [-Wformat-truncation=] In file included from /usr/include/stdio.h:906, from yara_lexer.c:32: /usr/include/bits/stdio2.h:54:10: note: '__builtin___snprintf_chk' output between 26 and 1049 bytes into a destination of size 1024 54 | return __builtin___snprintf_chk (__s, __n, __USE_FORTIFY_LEVEL - 1, | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 55 | __glibc_objsize (__s), __fmt, | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 56 | __va_arg_pack ()); | ~~~~~~~~~~~~~~~~~ ninja: build stopped: subcommand failed. make: *** [clamav:89: /usr/src/log/clamav-0.105.1] Error 1 ***SNAP*** Hm. Great. So I tried the current 'rust 1.65' version. This time, the building failed because of a rust component: ***SNIP*** ... Finished release [optimized] target(s) in 1.92s cd /usr/src/cipher-0.3.0 && mkdir -pv "/usr/share/cargo/registry/cipher-0.3.0" && if CARGOPATH=/usr/src/cipher-0.3.0/.cargo RUSTC_BOOTSTRAP=1 cargo --offline metadata --format-version 1 --no-deps | jq -e ".packages[].targets[].kind | any(. == \"lib\")" | grep -q "true" || CARGOPATH=/usr/src/cipher-0.3.0/.cargo RUSTC_BOOTSTRAP=1 cargo --offline metadata --format-version 1 --no-deps | jq -e ".packages[].targets[].kind | any(. == \"rlib\")" | grep -q "true" || CARGOPATH=/usr/src/cipher-0.3.0/.cargo RUSTC_BOOTSTRAP=1 cargo --offline metadata --format-version 1 --no-deps | jq -e ".packages[].targets[].kind | any(. == \"proc-macro\")" | grep -q "true"; then awk '/^\\\[((.+\\\.)?((dev|build)-)?dependencies|features)/{f=1;next} /^\\\[/{f=0}; !f' < Cargo.toml > Cargo.toml.deps && CARGOPATH=/usr/src/cipher-0.3.0/.cargo RUSTC_BOOTSTRAP=1 cargo --offline package -l | grep -wEv "Cargo.(lock|toml.orig)" | xargs -d "\n" cp -v --parents -a -t /usr/share/cargo/registry/cipher-0.3.0 && install -v -m 644 Cargo.toml.deps /usr/share/cargo/registry/cipher-0.3.0/Cargo.toml && echo "{\"files\":{},\"package\":\"\"}" > /usr/share/cargo/registry/cipher-0.3.0/.cargo-checksum.json; fi && if true && CARGOPATH=/usr/src/cipher-0.3.0/.cargo RUSTC_BOOTSTRAP=1 cargo --offline metadata --format-version 1 --no-deps | jq -e ".packages[].targets[].kind | any(. == \"bin\")" | grep -q "true"; then CARGOPATH=/usr/src/cipher-0.3.0/.cargo RUSTC_BOOTSTRAP=1 cargo --offline install -Z avoid-dev-deps -j8 --no-track --path .; fi mkdir: created directory '/usr/share/cargo/registry/cipher-0.3.0' warning: No (git) VCS found for `/usr/src/cipher-0.3.0` error: invalid inclusion of reserved file name Cargo.toml.orig in package source cp: missing file operand Try 'cp --help' for more information. make: *** [rust-cipher:78: /usr/src/log/cipher-0.3.0] Error 123 ***SNAP*** Ok, even greater. Does anyone have an idea to solve this? I can't even find an updated package for , e.g., 'cipher-0.3.0tar.gz', although apparently I found at least an updated version (0.4.3) here: => https://docs.rs/cipher/latest/cipher/# But no download links... Hm! Where on earth did 'cipher-0.3.0.tar.gz' came from? What makes me a bit nervous though is the fact that if clamav really can only be made to work with a major rust update, the other rust components might have to be updated as well. And I found 103 rust*-lfs files... Any thoughts and hints welcome! Best, Matthias

3 8

Problem with squid 5.7 and '/usr/bin/asnbl-helper.py' - exception => traceback => helper exits
by Matthias Fischer 31 Dec '22

31 Dec '22

Hi, sorry, but... With Core 171 I ran 'squid 5.7' with the options "Deny access to destinations hosted on fast flux setup" and "Deny access to destinations hosted on selectively announced networks" both ticked (activated). No problems. With Core 172, I found that the 'squid-asnbl-helper.py'-script is having problems with specific urls - it logs a 'traceback' and the helper exits. Below is an excerpt from '/var/log/squid/cache.log': ***SNIP*** 2022/12/30 11:56:01 kid1| helperOpenServers: Starting 1/10 'asnbl-helper.py' processes current master transaction: master64 Dec 30 11:56:01 squid-asnbl-helper[776] WARN: No ASNBL configured. This is acceptable as long as this script is configured to do anything, you just have been warned... Dec 30 11:56:01 squid-asnbl-helper[776] INFO: ASN database operational - excellent. Waiting for input... Dec 30 11:56:01 squid-asnbl-helper[778] WARN: No ASNBL configured. This is acceptable as long as this script is configured to do anything, you just have been warned... Dec 30 11:56:01 squid-asnbl-helper[778] INFO: ASN database operational - excellent. Waiting for input... Traceback (most recent call last): File "/usr/bin/asnbl-helper.py", line 488, in <module> resolvedasn = resolve_asn(singleip, ASNDB) File "/usr/bin/asnbl-helper.py", line 184, in resolve_asn result = asndb.lookup(str(ipaddr)) BlockingIOError: [Errno 11] Resource temporarily unavailable Traceback (most recent call last): File "/usr/bin/asnbl-helper.py", line 488, in <module> resolvedasn = resolve_asn(singleip, ASNDB) File "/usr/bin/asnbl-helper.py", line 184, in resolve_asn result = asndb.lookup(str(ipaddr)) BlockingIOError: [Errno 11] Resource temporarily unavailable 2022/12/30 11:56:01 kid1| WARNING: external_acl_type #Hlpr5 exited current master transaction: master63 2022/12/30 11:56:01 kid1| Too few external_acl_type processes are running (need 1/10) current master transaction: master63 2022/12/30 11:56:01 kid1| Starting new helpers current master transaction: master63 2022/12/30 11:56:01 kid1| helperOpenServers: Starting 1/10 'asnbl-helper.py' processes current master transaction: master63 2022/12/30 11:56:01 kid1| WARNING: external_acl_type #Hlpr7 exited current master transaction: master67 ***SNAP*** Can anyone confirm? And if yes - should I open a bug report? Best, Matthias

