- IPFire-3.x - Update from version 4.5.1-1 to 4.6.1-1 - Changelog 4.6.1 Bug fix release to fix race condition and XATTRs code 1. Race condition which can cause corruption of the "fragment table" fixed. This is a regression introduced in August 2022, and it has been seen when tailend packing is used (-tailends option). 2. Fix build failure when the tools are being built without extended attribute (XATTRs) support. 3. Fix XATTR error message when an unrecognised prefix is found (Christian Hesse). 4. Fix incorrect free of pointer when an unrecognised XATTR prefix is found. 4.6 Major improvements in extended attribute handling, pseudo file handling, and miscellaneous new options and improvements 1. Extended attribute handling improved in Mksquashfs and Sqfstar 1.1.New -xattrs-exclude option to exclude extended attributes from files using a regular expression. 1.2 New -xattrs-include option to include extended attributes from files using a regular expression. 1.3 New -xattrs-add option to add extended attributes to files. 1.4 New Pseudo file xattr definition to add extended attributes to files. 1.5 New xattrs-add Action to add extended attributes to files (Mksquashfs only). 2. Extended attribute handling improved in Unsquashfs 2.1 New -xattrs-exclude option to exclude extended attributes from files using a regular expression. 2.2 New -xattrs-include option to include extended attributes from files using a regular expression. 2.3 Extended attributes are now supported in Pseudo file output. 3. Other major improvements 3.1 Unsquashfs can now output Pseudo files to standard out. 3.2 Mksquashfs can now input Pseudo files from standard in. 3.3 Squashfs filesystems can now be converted (different block size compression etc) without unpacking to an intermediate filesystem or mounting, by piping the output of Unsquashfs to Mksquashfs. 3.4 Pseudo files are now supported by Sqfstar. 3.5 "Non-anchored" excludes are now supported by Unsquashfs. 4. Mksquashfs minor improvements 4.1 A new -max-depth option has been added, which limits the depth Mksquashfs descends when creating the filesystem. 4.2 A new -mem-percent option which allows memory for caches to be specified as a percentage of physical RAM, rather than requiring an absolute value. 4.3 A new -percentage option added which rather than generating the full progress-bar instead outputs a percentage. This can be used with dialog --gauge etc. 4.4 -mkfs-time, -all-time and -root-time options now take a human date string, in addition to the seconds since the epoch of 1970 00:00 UTC. For example "now", "last week", "Wed Mar 8 05:55:01 GMT 2023" are supported. 4.5 -root-uid, -root-gid, -force-uid and -force-gid options now take a user/group name in addition to the integer uid/gid. 4.6 A new -mem-default option which displays default memory usage for caches in Mbytes. 4.7 A new -no-compression option which produces no compression, and it is a short-cut for -noI, -noD, -noF and -noX. 4.8 A new -pseudo-override option which makes pseudo file uids and gids override -all-root, -force-uid and -force-gid options. Normally these options take precedence. 5. Unsquashfs minor improvements 5.1 New -all-time option which sets all file timestamps to <time>, rather than the time stored in the filesystem inode. <time> can be an integer indicating seconds since the epoch (1970-01-01) or a human string value such as "now", "last week", or "Wed Feb 15 21:02:39 GMT 2023". 5.2 New -full-precision option which uses full precision when displaying times including seconds. Use with -linfo, -lls, -lln and -llc options. 5.3 New -match option where Unsquashfs will abort if any extract file does not match on anything, and can not be resolved. 5.4 New -percentage option added which rather than generating the full progress-bar instead outputs a percentage. This can be used with dialog --gauge etc. 6. Sqfstar minor improvements 6.1 A new -ignore-zeros option added which allows tar files to be concatenated together and fed to Sqfstar. Normally a tarfile has two consecutive 512 byte blocks filled with zeros which means EOF and Sqfstar will stop reading after the first tar file on encountering them. This option makes Sqfstar ignore the zero filled blocks. 6.2 A new -mem-percent option which allows memory for caches to be specified as a percentage of physical RAM, rather than requiring an absolute value. 6.3 A new -percentage option added which rather than generating the full progress-bar instead outputs a percentage. This can be used with dialog --gauge etc. 6.4 -mkfs-time, -all-time and -root-time options now take a human date string, in addition to the seconds since the epoch of 1970 00:00 UTC. For example "now", "last week", "Wed Mar 8 05:55:01 GMT 2023" are supported. 6.5 -root-uid, -root-gid, -force-uid and -force-gid options now take a user/group name in addition to the integer uid/gid. 6.6 A new -mem-default option which displays default memory usage for caches in Mbytes. 6.7 A new -no-compression option which produces no compression, and it is a short-cut for -noI, -noD, -noF and -noX. 6.8 A new -pseudo-override option which makes pseudo file uids and gids override -all-root, -force-uid and -force-gid options. Normally these options take precedence. 6.9 Do not abort if ZERO filled blocks indicating end of the TAR archive are missing. 7. Other minor improvements 7.1 If Mksquashfs/Unsquashfs fails to execute generating the manpages because they have been cross-compiled, fall back to using the pre-built manpages. 7.2 Add new Makefile configure option USE_PREBUILT_MANPAGES to always use pre-built manpages rather than generating them when "make install" is run. 8. Major bug fixes 8.1 Following a symlink in Sqfscat or where -follow-symlinks option is given with Unsquashfs, incorrectly triggered the corrupted filesystem loop detection code. 8.2 In Unsquashfs if a file was not writable it could not add extended attributes to it. 8.3 Sqfstar would incorrectly reject compressor specific options that have an argument. 8.4 Sqfstar would incorrectly strip pathname components in PAX header linkpath if symbolic. 8.5 Sqfstar -root-uid, -root-gid and -root-time options were documented but not implemented. 8.6 Mksquashfs -one-file-system option would not create empty mount point directory when filesystem boundary crossed. 8.7 Mksquashfs did not check the close() return result.

Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- squashfs-tools/squashfs-tools.nm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/squashfs-tools/squashfs-tools.nm b/squashfs-tools/squashfs-tools.nm index dc35b091f..c9f68b083 100644 --- a/squashfs-tools/squashfs-tools.nm +++ b/squashfs-tools/squashfs-tools.nm @@ -4,7 +4,7 @@ ###############################################################################

name = squashfs-tools -version = 4.5.1 +version = 4.6.1 release = 1

groups = System/Filesystems

- IPFire-3.x - Update from version 4.99.1-2 to 4.99.4-1 - Changelog 4.99.4 Source code: Fix spaces before tabs in indentation. Updated printers: LSP ping: Fix "Unused value" warnings from Coverity. CVE-2023-1801: Fix an out-of-bounds write in the SMB printer. DNS: sync resource types with IANA. ICMPv6: Update the output to show a RPL DAO field name. Geneve: Fix the Geneve UDP port test. Building and testing: Require at least autoconf 2.69. Don't check for strftime(), as it's in C90 and beyond. Update config.{guess,sub}, timestamps 2023-01-01,2023-01-21. Documentation: man: Document TCP flag names better. 4.99.3 Updated printers: PTP: Use the proper values for the control field and print un-allocated values for the message field as "Reserved" instead of "none". Source code: smbutil.c: Replace obsolete function call (asctime) Building and testing: cmake: Update the minimum required version to 2.8.12 (except Windows). CI: Introduce and use TCPDUMP_CMAKE_TAINTED. Makefile.in: Add the releasecheck target. Makefile.in: Add "make -s install" in the releasecheck target. Cirrus CI: Run the "make releasecheck" command in the Linux task. Makefile.in: Add the whitespacecheck target. Cirrus CI: Run the "make whitespacecheck" command in the Linux task. Address all shellcheck warnings in update-test.sh. Makefile.in: Get rid of a remain of gnuc.h. Documentation: Reformat the installation notes (INSTALL.txt) in Markdown. Convert CONTRIBUTING to Markdown. CONTRIBUTING.md: Document the use of "protocol: " in a commit summary. Add a README file for NetBSD. Fix CMake build to set man page section numbers in tcpdump.1 4.99.2 Updated printers: BGP: Update cease notification decoding to RFC 9003. BGP: decode BGP link-bandwidth extended community properly. BGP: Fix parsing the AIGP attribute BGP: make sure the path attributes don't go past the end of the packet. BGP: Shutdown message can be up to 255 bytes length according to rfc9003 DSA: correctly determine VID. EAP: fix some length checks and output issues. 802.11: Fix the misleading comment regarding "From DS", "To DS" Frame Control Flags. 802.11: Fetch the CF and TIM IEs a field at a time. 802.15.4, BGP, LISP: fix some length checks, compiler warnings, and undefined behavior warnings. PFLOG: handle LINKTYPE_PFLOG/DLT_PFLOG files from all OSes on all OSes. RRCP: support more Realtek protocols than just RRCP. MPLS: show the EXP field as TC, as per RFC 5462. ICMP: redo MPLS Extension code as general ICMP Extension code. VQP: Do not print unknown error codes twice. Juniper: Add some bounds checks. Juniper: Don't treat known DLT_ types as "Unknown". lwres: Fix a length check, update a variable type. EAP: Fix some undefined behaviors at runtime. Ethernet: Rework the length checks, add a length check. IPX: Add two length checks. Zephyr: Avoid printing non-ASCII characters. VRRP: Print the protocol name before any GET_(). DCCP: Get rid of trailing commas in lists. Juniper: Report invalid packets as invalid, not truncated. IPv6: Remove an obsolete code in an always-false #if wrapper. ISAKMP: Use GET_U_1() to replace a direct dereference. RADIUS: Use GET_U_1() to replace a direct dereference. TCP: Fix an invalid check. RESP: Fix an invalid check. RESP: Remove an unnecessary test. Arista: Refine the output format and print HwInfo. sFlow: add support for IPv6 agent, add a length check. VRRP: add support for IPv6. OSPF: Update to match the Router Properties registry. OSPF: Remove two unnecessary dereferences. OSPF: Add support bit Nt