Development January 2025

development@lists.ipfire.org

7 participants
38 discussions

[PATCH] ddrescue: Update to version 1.29
by Adolf Belka 24 Feb '25

24 Feb '25

- Update from version 1.28 to 1.29 - Update of rootfile not required - Changelog 1.29 The new option '--continue-on-errno' has been added. If ddrescue exits because of a fatal read error, it now prints the value of the variable 'errno' so that it can be used as argument to '--continue-on-errno'. When using '--ask' and '--verbose', print rescue options before asking user. Option '--log-reads' now records the value of errno if different from EIO. (The four changes above suggested by Christian Franke). The effect of option '-O, --reopen-on-error' has been extended to all phases. It has been documented in the manual that '--reopen-on-error' may be needed when using '--continue-on-errno'. A compilation error on FiwixOS 3.3 about an ambiguous call to std::abs has been fixed. (Reported by Jordi Sanfeliu). The chapter 'Syntax of command-line arguments' has been added to the manual. Two examples of combined use with lziprecover have been added to the manual. (One of them uses the new Forward Error Correction (FEC) feature of lziprecover). It has been documented in the manual that option '-b' of ddrescuelog is position dependent. (Reported by Winston B. E.). Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/ddrescue | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/lfs/ddrescue b/lfs/ddrescue index 9d1c08fe2..8320751ae 100644 --- a/lfs/ddrescue +++ b/lfs/ddrescue @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2024 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2025 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,7 +26,7 @@ include Config SUMMARY = Data Copying in the Presence of I/O Errors -VER = 1.28 +VER = 1.29 THISAPP = ddrescue-$(VER) DL_FILE = $(THISAPP).tar.lz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = ddrescue -PAK_VER = 4 +PAK_VER = 5 DEPS = @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 8c212f0d495e0df8e0398b97730c812ea9ccb77bd42e730198222e9918e3652fc52d932449b1e0dc9bdd453a123e2450c962e33e98d9845ce81b9a934a5bbdaa +$(DL_FILE)_BLAKE2 = 88eab69f2296464859dc8720930f28f6bc32aa694649e15a99dcd9dfd63ed8ba845d7af347e8b1ee90e954f8317888ec0f2cd90ec98994a7d2b4d654a31adbfc install : $(TARGET) -- 2.48.1

2 14

[PATCH] mc: Update to 4.8.33
by Matthias Fischer 02 Feb '25

02 Feb '25

For details see: https://midnight-commander.org/wiki/NEWS-4.8.33 "Major changes since 4.8.32 Starting with this release, we will be using language features that require a C99 compiler to build. Core Minimal version of Automake is 1.14 (#4604) Upgrade C standard to C99 (#4604) Support ksh variants as subshell (#3748) Improve fish 4.0 shell support (#4597) Add support for bash PROMPT_COMMAND being an array (#4599) Don't override ENV variable for ash/dash subshell (#4605) Don't disable verbose mode if tty baudrate can't be reliably determined (#2452) New keymap for vim users (#4588) VFS extfs vfs: chmod/chown inside extfs (e.g. zip archive) silently fails (#4629) Add embedded torrent viewer/vfs (#3100) Misc Code cleanup (#4572, #4593, #4595, #4598) Adjust mc-wrappers to work with the new MC_TMPDIR creation logic (#4575) Prefer console players for sound, images and video in non-graphical sessions (#4479, #4596) Support TERM=xterm-clear for FreeBSD users (#2633) mc.ext.ini: Support for Rust crates file format (#4609) Support for OpenEmbedded ipk archives (#4626) ext.d: select browser at runtime (#4615) Move CI from Travis to GitHub Actions (#4170, #3738, #4602) Fixes Segfault if filter makes file panel empty (#4600) Segfault in built-in help when going to the previous topic (#4627) Incorrect handling of ext2 attributes of a directory (#4590) Failed copy/move operations make ETA inaccurate (#3205, #4613, #4623) Hotlist: use after free (#4621) mc.ext.ini: typo for apt view command line (#4583) mcedit: visual glitches if built with aspell, but libraries not installed (#4576) mcedit: segfault on new file creation (#4580) mcedit: PageDown skips lines in edit window (#4617) mcedit: cursor jumps during PageDown in edit window (#4618) mvciew: false-positive regex search of BOL (#4587) mcdiff: segmentation fault on empty files merge (#4608) tar vfs: double free (#4616) sftpfs vfs: use after free (#4620) tests: fix charset-related code on non-glibc platforms (Alpine, Illumos) (#3972, #4495) tests: use weak symbols instead of symbol duplication to support non-GNU linkers / macOS (#4584, #3542)" Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- config/rootfiles/packages/mc | 2 ++ lfs/mc | 8 ++++---- 2 files changed, 6 insertions(+), 4 deletions(-) diff --git a/config/rootfiles/packages/mc b/config/rootfiles/packages/mc index 72b03ed49..12a8696d4 100644 --- a/config/rootfiles/packages/mc +++ b/config/rootfiles/packages/mc @@ -6,6 +6,7 @@ etc/mc/mc.emacs.keymap etc/mc/mc.ext.ini etc/mc/mc.keymap etc/mc/mc.menu +etc/mc/mc.vim.keymap etc/mc/mcedit.menu etc/mc/sfs.ini usr/bin/mc @@ -46,6 +47,7 @@ usr/libexec/mc/extfs.d/patchsetfs usr/libexec/mc/extfs.d/rpm usr/libexec/mc/extfs.d/rpms+ usr/libexec/mc/extfs.d/s3+ +usr/libexec/mc/extfs.d/torrent usr/libexec/mc/extfs.d/trpm usr/libexec/mc/extfs.d/u7z usr/libexec/mc/extfs.d/uace diff --git a/lfs/mc b/lfs/mc index b23e9c759..42aa249ac 100644 --- a/lfs/mc +++ b/lfs/mc @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2024 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2025 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,7 +26,7 @@ include Config SUMMARY = Midnight Commander -VER = 4.8.32 +VER = 4.8.33 THISAPP = mc-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = mc -PAK_VER = 27 +PAK_VER = 28 DEPS = @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = eb2ac2474c86dbcfe43b4f229cdc458bdfc9de2acf1d0206198721b56ec188010aba24063c1fc079ada295c73ab915786749be1ead599a582832ca649b9a8347 +$(DL_FILE)_BLAKE2 = abfe493006930e7de7f7242308309382cf28c6b7f41967cf151e6507b081149322217f5a10a8e2c98c2bc39b8053a4e51443c956ec93e7850a00f8d19e7c1266 install : $(TARGET) -- 2.43.0

2 1

collectd conversion fixes
by Adolf Belka 30 Jan '25

30 Jan '25

Hi Arne, Thanks and well done on figuring out the various changes that were missed in my original patch submission. Some like the temperature related ones I can understand as my testing of my changes was done on my virtual testbed systems and they have no temperature sensors so nothing is generated on the system and hence nothing to migrate. This is why I thought it would be good to get others input on what I had created in case I had missed anything. Thanks again , Adolf.

1 0

(low priority) comment about "patchwork"
by Paul Simmons 24 Jan '25

24 Jan '25

I notice that "https://patchwork.ipfire.org/project/ipfire/list/" with selections "State = Action Required" and "Archived =**No" has grown to 1230+ patches, many of which are very old (pre- 2024, and pre- Core191). Is this intentional? Please don't interrupt your development flows to investigate... I'm only curious. Many thanks, P

2 2

Revert of aws-cli
by Adolf Belka 24 Jan '25

24 Jan '25

Hi Michael, I saw that you had to revert the update of aws-cli due to a python module problem at run time. There was no failure or error message during the build unfortunately and nothing in the build log for aws-cli flagging up a too old package. Looking in some of the files in the source tarball it looks like it needs a newer version of python3-botocore. I will do that during my update of python, as the updated aws-cli looks to also require a python of at least 3.12 from another file in the source tarball. Regards, Adolf.

2 4

[PATCH] clamav: Update to version 1.4.2
by Adolf Belka 22 Jan '25

22 Jan '25

- Update from version 1.4.1 to 1.4.2 - Update of rootfile - Changelog 1.4.2 - [CVE-2025-20128](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-201…: Fixed a possible buffer overflow read bug in the OLE2 file parser that could cause a denial-of-service (DoS) condition. This issue was introduced in version 1.0.0 and affects all currently supported versions. It will be fixed in: - 1.4.2 - 1.0.8 Thank you to OSS-Fuzz for identifying this issue. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/packages/clamav | 2 ++ lfs/clamav | 9 ++++----- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/config/rootfiles/packages/clamav b/config/rootfiles/packages/clamav index 0bf660202..d5495e4b7 100644 --- a/config/rootfiles/packages/clamav +++ b/config/rootfiles/packages/clamav @@ -172,6 +172,8 @@ usr/sbin/clamd #usr/share/doc/ClamAV/html/sitemap.xml #usr/share/doc/ClamAV/html/theme-dawn.js #usr/share/doc/ClamAV/html/theme-tomorrow_night.js +#usr/share/doc/ClamAV/html/toc.html +#usr/share/doc/ClamAV/html/toc.js #usr/share/doc/ClamAV/html/tomorrow-night.css #var/ipfire/clamav var/ipfire/clamav/clamd.conf diff --git a/lfs/clamav b/lfs/clamav index 72a3be790..ba87dac3a 100644 --- a/lfs/clamav +++ b/lfs/clamav @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2024 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2025 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,7 +26,7 @@ include Config SUMMARY = Antivirus Toolkit -VER = 1.4.1 +VER = 1.4.2 THISAPP = clamav-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = clamav -PAK_VER = 74 +PAK_VER = 75 DEPS = @@ -50,7 +50,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 2cc31d5d4f33ddfffd01a46d88b09965ea8634fa711e5772a303d00c31efab2986727d6d26ca221f6518b80eb5ea3637c26dc0a2c32a493dd0a1cd43d2fd5d10 +$(DL_FILE)_BLAKE2 = 869f3375ff3da33c0a63607499d06b3312788cf8fdaa0f026553c0b12a23888b7f27a6eda9ffb0888c268faad6b552941cef0c3178ea86197eb92d4ce4f011e5 install : $(TARGET) @@ -101,7 +101,6 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) -DAPP_CONFIG_DIRECTORY=/var/ipfire/clamav \ -DCURSES_LIBRARY=/usr/lib/libncurses.so \ -DDATABASE_DIRECTORY=$(DATABASE_DIR) - cd $(DIR_APP)/build && ninja $(MAKETUNING) && ninja install mkdir -pv $(DATABASE_DIR) -- 2.48.1