2 1

[PATCH 1/2] bird: Update to 2.0.11
by Michael Tremer 31 Dec '22

31 Dec '22

Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- lfs/bird | 9 +++------ 1 file changed, 3 insertions(+), 6 deletions(-) diff --git a/lfs/bird b/lfs/bird index e60246cf8..17fd4715d 100644 --- a/lfs/bird +++ b/lfs/bird @@ -26,7 +26,7 @@ include Config SUMMARY = The BIRD Internet Routing Daemon -VER = 2.0.9 +VER = 2.0.11 THISAPP = bird-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,14 +34,12 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = bird -PAK_VER = 10 +PAK_VER = 11 DEPS = SERVICES = bird -CFLAGS += -fcommon - ############################################################################### # Top-level Rules ############################################################################### @@ -50,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 5226058ba8989a28e8151906e194fd3065276034f1304e0e45772b17f3d8095eff6add211320a23418bfb57b2c16c96594fb85345355e3b870d7bfa2cfe119b9 +$(DL_FILE)_BLAKE2 = 0761bd50b3b0338ecf2a6325f61f90db9f92324ed814de2ec6b360c6f5a7e12d6ae4ae9b73a11ddede0e6c8fd1d15bea1b62076c38c937ae281f10a8bc2d1cbf install : $(TARGET) @@ -83,7 +81,6 @@ $(subst %,%_BLAKE2,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) - $(UPDATE_AUTOMAKE) cd $(DIR_APP) && \ ./configure \ --prefix=/usr \ -- 2.30.2

2 3

[PATCH] jquery: Update to version 3.6.3
by Adolf Belka 31 Dec '22

31 Dec '22

- Update from version 3.6.0 to 3.6.3 - There is no rootfile for this package - Changelog 3.6.3 Build remove stale Insight package from custom builds (81d5bd17) Updating the 3.x-stable version to 3.6.3-pre. (2c5b47c4) Selector Update Sizzle from 2.3.8 to 2.3.9 (#5177, 8989500e) 3.6.2 CSS Return undefined for whitespace-only CSS variable values (#5120) (8bea1dec) Don’t trim whitespace of undefined custom property (#5105, c0db6d70) Selector Manipulation: Fix DOM manip within template contents (#5147, 5318e311) Update Sizzle from 2.3.7 to 2.3.8 (#5147, a1b7ae3b) Update Sizzle from 2.3.6 to 2.3.7 (#5098, ee0fec05) Tests Remove a workaround for a Firefox XML parsing issue (965391ab) Make Ajax tests pass in iOS 9 (d051e0e3) 3.6.1 CSS Skip falsy values in `addClass( array )`, compress code (#4998, 9b34bdb1) Justify use of rtrim on CSS property values (a1373e2e) Remove a redundant extension from rtrimCSS inclusion in curCSS (509eeb89) Trim whitespace surrounding CSS Custom Properties values (#4926, 219ccf5c) Deprecated Improve $.trim performance for strings with lots of whitespace (69940100) Docs Update webpack website in README (410d5cf0) add link to preview the new CLAs (b24e83bd) Replace `#NUMBER` Trac issue references with `trac-NUMBER` (95e34b69) remove expired links from old jquery source (c3c4d207) Remove links to Web Archive from source (#4981, 4b0d8900) Update the URL to the latest jQuery build in CONTRIBUTING.md (4bb7d069) Remove the CLA checkbox in the pull request template (93406490) Event Don’t break focus triggering after `.on(focus).off(focus)` (#4867, b3e4a7eb) Manipulation Don’t remove HTML comments from scripts (#4904, 924b515d) Tests Exclude tests based on compilation flags, not API presence (3.x version) (#5069, bc165128) Workaround an XML parsing bug in Firefox (be3bd560) lock colors version to 1.4.0 (fa70e8fd) Skip ETag AJAX tests on TestSwarm (81fa1e2a) Allow statusText to be “success” in AJAX tests (7439e221) Disable CSS Custom Properties tests in old Safari/iOS (e9f77267) Make Karma browser timeout larger than the QUnit one (a51eec74) Don’t remove csp.log in the cspClean action of mock.php (ba81326f) Load the TestSwarm listener via HTTPS (f6f07204) Switch background image from online file to local 1×1.jpg (8d20cb97) Strip untypical callback parameter characters from mock.php (b14b62c8) Infrastructure Update GitHub Actions (0f6c3d9e) Add dependabot.yml config (GitHub Actions) (5a363017) Test on Node 17, update Grunt & `karma-*` packages (9bc0df70) Separate the install step from running tests in GitHub Actions (cb35067f) remove travis.yml and travis mentions from core (#4984) (55669883) Migrate CI to GitHub Actions (b39cfa15) Test on Node.js 16 instead of 15 (f12cac60) Take core-js from the external directory as well (752b8981) Updating the 3.x-stable version to 3.6.1-pre. (3642471e) Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/jquery | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/jquery b/lfs/jquery index fcfa47304..0ab12c790 100644 --- a/lfs/jquery +++ b/lfs/jquery @@ -24,7 +24,7 @@ include Config -VER = 3.6.0 +VER = 3.6.3 THISAPP = jquery-$(VER) DL_FILE = $(THISAPP).min.js @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 2ae88855ddf4957e944a5ca313d8854d7afff1e796694437b07fae15a67f75d46f357450b0e2a6f140c1d116512016f1d276e0e12fe3eb700e3c93e3492d6a9e +$(DL_FILE)_BLAKE2 = ff1c58cc4d8efb7f3c134d4da0d0b6960c83d09edeffc9cff96230733c9c35c259282cb335aa2ceea75ca9d6548721aedbe3dbac6b68fa0a91e405c06f72f1d6 install : $(TARGET) -- 2.39.0

