- Update from version 1.7.0 to 1.7.2 - Update of rootfile - Changelog Changes for APR 1.7.2 *) Correct a packaging issue in 1.7.1. The contents of the release were correct, but the top level directory was misnamed. Changes for APR 1.7.1 *) SECURITY: CVE-2022-24963 (cve.mitre.org) Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. *) SECURITY: CVE-2022-28331 (cve.mitre.org) On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in apr_socket_sendv(). This is a result of integer overflow. *) SECURITY: CVE-2021-35940 (cve.mitre.org) Restore fix for out-of-bounds array dereference in apr_time_exp*() functions. (This issue was addressed as CVE-2017-12613 in APR 1.6.3 and later 1.6.x releases, but was missing in 1.7.0.) [Stefan Sperling] *) configure: Fix various build issues for compilers enforcing strict C99 compliance. PR 66396, 66408, 66426. [Florian Weimer <fweimer redhat.com>, Sam James <sam gentoo.org>] *) apr_atomic_read64(): Fix non-atomic read on 32-bit Windows [Ivan Zhakov] *) configure: Prefer posix name-based shared memory over SysV IPC. [Jim Jagielski] *) configure: Add --disable-sctp argument to forcibly disable SCTP support, or --enable-sctp which fails if SCTP support is not detected. [Lubos Uhliarik <luhliari redhat.com>, Joe Orton] *) Fix handle leak in the Win32 apr_uid_current implementation. PR 61165. [Ivan Zhakov] *) Add error handling for lseek() failures in apr_file_write() and apr_file_writev(). [Joe Orton] *) Don't silently set APR_FOPEN_NOCLEANUP for apr_file_mktemp() created file to avoid a fd and inode leak when/if later passed to apr_file_setaside(). [Yann Ylavic] *) APR's configure script uses AC_TRY_RUN to detect whether the return type of strerror_r is int. When cross-compiling this defaults to no. This commit adds an AC_CACHE_CHECK so users who cross-compile APR may influence the outcome with a configure variable. [Sebastian Kemper <sebastian_ml gmx net>] *) Add a cache check with which users who cross-compile APR can influence the outcome of the /dev/zero test by setting the variable ac_cv_mmap__dev_zero=yes [Sebastian Kemper <sebastian_ml gmx net>] *) Trick autoconf into printing the correct default prefix in the help. [Stefan Fritsch] *) Don't try to use PROC_PTHREAD by default when cross compiling. [Yann Ylavic] *) Add the ability to cross compile APR. [Graham Leggett] *) While cross-compiling, the tools/gen_test_char could not be executed at build time, use AX_PROG_CC_FOR_BUILD to build native tools/gen_test_char Support explicit libtool by variable assigning before buildcheck.sh, it is helpful for cross-compiling (such as libtool=aarch64-linux-libtool) [Hongxu Jia <hongxu.jia windriver.com>] *) Avoid an overflow on 32 bit platforms. [René Hjortskov Nielsen <r... hjortskov.dk>] *) Use AC_CHECK_SIZEOF, so as to support cross compiling. PR 56053. [Mike Frysinger <vapier gentoo.org>] *) Add --tag=CC to libtool invocations. PR 62640. [Michael Osipov] *) apr_pools: Fix pool debugging output so that creation events are always emitted before allocation events and subpool destruction events are emitted on pool clear/destroy for proper accounting. [Brane Čibej] *) apr_socket_listen: Allow larger listen backlog values on Windows 8+. [Evgeny Kotkov <evgeny.kotkov visualsvn.com>] *) Fixed: apr_get_oslevel() was returning APR_WIN_XP on Windows 10 *) Fix attempt to free invalid memory on exit when apr_app is used on Windows. [Ivan Zhakov] *) Fix double free on exit when apr_app is used on Windows. [Ivan Zhakov] *) Fix a regression in apr_stat() for root path on Windows. [Ivan Zhakov]
Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- config/rootfiles/common/apr | 4 +--- lfs/apr | 4 ++-- 2 files changed, 3 insertions(+), 5 deletions(-)
diff --git a/config/rootfiles/common/apr b/config/rootfiles/common/apr index 52e59aaae..50b811bdd 100644 --- a/config/rootfiles/common/apr +++ b/config/rootfiles/common/apr @@ -45,13 +45,11 @@ usr/bin/apr-1-config #usr/lib/libapr-1.la #usr/lib/libapr-1.so usr/lib/libapr-1.so.0 -usr/lib/libapr-1.so.0.7.0 +usr/lib/libapr-1.so.0.7.2 #usr/lib/pkgconfig/apr-1.pc #usr/share/apr-1 #usr/share/apr-1/build -#usr/share/apr-1/build/apr_common.m4 #usr/share/apr-1/build/apr_rules.mk -#usr/share/apr-1/build/find_apr.m4 #usr/share/apr-1/build/libtool #usr/share/apr-1/build/make_exports.awk #usr/share/apr-1/build/make_var_export.awk diff --git a/lfs/apr b/lfs/apr index 35acd6ab7..6ef88fd18 100644 --- a/lfs/apr +++ b/lfs/apr @@ -25,7 +25,7 @@
include Config
-VER = 1.7.0 +VER = 1.7.2
THISAPP = apr-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -42,7 +42,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = a8750c45ca6495073a7120f3ae9b858905aecb24b6af5966c3900b06ac1f6d6b55346b17a39a9604cf1b595882335adedf8c8cf4db10e322501bfff4ad7adfe7 +$(DL_FILE)_BLAKE2 = a17ee4311a33acee0bdeb9e5225a198f9dec1b2e0267a742080c77d5342e5052392a5a2100a0ba85f5a192b8679838a7002d4c9a12aa5bdd7921eff025b75d15
install : $(TARGET)
- Update from version 7.87.0 to 7.88.1 - Update of rootfile not required - Patch removed as fix now built into source tarball - Changelog Fixed in 7.88.1 - February 20 2023 Bugfixes: build-openssl.bat: keep OpenSSL 3 engine binaries cmake: fix Windows check for CryptAcquireContext connnect: fix timeout handling to use full duration curl: make --silent work stand-alone curl_setup: Suppress OpenSSL 3 deprecation warnings CURLOPT_WS_OPTIONS.3: fix the availability version GHA: update rustls dependency to 0.9.2 http2: buffer/pausedata and output flush fix. http2: set drain on stream end http: include stdint.h more readily krb5: silence cast-align warning lib1560: add IPv6 canonicalization tests os400: correct Curl_os400_sendto() remote-header-name.d: mention that filename* is not supported runtests: fix "uninitialized value $port" setopt: allow HTTP3 when HTTP2 is not defined socketpair: allow EWOULDBLOCK when reading the pair check bytes socks: allow using DoH to resolve host names tests-httpd: add proxy tests tests: make sure gnuserv-tls has SRP support before using it tests: make the telnet server shut down a socket gracefully tool_getparam: make --get a true boolean tool_operate: allow debug builds to set buffersize urlapi: do the port number extraction without using sscanf() urldata: remove `now` from struct SingleRequest - not needed Fixed in 7.88.0 - February 15 2023 Changes: curl.h: add CURL_HTTP_VERSION_3ONLY share: add sharing of HSTS cache among handles src: add --http3-only tool_operate: share HSTS between handles urlapi: add CURLU_PUNYCODE writeout: add %{certs} and %{num_certs} Bugfixes: cf-socket: fix build when not HAVE_GETPEERNAME cf-socket: keep sockaddr local in the socket filters cfilters:Curl_conn_get_select_socks: use the first non-connected filter CI: add a workflow to automatically label pull requests CI: add pytest GHA to CI test/tests-httpd on a HTTP/3 setup CI: Retry failed downloads to reduce spurious failures CI: update wolfssl / wolfssh to 5.5.4 / 1.4.12 cmake: bump requirement to 3.7 cmake: check for sendmsg cmake: delete redundant macro definition `SECURITY_WIN32` cmake: fix dev warning due to mismatched arg cmake: fix the snprintf detection cmake: remove deprecated symbols check cmake: set SOVERSION also for macOS cmake: use list APPEND syntax for CMAKE_REQUIRED_DEFINITIONS cmdline-opts/Makefile: on error, do not leave a partial CODEOWNERS: remove the peeps mentioned as CI owners connect: fix access of pointer before NULL check connect: fix build when not ENABLE_IPV6 connect: fix strategy testing for attempts, timeouts and happy-eyeball connections: introduce http/3 happy eyeballs content_encoding: do not reset stage counter for each header CONTRIBUTE: More formally specify the commit description cookies: fp is always not NULL copyright.pl: cease doing year verifications copyright: update all copyright lines and remove year ranges curl.1: make help, version and manual sections "custom" curl.h: allow up to 10M buffer size curl.h: mark CURLSSLBACKEND_MESALINK as deprecated curl/websockets.h: extend the websocket frame struct curl: output warning at --verbose output for debug-enabled version curl_free.3: fix return type of `curl_free` curl_global_sslset.3: clarify the openssl situation curl_log: for failf/infof and debug logging implementations curl_setup: Disable by default recv-before-send in Windows curl_version_info.3: fix typo curl_ws_send.3: clarify how to send multi-frame messages CURLOPT_HEADERDATA.3: warn DLL users must set write function CURLOPT_READFUNCTION.3: the callback 'size' arg is always 1 CURLOPT_WRITEFUNCTION.3: fix memory leak in example dict: URL decode the entire path always docs/DEPRECATE.md: deprecate gskit docs: add link to GitHub Discussions docs: mention indirect effects of --insecure docs: POSTFIELDSIZE must be set to -1 with read function doh: ifdef IPv6 code easyoptions: fix header printing in generation script escape: hex decode with a lookup-table escape: use table lookup when adding %-codes to output examples: remove the curlgtk.c example fopen: remove unnecessary assignment ftpserver: lower the DATA connect timeout to speed up torture tests GHA/macos.yml: bump to gcc-12 GHA/macos: use Xcode_14.0.1 for cmake builds GHA: add job on Slackware 15.0 GHA: bump ngtcp2 workflow dependencies GHA: enable websockets in the torture job GHA: move the quiche job here from zuul GHA: use designated ngtcp2 and its dependencies versions haxproxy: send before TLS handhshake header.d: add a header file example hsts.d: explain hsts more hsts: handle adding the same host name again HTTP/[23]: continue upload when state.drain is set http2: aggregate small SETTINGS/PRIO/WIN_UPDATE frames http2: fix compiler warning due to uninitialized variable http2: minor buffer and error path fixes http2: when using printf %.*s, the length arg must be 'int' HTTP3: mention what needs to be in place to remove EXPERIMENTAL label http: add additional condition for including stdint.h http: decode transfer encoding first http: fix "part of conditional expression is always false" http: remove the trace message "Mark bundle... multiuse" http_aws_sigv4: remove typecasts from HMAC_SHA256 macro http_proxy: do not assign data->req.p.http use local copy INSTALL: document how to use multiple TLS backends lib670: make test.h the first include lib: connect/h2/h3 refactor lib: fix typos lib: fix typos in comments which repeat a word libssh2: try sha2 algos for hostkey methods libtest: add a sleep macro for Windows Linux CI: update some dependecies to latest tag Makefile.mk: fix wolfssl and mbedtls default paths man pages: call the custom user pointer 'clientp' consistently md4: fix build with GnuTLS + OpenSSL v1 misc: fix grammar and spelling misc: fix spelling misc: reduce struct and struct field sizes msh3: add support for request payload msh3: update to v0.5 Release msh3: update to v0.6 multi: stop sending empty HTTP/3 UDP datagrams on Windows multihandle: turn bool struct fields into bits ngtcp2: add CURLOPT_SSL_CTX_FUNCTION support for openssl+wolfssl ngtcp2: fix the build without 'sendmsg' ngtcp2: replace removed define and stop using removed function no-clobber.d: only use long form options in man page text noproxy: support for space-separated names is deprecated nss: implement data_pending method openldap: fix missing sasl symbols at build in specific configs openssl: adapt to boringssl's error code type openssl: don't ignore CA paths when using Windows CA store (redux) openssl: don't log raw record headers openssl: make the BIO_METHOD a local variable in the connection filter openssl: only use CA_BLOB if verifying peer openssl: remove attached easy handles from SSL instances openssl: store the CA after first send (ClientHello) os400: fixes to make-lib.sh and initscript.sh packages: remove Android, update README release-notes.pl: check fixes/closes lines better Revert "x509asn1: avoid freeing unallocated pointers" runtest.pl: add expected fourth return value runtests: tear down http2/http3 servers when https server is stopped runtests: consider warnings fatal and error on them runtests: fix detection of TLS backends runtests: make 'mbedtls' a testable feature rustls: improve error messages scripts/delta: show percent of number of files changed since last tag scripts: fix Appveyor job detection in cijobs.pl scripts: set file mode +x on all perl and shell scripts sectransp: fix for incomplete read/writes SECURITY-PROCESS.md: document severity levels setopt: Address undefined behaviour by checking for null setopt: move the SHA256 opt within #ifdef libssh2 setopt: use >, not >=, when checking if uarg is larger than uint-max smb: return error on upload without size socketpair: allow localhost MITM sniffers strdup: name it Curl_strdup system.h: assume OS400 is always built with ILEC compiler test1560: use a UTF8-using locale when run test2304: remove stdout verification tests-httpd: basic infra to run curl against an apache httpd tests: add 3 new HTTP/2 test cases, plus https: support for nghttpx tests: add tests for HTTP/2 and HTTP/3 to verify the header API tests: avoid use of sha1 in certificates tls: fixes for wolfssl + openssl combo builds tool_getparam: fix hiding of command line secrets tool_operate: fix `CURLOPT_SOCKS5_GSSAPI_NEC` type tool_operate: fix error codes during DOS filename sanitize tool_operate: fix error codes on bad URL & OOM tool_operate: fix headerfile writing tool_operate: repair --rate transfer: break the read loop when RECV is cleared typecheck: accept expressions for option/info parameters url: fix part of conditional expression is always true urlapi: avoid Curl_dyn_addf() for hex outputs urlapi: fix part of conditional expression is always true: qlen urlapi: skip path checks if path is just "/" urlapi: skip the extra dedotdot alloc if no dot in path urldata: cease storing TLS auth type urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP urldata: make set.http200aliases conditional on HTTP being present urldata: move the cookefilelist to the 'set' struct urldata: remove unused struct fields, made more conditional vquic: stabilization and improvements vtls: fix hostname handling in filters vtls: manage current easy handle in nested cfilter calls vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used winbuild: document that arm64 is supported windows: always use curl's basename() implementation wolfssl: remove deprecated post-quantum algorithms workflows/linux.yml: merge 3 common packages write-out.d: add 'since version' to %{header_json} documentation write-out.d: clarify Windows % symbol escaping ws: fix autoping handling ws: fix multiframe send handling ws: fix recv of larger frames ws: remove bad assert ws: unstick connect-only shutdown ws: use %Ou for outputting curl_off_t with info() x509asn1: fix compile errors and warnings zuul: stop using this CI service
Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- lfs/curl | 7 ++-- ...pressions_for_option_info_parameters.patch | 42 ------------------- 2 files changed, 3 insertions(+), 46 deletions(-) delete mode 100644 src/patches/curl-7.87.0_typecheck_accept_expressions_for_option_info_parameters.patch
diff --git a/lfs/curl b/lfs/curl index b76c33410..feb4fa810 100644 --- a/lfs/curl +++ b/lfs/curl @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2022 IPFire Team info@ipfire.org # +# Copyright (C) 2007-2023 IPFire Team info@ipfire.org # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@
include Config
-VER = 7.87.0 +VER = 7.88.1
THISAPP = curl-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = b272ec928c5ef1728434630d8910f58834327a30570913df9d47921a2810d002bd88b81371005197db857d3a53386420c1e28b1e463e6241d46c1e50fbce0c13 +$(DL_FILE)_BLAKE2 = ed7e7aa29efb02fd89a53d5c8d0ec79b4d17612ea07d2a6b5a951f0ca651b4cf7264704344b1a0c2d82196f4cb5c08525e06b4cdd432bc3278ff23c7a6580839
install : $(TARGET)
@@ -71,7 +71,6 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar xf $(DIR_DL)/$(DL_FILE) # Add upstream patche. - cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/curl-7.87.0_typecheck_accept_expressions_for_option_info_parameters.patch cd $(DIR_APP) && ./configure \ --prefix=/usr \ --disable-ipv6 \ diff --git a/src/patches/curl-7.87.0_typecheck_accept_expressions_for_option_info_parameters.patch b/src/patches/curl-7.87.0_typecheck_accept_expressions_for_option_info_parameters.patch deleted file mode 100644 index 63b23e309..000000000 --- a/src/patches/curl-7.87.0_typecheck_accept_expressions_for_option_info_parameters.patch +++ /dev/null @@ -1,42 +0,0 @@ -From curl commit e2aed00 - -As expressions can have side effects, evaluate only once. - -To enable deprecation reporting only once, get rid of the __typeof__ -use to define the local temporary variable and use the target type -(CURLoption/CURLINFO). This also avoids multiple reports on type -conflicts (if some) by the curlcheck_* macros. - -Note that CURLOPT_* and CURLINFO_* symbols may be deprecated, but not -their values: a curl_easy_setopt call with an integer constant as option -will never report a deprecation. - -Reported-by: Thomas Klausner -Fixes #10148 -Closes #10149 - - ---- curl-7.87.0/include/curl/typecheck-gcc.h.orig 2022-12-19 08:48:23.000000000 +0100 -+++ curl-7.87.0/include/curl/typecheck-gcc.h 2022-12-26 20:39:29.243819395 +0100 -@@ -42,9 +42,8 @@ - */ - #define curl_easy_setopt(handle, option, value) \ - __extension__({ \ -- CURL_IGNORE_DEPRECATION(__typeof__(option) _curl_opt = option;) \ -+ CURLoption _curl_opt = (option); \ - if(__builtin_constant_p(_curl_opt)) { \ -- (void) option; \ - CURL_IGNORE_DEPRECATION( \ - if(curlcheck_long_option(_curl_opt)) \ - if(!curlcheck_long(value)) \ -@@ -120,9 +119,8 @@ - /* wraps curl_easy_getinfo() with typechecking */ - #define curl_easy_getinfo(handle, info, arg) \ - __extension__({ \ -- CURL_IGNORE_DEPRECATION(__typeof__(info) _curl_info = info;) \ -+ CURLINFO _curl_info = (info); \ - if(__builtin_constant_p(_curl_info)) { \ -- (void) info; \ - CURL_IGNORE_DEPRECATION( \ - if(curlcheck_string_info(_curl_info)) \ - if(!curlcheck_arr((arg), char *)) \
- Update from version 1.46.5 to 1.47.0 - Update of rootfile not required - Changelog E2fsprogs 1.47.0 (February 5, 2023) Updates/Fixes since v1.46.6: UI and Features Add support for the orphan_file feature, which speeds up workloads that are deleting or truncating a large number files in parallel. This compat feature was first supported in the v5.15 Linux kernel. The mke2fs program (via the mke2fs.conf file) now enables the metadata_csum_seed and orphan_file features by default. The metadata_csum_seed feature is an incompat feature which is first supported in the Linux kernel starting in the 4.4 kernel and e2fsprogs 1.43. Mke2fs now supports the extended option "assume_storage_prezeroed" which causes mke2fs to skip zeroing the journal and inode tables and to mark the inode tables as zeroed. Add support to tune2fs and e2label to set the label and UUID for a mounted file system using a ioctl, which is more reliable than modifying the superblock via writing to the block device. The kernel support for setting the label landed in v5.17, while the support for adding the UUID landed in v6.0. If the ioctls are not supported, tune2fs and e2label will fall back old strategy of directly modifying the superblock. Allow tune2fs to disable the casefold feature after scanning all of the directories do not have the Casefold flag set. Fixes Fix a potential unbalanced mutex unlock when there is a short read while using the bounce buffer when using direct I/O. Performance, Internal Implementation, Development Support etc. Fix various Coverity and compiler warnings. Add the new function ext2fs_xattrs_read_inode() which takes an in-memory inode to avoid needing to reread an inode that was already read into memory. Teach debugfs logdump command the -n option which forces printing a specified number of transactions, even when a block missing a magic number would have stopped the logdump. (This is for debugging journalling problems.) E2fsprogs 1.46.6 (February 1, 2023) Updates/Fixes since v1.46.5: UI and Features Debugfs's ncheck command now allows the inode number to be surrounded by angle brackets, to be consistent with other debugfs commands. Debugfs no longer prints a scary message when debugfs -c (which enables "catastrophic mode") is used. This was intended to allow debugfs to operate on very badly corrupted file systems, but it is now sometimes used to suppress reading the block and inode bitmaps when they are not needed. Resize2fs will round down the requested new file system size to the nearest cluster boundary when resizing bigalloc file systems. Improve error messages issued by badblocks. Fuse2fs now supports an offset=<bytes> option which allows operating on a file system image which is located starting at the specified offset from the beginning of the image. Fixes Pre-v6.2 Linux kernels had long-standing bug in how the extended attribute hash was calculated when there were non-ASCII characters in the xattr name, when the hash would be different depending on whether the C 'char' type was signed or unsigned. To address this bug, starting with e2fsprogs 1.46.6+ and Linux 6.2+, we will accept either the signed or unsigned hash variant, but only set the unsigned hash variant. Since extended attribute names are in practice composed of ASCII characters, other than various tests (such as generic/454), most users will hopefully not notice this change. Avoid triggering udev in dumpe2fs and "resize2fs -P" for file systems with MMP enabled by opening the device read-only when reading the MMP block. Fix MMP handling so it can notice when another writer has modify the MMP block out from under it when stopping a MMP sessions. Fix tune2fs so it will detect another device stealing the MMP sessions while rewriting metadata checksums. E2fsck will now check to make sure the journal inode does not have the encrypt flag set. Fix a deadlock bug in e2fsck's error handler when there are errors trying to write to the file system. Fix a bug where e2fsck could fail when specifying an undo file and an explicit superblock number. Fix e2image so it won't potentially loop forever for certain invalid file systems. Fix resize2fs to honor the E2FSPROGS_FAKE_TIME environment variable. This allows embedded system builders who use resize2fs as part of their image build process to create reproducible images. Fix tune2fs to avoid a crash if the journal replay fails and to make sure its exit status is non-zero if there is some failure. Fix tune2fs, fuse2fs, and debugsfs to update j_tail_sequence when replaying the journal. Add additional bullet-proofing for very badly corrupted file systems. Try avoid UBSAN warnings, null pointer derferences, and other memory bugs. (Addresses CVE-2022-1304) Don't fail when the source directory for mke2fs -d doesn't support extended attributese. Check for and handle malloc() failures when computing the log filename in e2fsck and in the libss library. Fix tune2fs and e2fsck to accept pathames which include '=' characters. Previously arguments to tune2fs and e2fsck which included '=' characters are presumed to be blkid specifiers such as UUID=xxx or LABEL=yyy. If a specifier is both a valid pathname name and blkid tag name specifier, priority is given to a blkid resolved pathname. Improve tune2fs's error messages. Fix a bug in tune2fs which could cause it to crash if device goes off-line just as it being opened. Fix the fsck driver so if it is interrupted while running fsck -N it doesn't end up kllling all processes on the system. Fix a crash in badblocks when the user specifies an overly large number of blocks tested at a time in read/write or nondestructive mode. Update and clarify's chattr's man page and usage message. Fix spelling typo's in a variety of different man pages and comments. Performance, Internal Implementation, Development Support etc. Update to autoconf 2.71. Update flags used to create shared library on Darwin/MacOS. Speed up e2fsck's clonning of multiply-claimed blocks so it is substantially faster on very large file systems. Add tests/fuzz directory with fuzzers from oss-fuzz. Add a Github Actions configuration file so that Github will run CI tests on Linux, Windows and MacOS on a push to the e2fsprogs github repo. Make the mtab parsing in ext2fs_check_mount_point() more careful so it won't get confused when a block device shows up in the mnt_name field for a virtual file system. Fix the libss's Makefile to create the man page directory before trying to install its man page. Fix various Coverity and compiler warnings. Make tests more portable on various different OS's and system configurations (e.g., with SELinux enabled, MacOS, and Windows) Use mallinfo2() instead of mallinfo() where avilable, since mallinfo() is deprecated on newer glibc versions. E2fsck will no longer do a full scan of disconnected directory when trying to print the parent directory, which is pointless and can slow down e2fsck if there are a large number of disconnected directories. Debugfs will now print the extended attribute's e_hash field. Fix the setup-schroot script to work on non-Linux platforms. Fix ext2fs_compare_generic_bmap() so it correctly compares all of the bits in the bitmap, and so that it works correctly when comparing a bitarray bitmap with a rbtree-based bitmap. (Fortunately, none of the programs in e2fsprogs uses bitmap comparison functions.) Fix memory leaks on error paths. Add support for the configure option --enable-largefile so that e2fsprogs can utilize largefile support for the MUSL C library. Add an note that the dict library code has been modified, as required by the Kazlib license. Synchronized changes from Android's AOSP e2fsprogs tree. Updated config.guess and config.sub with newer versions from the FSF. Add Friulian translation. Update Chinese, Czech, Dutch, French, German, Malay, Polish, Serbian, Spanish, Swedish, and Ukrainian translations.
Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- lfs/e2fsprogs | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/lfs/e2fsprogs b/lfs/e2fsprogs index 4758b5401..8db1c215c 100644 --- a/lfs/e2fsprogs +++ b/lfs/e2fsprogs @@ -24,7 +24,7 @@
include Config
-VER = 1.46.5 +VER = 1.47.0
THISAPP = e2fsprogs-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 8d8c02e891c464782a7cff518c41d793fc73366b57e17d80ffc5afd96e6144e354290e667e9710509a9dde4e5dab7e7185c5bf084c5bfd26219f05e5e92e0830 +$(DL_FILE)_BLAKE2 = 84f58b05a9f0e14e1a66c6e5171ff23b022f51c4e9a02d4d6d1d26c91909f3c7ec9c9f0462663a4457b4479043774502b8891f691e58a61f4ef6bf9ba33f33aa
install : $(TARGET)
- Update from version 6.1 to 6.2 - Update of rootfile not required - Changelog Version 6.2 - February 21, 2023 * Feature: link down event statistics (no option) * Feature: JSON output for coalesce (-c) * Feature: new link modes (no option) * Feature: JSON output for ring (-g) * Feature: netlink handler for RSS get (-x) * Fix: fix boolean value output in JSON output * Fix: fix build errors and warnings
Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- lfs/ethtool | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/lfs/ethtool b/lfs/ethtool index 2b13cb424..f2b996fa9 100644 --- a/lfs/ethtool +++ b/lfs/ethtool @@ -24,7 +24,7 @@
include Config
-VER = 6.1 +VER = 6.2
THISAPP = ethtool-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 002a4edffda42520d77e8f0c27adf909090823f1a08689b67fc7c75de3048bdc9c94d7d32973bd17562d7dbf295479e796c2529b5db66b5fce42a2ede5851cd6 +$(DL_FILE)_BLAKE2 = b3fa2571b1efef3b686eb4f20b33e6cc32bdb8cff5f2e642454ca3d41c427b1953df7b07e5ac8ef149f8b4be614210e05e593233655e5fe317c48630b20b68e8
install : $(TARGET)
- Update from version 3.7.7 to 3.8.0 - Update of rootfile - Changelog Version 3.8.0 (unreleased 2023-02-09) -- libgnutls: Fix a Bleichenbacher oracle in the TLS RSA key exchange. Reported by Hubert Kario (#1050). Fix developed by Alexander Sosedkin. [GNUTLS-SA-2020-07-14, CVSS: medium] [CVE-2023-0361] -- libgnutls: C++ library is now header only. All definitions from gnutlsxx.c have been moved into gnutlsxx.h. Users of the C++ interface have two options: 1. include gnutlsxx.h in their application and link against the C library. (default) 2. include gnutlsxx.h in their application, compile with GNUTLS_GNUTLSXX_NO_HEADERONLY macro defined and link against the C++ library. -- libgnutls: GNUTLS_NO_STATUS_REQUEST flag and %NO_STATUS_REQUEST priority modifier have been added to allow disabling of the status_request TLS extension in the client side. -- libgnutls: TLS heartbeat is disabled by default. The heartbeat extension in TLS (RFC 6520) is not widely used given other implementations dropped support for it. To enable back support for it, supply --enable-heartbeat-support to configure script. -- libgnutls: SRP authentication is now disabled by default. It is disabled because the SRP authentication in TLS is not up to date with the latest TLS standards and its ciphersuites are based on the CBC mode and SHA-1. To enable it back, supply --enable-srp-authentication option to configure script. -- libgnutls: All code has been indented using "indent -ppi1 -linux". CI/CD has been adjusted to catch regressions. This is implemented through devel/indent-gnutls, devel/indent-maybe and .gitlab-ci.yml’s commit-check. You may run devel/indent-gnutls to fix any indentation issues if you make code modifications. -- guile: Guile-bindings removed. They have been extracted into a separate project to reduce complexity and to simplify maintenance, see https://gitlab.com/gnutls/guile/. -- minitasn1: Upgraded to libtasn1 version 4.19. -- API and ABI modifications: GNUTLS_NO_STATUS_REQUEST: New flag GNUTLS_SRTP_AEAD_AES_128_GCM: New gnutls_srtp_profile_t enum member GNUTLS_SRTP_AEAD_AES_256_GCM: New gnutls_srtp_profile_t enum member Version 3.7.8 (released 2022-09-27) -- libgnutls: In FIPS140 mode, RSA signature verification is an approved operation if the key has modulus with known sizes (1024, 1280, 1536, and 1792 bits), in addition to any modulus sizes larger than 2048 bits, according to SP800-131A rev2. -- libgnutls: gnutls_session_channel_binding performs additional checks when GNUTLS_CB_TLS_EXPORTER is requested. According to RFC9622 4.2, the "tls-exporter" channel binding is only usable when the handshake is bound to a unique master secret (i.e., either TLS 1.3 or extended master secret extension is negotiated). Otherwise the function now returns error. -- libgnutls: usage of the following functions, which are designed to loosen restrictions imposed by allowlisting mode of configuration, has been additionally restricted. Invoking them is now only allowed if system-wide TLS priority string has not been initialized yet: gnutls_digest_set_secure gnutls_sign_set_secure gnutls_sign_set_secure_for_certs gnutls_protocol_set_enabled -- API and ABI modifications: No changes since last version.
Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- config/rootfiles/common/gnutls | 8 +++----- lfs/gnutls | 6 +++--- 2 files changed, 6 insertions(+), 8 deletions(-)
diff --git a/config/rootfiles/common/gnutls b/config/rootfiles/common/gnutls index 77ce36c88..508596906 100644 --- a/config/rootfiles/common/gnutls +++ b/config/rootfiles/common/gnutls @@ -5,7 +5,6 @@ usr/bin/gnutls-cli-debug usr/bin/gnutls-serv usr/bin/ocsptool usr/bin/psktool -usr/bin/srptool #usr/include/gnutls #usr/include/gnutls/abstract.h #usr/include/gnutls/compat.h @@ -33,7 +32,7 @@ usr/lib/libgnutls-dane.so.0.4.1 #usr/lib/libgnutls.la #usr/lib/libgnutls.so usr/lib/libgnutls.so.30 -usr/lib/libgnutls.so.30.34.1 +usr/lib/libgnutls.so.30.35.0 #usr/lib/libgnutlsxx.la #usr/lib/libgnutlsxx.so usr/lib/libgnutlsxx.so.30 @@ -53,7 +52,6 @@ usr/lib/libgnutlsxx.so.30.0.0 #usr/share/doc/gnutls/pkcs11-vision.png #usr/share/info/gnutls-client-server-use-case.png #usr/share/info/gnutls-crypto-layers.png -#usr/share/info/gnutls-guile.info #usr/share/info/gnutls-handshake-sequence.png #usr/share/info/gnutls-handshake-state.png #usr/share/info/gnutls-internals.png @@ -77,10 +75,12 @@ usr/lib/libgnutlsxx.so.30.0.0 #usr/share/locale/fi/LC_MESSAGES/gnutls.mo #usr/share/locale/fr/LC_MESSAGES/gnutls.mo #usr/share/locale/it/LC_MESSAGES/gnutls.mo +#usr/share/locale/ka/LC_MESSAGES/gnutls.mo #usr/share/locale/ms/LC_MESSAGES/gnutls.mo #usr/share/locale/nl/LC_MESSAGES/gnutls.mo #usr/share/locale/pl/LC_MESSAGES/gnutls.mo #usr/share/locale/pt_BR/LC_MESSAGES/gnutls.mo +#usr/share/locale/ro/LC_MESSAGES/gnutls.mo #usr/share/locale/sr/LC_MESSAGES/gnutls.mo #usr/share/locale/sv/LC_MESSAGES/gnutls.mo #usr/share/locale/uk/LC_MESSAGES/gnutls.mo @@ -94,7 +94,6 @@ usr/lib/libgnutlsxx.so.30.0.0 #usr/share/man/man1/ocsptool.1 #usr/share/man/man1/p11tool.1 #usr/share/man/man1/psktool.1 -#usr/share/man/man1/srptool.1 #usr/share/man/man1/tpmtool.1 #usr/share/man/man3/dane_cert_type_name.3 #usr/share/man/man3/dane_cert_usage_name.3 @@ -1280,4 +1279,3 @@ usr/lib/libgnutlsxx.so.30.0.0 #usr/share/man/man3/gnutls_x509_trust_list_verify_crt.3 #usr/share/man/man3/gnutls_x509_trust_list_verify_crt2.3 #usr/share/man/man3/gnutls_x509_trust_list_verify_named_crt.3 - diff --git a/lfs/gnutls b/lfs/gnutls index 089b37719..7336528f6 100644 --- a/lfs/gnutls +++ b/lfs/gnutls @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2022 IPFire Team info@ipfire.org # +# Copyright (C) 2007-2023 IPFire Team info@ipfire.org # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@
include Config
-VER = 3.7.7 +VER = 3.8.0
THISAPP = gnutls-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = a66037ecc6da660ff12949f50012840263c2e0b174079e41b62a2d884f060cee56f0c64a2815d07321a54b08cce016d2b4c8f0e059636c1ab5f7db9c8d64c7c6 +$(DL_FILE)_BLAKE2 = 64784e9c0ac4dcab2c9e90d7d17d0bd8a0021224be285c12a53673f3a52aa3f189152b1b0b4aaae5a8fb41951361af1fd04a5b535774c4a26c26eb895519af40
install : $(TARGET)
- Update from version 6.0.0 to 7.0.1 - Update of rootfile - Changelog Overview of changes leading to 7.0.1 - Various build and bug fixes. Overview of changes leading to 7.0.0 - New hb-paint API that is designed mainly to paint “COLRv1” glyphs, but can be also used as a unified API to paint any of the glyph representations supported by HarfBuzz (B/W outlines, color layers, or color bitmaps). (Behdad Esfahbod, Matthias Clasen) - New hb-cairo API for integrating with cairo graphics library. This is provided as a separate harfbuzz-cairo library. (Behdad Esfahbod, Matthias Clasen) - Support for instancing “CFF2” table. (Behdad Esfahbod) - Support font emboldening. (Behdad Esfahbod) - Support feature ranges with AAT shaping. (Behdad Esfahbod) - Experimental support to cubic curves in “glyf” table, see https://github.com/harfbuzz/boring-expansion-spec/blob/main/glyf1-cubicOutli... for spec. (Behdad Esfahbod) - Various subsetter improvements. (Garret Rieger, Qunxin Liu, Behdad Esfahbod) - Various documentation improvements. (Behdad Esfahbod, Matthias Clasen, Khaled Hosny) - Significantly reduced memory use during shaping. (Behdad Esfahbod) - Greatly reduced memory use during subsetting “CFF” table. (Behdad Esfahbod) - New command line utility, hb-info, for querying various font information. (Behdad Esfahbod, Matthias Clasen) - New hb-shape/hb-view options: --glyphs, --color-palette, --font-bold, --font-grade, and --named-instance. (Behdad Esfahbod) - Miscellaneous fixes and improvements. (Amir Masoud Abdol, Andres Salomon, Behdad Esfahbod, Chun-wei Fan, Garret Rieger, Jens Kutilek, Khaled Hosny, Konstantin Käfer, Matthias Clasen, Nirbheek Chauhan, Pedro J. Estébanez, Qunxin Liu, Sergei Trofimovich) - New API: +HB_FONT_NO_VAR_NAMED_INSTANCE +HB_PAINT_IMAGE_FORMAT_BGRA +HB_PAINT_IMAGE_FORMAT_PNG +HB_PAINT_IMAGE_FORMAT_SVG +hb_cairo_font_face_create_for_face +hb_cairo_font_face_create_for_font +hb_cairo_font_face_get_face +hb_cairo_font_face_get_font +hb_cairo_font_face_get_scale_factor +hb_cairo_font_face_set_font_init_func +hb_cairo_font_face_set_scale_factor +hb_cairo_font_init_func_t +hb_cairo_glyphs_from_buffer +hb_cairo_scaled_font_get_font +hb_color_line_get_color_stops +hb_color_line_get_color_stops_func_t +hb_color_line_get_extend +hb_color_line_get_extend_func_t +hb_color_line_t +hb_color_stop_t +hb_draw_funcs_get_empty +hb_draw_funcs_get_user_data +hb_draw_funcs_set_user_data +hb_face_collect_nominal_glyph_mapping +hb_font_draw_glyph +hb_font_draw_glyph_func_t +hb_font_funcs_set_draw_glyph_func +hb_font_funcs_set_paint_glyph_func +hb_font_get_synthetic_bold +hb_font_get_var_named_instance +hb_font_paint_glyph +hb_font_paint_glyph_func_t +hb_font_set_synthetic_bold +hb_map_keys +hb_map_next +hb_map_update +hb_map_values +hb_ot_color_glyph_has_paint +hb_ot_color_has_paint +hb_ot_layout_script_select_language2 +hb_ot_name_id_predefined_t +hb_paint_color +hb_paint_color_func_t +hb_paint_composite_mode_t +hb_paint_custom_palette_color +hb_paint_custom_palette_color_func_t +hb_paint_extend_t +hb_paint_funcs_create +hb_paint_funcs_destroy +hb_paint_funcs_get_empty +hb_paint_funcs_get_user_data +hb_paint_funcs_is_immutable +hb_paint_funcs_make_immutable +hb_paint_funcs_reference +hb_paint_funcs_set_color_func +hb_paint_funcs_set_custom_palette_color_func +hb_paint_funcs_set_image_func +hb_paint_funcs_set_linear_gradient_func +hb_paint_funcs_set_pop_clip_func +hb_paint_funcs_set_pop_group_func +hb_paint_funcs_set_pop_transform_func +hb_paint_funcs_set_push_clip_glyph_func +hb_paint_funcs_set_push_clip_rectangle_func +hb_paint_funcs_set_push_group_func +hb_paint_funcs_set_push_transform_func +hb_paint_funcs_set_radial_gradient_func +hb_paint_funcs_set_sweep_gradient_func +hb_paint_funcs_set_user_data +hb_paint_funcs_t +hb_paint_image +hb_paint_image_func_t +hb_paint_linear_gradient +hb_paint_linear_gradient_func_t +hb_paint_pop_clip +hb_paint_pop_clip_func_t +hb_paint_pop_group +hb_paint_pop_group_func_t +hb_paint_pop_transform +hb_paint_pop_transform_func_t +hb_paint_push_clip_glyph +hb_paint_push_clip_glyph_func_t +hb_paint_push_clip_rectangle +hb_paint_push_clip_rectangle_func_t +hb_paint_push_group +hb_paint_push_group_func_t +hb_paint_push_transform +hb_paint_push_transform_func_t +hb_paint_radial_gradient +hb_paint_radial_gradient_func_t +hb_paint_sweep_gradient +hb_paint_sweep_gradient_func_t +hb_set_is_inverted +hb_subset_input_keep_everything - Deprecated API: +hb_font_funcs_set_glyph_shape_func +hb_font_get_glyph_shape_func_t +hb_font_get_glyph_shape
Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- config/rootfiles/common/harfbuzz | 18 ++++++++++++++++-- lfs/harfbuzz | 6 +++--- 2 files changed, 19 insertions(+), 5 deletions(-)
diff --git a/config/rootfiles/common/harfbuzz b/config/rootfiles/common/harfbuzz index 7da247be0..b18e30a18 100644 --- a/config/rootfiles/common/harfbuzz +++ b/config/rootfiles/common/harfbuzz @@ -1,3 +1,4 @@ +#usr/bin/hb-info #usr/bin/hb-ot-shape-closure #usr/bin/hb-shape #usr/bin/hb-subset @@ -7,6 +8,7 @@ #usr/include/harfbuzz/hb-aat.h #usr/include/harfbuzz/hb-blob.h #usr/include/harfbuzz/hb-buffer.h +#usr/include/harfbuzz/hb-cairo.h #usr/include/harfbuzz/hb-common.h #usr/include/harfbuzz/hb-cplusplus.hh #usr/include/harfbuzz/hb-deprecated.h @@ -27,6 +29,7 @@ #usr/include/harfbuzz/hb-ot-shape.h #usr/include/harfbuzz/hb-ot-var.h #usr/include/harfbuzz/hb-ot.h +#usr/include/harfbuzz/hb-paint.h #usr/include/harfbuzz/hb-set.h #usr/include/harfbuzz/hb-shape-plan.h #usr/include/harfbuzz/hb-shape.h @@ -38,14 +41,19 @@ #usr/include/harfbuzz/hb.h #usr/lib/cmake/harfbuzz #usr/lib/cmake/harfbuzz/harfbuzz-config.cmake +#usr/lib/libharfbuzz-cairo.la +#usr/lib/libharfbuzz-cairo.so +usr/lib/libharfbuzz-cairo.so.0 +usr/lib/libharfbuzz-cairo.so.0.60701.0 #usr/lib/libharfbuzz-subset.la #usr/lib/libharfbuzz-subset.so usr/lib/libharfbuzz-subset.so.0 -usr/lib/libharfbuzz-subset.so.0.60000.0 +usr/lib/libharfbuzz-subset.so.0.60701.0 #usr/lib/libharfbuzz.la #usr/lib/libharfbuzz.so usr/lib/libharfbuzz.so.0 -usr/lib/libharfbuzz.so.0.60000.0 +usr/lib/libharfbuzz.so.0.60701.0 +#usr/lib/pkgconfig/harfbuzz-cairo.pc #usr/lib/pkgconfig/harfbuzz-subset.pc #usr/lib/pkgconfig/harfbuzz.pc #usr/share/gtk-doc/html/harfbuzz @@ -118,6 +126,7 @@ usr/lib/libharfbuzz.so.0.60000.0 #usr/share/gtk-doc/html/harfbuzz/api-index-5-0-0.html #usr/share/gtk-doc/html/harfbuzz/api-index-5-3-0.html #usr/share/gtk-doc/html/harfbuzz/api-index-6-0-0.html +#usr/share/gtk-doc/html/harfbuzz/api-index-7-0-0.html #usr/share/gtk-doc/html/harfbuzz/api-index-full.html #usr/share/gtk-doc/html/harfbuzz/apple-advanced-typography-api.html #usr/share/gtk-doc/html/harfbuzz/buffers-language-script-and-direction.html @@ -131,16 +140,19 @@ usr/lib/libharfbuzz.so.0.60000.0 #usr/share/gtk-doc/html/harfbuzz/fonts-and-faces-variable.html #usr/share/gtk-doc/html/harfbuzz/fonts-and-faces.html #usr/share/gtk-doc/html/harfbuzz/getting-started.html +#usr/share/gtk-doc/html/harfbuzz/glyphs-and-rendering.html #usr/share/gtk-doc/html/harfbuzz/graphite-shaping.html #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-aat-layout.html #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-blob.html #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-buffer.html +#usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-cairo.html #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-common.html #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-coretext.html #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-deprecated.html #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-directwrite.html #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-draw.html #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-face.html +#usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-features.html #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-font.html #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-ft.html #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-gdi.html @@ -157,6 +169,7 @@ usr/lib/libharfbuzz.so.0.60000.0 #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-ot-name.html #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-ot-shape.html #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-ot-var.html +#usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-paint.html #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-set.html #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-shape-plan.html #usr/share/gtk-doc/html/harfbuzz/harfbuzz-hb-shape.html @@ -170,6 +183,7 @@ usr/lib/libharfbuzz.so.0.60000.0 #usr/share/gtk-doc/html/harfbuzz/index.html #usr/share/gtk-doc/html/harfbuzz/install-harfbuzz.html #usr/share/gtk-doc/html/harfbuzz/integration-api.html +#usr/share/gtk-doc/html/harfbuzz/integration-cairo.html #usr/share/gtk-doc/html/harfbuzz/integration-coretext.html #usr/share/gtk-doc/html/harfbuzz/integration-freetype.html #usr/share/gtk-doc/html/harfbuzz/integration-icu.html diff --git a/lfs/harfbuzz b/lfs/harfbuzz index c547b203c..17186b203 100644 --- a/lfs/harfbuzz +++ b/lfs/harfbuzz @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2022 IPFire Team info@ipfire.org # +# Copyright (C) 2007-2023 IPFire Team info@ipfire.org # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@
include Config
-VER = 6.0.0 +VER = 7.0.1
THISAPP = harfbuzz-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = bb08f90cf9540a076ec2fe5498658a0e5f963537ebd98fce271af9070d0fc7178346bf56c600720d433c9e3a403f67ec3ac898abeb1da12697ad22980ecf5204 +$(DL_FILE)_BLAKE2 = 4a8844093b627b8d5d2e6f7b735781334f2715fe5146bb135ba19fb5a38f2a38248028b447d985fbde4505cd66721766a727fa7fe1300efd31259c7cafb8b6f2
install : $(TARGET)
- Update from version 6.1.0 to 6.2.0 - Update of rootfile - Changelog No Changelog in website or in source tarball. Only source of changes is the git commits https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/log/
Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- config/rootfiles/common/iproute2 | 1 + lfs/iproute2 | 6 +++--- 2 files changed, 4 insertions(+), 3 deletions(-)
diff --git a/config/rootfiles/common/iproute2 b/config/rootfiles/common/iproute2 index 5f6058904..420a33c85 100644 --- a/config/rootfiles/common/iproute2 +++ b/config/rootfiles/common/iproute2 @@ -44,6 +44,7 @@ usr/share/bash-completion/completions/tc #usr/share/man/man8/bridge.8 #usr/share/man/man8/ctstat.8 #usr/share/man/man8/dcb-app.8 +#usr/share/man/man8/dcb-apptrust.8 #usr/share/man/man8/dcb-buffer.8 #usr/share/man/man8/dcb-dcbx.8 #usr/share/man/man8/dcb-ets.8 diff --git a/lfs/iproute2 b/lfs/iproute2 index 62d3483d9..f9e24fd09 100644 --- a/lfs/iproute2 +++ b/lfs/iproute2 @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2022 IPFire Team info@ipfire.org # +# Copyright (C) 2007-2023 IPFire Team info@ipfire.org # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@
include Config
-VER = 6.1.0 +VER = 6.2.0
THISAPP = iproute2-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 38249703e0a9ba74405aebdb97560b286deefa959a9c3f0e0893962b6966f5da2da46199dda6a0f9584bb473f8ba529440643d97f66e9b7619df029e3091d163 +$(DL_FILE)_BLAKE2 = d3bfaecf33ffc7861e983e8db0d6a63f4767b6c01b5346e88f51c65ed6279c4be29412ed18b8f98ed54d60a84455b73fe7745142fd0fc0f3e327a29e8bcce986
install : $(TARGET)