1 0

Fwd: [FAILED] Nightly Build of next (c77cc66) for aarch64 on arm64-01.zrh.ipfire.org
by Adolf Belka 22 Jan '25

22 Jan '25

Hi Arne & Michael, From the failure message in this build it looks like turbostat.so from the new collectd package is not built for aarch64. Maybe something similar will happen with the riscv64 build. Does this mean that we have to have a separate rootfile for collectd for each architecture. It seems a bit over the top for one library not being available in aarch64 compared to x86_64. However I can't think of any other way to deal with it. In thoughts on other approaches or do I need to go and build the new collectd in the aarch64 and riscv64 build systems? Regards, Adolf. -------- Forwarded Message -------- Subject: [FAILED] Nightly Build of next (c77cc66) for aarch64 on arm64-01.zrh.ipfire.org Date: Wed, 22 Jan 2025 10:30:34 +0000 From: IPFire Nightly Builder <nightly-builds(a)ipfire.org> To: Nightly Builds List <nightly-builds(a)lists.ipfire.org> https://nightly.ipfire.org/next/2025-01-22%2007%3A07%3A56%20%2B0100-c77cc66… commit c77cc6646e22c689b2efbd8e3654fad34506deb2 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Wed Jan 22 07:07:56 2025 +0100 core192: ship openssl Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> https://git.ipfire.org/?p=ipfire-2.x.git;a=shortlog;h=c77cc6646e22c689b2efb… Packaged toolchain compilation Building IPFire stage2 [ 1 ][ DONE ] linux (6.12.10) HEADERS=1 [ 35 ][ DONE ] man-pages (6.9.1) [ 15 ][ DONE ] glibc (2.40) [ 7:52 ][ DONE ] tzdata (2024a) [ 3 ][ DONE ] cleanup-toolchain [ 0 ][ DONE ] zlib-ng (2.2.3) [ 7 ][ DONE ] zstd (1.5.6) [ 4 ][ DONE ] autoconf (2.71) [ 2 ][ DONE ] autoconf-archive (2024.10.16) [ 2 ][ DONE ] automake (1.17) [ 3 ][ DONE ] help2man (1.49.3) [ 1 ][ DONE ] libtool (2.5.4) [ 8 ][ DONE ] binutils (2.43) [ 1:08 ][ DONE ] gmp (6.3.0) [ 42 ][ DONE ] mpfr (4.2.1) [ 25 ][ DONE ] libmpc (1.3.1) [ 8 ][ DONE ] libxcrypt (4.4.36) [ 17 ][ DONE ] file (5.45) [ 10 ][ DONE ] gcc (14.2.0) [ 7:29 ][ DONE ] attr (2.5.2) [ 6 ][ DONE ] acl (2.3.2) [ 10 ][ DONE ] sed (4.9) [ 33 ][ DONE ] berkeley (5.3.28) [ 33 ][ DONE ] coreutils (9.5) [ 1:22 ][ DONE ] iana-etc (20241024) [ 0 ][ DONE ] m4 (1.4.19) [ 40 ][ DONE ] bison (3.8.2) [ 39 ][ DONE ] ncurses (6.5) [ 37 ][ DONE ] perl (5.36.0) [ 2:17 ][ DONE ] readline (8.2) [ 8 ][ DONE ] bzip2 (1.0.8) [ 1 ][ DONE ] xz (5.6.3) [ 17 ][ DONE ] lzip (1.24.1) [ 1 ][ DONE ] pcre (8.45) [ 10 ][ DONE ] pcre2 (10.44) [ 9 ][ DONE ] gettext (0.22.5) [ 3:37 ][ DONE ] bash (5.2) [ 36 ][ DONE ] diffutils (3.10) [ 33 ][ DONE ] ed (1.20.2) [ 0 ][ DONE ] findutils (4.10.0) [ 51 ][ DONE ] flex (2.6.4) [ 11 ][ DONE ] gawk (5.3.1) [ 18 ][ DONE ] go (1.20.4) [ 21 ][ DONE ] grep (3.11) [ 35 ][ DONE ] groff (1.23.0) [ 42 ][ DONE ] gperf (3.1) [ 4 ][ DONE ] gzip (1.13) [ 21 ][ DONE ] hostname (3.20) [ 0 ][ DONE ] whois (5.5.23) [ 1 ][ DONE ] kbd (2.6.4) [ 16 ][ DONE ] less (668) [ 5 ][ DONE ] pkg-config (0.29.2) [ 31 ][ DONE ] procps (v4.0.4) [ 20 ][ DONE ] make (4.4.1) [ 15 ][ DONE ] libpipeline (1.5.8) [ 25 ][ DONE ] man (2.13.0) [ 1:08 ][ DONE ] net-tools (2.10) [ 3 ][ DONE ] patch (2.7.6) [ 30 ][ DONE ] psmisc (23.7) [ 7 ][ DONE ] shadow (4.16.0) [ 17 ][ DONE ] sysklogd (1.5.1) [ 1 ][ DONE ] sysvinit (3.11) [ 1 ][ DONE ] tar (1.35) [ 42 ][ DONE ] texinfo (7.1.1) [ 37 ][ DONE ] util-linux (2.40.2) [ 44 ][ DONE ] vim (9.1.0886) [ 19 ][ DONE ] e2fsprogs (1.47.1) [ 19 ][ DONE ] jq (1.7.1) [ 14 ][ DONE ] configroot [ 0 ][ DONE ] initscripts [ 1 ][ DONE ] backup [ 0 ][ DONE ] rust (1.83.0) [ 27 ][ DONE ] openssl (3.4.0) [ 3:50 ][ DONE ] popt (1.19) [ 5 ][ DONE ] libedit (20240808-3.1) [ 8 ][ DONE ] expat (2.6.4) [ 7 ][ DONE ] libffi (3.4.6) [ 6 ][ DONE ] gdbm (1.24) [ 14 ][ DONE ] sqlite (3470200) [ 5 ][ DONE ] python3 (3.10.8) [ 1:09 ][ DONE ] python3-setuptools (67.5.1) [ 3 ][ DONE ] ninja (1.12.1) [ 5 ][ DONE ] meson (1.6.0) [ 3 ][ DONE ] pam (1.7.0) [ 10 ][ DONE ] libcap (2.73) [ 3 ][ DONE ] libcap-ng (0.8.5) [ 4 ][ DONE ] libpcap (1.10.5) [ 7 ][ DONE ] ppp (2.5.1) [ 21 ][ DONE ] pptp (1.10.0) [ 1 ][ DONE ] unzip (60) [ 2 ][ DONE ] which (2.21) [ 3 ][ DONE ] bc (1.07.1) [ 5 ][ DONE ] cpio (2.15) [ 35 ][ DONE ] libaio (0.3.113) [ 0 ][ DONE ] freetype (2.13.3) [ 6 ][ DONE ] libmnl (1.0.5) [ 4 ][ DONE ] libnfnetlink (1.0.2) [ 4 ][ DONE ] libnetfilter_queue (1.0.5) [ 4 ][ DONE ] libnetfilter_conntrack (1.1.0) [ 5 ][ DONE ] libnetfilter_cthelper (1.0.1) [ 4 ][ DONE ] libnetfilter_cttimeout (1.0.1) [ 4 ][ DONE ] iptables (1.8.11) [ 8 ][ DONE ] iproute2 (6.11.0) [ 7 ][ DONE ] screen (5.0.0) [ 6 ][ DONE ] elfutils (0.192) [ 29 ][ DONE ] libconfig (1.7.3) [ 21 ][ DONE ] curl (8.11.0) [ 37 ][ DONE ] libarchive (3.7.7) [ 34 ][ DONE ] cmake (3.25.2) [ 1:38 ][ DONE ] json-c (0.18) [ 8 ][ DONE ] tcl (8.6.14) [ 39 ][ DONE ] python3-MarkupSafe (2.1.3) [ 1 ][ DONE ] python3-Jinja2 (3.1.2) [ 1 ][ DONE ] kmod (33) [ 10 ][ DONE ] udev (254) [ 31 ][ DONE ] libusb (1.0.27) [ 6 ][ DONE ] mdadm (4.3) [ 1 ][ DONE ] dracut (056) [ 2 ][ DONE ] lvm2 (2.03.28) [ 16 ][ DONE ] multipath-tools (0.8.9) [ 1 ][ DONE ] glib (2.83.0) [ 55 ][ DONE ] libgudev (238) [ 2 ][ DONE ] libgpg-error (1.51) [ 15 ][ DONE ] libgcrypt (1.11.0) [ 20 ][ DONE ] libassuan (3.0.1) [ 10 ][ DONE ] nettle (3.10) [ 13 ][ DONE ] libsodium (1.0.20) [ 16 ][ DONE ] libevent2 (2.1.12-stable) [ 18 ][ DONE ] apr (1.7.5) [ 26 ][ DONE ] aprutil (1.6.3) [ 6 ][ DONE ] unbound (1.22.0) [ 27 ][ DONE ] gnutls (3.8.8) [ 1:25 ][ DONE ] libuv (1.49.2) [ 12 ][ DONE ] liburcu (0.14.1) [ 22 ][ DONE ] bind (9.20.3) [ 35 ][ DONE ] dhcp (4.4.3-P1) [ 39 ][ DONE ] dhcpcd (10.1.0) [ 3 ][ DONE ] boost (1_83_0) [ 4:36 ][ DONE ] linux-atm (2.5.2) [ 19 ][ DONE ] libqmi (1.34.0) [ 13 ][ DONE ] c-ares (1.34.3) [ 17 ][ DONE ] rust-dissimilar (1.0.3) [ 3 ][ DONE ] rust-cfg-if (1.0.0) [ 1 ][ DONE ] rust-libc (0.2.108) [ 2 ][ DONE ] rust-getrandom (0.2.4) [ 2 ][ DONE ] rust-typenum (1.15.0) [ 2 ][ DONE ] rust-version-check (0.9.4) [ 2 ][ DONE ] rust-generic-array (0.14.4) [ 3 ][ DONE ] rust-crypto-common (0.1.1) [ 3 ][ DONE ] rust-cipher (0.3.0) [ 3 ][ DONE ] rust-hex (0.4.3) [ 1 ][ DONE ] rust-unicode-xid (0.2.1) [ 0 ][ DONE ] rust-unicode-ident (1.0.14) [ 1 ][ DONE ] rust-proc-macro2 (1.0.92) [ 4 ][ DONE ] rust-quote (1.0.37) [ 3 ][ DONE ] rust-syn-1.0.109 (1.0.109) [ 14 ][ DONE ] rust-syn (2.0.90) [ 14 ][ DONE ] rust-home (0.5.3) [ 1 ][ DONE ] rust-lazy-static (1.4.0) [ 0 ][ DONE ] rust-memchr (2.7.4) [ 2 ][ DONE ] rust-aho-corasick (0.7.18) [ 4 ][ DONE ] rust-regex-syntax (0.6.25) [ 9 ][ DONE ] rust-regex (1.5.3) [ 20 ][ DONE ] rust-ucd-trie (0.1.3) [ 1 ][ DONE ] rust-pest (2.1.3) [ 2 ][ DONE ] rust-semver-parser (0.7.0) [ 1 ][ DONE ] rust-semver (0.9.0) [ 2 ][ DONE ] rust-same-file (1.0.6) [ 0 ][ DONE ] rust-walkdir (2.3.2) [ 2 ][ DONE ] rust-dirs (1.0.5) [ 2 ][ DONE ] rust-toolchain_find (0.1.4) [ 15 ][ DONE ] rust-serde_derive (1.0.216) [ 29 ][ DONE ] rust-serde (1.0.216) [ 6 ][ DONE ] rust-itoa (1.0.1) [ 0 ][ DONE ] rust-ryu (1.0.9) [ 1 ][ DONE ] rust-serde_json (1.0.133) [ 10 ][ DONE ] rust-synstructure (0.13.1) [ 16 ][ DONE ] rust-block-buffer (0.9.0) [ 3 ][ DONE ] rust-digest (0.9.0) [ 4 ][ DONE ] rust-ppv-lite86 (0.2.16) [ 0 ][ DONE ] rust-rand_core (0.6.3) [ 1 ][ DONE ] rust-rand_core-0.4.2 (0.4.2) [ 1 ][ DONE ] rust-rand_core-0.3.1 (0.3.1) [ 0 ][ DONE ] rust-rand_chacha (0.3.1) [ 3 ][ DONE ] rust-rand_hc (0.3.1) [ 1 ][ DONE ] rust-rand (0.8.4) [ 4 ][ DONE ] rust-rdrand (0.4.0) [ 0 ][ DONE ] rust-rand-0.4 (0.4.6) [ 4 ][ DONE ] rust-log (0.4.14) [ 0 ][ DONE ] rust-num_cpus (1.13.1) [ 3 ][ DONE ] rust-crossbeam-utils (0.8.6) [ 1 ][ DONE ] rust-autocfg (1.0.1) [ 2 ][ DONE ] rust-memoffset (0.6.5) [ 2 ][ DONE ] rust-scopeguard (1.1.0) [ 0 ][ DONE ] rust-crossbeam-epoch (0.9.6) [ 3 ][ DONE ] rust-crossbeam-deque (0.8.1) [ 2 ][ DONE ] rust-either (1.6.1) [ 1 ][ DONE ] rust-crossbeam-channel (0.5.2) [ 2 ][ DONE ] rust-rayon-core (1.9.1) [ 5 ][ DONE ] rust-rayon (1.5.1) [ 8 ][ DONE ] rust-remove_dir_all (0.5.3) [ 0 ][ DONE ] rust-tempdir (0.3.7) [ 3 ][ DONE ] rust-glob (0.3.0) [ 2 ][ DONE ] rust-once_cell (1.9.0) [ 1 ][ DONE ] rust-termcolor (1.1.2) [ 1 ][ DONE ] rust-serde_spanned (0.6.8) [ 0 ][ DONE ] rust-toml_datetime (0.6.8) [ 1 ][ DONE ] rust-equivalent (1.0.1) [ 0 ][ DONE ] rust-allocator-api2 (0.2.21) [ 2 ][ DONE ] rust-foldhash (0.1.3) [ 0 ][ DONE ] rust-hashbrown (0.15.2) [ 2 ][ DONE ] rust-indexmap (2.7.0) [ 3 ][ DONE ] rust-winnow (0.6.20) [ 4 ][ DONE ] rust-toml_edit (0.22.22) [ 18 ][ DONE ] rust-toml (0.8.19) [ 20 ][ DONE ] rust-target-triple (0.1.3) [ 0 ][ DONE ] rust-trybuild (1.0.101) [ 53 ][ DONE ] rust-unindent (0.1.11) [ 0 ][ DONE ] rust-proc-macro-hack (0.5.19) [ 4 ][ DONE ] rust-indoc-impl (0.3.7) [ 14 ][ DONE ] rust-indoc-impl-0.3.6 (0.3.6) [ 15 ][ DONE ] rust-indoc (1.0.3) [ 1 ][ DONE ] rust-indoc-0.3.6 (0.3.6) [ 15 ][ DONE ] rust-instant (0.1.12) [ 0 ][ DONE ] rust-lock_api (0.4.5) [ 1 ][ DONE ] rust-smallvec (1.8.0) [ 1 ][ DONE ] rust-parking_lot_core (0.8.5) [ 2 ][ DONE ] rust-parking_lot (0.11.2) [ 3 ][ DONE ] rust-paste-impl (0.1.18) [ 5 ][ DONE ] rust-paste (1.0.3) [ 2 ][ DONE ] rust-paste-0.1.18 (0.1.18) [ 6 ][ DONE ] rust-ctor (0.2.9) [ 25 ][ DONE ] rust-ghost (0.1.2) [ 16 ][ DONE ] rust-inventory-impl (0.1.11) [ 14 ][ DONE ] rust-inventory (0.3.15) [ 0 ][ DONE ] rust-pyo3-build-config (0.15.2) [ 7 ][ DONE ] rust-pyo3-macros-backend (0.15.2) [ 28 ][ DONE ] rust-pyo3-macros (0.15.2) [ 34 ][ DONE ] rust-pyo3 (0.15.2) [ 45 ][ DONE ] rust-num-traits (0.2.15) [ 3 ][ DONE ] rust-num-integer (0.1.45) [ 4 ][ DONE ] rust-num_threads (0.1.5) [ 0 ][ DONE ] rust-time (0.1.43) [ 2 ][ DONE ] rust-iana-time-zone (0.1.51) [ 1 ][ DONE ] rust-chrono (0.4.22) [ 8 ][ DONE ] rust-asn1_derive (0.12.2) [ 17 ][ DONE ] rust-asn1 (0.12.2) [ 21 ][ DONE ] rust-proc-macro-error-attr (1.0.4) [ 5 ][ DONE ] rust-proc-macro-error (1.0.4) [ 7 ][ DONE ] rust-Inflector (0.11.4) [ 15 ][ DONE ] rust-ouroboros_macro (0.15.5) [ 34 ][ DONE ] rust-aliasable (0.1.3) [ 0 ][ DONE ] rust-stable_deref_trait (1.2.0) [ 1 ][ DONE ] rust-ouroboros (0.15.5) [ 33 ][ DONE ] rust-base64 (0.13.0) [ 1 ][ DONE ] rust-pem (1.1.0) [ 2 ][ DONE ] gdb (15.2) [ 2:01 ][ DONE ] grub (2.12) [ 1:13 ][ DONE ] mandoc (1.14.6) [ 3 ][ DONE ] efivar (38) [ 3 ][ DONE ] efibootmgr (18) [ 1 ][ DONE ] libtasn1 (4.19.0) [ 17 ][ DONE ] p11-kit (0.25.5) [ 13 ][ DONE ] ca-certificates (20240920) [ 3 ][ DONE ] fireinfo (2.2.0) [ 15 ][ DONE ] libnet (1.3) [ 7 ][ DONE ] libnl-3 (3.11.0) [ 23 ][ DONE ] libidn (1.42) [ 18 ][ DONE ] libidn2 (2.3.7) [ 19 ][ DONE ] nasm (2.16.03) [ 14 ][ DONE ] libexif (0.6.24) [ 7 ][ DONE ] libjpeg (3.0.4) [ 8 ][ DONE ] libpng (1.6.44) [ 6 ][ DONE ] gd (2.3.3) [ 8 ][ DONE ] slang (2.3.3) [ 20 ][ DONE ] newt (0.52.24) [ 3 ][ DONE ] libsmooth [ 14 ][ DONE ] pciutils (3.13.0) [ 1 ][ DONE ] usbutils (018) [ 2 ][ DONE ] libxml2 (2.13.5) [ 8 ][ DONE ] libxslt (1.1.42) [ 7 ][ DONE ] perl-BerkeleyDB (0.63) [ 1 ][ DONE ] cyrus-sasl (2.1.28) [ 21 ][ DONE ] openldap (2.6.8) [ 52 ][ DONE ] apache2 (2.4.62) [ 47 ][ DONE ] web-user-interface [ 1 ][ DONE ] flag-icons (2.6) [ 2 ][ DONE ] jquery (3.6.3) [ 0 ][ DONE ] bootstrap (4.0.0-alpha.6) [ 1 ][ DONE ] arping (2.23) [ 7 ][ DONE ] beep (1.4.12) [ 2 ][ DONE ] libssh (0.10.6) [ 14 ][ DONE ] libinih (58) [ 2 ][ DONE ] cdrkit (1.1.11) [ 10 ][ DONE ] dosfstools (4.2) [ 4 ][ DONE ] exfatprogs (1.2.5) [ 5 ][ DONE ] reiserfsprogs (3.6.27) [ 15 ][ DONE ] xfsprogs (6.11.0) [ 47 ][ DONE ] sysfsutils (2.1.1) [ 15 ][ DONE ] fuse (3.15.0) [ 3 ][ DONE ] ntfs-3g (2022.10.3) [ 13 ][ DONE ] ethtool (6.9) [ 3 ][ DONE ] fcron (3.2.1) [ 11 ][ DONE ] perl-ExtUtils-PkgConfig (1.16) [ 1 ][ DONE ] perl-GD (2.73) [ 2 ][ DONE ] perl-GD-Graph (1.54) [ 0 ][ DONE ] perl-GD-TextUtil (0.86) [ 1 ][ DONE ] perl-Device-SerialPort (1.000002) [ 8 ][ DONE ] perl-Device-Modem (1.56) [ 0 ][ DONE ] perl-Apache-Htpasswd (1.9) [ 1 ][ DONE ] perl-Parse-Yapp (1.21) [ 1 ][ DONE ] perl-Data-UUID (1.224) [ 1 ][ DONE ] perl-Try-Tiny (0.31) [ 1 ][ DONE ] perl-HTTP-Message (6.36) [ 1 ][ DONE ] perl-HTTP-Date (6.05) [ 1 ][ DONE ] gnupg (1.4.23) [ 20 ][ DONE ] hdparm (9.65) [ 1 ][ DONE ] whatmask (1.2) [ 5 ][ DONE ] libtirpc (1.3.6) [ 7 ][ DONE ] conntrack-tools (1.4.8) [ 10 ][ DONE ] iputils (20240905) [ 3 ][ DONE ] l7-protocols (2009-05-10) [ 0 ][ DONE ] hwdata (0.389) [ 1 ][ DONE ] logrotate (3.22.0) [ 3 ][ DONE ] logwatch (7.11) [ 1 ][ DONE ] misc-progs [ 3 ][ DONE ] nano (8.2) [ 29 ][ DONE ] perl-URI (5.09) [ 2 ][ DONE ] perl-CGI (4.54) [ 0 ][ DONE ] perl-Switch (2.17) [ 1 ][ DONE ] perl-HTML-Tagset (3.04) [ 1 ][ DONE ] perl-HTML-Parser (3.78) [ 1 ][ DONE ] perl-HTML-Template (2.94) [ 1 ][ DONE ] perl-libwww (6.62) [ 1 ][ DONE ] perl-LWP-Protocol-https (6.10) [ 1 ][ DONE ] perl-Net-HTTP (6.22) [ 1 ][ DONE ] perl-Net-DNS (1.30) [ 2 ][ DONE ] perl-Net-IPv4Addr (0.10) [ 0 ][ DONE ] perl-Net_SSLeay (1.88) [ 3 ][ DONE ] perl-IO-Stringy (2.110) [ 1 ][ DONE ] perl-IO-Socket-SSL (2.066) [ 1 ][ DONE ] perl-Unix-Syslog (1.1) [ 1 ][ DONE ] perl-Mail-Tools (2.07) [ 1 ][ DONE ] perl-MIME-Tools (5.509) [ 1 ][ DONE ] perl-Net-Server (0.97) [ 1 ][ DONE ] perl-Canary-Stability (2013) [ 1 ][ DONE ] perl-Convert-TNEF (0.18) [ 1 ][ DONE ] perl-Convert-UUlib (1.8) [ 3 ][ DONE ] perl-Archive-Zip (1.16) [ 1 ][ DONE ] perl-Text-Tabs+Wrap (2013.0523) [ 1 ][ DONE ] perl-XML-Parser (2.46) [ 1 ][ DONE ] perl-Crypt-PasswdMD5 (1.41) [ 1 ][ DONE ] perl-Net-Telnet (3.03) [ 1 ][ DONE ] perl-Capture-Tiny (0.48) [ 1 ][ DONE ] perl-Config-AutoConf (0.320) [ 0 ][ DONE ] perl-Object-Tiny (1.09) [ 1 ][ DONE ] perl-Archive-Peek-Libarchive (0.38) [ 2 ][ DONE ] python3-inotify (0.2.10) [ 0 ][ DONE ] python3-docutils (0.19) [ 3 ][ DONE ] python3-daemon (2.3.1) [ 1 ][ DONE ] ntp (4.2.8p18) [ 2:05 ][ DONE ] openssh (9.9p1) [ 44 ][ DONE ] fontconfig (2.15.0) [ 15 ][ DONE ] dejavu-fonts-ttf (2.37) [ 1 ][ DONE ] ubuntu-font-family (0.83) [ 0 ][ DONE ] freefont (20100919) [ 1 ][ DONE ] pixman (0.44.0) [ 4 ][ DONE ] cairo (1.18.2) [ 23 ][ DONE ] harfbuzz (10.1.0) [ 14 ][ DONE ] fribidi (1.0.16) [ 4 ][ DONE ] pango (1.54.0) [ 9 ][ DONE ] rrdtool (1.9.0) [ 28 ][ DONE ] setup [ 18 ][ DONE ] jansson (2.14) [ 6 ][ DONE ] yaml (0.2.5) [ 5 ][ DONE ] libhtp (0.5.49) [ 17 ][ DONE ] colm (0.14.7) [ 1:13 ][ DONE ] ragel (7.0.4) [ 1:46 ][ DONE ] vectorscan (5.4.11) [ 1:10 ][ DONE ] suricata (7.0.8) [ 4:14 ][ DONE ] ids-ruleset-sources [ 0 ][ DONE ] ipblocklist-sources [ 1 ][ DONE ] squid (6.12) [ 3:09 ][ DONE ] squidguard (1.6.0) [ 7 ][ DONE ] calamaris (2.59) [ 1 ][ DONE ] tcpdump (4.99.4) [ 9 ][ DONE ] traceroute (2.1.5) [ 1 ][ DONE ] vlan (1.9) [ 0 ][ DONE ] wireless (30.pre9) [ 1 ][ DONE ] pakfire (0.99) [ 0 ][ DONE ] lz4 (1.10.0) [ 10 ][ DONE ] lzo (2.10) [ 17 ][ DONE ] openvpn (2.5.10) [ 26 ][ DONE ] mpage (2.5.7) [ 1 ][ DONE ] dbus (1.14.10) [ 26 ][ DONE ] intltool (0.51.0) [ 2 ][ DONE ] libdaemon (0.14) [ 8 ][ DONE ] avahi (0.8) [ 25 ][ DONE ] libtalloc (2.4.2) [ 34 ][ DONE ] cifs-utils (7.1) [ 7 ][ DONE ] krb5 (1.21.3) [ 42 ][ DONE ] rpcsvc-proto (1.4.4) [ 3 ][ DONE ] lmdb (0.9.33) [ 1 ][ DONE ] samba (4.21.2) [ 7:21 ][ DONE ] netatalk (3.2.8) [ 11 ][ DONE ] sudo (1.9.16p2) [ 36 ][ DONE ] mc (4.8.32) [ 37 ][ DONE ] wget (1.25.0) [ 45 ][ DONE ] bridge-utils (1.7.1) [ 4 ][ DONE ] smartmontools (7.4) [ 8 ][ DONE ] htop (3.3.0) [ 12 ][ DONE ] chkconfig (1.30) [ 0 ][ DONE ] postfix (3.9.0) [ 21 ][ DONE ] fetchmail (6.4.39) [ 9 ][ DONE ] clamav (1.4.1) [ 3:27 ][ DONE ] perl-NetAddr-IP (4.079) [ 16 ][ DONE ] dma (0.13) [ 2 ][ DONE ] alsa (1.2.13) [ 45 ][ DONE ] guardian (2.0.2) [ 1 ][ DONE ] libid3tag (0.16.3) [ 1 ][ DONE ] libmad (0.15.1b) [ 13 ][ DONE ] libogg (1.3.5) [ 5 ][ DONE ] libvorbis (1.3.7) [ 6 ][ DONE ] flac (1.4.2) [ 15 ][ DONE ] lame (3.100) [ 11 ][ DONE ] soxr (0.1.3) [ 3 ][ DONE ] libshout (2.4.6) [ 9 ][ DONE ] xvid (1.3.7) [ 4 ][ DONE ] libmpeg2 (0.4.1) [ 12 ][ DONE ] gnump3d (3.0) [ 2 ][ DONE ] libxxhash (0.8.3) [ 3 ][ DONE ] rsync (3.4.1) [ 19 ][ DONE ] rpcbind (1.2.6) [ 2 ][ DONE ] keyutils (1.6.3) [ 1 ][ DONE ] nfs (2.7.1) [ 24 ][ DONE ] ncat (7.95) [ 44 ][ DONE ] nmap (7.95) [ 53 ][ DONE ] etherwake (1.09) [ 1 ][ DONE ] bwm-ng (0.6.3) [ 9 ][ DONE ] sysstat (12.7.6) [ 5 ][ DONE ] strongswan (5.9.14) [ 1:06 ][ DONE ] rng-tools (6.17) [ 8 ][ DONE ] lsof (4.99.4) [ 1 ][ DONE ] lm_sensors (3-6-0) [ 1 ][ DONE ] libstatgrab (0.92.1) [ 19 ][ DONE ] liboping (1.10.0) [ 7 ][ DONE ] netsnmpd (5.9.3) [ 3:21 ][ DONE ] nut (2.8.2) [ 54 ][ DONE ] collectd (5.12.0) [ 1:05 ][ DONE ] git (2.46.0) [ 31 ][ DONE ] linux-firmware (20240811) [ 41 ][ DONE ] dvb-firmwares (20141125) [ 1 ][ DONE ] zd1211-firmware (1.5) [ 1 ][ DONE ] rpi-firmware (20240424) [ 1 ][ DONE ] intel-microcode (20241112) [ 0 ][ SKIP ] pcengines-apu-firmware (4.19.0.1) [ 0 ][ SKIP ] elinks (0.17.1.1) [ 12 ][ DONE ] igmpproxy (0.4) [ 4 ][ DONE ] opus (1.5.1) [ 16 ][ DONE ] python3-toml (0.10.2) [ 1 ][ DONE ] python3-pyproject2setuppy (22) [ 1 ][ DONE ] python3-pyparsing (3.0.9) [ 1 ][ DONE ] spice-protocol (0.14.3) [ 1 ][ DONE ] spice (0.15.0) [ 51 ][ DONE ] sdl2 (2.30.6) [ 26 ][ DONE ] libusbredir (0.13.0) [ 3 ][ DONE ] libseccomp (2.5.5) [ 5 ][ DONE ] libslirp (4.7.0) [ 3 ][ DONE ] dtc (1.7.1) [ 2 ][ DONE ] qemu (9.0.2) [ 3:55 ][ DONE ] nagios_nrpe (4.1.0) [ 4:24 ][ DONE ] nagios-plugins (2.4.11) [ 45 ][ DONE ] observium-agent (24.4) [ 6 ][ DONE ] ebtables (2.0.11) [ 7 ][ DONE ] faad2 (2_10_0) [ 17 ][ DONE ] alac (0.0.7) [ 16 ][ DONE ] ffmpeg (7.1) [ 1:12 ][ DONE ] vdr (2.6.9) [ 7 ][ DONE ] vdr_streamdev (0.6.3) [ 8 ][ DONE ] vdr_epgsearch (2.4.2) [ 20 ][ DONE ] vdr_dvbapi (2.2.5) [ 8 ][ DONE ] vdr_eepg (master) [ 2 ][ DONE ] w_scan (20170107) [ 4 ][ DONE ] fmt (11.0.2) [ 7 ][ DONE ] mpd (0.23.15) [ 30 ][ DONE ] libmpdclient (2.22) [ 3 ][ DONE ] mpc (0.35) [ 2 ][ DONE ] perl-Net-CIDR-Lite (0.21) [ 0 ][ DONE ] perl-Net-SMTP-SSL (1.04) [ 1 ][ DONE ] perl-Authen-SASL (2.16) [ 1 ][ DONE ] perl-MIME-Lite (3.033) [ 1 ][ DONE ] perl-Email-Date-Format (1.005) [ 1 ][ DONE ] vnstat (2.12) [ 6 ][ DONE ] iw (6.9) [ 1 ][ DONE ] wpa_supplicant (2.10) [ 11 ][ DONE ] hostapd (64d60bb4) [ 3 ][ DONE ] syslinux (6.04-pre1) [ 0 ][ SKIP ] tftpd (5.2) [ 8 ][ DONE ] cpufrequtils [ 1 ][ DONE ] apcupsd (3.14.14) [ 10 ][ DONE ] fireperf (0.2.0) [ 13 ][ DONE ] iperf (2.2.0) [ 9 ][ DONE ] iperf3 (3.16) [ 8 ][ DONE ] 7zip (17.05) [ 3 ][ DONE ] lynis (3.1.1) [ 1 ][ DONE ] sshfs (3.7.3) [ 2 ][ DONE ] utfcpp (4.0.6) [ 0 ][ DONE ] taglib (2.0.2) [ 8 ][ DONE ] perl-gettext (1.05) [ 1 ][ DONE ] perl-Sort-Naturally (1.03) [ 1 ][ DONE ] vdradmin (3.6.10) [ 1 ][ DONE ] perl-DBI (1.631) [ 3 ][ DONE ] perl-DBD-SQLite (1.40) [ 1 ][ DONE ] perl-File-ReadBackwards (1.05) [ 1 ][ DONE ] openvmtools (stable-12.0.5) [ 0 ][ SKIP ] joe (4.6) [ 11 ][ DONE ] monit (5.34.3) [ 24 ][ DONE ] watchdog (5.16) [ 4 ][ DONE ] usb_modeswitch (2.6.1) [ 1 ][ DONE ] usb_modeswitch_data (20191128) [ 2 ][ DONE ] zerofree (1.1.1) [ 0 ][ DONE ] minicom (2.9) [ 7 ][ DONE ] ddrescue (1.28) [ 1 ][ DONE ] parted (3.6) [ 38 ][ DONE ] swig (4.1.0) [ 15 ][ DONE ] python3-pyelftools (0.31) [ 1 ][ DONE ] u-boot (2024.10) [ 3:50 ][ DONE ] wireless-regdb (2023-05-03) [ 1 ][ DONE ] ddns (014) [ 5 ][ DONE ] python3-pycparser (2.21) [ 2 ][ DONE ] python3-charset-normalizer (2.1.1) [ 2 ][ DONE ] python3-certifi (2022.9.24) [ 1 ][ DONE ] python3-idna (3.4) [ 1 ][ DONE ] python3-requests (2.28.1) [ 1 ][ DONE ] python3-tomli (2.0.1) [ 2 ][ DONE ] python3-pep517 (0.13.0) [ 1 ][ DONE ] python3-build (0.8.0) [ 1 ][ DONE ] python3-install (0.0.3) [ 1 ][ DONE ] python3-urllib3 (1.26.12) [ 1 ][ DONE ] python3-flit (3.7.1) [ 2 ][ DONE ] python3-packaging (23.2) [ 1 ][ DONE ] python3-typing-extensions (4.4.0) [ 1 ][ DONE ] python3-semantic-version (2.10.0) [ 1 ][ DONE ] python3-setuptools-scm (7.0.5) [ 2 ][ DONE ] python3-setuptools-rust (1.5.2) [ 1 ][ DONE ] python3-six (1.16.0) [ 1 ][ DONE ] python3-dateutil (2.8.2) [ 2 ][ DONE ] python3-jmespath (1.0.1) [ 