Development January 2023

development@lists.ipfire.org

10 participants
60 discussions

[PATCH] firewall: Avoid creating a rule that permits all traffic on invalid source
by Michael Tremer 18 Jan '23

18 Jan '23

The firewall engine generated rules that did not have any traffic selectors due to an improperly initialized variable in the source. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- config/firewall/rules.pl | 3 +++ 1 file changed, 3 insertions(+) diff --git a/config/firewall/rules.pl b/config/firewall/rules.pl index 30ad20df1..1b628df16 100644 --- a/config/firewall/rules.pl +++ b/config/firewall/rules.pl @@ -401,6 +401,9 @@ sub buildrules { $source = ""; } + # Make sure that $source is properly defined + next unless (defined $source); + my $source_intf = @$src[1]; foreach my $dst (@destinations) { -- 2.30.2

2 1

[PATCH 1/3] Config: Support rootfiles with spaces in filenames
by Michael Tremer 18 Jan '23

18 Jan '23

Our build scripts can't handle any spaces in filenames. This is being fixed by this patch with only a slightly changed set of shell commands. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- lfs/Config | 13 ++++++------- 1 file changed, 6 insertions(+), 7 deletions(-) diff --git a/lfs/Config b/lfs/Config index 1d02e969c..2b2e9f569 100644 --- a/lfs/Config +++ b/lfs/Config @@ -294,9 +294,8 @@ define POSTBUILD @rm -rf $(GOPATH) /root/.cargo @$(FIND_FILES) > $(DIR_SRC)/lsalrnew @diff $(DIR_SRC)/lsalr $(DIR_SRC)/lsalrnew | grep '^> ' | sed 's/^> //' > $(TARGET)_diff - @cp -f $(DIR_SRC)/lsalrnew $(DIR_SRC)/lsalr - @rm -f $(DIR_SRC)/lsalrnew - sed -i -e 's+.\/++' $(TARGET)_diff + @mv -f $(DIR_SRC)/lsalrnew $(DIR_SRC)/lsalr + @sed -i -e 's+.\/++' $(TARGET)_diff # compare roofile ( same name as lfs script) with the list of installed files # special cases # - if the corresponding rootfile is not found, touch $(TARGET)_missing_rootfile @@ -305,7 +304,7 @@ define POSTBUILD # ROOTFILE : reference of include/exclude files # $(TARGET)_rootfile : ROOTFILE with KVER replacement # $(TARGET) : log result with {commented|include|added} files - if [ -s "$(TARGET)_diff" ]; then \ + @if [ -s "$(TARGET)_diff" ]; then \ LFS_SCRIPT=$(firstword $(MAKEFILE_LIST))$(KCFG); \ echo $(LFS_SCRIPT); \ ROOTFILE=$$(find -L $(DIR_SRC)/config/rootfiles/{common,packages}/{$(BUILD_ARCH),} -maxdepth 1 -type f -name $$LFS_SCRIPT 2>/dev/null | head -1); \ @@ -315,13 +314,13 @@ define POSTBUILD echo "error $$LFS_SCRIPT not found in config/rootfiles"; \ fi; \ sed -e "s/BUILDTARGET/$(BUILDTARGET)/g" -e "s/KVER/$(KVER)/g" -e "s/xxxMACHINExxx/$(BUILD_ARCH)/g" $$ROOTFILE > $(TARGET)_rootfile; \ - for line in `cat $(TARGET)_diff`; do \ + while read -r line; do \ if grep -qG "^#$$line$$" $(TARGET)_rootfile; then echo "#$$line" >> $(TARGET); \ elif grep -qG "^$$line$$" $(TARGET)_rootfile ; then echo "$$line" >> $(TARGET); \ else echo "+$$line" >> $(TARGET); \ fi; \ - done; \ - for line in `grep -v "^#" $(TARGET)_rootfile`; do \ + done < $(TARGET)_diff; \ + grep -v "^#" $(TARGET)_rootfile | while read -r line; do \ if ! grep -qG "^$$line$$" $(TARGET)_diff ; then echo "-$$line" >> $(TARGET); \ fi; \ done; \ -- 2.30.2

