Development September 2024

development@lists.ipfire.org

7 participants
29 discussions

[PATCH] expat: Update to version 2.6.3
by Adolf Belka 04 Sep '24

04 Sep '24

- Update from version 2.6.2 to 2.6.3 - Update of rootfile - 3 CVE Fixes in this release. - Changelog 2.6.3 Security fixes: #887 #890 CVE-2024-45490 -- Calling function XML_ParseBuffer with len < 0 without noticing and then calling XML_GetBuffer will have XML_ParseBuffer fail to recognize the problem and XML_GetBuffer corrupt memory. With the fix, XML_ParseBuffer now complains with error XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse has been doing since Expat 2.2.1, and now documented. Impact is denial of service to potentially artitrary code execution. #888 #891 CVE-2024-45491 -- Internal function dtdCopy can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX). Impact is denial of service to potentially artitrary code execution. #889 #892 CVE-2024-45492 -- Internal function nextScaffoldPart can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). Impact is denial of service to potentially artitrary code execution. Other changes: #851 #879 Autotools: Sync CMake templates with CMake 3.28 #853 Autotools: Always provide path to find(1) for portability #861 Autotools: Ensure that the m4 directory always exists. #870 Autotools: Simplify handling of SIZEOF_VOID_P #869 Autotools: Support non-GNU sed #856 Autotools|CMake: Fix main() to main(void) #865 Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM #863 Autotools|CMake: Stop requiring dos2unix #854 #855 CMake: Fix check for symbols size_t and off_t #864 docs|tests: Convert README to Markdown and update #741 Windows: Drop support for Visual Studio <=15.0/2017 #886 Drop needless XML_DTD guards around is_param access #885 Fix typo in a code comment #894 #896 Version info bumped from 10:2:9 (libexpat*.so.1.9.2) to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/ for what these numbers do Infrastructure: #880 Readme: Promote the call for help #868 CI: Fix various issues #849 CI: Allow triggering GitHub Actions workflows manually #851 #872 .. #873 #879 CI: Adapt to breaking changes in GitHub Actions Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/expat | 21 ++++++++++----------- lfs/expat | 4 ++-- 2 files changed, 12 insertions(+), 13 deletions(-) diff --git a/config/rootfiles/common/expat b/config/rootfiles/common/expat index 2ab49e910..51a4de2f7 100644 --- a/config/rootfiles/common/expat +++ b/config/rootfiles/common/expat @@ -2,22 +2,21 @@ #usr/include/expat.h #usr/include/expat_config.h #usr/include/expat_external.h -#usr/lib/cmake -#usr/lib/cmake/expat-2.6.2 -#usr/lib/cmake/expat-2.6.2/expat-config-version.cmake -#usr/lib/cmake/expat-2.6.2/expat-config.cmake -#usr/lib/cmake/expat-2.6.2/expat-noconfig.cmake -#usr/lib/cmake/expat-2.6.2/expat.cmake +#usr/lib/cmake/expat-2.6.3 +#usr/lib/cmake/expat-2.6.3/expat-config-version.cmake +#usr/lib/cmake/expat-2.6.3/expat-config.cmake +#usr/lib/cmake/expat-2.6.3/expat-noconfig.cmake +#usr/lib/cmake/expat-2.6.3/expat.cmake #usr/lib/libexpat.la #usr/lib/libexpat.so usr/lib/libexpat.so.1 -usr/lib/libexpat.so.1.9.2 +usr/lib/libexpat.so.1.9.3 #usr/lib/pkgconfig/expat.pc #usr/share/doc/expat -#usr/share/doc/expat-2.6.2 -#usr/share/doc/expat-2.6.2/ok.min.css -#usr/share/doc/expat-2.6.2/reference.html -#usr/share/doc/expat-2.6.2/style.css +#usr/share/doc/expat-2.6.3 +#usr/share/doc/expat-2.6.3/ok.min.css +#usr/share/doc/expat-2.6.3/reference.html +#usr/share/doc/expat-2.6.3/style.css #usr/share/doc/expat/AUTHORS #usr/share/doc/expat/changelog #usr/share/man/man1/xmlwf.1 diff --git a/lfs/expat b/lfs/expat index 3a37bf2d2..91e4f32af 100644 --- a/lfs/expat +++ b/lfs/expat @@ -24,7 +24,7 @@ include Config -VER = 2.6.2 +VER = 2.6.3 THISAPP = expat-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = aae019270e1ab233fe8480b7eaa77f648f23ef3383dc772dc946cb13163067431716dc5446862eb502315fd089f2f52f3d476589b74a97e462575cd54df44db4 +$(DL_FILE)_BLAKE2 = b8e0a0e779f0f136eaca91115cbbcf5a5cca457cab1cca6f8d6141151d19f8ef2dccb41b0e9134459c1e7d99cb2e0b4ce3922d2bd9221002ec43fe9d53a0084a install : $(TARGET) -- 2.46.0

