Development April 2022

development@lists.ipfire.org

18 participants
154 discussions

[PATCH] getrrdimage.cgi: Add default values to parameters
by Leo-Andres Hofmann 06 Apr '22

06 Apr '22

Prevents "use of uninitialized value" warnings when the CGI is called with broken undefined GET parameters. Signed-off-by: Leo-Andres Hofmann <hofmann(a)leo-andres.de> --- html/cgi-bin/getrrdimage.cgi | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/html/cgi-bin/getrrdimage.cgi b/html/cgi-bin/getrrdimage.cgi index 26e026bba..6ec91cc92 100644 --- a/html/cgi-bin/getrrdimage.cgi +++ b/html/cgi-bin/getrrdimage.cgi @@ -44,9 +44,9 @@ my @supported_origins = ("entropy.cgi", "hardwaregraphs.cgi", "media.cgi", my $uri = URI->new($ENV{'REQUEST_URI'}); my %query = $uri->query_form; -my $origin = lc $query{'origin'}; # lower case -my $graph = $query{'graph'}; -my $range = lc $query{'range'}; # lower case +my $origin = lc ($query{'origin'} // ''); # lower case +my $graph = $query{'graph'} // ''; +my $range = lc ($query{'range'} // ''); # lower case # Check parameters unless(($origin =~ /^\w+?\.cgi$/) && ($graph =~ /^[\w\-.,; ]+?$/) && ($range ~~ @Graphs::time_ranges)) { -- 2.27.0.windows.1

2 1

[PATCH] header.pl: Add translation to DHCP leases table
by Leo-Andres Hofmann 06 Apr '22

06 Apr '22

Signed-off-by: Leo-Andres Hofmann <hofmann(a)leo-andres.de> --- config/cfgroot/header.pl | 12 ++++++------ langs/de/cgi-bin/de.pl | 1 + langs/en/cgi-bin/en.pl | 1 + 3 files changed, 8 insertions(+), 6 deletions(-) diff --git a/config/cfgroot/header.pl b/config/cfgroot/header.pl index e97f90d67..5ddea348e 100644 --- a/config/cfgroot/header.pl +++ b/config/cfgroot/header.pl @@ -381,15 +381,15 @@ sub CheckSortOrder { sub PrintActualLeases { - &openbox('100%', 'left', $tr{'current dynamic leases'}); + &openbox('100%', 'left', $Lang::tr{'current dynamic leases'}); print <<END <table width='100%' class='tbl'> <tr> -<th width='25%' align='center'><a href='$ENV{'SCRIPT_NAME'}?IPADDR'>$tr{'ip address'}</a></th> -<th width='25%' align='center'><a href='$ENV{'SCRIPT_NAME'}?ETHER'>$tr{'mac address'}</a></th> -<th width='20%' align='center'><a href='$ENV{'SCRIPT_NAME'}?HOSTNAME'>$tr{'hostname'}</a></th> -<th width='25%' align='center'><a href='$ENV{'SCRIPT_NAME'}?ENDTIME'>$tr{'lease expires'} (local time d/m/y)</a></th> -<th width='5%' align='center'>Add to fix leases</th> +<th width='25%' align='center'><a href='$ENV{'SCRIPT_NAME'}?IPADDR'>$Lang::tr{'ip address'}</a></th> +<th width='25%' align='center'><a href='$ENV{'SCRIPT_NAME'}?ETHER'>$Lang::tr{'mac address'}</a></th> +<th width='20%' align='center'><a href='$ENV{'SCRIPT_NAME'}?HOSTNAME'>$Lang::tr{'hostname'}</a></th> +<th width='25%' align='center'><a href='$ENV{'SCRIPT_NAME'}?ENDTIME'>$Lang::tr{'lease expires'} (local time d/m/y)</a></th> +<th width='5%' align='center'>$Lang::tr{'dhcp make fixed lease'}</th> </tr> END ; diff --git a/langs/de/cgi-bin/de.pl b/langs/de/cgi-bin/de.pl index 0be097609..fb725acc7 100644 --- a/langs/de/cgi-bin/de.pl +++ b/langs/de/cgi-bin/de.pl @@ -793,6 +793,7 @@ 'dhcp dns update secret' => 'Schlüssel', 'dhcp fixed lease err1' => 'Für eine feste Zuordnung müssen entweder die Hardware Adresse (MAC-Adresse) oder der Hostname oder beide eingetragen werden.', 'dhcp fixed lease help1' => 'IP Adressen können als FQDN angegeben werden.', +'dhcp make fixed lease' => 'Feste Zuordnung erzeugen', 'dhcp mode' => 'DHCP', 'dhcp server' => 'DHCP-Server', 'dhcp server disabled' => 'DHCP-Server deaktiviert. Angehalten.', diff --git a/langs/en/cgi-bin/en.pl b/langs/en/cgi-bin/en.pl index d98422621..0c54a8ecc 100644 --- a/langs/en/cgi-bin/en.pl +++ b/langs/en/cgi-bin/en.pl @@ -827,6 +827,7 @@ 'dhcp dns update secret' => 'Secret', 'dhcp fixed lease err1' => 'For a fix lease you have to enter the MAC address or the hostname, or you enter both.', 'dhcp fixed lease help1' => 'IP Addresses might be entered as FQDN', +'dhcp make fixed lease' => 'Add to fix leases', 'dhcp mode' => 'DHCP', 'dhcp server' => 'DHCP Server', 'dhcp server disabled' => 'DHCP server disabled. Stopped.', -- 2.27.0.windows.1