2 1

[PATCH] ovpnmain.cgi: Translation string 'dh parameter' doesn't exist
by Matthias Fischer 31 Dec '22

31 Dec '22

Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- html/cgi-bin/ovpnmain.cgi | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/html/cgi-bin/ovpnmain.cgi b/html/cgi-bin/ovpnmain.cgi index ecfd4fdaf..2d19301a6 100644 --- a/html/cgi-bin/ovpnmain.cgi +++ b/html/cgi-bin/ovpnmain.cgi @@ -5716,7 +5716,7 @@ END # Nothing print <<END; <tr> - <td width='25%' class='base' $col3>$Lang::tr{'dh parameter'}:</td> + <td width='25%' class='base' $col3>$Lang::tr{'dh'}:</td> <td class='base' $col3>$Lang::tr{'not present'}</td> </td><td colspan='3' $col3> </td> </tr> -- 2.34.1

2 1

Problem with squid 5.7 and '/usr/bin/asnbl-helper.py' - exception => traceback => helper exits
by Matthias Fischer 30 Dec '22

30 Dec '22

Hi, I forgot to mention: After *unticking* "Deny access to destinations hosted on fast flux setup" and "Deny access to destinations hosted on selectively announced networks" the tracebacks are gone. 'squid' is running normally. Best, Matthias