2 5

[PATCH] iptables: Update to version 1.8.9
by Adolf Belka 18 Jan '23

18 Jan '23

- Update from version 1.8.8 to 1.8.9 - Update of rootfile - Changelog xtables-monitor: add missing spaces in printed str build: Fix error during out of tree build iptables: xshared: Ouptut '--' in the opt field in ipv6's fake mode iptables.8: mention that iptables exits when setuid extensions: libxt_conntrack: remove always-false conditionals nft: fix ebtables among match when mac+ip addresses are used nft: support dissection of meta pkktype mode nft: prefer native 'meta pkttype' instead of xt match extensions: libxt_pkttype: support otherhost nft: support ttl/hoplimit dissection nft: prefer payload to ttl/hl module nft: un-break among match with concatenation Revert "nft: prefer payload to ttl/hl module"/'meta pkttype' match. nft: track each register individually tests: extend native delinearize script nft: check for unknown meta keys iptables-nft: exit nonzero when iptables-save cannot decode all expressions xlate: get rid of escape_quotes extensions: change expected output for new format xlate-test: avoid shell entanglements nft-bridge: work around recent "among" decode breakage extensions: add xt_statistics random mode translation netfilter: add nf_log.h treewide: use uint* instead of u_int* nft: replace nftnl_.*_nlmsg_build_hdr() by nftnl_nlmsg_build_hdr() nft-shared: replace nftnl_expr_get_data() by nftnl_expr_get() xshared: Fix build for -Werror=format-security Revert "fix build for missing ETH_ALEN definition" tests: shell: Check overhead in iptables-save and -restore libxtables: Unexport init_extensions*() declarations arptables: Support -x/--exact flag iptables-legacy: Drop redundant include of xtables-multi.h xshared: Make some functions static Makefile: Add --enable-profiling configure option tests: shell: Add some more rules to 0002-verbose-output_0 tests: shell: Extend iptables-xml test a bit tests: shell: Extend zero counters test a bit further extensions: libebt_standard.t: Test logical-{in,out} as well ebtables-restore: Deny --init-table extensions: string: Do not print default --to value extensions: string: Review parse_string() function extensions: string: Fix and enable tests nft: Exit if nftnl_alloc_expr fails libxtables: Move struct xtables_afinfo into xtables.h libxtables: Define XT_OPTION_OFFSET_SCALE in xtables.h libxtables: Fix unsupported extension warning corner case tests: shell: Fix testcases for changed ip6tables opts output xshared: Fix for missing space after 'prot' column xshared: Print protocol numbers if --numeric was given xtables-restore: Extend failure error message nft: Expand extended error reporting to nft_cmd, too tests: shell: Test delinearization of native nftables expressions ebtables: Drop unused OPT_* defines ebtables: Eliminate OPT_TABLE ebtables: Merge OPT_* flags with xshared ones nft-shared: Introduce __get_cmp_data() ebtables: Support '-p Length' ebtables: Fix among match nft: Fix meta statement parsing nft-bridge: Drop 'sreg_count' variable tests: iptables-test: Simplify '-N' option a bit tests: iptables-test: Simplify execute_cmd() calling tests: iptables-test: Pass netns to execute_cmd() tests: iptables-test: Test both variants by default extensions: among: Remove pointless fall through extensions: among: Fix for use with ebtables-restore extensions: libebt_stp: Eliminate duplicate space in output extensions: libip6t_dst: Fix output for empty options extensions: TCPOPTSTRIP: Do not print empty options extensions: libebt_log: Avoid empty log-prefix in output tests: IDLETIMER.t: Fix syntax, support for restore input tests: libebt_stp.t: Drop duplicate whitespace tests: shell: Fix expected output for ip6tables dst match tests: shell: Fix expected ebtables log target output libiptc: Fix for segfault when renaming a chain nft: Fix compile with -DDEBUG extensions: NFQUEUE: Document queue-balance limitation tests: iptables-test: Implement fast test mode tests: iptables-test: Cover for obligatory -j CONTINUE in ebtables tests: *.t: Fix expected output for simple calls tests: *.t: Fix for hexadecimal output tests: libebt_redirect.t: Plain redirect prints with trailing whitespace tests: libxt_length.t: Fix odd use-case output tests: libxt_recent.t: Add missing default values tests: libxt_tos.t, libxt_TOS.t: Add missing masks in output tests: libebt_vlan.t: Drop trailing whitespace from rules tests: libxt_connlimit.t: Add missing default values tests: *.t: Add missing all-one's netmasks to expected output extensions: DNAT: Fix bad IP address error reporting extensions: *NAT: Drop NF_NAT_RANGE_PROTO_RANDOM* flag checks extensions: DNAT: Use __DNAT_xlate for REDIRECT, too extensions: DNAT: Generate print, save and xlate callbacks extensions: DNAT: Rename some symbols extensions: Merge SNAT, DNAT, REDIRECT and MASQUERADE tests: xlate-test: Cleanup file reading loop tests: xlate-test.py: Introduce run_proc() tests: xlate-test: Replay results for reverse direction testing xshared: Share make_delete_mask() between ip{,6}tables nft-shared: Introduce port_match_single_to_range() extensions: libip*t_LOG: Merge extensions extensions: libebt_ip: Include kernel header extensions: libebt_arp, libebt_ip: Use xtables_ipparse_any() extensions: Collate ICMP types/codes in libxt_icmp.h extensions: Unify ICMP parser into libxt_icmp.h Drop extra newline from xtables_error() calls extensions: mark: Test double bitwise in a rule extensions: libebt_mark: Fix mark target xlate extensions: libebt_mark: Fix xlate test case extensions: libebt_redirect: Fix xlate return code extensions: libipt_ttl: Sanitize xlate