2 1

[PATCH] poppler: Update to version 22.04.0
by Adolf Belka 05 Apr '22

05 Apr '22

- Update from 22.02.0 to 22.04.0 - Update of rootfile - Changelog Release 22.04.0: core: * Fix underline sometimes being drawn only partially * Fix Adobe Reader not reading some of the contents we write correctly * Fix code that workarounds some broken-ish files * FoFiTrueType: Parse CFF2 fonts too * FoFiTrueType: Support cmap types 2 and 13 * Fix a few small memory leaks * code improvements qt: * Handle SaveAs named action * Annotations: don't change the text color when changing the font utils: * pdftotext: print creation and modification date when using htmlmeta param glib: * Fix returning internal data of temporary strings cpp: * Fix code incompatibility with MSVC build system: * poppler internal library is no longer forced to static on MSVC * Error out if iconv is not available and the cpp frontend is enabled * Require FreeType 2.8 Release 22.03.0: core: * Signature: Fix finding Signatures that are in Pages not not in the global the Forms object * Signature: Improve getting the path to the firefox certificate database * Splash: Fix rendering of some joints. Issue #1212 * Fix get_poppler_localdir for relocatable Windows builds * Minor code improvements qt: * Minor code improvements utils: * pdfimages: Fix the wrong Stream being passed for drawMaskedImage build system: * Small code improvements Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/poppler | 4 ++-- lfs/poppler | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/config/rootfiles/common/poppler b/config/rootfiles/common/poppler index 8bd35c272..0ea058043 100644 --- a/config/rootfiles/common/poppler +++ b/config/rootfiles/common/poppler @@ -173,8 +173,8 @@ usr/lib/libpoppler-cpp.so.0.9.0 usr/lib/libpoppler-glib.so.8 usr/lib/libpoppler-glib.so.8.23.0 #usr/lib/libpoppler.so -usr/lib/libpoppler.so.118 -usr/lib/libpoppler.so.118.0.0 +usr/lib/libpoppler.so.120 +#usr/lib/libpoppler.so.120.0.0 #usr/lib/pkgconfig/poppler-cpp.pc #usr/lib/pkgconfig/poppler-glib.pc #usr/lib/pkgconfig/poppler.pc diff --git a/lfs/poppler b/lfs/poppler index 45007543c..4de368ef8 100644 --- a/lfs/poppler +++ b/lfs/poppler @@ -24,7 +24,7 @@ include Config -VER = 22.02.0 +VER = 22.04.0 THISAPP = poppler-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 97d27fb6d31535b5fce0aa518d00ab9da218a8d49dcb45dbaa5ab3cc669d8ffc75e07bd617b5fe9842c8b7b8ac843e9aa07ee0d31504f1e2b6c4f89b2177add6 +$(DL_FILE)_BLAKE2 = ea38e4d6bd4bbbbb2024fdceb35c4868e9c70ea597b231d221f4f61635b9d92ffbaca4bb196f06b4b04a3d787a7251f36760f4a6dd466c1c055e13034affb55e install : $(TARGET) -- 2.35.1