1 0

[PATCH] perl-HTML-Parser: Update to version 3.78
by Adolf Belka 29 Dec '22

29 Dec '22

- Update from 3.45 (2005) to 3.78 (2022) - Update to rootfile - Changelog 3.78 2022-03-28 * Remove unused variable (GH#26) (Michal Josef Špaček) 3.77 2022-03-14 * Update tests to remove HTML4 specific tags (GH#25) (Jess) 3.76 2021-03-04 * Add a fix for a stack confusion error on `eof`. (GH#21) (Matthew Horsfall and Chase Whitener) 3.75 2020-08-30 * Clean up the prereqs a bit * Mark HTML::Filter as deprecated as the docs point out * Move Parser.pm into the lib directory with the others. This will help with everything from auto version bumps after releases, to scanning for prerequisites and spelling errors. * Fix a few spelling errors in the POD for HTML::Parser * Clean up the spacing on many examples in HTML::Parser 3.74 2020-08-30 * Fix the order of date and version in this change log. (Thanks, haarg) * Convert to Dist::Zilla * Build all prereqs from our cpanfile * Go through all test files and: * perltidy * Use strict/warnings * Get rid of two-arg open * Get rid of BAREWORD filehandles * Fix the eval pattern used * Only use -w where we catch $SIG{__WARN__} * Fix encoding problems * use utf8 where we have unicode in the source * Fix a typo here and there * perltidy all of the example apps in eg/ * Add comments explaining the apps in eg/ (GH#13 Thanks, Salvatore Bonaccorso) * Print out UTF-8 encoded data where sensible in eg/ 3.73 2020-08-24 * Cleaned up this changes log. * Added a .mailmap file to organize contributions accurately. * Ensure all versions are equal and on the current version * Add the .mailmap to the MANIFEST * Change the META information to point to the new GH repository * Add a .perltidyrc to use going forward * Add hctype.h and pfunc.h to the dist as static files and stop asking for them to be built on the user's end. * Remove t/pod.t from userland testing * Remove t/pod-coverage.t from userland testing * Clean up the MANIFEST * Start testing via GitHub Actions/Workflows * Protect active parser from being freed (PR 13, RT #115034) 3.72 2016-01-19 * Avoid more clang casting warnings * Remove trailing whitespace * Ensure entities expand to utf8 sequences under 'utf8_mode' [RT#99755] * typo fixes (David Steinbrunner) * Silence clang warning (Jacques Germishuys) * const+static-ing (bulk88) 3.71 2013-05-09 * Transform ':' in headers to '-' [RT#80524] 3.70 2013-03-28 * Fix for cross-compiling with Buildroot (François Perrad) * Comment typo fix * Fix Issue #3 / RT #84144: HTML::Entities::decode_entities() needs to call SV_CHECK_THINKFIRST() before checking READONLY flag (Yves Orton) 3.69 2011-10-15 * Documentation fix; encode_utf8 mixup [RT#71151] * Make it clearer that there are 2 (actually 3) options for handing "UTF-8 garbage" * Github is the official repo * Can't be bothered to try to fix the failures that occur on perl-5.6 * fix to TokeParser to correctly handle option configuration (Barbie) * Aesthetic change: remove extra ; (Jon Jensen) * Trim surrounding whitespace from extracted URLs. (Ville Skyttä) 3.68 2010-09-01 * Declare the encoding of the POD to be utf8 3.67 2010-08-17 * bleadperl 2154eca7 breaks HTML::Parser 3.66 [RT#60368] (Nicholas Clark) 3.66 2010-07-09 * Fix entity decoding in utf8_mode for the title header 3.65 2010-04-04 * Eliminate buggy entities_decode_old * Fixed endianness typo [RT#50811] (Salvatore Bonaccorso) * Documentation Fixes. (Ville Skyttä) 3.64 2009-10-25 * Convert files to UTF-8 * Don't allow decode_entities() to generate illegal Unicode chars * Copyright 2009 * Remove rendundant (repeated) test * Make parse_file() method use 3-arg open [RT#49434] 3.63 2009-10-22 * Take more care to prepare the char range for encode_entities [RT#50170] * decode_entities confused by trailing incomplete entity 3.62 2009-08-13 * Doc patch: Make it clearer what the return value from ->parse is * HTTP::Header doc typo fix. (Ville Skyttä) * Do not bother tracking style or script, they're ignored. (Ville Skyttä) * Bring HTML 5 head elements up to date with WD-html5-20090423. (Ville Skyttä) * Improve HeadParser performance. (Ville Skyttä) 3.61 2009-06-20 * Test that triggers the crash that Chip fixed * Complete documented list of literal tags * Avoid crash (referenced pend_text instead of skipped_text) (Chip Salzenberg) * Reference HTML::LinkExttor [RT#43164] (Antonio Radici) 3.60 2009-02-09 * Spelling fixes. (Ville Skyttä) * Test multi-value headers. (Ville Skyttä) * Documentation improvements. (Ville Skyttä) * Do not terminate head parsing on the <object> element (added in HTML 4.0). (Ville Skyttä) * Add support for HTML 5 <meta charset> and new HEAD elements. (Ville Skyttä) * Short description of the htextsub example (Damyan Ivanov) * Suppress warning when encode_entities is called with undef [RT#27567] (Mike South) * HTML::Parser doesn't compile with perl 5.8.0. (Zefram) 3.59 2008-11-24 * Restore perl-5.6 compatibility for HTML::HeadParser. * Improved META.yml 3.58 2008-11-17 * Suppress "Parsing of undecoded UTF-8 will give garbage" warning with attr_encoded [RT#29089] * HTML::HeadParser: - Recognize the Unicode BOM in utf8_mode as well [RT#27522] - Avoid ending up with '/' keys attribute in Link headers. 