callback extensions: CONNMARK: Fix xlate callback extensions: MARK: Sanitize MARK_xlate() extensions: TCPMSS: Use xlate callback for IPv6, too extensions: TOS: Fix v1 xlate callback extensions: ecn: Sanitize xlate callback extensions: tcp: Translate TCP option match extensions: libebt_log: Add comment to clarify xlate callback extensions: frag: Add comment to clarify xlate callback extensions: ipcomp: Add comment to clarify xlate callback libxtables: xt_xlate_add() to take care of spacing extensions: Leverage xlate auto-spacing extensions: libxt_conntrack: Drop extra whitespace in xlate extensions: xlate: Format sets consistently tests: shell: Test selective ebtables flushing tests: shell: Fix valgrind mode for 0008-unprivileged_0 iptables-restore: Free handle with --test also iptables-xml: Free allocated chain strings nft: Plug memleak in nft_rule_zero_counters() iptables: Plug memleaks in print_firewall() xtables: Introduce xtables_clear_iptables_command_state() iptables: Properly clear iptables_command_state object xshared: Free data after printing help libiptc: Eliminate garbage access ebtables: Implement --check command tests: xlate: Use --check to verify replay nft: Fix for comparing ifname matches against nft-generated ones nft: Fix match generator for '! -i +' nft: Recognize INVAL/D interface name xtables-translate: Fix for interfaces with asterisk mid-string ebtables: Fix MAC address match translation Makefile: Create LZMA-compressed dist-files Drop INCOMPATIBILITIES file Drop libiptc/linux_stddef.h Makefile: Generate ip6tables man pages on the fly extensions: Makefile: Merge initext targets iptables/Makefile: Reorg variable assignments iptables/Makefile: Split nft-variant man page list Makefile: Fix for 'make distcheck' Makefile: Generate .tar.xz archive with 'make dist' include/Makefile: xtables-version.h is generated tests: Adjust testsuite return codes to automake guidelines Makefile.am: Integrate testsuites nft: Parse icmp header matches arptables: Check the mandatory ar_pln match nft: Increase rule parser strictness nft: Make rule parsing errors fatal nft: Reject tcp/udp extension without proper protocol match gitignore: Ignore utils/nfsynproxy gitignore: Ignore generated ip6tables man pages ebtables-translate: Install symlink Makefile: Replace brace expansion configure: Bump version for 1.8.9 release tests: add ebtables among testcase xt_sctp: support a couple of new chunk types Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/iptables | 13 ++++++------- lfs/iptables | 8 ++++---- 2 files changed, 10 insertions(+), 11 deletions(-) diff --git a/config/rootfiles/common/iptables b/config/rootfiles/common/iptables index d7d87bee7..06e4ab7b4 100644 --- a/config/rootfiles/common/iptables +++ b/config/rootfiles/common/iptables @@ -13,15 +13,12 @@ lib/libipq.so.0.0.0 #lib/libxtables.la lib/libxtables.so lib/libxtables.so.12 -lib/libxtables.so.12.6.0 +lib/libxtables.so.12.7.0 #lib/xtables lib/xtables/libip6t_DNPT.so lib/xtables/libip6t_HL.so -lib/xtables/libip6t_LOG.so -lib/xtables/libip6t_MASQUERADE.so lib/xtables/libip6t_NETMAP.so lib/xtables/libip6t_REJECT.so -lib/xtables/libip6t_SNAT.so lib/xtables/libip6t_SNPT.so lib/xtables/libip6t_ah.so lib/xtables/libip6t_dst.so @@ -36,11 +33,8 @@ lib/xtables/libip6t_rt.so lib/xtables/libip6t_srh.so lib/xtables/libipt_CLUSTERIP.so lib/xtables/libipt_ECN.so -lib/xtables/libipt_LOG.so -lib/xtables/libipt_MASQUERADE.so lib/xtables/libipt_NETMAP.so lib/xtables/libipt_REJECT.so -lib/xtables/libipt_SNAT.so lib/xtables/libipt_TTL.so lib/xtables/libipt_ULOG.so lib/xtables/libipt_ah.so @@ -58,7 +52,10 @@ lib/xtables/libxt_DSCP.so lib/xtables/libxt_HMARK.so lib/xtables/libxt_IDLETIMER.so lib/xtables/libxt_LED.so +lib/xtables/libxt_LOG.so lib/xtables/libxt_MARK.so +lib/xtables/libxt_MASQUERADE.so +lib/xtables/libxt_NAT.so lib/xtables/libxt_NFLOG.so lib/xtables/libxt_NFQUEUE.so lib/xtables/libxt_NOTRACK.so @@ -66,6 +63,7 @@ lib/xtables/libxt_RATEEST.so lib/xtables/libxt_REDIRECT.so lib/xtables/libxt_SECMARK.so lib/xtables/libxt_SET.so +lib/xtables/libxt_SNAT.so lib/xtables/libxt_SYNPROXY.so lib/xtables/libxt_TCPMSS.so lib/xtables/libxt_TCPOPTSTRIP.so @@ -177,4 +175,5 @@ sbin/xtables-legacy-multi #usr/share/man/man8/iptables.8 #usr/share/man/man8/nfnl_osf.8 #usr/share/xtables +usr/share/xtables/iptables.xslt usr/share/xtables/pf.os diff --git a/lfs/iptables b/lfs/iptables index 275559bfe..30c6e1d94 100644 --- a/lfs/iptables +++ b/lfs/iptables @@ -24,10 +24,10 @@ include Config -VER = 1.8.8 +VER = 1.8.9 THISAPP = iptables-$(VER) -DL_FILE = $(THISAPP).tar.bz2 +DL_FILE = $(THISAPP).tar.xz DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) @@ -41,7 +41,7 @@ objects = $(DL_FILE) \ $(DL_FILE) = $(DL_FROM)/$(DL_FILE) netfilter-layer7-v2.23.tar.gz = $(URL_IPFIRE)/netfilter-layer7-v2.23.tar.gz -$(DL_FILE)_BLAKE2 = 0da021cc7313b86af331768904956dab3eee3de245a7b03965129f3d7f13097fc03fbb1390167dcd971eff216eabad9e59b261a9c0f54bfc48a77453aa40d164 +$(DL_FILE)_BLAKE2 = 37ba80be0ee7049c4d3ee5689b273b4d2cc6e6fb9ebb297e86976b5750f987f2ae4536013fe1749ae79b6989c241eaece3202019fafd47d842c7a4fe3e5093b1 netfilter-layer7-v2.23.tar.gz_BLAKE2 = 5c8ab722f6fbc126f2f65ecf401de5fc40560c20e3be52f783db34410446185dcb6781b3148e4a174e8b2d2c290bec0342dea95e8cefc35c39345617fa7a8fdc install : $(TARGET) @@ -72,7 +72,7 @@ $(subst %,%_BLAKE2,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) $(DIR_SRC)/netfilter-layer7* - @cd $(DIR_SRC) && tar jxf $(DIR_DL)/$(DL_FILE) + @cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) # Layer7 cd $(DIR_SRC) && tar zxf $(DIR_DL)/netfilter-layer7-v2.23.tar.gz -- 2.39.0