1 0

Problem with trying to build qemu-9.0.2 - it requires dtc for all architectures
by Adolf Belka 04 Sep '24

04 Sep '24

Hi All, I am trying to do an update of the qemu package. It is failing for a missing fdt library which it says is required by targets x86_64-softmmu, aarch64-softmmu and riscv64-softmmu. The previous version that we currently have, 8.1.2 has a bundled dtc which includes the fdt library. That has been removed, probably with the change to the 9.x branch as it is not in 9.0.2 We have the dtc package in make but it is after qemu. I could move it to before qemu, however I also note that the dtc package is specified only for aarch64 but if we need to have the above softmmu targets specified then qemu is requiring the fdt library for all our architectures. Before I move dtc and change it to be for all architectures, I just want to flag this up and confirm that it is the right thing to do. Regards, Adolf.

2 8

The MTU definition part of dhcpcd has been rewritten in version 10.0.10
by Adolf Belka 04 Sep '24

04 Sep '24

Dear All, dhcpcd-10.0.10 is available but I noticed that a change has been made in the mtu definition section that means that the patch we have had to allow free selection of the MTU by the user will not apply. I have had a look through the changes but I can not determine if what they have done will give us the equivalent of the patched result we used to have or if a totally new patch needs to be created to deal with the changed coding. The commit with the change is https://github.com/NetworkConfiguration/dhcpcd/commit/5ac1235b99d33085d0574… The issue that triggered the change https://github.com/NetworkConfiguration/dhcpcd/pull/346 is labelled "No longer set interface mtu" which would suggest that it might be in line with what we want to have but I have no idea of how to test this and I don't understand the changes well enough to know if give us the result of users having free selection of the mtu. Can someone more experienced look through the changes to see if they are okay, before I look at doing a package update build for the updated version. Regards, Adolf.

3 8

[PATCH 1/3] qemu: Update to version 9.0.2
by Adolf Belka 04 Sep '24

04 Sep '24

- Update from version 9.0.0 to 9.0.2 - Update of rootfile not required - From version 9.0.1 onwards the bundled dtc has been removed but is required for the build. In an associated patch dtc has been moved to before qemu. - Changelog is only available at x.0 level 9.0 https://wiki.qemu.org/ChangeLog/9.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/qemu | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/lfs/qemu b/lfs/qemu index caa7c1bc2..0fd91651f 100644 --- a/lfs/qemu +++ b/lfs/qemu @@ -27,7 +27,7 @@ include Config SUMMARY = Machine emulator and virtualizer # If you update the version also qemu-ga !!! -VER = 9.0.0 +VER = 9.0.2 THISAPP = qemu-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -35,7 +35,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = qemu -PAK_VER = 43 +PAK_VER = 44 DEPS = alsa libusbredir spice libseccomp libslirp @@ -57,7 +57,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = d92acb859d9ce5097fee27a4689c71869aa38f65eb0308547956d54bd8caf29efe5389d9009f334f109ad228e0ef1f1fd1444d26360f03fac4320b204b657081 +$(DL_FILE)_BLAKE2 = 6b5301f985919ae53e056410be7486b8150a65016127568bd4d58f596e94960d08eb3fc57cff7ff6a3435d71274adee516f57375d856d61b4fc7a3f24cbf75c4 install : $(TARGET) @@ -103,8 +103,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) --enable-seccomp \ --disable-docs \ --disable-sdl \ - --enable-slirp - + --enable-slirp \ + -Dfdt=system cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install -- 2.46.0

1 2

Building of packages that require a .sh file to be executed
by sio / 04 Sep '24

04 Sep '24

hi all, I've been playing around with building the netdata package and it seems that in the build environment there is not a way to chmod or run a .sh file (from the lfs file) that is needed to build netadata. Is this by design or is there something I am missing? i have the lfs file setup to download all the resources per the offline install guidelines but it still requires their .sh file to run.