3.57 2008-11-16 * The <iframe> element content is now parsed in literal mode. * Parsing of <script> and <style> content ends on the first end tag even when that tag was in a quoted string. That seems to be the behaviour of all modern browsers. * Implement backquote() attribute as requested by Alex Kapranoff. * Test and documentation tweaks from Alex Kapranoff. 3.56 2007-01-12 * Cloning of parser state for compatibility with threads. Fixed by Bo Lindbergh <blgl(a)hagernas.com>. * Don't require whitespace between declaration tokens. <http://rt.cpan.org/Ticket/Display.html?id=20864> 3.55 2006-07-10 * Treat <> at the end of document as text. Used to be reported as a comment. * Improved Firefox compatibility for bad HTML: - Unclosed <script>, <style> are now treated as empty tags. - Unclosed <textarea>, <xmp> and <plaintext> treat rest as text. - Unclosed <title> closes at next tag. * Make <!a'b> a comment by itself. 3.54 2006-04-28 * Yaakov Belch discovered yet another issue with <script> parsing. Enabling of 'empty_element_tags' got the parser confused if it found such a tag for elements that are normally parsed in literal mode. Of these <script src="..."/> is the only one likely to be found in documents. <http://rt.cpan.org//Ticket/Display.html?id=18965> 3.53 2006-04-27 * When ignore_element was enabled it got confused if the corresponding tags did not nest properly; the end tag was treated it as if it was a start tag. Found and fixed by Yaakov Belch <code(a)yaakovnet.net>. <http://rt.cpan.org/Ticket/Display.html?id=18936> 3.52 2006-04-26 * Make sure the 'start_document' fires exactly once for each document parsed. For earlier releases it did not fire at all for empty documents and could fire multiple times if parse was called with empty chunks. * Documentation tweaks and typo fixes. 3.51 2006-03-22 * Named entities outside the Latin-1 range are now only expanded when properly terminated with ";". This makes HTML::Parser compatible with Firefox/Konqueror/MSIE when it comes to how these entities are expanded in attribute values. Firefox does expand unterminated non-Latin-1 entities in plain text, so here HTML::Parser only stays compatible with Konqueror/MSIE. Fixes <http://rt.cpan.org/Ticket/Display.html?id=17962>. * Fixed some documentation typos spotted by <william(a)knowmad.com>. <http://rt.cpan.org/Ticket/Display.html?id=18062> 3.50 2006-02-14 * The 3.49 release didn't compile with VC++ because it mixed code and declarations. Fixed by Steve Hay <steve.hay(a)uk.radan.com>. 3.49 2006-02-08 * Events could sometimes still fire after a handler has signaled eof. * Marked_sections with text ending in square bracket parsed wrong. Fix provided by <paul.bijnens(a)xplanation.com>. <http://rt.cpan.org/Ticket/Display.html?id=16749> 3.48 2005-12-02 * Enabling empty_element_tags by default for HTML::TokeParser was a mistake. Reverted that change. <http://rt.cpan.org/Ticket/Display.html?id=16164> * When processing a document with "marked_sections => 1", the skipped text missed the first 3 bytes "<![". <http://rt.cpan.org/Ticket/Display.html?id=16207> 3.47 2005-11-22 * Added empty_element_tags and xml_pic configuration options. These make it possible to enable these XML features without enabling the full XML-mode. * The empty_element_tags is enabled by default for HTML::TokeParser. 3.46 2005-10-24 * Don't try to treat an literal   as space. This breaks Unicode parsing. <http://rt.cpan.org/Ticket/Display.html?id=15068> * The unbroken_text option is now on by default for HTML::TokeParser. * HTML::Entities::encode will now encode "'" by default. * Improved report/ignore_tags documentation by Norbert Kiesel <nkiesel(a)tbdnetworks.com>. * Test suite now use Test::More, by Norbert Kiesel <nkiesel(a)tbdnetworks.com>. * Fix HTML::Entities typo spotted by Stefan Funke <bundy(a)adm.arcor.net>. * Faster load time with XSLoader (perl-5.6 or better now required). * Fixed POD markup errors in some of the modules. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/perl-HTML-Parser | 1 - lfs/perl-HTML-Parser | 4 ++-- 2 files changed, 2 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/common/perl-HTML-Parser b/config/rootfiles/common/perl-HTML-Parser index f3f9f0d0b..c9fe642d1 100644 --- a/config/rootfiles/common/perl-HTML-Parser +++ b/config/rootfiles/common/perl-HTML-Parser @@ -8,7 +8,6 @@ usr/lib/perl5/site_perl/5.32.1/xxxMACHINExxx-linux-thread-multi/HTML/PullParser. usr/lib/perl5/site_perl/5.32.1/xxxMACHINExxx-linux-thread-multi/HTML/TokeParser.pm #usr/lib/perl5/site_perl/5.32.1/xxxMACHINExxx-linux-thread-multi/auto/HTML/Parser #usr/lib/perl5/site_perl/5.32.1/xxxMACHINExxx-linux-thread-multi/auto/HTML/Parser/.packlist -#usr/lib/perl5/site_perl/5.32.1/xxxMACHINExxx-linux-thread-multi/auto/HTML/Parser/Parser.bs usr/lib/perl5/site_perl/5.32.1/xxxMACHINExxx-linux-thread-multi/auto/HTML/Parser/Parser.so #usr/share/man/man3/HTML::Entities.3 #usr/share/man/man3/HTML::Filter.3 diff --git a/lfs/perl-HTML-Parser b/lfs/perl-HTML-Parser index 0bc9b9ca6..9895f0e8e 100644 --- a/lfs/perl-HTML-Parser +++ b/lfs/perl-HTML-Parser @@ -24,7 +24,7 @@ include Config -VER = 3.45 +VER = 3.78 THISAPP = HTML-Parser-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 83f7bacf49e36c849288d18b855e59c270d5fbbef3c2b705ce5bde1b026191b66bdf48ee7cd5c445b0a8c9b56a31cf7a8548d8321dfb3a092325a66f812d5a48 +$(DL_FILE)_BLAKE2 = 6fb8388a5db8e7b6c9040e1edb9664c0d863904186724e52bcc78d8f2cd862dc7399ce80d602341854fde7a61809ea847b7504573d96dd65e0a83af99aa33408 install : $(TARGET) -- 2.35.1