- Update from version 0.13.2 to 0.14.0 - Update of rootfile - Changelog 2023-02-14 Userspace RCU 0.14.0 * Fix: urcu-bp: only teardown call-rcu worker in destructor * Fix: rculfhash: urcu_die() takes positive error value * Fix: call_rcu: teardown default call_rcu worker on application exit * Fix: join worker thread in call_rcu_data_free * Docs: clarify grace period polling API * Document grace period polling in rcu-api.md * Implement poll rcu stress test in rcutorture * urcu-memb,mb,signal: Implement grace period polling * Fix: auto-resize hash table destroy deadlock * Fix building on MSYS2 * rculfhash: Include rculfhash-internal.h from local directory * Remove "Darwin" from "should also work on list" * Merge branch 'adah1972-improve-md' * Add semicolons at the end of function prototypes * Wrap a file name in backticks * Wrap command-line options in backticks * Fix a wrong format * Wrap URLs in angle brackets * Fix Markdown issues * Fix: Always check pthread_create for failures * Disable signals in URCU background threads * Fix: futex.h: include headers outside extern C * Fix: add missing unused attribute to _rcu_dereference * Fix: change method used by _rcu_dereference to strip type constness * Fix: remove type constness in URCU_FORCE_CAST's C++ version * Move extern "C" down in include/urcu/urcu-bp.h * fix: ifdef linux specific cpu count compat * Add unit tests for possible_cpus_array_len * fix: sysconf(_SC_NPROCESSORS_CONF) can be less than max cpu id * Fix: revise obsolete command in README.md * Fix: workqueue: remove unused variable "ret" * Fix: urcu-qsbr: futex wait: handle spurious futex wakeups * Fix: urcu: futex wait: handle spurious futex wakeups * Fix: urcu-wait: futex wait: handle spurious futex wakeups * Fix: defer_rcu: futex wait: handle spurious futex wakeups * Fix: call_rcu: futex wait: handle spurious futex wakeups * Fix: workqueue: futex wait: handle spurious futex wakeups * Fix: Use %lu rather than %ld to print count * Update ABI definition files * Bump version current and age * alpha: allocate membarrier system call number * Bump version to 0.14.0-pre * Improved test framework * rculfhash: introduce cds_lfht_node_init_deleted * Fix: changelog: v0.13.0 was released in 2021 * cleanup: i386 arch detection * fix: properly detect 'cmpxchg' on x86-32 * fix: use urcu-tls compat with c++ compiler * Fix typo * fix: remove autoconf features default value in help message * fix: add missing pkgconfig file for memb flavour lib * Cleanup: Tests: Remove useless pre-C99 compatibility code from tap.h * Document C99 and C++11 requirement in README.md * Always use '__thread' for Thread local storage except on MSVC * Fix: powerpc32: transparent unions alter calling convention * fix: don't use C++ thread_local on MacOs * wfcqueue API: implement overloaded wrappers with templates * wfcqueue: combine C++ API cds_wfcq_head_cast with overloading * wfstack C++ API: implement overloaded wrappers with templates * lfstack C++ API: implement overloaded wrappers with templates * wfstack: combine C++ API cds_wfs_stack_cast with overloading * lfstack: combine C++ API cds_lfs_stack_cast with overloading * fix: test_build tap plan * Test C++ build of list head init * Fix order of initializers in CDS_LIST_HEAD_INIT * unit tests: test wfcqueue, wfstack, lfstack empty check functions in C++ * wfcqueue: implement C++ API based on function overloading * wfstack: implement C++ API based on function overloading * lfstack: implement C++ API based on function overloading * Fix tap.h: remove extra semicolon in pass/fail macros * Add C++ build tests * Build and run regression and unit tests as C++ programs * Add --enable-Werror configure switch * Add `urcu_posix_assert()` as `assert()` replacement * Rename `urcu_assert()` to `urcu_assert_debug()` * cleanup: spelling fixes in comments * Make temporary variable in _rcu_dereference non-const * (tls-ie2) Fix: x86 and s390: uatomic __hp() macro C++ support * Fix: x86 and s390: uatomic __hp() macro clang support * Fix: x86 and s390 uatomic: __hp() macro warning with gcc 11
Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- config/rootfiles/common/liburcu | 18 ++++++++++-------- lfs/liburcu | 6 +++--- 2 files changed, 13 insertions(+), 11 deletions(-)
diff --git a/config/rootfiles/common/liburcu b/config/rootfiles/common/liburcu index c67695c8d..029fc6f50 100644 --- a/config/rootfiles/common/liburcu +++ b/config/rootfiles/common/liburcu @@ -24,6 +24,7 @@ #usr/include/urcu/arch/sparc64.h #usr/include/urcu/arch/tile.h #usr/include/urcu/arch/x86.h +#usr/include/urcu/assert.h #usr/include/urcu/call-rcu.h #usr/include/urcu/cds.h #usr/include/urcu/compiler.h @@ -92,6 +93,7 @@ #usr/include/urcu/urcu-futex.h #usr/include/urcu/urcu-mb.h #usr/include/urcu/urcu-memb.h +#usr/include/urcu/urcu-poll.h #usr/include/urcu/urcu-qsbr.h #usr/include/urcu/urcu-signal.h #usr/include/urcu/urcu.h @@ -102,35 +104,35 @@ #usr/lib/liburcu-bp.la #usr/lib/liburcu-bp.so usr/lib/liburcu-bp.so.8 -usr/lib/liburcu-bp.so.8.0.0 +usr/lib/liburcu-bp.so.8.1.0 #usr/lib/liburcu-cds.la #usr/lib/liburcu-cds.so usr/lib/liburcu-cds.so.8 -usr/lib/liburcu-cds.so.8.0.0 +usr/lib/liburcu-cds.so.8.1.0 #usr/lib/liburcu-common.la #usr/lib/liburcu-common.so usr/lib/liburcu-common.so.8 -usr/lib/liburcu-common.so.8.0.0 +usr/lib/liburcu-common.so.8.1.0 #usr/lib/liburcu-mb.la #usr/lib/liburcu-mb.so usr/lib/liburcu-mb.so.8 -usr/lib/liburcu-mb.so.8.0.0 +usr/lib/liburcu-mb.so.8.1.0 #usr/lib/liburcu-memb.la #usr/lib/liburcu-memb.so usr/lib/liburcu-memb.so.8 -usr/lib/liburcu-memb.so.8.0.0 +usr/lib/liburcu-memb.so.8.1.0 #usr/lib/liburcu-qsbr.la #usr/lib/liburcu-qsbr.so usr/lib/liburcu-qsbr.so.8 -usr/lib/liburcu-qsbr.so.8.0.0 +usr/lib/liburcu-qsbr.so.8.1.0 #usr/lib/liburcu-signal.la #usr/lib/liburcu-signal.so usr/lib/liburcu-signal.so.8 -usr/lib/liburcu-signal.so.8.0.0 +usr/lib/liburcu-signal.so.8.1.0 #usr/lib/liburcu.la #usr/lib/liburcu.so usr/lib/liburcu.so.8 -usr/lib/liburcu.so.8.0.0 +usr/lib/liburcu.so.8.1.0 #usr/lib/pkgconfig/liburcu-bp.pc #usr/lib/pkgconfig/liburcu-cds.pc #usr/lib/pkgconfig/liburcu-mb.pc diff --git a/lfs/liburcu b/lfs/liburcu index 5b1d6fd45..6825b50a6 100644 --- a/lfs/liburcu +++ b/lfs/liburcu @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team info@ipfire.org # +# Copyright (C) 2007-2023 IPFire Team info@ipfire.org # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@
include Config
-VER = 0.13.2 +VER = 0.14.0
THISAPP = userspace-rcu-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -41,7 +41,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 6d502e0035b03df262c917ba70f7442e2bd81369091b2c521fe5c32f31ed2ef7404070759f3a8910b767153e05d28e354d5e5ece2a3ba17e4a31dd7db3e1924f +$(DL_FILE)_BLAKE2 = ba9fa4c6dec693d2616234187db531f00fc0ade65f7e2a57182d9441728ddfa6f3e9d4544b824ca5edf7c027a43c9231d998a309c01f4bbab1eeefe856344f77
install : $(TARGET)
- Update from version 0.9.29 to 0.9.30 - Update of rootfile not required - The original git repo where the lmdb-LMDB file was obtained from is marked as a read only mirror of the official repo on openldap.org Going to opemnldap.org then points you to https://git.openldap.org/openldap/openldap for the downloads, which also has a newer version of lmdb than the mirror site. - Therefore I have changed over to that location for the source tarball which requires the name change to openldap-LMDB for the file. Also changed to bz2 version. - Changelog LMDB 0.9.30 Release (2023/02/08) ITS#9806 - LMDB page_split: key threshold depends on page size ITS#9916 - avoid gcc optimization bug on sparc64 linux ITS#9919 - Mark infrequently used functions as cold ITS#9723 - clear C_EOF on cursor with MDB_FIRST_DUP ITS#9030 - Use sys/cachectl.h rather than asm/cachectl.h on mips
Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- lfs/lmdb | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-)
diff --git a/lfs/lmdb b/lfs/lmdb index 919dfb2fc..81a295b4a 100644 --- a/lfs/lmdb +++ b/lfs/lmdb @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2020 IPFire Team info@ipfire.org # +# Copyright (C) 2007-2023 IPFire Team info@ipfire.org # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,10 +24,10 @@
include Config
-VER = 0.9.29 +VER = 0.9.30
-THISAPP = lmdb-LMDB_$(VER) -DL_FILE = $(THISAPP).tar.gz +THISAPP = openldap-LMDB_$(VER) +DL_FILE = $(THISAPP).tar.bz2 DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 3f2a48785dd62921af79e0f10b86438085d86f8013f667dcf2f6177535baee26bba74c6a8023e47c6179c8a6be8fd63cf575b30e216b5669de2d58e69757bd1f +$(DL_FILE)_BLAKE2 = 849d40187dc3aaddcd118cf6db28a9807854d4b5b34a365f6e076ccccd556470f117933e3d29cf2678368db2f0c9d264e033a27de310f036e1a65f04ed643fa9
install : $(TARGET)
- Update from version 4.4 to 4.4.1 - Update of rootfile not required - Changelog Version 4.4.1 (26 Feb 2023) This release is primarily a bug-fix release. A complete list of bugs fixed in this version is available here: https://sv.gnu.org/bugs/index.php?group=make&report_id=111&fix_relea... * WARNING: Backward-incompatibility! In previous releases it was not well-defined when updates to MAKEFLAGS made inside a makefile would be visible. This release ensures they are visible immediately, even when invoking $(shell ...) functions. Also, command line variable assignments are now always present in MAKEFLAGS, even when parsing makefiles. Implementation provided by Dmitry Goncharov dgoncharov@users.sf.net * New feature: Parallel builds of archives Previously it was not possible to use parallel builds with archives. It is still not possible using the built-in rules, however you can now override the built-in rules with a slightly different set of rules and use parallel builds with archive creation. See the "Dangers When Using Archives" section of the GNU Make manual, and https://savannah.gnu.org/bugs/index.php?14927 * Previously target-specific variables would inherit their "export" capability from parent target-specific variables even if they were marked private. Now private parent target-specific variables have no affect. For more details see https://savannah.gnu.org/bugs/index.php?61463 * Disable FIFO jobserver on GNU/Hurd and Cygwin Experimentation shows that the new FIFO-based jobserver doesn't work well on GNU/Hurd or Cygwin: revert these systems to use the pipe-based jobserver. * Updates to allow building on OS/2 Provided by KO Myung-Hun komh78@gmail.com * New platform: GNU Make is supported on z/OS Thanks to Igor Todorovski itodorov@ca.ibm.com for the patches and testing assistance.
Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- lfs/make | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/lfs/make b/lfs/make index feaeab658..c6684ac75 100644 --- a/lfs/make +++ b/lfs/make @@ -26,14 +26,14 @@ include Config
SUMMARY = GNU make
-VER = 4.4 +VER = 4.4.1
THISAPP = make-$(VER) DL_FILE = $(THISAPP).tar.gz DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) PROG = make -PAK_VER = 6 +PAK_VER = 7
DEPS =
@@ -59,7 +59,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 5b8a2fcd7610c33347c2e552fdc4f2698c9a4c468de588c9687cd11d15f120a37768bcd521231adf32359e3b48b27ab7b142746fd18b1a8d15578d34344f487e +$(DL_FILE)_BLAKE2 = 09a4ad8060259e36854b525ab610fd317a86f4926e44e3ab8adba75dccc8d4b445df9dd25ccfb4c25a54bc0e98238a9127e36401d74cbc3503a329eadcdf4995
install : $(TARGET)
- Update from version 1.50.6 to 1.50.13 - Update of rootfile - Changelog Overview of changes in 1.50.13, 20-02-2023 - win32: Add back fallback for empty fontsets - win32: Improve DirectWrite support - Fix word segmentation for Japanese - Don't set backspace-deletes-char for math symbols - coretext: Fix a crash - cairo: Apply metrics hinting to underlines too - Treat COLRv1 fonts as color fonts Overview of changes in 1.50.12, 18-11-2022 - Fix weight conversion on MacOS - Update to Unicode 15 - Some introspection annotation fixes - Improve PangoAttrList serialization - Fix char offset calculatiosn in multi-paragraph layouts Overview of changes in 1.50.11, 03-10-2022 - Don't crash for lack of fonts - Avoid a crash in shaping Overview of changes in 1.50.10, 16-09-2022 - Avoid some unnecessary strdups - Fix line height computations with a non-trivial CTM Overview of changes in 1.50.9, 09-08-2022 - Apply show flags to line separators - Fix a thread-safety problem Overview of changes in 1.50.8, 02-07-2022 - Add some properties to fontmap and family - Fix handling of ligature carets in mixed directions Overview of changes in 1.50.7, 14-04-2022 - coretext: Fix the build - editing: Fix moving across paragraph boundaries in rtl - layout: Try harder to survive without fonts - Windows: Register a sans-serif font - Windows: Try harder to load a font
Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- config/rootfiles/common/pango | 6 +++--- lfs/pango | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/config/rootfiles/common/pango b/config/rootfiles/common/pango index 3c0fc91fd..a50610e7c 100644 --- a/config/rootfiles/common/pango +++ b/config/rootfiles/common/pango @@ -41,13 +41,13 @@ usr/bin/pango-view #usr/include/pango-1.0/pango/pangoft2.h #usr/lib/libpango-1.0.so usr/lib/libpango-1.0.so.0 -usr/lib/libpango-1.0.so.0.5000.6 +usr/lib/libpango-1.0.so.0.5000.13 #usr/lib/libpangocairo-1.0.so usr/lib/libpangocairo-1.0.so.0 -usr/lib/libpangocairo-1.0.so.0.5000.6 +usr/lib/libpangocairo-1.0.so.0.5000.13 #usr/lib/libpangoft2-1.0.so usr/lib/libpangoft2-1.0.so.0 -usr/lib/libpangoft2-1.0.so.0.5000.6 +usr/lib/libpangoft2-1.0.so.0.5000.13 #usr/lib/pkgconfig/pango.pc #usr/lib/pkgconfig/pangocairo.pc #usr/lib/pkgconfig/pangofc.pc diff --git a/lfs/pango b/lfs/pango index 759f269ae..19b510059 100644 --- a/lfs/pango +++ b/lfs/pango @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team info@ipfire.org # +# Copyright (C) 2007-2023 IPFire Team info@ipfire.org # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@
include Config
-VER = 1.50.6 +VER = 1.50.13
THISAPP = pango-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 63cad33f5fe5361642edb0e26a11c45e28e23400f29c078079fa9ce4411eca90c67fdd789e8cf9caec0f1d4a6b5d619808d8dcf53447f961b66db17e1bbcdb97 +$(DL_FILE)_BLAKE2 = 8524d5ff478137e6f3795aff8428a8bc864d72338d93c579c039c94eba368526d38f999b7a9b1964e3649d748393dbe2fffaa29a11732df5bd0adff010d79e05
install : $(TARGET)
- Update from version 1.9.12p2 to 1.9.13p2 - Update of rootfile - Changelog What's new in Sudo 1.9.13p2 * Fixed the --enable-static-sudoers option, broken in sudo 1.9.13. GitHub issue #245. * Fixed a potential double-free bug when matching a sudoers rule that contains a per-command chroot directive (CHROOT=dir). This bug was introduced in sudo 1.9.8. What's new in Sudo 1.9.13p1 * Fixed a typo in the configure script that resulted in a line like "]: command not found" in the output. GitHub issue #238. * Corrected the order of the C23 [[noreturn]] attribute in function prototypes. This fixes a build error with GCC 13. GitHub issue #239. * The "check" make target misbehaved when there was more than one version of the UTF-8 C locale in the output of "locale -a". GitHub issue #241. * Removed a dependency on the AC_SYS_YEAR2038 macro in configure.ac. This was added in autoconf 2.72 but sudo's configure.ac only required autoconf 2.70. * Relaxed the autoconf version requirement to version 2.69. What's new in Sudo 1.9.13 * Fixed a bug running relative commands via sudo when "log_subcmds" is enabled. GitHub issue #194. * Fixed a signal handling bug when running sudo commands in a shell script. Signals were not being forwarded to the command when the sudo process was not run in its own process group. * Fixed a bug in cvtsudoers' LDIF parsing when the file ends without a newline and a backslash is the last character of the file. * Fixed a potential use-after-free bug with cvtsudoers filtering. GitHub issue #198. * Added a reminder to the default lecture that the password will not echo. This line is only displayed when the pwfeedback option is disabled. GitHub issue #195. * Fixed potential memory leaks in error paths. GitHub issues #199, #202. * Fixed potential NULL dereferences on memory allocation failure. GitHub issues #204, #211. * Sudo now uses C23-style attributes in function prototypes instead of gcc-style attributes if supported. * Added a new "list" pseudo-command in sudoers to allow a user to list another user's privileges. Previously, only root or a user with the ability to run any command as either root or the target user on the current host could use the -U option. This also includes a fix to the log entry when a user lacks permission to run "sudo -U otheruser -l command". Previously, the logs would indicate that the user tried to run the actual command, now the log entry includes the list operation. * JSON logging now escapes control characters if they happen to appear in the command or environment. * New Albanian translation from translationproject.org. * Regular expressions in sudoers or logsrvd.conf may no longer contain consecutive repetition operators. This is implementation- specific behavior according to POSIX, but some implementations will allocate excessive amounts of memory. This mainly affects the fuzzers. * Sudo now builds AIX-style shared libraries and dynamic shared objects by default instead of svr4-style. This means that the default sudo plugins are now .a (archive) files that contain a .so shared object file instead of bare .so files. This was done to improve compatibility with the AIX Freeware ecosystem, specifically, the AIX Freeware build of OpenSSL. Sudo will still load svr4-style .so plugins and if a .so file is requested, either via sudo.conf or the sudoers file, and only the .a file is present, sudo will convert the path from plugin.so to plugin.a(plugin.so) when loading it. This ensures compatibility with existing configurations. To restore the old, pre-1.9.13 behavior, run configure using the --with-aix-soname=svr4 option. * Sudo no longer checks the ownership and mode of the plugins that it loads. Plugins are configured via either the sudo.conf or sudoers file which are trusted configuration files. These checks suffered from time-of-check vs. time-of-use race conditions and complicate loading plugins that are not simple paths. Ownership and mode checks are still performed when loading the sudo.conf and sudoers files, which do not suffer from race conditions. The sudo.conf "developer_mode" setting is no longer used. * Control characters in sudo log messages and "sudoreplay -l" output are now escaped in octal format. Space characters in the command path are also escaped. Command line arguments that contain spaces are surrounded by single quotes and any literal single quote or backslash characters are escaped with a backslash. This makes it possible to distinguish multiple command line arguments from a single argument that contains spaces. * Improved support for DragonFly BSD which uses a different struct procinfo than either FreeBSD or 4.4BSD. * Fixed a compilation error on Linux arm systems running older kernels that may not define EM_ARM in linux/elf-em.h. GitHub issue #232. * Fixed a compilation error when LDFLAGS contains -Wl,--no-undefined. Sudo will now link using -Wl,--no-undefined by default if possible. GitHub issue #234. * Fixed a bug executing a command with a very long argument vector when "log_subcmds" or "intercept" is enabled on a system where "intercept_type" is set to "trace". GitHub issue #194. * When sudo is configured to run a command in a pseudo-terminal but the standard input is not connected to a terminal, the command will now be run as a background process. This works around a problem running sudo commands in the background from a shell script where changing the terminal to raw mode could interfere with the interactive shell that ran the script. GitHub issue #237. * A missing include file in sudoers is no longer a fatal error unless the error_recovery plugin argument has been set to false.
Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- config/rootfiles/common/sudo | 2 ++ lfs/sudo | 4 ++-- 2 files changed, 4 insertions(+), 2 deletions(-)
diff --git a/config/rootfiles/common/sudo b/config/rootfiles/common/sudo index 43b8f7127..9c8be9974 100644 --- a/config/rootfiles/common/sudo +++ b/config/rootfiles/common/sudo @@ -79,6 +79,7 @@ usr/sbin/visudo #usr/share/locale/ja/LC_MESSAGES/sudo.mo #usr/share/locale/ja/LC_MESSAGES/sudoers.mo #usr/share/locale/ka/LC_MESSAGES/sudo.mo +#usr/share/locale/ka/LC_MESSAGES/sudoers.mo #usr/share/locale/ko/LC_MESSAGES/sudo.mo #usr/share/locale/ko/LC_MESSAGES/sudoers.mo #usr/share/locale/lt/LC_MESSAGES/sudoers.mo @@ -101,6 +102,7 @@ usr/sbin/visudo #usr/share/locale/sk/LC_MESSAGES/sudoers.mo #usr/share/locale/sl/LC_MESSAGES/sudo.mo #usr/share/locale/sl/LC_MESSAGES/sudoers.mo +#usr/share/locale/sq/LC_MESSAGES/sudo.mo #usr/share/locale/sr/LC_MESSAGES/sudo.mo #usr/share/locale/sr/LC_MESSAGES/sudoers.mo #usr/share/locale/sv/LC_MESSAGES/sudo.mo diff --git a/lfs/sudo b/lfs/sudo index ddcddf225..bad193d7c 100644 --- a/lfs/sudo +++ b/lfs/sudo @@ -24,7 +24,7 @@
include Config
-VER = 1.9.12p2 +VER = 1.9.13p2
THISAPP = sudo-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 79eac710b757acae7aa98e6e6f495a475e5236be456e4687fb1441345ee296672ff80a5a60902cffcd257aa81a01fbc3857f3c52e51bb46f56c060fd299e0c05 +$(DL_FILE)_BLAKE2 = a96198e865c644c79b0879e1a39c9dcc5f9db2164d22fe25804805065a78424dd6ed6f9e0995cad2d0809a1a21957c6a059c6bdbd2ebdf26cfdf5488004d9cb4
install : $(TARGET)