2 1

[PATCH 1/2] qemu: Update to version 9.0.0
by Adolf Belka 03 Sep '24

03 Sep '24

- Update from version 8.1.2 to 9.0.0 - Update of rootfile - Version 9.0.1 and 9.0.2 no longer have the bundled dtc package to provide the libfdt library and require a system version but identify the 1.7.1 version of dtc as being older than 1.5.1. So currently qemu has only been updated to 9.0.0 until the reason for this is identified and can be fixed. It has been raised as an issue on the qemu gitlab site. - Changelog is only available at x.0 level 9.0 https://wiki.qemu.org/ChangeLog/9.0 8.2 https://wiki.qemu.org/ChangeLog/8.2 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/packages/qemu | 5 +---- lfs/qemu | 10 +++------- 2 files changed, 4 insertions(+), 11 deletions(-) diff --git a/config/rootfiles/packages/qemu b/config/rootfiles/packages/qemu index efc0cbd2e..b4c3a752d 100644 --- a/config/rootfiles/packages/qemu +++ b/config/rootfiles/packages/qemu @@ -2,10 +2,8 @@ lib/udev/rules.d/65-kvm.rules usr/bin/elf2dmp usr/bin/qemu usr/bin/qemu-aarch64 -usr/bin/qemu-arm usr/bin/qemu-edid #usr/bin/qemu-ga -usr/bin/qemu-i386 usr/bin/qemu-img usr/bin/qemu-io usr/bin/qemu-nbd @@ -13,8 +11,6 @@ usr/bin/qemu-pr-helper usr/bin/qemu-riscv64 usr/bin/qemu-storage-daemon usr/bin/qemu-system-aarch64 -usr/bin/qemu-system-arm -usr/bin/qemu-system-i386 usr/bin/qemu-system-riscv64 usr/bin/qemu-system-x86_64 usr/bin/qemu-x86_64 @@ -77,6 +73,7 @@ usr/share/qemu/firmware/60-edk2-arm.json usr/share/qemu/firmware/60-edk2-i386.json usr/share/qemu/firmware/60-edk2-x86_64.json #usr/share/qemu/hppa-firmware.img +#usr/share/qemu/hppa-firmware64.img usr/share/qemu/keymaps usr/share/qemu/keymaps/ar usr/share/qemu/keymaps/bepo diff --git a/lfs/qemu b/lfs/qemu index d65282743..caa7c1bc2 100644 --- a/lfs/qemu +++ b/lfs/qemu @@ -27,7 +27,7 @@ include Config SUMMARY = Machine emulator and virtualizer # If you update the version also qemu-ga !!! -VER = 8.1.2 +VER = 9.0.0 THISAPP = qemu-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -35,21 +35,17 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = qemu -PAK_VER = 42 +PAK_VER = 43 DEPS = alsa libusbredir spice libseccomp libslirp SERVICES = TARGETS = \ - i386-linux-user \ x86_64-linux-user \ - arm-linux-user \ aarch64-linux-user \ riscv64-linux-user \ - i386-softmmu \ x86_64-softmmu \ - arm-softmmu \ aarch64-softmmu \ riscv64-softmmu @@ -61,7 +57,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 8f48638cd1f0285356aae2d14862f56cc79da09bb9ff9f09e90221fdca851e9c3f8a3d940039f578d24d0b4435baf19cb52a3e927e97bf978ea674d148ecd746 +$(DL_FILE)_BLAKE2 = d92acb859d9ce5097fee27a4689c71869aa38f65eb0308547956d54bd8caf29efe5389d9009f334f109ad228e0ef1f1fd1444d26360f03fac4320b204b657081 install : $(TARGET) -- 2.46.0

1 1

[PATCH] clamav: Update to version 1.3.1
by Adolf Belka 03 Sep '24

03 Sep '24

- Update from version 1.3.0 to 1.3.1 - Update of rootfile not required - As we can not upgrade currently to version 1.4.0 due to the rust/ruby issue we need to update to 1.3.1 as it has a CVE fix in it. - There are three rust dependencies that have been updated but all have a rust-1.57 requirement so have no problem with our current rust-1.67.0 version - Changelog 1.3.1 This is a critical patch release with the following fixes: - [CVE-2024-20380](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-203…: Fixed a possible crash in the HTML file parser that could cause a denial-of-service (DoS) condition. This issue affects version 1.3.0 only and does not affect prior versions. - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1242) - Updated select Rust dependencies to the latest versions. This resolved Cargo audit complaints and included PNG parser bug fixes. - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1227) - Fixed a bug causing some text to be truncated when converting from UTF-16. - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1230) - Fixed assorted complaints identified by Coverity static analysis. - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1235) - Fixed a bug causing CVDs downloaded by the `DatabaseCustomURL` Freshclam config option to be pruned and then re-downloaded with every update. - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1238) - Added the new 'valhalla' database name to the list of optional databases in preparation for future work. - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1238) - Added symbols to the `libclamav.map` file to enable additional build configurations. - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1244) Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/clamav | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/clamav b/lfs/clamav index 5a1089187..32b4aa4f9 100644 --- a/lfs/clamav +++ b/lfs/clamav @@ -26,7 +26,7 @@ include Config SUMMARY = Antivirus Toolkit -VER = 1.3.0 +VER = 1.3.1 THISAPP = clamav-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = clamav -PAK_VER = 71 +PAK_VER = 72 DEPS = @@ -50,7 +50,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = dc411b1a905d2699c497870877fbe99e3910f8e29bc77830085c8ab75161c80066ca1396f47c3cd6a098c06c839464dbe31feb2e7e64622c657ad4a6a9401282 +$(DL_FILE)_BLAKE2 = 49fc5f2f9b4497c095c4d19f86ebcdbcd49cac0e1355c0dbaba8bd56cbbc5af94404b6e6b04fbfb5e3d4364b7ff110b8461f93ba485ddc3f6b56cd86dbe4b362 install : $(TARGET) -- 2.46.0