1 0

[PATCH] curl: Update to version 7.87.0
by Adolf Belka 29 Dec '22

29 Dec '22

- Update from version 7.86.0 to 7.87.0 - Update of rootfile - version 7.87.0 changed hoiw it deals with deprecated typecheck expressions. This caused zabbix_agentd build to fail. Curl developers created a commit to fix this in next version release. Added as patch here. Should be able to be removed with next curl update. - Changelog curl and libcurl 7.87.0 This release includes the following changes: o curl: add --url-query [52] o CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit [75] o lib: add CURL_WRITEFUNC_ERROR to signal write callback error [47] o openssl: reduce CA certificate bundle reparsing by caching [11] o version: add a feature names array to curl_version_info_data [67] This release includes the following bugfixes: o altsvc: fix rejection of negative port numbers [144] o aws_sigv4: consult x-%s-content-sha256 for payload hash [102] o aws_sigv4: fix typos in aws_sigv4.c [101] o base64: better alloc size [124] o base64: encode without using snprintf [123] o base64: faster base64 decoding [120] o build: assume assert.h is always available [111] o build: assume errno.h is always available [110] o c-hyper: CONNECT respones are not server responses [137] o c-hyper: fix multi-request mechanism [115] o CI: Change FreeBSD image from 12.3 to 12.4 [108] o CI: LGTM.com will be shut down in December 2022 [112] o ci: Remove zuul fuzzing job as it's superseded by CIFuzz o cmake: check for cross-compile, not for toolchain [54] o CMake: fix build with `CURL_USE_GSSAPI` [78] o cmake: really enable warnings with clang [25] o cmake: set the soname on the shared library [140] o cmdline-opts/gen.pl: fix the linkifier [64] o cmdline-opts/page-footer: remove long option nroff formatting o config-mac: define HAVE_SYS_IOCTL_H [107] o config-mac: fix typo: size_T -> size_t [125] o config-mac: remove HAVE_SYS_SELECT_H [116] o config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW [41] o configure: require fork for NTLM-WB [36] o contributors.sh: actually use $CURLWWW instead of just setting it [129] o cookie: compare cookie prefixes case insensitively [14] o cookie: expire cookies at once when max-age is negative [45] o cookie: open cookie jar as a binary file [89] o curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS [90] o curl-rustls.m4: on macOS, rustls also needs the Security framework [44] o curl.h: include <sys/select.h> on SerenityOS [104] o curl.h: name all public function parameters [118] o curl.h: reword comment to not use deprecated option [132] o curl: override the numeric locale and set "C" by force [60] o curl: timeout in the read callback [15] o curl_endian: remove Curl_write64_le from header [81] o curl_get_line: allow last line without newline char [88] o curl_path: do not add '/' if homedir ends with one [4] o curl_url_get.3: remove spurious backtick [127] o curl_url_set.3: document CURLU_DISALLOW_USER [139] o curl_url_set.3: fix typo [148] o CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE [1] o CURLOPT_COOKIEFILE.3: advice => advise [131] o CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example [31] o CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw" [130] o CURLOPT_POST.3: Explain setting to 0 changes request type [61] o docs/curl_ws_send: Fixed typo in websocket docs [114] o docs/EARLY-RELEASE.md: how to determine an early release [37] o docs/examples: spell correction ('Retrieve') [119] o docs/INSTALL.md: expand on static builds [62] o docs/WEBSOCKET.md: explain the URL use [71] o docs: add missing parameters for --retry flag [2] o docs: add more "SEE ALSO" links to CA related pages [82] o docs: explain the noproxy CIDR notation support [17] o docs: extend the dump-header documentation [150] o docs: remove performance note in CURLOPT_SSL_VERIFYPEER [13] o examples/10-at-a-time: fix possible skipped final transfers [85] o examples: update descriptions [83] o ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH [96] o gen.pl: do not generate CURLHELP bitmask lines > 79 characters [10] o GHA: clarify workflows permissions, set least possible privilege [79] o GHA: NSS use clang instead of clang-9 [103] o gnutls: use common gnutls init and verify code for ngtcp2 [98] o headers: add endif comments [51] o HTTP-COOKIES.md: mention that http://localhost is a secure context [76] o HTTP-COOKIES.md: update the 6265bis link to draft-11 [70] o http: do not send PROXY more than once [46] o http: fix the ::1 comparison for IPv6 localhost for cookies [155] o http: set 'this_is_a_follow' in the Location: logic [40] o http: use the IDN decoded name in HSTS checks [154] o hyper: classify headers as CONNECT and 1XX [56] o hyper: fix handling of hyper_task's when reusing the same address [33] o idn: remove Curl_win32_ascii_to_idn [153] o INSTALL: update operating systems and CPU archs [91] o KNOWN_BUGS: remove eight entries [50] o lib1560: add some basic IDN host name tests [151] o lib: connection filters (cfilter) addition to curl: [43] o lib: feature deprecation warnings in gcc >= 4.3 [58] o lib: fix some type mismatches and remove unneeded typecasts [12] o lib: parse numbers with fixed known base 10 [77] o lib: remove bad set.opt_no_body assignments [42] o lib: rewind BEFORE request instead of AFTER previous [65] o lib: sync guard for Curl_getaddrinfo_ex() definition and use [6] o lib: use size_t or int etc instead of longs [145] o libcurl-errors.3: remove duplicate word [3] o libssh2: return error when ssh_hostkeyfunc returns error [121] o limit-rate.d: see also --rate o log2changes.pl: wrap long lines at 80 columns [59] o Makefile.mk: address minor issues [87] o Makefile.mk: improve a GNU Make hack [122] o Makefile.mk: portable Makefile.m32 [86] o maketgz: set the right version in lib/libcurl.plist [53] o mime: relax easy/mime structures binding [94] o misc: Fix incorrect spelling [113] o misc: remove duplicated include files [28] o misc: typo and grammar fixes [23] o negtelnetserver.py: have it call its close() method [68] o netrc.d: provide mutext info [63] o netware: remove leftover traces [80] o noproxy: also match with adjacent comma [19] o noproxy: guard against empty hostnames in noproxy check [136] o noproxy: tailmatch like in 7.85.0 and earlier [35] o nroff-scan.pl: detect double highlights o ntlm: improve comment for encrypt_des [55] o ntlm: silence ubsan warning about copying from null target_info pointer [69] o