1 0

[PATCH] pango: Update to version 1.50.6
by Adolf Belka 05 Apr '22

05 Apr '22

- Update from 1.50.4 to 1.50.6 - Update of rootfile - Changelog Overview of changes in 1.50.6, 19-03-2022 - Drop hb-glib dependency - Fix test font configuration - Maintain order in pango_attr_list_change - Fix a use-after-free in pango_attr_list_change Overview of changes in 1.50.5, 03-03-2022 * Fix compiler warnings * Enable cairo by default * pango-view: Show more baselines * layout: Handle baselines * Windows: build cleanups Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/pango | 6 +++--- lfs/pango | 4 ++-- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/config/rootfiles/common/pango b/config/rootfiles/common/pango index c009e6210..fe3164613 100644 --- a/config/rootfiles/common/pango +++ b/config/rootfiles/common/pango @@ -41,13 +41,13 @@ usr/bin/pango-view #usr/include/pango-1.0/pango/pangoft2.h #usr/lib/libpango-1.0.so usr/lib/libpango-1.0.so.0 -usr/lib/libpango-1.0.so.0.5000.4 +usr/lib/libpango-1.0.so.0.5000.6 #usr/lib/libpangocairo-1.0.so usr/lib/libpangocairo-1.0.so.0 -usr/lib/libpangocairo-1.0.so.0.5000.4 +#usr/lib/libpangocairo-1.0.so.0.5000.6 #usr/lib/libpangoft2-1.0.so usr/lib/libpangoft2-1.0.so.0 -usr/lib/libpangoft2-1.0.so.0.5000.4 +#usr/lib/libpangoft2-1.0.so.0.5000.6 #usr/lib/pkgconfig/pango.pc #usr/lib/pkgconfig/pangocairo.pc #usr/lib/pkgconfig/pangofc.pc diff --git a/lfs/pango b/lfs/pango index 1a8d64c36..759f269ae 100644 --- a/lfs/pango +++ b/lfs/pango @@ -24,7 +24,7 @@ include Config -VER = 1.50.4 +VER = 1.50.6 THISAPP = pango-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 310a7be79ebf693b3a7775fa86557539bf4ea682b0903266248ab2812504e805024b14a917531e71ad9b5637d4d3f3c1a06b84188eb01aeed37fdcc7d11679a9 +$(DL_FILE)_BLAKE2 = 63cad33f5fe5361642edb0e26a11c45e28e23400f29c078079fa9ce4411eca90c67fdd789e8cf9caec0f1d4a6b5d619808d8dcf53447f961b66db17e1bbcdb97 install : $(TARGET) -- 2.35.1