1 ][ DONE ] python3-colorama (0.4.5) [ 1 ][ DONE ] python3-yaml (6.0) [ 1 ][ DONE ] python3-s3transfer (0.6.0) [ 1 ][ DONE ] python3-rsa (4.9) [ 2 ][ DONE ] python3-pyasn1 (0.4.8) [ 1 ][ DONE ] python3-botocore (1.27.89) [ 6 ][ DONE ] python3-cffi (1.15.1) [ 1 ][ DONE ] python3-cryptography (38.0.1) [ 1:28 ][ DONE ] python3-circuitbreaker (1.4.0) [ 1 ][ DONE ] python3-pytz (2022.4) [ 4 ][ DONE ] python3-click (8.1.3) [ 1 ][ DONE ] python3-arrow (1.2.3) [ 2 ][ DONE ] python3-terminaltables (3.1.10) [ 1 ][ DONE ] python3-pkgconfig (1.5.5) [ 1 ][ DONE ] python3-msgpack (1.0.8) [ 2 ][ DONE ] python3-editables (0.5) [ 1 ][ DONE ] python3-pathspec (0.12.1) [ 2 ][ DONE ] python3-pluggy (1.4.0) [ 1 ][ DONE ] python3-calver (2022.6.26) [ 1 ][ DONE ] python3-trove-classifiers (2024.1.8) [ 1 ][ DONE ] python3-hatchling (1.21.1) [ 2 ][ DONE ] python3-hatch-vcs (0.4.0) [ 2 ][ DONE ] python3-hatch-fancy-pypi-readme (24.1.0) [ 1 ][ DONE ] python3-attrs (23.2.0) [ 2 ][ DONE ] python3-sniffio (1.3.0) [ 1 ][ DONE ] python3-sortedcontainers (2.4.0) [ 1 ][ DONE ] python3-outcome (1.2.0) [ 1 ][ DONE ] python3-async_generator (1.10) [ 2 ][ DONE ] python3-flit_scm (1.7.0) [ 1 ][ DONE ] python3-exceptiongroup (1.2.0) [ 2 ][ DONE ] python3-trio (0.23.1) [ 2 ][ DONE ] python3-pyfuse3 (3.3.0) [ 2 ][ DONE ] aws-cli (1.36.15) [ 13 ][ DONE ] oci-python-sdk (2.107.0) [ 1:07 ][ DONE ] oci-cli (3.45.2) [ 18 ][ DONE ] transmission (4.0.5) [ 37 ][ DONE ] mtr (0.95) [ 7 ][ DONE ] minidlna (1.3.3) [ 11 ][ DONE ] acpid (2.0.34) [ 4 ][ DONE ] fping (5.2) [ 3 ][ DONE ] telnet (0.17) [ 4 ][ DONE ] xinetd (2.3.15.4) [ 6 ][ DONE ] stress (1.0.7) [ 6 ][ DONE ] sarg (2.4.0) [ 12 ][ DONE ] nginx (1.26.2) [ 15 ][ DONE ] sysbench (1.0.20) [ 26 ][ DONE ] strace (6.12) [ 43 ][ DONE ] ltrace (0.7.3) [ 0 ][ SKIP ] ipfire-netboot (v2.0) [ 0 ][ SKIP ] keepalived (2.3.1) [ 17 ][ DONE ] ipvsadm (1.31) [ 0 ][ DONE ] perl-Carp-Clan (6.08) [ 1 ][ DONE ] perl-Date-Calc (6.4) [ 1 ][ DONE ] perl-Date-Manip (6.86) [ 8 ][ DONE ] perl-File-Tail (1.3) [ 1 ][ DONE ] perl-TimeDate (2.33) [ 1 ][ DONE ] swatch (3.2.4) [ 1 ][ DONE ] tor (0.4.8.13) [ 57 ][ DONE ] wavemon (0.9.5) [ 4 ][ DONE ] iptraf-ng (1.2.1) [ 2 ][ DONE ] iotop (1.26) [ 4 ][ DONE ] stunnel (5.72) [ 10 ][ DONE ] bacula (13.0.4) [ 1:00 ][ DONE ] perl-Font-TTF (1.06) [ 2 ][ DONE ] perl-IO-String (1.08) [ 1 ][ DONE ] perl-PDF-API2 (2.033) [ 2 ][ DONE ] proxy-accounting (1.0.4) [ 1 ][ DONE ] tmux (3.4) [ 11 ][ DONE ] perl-Text-CSV_XS (1.12) [ 2 ][ DONE ] lua (5.4.7) [ 1 ][ DONE ] haproxy (3.0.3) [ 7 ][ DONE ] ipset (7.22) [ 7 ][ DONE ] dnsdist (1.9.7) [ 4:39 ][ DONE ] bird (2.15.1) [ 21 ][ DONE ] libyang (2.1.148) [ 5 ][ DONE ] abseil-cpp (20240722.0) [ 15 ][ DONE ] protobuf (28.3) [ 53 ][ DONE ] protobuf-c (1.5.0) [ 11 ][ DONE ] frr (10.1) [ 1:11 ][ DONE ] dmidecode (3.5) [ 0 ][ SKIP ] mcelog (200) [ 0 ][ SKIP ] libpciaccess (0.17) [ 6 ][ DONE ] libvirt (10.10.0) [ 44 ][ DONE ] freeradius (3.2.6) [ 1:24 ][ DONE ] perl-common-sense (3.74) [ 1 ][ DONE ] perl-inotify2 (1.22) [ 1 ][ DONE ] perl-Net-IP (1.26) [ 1 ][ DONE ] wio (1.3.2) [ 1 ][ DONE ] iftop (1.0pre4) [ 5 ][ DONE ] mdns-repeater (1.11) [ 1 ][ DONE ] i2c-tools (4.4) [ 0 ][ DONE ] nss-myhostname (0.3) [ 8 ][ DONE ] dehydrated (0.7.1) [ 1 ][ DONE ] libplist (2.4.0) [ 9 ][ DONE ] nqptp (1.2.4) [ 5 ][ DONE ] shairport-sync (4.3.4) [ 12 ][ DONE ] borgbackup (1.4.0) [ 4 ][ DONE ] knot (3.4.2) [ 13 ][ DONE ] spectre-meltdown-checker (0.46) [ 0 ][ DONE ] zabbix_agentd (6.0.37) [ 28 ][ DONE ] flashrom (1.2) [ 0 ][ SKIP ] firmware-update (20210107) [ 3 ][ DONE ] ruby (3.3.6) [ 2:00 ][ DONE ] asciidoctor (2.0.23) [ 5 ][ DONE ] speexdsp (1.2.1) [ 6 ][ DONE ] tshark (4.4.2) [ 1:51 ][ DONE ] speedtest-cli (2.1.3) [ 1 ][ DONE ] amazon-ssm-agent (3.3.1345.0) [ 10 ][ DONE ] libloc (0.9.17) [ 35 ][ DONE ] ncdu (1.20) [ 4 ][ DONE ] lshw (B.02.20) [ 1 ][ DONE ] socat (1.7.4.2) [ 30 ][ DONE ] libcdada (0.4.0) [ 27 ][ DONE ] pmacct (1.7.9) [ 55 ][ DONE ] squid-asnbl (0.2.5) [ 1 ][ DONE ] qemu-ga (9.0.2) [ 0 ][ DONE ] gptfdisk (1.0.10) [ 3 ][ DONE ] oath-toolkit (2.6.12) [ 57 ][ DONE ] qrencode (4.1.1) [ 5 ][ DONE ] perl-File-Remove (1.60) [ 1 ][ DONE ] perl-Module-Build (0.4231) [ 1 ][ DONE ] perl-Module-ScanDeps (1.31) [ 1 ][ DONE ] perl-YAML-Tiny (1.73) [ 1 ][ DONE ] perl-Module-Install (1.19) [ 1 ][ DONE ] perl-Imager (1.024) [ 9 ][ DONE ] perl-Imager-QRCode (0.035) [ 2 ][ DONE ] perl-MIME-Base32 (1.303) [ 1 ][ DONE ] perl-URI-Encode (1.1.1) [ 1 ][ DONE ] rsnapshot (1.4.5) [ 3 ][ DONE ] mympd (19.0.2) [ 15 ][ DONE ] wsdd (0.8) [ 1 ][ DONE ] btrfs-progs (6.11) [ 8 ][ DONE ] inotify-tools (4.23.9.0) [ 16 ][ DONE ] grub-btrfs (4.13) [ 1 ][ DONE ] linux (6.12.10) [ 13:42 ][ DONE ] rtl8812au (20210820-ad90dfb072ed4aed0703f1209272195214fb4300) [ 5 ][ DONE ] linux-initrd ($(KVER)) [ 21 ][ DONE ] memtest (7.20) [ 0 ][ SKIP ] installer [ 21 ][ DONE ] cdrom [ 2 ][ FAIL ] done; \ else \ : ; \ fi make[1]: Leaving directory '/usr/src/installer' Updating linker cache... Install done; saving file list to /usr/src/log/installer ... make: Leaving directory '/usr/src/lfs' Jan 22 10:30:26: Building cdrom make: Entering directory '/build/nightly/next/lfs' make: Nothing to be done for 'download'. make: Leaving directory '/build/nightly/next/lfs' make: Entering directory '/usr/src/lfs' make: Nothing to be done for 'b2'. # Update /etc/system-release, because the string might have changed # since stage2 has been executed.. echo "IPFire 2.29 (aarch64) - core192 Development Build: next/c77cc664" > /etc/system-release # Create a directory to authorise the CDROM in rm -rf /tmp/cdrom && mkdir -p /tmp/cdrom # Create the target directory rm -rf /tmp/root && mkdir -p /tmp/root # Copy all files that we want # Copy all files from /usr/src/config/rootfiles/common to /tmp/root () # = rootfile to write out # = exclude BUILD_ARCH="aarch64" BUILDTARGET="aarch64-pc-linux-gnu" KVER="6.12.10-ipfire" /usr/src/src/scripts/archive.files aarch64 /usr/src/config/rootfiles/common | tee | tar --create --format=pax --acls --xattrs --xattrs-include='*' --sparse --directory=/ --exclude="dev/pts/*" --exclude="proc/*" --exclude="tmp/*" --exclude="__pycache__" --files-from=- | tar --extract --format=pax --acls --xattrs --xattrs-include='*' --sparse --directory=/tmp/root tar: usr/lib/collectd/turbostat.so: Cannot stat: No such file or directory tar: Exiting with failure status due to previous errors make: *** [cdrom:148: /usr/src/log/cdrom] Error 2 make: Leaving directory '/usr/src/lfs' ERROR: Building cdrom [ FAIL ] Check /build/nightly/next/log_aarch64/_build.ipfire.log for errors if applicable[ FAIL ]