RFC3101. OSPFv3: Remove two unnecessary dereferences. ICMPv6: Fix output for Router Renumbering messages. ICMPv6: Fix the Node Information flags. ICMPv6: Remove an unused macro and extra blank lines. ICMPv6: Add a length check in the rpl_dio_print() function. ICMPv6: Use GET_IP6ADDR_STRING() in the rpl_dio_print() function. IPv6: Add some checks for the Hop-by-Hop Options header IPv6: Add a check for the Jumbo Payload Hop-by-Hop option. NFS: Fix the format for printing an unsigned int PTP: fix printing of the correction fields PTP: Use ND_LCHECK_U for checking invalid length. WHOIS: Add its own printer source file and printer function MPTCP: print length before subtype inside MPTCP options ESP: Add a workaround to a "use-of-uninitialized-value". PPP: Add tests to avoid incorrectly re-entering ppp_hdlc(). PPP: Don't process further if protocol is unknown (-e option). PPP: Change the pointer to packet data. ZEP: Add three length checks. Add some const qualifiers. Building and testing: Update config.guess and config.sub. Use AS_HELP_STRING macro instead of AC_HELP_STRING. Handle some Autoconf/make errors better. Fix an error when cross-compiling. Use "git archive" for the "make releasetar" process. Remove the release candidate rcX targets. Mend "make check" on Solaris 9 with Autoconf. Address assorted compiler warnings. Fix auto-enabling of Capsicum on FreeBSD with Autoconf. Treat "msys" as Windows for test exit statuses. Clean up some help messages in configure. Use unified diff by default. Remove awk code from mkdep. Fix configure test errors with Clang 15 CMake: Prevent stripping of the RPATH on installation. AppVeyor CI: update Npcap site, update to 1.12 SDK. Cirrus CI: Use the same configuration as for the main branch. CI: Add back running tcpdump -J/-L and capture, now with Cirrus VMs. Remove four test files (They are now in the libpcap tests directory). On Solaris, for 64-bit builds, use the 64-bit pcap-config. Tell CMake not to check for a C++ compiler. CMake: Add a way to request -Werror and equivalents. configure: Special-case macOS /usr/bin/pcap-config as we do in CMake. configure: Use pcap-config --static-pcap-only if available. configure: Use ac_c_werror_flag to force unknown compiler flags to fail. configure: Use AC_COMPILE_IFELSE() and AC_LANG_SOURCE() for testing flags. Run the test that fails on OpenBSD only if we're not on OpenBSD. Source code: Fix some snapend-changing routines to protect against pointer underflow. Use __func__ from C99 in some function calls. Memory allocator: Update nd_add_alloc_list() to a static function. addrtoname.c: Fix two invalid tests. Use more S_SUCCESS and S_ERR_HOST_PROGRAM in main(). Add some comments about "don't use GET_IP6ADDR_STRING()". Assign ndo->ndo_packetp in pretty_print_packet(). Add ND_LCHECKMSG_U, ND_LCHECK_U, ND_LCHECKMSG_ZU and ND_LCHECK_ZU macros. Update tok2strbuf() to a static function. netdissect.h: Keep the link-layer dissectors names sorted. setsignal(): Set SA_RESTART on non-lethal signals (REQ_INFO, FLUSH_PCAP) to avoid corrupting binary pcap output. Use __builtin_unreachable(). Fail if nd_push_buffer() or nd_push_snaplen() fails. Improve code style and fix many typos. Documentation: Some man page cleanups. Update the print interface for the packet count to stdout. Note that we require compilers to support at least some of C99. Update AIX and Solaris-related specifics. INSTALL.txt: Add doc/README.*, delete the deleted win32 directory. Update README.md and README.Win32.md. Update some comments with new RFC numbers.

Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- tcpdump/tcpdump.nm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tcpdump/tcpdump.nm b/tcpdump/tcpdump.nm index 9c4d33822..090b33016 100644 --- a/tcpdump/tcpdump.nm +++ b/tcpdump/tcpdump.nm @@ -4,8 +4,8 @@ ###############################################################################

name = tcpdump -version = 4.99.1 -release = 2 +version = 4.99.4 +release = 1

groups = Networking/Sniffer url = https://www.tcpdump.org/