1 0

[PATCH] harfbuzz: Update to version 4.2.0
by Adolf Belka 05 Apr '22

05 Apr '22

- Update from 3.4.0 to 4.2.0 - Update of rootfile - Changelog Overview of changes leading to 4.2.0 Wednesday, March 30, 2022 - Source code reorganization, splitting large hb-ot-layout files into smaller, per-subtable ones under OT/Layout/*. Code for more tables will follow suit in later releases. (Garret Rieger, Behdad Esfahbod) - Revert Indic shaper change in previous release that broke some fonts and instead make per-syllable restriction of “GSUB” application limited to script-specific Indic features, while applying them and discretionary features in one go. (Behdad Esfahbod) - Fix decoding of private in gvar table. (Behdad Esfahbod) - Fix handling of contextual lookups that delete too many glyphs. (Behdad Esfahbod) - Make “morx” deleted glyphs don’t block “GPOS” application. (Behdad Esfahbod) - Various build fixes. (Chun-wei Fan, Khaled Hosny) - New API +hb_set_next_many() (Andrew John) Overview of changes leading to 4.1.0 Wednesday, March 23, 2022 - Various OSS-Fuzz fixes. (Behdad Esfahbod) - Make fallback vertical-origin match FreeType’s. (Behdad Esfahbod) - Treat visible viramas like dependent vowels in USE shaper. (David Corbett) - Apply presentation forms features and discretionary features in one go in Indic shaper, which seems to match Uniscribe and CoreText behaviour. (Behdad Esfahbod, David Corbett) - Various bug fixes. - New API +hb_set_add_sorted_array() (Andrew John) Overview of changes leading to 4.0.1 Friday, March 11, 2022 - Update OpenType to AAT mappings for “hist” and “vrtr” features. (Florian Pircher) - Update IANA Language Subtag Registry to 2022-03-02. (David Corbett) - Update USE shaper to allow any non-numeric tail in a symbol cluster, and remove obsolete data overrides. (David Corbett) - Fix handling of baseline variations to return correctly scaled values. (Matthias Clasen) - A new experimental hb_subset_repack_or_fail() to repack an array of objects, eliminating offset overflows. The API is not available unless HarfBuzz is built with experimental APIs enabled. (Qunxin Liu) - New experimental API +hb_link_t +hb_object_t +hb_subset_repack_or_fail() Overview of changes leading to 4.0.0 Tuesday, March 1, 2022 - New public API to create subset plan and gather information on things like glyph mappings in the final subset. The plan can then be passed on to perform the subsetting operation. (Garret Rieger) - Draw API for extracting glyph shapes have been extended and finalized and is no longer an experimental API. The draw API supports glyf, CFF and CFF2 glyph outlines tables, and applies variation settings set on the font as well as synthetic slant. The new public API is not backward compatible with the previous, non-public, experimental API. (Behdad Esfahbod) - The hb-view tool will use HarfBuzz draw API to render the glyphs instead of cairo-ft when compiled with Cairo 1.17.5 or newer, setting HB_DRAW environment variable to 1 or 0 will force using or not use the draw API, respectively. (Behdad Esfahbod) - The hb-shape and hb-view tools now default to using HarfBuzz’s own font loading functions (ot) instead of FreeType ones (ft). They also have a new option, --font-slant, to apply synthetic slant to the font. (Behdad Esfahbod) - HarfBuzz now supports more than 65535 (the OpenType limit) glyph shapes and metrics. See https://github.com/be-fonts/boring-expansion-spec/issues/6 and https://github.com/be-fonts/boring-expansion-spec/issues/7 for details. (Behdad Esfahbod) - New API to get the dominant horizontal baseline tag for a given script. (Behdad Esfahbod) - New API to get the baseline positions from the font, and synthesize missing ones. As well as new API to get font metrics and synthesize missing ones. (Matthias Clasen) - Improvements to finding dependencies on Windows when building with Visual Studio. (Chun-wei Fan) - New buffer flag, HB_BUFFER_FLAG_PRODUCE_UNSAFE_TO_CONCAT, that must be set during shaping for HB_GLYPH_FLAG_UNSAFE_TO_CONCAT flag to be reliably produced. This is to limit the performance hit of producing this flag to when it is actually needed. (Behdad Esfahbod) - Documentation improvements. (Matthias Clasen) - New API - General: +HB_BUFFER_FLAG_PRODUCE_UNSAFE_TO_CONCAT +hb_var_num_t - Draw: +hb_draw_funcs_t +hb_draw_funcs_create() +hb_draw_funcs_reference() +hb_draw_funcs_destroy() +hb_draw_funcs_is_immutable() +hb_draw_funcs_make_immutable() +hb_draw_move_to_func_t +hb_draw_funcs_set_move_to_func() +hb_draw_line_to_func_t +hb_draw_funcs_set_line_to_func() +hb_draw_quadratic_to_func_t +hb_draw_funcs_set_quadratic_to_func() +hb_draw_cubic_to_func_t +hb_draw_funcs_set_cubic_to_func() +hb_draw_close_path_func_t +hb_draw_funcs_set_close_path_func() +hb_draw_state_t +HB_DRAW_STATE_DEFAULT +hb_draw_move_to() +hb_draw_line_to() +hb_draw_quadratic_to() +hb_draw_cubic_to() +hb_draw_close_path() +hb_font_get_glyph_shape_func_t +hb_font_funcs_set_glyph_shape_func() +hb_font_get_glyph_shape() - OpenType layout +HB_OT_LAYOUT_BASELINE_TAG_IDEO_FACE_CENTRAL +HB_OT_LAYOUT_BASELINE_TAG_IDEO_EMBOX_CENTRAL +hb_ot_layout_get_horizontal_baseline_tag_for_script() +hb_ot_layout_get_baseline_with_fallback() - Metrics: +hb_ot_metrics_get_position_with_fallback() - Subset: +hb_subset_plan_t +hb_subset_plan_create_or_fail() +hb_subset_plan_reference() +hb_subset_plan_destroy() +hb_subset_plan_set_user_data() +hb_subset_plan_get_user_data() +hb_subset_plan_execute_or_fail() +hb_subset_plan_unicode_to_old_glyph_mapping() +hb_subset_plan_new_to_old_glyph_mapping() +hb_subset_plan_old_to_new_glyph_mapping() Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/harfbuzz | 10 +++++++--- lfs/harfbuzz | 4 ++-- 2 files changed, 9 insertions(+), 5 deletions(-) diff --git a/config/rootfiles/common/harfbuzz b/config/rootfiles/common/harfbuzz index 0bf04184c..68269bae0 100644 --- a/config/rootfiles/common/harfbuzz +++ b/config/rootfiles/common/harfbuzz @@ -30,6 +30,7 @@ #usr/include/harfbuzz/hb-shape-plan.h #usr/include/harfbuzz/hb-shape.h #usr/include/harfbuzz/hb-style.h +#usr/include/harfbuzz/hb-subset-repacker.h #usr/include/harfbuzz/hb-subset.h #usr/include/harfbuzz/hb-unicode.h #usr/include/harfbuzz/hb-version.h @@ -39,11 +40,11 @@ #usr/lib/libharfbuzz-subset.la #usr/lib/libharfbuzz-subset.so usr/lib/libharfbuzz-subset.so.0 -usr/lib/libharfbuzz-subset.so.0.30400.0 +usr/lib/libharfbuzz-subset.so.0.40200.0 #usr/lib/libharfbuzz.la #usr/lib/libharfbuzz.so usr/lib/libharfbuzz.so.0 -usr/lib/libharfbuzz.so.0.30400.0 +usr/lib/libharfbuzz.so.0.40200.0 #usr/lib/pkgconfig/harfbuzz-subset.pc #usr/lib/pkgconfig/harfbuzz.pc #usr/share/gtk-doc/html/harfbuzz @@ -84,7 +85,6 @@ usr/lib/libharfbuzz.so.0.30400.0 #usr/share/gtk-doc/html/harfbuzz/api-index-1-5-0.html #usr/share/gtk-doc/html/harfbuzz/api-index-1-6-0.html #usr/share/gtk-doc/html/harfbuzz/api-index-1-7-2.html -#usr/share/gtk-doc/html/harfbuzz/api-index-1-7-5.html #usr/share/gtk-doc/html/harfbuzz/api-index-1-7-7.html #usr/share/gtk-doc/html/harfbuzz/api-index-1-8-0.html #usr/share/gtk-doc/html/harfbuzz/api-index-1-8-1.html @@ -109,6 +109,9 @@ usr/lib/libharfbuzz.so.0.30400.0 #usr/share/gtk-doc/html/harfbuzz/api-index-3-1-0.html #usr/share/gtk-doc/html/harfbuzz/api-index-3-3-0.html #usr/share/gtk-doc/html/harfbuzz/api-index-3-4-0.html +#usr/share/gtk-doc/html/harfbuzz/api-index-4-0-0.html +#usr/share/gtk-doc/html/harfbuzz/api-index-4-1-0.html +#usr/share/gtk-doc/html/harfbuzz/api-index-4-2-0.html #usr/share/gtk-doc/html/harfbuzz/api-index-full.html #usr/share/gtk-doc/html/harfbuzz/apple-advanced-typography-api.html #usr/share/gtk-doc/html/harfbuzz/buffers-language-script-and-direction.html @@ -131,6 +134,7 @@ usr/lib/libharfbuzz.so.0.30400.0 #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-coretext.html #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-deprecated.html #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-directwrite.html +#usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-draw.html #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-face.html #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-font.html #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-ft.html diff --git a/lfs/harfbuzz b/lfs/harfbuzz index 752f75c5f..8fe4c9026 100644 --- a/lfs/harfbuzz +++ b/lfs/harfbuzz @@ -24,7 +24,7 @@ include Config -VER = 3.4.0 +VER = 4.2.0 THISAPP = harfbuzz-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 3a39e2d3e358e21d74fdd667cef56bc0c7bc74f15336217d561a1dc3f06978c6e3ced73875fa7121122c6bf4153f2dae6c5e5e112dc9a793249d2f10d2fb87b8 +$(DL_FILE)_BLAKE2 = 90c9ef62780cefd8bb7b79ad31b17db5a0b8b56bee436a69191c8d26f0e9d36ecbf59656dc0846bfa19cb6dc741eac3507d3fe6b0f79df283af60e1b0220611b install : $(TARGET) -- 2.35.1

