- Update from version 3.7.0 to 3.7.4 - Update of rootfile - CVE fix in 3.7.4 - Changelog 3.7.4 Security fixes: rar: Fix OOB in rar e8 filter (#2135) (CVE-2024-26256) zip: Fix out of boundary access (#2145) Important bugfixes: 7zip: Limit amount of properties (#2131) bsdtar: Fix error handling around strtol() usages (#2110) passphrase: Improve newline handling on Windows (#2115) passphrase: Never allow empty passwords (#2116) rar: Fix "File CRC Error" when extracting specific rar4 archives (#2124) xar: Avoid infinite link loop (#2123) zip: Update AppleDouble support for directories (#2108) zstd: Implement core detection (#2083, #2071) 3.7.3 New features: PCRE2 support (#2031) add trailing letter b to bsdtar(1) substitute pattern (#2012) add support for long options "--group" and "--owner" to tar(1) (#2054) Security fixes: Fix possible vulnerability in tar error reporting introduced in f27c173 (#2101) Important bugfixes: ISO9660: preserve the natural order of links (#1974) rar5: fix decoding unicode filenames on Windows (#1978) rar5: fix infinite loop if during rar5 decompression the last block produced no data (#2105) xz filter: fix incorrect eof at the end of an lzip member (#2027) zip: fix end-of-data marker processing when decompressing zip archives (#2042) multiple bsdunzip(1) fixes (#2022, #2030) filetime truncation fix on Windows (#2050) 3.7.2 Security fixes: Multiple vulnerabilities have been fixed in the PAX writer (1b4e0d0) Important bugfixes: bsdunzip(1) now correctly handles arguments following an -x after the zipfile New features: bsdunzip(1) now supports the "--version" flag 7-zip reader now translates Windows permissions into UNIX permissions (#1943) uudecode filter in raw mode now supports file name and file mode zstd filter now supports the "long" write option (#1962) 3.7.1 Security fixes: SEGV and stack buffer overflow in verbose mode of cpio (#1934, #1935) Feature updates: bsdunzip updated to match latest upstream code (#1926) Important bugfixes: miscellaneous functional bugfixes (#1731, #1929, #1930) build fixes on multiple platforms (Android #1921, older MacOS X #1919, #1933 and others)
Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- config/rootfiles/common/libarchive | 2 +- lfs/libarchive | 10 ++++++---- 2 files changed, 7 insertions(+), 5 deletions(-)
diff --git a/config/rootfiles/common/libarchive b/config/rootfiles/common/libarchive index 81089e9e2..2f38c29a7 100644 --- a/config/rootfiles/common/libarchive +++ b/config/rootfiles/common/libarchive @@ -7,7 +7,7 @@ #usr/lib/libarchive.la #usr/lib/libarchive.so usr/lib/libarchive.so.13 -usr/lib/libarchive.so.13.7.0 +usr/lib/libarchive.so.13.7.4 #usr/lib/pkgconfig/libarchive.pc #usr/share/man/man1/bsdcat.1 #usr/share/man/man1/bsdcpio.1 diff --git a/lfs/libarchive b/lfs/libarchive index 91041023b..668f2a87e 100644 --- a/lfs/libarchive +++ b/lfs/libarchive @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2023 IPFire Team info@ipfire.org # +# Copyright (C) 2007-2024 IPFire Team info@ipfire.org # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@
include Config
-VER = 3.7.0 +VER = 3.7.4
THISAPP = libarchive-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -41,7 +41,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 8fb72a0504038c71584c0416c1d747b7f5c82266518704353e7fdf794bd9f9e2dc22b8fa2538fa8d12a3b9776581077040371d25647fe72c02a4ec5f3bb8d950 +$(DL_FILE)_BLAKE2 = 128f72235da61e112201046c0cfe62a8c580cf73b426c4cfe270ae913356f6ad430ba33a663dcd617b082c7baf45ada8d1c9928c45fea16fd57e8020693a60bc
install : $(TARGET)
@@ -74,7 +74,9 @@ $(subst %,%_BLAKE2,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) - cd $(DIR_APP) && ./configure --prefix=/usr --disable-static + cd $(DIR_APP) && ./configure \ + --prefix=/usr \ + --disable-static cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install @rm -rf $(DIR_APP)