2 1

[PATCH] libpcap: Update to 1.10.3
by Matthias Fischer 18 Jan '23

18 Jan '23

For deails see: https://git.tcpdump.org/libpcap/blob/HEAD:/CHANGES#43 Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- config/rootfiles/common/libpcap | 2 +- lfs/libpcap | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/common/libpcap b/config/rootfiles/common/libpcap index a3f71b3e6..2371b4601 100644 --- a/config/rootfiles/common/libpcap +++ b/config/rootfiles/common/libpcap @@ -22,7 +22,7 @@ #usr/lib/libpcap.a usr/lib/libpcap.so usr/lib/libpcap.so.1 -usr/lib/libpcap.so.1.10.2 +usr/lib/libpcap.so.1.10.3 #usr/lib/pkgconfig/libpcap.pc #usr/share/man/man1/pcap-config.1 #usr/share/man/man3/pcap.3pcap diff --git a/lfs/libpcap b/lfs/libpcap index 5293a5a0c..3f1de9b5a 100644 --- a/lfs/libpcap +++ b/lfs/libpcap @@ -24,7 +24,7 @@ include Config -VER = 1.10.2 +VER = 1.10.3 THISAPP = libpcap-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -42,7 +42,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = f8280c8e12065b4d86e451df8504c834da9c94b25029f0e5c22359d0ce35cf4e3490fa3343d0112209600ea01ffa54249c82c20e2859515884daee759e4a5e9b +$(DL_FILE)_BLAKE2 = 3614042f7d8cd5a25221f52d2ed09f9f44643cdc0901ff21041ddb7ba85193c667036f7d989c8b59e6e205d630e062da46533110914dd287013a9ff80b31e97f install : $(TARGET) -- 2.34.1

2 1

[PATCH] tcpdump: Update to 4.99.3
by Matthias Fischer 18 Jan '23

18 Jan '23

For details see: https://git.tcpdump.org/tcpdump/blob/HEAD:/CHANGES#48 Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/tcpdump | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/tcpdump b/lfs/tcpdump index dd81b7488..a3e9705c7 100644 --- a/lfs/tcpdump +++ b/lfs/tcpdump @@ -26,7 +26,7 @@ include Config SUMMARY = A Packet Sniffer -VER = 4.99.2 +VER = 4.99.3 THISAPP = tcpdump-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tcpdump -PAK_VER = 14 +PAK_VER = 15 DEPS = @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = be13fbf493478270c8ebc034a3c1467907a008ce2ed9632a87b7d7b9104b9fda248cd535da7313a1c3d57ca21f324c25593812590b96ec334c474d1ce06f3fd5 +$(DL_FILE)_BLAKE2 = 8e8adda6df40f3a79cbeb80bd01d43834e0b3ec44c8227bda2260b43ea0852f76beb02199120cca16adae0d793841cf684e7e276e520f49479a1b04ab1dc4821 install : $(TARGET) -- 2.34.1