1 0

[PATCH] dbus: Update to version 1.14.0
by Adolf Belka 05 Apr '22

05 Apr '22

- Update from 1.12.20 to 1.14.0 - Update of rootfile - Changelog 1.14.x is a new stable branch, superseding 1.12.x. Summary of major changes between 1.12.x and 1.14.0 Dependencies: • dbus now requires at least a basic level of support for C99 variadic macros, as implemented in gcc >= 3, all versions of Clang, and MSVC >= 2005. In practice this requirement has existed since version 1.9.2, but it is now official. • dbus now requires a C99-compatible va_copy() macro (or a __va_copy() macro with the same behaviour), except when building for Windows using MSVC and CMake. • On Unix platforms, if getpwnam_r() and getgrnam_r() are implemented, they must be POSIX-conformant. The non-POSIX signature seen in ancient Solaris versions will no longer work. • All Windows builds now require Windows Vista or later. (Note that we do not recommend or support use of dbus on operating systems outside their vendor's security support lifetime, such as Vista.) • GLib >= 2.38 is required if full test coverage is enabled (reduced from 2.40 in dbus 1.12.x.) • Building using CMake now requires CMake 3.4. • Building documentation using CMake now requires xsltproc, Docbook DTDs (for example docbook-xml on Debian derivatives), and Docbook XSLT stylesheets (for example docbook-xsl on Debian derivatives). Using KDE's meinproc4 documentation processor is no longer supported. Build-time configuration changes: • Move CMake build system to top level, matching normal practice for CMake projects Deprecations: **Looking through these I don't believe they will cause a problem as they are deprecations and not yet removed.In the future if needed we might need to set datadir to /etc to keep the location the same as with syscondir. This won't be needed if we don't use the system.d directory for dbus policies. • Third-party software should install default dbus policies for the system bus into ${datadir}/dbus-1/system.d (this has been supported since dbus 1.10, released in August 2015). Installing default dbus policies in ${sysconfdir}/dbus-1/system.d is now considered to be deprecated. Policy files in ${sysconfdir}/dbus-1/system.d continue to be read, but this directory should only be used by system administrators wishing to override the default policies. The ${datadir} applicable to dbus is usually /usr/share and the ${sysconfdir} is usually /etc. • A similar pattern applies to the session bus policies in session.d. • The dbus-send(1) man page now documents --bus and --peer instead of the old --address synonym for --peer, which has been deprecated since the introduction of --bus and --peer in 1.7.6 • The dbus-daemon man page now has scarier warnings about <allow_anonymous/> and non-local TCP, which are insecure and should not be used, particularly for the standard system and session buses • DBusServer (and hence the dbus-daemon) no longer accepts usernames (login names) for the recommended EXTERNAL authentication mechanism, only numeric user IDs or the empty string. See 1.13.0 release notes for full details. New features: • On Linux 4.13 or later when built against a suitable glibc version, GetConnectionCredentials() now includes UnixGroupIDs, the effective group IDs of the initiator of the connection, taken from SO_PEERGROUPS. • On Linux 4.13 or later, <policy group="…"> now uses the SO_PEERGROUPS credentials-passing socket option to get the effective group IDs of the initiator of the connection. See 1.13.4 release notes for details. • Add a --sender option to dbus-send, which requests a name and holds it until the signal has been sent • dbus-daemon <allow> and <deny> rules can now specify a send_destination_prefix attribute, which is like a combination of send_destination and the arg0namespace keyword in match rules. See 1.13.12 