2 3

[PATCH] flac: Update to version 1.4.3
by Adolf Belka 19 Jan '25

19 Jan '25

- Update from version 1.4.2 to 1.4.3 - Update of rootfile - Changelog 1.4.3 As there have been additions to the libFLAC interfaces, the libFLAC version number is incremented to 13. The libFLAC++ version number stays at 10. * General * All PowerPC-specific code has been removed, as it turned out those improvements didn't actually improve anything * Large improvements in encoder speed for all presets. The largest change is for the fastest presets and for 24-bit and 32-bit inputs. * Small improvement in decoder speed for BMI2-capable CPUs * Various documentation fixes and cleanups (Mark Grassi, Jake Schmidt) * Various fixes (Ozkan Sezer, Zhipeng Xue, orbea, Sam James, Harish Mahendrakar) * Fix building on Universal Windows Platform (Dmitry Kostjučenko) * flac * A lot of small fixes for bugs found by fuzzing * Various improvements to the --keep-foreign-metadata and --keep-foreign-metadata-if-present options on decoding * The output format (WAV/AIFF/RF64 etc.) is now automatically selected based on what kind of foreign metadata is stored * Decoded file is checked afterwards, to see whether stored foreign format data agrees with FLAC audio properties * AIFF-C sowt data can now be restored * Add --force-legacy-wave-format option, to decode to WAV with WAVEFORMATPCM where WAVE_FORMAT_EXTENSIBLE would be more appropriate * Add --force-aiff-c-none-format and --force-aiff-c-sowt-format to decode to AIFF-C * The storage of WAVEFORMATEXTENSIBLE_CHANNEL_MASK is no longer restricted to known channel orderings * Throw an error when WAV or AIFF files are over 4GiB in length and the --ignore-chunk-sizes option is not set * Warn on testing files when ID3v2 tags are found * Warn when data trails the audio data of a WAV/AIFF/RF64/W64 file * Fix output file not being deleted after error on Windows * Removal of the --sector--align option * metaflac * A lot of small fixes for bugs found by fuzzing * Added options --append and --data-format, which makes it possible to copy metadata blocks from one FLAC file to another * Added option --remove-all-tags-except * Added option --show-all-tags (harridu, Martijn van Beurden) * libFLAC * No longer write seektables to Ogg, even when specifically asked for. Seektables in Ogg are not defined * Add functions FLAC__metadata_object_set_raw and FLAC__metadata_object_get_raw to convert between blob and FLAC__StreamMetadata * Build system * Autoconf (configure) * The option --enable-64-bit-words is now on by default * CMake * The option ENABLE_64_BIT_WORDS is now on by default * Testing/validation * Fuzzers were added for the flac and metaflac command line tools * Fuzzer coverage was improved Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/packages/flac | 4 ++-- lfs/flac | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/config/rootfiles/packages/flac b/config/rootfiles/packages/flac index dbc2e726a..9d8c00ff1 100644 --- a/config/rootfiles/packages/flac +++ b/config/rootfiles/packages/flac @@ -19,11 +19,11 @@ usr/bin/metaflac #usr/lib/libFLAC++.la #usr/lib/libFLAC++.so usr/lib/libFLAC++.so.10 -usr/lib/libFLAC++.so.10.0.0 +usr/lib/libFLAC++.so.10.0.1 #usr/lib/libFLAC.la #usr/lib/libFLAC.so usr/lib/libFLAC.so.12 -usr/lib/libFLAC.so.12.0.0 +usr/lib/libFLAC.so.12.1.0 #usr/lib/pkgconfig/flac++.pc #usr/lib/pkgconfig/flac.pc #usr/share/aclocal/libFLAC++.m4 diff --git a/lfs/flac b/lfs/flac index f608d619c..9075e9f92 100644 --- a/lfs/flac +++ b/lfs/flac @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2025 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,7 +26,7 @@ include Config SUMMARY = Free Lossless Audio Codec -VER = 1.4.2 +VER = 1.4.3 THISAPP = flac-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = flac -PAK_VER = 4 +PAK_VER = 5 DEPS = libogg @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 60a40806c6c54fe836235cea2c476051c6f82e6a50ac6d160b4ab783b8b0c33f1763ba2816e5e490acd6320de0764ea3c4b35708820a17f40ccada3f72bac687 +$(DL_FILE)_BLAKE2 = c4f441aeaa0493433347b8a110ca01865fd40d5b21150174372af2fee4fa5c3397a67add31138e92999eab9d9abe6c46a5ac29e13cbac60093fbff6d7a672ad3 install : $(TARGET) -- 2.48.1