2 1

[PATCH] ovpnmain.cgi: Fix for bug 13030 - Table style rendering bug
by Adolf Belka 17 Jan '23

17 Jan '23

- In six places <td class'base'> has been used instead of <td class='base'> - This patch fixes that error - tested on my vm testbed. Selecting Inspect Element now shows the corrrect result rather than class 'base' being set to null. Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- html/cgi-bin/ovpnmain.cgi | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/html/cgi-bin/ovpnmain.cgi b/html/cgi-bin/ovpnmain.cgi index 2d19301a6..42a7354fc 100644 --- a/html/cgi-bin/ovpnmain.cgi +++ b/html/cgi-bin/ovpnmain.cgi @@ -2710,7 +2710,7 @@ print <<END; <hr size='1'> <table width='100%'> <tr> - <td class'base'>$Lang::tr{'misc-options'}</td> + <td class='base'>$Lang::tr{'misc-options'}</td> </tr> <tr> @@ -2765,7 +2765,7 @@ print <<END; <hr size='1'> <table width='100%'> <tr> - <td class'base'>$Lang::tr{'log-options'}</td> + <td class='base'>$Lang::tr{'log-options'}</td> </tr> <tr> <td width='20%'></td> <td width='30%'> </td><td width='25%'> </td><td width='25%'></td> @@ -4648,7 +4648,7 @@ if ($cgiparams{'TYPE'} eq 'net') { <tr><td colspan=4><hr /></td></tr><tr> <tr> - <td class'base'>$Lang::tr{'MTU settings'}</td> + <td class='base'>$Lang::tr{'MTU settings'}</td> </tr> <tr><td class='boldbase' nowrap='nowrap'>$Lang::tr{'MTU'}</td> @@ -4672,7 +4672,7 @@ if ($cgiparams{'TYPE'} eq 'net') { <tr><td colspan=4><hr /></td></tr><tr> <tr> - <td class'base'>$Lang::tr{'ovpn crypt options'}:</td> + <td class='base'>$Lang::tr{'ovpn crypt options'}:</td> </tr> <tr><td class='boldbase'>$Lang::tr{'cipher'}</td> @@ -5222,7 +5222,7 @@ END <tr><td colspan='4'> </td></tr> <tr> - <td class'base'>$Lang::tr{'net config'}:</td> + <td class='base'>$Lang::tr{'net config'}:</td> </tr> <tr><td colspan='1'> </td></tr> @@ -5239,7 +5239,7 @@ END <tr><td colspan='4'> </td></tr> <tr> - <td class'base'>$Lang::tr{'ovpn crypt options'}:</td> + <td class='base'>$Lang::tr{'ovpn crypt options'}:</td> </tr> <tr><td colspan='1'> </td></tr> -- 2.39.0

2 1

services.cgi throws "XXXX is experimental"
by Matthias Fischer 16 Jan '23

16 Jan '23

Hi, updated to Core 172 - no problems, everything went fine. But... Each time I open 'servies.cgi', two lines are added to '/var/log/httpd/error_log': ***SNIP*** ... given is experimental at /srv/web/ipfire/cgi-bin/services.cgi line 145. when is experimental at /srv/web/ipfire/cgi-bin/services.cgi line 146. ... ***SNAP*** Besides this, the GUI looks good. Can anyone confirm? Best, Matthias