release notes for more details • The dbus-daemon now filters the messages that it relays, removing header fields that it does not understand. Clients must not rely on this behaviour unless they have confirmed that they are connected to a suitable message bus implementation, for example by querying its Features property. • The dbus-daemon now emits a signal, ActivatableServicesChanged, when the list of activatable services may have changed. Support for this signal can be discovered by querying the Features property. • It is now possible to disable traditional (non-systemd) service activation at build-time (Autotools: --disable-traditional-activation, CMake: -DENABLE_TRADITIONAL_ACTIVATION=OFF). See 1.13.10 release notes for details. • The API reference manual can be built as a Qt compiled help file if qhelpgenerator(-qt5) is available. See 1.13.16 release notes for details. Miscellaneous behaviour changes: • When using the "user bus" (--enable-user-session), put the dbus-daemon in the session slice • Several environment variables set by systemd are no longer passed on to activated services • If the dbus-daemon is compiled for Linux with systemd support, it now informs systemd that it is ready for use via the sd_notify() mechanism • Tarball releases no longer contain pre-2007 changelogs and are now compressed with xz, making them around 35% smaller. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/packages/dbus | 7 ++++--- lfs/dbus | 17 ++++++++++------- 2 files changed, 14 insertions(+), 10 deletions(-) diff --git a/config/rootfiles/packages/dbus b/config/rootfiles/packages/dbus index abcb6c695..82817a942 100644 --- a/config/rootfiles/packages/dbus +++ b/config/rootfiles/packages/dbus @@ -37,11 +37,10 @@ usr/bin/dbus-uuidgen #usr/lib/dbus-1.0/include #usr/lib/dbus-1.0/include/dbus #usr/lib/dbus-1.0/include/dbus/dbus-arch-deps.h -#usr/lib/libdbus-1.a #usr/lib/libdbus-1.la -usr/lib/libdbus-1.so +#usr/lib/libdbus-1.so usr/lib/libdbus-1.so.3 -usr/lib/libdbus-1.so.3.19.13 +usr/lib/libdbus-1.so.3.32.0 #usr/lib/pkgconfig/dbus-1.pc usr/libexec/dbus-daemon-launch-helper #usr/share/dbus-1 @@ -58,8 +57,10 @@ usr/share/dbus-1/system.d #usr/share/doc/dbus/examples/GetAllMatchRules.py #usr/share/doc/dbus/examples/example-session-disable-stats.conf #usr/share/doc/dbus/examples/example-system-enable-stats.conf +#usr/share/doc/dbus/examples/example-system-hardening-without-traditional-activation.conf #usr/share/doc/dbus/system-activation.txt #usr/share/xml/dbus-1 #usr/share/xml/dbus-1/busconfig.dtd +#usr/share/xml/dbus-1/catalog.xml #usr/share/xml/dbus-1/introspect.dtd var/lib/dbus diff --git a/lfs/dbus b/lfs/dbus index c854359a0..c816b2c07 100644 --- a/lfs/dbus +++ b/lfs/dbus @@ -26,15 +26,15 @@ include Config SUMMARY = D-Bus Message Bus System -VER = 1.12.20 +VER = 1.14.0 THISAPP = dbus-$(VER) -DL_FILE = $(THISAPP).tar.gz +DL_FILE = $(THISAPP).tar.xz DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = dbus -PAK_VER = 4 +PAK_VER = 5 DEPS = @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = b467526e7e0281db7b8c7c178469fe006dab29ccb1ea197c02495bd297e8de766230b68ed86c4a7e05dbe09ca30ce941a15e0bf8030fe0df66c04febf0534b3b +$(DL_FILE)_BLAKE2 = ae0ebc2779e840e2d83f633029f81fba0e35969648dddce0280640dd9bee3f9508aa7fb6aef696d1c4c56d40f91b754941f847525afaee5cc3170ad23a7eddbf install : $(TARGET) @@ -81,9 +81,12 @@ $(subst %,%_BLAKE2,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_SRC)/dbus* - cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) - cd $(DIR_APP) && ./configure --prefix=/usr --sysconfdir=/etc \ - --localstatedir=/var + cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) + cd $(DIR_APP) && ./configure \ + --prefix=/usr \ + --sysconfdir=/etc \ + --localstatedir=/var \ + --disable-static cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install -- 2.35.1