- Update from version 2.5.5 to 3.0.1 - Update of rootfile - Changelog 3.0.1 * Change Unix symbol versioning to help the Debian transitioning process. 3.0.0 * API change: For new code, which uses libassuan with nPTH, please use gpgrt_get_syscall_clamp and assuan_control, instead of the system_hooks API. Use of ASSUAN_SYSTEM_NPTH is deprecated with new API version 3. If it's really needed to keep using old implementation of ASSUAN_SYSTEM_NPTH, you need to change your your application code, to define ASSUAN_REALLY_REQUIRE_V2_NPTH_SYSTEM_HOOKS before including <assuan.h>. For an application which uses version 2 API (NEED_LIBASSUAN_API=2 in its configure.ac), use of ASSUAN_SYSTEM_NPTH is still supported. [T5914] * New function assuan_control. [T6625] * New function assuan_sock_accept. [T5925] * New functions assuan_pipe_wait_server_termination and assuan_pipe_kill_server to support abstraction of process. [T6487] * Windows support for sendfd/recvfd. [T6236] * Implement timeout in assuan_sock_connect_byname. [T3302] * No support for WindowsCE, any more. [T6170] * New socket flags "linger" and "reuseaddr". [rA87f92fe962] * Interface changes relative to the 2.5.0 release: assuan_sock_accept NEW. assuan_pipe_wait_server_termination NEW. assuan_pipe_kill_server NEW. assuan_sock_set_flag EXTENDED. assuan_sock_get_flag EXTENDED. 2.5.7 New configure option --with-libtool-modification. [T6619] Change the naming of the 64 bit Windows DLL from libassuan6-0.dll to libassuan-0.dll to sync this with what we did for libgpg-error. 2.5.6 * Fix logging of confidential data. [rA0fc31770fa] * Fix memory wiping. [T5977] * Fix macOS build problem. [T5440,T5610] * Upgrade autoconf stuff.
Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- config/rootfiles/packages/libassuan | 7 +++---- lfs/libassuan | 11 ++++++----- 2 files changed, 9 insertions(+), 9 deletions(-)
diff --git a/config/rootfiles/packages/libassuan b/config/rootfiles/packages/libassuan index fd57c7dd6..625cd061a 100644 --- a/config/rootfiles/packages/libassuan +++ b/config/rootfiles/packages/libassuan @@ -1,9 +1,8 @@ -usr/bin/libassuan-config #usr/include/assuan.h #usr/lib/libassuan.la -usr/lib/libassuan.so -usr/lib/libassuan.so.0 -usr/lib/libassuan.so.0.8.5 +#usr/lib/libassuan.so +usr/lib/libassuan.so.9 +usr/lib/libassuan.so.9.0.1 #usr/lib/pkgconfig/libassuan.pc #usr/share/aclocal/libassuan.m4 #usr/share/info/assuan.info diff --git a/lfs/libassuan b/lfs/libassuan index 4b59508ab..d796c6055 100644 --- a/lfs/libassuan +++ b/lfs/libassuan @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2020 IPFire Team info@ipfire.org # +# Copyright (C) 2007-2024 IPFire Team info@ipfire.org # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,7 +26,7 @@ include Config
SUMMARY = IPC library used by GnuPG version 2
-VER = 2.5.5 +VER = 3.0.1
THISAPP = libassuan-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = libassuan -PAK_VER = 7 +PAK_VER = 8
DEPS =
@@ -48,7 +48,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 24952e97c757b97c387ab4c2c4bf7b040f2874e9326c129805c7f5326fa14d80e083b0842e336a635531a2c8d4a66d428c816bae6b175f1c4518add1ffa3554d +$(DL_FILE)_BLAKE2 = 5d6a7e4e9ce1b196bc7d126786716d95896de6145b8d753e2289bd36cbc96efa216360ac127fadb7be2d577e7fa203c8c8695d4aa11afcca6ed5397dd40209cb
install : $(TARGET)
@@ -82,7 +82,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar jxf $(DIR_DL)/$(DL_FILE) $(UPDATE_AUTOMAKE) - cd $(DIR_APP) && ./configure --prefix=/usr + cd $(DIR_APP) && ./configure \ + --prefix=/usr cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install @rm -rf $(DIR_APP)
-
Adolf Belka