4 8

clamav 0.105.1-3 needs rust >1.61
by Matthias Fischer 15 Jan '23

15 Jan '23

Hi, ...I'd like to have a small problem... ;-) A few days ago, 'clamav 0.105.1' was updated, again: => https://blog.clamav.net/2022/11/second-clamav-100-release-candidate-and.html "...[it] was intended to also include bug fixes for the jpeg and tiff Rust-based libraries that are bundled with the source code tarball. Unfortunately, those fixes were not all release-ready in time for the 0.105.1-2 packages." So far, so [oh, forget it!]. Unfortunately, building the third version of 'clamav 0.105.1' with current 'next' failed: ***SNIP*** ... error: package `tiff v0.8.0` cannot be built because it requires rustc 1.61.0 or newer, while the currently active rustc version is 1.60.0-nightly. [193/379] Building C object libclamav/CMakeFiles/lzma_sdk.dir/7z/7zIn.c.o [194/379] Building C object libclamav/CMakeFiles/bytecode_runtime.dir/bytecode_nojit.c.o [195/379] Building C object libclamav/CMakeFiles/yara.dir/yara_grammar.c.o [196/379] Building C object libclamav/CMakeFiles/yara.dir/yara_lexer.c.o yara_lexer.c:2571:24: warning: 'yy_fatal_error' defined but not used [-Wunused-function] yara_lexer.c: In function 'yara_yylex': yara_lexer.l:263:16: warning: '%s' directive output may be truncated writing up to 1023 bytes into a region of size 999 [-Wformat-truncation=] In file included from /usr/include/stdio.h:906, from yara_lexer.c:32: /usr/include/bits/stdio2.h:54:10: note: '__builtin___snprintf_chk' output between 26 and 1049 bytes into a destination of size 1024 54 | return __builtin___snprintf_chk (__s, __n, __USE_FORTIFY_LEVEL - 1, | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 55 | __glibc_objsize (__s), __fmt, | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 56 | __va_arg_pack ()); | ~~~~~~~~~~~~~~~~~ ninja: build stopped: subcommand failed. make: *** [clamav:89: /usr/src/log/clamav-0.105.1] Error 1 ***SNAP*** Hm. Great. So I tried the current 'rust 1.65' version. This time, the building failed because of a rust component: ***SNIP*** ... Finished release [optimized] target(s) in 1.92s cd /usr/src/cipher-0.3.0 && mkdir -pv "/usr/share/cargo/registry/cipher-0.3.0" && if CARGOPATH=/usr/src/cipher-0.3.0/.cargo RUSTC_BOOTSTRAP=1 cargo --offline metadata --format-version 1 --no-deps | jq -e ".packages[].targets[].kind | any(. == \"lib\")" | grep -q "true" || CARGOPATH=/usr/src/cipher-0.3.0/.cargo RUSTC_BOOTSTRAP=1 cargo --offline metadata --format-version 1 --no-deps | jq -e ".packages[].targets[].kind | any(. == \"rlib\")" | grep -q "true" || CARGOPATH=/usr/src/cipher-0.3.0/.cargo RUSTC_BOOTSTRAP=1 cargo --offline metadata --format-version 1 --no-deps | jq -e ".packages[].targets[].kind | any(. == \"proc-macro\")" | grep -q "true"; then awk '/^\\\[((.+\\\.)?((dev|build)-)?dependencies|features)/{f=1;next} /^\\\[/{f=0}; !f' < Cargo.toml > Cargo.toml.deps && CARGOPATH=/usr/src/cipher-0.3.0/.cargo RUSTC_BOOTSTRAP=1 cargo --offline package -l | grep -wEv "Cargo.(lock|toml.orig)" | xargs -d "\n" cp -v --parents -a -t /usr/share/cargo/registry/cipher-0.3.0 && install -v -m 644 Cargo.toml.deps /usr/share/cargo/registry/cipher-0.3.0/Cargo.toml && echo "{\"files\":{},\"package\":\"\"}" > /usr/share/cargo/registry/cipher-0.3.0/.cargo-checksum.json; fi && if true && CARGOPATH=/usr/src/cipher-0.3.0/.cargo RUSTC_BOOTSTRAP=1 cargo --offline metadata --format-version 1 --no-deps | jq -e ".packages[].targets[].kind | any(. == \"bin\")" | grep -q "true"; then CARGOPATH=/usr/src/cipher-0.3.0/.cargo RUSTC_BOOTSTRAP=1 cargo --offline install -Z avoid-dev-deps -j8 --no-track --path .; fi mkdir: created directory '/usr/share/cargo/registry/cipher-0.3.0' warning: No (git) VCS found for `/usr/src/cipher-0.3.0` error: invalid inclusion of reserved file name Cargo.toml.orig in package source cp: missing file operand Try 'cp --help' for more information. make: *** [rust-cipher:78: /usr/src/log/cipher-0.3.0] Error 123 ***SNAP*** Ok, even greater. Does anyone have an idea to solve this? I can't even find an updated package for , e.g., 'cipher-0.3.0tar.gz', although apparently I found at least an updated version (0.4.3) here: => https://docs.rs/cipher/latest/cipher/# But no download links... Hm! Where on earth did 'cipher-0.3.0.tar.gz' came from? What makes me a bit nervous though is the fact that if clamav really can only be made to work with a major rust update, the other rust components might have to be updated as well. And I found 103 rust*-lfs files... Any thoughts and hints welcome! Best, Matthias

3 8

[PATCH] pcengines-apu-firmware: Update to version 4.17.0.3
by Jon Murphy 10 Jan '23