openssl/mbedtls: use %d for outputing port with failf (int) [72] o openssl: prefix errors with '[lib]/[version]: ' [105] o os400: use platform socklen_t in Curl_getnameinfo_a [18] o page-header: grammar improvement (display transfer rate) [126] o proxy: refactor haproxy protocol handling as connection filter [57] o README.md: remove badges and xmas-tree garnish [9] o rtsp: fix RTSP auth [49] o runtests: --no-debuginfod now disables DEBUGINFOD_URLS [100] o runtests: do CRLF replacements per section only [97] o scripts/checksrc.pl: detect duplicated include files [29] o sendf: change Curl_read_plain to wrap Curl_recv_plain [48] o sendf: remove unnecessary if condition [26] o setup: do not require __MRC__ defined for Mac OS 9 builds [117] o smb/telnet: do not free the protocol struct in *_done() [152] o socks: fix username max size is 255 (0xFF) [146] o spellcheck.words: remove 'github' as an accepted word [22] o ssl-reqd.d: clarify that this is for upgrading connections only [138] o strcase: use curl_str(n)equal for case insensitive matches [8] o styled-output.d: this option does not work on Windows [93] o system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS [133] o system.h: support 64-bit curl_off_t for NonStop 32-bit [21] o test1421: fix typo [109] o test3026: reduce runtime in legacy mingw builds [73] o tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+ o tests: add authorityInfoAccess to generated certs [99] o tests: add HTTP/3 test case, custom location for proper nghttpx [106] o tls: backends use connection filters for IO, enabling HTTPS-proxy [92] o tool: determine the correct fopen option for -D [95] o tool_cfgable: free the ssl_ec_curves on exit [142] o tool_cfgable: make socks5_gssapi_nec a boolean [128] o tool_formparse: avoid clobbering on function params [135] o tool_getparam: make --no-get work as the opposite of --get [39] o tool_operate: provide better errmsg for -G with bad URL [16] o tool_operate: when aborting, make sure there is a non-NULL error buffer [20] o tool_paramhlp: free the proto strings on exit [141] o url: move back the IDN conversion of proxy names [74] o urlapi: reject more bad letters from the host name: &+() [143] o urldata: change port num storage to int and unsigned short [66] o vms: remove SIZEOF_SHORT [134] o vtls: fix build without proxy support [38] o vtls: localization of state data in filters [84] o WEBSOCKET.md: fix broken link [30] o Websocket: fixes for partial frames and buffer updates [7] o websockets: fix handling of partial frames [32] o windows: fail early with a missing windres in autotools [5] o windows: fix linking .rc to shared curl with autotools [24] o winidn: drop WANT_IDN_PROTOTYPES [27] o ws: if no connection is around, return error [149] o ws: return CURLE_NOT_BUILT_IN when websockets not built in [34] o x509asn1: avoid freeing unallocated pointers [147] Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/curl | 1 + lfs/curl | 6 ++- ...pressions_for_option_info_parameters.patch | 42 +++++++++++++++++++ 3 files changed, 47 insertions(+), 2 deletions(-) create mode 100644 src/patches/curl-7.87.0_typecheck_accept_expressions_for_option_info_parameters.patch diff --git a/config/rootfiles/common/curl b/config/rootfiles/common/curl index 01a5fd792..82e3988d6 100644 --- a/config/rootfiles/common/curl +++ b/config/rootfiles/common/curl @@ -119,6 +119,7 @@ usr/lib/libcurl.so.4.8.0 #usr/share/man/man3/CURLOPT_CAINFO.3 #usr/share/man/man3/CURLOPT_CAINFO_BLOB.3 #usr/share/man/man3/CURLOPT_CAPATH.3 +#usr/share/man/man3/CURLOPT_CA_CACHE_TIMEOUT.3 #usr/share/man/man3/CURLOPT_CERTINFO.3 #usr/share/man/man3/CURLOPT_CHUNK_BGN_FUNCTION.3 #usr/share/man/man3/CURLOPT_CHUNK_DATA.3 diff --git a/lfs/curl b/lfs/curl index 33678f795..b76c33410 100644 --- a/lfs/curl +++ b/lfs/curl @@ -24,7 +24,7 @@ include Config -VER = 7.86.0 +VER = 7.87.0 THISAPP = curl-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = a1de7feb229de42bf1deeb5017f97df3b1c10c75fac99bcd0cd21a5dc69b6d8b62520744106d6a113c7a86bd6731dba536a263aabfa22be50d520c43e894acce +$(DL_FILE)_BLAKE2 = b272ec928c5ef1728434630d8910f58834327a30570913df9d47921a2810d002bd88b81371005197db857d3a53386420c1e28b1e463e6241d46c1e50fbce0c13 install : $(TARGET) @@ -70,6 +70,8 @@ $(subst %,%_BLAKE2,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar xf $(DIR_DL)/$(DL_FILE) + # Add upstream patche. + cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/curl-7.87.0_typecheck_accept_expressions_for_option_info_parameters.patch cd $(DIR_APP) && ./configure \ --prefix=/usr \ --disable-ipv6 \ diff --git a/src/patches/curl-7.87.0_typecheck_accept_expressions_for_option_info_parameters.patch b/src/patches/curl-7.87.0_typecheck_accept_expressions_for_option_info_parameters.patch new file mode 100644 index 000000000..63b23e309 --- /dev/null +++ b/src/patches/curl-7.87.0_typecheck_accept_expressions_for_option_info_parameters.patch @@ -0,0 +1,42 @@ +From curl commit e2aed00 + +As expressions can have side effects, evaluate only once. + +To enable deprecation reporting only once, get rid of the __typeof__ +use to define the local temporary variable and use the target type +(CURLoption/CURLINFO). This also avoids multiple reports on type +conflicts (if some) by the curlcheck_* macros. + +Note that CURLOPT_* and CURLINFO_* symbols may be deprecated, but not +their values: a curl_easy_setopt call with an integer constant as option +will never report a deprecation. + +Reported-by: Thomas Klausner +Fixes #10148 +Closes #10149 + + +--- curl-7.87.0/include/curl/typecheck-gcc.h.orig 2022-12-19 08:48:23.000000000 +0100 ++++ curl-7.87.0/include/curl/typecheck-gcc.h 2022-12-26 20:39:29.243819395 +0100 +@@ -42,9 +42,8 @@ + */ + #define curl_easy_setopt(handle, option, value) \ + __extension__({ \ +- CURL_IGNORE_DEPRECATION(__typeof__(option) _curl_opt = option;) \ ++ CURLoption _curl_opt = (option); \ + if(__builtin_constant_p(_curl_opt)) { \ +- (void) option; \ + CURL_IGNORE_DEPRECATION( \ + if(curlcheck_long_option(_curl_opt)) \ + if(!curlcheck_long(value)) \ +@@ -120,9 +119,8 @@ + /* wraps curl_easy_getinfo() with typechecking */ + #define curl_easy_getinfo(handle, info, arg) \ + __extension__({ \ +- CURL_IGNORE_DEPRECATION(__typeof__(info) _curl_info = info;) \ ++ CURLINFO _curl_info = (info); \ + if(__builtin_constant_p(_curl_info)) { \ +- (void) info; \ + CURL_IGNORE_DEPRECATION( \ + if(curlcheck_string_info(_curl_info)) \ + if(!curlcheck_arr((arg), char *)) \ -- 2.39.0