1 6

[PATCH] tshark: Update to version 4.2.7
by Adolf Belka 02 Sep '24

02 Sep '24

- Update from version 4.2.6 to 4.2.7 - Update of rootfile - Version 4.4.0 is out but is a major change version. I have therefore decided to wait for a few update versions before looking at changing to it. Most of the changes appear to be more for the gui wireshark than for the cli tshark that IPFire nis using. - The version 4.2.x branch will still have ongoing bug and security fixes anyway. - CVE fix in this version update. - Changelog 4.2.7 Bug Fixes The following vulnerability has been fixed: • wnpa-sec-2024-11[2] NTLMSSP dissector crash. Issue 19943[3]. CVE-2024-8250[4]. The following bugs have been fixed: • Fuzz job issue: fuzz-2024-01-31-7745.pcap. Issue 19627[5]. • OSS-Fuzz 70534: wireshark:fuzzshark_ip_proto-udp: Stack-overflow in dissect_cbor_main_type. Issue 19935[6]. • SOME/IP Protocol heuristic dissector fails to parse. Issue 19670[7]. • 6loWPAN: Page Number Field Incorrect Registration. Issue 19934[8]. • PacketBB incorrectly reports "Malformed Packet" Issue 19972[9]. Updated Protocol Support 6LoWPAN, BGP, CAN-ETH, CBOR, IEEE 802.11, LBMSRS, NTLMSSP, PacketBB, PN-MRP, SOME/IP, USBLL, X.75, and Zabbix Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/packages/tshark | 4 ++-- lfs/tshark | 6 +++--- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/config/rootfiles/packages/tshark b/config/rootfiles/packages/tshark index 9f40dbc2e..a177b7b31 100644 --- a/config/rootfiles/packages/tshark +++ b/config/rootfiles/packages/tshark @@ -12,10 +12,10 @@ usr/bin/dumpcap usr/bin/tshark #usr/lib/libwireshark.so usr/lib/libwireshark.so.17 -usr/lib/libwireshark.so.17.0.6 +usr/lib/libwireshark.so.17.0.7 #usr/lib/libwiretap.so usr/lib/libwiretap.so.14 -usr/lib/libwiretap.so.14.1.6 +usr/lib/libwiretap.so.14.1.7 #usr/lib/libwsutil.so usr/lib/libwsutil.so.15 usr/lib/libwsutil.so.15.0.0 diff --git a/lfs/tshark b/lfs/tshark index 7156476d1..c4d29c8e1 100644 --- a/lfs/tshark +++ b/lfs/tshark @@ -26,7 +26,7 @@ include Config SUMMARY = A Network Traffic Analyser -VER = 4.2.6 +VER = 4.2.7 THISAPP = wireshark-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -35,7 +35,7 @@ DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tshark DEPS = c-ares -PAK_VER = 17 +PAK_VER = 18 SERVICES = @@ -47,7 +47,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 880acf82c7e535b89ce8b41293c90197825ffe1132720337e77b3dcee0eaf476cb3faa6f9b42d3864e9f6892e624d0b286afdaf6bbe7e6b60483296d087a4bc3 +$(DL_FILE)_BLAKE2 = ab82c4ff9afa0fecb3cddbabc7441c3f457c2ccfc39f8a1e65f5d4df752bbdf7cb3d892db5a3de86ec055b12c512f4d067f6d98626ecd2f58f31052e10415be8 install : $(TARGET) -- 2.46.0

1 0

Today's Video Call is cancelled
by Michael Tremer 02 Sep '24

02 Sep '24

As a quick reminder: Today’s call is canceled. Mother is busy. https://www.ipfire.org/docs/devel/telco/2024-09-02 -Michael

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development September 2024