10 Jan '23

- Update from 4.17.0.2 to 4.17.0.3 - Changelog v4.17.0.3 - Release date: 2022-08-24 Rebased with official coreboot repository commit e173f2b See: https://github.com/pcengines/coreboot/compare/v4.17.0.2...v4.17.0.3 Signed-off-by: Jon Murphy <jon.murphy(a)ipfire.org> --- .../rootfiles/packages/pcengines-apu-firmware | 14 ++++++------- lfs/pcengines-apu-firmware | 20 +++++++++---------- 2 files changed, 17 insertions(+), 17 deletions(-) diff --git a/config/rootfiles/packages/pcengines-apu-firmware b/config/rootfiles/packages/pcengines-apu-firmware index 7ed3981d7..abae7bd0f 100644 --- a/config/rootfiles/packages/pcengines-apu-firmware +++ b/config/rootfiles/packages/pcengines-apu-firmware @@ -1,9 +1,9 @@ #lib/firmware/pcengines #lib/firmware/pcengines/apu -lib/firmware/pcengines/apu/apu1_v4.17.0.2.rom -lib/firmware/pcengines/apu/apu2_v4.17.0.2.rom -lib/firmware/pcengines/apu/apu3_v4.17.0.2.rom -lib/firmware/pcengines/apu/apu4_v4.17.0.2.rom -lib/firmware/pcengines/apu/apu5_v4.17.0.2.rom -lib/firmware/pcengines/apu/apu6_v4.17.0.2.rom -lib/firmware/pcengines/apu/apu7_v4.17.0.2.rom \ No newline at end of file +lib/firmware/pcengines/apu/apu1_v4.17.0.3.rom +lib/firmware/pcengines/apu/apu2_v4.17.0.3.rom +lib/firmware/pcengines/apu/apu3_v4.17.0.3.rom +lib/firmware/pcengines/apu/apu4_v4.17.0.3.rom +lib/firmware/pcengines/apu/apu5_v4.17.0.3.rom +lib/firmware/pcengines/apu/apu6_v4.17.0.3.rom +lib/firmware/pcengines/apu/apu7_v4.17.0.3.rom diff --git a/lfs/pcengines-apu-firmware b/lfs/pcengines-apu-firmware index e396f0c56..6a5c81741 100644 --- a/lfs/pcengines-apu-firmware +++ b/lfs/pcengines-apu-firmware @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,14 +26,14 @@ include Config SUMMARY = Firmware files for PC Engines apu system boards -VER = 4.17.0.2 +VER = 4.17.0.3 THISAPP = pcengines-apu-firmware-$(VER) DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = pcengines-apu-firmware -PAK_VER = 13 +PAK_VER = 14 SUP_ARCH = x86_64 DEPS = firmware-update @@ -61,13 +61,13 @@ apu5_v$(VER).rom = $(DL_FROM)/apu5_v$(VER).rom apu6_v$(VER).rom = $(DL_FROM)/apu6_v$(VER).rom apu7_v$(VER).rom = $(DL_FROM)/apu7_v$(VER).rom -apu1_v$(VER).rom_BLAKE2 = 90156d57e5d3c5907d99719668dc6b2b03b201d02d716722ea2c6bd201409dbeed83766a53a75fba89583f9a58e370c5951293c91405e9815466b91449af829d -apu2_v$(VER).rom_BLAKE2 = f074f78a3ce7cb5df813a6f3f198d06585f1f9b932a31e07d6ce94a5a48e6e4211166beba5f04b1b176b914d3d7448606f9c9fb1b60130b5609ce97c298a09ba -apu3_v$(VER).rom_BLAKE2 = 6f7f200f882bf188100f13c8a0d078e2bf94e40773cfba2d2d908d31c2a6d05567fc1cb81b2bedf4af6cdd7f9a4c8f6b67f168844298fcce99060aa13806790d -apu4_v$(VER).rom_BLAKE2 = 75f927deddbab1a4413392ac40e434a59ce3e16034bf439dc7ca93be0c84f3279c8fadd8f199134b586cbf1c102c3b28a78d4ca50f556122473055f77e031416 -apu5_v$(VER).rom_BLAKE2 = 030deaef4b784b527c699bf394bfbec3108e8ed41a8ce89d93e9a7cea208805a1a37cae686cb724fc6e4b26da48885c3f7fd745cabe8150066f4a52167ee7066 -apu6_v$(VER).rom_BLAKE2 = 19dedf8c79c3835b53252f5f4019bafbc47bd753247fd9d5bf974944a4587e8c2ec136805bb11576b11fe6ce3a5b83ccf99b2bd92341a20bf87730491548368e -apu7_v$(VER).rom_BLAKE2 = e99c0993baeffb0026e33d04be20a1bacdd2aa44c6cccf89bbd92313c361f62014080c47b8255a4381c12dd5519bc294595b917054f2289665852db174c2e22e +apu1_v$(VER).rom_BLAKE2 = e64c56f6105a206b6af2da4d54bd36d9caa53154b17d5fc32966ee3ed74b0b25749fd10c6936b5b9e526b779c2ef9f1d566915297244e1570c5000b555561aea +apu2_v$(VER).rom_BLAKE2 = 082e89bc8867383e673a6ba2791558b17bb7ab807257f546fa549393b25891287bdb13ae59e2525fc5951a8bab0ffead33c2a2d6b6616bea5c6f5daba573bd8c +apu3_v$(VER).rom_BLAKE2 = 06aef3cc85aa8a6082399961b75598c8632c6214079a2f670f2567c21b8b46c39736ef6514af14559048d118986d6fc56d1373e3c39309b73c2b56bfd6477611 +apu4_v$(VER).rom_BLAKE2 = ea07e2742ea98eae959928c3c5ba8038f24dbbac38087dc21a61039b92ed87fad8079414a92b81291de9d30f701574c4bf9c4c9c66e70938c2efcfa46f7c578d +apu5_v$(VER).rom_BLAKE2 = 0f4bf5fedc5948578c8c76aa9a622874c1c8df1774df6bda70baccd7453fd882c5ecccd1c249612c5415ed2408a86ed7cba6c05f1fe57a9df9138589e86b630c +apu6_v$(VER).rom_BLAKE2 = 90faa16c2ee863876b1bbdb862dd99213f2bcb30727db7553e4fc736ddc3fb354d3c8d58d6dd27f71586e5296ceb68a6f6dd43a15a4dbe4ee27f455486b6e43c +apu7_v$(VER).rom_BLAKE2 = 251e0e3183bce159351397aa7a2146e22d1c840e818c3118c2c02d21d3adfd574b3061d91d227cd51d64c6bc31d27f159b296ffdbb5ce5fdbced727b97f508ad install : $(TARGET) -- 2.30.2