2 20

[PATCH 00/21] linux: Update to 5.15.85 and backport many IPFire 3.x changes
by Peter Müller 29 Dec '22

29 Dec '22

This patchset aims at updating the Linux kernel to 5.15.85, given that the last release we shipped dates back a while ago. However, its primary purpose is to backport some kernel changes recently made by Michael in IPFire 3.x, whenever bringing these to the IPFire 2.x userbase is sensible and/or feasible. Patch descriptions are copy & past'ed from their IPFire 3.x counterparts, which are referred to by their commit IDs in ipfire-3.x. Due to different hardware situation as well as architecture maturity (this particularly affects ARM), not all changes could be backported 1:1 or to a near-complete extend. Feedback is particularly appreciated regarding the last commit, which aims at aligning the ARM kernel configuration files to the x86_64 one. Since no real ARM hardware is at the author's disposal, this alignment has to be taken with a pinch of salt. As far as benchmarks are concerned, a 5.15.85 x86_64 kernel booted in an IPFire 2.x VM on the basis of Core Update 172 introduced the following changes in file size: Location Before After ------------------------------------------- /boot 48M 53M (+ 5) /lib/modules 58M 71M (+13) ISO 373M 394M (+21) Contrary to its documentation, enabling the GCC stackleak plugin (which is the current setting in IPFire 3.x as well) neither brought a notable compile time increase, nor does it seem to slow down runtime operations significantly. More thorough tests, especially on physical machines, are however, yet to come. Peter Müller (21): linux: Update to 5.15.85 linux: Disable the entire PCMCIA/CardBus subsystem linux: Enable parallel crypto by default linux: Disable syscalls that allows processes to r/w other processes' memory linux: Disable the latent entropy plugin linux: Build all library routines as modules and disable self-tests linux: Build all HWRNGs as modules linux: Compile binfmt_misc as a module linux: Wipe all memory when rebooting on EFI linux: Disable the Distributed Lock Manager linux: Disable some character devices that do not make sense linux: Make graphics configruation sane linux: Disable all sorts of useless Device Mapper targets linux: Enable various modern ciphers/hashes/etc. and acceleration linux: Compress the kernel, modules and firmware using Zstandard linux: Disable ACPI configfs support linux: Enable support for more USB host controllers as modules linux: Poison kernel stack before returning from syscalls linux: Enable Landlock support linux: Update x86_64 rootfile linux: Align ARM kernel configurations as much as possible config/kernel/kernel.config.aarch64-ipfire | 194 +- config/kernel/kernel.config.armv6l-ipfire | 101 +- config/kernel/kernel.config.x86_64-ipfire | 216 +- config/rootfiles/common/x86_64/linux | 5954 ++++++++--------- lfs/linux | 9 +- .../linux-5.15-wifi-security-patches-1.patch | 50 - .../linux-5.15-wifi-security-patches-10.patch | 98 - .../linux-5.15-wifi-security-patches-11.patch | 96 - .../linux-5.15-wifi-security-patches-12.patch | 1179 ---- .../linux-5.15-wifi-security-patches-13.patch | 130 - .../linux-5.15-wifi-security-patches-14.patch | 107 - .../linux-5.15-wifi-security-patches-2.patch | 59 - .../linux-5.15-wifi-security-patches-3.patch | 49 - .../linux-5.15-wifi-security-patches-4.patch | 96 - .../linux-5.15-wifi-security-patches-5.patch | 56 - .../linux-5.15-wifi-security-patches-6.patch | 39 - .../linux-5.15-wifi-security-patches-7.patch | 60 - .../linux-5.15-wifi-security-patches-8.patch | 94 - .../linux-5.15-wifi-security-patches-9.patch | 126 - 19 files changed, 3183 insertions(+), 5530 deletions(-) delete mode 100644 src/patches/linux/linux-5.15-wifi-security-patches-1.patch delete mode 100644 src/patches/linux/linux-5.15-wifi-security-patches-10.patch delete mode 100644 src/patches/linux/linux-5.15-wifi-security-patches-11.patch delete mode 100644 src/patches/linux/linux-5.15-wifi-security-patches-12.patch delete mode 100644 src/patches/linux/linux-5.15-wifi-security-patches-13.patch delete mode 100644 src/patches/linux/linux-5.15-wifi-security-patches-14.patch delete mode 100644 src/patches/linux/linux-5.15-wifi-security-patches-2.patch delete mode 100644 src/patches/linux/linux-5.15-wifi-security-patches-3.patch delete mode 100644 src/patches/linux/linux-5.15-wifi-security-patches-4.patch delete mode 100644 src/patches/linux/linux-5.15-wifi-security-patches-5.patch delete mode 100644 src/patches/linux/linux-5.15-wifi-security-patches-6.patch delete mode 100644 src/patches/linux/linux-5.15-wifi-security-patches-7.patch delete mode 100644 src/patches/linux/linux-5.15-wifi-security-patches-8.patch delete mode 100644 src/patches/linux/linux-5.15-wifi-security-patches-9.patch -- 2.35.3

2 44

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development December 2022