1 0

[PATCH] haproxy: Update to 2.4.15
by Peter Müller 05 Apr '22

05 Apr '22

The changelog of the entire 2.4.x series can be retrieved from https://www.haproxy.org/download/2.4/src/CHANGELOG . As-promised-to: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/haproxy | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/lfs/haproxy b/lfs/haproxy index 59e17e03a..96911574d 100644 --- a/lfs/haproxy +++ b/lfs/haproxy @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2021 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,7 +26,9 @@ include Config SUMMARY = The Reliable, High Performance TCP/HTTP Load Balancer -VER = 2.2.4 +VER = 2.4.15 + +# From: https://www.haproxy.org/download/2.4/src/haproxy-2.4.15.tar.gz THISAPP = haproxy-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +36,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = haproxy -PAK_VER = 19 +PAK_VER = 20 DEPS = @@ -52,7 +54,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = c53da911f09a5b35ae97709691754aceed09b01dffa27ee69368d26f552c1b87d149477ad8ab0410564e5ef1d520c91e069b36a9f3a5588a8cf9feb3139f9181 +$(DL_FILE)_BLAKE2 = 425444a54e22cca8d15cb808283be3baefcd2ce56447d91bce3b4f4b7f6606e03d2eb8a242891c619cfd0fad9aba5bb84026c68d41f07cd55f083481df234899 install : $(TARGET) -- 2.34.1

2 1

[PATCH] smartmontools: Update to 7.3
by Peter Müller 05 Apr '22

05 Apr '22

Please refer to https://www.smartmontools.org/browser/tags/RELEASE_7_3/smartmontools/NEWS for the changelog of this version. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/smartmontools | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/smartmontools b/lfs/smartmontools index 5742aec52..bd3851eb8 100644 --- a/lfs/smartmontools +++ b/lfs/smartmontools @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2021 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 7.2 +VER = 7.3 THISAPP = smartmontools-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 9f671656e610404b0ab8b6ec51421b4046c64d16331cff821a8d9dbf34dd6c4be4fa63d3a2eaffe2aa869b09acf5f18b9c9750f76e33423710ef9166212e3a92 +$(DL_FILE)_BLAKE2 = 119fd4aded487796ffd38050ddf8c7dd69cc6f3950650cb0315846292fd4a6594d949d87c51ed46717d6aaadb332c68f655514d1fde89600d51f3fe36f8df1ca install : $(TARGET) -- 2.34.1

2 1

[PATCH 1/2] collectd.conf: Change chain from HOSTILE to HOSTILE_DROP - fixes bug#12838
by Adolf Belka 05 Apr '22

05 Apr '22

From: Bernhard Bitsch <bbitsch(a)ipfire.org> - Chain that was specified was HOSTILE but actual used is HOSTILE_DROP - Using HOSTILE caused no update fro the hostile data used in the Firewall Hits graph Fixes: bug#12838 Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/collectd/collectd.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/collectd/collectd.conf b/config/collectd/collectd.conf index 2a0237100..e34a97da1 100644 --- a/config/collectd/collectd.conf +++ b/config/collectd/collectd.conf @@ -52,7 +52,7 @@ include "/etc/collectd.precache" Chain filter POLICYOUT DROP_OUTPUT Chain filter POLICYIN DROP_INPUT Chain filter SPOOFED_MARTIAN DROP_SPOOFED_MARTIAN - Chain filter HOSTILE DROP_HOSTILE + Chain filter HOSTILE_DROP DROP_HOSTILE </Plugin> #<Plugin logfile> -- 2.35.1

2 3

[PATCH] nginx: Update to 1.20.2
by Peter Müller 05 Apr '22

05 Apr '22

The 1.20.x series is the current stable one, please refer to https://nginx.org/en/CHANGES-1.20 for its changelog. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/nginx | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/lfs/nginx b/lfs/nginx index bf5ebb1a3..a624ca44e 100644 --- a/lfs/nginx +++ b/lfs/nginx @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2020 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -25,7 +25,7 @@ include Config SUMMARY = A HTTP server and IMAP/POP3 proxy server -VER = 1.19.2 +VER = 1.20.2 THISAPP = nginx-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -33,7 +33,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = nginx -PAK_VER = 11 +PAK_VER = 12 DEPS = @@ -47,7 +47,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = db00b5945ed82fe90059269ba987931642981a2b8fa1cb24e0d842b97d89857993f99443c644d9217af29430b868ee8efd90dbc5daefd719d0f98c0766601554 +$(DL_FILE)_BLAKE2 = dc2fb9e7316ccac433c1f06c59d2738358c16194fe0ece80f54d145e2c4e3c3a8d6ebc4badb97580a000d721197a865bcc8c94a4d671af94be4bc3181974c586 install : $(TARGET) -- 2.34.1

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development April 2022