2 1

[PATCH] alsa: Update to version 1.2.8
by Adolf Belka 09 Jan '23

09 Jan '23

- Update from version 1.2.5.1 to 1.2.8 - Update of rootfile - Changelog for alsa-lib and alsa-utils is too long to include here. Details can be found by looking at the individual web site pages for each change version from 1.2.5.1 to 1.2.8 at https://www.alsa-project.org/wiki/Main_Page_News Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/packages/alsa | 5 +++-- lfs/alsa | 8 ++++---- 2 files changed, 7 insertions(+), 6 deletions(-) diff --git a/config/rootfiles/packages/alsa b/config/rootfiles/packages/alsa index a704727ec..987e7f372 100644 --- a/config/rootfiles/packages/alsa +++ b/config/rootfiles/packages/alsa @@ -175,6 +175,9 @@ usr/include/alsa/sound/hdspm.h #usr/include/alsa/version.h #usr/include/asoundlib.h #usr/include/sys/asoundlib.h +#usr/lib/alsa-topology +#usr/lib/alsa-topology/libalsatplg_module_nhlt.la +usr/lib/alsa-topology/libalsatplg_module_nhlt.so #usr/lib/libasound.la #usr/lib/libasound.so usr/lib/libasound.so.2 @@ -355,8 +358,6 @@ usr/share/alsa #usr/share/alsa/pcm/surround50.conf #usr/share/alsa/pcm/surround51.conf #usr/share/alsa/pcm/surround71.conf -#usr/share/alsa/speaker-test -#usr/share/alsa/speaker-test/sample_map.csv #usr/share/locale/de/LC_MESSAGES/alsa-utils.mo #usr/share/locale/eu/LC_MESSAGES/alsa-utils.mo #usr/share/locale/fr/LC_MESSAGES/alsa-utils.mo diff --git a/lfs/alsa b/lfs/alsa index 66e44fc6f..2d89af880 100644 --- a/lfs/alsa +++ b/lfs/alsa @@ -26,8 +26,8 @@ include Config SUMMARY = Advanced Linux Sound Architecture -VER = 1.2.5.1 -UVER = 1.2.5.1 +VER = 1.2.8 +UVER = 1.2.8 FVER = 1.2.4 VERSUFIX = ipfire$(KCFG) @@ -55,8 +55,8 @@ $(DL_FILE) = $(DL_FROM)/$(DL_FILE) alsa-utils-$(UVER).tar.bz2 = $(DL_FROM)/alsa-utils-$(UVER).tar.bz2 alsa-firmware-$(FVER).tar.bz2 = $(DL_FROM)/alsa-firmware-$(FVER).tar.bz2 -$(DL_FILE)_BLAKE2 = 5464cc7f263bdf7b10aa7e1f542ad6dbc55bf300156fd1bded00375c41a518d4b14f96e28eb1c60a6ce7cc6e27da4b2e8598cd867f15417f260fc23513f93e11 -alsa-utils-$(UVER).tar.bz2_BLAKE2 = 79f96fd3ba1d92e72dc634dc01439acd3ccd02555c39cc1714c52bbd1e4bc8b68ec7bf5d219a704533e4a61587c3528504ef9cd7c652924d74daafa90f74e42a +$(DL_FILE)_BLAKE2 = e6171ac557db6265e3f02df7bd269eca62d09afaf2c04dc913d3bb217df23a8e66e808ad453fea5ed90d4d9226feb05065ad5d9b3575241b76675ccd27b9b4d4 +alsa-utils-$(UVER).tar.bz2_BLAKE2 = 4b9676957e775be51076b4798dfd384db4eea440c682899024034d3dd593ba24f1d42b8d742c312e041a37f0dbbc12b16635d79f6e6633a3459cc21f80739b5e alsa-firmware-$(FVER).tar.bz2_BLAKE2 = 0f844f6cc4859b72635f24d347b4c790469aee39aa60d9addb2c168dcf06b48e7e3cbba26ff21c7e1f5aa355641eec7ab934cb09bfac8ca116a6ac6a7db9d548 install : $(TARGET) -- 2.39.0

2 9

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development January 2023