1 4

[PATCH] strongswan: Update to version 6.0.0
by Adolf Belka 19 Jan '25

19 Jan '25

- Update from version 5.9.14 to 6.0.0 - Update of rootfile - The stroke plugin, which was deprecated in 2014 is no longer enabled by default. So it is now enabled expolicitly in this patch. The stroke plugin is recommended to be migrated to using the vici plugin but this will require a re-write of the ipsec WUI page. Hopefully the removal of the stroke plugin will also take many years as the time between deprecation and default disabling. - Also aes, curve25519, des, fips-prf, gmp, hmac, md5, pkcs12, rc2, sha1 & sha2 are no longer enabled by default. Most of these don 't need to be enabled as they are supported by the openssl plugin whicxh we have had explicitly enabled for some time. The openssl plugin is now enabled by default. After some checks to see which plugins I needed to enable to match the current set of algorithms I ended up only needing\ to explicitly enable fips-prf, mgf1 & hmac. - The ml plugin has also been enbabled so that we have the ML_KEM post quantum key exchange algorithms enabled so they can be made available in the ipsec WUI. - All existing algorithms are available together with the following new ones. XOF_MGF1_SHA3_224 XOF_MGF1_SHA3_256 XOF_MGF1_SHA3_384 XOF_MGF1_SHA3_512 ML_KEM_512 ML_KEM_768 ML_KEM_10245 - I also installed the build using 6.0.0 into a vm testbed system and confirmed that my existing ipsec connection using the default crypto values from the WUI worked without any problems. So existing connections should all be fine. - Changelog 6.0.0 New Feature Additions Support for multiple IKEv2 key exchanges (RFC 9370) has been added (3a850ae). IKE_INTERMEDIATE exchanges (RFC 9242) are used to transport additional KE payloads between the IKE_SA_INIT and IKE_AUTH exchanges. To rekey IKE and Child SAs with multiple key exchanges, IKE_FOLLOWUP_KE exchanges are used, as defined in RFC 9370. In proposals, additional key exchange methods are configured via keX_ prefix, where X is a number between 1 and 7. For example, ke1_mlkem768 adds ML-KEM-768 as additional KE method (works with any key exchange method, whether post-quantum or classic). As with regular key exchanges, peers have to agree on a method for each round unless no algorithms are defined by both or keX_none is configured to make that round explicitly optional. Support for the Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM, FIPS 203), a key exchange method that, at present, is believed to be secure even against adversaries who possess a quantum computer, has been added via Botan 3.6.0+ (botan plugin), wolfSSL 5.7.4+ (wolfssl plugin), AWS-LC 1.37.0+ (openssl plugin), and the new ml plugin. The keywords for ML-KEM-512 (128 bits security strength), ML-KEM-768 (192 bits), ML-KEM-1024 (256 bits) are mlkem512, mlkem768 and mlkem1024, respectively. AF_VSOCK sockets can be used on Linux to communicate with a daemon that runs in a VM (e.g. via the vici plugin). The file logger can optionally log messages as JSON objects (a2fba6d, bea1f11, see the docs for details), and can add timestamps in microseconds via the new time_precision setting (#2475). Enhancements and Optimizations Handling of CHILD_SA rekey collisions has been improved (d2b2e1b). This makes CHILD_SAs properly trackable via child_rekey() hook and some corner cases are also handled correctly e.g. if a responder's DELETE for the new CHILD_SA arrives before its CREATE_CHILD_SA response that creates that SA in the first place. Also handled properly are responders of rekeyings that incorrectly send a DELETE for the old CHILD_SA (previously, this caused both, the new and the old SA, to get deleted). The behavior when reloading or unloading connections that include start in their start_action has been improved (#2324, #2418). If no identity is configured but a certificate is available, the subject DN is used instead of the IP address (#2353). The cert-enroll script now supports three generations of CA certificates (f59ca96). IKE ports are now considered when matching connections (9228a51, 6928709). The base address of in-memory IP address pools is now reported as configured (#2264). IKE fragment sizes can be configured for each address family explicitly (84bd011). The openssl plugin can use the EVP_DigestSqueeze() API for XOFs, which was introduced with OpenSSL 3.3 (3d0f695). The kernel-netlink plugin explicitly configures the direction of IPsec SAs when running on 6.10+ kernels (abdc787). The Android app was updated for compatibility with Android 14 (740cbb2), a bug was fixed that affects importing already existing VPN profiles (9b9cf20). Fixes The NetworkManager plugin (charon-nm) now uses a different routing table than the regular IKE daemon to avoid conflicts if both are running (#2230). TUN devices can properly handle IPv6 addresses (fccc764) and routes via them are now correctly installed on FreeBSD (bf165af). Reassigning a matching online lease is now preferred over an offline lease by the in-memory IP address pool to avoid conflicts with make-before-break reauthentication and multiple IKE_SAs per identity (#2472). To avoid conflicts with other processes when using ephemeral UDP ports, the socket-default plugin now always opens IPv4 sockets before IPv6 sockets (#2494). Challenge passwords in PKCS#10 containers are again encoded as PrintableString if possible to be compatible with older SCEP implementations (8e88d56). The vici plugin now uses the same ESP proposals (AEAD before regular) when configuring default instead of not configuring esp_proposals at all (8e020bc). Fixed handling of adopted reqids during IKEv1 rekeying (d02aea9, bug was introduced in 5.9.12). A typo in the cert-enroll script prevented successful signalling of a change of the sub CA certificate (957aae8). Plugin and Configuration Changes The legacy stroke plugin is no longer enabled by default and must be enabled explicitly. The openssl plugin is now enabled by default, while the following crypto plugins are no longer enabled by default: aes, curve25519, des, fips-prf, gmp, hmac, md5, pkcs12, rc2, sha1, sha2. The following deprecated plugins have been removed: bliss (signature scheme), newhope (key exchange method), ntru (key exchange method). charon.make_before_break is now enabled by default, which initiates IKEv2 reauthentication with a make-before-break instead of a break-before-make scheme. Make-before-break creates overlapping IKE and Child SA during reauthentication by first recreating all SAs before deleting the old ones. This behavior can be beneficial to avoid connectivity gaps during reauthentication (unlike rekeying still not completely without interruption), but requires support for overlapping SAs by the peer. strongSwan can handle such overlapping SAs since version 5.3.0. For Developers Using the child_rekey() hook now allows tracking CHILD_SAs correctly in case of rekey collisions. The event is generally only triggered once after installing the outbound SA for the new/winning CHILD_SA. However, in some cases the event is triggered twice, but it is now ensured that listeners can properly transition to the winning SA. Refer to the documentation of key_exchange_method_t interface to learn how KEMs can be implemented in plugins. The format of key exchange test vectors has been changed so they can be used for KEMs and classic DH methods (4067678). The NetworkManager frontend's build files have been updated to not rely on gnome-common. It now also uses gettext directly instead of intltool (5019e3e). Performance of running tests in the testing environment has been improved. Refer to the 6.0.0 milestone for a list of all closed issues and pull requests. Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/strongswan | 30 +++++------------------------- lfs/strongswan | 13 ++++++++----- 2 files changed, 13 insertions(+), 30 deletions(-) diff --git a/config/rootfiles/common/strongswan b/config/rootfiles/common/strongswan index a5f256e02..cd446d1e9 100644 --- a/config/rootfiles/common/strongswan +++ b/config/rootfiles/common/strongswan @@ -14,7 +14,6 @@ etc/strongswan.d etc/strongswan.d/charon etc/strongswan.d/charon-logging.conf etc/strongswan.d/charon.conf -etc/strongswan.d/charon/aes.conf etc/strongswan.d/charon/attr.conf etc/strongswan.d/charon/ccm.conf etc/strongswan.d/charon/chapoly.conf @@ -23,8 +22,6 @@ etc/strongswan.d/charon/constraints.conf etc/strongswan.d/charon/counters.conf etc/strongswan.d/charon/ctr.conf etc/strongswan.d/charon/curl.conf -etc/strongswan.d/charon/curve25519.conf -etc/strongswan.d/charon/des.conf etc/strongswan.d/charon/dhcp.conf etc/strongswan.d/charon/dnskey.conf etc/strongswan.d/charon/drbg.conf @@ -38,26 +35,22 @@ etc/strongswan.d/charon/farp.conf etc/strongswan.d/charon/fips-prf.conf etc/strongswan.d/charon/gcm.conf etc/strongswan.d/charon/gcrypt.conf -etc/strongswan.d/charon/gmp.conf etc/strongswan.d/charon/hmac.conf etc/strongswan.d/charon/kdf.conf etc/strongswan.d/charon/kernel-netlink.conf -etc/strongswan.d/charon/md5.conf etc/strongswan.d/charon/mgf1.conf +etc/strongswan.d/charon/ml.conf etc/strongswan.d/charon/nonce.conf etc/strongswan.d/charon/openssl.conf etc/strongswan.d/charon/pem.conf etc/strongswan.d/charon/pgp.conf etc/strongswan.d/charon/pkcs1.conf -etc/strongswan.d/charon/pkcs12.conf etc/strongswan.d/charon/pkcs7.conf etc/strongswan.d/charon/pkcs8.conf etc/strongswan.d/charon/pubkey.conf etc/strongswan.d/charon/random.conf etc/strongswan.d/charon/resolve.conf etc/strongswan.d/charon/revocation.conf -etc/strongswan.d/charon/sha1.conf -etc/strongswan.d/charon/sha2.conf etc/strongswan.d/charon/sha3.conf etc/strongswan.d/charon/socket-default.conf etc/strongswan.d/charon/sshkey.conf @@ -73,7 +66,6 @@ etc/strongswan.d/pki.conf etc/strongswan.d/starter.conf etc/strongswan.d/swanctl.conf #etc/swanctl -etc/swanctl/bliss etc/swanctl/conf.d etc/swanctl/ecdsa etc/swanctl/pkcs12 @@ -111,7 +103,6 @@ usr/lib/ipsec/libvici.so usr/lib/ipsec/libvici.so.0 usr/lib/ipsec/libvici.so.0.0.0 #usr/lib/ipsec/plugins -usr/lib/ipsec/plugins/libstrongswan-aes.so usr/lib/ipsec/plugins/libstrongswan-attr.so usr/lib/ipsec/plugins/libstrongswan-ccm.so usr/lib/ipsec/plugins/libstrongswan-chapoly.so @@ -120,8 +111,6 @@ usr/lib/ipsec/plugins/libstrongswan-constraints.so usr/lib/ipsec/plugins/libstrongswan-counters.so usr/lib/ipsec/plugins/libstrongswan-ctr.so usr/lib/ipsec/plugins/libstrongswan-curl.so -usr/lib/ipsec/plugins/libstrongswan-curve25519.so -usr/lib/ipsec/plugins/libstrongswan-des.so usr/lib/ipsec/plugins/libstrongswan-dhcp.so usr/lib/ipsec/plugins/libstrongswan-dnskey.so usr/lib/ipsec/plugins/libstrongswan-drbg.so @@ -135,26 +124,24 @@ usr/lib/ipsec/plugins/libstrongswan-farp.so usr/lib/ipsec/plugins/libstrongswan-fips-prf.so usr/lib/ipsec/plugins/libstrongswan-gcm.so usr/lib/ipsec/plugins/libstrongswan-gcrypt.so -usr/lib/ipsec/plugins/libstrongswan-gmp.so usr/lib/ipsec/plugins/libstrongswan-hmac.so usr/lib/ipsec/plugins/libstrongswan-kdf.so usr/lib/ipsec/plugins/libstrongswan-kernel-netlink.so -usr/lib/ipsec/plugins/libstrongswan-md5.so usr/lib/ipsec/plugins/libstrongswan-mgf1.so +usr/lib/ipsec/plugins/libstrongswan-ml.so +usr/lib/ipsec/plugins/libstrongswan-ml.so.0 +usr/lib/ipsec/plugins/libstrongswan-ml.so.0.0.0 usr/lib/ipsec/plugins/libstrongswan-nonce.so usr/lib/ipsec/plugins/libstrongswan-openssl.so usr/lib/ipsec/plugins/libstrongswan-pem.so usr/lib/ipsec/plugins/libstrongswan-pgp.so usr/lib/ipsec/plugins/libstrongswan-pkcs1.so -usr/lib/ipsec/plugins/libstrongswan-pkcs12.so usr/lib/ipsec/plugins/libstrongswan-pkcs7.so usr/lib/ipsec/plugins/libstrongswan-pkcs8.so usr/lib/ipsec/plugins/libstrongswan-pubkey.so usr/lib/ipsec/plugins/libstrongswan-random.so usr/lib/ipsec/plugins/libstrongswan-resolve.so usr/lib/ipsec/plugins/libstrongswan-revocation.so -usr/lib/ipsec/plugins/libstrongswan-sha1.so -usr/lib/ipsec/plugins/libstrongswan-sha2.so usr/lib/ipsec/plugins/libstrongswan-sha3.so usr/lib/ipsec/plugins/libstrongswan-socket-default.so usr/lib/ipsec/plugins/libstrongswan-sshkey.so @@ -202,7 +189,6 @@ usr/sbin/swanctl #usr/share/strongswan/templates #usr/share/strongswan/templates/config #usr/share/strongswan/templates/config/plugins -#usr/share/strongswan/templates/config/plugins/aes.conf #usr/share/strongswan/templates/config/plugins/attr.conf #usr/share/strongswan/templates/config/plugins/ccm.conf #usr/share/strongswan/templates/config/plugins/chapoly.conf @@ -211,8 +197,6 @@ usr/sbin/swanctl #usr/share/strongswan/templates/config/plugins/counters.conf #usr/share/strongswan/templates/config/plugins/ctr.conf #usr/share/strongswan/templates/config/plugins/curl.conf -#usr/share/strongswan/templates/config/plugins/curve25519.conf -#usr/share/strongswan/templates/config/plugins/des.conf #usr/share/strongswan/templates/config/plugins/dhcp.conf #usr/share/strongswan/templates/config/plugins/dnskey.conf #usr/share/strongswan/templates/config/plugins/drbg.conf @@ -226,26 +210,22 @@ usr/sbin/swanctl #usr/share/strongswan/templates/config/plugins/fips-prf.conf #usr/share/strongswan/templates/config/plugins/gcm.conf #usr/share/strongswan/templates/config/plugins/gcrypt.conf -#usr/share/strongswan/templates/config/plugins/gmp.conf #usr/share/strongswan/templates/config/plugins/hmac.conf #usr/share/strongswan/templates/config/plugins/kdf.conf #usr/share/strongswan/templates/config/plugins/kernel-netlink.conf -#usr/share/strongswan/templates/config/plugins/md5.conf #usr/share/strongswan/templates/config/plugins/mgf1.conf +#usr/share/strongswan/templates/config/plugins/ml.conf #usr/share/strongswan/templates/config/plugins/nonce.conf #usr/share/strongswan/templates/config/plugins/openssl.conf #usr/share/strongswan/templates/config/plugins/pem.conf #usr/share/strongswan/templates/config/plugins/pgp.conf #usr/share/strongswan/templates/config/plugins/pkcs1.conf -#usr/share/strongswan/templates/config/plugins/pkcs12.conf #usr/share/strongswan/templates/config/plugins/pkcs7.conf #usr/share/strongswan/templates/config/plugins/pkcs8.conf #usr/share/strongswan/templates/config/plugins/pubkey.conf #usr/share/strongswan/templates/config/plugins/random.conf #usr/share/strongswan/templates/config/plugins/resolve.conf #usr/share/strongswan/templates/config/plugins/revocation.conf -#usr/share/strongswan/templates/config/plugins/sha1.conf -#usr/share/strongswan/templates/config/plugins/sha2.conf #usr/share/strongswan/templates/config/plugins/sha3.conf #usr/share/strongswan/templates/config/plugins/socket-default.conf #usr/share/strongswan/templates/config/plugins/sshkey.conf diff --git a/lfs/strongswan b/lfs/strongswan index 9b2a5bc9f..4241bf0ca 100644 --- a/lfs/strongswan +++ b/lfs/strongswan @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2024 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2025 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 5.9.14 +VER = 6.0.0 THISAPP = strongswan-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 8b64903cfa087d42ae0895e7c11a2fcbd9c6a4a4241548d947753e081a4a4e3c5946e5cf4bbd326840e596e51c61554146f007e6882f11c874454b9480f6f7a6 +$(DL_FILE)_BLAKE2 = acb7c76dd3f4ce88ddc9d81c1f831d37c1975441f73af4025049d495c4103e3d4bf132fce4dd85b148cc58e130dd9609383c8eae569f4a3cb55c56f0ac03f9da install : $(TARGET) @@ -95,8 +95,11 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) --enable-eap-identity \ --enable-chapoly \ --enable-sha3 \ - --disable-padlock \ - --disable-rc2 \ + --enable-stroke \ + --enable-fips-prf \ + --enable-mgf1 \ + --enable-hmac \ + --enable-ml \ $(CONFIGURE_OPTIONS) cd $(DIR_APP) && make $(MAKETUNING) -- 2.48.1