- Update from version 6.8 to 7.0.2 - Update of rootfile - Removal of patch which was needed due to inability to build texinfo-6.8 with glibc-2.34 Problem was fixed for building with glibc-2.34 and onwards with texinfo-7.0 - Changelog 7.0.2 (22 January 2023) This is a bug-fix release with minimal changes. * texi2any . do not distribute architecture-dependent files . build fixed on OpenIndiana 11 * info . further fix of recoding of UTF-8 files to ASCII . fix check for presence of man pages on Solaris * install-info . fix build by avoiding function name clash on some platforms . compiler warning re strncat silenced 7.0.1 (30 November 2022) This is a bug-fix release with minimal changes. * texi2any . avoid crashes on empty @image argument and other potential crashes (with "Can't use an undefined value as an ARRAY reference" message) . avoid hang on @ref command inside section command * info . fix recoding of UTF-8 files to ASCII when run in C locale * js . index search fixed for new HTML output . some obsolete files removed from distribution 7.0 (7 November 2022) * texi2any . LaTeX added as an output format, selected with --latex . EPUB 3 added as an output format, selected with --epub3 . reform throughout the code in general . thorough review of character encoding issues . new customization variables involved with character encoding: INPUT_FILE_NAME_ENCODING, OUTPUT_FILE_NAME_ENCODING, DOC_ENCODING_FOR_INPUT_FILE_NAME, DOC_ENCODING_FOR_OUTPUT_FILE_NAME, MESSAGE_ENCODING and COMMAND_LINE_ENCODING . warn if full-text commands (@ref, @footnote, @anchor) appear in @w . new variable NO_TOP_NODE_OUTPUT . IGNORE_BEFORE_SETFILENAME variable removed. former effect is now always on. . HTML output: . use manual_name_html as output directory for split HTML instead of manual_name or manual_name.html . default DOCTYPE declaration changed to plain HTML5 style rather than HTML4 DTD reference . output only the CSS rules that are needed in an output file . remove CSS_LINES variable and add SHOW_BUILTIN_CSS_RULES (custom CSS can still be output using EXTRA_HEAD) . use <code> tag for the output of @t and @verb instead of <tt> . use <abbr> for @acronym instead of <acronym> . link to table of contents from short table of contents only if a table of contents is actually output . prefix classes from @example arguments with `user-' . percent encode URL in @url/@uref, @email, @image and external manual file . new USE_XML_SYNTAX, HTML_ROOT_ELEMENT_ATTRIBUTES and NO_CUSTOM_HTML_ATTRIBUTE variables can be used to output valid XHTML . systematic addition of classes attribute in HTML elements based on the Texinfo @-command names. renaming of class attributes to avoid confusion with @-commands formatting and describe the role in the document rather than the formatting style. . COPIABLE_ANCHORS renamed to COPIABLE_LINKS . do not add a title by default; SHOW_TITLE or NO_TOP_NODE_OUTPUT has to be set . USE_TITLEPAGE_FOR_TITLE is now true by default . L2H variable removed, replaced by HTML_MATH set to `l2h' . rename OVERVIEW_LINK_TO_TOC to SHORT_TOC_LINK_TO_TOC . rename BEFORE_OVERVIEW to BEFORE_SHORT_TOC_LINE . rename AFTER_OVERVIEW to AFTER_SHORT_TOC_LINES . remove PRE_ABOUT, AFTER_ABOUT, and add PROGRAM_NAME_IN_ABOUT . remove KEEP_TOP_EXTERNAL_REF . new variables IGNORE_REF_TO_TOP_NODE_UP, CONVERT_TO_LATEX_IN_MATH, HTMLXREF_MODE and HTMLXREF_FILE . DocBook output: . do not output Top node or text before the first @node or sectioning @-command. NO_TOP_NODE_OUTPUT can be set to false to output Top node for now. . replace @definfocenlose defined @-commands by the argument as-is to be more consistent with printed output . HTML/DocBook output: . USE_NUMERIC_ENTITY changed to mean to use numeric entities instead of named entities. former effect is now always on. . ENABLE_ENCODING_USE_ENTITY variable removed. former effect is now always off. . Info output . quote problematic node names (with :, comma...) by default . new customization variable ASCII_PUNCTUATION to use plain ASCII characters for quotation marks and a few other symbols * texinfo.tex . `@microtype on' uses microtypography in formatting for pdfTeX and LuaTeX . do not ignore @part page immediately following Top node . do `@set txicodevaristt' to get slanted typewriter for @var in code, `@clear txicodevaristt' to use slanted, variable-width roman font for @var everywhere. flag is @set by default, but we may turn this off in the future. . new file doc/texinfo-zh.tex for Texinfo documents in Chinese. new support file doc/txi-zh.tex for Chinese. doc/short-sample-zh.texi is a sample document. * info . better support for index entries containing parentheses . better support for getting bold text etc. when displaying manpages . bug fixed where the first index entry in a file could be ignored . M-C-f closes as well as opens footnotes window . do not crash if run in Brazilian Portuguese locale * Language . @deftype* commands use typewriter font in argument list . new commands @latex, @iflatex, @ifnotlatex for new LaTeX output format . do `@set txidefnamenospace' to omit space after a definition name * Other . build fixed for glibc 2.34
Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- config/rootfiles/common/texinfo | 19 +- lfs/texinfo | 7 +- .../texinfo-6.8-undo-gnulib-nonnul.patch | 186 ------------------ 3 files changed, 17 insertions(+), 195 deletions(-) delete mode 100644 src/patches/texinfo-6.8-undo-gnulib-nonnul.patch
diff --git a/config/rootfiles/common/texinfo b/config/rootfiles/common/texinfo index 13df03542..76ff08310 100644 --- a/config/rootfiles/common/texinfo +++ b/config/rootfiles/common/texinfo @@ -15,6 +15,8 @@ #usr/lib/texinfo/XSParagraph.la #usr/lib/texinfo/XSParagraph.so #usr/share/info/info-stnd.info +#usr/share/info/texi2any_api.info +#usr/share/info/texi2any_internals.info #usr/share/info/texinfo.info #usr/share/info/texinfo.info-1 #usr/share/info/texinfo.info-2 @@ -38,7 +40,10 @@ #usr/share/texinfo/Pod-Simple-Texinfo/Pod/Simple #usr/share/texinfo/Pod-Simple-Texinfo/Pod/Simple/Texinfo.pm #usr/share/texinfo/Texinfo +#usr/share/texinfo/Texinfo/Commands.pm +#usr/share/texinfo/Texinfo/Commands.pod #usr/share/texinfo/Texinfo/Common.pm +#usr/share/texinfo/Texinfo/Config.pm #usr/share/texinfo/Texinfo/Convert #usr/share/texinfo/Texinfo/Convert/Converter.pm #usr/share/texinfo/Texinfo/Convert/DocBook.pm @@ -46,21 +51,21 @@ #usr/share/texinfo/Texinfo/Convert/IXIN.pm #usr/share/texinfo/Texinfo/Convert/IXINSXML.pm #usr/share/texinfo/Texinfo/Convert/Info.pm -#usr/share/texinfo/Texinfo/Convert/Line.pm +#usr/share/texinfo/Texinfo/Convert/LaTeX.pm #usr/share/texinfo/Texinfo/Convert/NodeNameNormalization.pm #usr/share/texinfo/Texinfo/Convert/Paragraph.pm #usr/share/texinfo/Texinfo/Convert/ParagraphNonXS.pm #usr/share/texinfo/Texinfo/Convert/PlainTexinfo.pm #usr/share/texinfo/Texinfo/Convert/Plaintext.pm #usr/share/texinfo/Texinfo/Convert/Texinfo.pm +#usr/share/texinfo/Texinfo/Convert/TexinfoMarkup.pm #usr/share/texinfo/Texinfo/Convert/TexinfoSXML.pm #usr/share/texinfo/Texinfo/Convert/TexinfoXML.pm #usr/share/texinfo/Texinfo/Convert/Text.pm #usr/share/texinfo/Texinfo/Convert/TextContent.pm -#usr/share/texinfo/Texinfo/Convert/UnFilled.pm #usr/share/texinfo/Texinfo/Convert/Unicode.pm +#usr/share/texinfo/Texinfo/Convert/Utils.pm #usr/share/texinfo/Texinfo/Documentlanguages.pm -#usr/share/texinfo/Texinfo/Encoding.pm #usr/share/texinfo/Texinfo/MiscXS.pm #usr/share/texinfo/Texinfo/ModulePath.pm #usr/share/texinfo/Texinfo/Parser.pm @@ -68,18 +73,22 @@ #usr/share/texinfo/Texinfo/Report.pm #usr/share/texinfo/Texinfo/Structuring.pm #usr/share/texinfo/Texinfo/Transformations.pm +#usr/share/texinfo/Texinfo/Translations.pm #usr/share/texinfo/Texinfo/XS #usr/share/texinfo/Texinfo/XS/parsetexi #usr/share/texinfo/Texinfo/XS/parsetexi/Parsetexi.pm #usr/share/texinfo/Texinfo/XSLoader.pm +#usr/share/texinfo/ext +#usr/share/texinfo/ext/epub3.pm +#usr/share/texinfo/ext/latex2html.pm +#usr/share/texinfo/ext/tex4ht.pm #usr/share/texinfo/htmlxref.cnf #usr/share/texinfo/init #usr/share/texinfo/init/book.pm #usr/share/texinfo/init/chm.pm +#usr/share/texinfo/init/documentation_examples.pm #usr/share/texinfo/init/highlight_syntax.pm #usr/share/texinfo/init/html32.pm -#usr/share/texinfo/init/latex2html.pm -#usr/share/texinfo/init/tex4ht.pm #usr/share/texinfo/js #usr/share/texinfo/js/info.css #usr/share/texinfo/js/info.js diff --git a/lfs/texinfo b/lfs/texinfo index 5ee90d0dc..62acc0af5 100644 --- a/lfs/texinfo +++ b/lfs/texinfo @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2021 IPFire Team info@ipfire.org # +# Copyright (C) 2007-2023 IPFire Team info@ipfire.org # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@
include Config
-VER = 6.8 +VER = 7.0.2
THISAPP = texinfo-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -47,7 +47,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 0256dac5ba9c7f171c970644907b763f7a88fd9995111244df0458591aed1a0fe94c76045dde69f9138d65d6f780aae6869bbbc013f58e04ae7c62456b222bbb +$(DL_FILE)_BLAKE2 = 23737cc800392c949add14c1d0a01a294e8c224d958c03325c96d6540dcfae49db5c2d4a8c29310c0603f8ac8477f6ee00a14db4aa6caab317b19e776139e617
install : $(TARGET)
@@ -77,7 +77,6 @@ $(subst %,%_BLAKE2,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) - cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/texinfo-6.8-undo-gnulib-nonnul.patch cd $(DIR_APP) && ./configure --prefix=$(PREFIX) --disable-nls cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install diff --git a/src/patches/texinfo-6.8-undo-gnulib-nonnul.patch b/src/patches/texinfo-6.8-undo-gnulib-nonnul.patch deleted file mode 100644 index 60f2e63b7..000000000 --- a/src/patches/texinfo-6.8-undo-gnulib-nonnul.patch +++ /dev/null @@ -1,186 +0,0 @@ - -Patch by Vitezslav Crhonek vcrhonek@redhat.com -Source: https://src.fedoraproject.org/rpms/texinfo/c/9b2cca4817fa4bd8d520fed05e9560f... - -diff -up texinfo-6.8/gnulib/lib/cdefs.h.orig texinfo-6.8/gnulib/lib/cdefs.h ---- texinfo-6.8/gnulib/lib/cdefs.h.orig 2021-03-11 19:57:53.000000000 +0100 -+++ texinfo-6.8/gnulib/lib/cdefs.h 2021-07-19 12:26:46.985176475 +0200 -@@ -321,15 +321,15 @@ - - /* The nonnull function attribute marks pointer parameters that - must not be NULL. */ --#ifndef __attribute_nonnull__ -+#ifndef __nonnull - # if __GNUC_PREREQ (3,3) || __glibc_has_attribute (__nonnull__) --# define __attribute_nonnull__(params) __attribute__ ((__nonnull__ params)) -+# define __nonnull(params) __attribute__ ((__nonnull__ params)) - # else --# define __attribute_nonnull__(params) -+# define __nonnull(params) - # endif --#endif --#ifndef __nonnull --# define __nonnull(params) __attribute_nonnull__ (params) -+#elif !defined __GLIBC__ -+# undef __nonnull -+# define __nonnull(params) _GL_ATTRIBUTE_NONNULL (params) - #endif - - /* If fortification mode, we warn about unused results of certain -diff -up texinfo-6.8/gnulib/lib/libc-config.h.orig texinfo-6.8/gnulib/lib/libc-config.h ---- texinfo-6.8/gnulib/lib/libc-config.h.orig 2021-03-11 19:57:54.000000000 +0100 -+++ texinfo-6.8/gnulib/lib/libc-config.h 2021-07-19 12:27:58.810590975 +0200 -@@ -33,9 +33,9 @@ - #include <config.h> - - /* On glibc this includes <features.h> and <sys/cdefs.h> and #defines -- _FEATURES_H, __WORDSIZE, and __set_errno. On FreeBSD 11 and -- DragonFlyBSD 5.9 it includes <sys/cdefs.h> which defines __nonnull. -- Elsewhere it is harmless. */ -+ _FEATURES_H, __WORDSIZE, and __set_errno. On FreeBSD 11 it -+ includes <sys/cdefs.h> which defines __nonnull. Elsewhere it -+ is harmless. */ - #include <errno.h> - - /* From glibc <errno.h>. */ -diff -up texinfo-6.8/gnulib/lib/malloc/dynarray-skeleton.c.orig texinfo-6.8/gnulib/lib/malloc/dynarray-skeleton.c ---- texinfo-6.8/gnulib/lib/malloc/dynarray-skeleton.c.orig 2021-03-11 19:57:54.000000000 +0100 -+++ texinfo-6.8/gnulib/lib/malloc/dynarray-skeleton.c 2021-07-19 12:24:46.878419397 +0200 -@@ -192,7 +192,7 @@ DYNARRAY_NAME (free__array__) (struct DY - - /* Initialize a dynamic array object. This must be called before any - use of the object. */ --__attribute_nonnull__ ((1)) -+__nonnull ((1)) - static void - DYNARRAY_NAME (init) (struct DYNARRAY_STRUCT *list) - { -@@ -202,7 +202,7 @@ DYNARRAY_NAME (init) (struct DYNARRAY_ST - } - - /* Deallocate the dynamic array and its elements. */ --__attribute_maybe_unused__ __attribute_nonnull__ ((1)) -+__attribute_maybe_unused__ __nonnull ((1)) - static void - DYNARRAY_FREE (struct DYNARRAY_STRUCT *list) - { -@@ -213,7 +213,7 @@ DYNARRAY_FREE (struct DYNARRAY_STRUCT *l - } - - /* Return true if the dynamic array is in an error state. */ --__attribute_nonnull__ ((1)) -+__nonnull ((1)) - static inline bool - DYNARRAY_NAME (has_failed) (const struct DYNARRAY_STRUCT *list) - { -@@ -222,7 +222,7 @@ DYNARRAY_NAME (has_failed) (const struct - - /* Mark the dynamic array as failed. All elements are deallocated as - a side effect. */ --__attribute_nonnull__ ((1)) -+__nonnull ((1)) - static void - DYNARRAY_NAME (mark_failed) (struct DYNARRAY_STRUCT *list) - { -@@ -236,7 +236,7 @@ DYNARRAY_NAME (mark_failed) (struct DYNA - - /* Return the number of elements which have been added to the dynamic - array. */ --__attribute_nonnull__ ((1)) -+__nonnull ((1)) - static inline size_t - DYNARRAY_NAME (size) (const struct DYNARRAY_STRUCT *list) - { -@@ -245,7 +245,7 @@ DYNARRAY_NAME (size) (const struct DYNAR - - /* Return a pointer to the array element at INDEX. Terminate the - process if INDEX is out of bounds. */ --__attribute_nonnull__ ((1)) -+__nonnull ((1)) - static inline DYNARRAY_ELEMENT * - DYNARRAY_NAME (at) (struct DYNARRAY_STRUCT *list, size_t index) - { -@@ -257,7 +257,7 @@ DYNARRAY_NAME (at) (struct DYNARRAY_STRU - /* Return a pointer to the first array element, if any. For a - zero-length array, the pointer can be NULL even though the dynamic - array has not entered the failure state. */ --__attribute_nonnull__ ((1)) -+__nonnull ((1)) - static inline DYNARRAY_ELEMENT * - DYNARRAY_NAME (begin) (struct DYNARRAY_STRUCT *list) - { -@@ -267,7 +267,7 @@ DYNARRAY_NAME (begin) (struct DYNARRAY_S - /* Return a pointer one element past the last array element. For a - zero-length array, the pointer can be NULL even though the dynamic - array has not entered the failure state. */ --__attribute_nonnull__ ((1)) -+__nonnull ((1)) - static inline DYNARRAY_ELEMENT * - DYNARRAY_NAME (end) (struct DYNARRAY_STRUCT *list) - { -@@ -294,7 +294,7 @@ DYNARRAY_NAME (add__) (struct DYNARRAY_S - /* Add ITEM at the end of the array, enlarging it by one element. - Mark *LIST as failed if the dynamic array allocation size cannot be - increased. */ --__attribute_nonnull__ ((1)) -+__nonnull ((1)) - static inline void - DYNARRAY_NAME (add) (struct DYNARRAY_STRUCT *list, DYNARRAY_ELEMENT item) - { -@@ -348,8 +348,7 @@ DYNARRAY_NAME (emplace__) (struct DYNARR - /* Allocate a place for a new element in *LIST and return a pointer to - it. The pointer can be NULL if the dynamic array cannot be - enlarged due to a memory allocation failure. */ --__attribute_maybe_unused__ __attribute_warn_unused_result__ --__attribute_nonnull__ ((1)) -+__attribute_maybe_unused__ __attribute_warn_unused_result__ __nonnull ((1)) - static - /* Avoid inlining with the larger initialization code. */ - #if !(defined (DYNARRAY_ELEMENT_INIT) || defined (DYNARRAY_ELEMENT_FREE)) -@@ -373,7 +372,7 @@ DYNARRAY_NAME (emplace) (struct DYNARRAY - existing size, new elements are added (which can be initialized). - Otherwise, the list is truncated, and elements are freed. Return - false on memory allocation failure (and mark *LIST as failed). */ --__attribute_maybe_unused__ __attribute_nonnull__ ((1)) -+__attribute_maybe_unused__ __nonnull ((1)) - static bool - DYNARRAY_NAME (resize) (struct DYNARRAY_STRUCT *list, size_t size) - { -@@ -418,7 +417,7 @@ DYNARRAY_NAME (resize) (struct DYNARRAY_ - } - - /* Remove the last element of LIST if it is present. */ --__attribute_maybe_unused__ __attribute_nonnull__ ((1)) -+__attribute_maybe_unused__ __nonnull ((1)) - static void - DYNARRAY_NAME (remove_last) (struct DYNARRAY_STRUCT *list) - { -@@ -435,7 +434,7 @@ DYNARRAY_NAME (remove_last) (struct DYNA - - /* Remove all elements from the list. The elements are freed, but the - list itself is not. */ --__attribute_maybe_unused__ __attribute_nonnull__ ((1)) -+__attribute_maybe_unused__ __nonnull ((1)) - static void - DYNARRAY_NAME (clear) (struct DYNARRAY_STRUCT *list) - { -@@ -453,8 +452,7 @@ DYNARRAY_NAME (clear) (struct DYNARRAY_S - stored in *RESULT if LIST refers to an empty list. On success, the - pointer in *RESULT is heap-allocated and must be deallocated using - free. */ --__attribute_maybe_unused__ __attribute_warn_unused_result__ --__attribute_nonnull__ ((1, 2)) -+__attribute_maybe_unused__ __attribute_warn_unused_result__ __nonnull ((1, 2)) - static bool - DYNARRAY_NAME (finalize) (struct DYNARRAY_STRUCT *list, - DYNARRAY_FINAL_TYPE *result) -@@ -485,8 +483,7 @@ DYNARRAY_NAME (finalize) (struct DYNARRA - have a sentinel at the end). If LENGTHP is not NULL, the array - length is written to *LENGTHP. *LIST is re-initialized and can be - reused. */ --__attribute_maybe_unused__ __attribute_warn_unused_result__ --__attribute_nonnull__ ((1)) -+__attribute_maybe_unused__ __attribute_warn_unused_result__ __nonnull ((1)) - static DYNARRAY_ELEMENT * - DYNARRAY_NAME (finalize) (struct DYNARRAY_STRUCT *list, size_t *lengthp) - {
- Update from version 1.5.2 to 1.5.4 - Update of rootfile - Changelog v1.5.4 (Feb 2023) perf: +20% faster huffman decompression for targets that can't compile x64 assembly (#3449, @terrelln) perf: up to +10% faster streaming compression at levels 1-2 (#3114, @embg) perf: +4-13% for levels 5-12 by optimizing function generation (#3295, @terrelln) pref: +3-11% compression speed for `arm` target (#3199, #3164, #3145, #3141, #3138, @JunHe77 and #3139, #3160, @danlark1) perf: +5-30% faster dictionary compression at levels 1-4 (#3086, #3114, #3152, @embg) perf: +10-20% cold dict compression speed by prefetching CDict tables (#3177, @embg) perf: +1% faster compression by removing a branch in ZSTD_fast_noDict (#3129, @felixhandte) perf: Small compression ratio improvements in high compression mode (#2983, #3391, @Cyan4973 and #3285, #3302, @daniellerozenblit) perf: small speed improvement by better detecting `STATIC_BMI2` for `clang` (#3080, @TocarIP) perf: Improved streaming performance when `ZSTD_c_stableInBuffer` is set (#2974, @Cyan4973) cli: Asynchronous I/O for improved cli speed (#2975, #2985, #3021, #3022, @yoniko) cli: Change `zstdless` behavior to align with `zless` (#2909, @binhdvo) cli: Keep original file if `-c` or `--stdout` is given (#3052, @dirkmueller) cli: Keep original files when result is concatenated into a single output with `-o` (#3450, @Cyan4973) cli: Preserve Permissions and Ownership of regular files (#3432, @felixhandte) cli: Print zlib/lz4/lzma library versions with `-vv` (#3030, @terrelln) cli: Print checksum value for single frame files with `-lv` (#3332, @Cyan4973) cli: Print `dictID` when present with `-lv` (#3184, @htnhan) cli: when `stderr` is *not* the console, disable status updates, but preserve final summary (#3458, @Cyan4973) cli: support `--best` and `--no-name` in `gzip` compatibility mode (#3059, @dirkmueller) cli: support for `posix` high resolution timer `clock_gettime()`, for improved benchmark accuracy (#3423, @Cyan4973) cli: improved help/usage (`-h`, `-H`) formatting (#3094, @dirkmueller and #3385, @jonpalmisc) cli: Fix better handling of bogus numeric values (#3268, @ctkhanhly) cli: Fix input consists of multiple files _and_ `stdin` (#3222, @yoniko) cli: Fix tiny files passthrough (#3215, @cgbur) cli: Fix for `-r` on empty directory (#3027, @brailovich) cli: Fix empty string as argument for `--output-dir-*` (#3220, @embg) cli: Fix decompression memory usage reported by `-vv --long` (#3042, @u1f35c, and #3232, @zengyijing) cli: Fix infinite loop when empty input is passed to trainer (#3081, @terrelln) cli: Fix `--adapt` doesn't work when `--no-progress` is also set (#3354, @terrelln) api: Support for Block-Level Sequence Producer (#3333, @embg) api: Support for in-place decompression (#3432, @terrelln) api: New `ZSTD_CCtx_setCParams()` function, set all parameters defined in a `ZSTD_compressionParameters` structure (#3403, @Cyan4973) api: Streaming decompression detects incorrect header ID sooner (#3175, @Cyan4973) api: Window size resizing optimization for edge case (#3345, @daniellerozenblit) api: More accurate error codes for busy-loop scenarios (#3413, #3455, @Cyan4973) api: Fix limit overflow in `compressBound` and `decompressBound` (#3362, #3373, Cyan4973) reported by @nigeltao api: Deprecate several advanced experimental functions: streaming (#3408, @embg), copy (#3196, @mileshu) bug: Fix corruption that rarely occurs in 32-bit mode with wlog=25 (#3361, @terrelln) bug: Fix for block-splitter (#3033, @Cyan4973) bug: Fixes for Sequence Compression API (#3023, #3040, @Cyan4973) bug: Fix leaking thread handles on Windows (#3147, @animalize) bug: Fix timing issues with cmake/meson builds (#3166, #3167, #3170, @Cyan4973) build: Allow user to select legacy level for cmake (#3050, @shadchin) build: Enable legacy support by default in cmake (#3079, @niamster) build: Meson build script improvements (#3039, #3120, #3122, #3327, #3357, @eli-schwartz and #3276, @neheb) build: Add aarch64 to supported architectures for zstd_trace (#3054, @ooosssososos) build: support AIX architecture (#3219, @qiongsiwu) build: Fix `ZSTD_LIB_MINIFY` build macro, which now reduces static library size by half (#3366, @terrelln) build: Fix Windows issues with Multithreading translation layer (#3364, #3380, @yoniko) and ARM64 target (#3320, @cwoffenden) build: Fix `cmake` script (#3382, #3392, @terrelln and #3252 @Tachi107 and #3167 @Cyan4973) doc: Updated man page, providing more details for `--train` mode (#3112, @Cyan4973) doc: Add decompressor errata document (#3092, @terrelln) misc: Enable Intel CET (#2992, #2994, @hjl-tools) misc: Fix `contrib/` seekable format (#3058, @yhoogstrate and #3346, @daniellerozenblit) misc: Improve speed of the one-file library generator (#3241, @wahern and #3005, @cwoffenden) v1.5.3 (dev version, unpublished)
Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- config/rootfiles/common/zstd | 2 +- lfs/zstd | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/config/rootfiles/common/zstd b/config/rootfiles/common/zstd index b4a2dbd95..235613949 100644 --- a/config/rootfiles/common/zstd +++ b/config/rootfiles/common/zstd @@ -10,7 +10,7 @@ usr/bin/zstdmt #usr/lib/libzstd.a #usr/lib/libzstd.so usr/lib/libzstd.so.1 -usr/lib/libzstd.so.1.5.2 +usr/lib/libzstd.so.1.5.4 #usr/lib/pkgconfig/libzstd.pc #usr/share/man/man1/unzstd.1 #usr/share/man/man1/zstd.1 diff --git a/lfs/zstd b/lfs/zstd index 94cc4faef..1c2447f54 100644 --- a/lfs/zstd +++ b/lfs/zstd @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2020 IPFire Team info@ipfire.org # +# Copyright (C) 2007-2023 IPFire Team info@ipfire.org # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@
include Config
-VER = 1.5.2 +VER = 1.5.4
THISAPP = zstd-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -49,7 +49,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = c4da9317e612dcf53983617151290bfbe8eae96701621eaff9f47cbdf4e1ca06e94db2058f7590fec8ca3bf744740ffdcefb29a8f4f043a51e8c8a01128b2942 +$(DL_FILE)_BLAKE2 = ffc5fcbbdf4ab04bc14b5037308bf4e879d4cbaaf863462ea1e8af3f1b86b935ee6036e49298c83ac42b00472c003e32c263c977f0ae7d64f31d9ae63c5c28cb
install : $(TARGET)
-
Adolf Belka