1 0

Guidelines for creating a C Program launched by a WebGUI page.
by jon 17 Jan '25

17 Jan '25

Hello, I am creating a C program for use with the RPZ project and I need your help. Right now there is a rpz.cgi WebGUI. And it calls the following commands: ``` &General::system('touch', "$CUSTOMLISTS_CONF"); } &General::system_output('/usr/sbin/rpz-config', 'list'); &General::system('/usr/sbin/rpz-config', 'remove', $action_key, '--no-reload'); &General::system('/usr/sbin/rpz-config', 'add', $name, $url, '--no-reload'); &General::system('/usr/sbin/rpz-make', 'allowblock', '--no-reload'); &General::system('/usr/sbin/rpz-config', 'reload'); &General::system('/usr/local/bin/unboundctrl', 'restart'); ``` What determines which of these require a `rpzctrl.c`? Are there guidelines for `xyz-ctrl.c` programs? I am guessing "touch, chown, chmod" do not require a C program but I don’t know "why". ``` [root@ipfire tmp] # file /usr/bin/touch /usr/bin/touch: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 5.4.0, stripped [root@ipfire tmp] # file /bin/chown /bin/chown: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 5.4.0, stripped [root@ipfire tmp] # file /bin/chmod /bin/chmod: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 5.4.0, stripped [root@ipfire tmp] # ``` Is it because these are already compiled programs? So my ask is: what determines the items required in a `rpzctrl.c` type program? Best regards, Jon

2 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development January 2025